SCPSL_Mod.exe

Description:

Authors:

Version: 1.0.0.0

Architecture: 64-bit

Operating System: Windows

SHA256: 1c934f0fa813c8e1df52e5d83f452e87

File Size: 1.8 MB

Uploaded At: Aug. 26, 2026, 9:19 a.m.

Views: 3

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess

Exported Functions

  • DotNetRuntimeDebugHeader (Ordinal: 1, Address: 0x1c4c10)

Imported DLLs & Functions

ADVAPI32.dll
  • AdjustTokenPrivileges (Address: 0x14012d000)
  • DeregisterEventSource (Address: 0x14012d008)
  • LookupPrivilegeValueW (Address: 0x14012d010)
  • OpenProcessToken (Address: 0x14012d018)
  • RegCloseKey (Address: 0x14012d020)
  • RegisterEventSourceW (Address: 0x14012d030)
  • RegQueryValueExW (Address: 0x14012d028)
  • ReportEventW (Address: 0x14012d038)
api-ms-win-crt-convert-l1-1-0.dll
  • strtoull (Address: 0x14012d578)
api-ms-win-crt-heap-l1-1-0.dll
  • _callnewh (Address: 0x14012d590)
  • _set_new_mode (Address: 0x14012d588)
  • calloc (Address: 0x14012d598)
  • free (Address: 0x14012d5a0)
  • malloc (Address: 0x14012d5a8)
api-ms-win-crt-locale-l1-1-0.dll
  • _configthreadlocale (Address: 0x14012d5b8)
api-ms-win-crt-math-l1-1-0.dll
  • __setusermatherr (Address: 0x14012d5c8)
  • ceil (Address: 0x14012d5d0)
api-ms-win-crt-runtime-l1-1-0.dll
  • __p___argc (Address: 0x14012d670)
  • __p___wargv (Address: 0x14012d668)
  • _c_exit (Address: 0x14012d608)
  • _cexit (Address: 0x14012d610)
  • _configure_wide_argv (Address: 0x14012d630)
  • _crt_atexit (Address: 0x14012d5e8)
  • _exit (Address: 0x14012d660)
  • _get_initial_wide_environment (Address: 0x14012d640)
  • _initialize_onexit_table (Address: 0x14012d628)
  • _initialize_wide_environment (Address: 0x14012d638)
  • _initterm (Address: 0x14012d648)
  • _initterm_e (Address: 0x14012d650)
  • _register_onexit_function (Address: 0x14012d5f0)
  • _register_thread_local_exe_atexit_callback (Address: 0x14012d5f8)
  • _seh_filter_exe (Address: 0x14012d618)
  • _set_app_type (Address: 0x14012d620)
  • abort (Address: 0x14012d5e0)
  • exit (Address: 0x14012d658)
  • terminate (Address: 0x14012d600)
api-ms-win-crt-stdio-l1-1-0.dll
  • __acrt_iob_func (Address: 0x14012d6a8)
  • __p__commode (Address: 0x14012d6a0)
  • __stdio_common_vfprintf (Address: 0x14012d690)
  • __stdio_common_vsprintf_s (Address: 0x14012d680)
  • __stdio_common_vsscanf (Address: 0x14012d688)
  • _set_fmode (Address: 0x14012d698)
api-ms-win-crt-string-l1-1-0.dll
  • _stricmp (Address: 0x14012d6c8)
  • strcmp (Address: 0x14012d6b8)
  • strcpy_s (Address: 0x14012d6d0)
  • strlen (Address: 0x14012d6c0)
  • wcsncmp (Address: 0x14012d6d8)
bcrypt.dll
  • BCryptGenRandom (Address: 0x14012d6e8)
KERNEL32.dll
  • AddVectoredExceptionHandler (Address: 0x14012d3c0)
  • CancelThreadpoolIo (Address: 0x14012d058)
  • CloseHandle (Address: 0x14012d060)
  • CloseThreadpoolIo (Address: 0x14012d068)
  • CloseThreadpoolWait (Address: 0x14012d070)
  • CloseThreadpoolWork (Address: 0x14012d078)
  • CompareStringEx (Address: 0x14012d080)
  • CompareStringOrdinal (Address: 0x14012d088)
  • CopyFileExW (Address: 0x14012d090)
  • CreateDirectoryW (Address: 0x14012d098)
  • CreateEventExW (Address: 0x14012d0a0)
  • CreateEventW (Address: 0x14012d408)
  • CreateFileMappingW (Address: 0x14012d0a8)
  • CreateFileW (Address: 0x14012d0b0)
  • CreateMemoryResourceNotification (Address: 0x14012d448)
  • CreatePipe (Address: 0x14012d0b8)
  • CreateProcessW (Address: 0x14012d0c0)
  • CreateThread (Address: 0x14012d0c8)
  • CreateThreadpoolIo (Address: 0x14012d0d0)
  • CreateThreadpoolWait (Address: 0x14012d0d8)
  • CreateThreadpoolWork (Address: 0x14012d0e0)
  • DebugBreak (Address: 0x14012d4b0)
  • DeleteCriticalSection (Address: 0x14012d0e8)
  • DeleteFileW (Address: 0x14012d0f0)
  • DeviceIoControl (Address: 0x14012d0f8)
  • DuplicateHandle (Address: 0x14012d100)
  • EncodePointer (Address: 0x14012d520)
  • EnterCriticalSection (Address: 0x14012d108)
  • ExpandEnvironmentStringsW (Address: 0x14012d110)
  • FindClose (Address: 0x14012d118)
  • FindFirstFileExW (Address: 0x14012d120)
  • FindNLSStringEx (Address: 0x14012d128)
  • FindStringOrdinal (Address: 0x14012d130)
  • FlsAlloc (Address: 0x14012d3f0)
  • FlsGetValue (Address: 0x14012d3f8)
  • FlsSetValue (Address: 0x14012d400)
  • FlushFileBuffers (Address: 0x14012d138)
  • FlushInstructionCache (Address: 0x14012d438)
  • FlushProcessWriteBuffers (Address: 0x14012d3b0)
  • FlushViewOfFile (Address: 0x14012d140)
  • FormatMessageW (Address: 0x14012d148)
  • FreeLibrary (Address: 0x14012d150)
  • GetConsoleCP (Address: 0x14012d160)
  • GetConsoleMode (Address: 0x14012d168)
  • GetConsoleOutputCP (Address: 0x14012d170)
  • GetCPInfoExW (Address: 0x14012d158)
  • GetCurrentDirectoryW (Address: 0x14012d178)
  • GetCurrentProcess (Address: 0x14012d180)
  • GetCurrentProcessId (Address: 0x14012d4b8)
  • GetCurrentProcessorNumberEx (Address: 0x14012d188)
  • GetCurrentThread (Address: 0x14012d190)
  • GetCurrentThreadId (Address: 0x14012d418)
  • GetEnabledXStateFeatures (Address: 0x14012d478)
  • GetEnvironmentVariableW (Address: 0x14012d198)
  • GetExitCodeProcess (Address: 0x14012d1a0)
  • GetFileAttributesExW (Address: 0x14012d1a8)
  • GetFileInformationByHandleEx (Address: 0x14012d1b0)
  • GetFileType (Address: 0x14012d1b8)
  • GetFullPathNameW (Address: 0x14012d1c0)
  • GetLargePageMinimum (Address: 0x14012d4d0)
  • GetLastError (Address: 0x14012d1c8)
  • GetLocaleInfoEx (Address: 0x14012d1d0)
  • GetLogicalProcessorInformation (Address: 0x14012d4c0)
  • GetLogicalProcessorInformationEx (Address: 0x14012d4c8)
  • GetLongPathNameW (Address: 0x14012d1d8)
  • GetModuleFileNameW (Address: 0x14012d1e0)
  • GetModuleHandleExW (Address: 0x14012d458)
  • GetModuleHandleW (Address: 0x14012d3c8)
  • GetNumaHighestNodeNumber (Address: 0x14012d4f0)
  • GetOverlappedResult (Address: 0x14012d1e8)
  • GetProcAddress (Address: 0x14012d1f0)
  • GetProcessAffinityMask (Address: 0x14012d460)
  • GetProcessGroupAffinity (Address: 0x14012d4f8)
  • GetProcessId (Address: 0x14012d1f8)
  • GetStdHandle (Address: 0x14012d200)
  • GetSystemInfo (Address: 0x14012d208)
  • GetSystemTimeAsFileTime (Address: 0x14012d490)
  • GetThreadContext (Address: 0x14012d428)
  • GetThreadPriority (Address: 0x14012d210)
  • GetTickCount64 (Address: 0x14012d218)
  • GlobalMemoryStatusEx (Address: 0x14012d220)
  • InitializeConditionVariable (Address: 0x14012d228)
  • InitializeContext (Address: 0x14012d470)
  • InitializeCriticalSection (Address: 0x14012d230)
  • InitializeCriticalSectionAndSpinCount (Address: 0x14012d518)
  • InitializeCriticalSectionEx (Address: 0x14012d4a0)
  • InitializeSListHead (Address: 0x14012d540)
  • IsDebuggerPresent (Address: 0x14012d238)
  • IsProcessInJob (Address: 0x14012d4e8)
  • IsProcessorFeaturePresent (Address: 0x14012d548)
  • IsWow64Process (Address: 0x14012d240)
  • K32EnumProcesses (Address: 0x14012d250)
  • K32EnumProcessModulesEx (Address: 0x14012d248)
  • K32GetModuleBaseNameW (Address: 0x14012d258)
  • K32GetModuleFileNameExW (Address: 0x14012d260)
  • K32GetModuleInformation (Address: 0x14012d268)
  • K32GetProcessMemoryInfo (Address: 0x14012d500)
  • LCMapStringEx (Address: 0x14012d270)
  • LeaveCriticalSection (Address: 0x14012d278)
  • LoadLibraryExW (Address: 0x14012d280)
  • LocalAlloc (Address: 0x14012d288)
  • LocaleNameToLCID (Address: 0x14012d298)
  • LocalFree (Address: 0x14012d290)
  • LocateXStateFeature (Address: 0x14012d480)
  • MapViewOfFile (Address: 0x14012d2a0)
  • MultiByteToWideChar (Address: 0x14012d2a8)
  • OpenProcess (Address: 0x14012d2b0)
  • QueryInformationJobObject (Address: 0x14012d450)
  • QueryPerformanceCounter (Address: 0x14012d2b8)
  • QueryPerformanceFrequency (Address: 0x14012d2c0)
  • RaiseException (Address: 0x14012d528)
  • RaiseFailFastException (Address: 0x14012d2c8)
  • ReadConsoleW (Address: 0x14012d2d0)
  • ReadFile (Address: 0x14012d2d8)
  • ResetEvent (Address: 0x14012d498)
  • ResolveLocaleName (Address: 0x14012d2e0)
  • ResumeThread (Address: 0x14012d2e8)
  • RtlCaptureContext (Address: 0x14012d3d8)
  • RtlLookupFunctionEntry (Address: 0x14012d568)
  • RtlPcToFileHeader (Address: 0x14012d530)
  • RtlRestoreContext (Address: 0x14012d3e0)
  • RtlUnwindEx (Address: 0x14012d538)
  • RtlVirtualUnwind (Address: 0x14012d3d0)
  • SetEvent (Address: 0x14012d2f0)
  • SetFileInformationByHandle (Address: 0x14012d2f8)
  • SetFilePointerEx (Address: 0x14012d300)
  • SetLastError (Address: 0x14012d308)
  • SetThreadContext (Address: 0x14012d430)
  • SetThreadErrorMode (Address: 0x14012d310)
  • SetThreadpoolWait (Address: 0x14012d320)
  • SetThreadPriority (Address: 0x14012d318)
  • SetUnhandledExceptionFilter (Address: 0x14012d558)
  • SetXStateFeaturesMask (Address: 0x14012d488)
  • Sleep (Address: 0x14012d328)
  • SleepConditionVariableCS (Address: 0x14012d330)
  • SleepEx (Address: 0x14012d4a8)
  • StartThreadpoolIo (Address: 0x14012d338)
  • SubmitThreadpoolWork (Address: 0x14012d340)
  • SuspendThread (Address: 0x14012d420)
  • SwitchToThread (Address: 0x14012d410)
  • TerminateProcess (Address: 0x14012d550)
  • TlsAlloc (Address: 0x14012d510)
  • TlsFree (Address: 0x14012d048)
  • TlsGetValue (Address: 0x14012d508)
  • TlsSetValue (Address: 0x14012d050)
  • UnhandledExceptionFilter (Address: 0x14012d560)
  • UnmapViewOfFile (Address: 0x14012d348)
  • VerifyVersionInfoW (Address: 0x14012d468)
  • VerSetConditionMask (Address: 0x14012d3e8)
  • VirtualAlloc (Address: 0x14012d350)
  • VirtualAllocExNuma (Address: 0x14012d4e0)
  • VirtualFree (Address: 0x14012d358)
  • VirtualProtect (Address: 0x14012d440)
  • VirtualProtectEx (Address: 0x14012d360)
  • VirtualQuery (Address: 0x14012d368)
  • VirtualUnlock (Address: 0x14012d4d8)
  • WaitForMultipleObjectsEx (Address: 0x14012d370)
  • WaitForSingleObject (Address: 0x14012d378)
  • WaitForSingleObjectEx (Address: 0x14012d3b8)
  • WaitForThreadpoolWaitCallbacks (Address: 0x14012d380)
  • WakeConditionVariable (Address: 0x14012d388)
  • WideCharToMultiByte (Address: 0x14012d390)
  • WriteConsoleW (Address: 0x14012d398)
  • WriteFile (Address: 0x14012d3a0)
  • WriteProcessMemory (Address: 0x14012d3a8)
ole32.dll
  • CoGetApartmentType (Address: 0x14012d710)
  • CoInitializeEx (Address: 0x14012d708)
  • CoUninitialize (Address: 0x14012d6f8)
  • CoWaitForMultipleHandles (Address: 0x14012d700)