EngineX-Kevra.dll

Description:

Authors:

Version:

Architecture: 32-bit

Operating System:

SHA256: 202e652a6d9030d95c9e141b8c3006ea

File Size: 3.3 MB

Uploaded At: March 12, 2026, 4:49 p.m.

Views: 23

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: CreateRemoteThread, WriteProcessMemory

Exported Functions

Execute (Ordinal: 1, Address: 0x57a20)
Finalize (Ordinal: 2, Address: 0x579e0)
GetApiVersion (Ordinal: 3, Address: 0x579f0)
GetCapabilities (Ordinal: 4, Address: 0x57a00)
GetState (Ordinal: 5, Address: 0x57a10)
Initialize (Ordinal: 6, Address: 0x579c0)
dsf75sddc5s4d65c (Ordinal: 7, Address: 0xdc7e0)

Imported DLLs & Functions

ADVAPI32.dll

AdjustTokenPrivileges (Address: 0x101f7000)
LookupPrivilegeValueA (Address: 0x101f7004)
OpenProcessToken (Address: 0x101f7008)

d3dx9_43.dll

D3DXCreateCylinder (Address: 0x101f73d0)
D3DXCreateSphere (Address: 0x101f73d4)
D3DXCreateTextureFromResourceA (Address: 0x101f73cc)
D3DXMatrixMultiply (Address: 0x101f73c0)
D3DXMatrixScaling (Address: 0x101f73c4)
D3DXMatrixTranslation (Address: 0x101f73c8)

dbghelp.dll

ImageNtHeader (Address: 0x101f73dc)

GDI32.dll

BitBlt (Address: 0x101f7038)
CreateCompatibleDC (Address: 0x101f7034)
CreateFontA (Address: 0x101f7030)
DeleteDC (Address: 0x101f702c)
DeleteObject (Address: 0x101f7028)
GetDeviceCaps (Address: 0x101f703c)
GetObjectA (Address: 0x101f7014)
GetStockObject (Address: 0x101f7024)
SelectObject (Address: 0x101f7020)
SetBkMode (Address: 0x101f701c)
SetTextColor (Address: 0x101f7018)
TextOutA (Address: 0x101f7010)

IMM32.dll

ImmGetContext (Address: 0x101f704c)
ImmReleaseContext (Address: 0x101f7044)
ImmSetCompositionWindow (Address: 0x101f7048)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x101f7240)
AddVectoredExceptionHandler (Address: 0x101f7210)
AreFileApisANSI (Address: 0x101f7280)
CloseHandle (Address: 0x101f7218)
CompareStringEx (Address: 0x101f71d4)
CompareStringW (Address: 0x101f713c)
ConnectNamedPipe (Address: 0x101f70b0)
CreateDirectoryA (Address: 0x101f7230)
CreateDirectoryW (Address: 0x101f7264)
CreateEventA (Address: 0x101f71fc)
CreateEventW (Address: 0x101f71b4)
CreateFileA (Address: 0x101f7228)
CreateFileW (Address: 0x101f7268)
CreateNamedPipeA (Address: 0x101f70c4)
CreateProcessW (Address: 0x101f7104)
CreateRemoteThread (Address: 0x101f7058)
CreateThread (Address: 0x101f71f0)
DecodePointer (Address: 0x101f71e4)
DeleteCriticalSection (Address: 0x101f7254)
DeleteFileW (Address: 0x101f7124)
DeviceIoControl (Address: 0x101f7208)
DisableThreadLibraryCalls (Address: 0x101f7070)
DisconnectNamedPipe (Address: 0x101f70b4)
EncodePointer (Address: 0x101f71e8)
EnterCriticalSection (Address: 0x101f7244)
EnumSystemLocalesW (Address: 0x101f7128)
ExitProcess (Address: 0x101f7150)
FindClose (Address: 0x101f7224)
FindFirstFileA (Address: 0x101f7220)
FindFirstFileExW (Address: 0x101f726c)
FindNextFileA (Address: 0x101f721c)
FindNextFileW (Address: 0x101f7270)
FlsAlloc (Address: 0x101f7288)
FlsFree (Address: 0x101f7294)
FlsGetValue (Address: 0x101f728c)
FlsSetValue (Address: 0x101f7290)
FlushFileBuffers (Address: 0x101f7120)
FlushInstructionCache (Address: 0x101f71c8)
FormatMessageA (Address: 0x101f725c)
FreeEnvironmentStringsW (Address: 0x101f70e0)
FreeLibrary (Address: 0x101f71c4)
GetACP (Address: 0x101f70f4)
GetCommandLineA (Address: 0x101f70ec)
GetCommandLineW (Address: 0x101f70e8)
GetConsoleMode (Address: 0x101f7118)
GetConsoleOutputCP (Address: 0x101f722c)
GetCPInfo (Address: 0x101f71d0)
GetCurrentProcess (Address: 0x101f71f4)
GetCurrentProcessId (Address: 0x101f70b8)
GetCurrentThread (Address: 0x101f705c)
GetCurrentThreadId (Address: 0x101f7258)
GetDateFormatW (Address: 0x101f7144)
GetEnvironmentStringsW (Address: 0x101f70e4)
GetExitCodeProcess (Address: 0x101f7108)
GetFileAttributesExW (Address: 0x101f7274)
GetFileInformationByHandleEx (Address: 0x101f7284)
GetFileSizeEx (Address: 0x101f7114)
GetFileType (Address: 0x101f7160)
GetLastError (Address: 0x101f7214)
GetLocaleInfoEx (Address: 0x101f71dc)
GetLocaleInfoW (Address: 0x101f7134)
GetLocalTime (Address: 0x101f70bc)
GetModuleFileNameA (Address: 0x101f70c0)
GetModuleFileNameW (Address: 0x101f715c)
GetModuleHandleA (Address: 0x101f711c)
GetModuleHandleExW (Address: 0x101f7158)
GetModuleHandleW (Address: 0x101f71ec)
GetOEMCP (Address: 0x101f70f0)
GetProcAddress (Address: 0x101f7054)
GetProcessHeap (Address: 0x101f70d8)
GetStartupInfoW (Address: 0x101f7190)
GetStdHandle (Address: 0x101f7164)
GetStringTypeW (Address: 0x101f71d8)
GetSystemInfo (Address: 0x101f70c8)
GetSystemTimeAsFileTime (Address: 0x101f7298)
GetThreadContext (Address: 0x101f7068)
GetTickCount (Address: 0x101f71a4)
GetTimeFormatW (Address: 0x101f7140)
GetTimeZoneInformation (Address: 0x101f70fc)
GetUserDefaultLCID (Address: 0x101f712c)
GlobalAlloc (Address: 0x101f707c)
GlobalFree (Address: 0x101f7088)
GlobalLock (Address: 0x101f7084)
GlobalUnlock (Address: 0x101f7080)
HeapAlloc (Address: 0x101f714c)
HeapFree (Address: 0x101f7148)
HeapReAlloc (Address: 0x101f7100)
HeapSize (Address: 0x101f7234)
InitializeCriticalSectionAndSpinCount (Address: 0x101f71c0)
InitializeCriticalSectionEx (Address: 0x101f724c)
InitializeSListHead (Address: 0x101f7188)
InitializeSRWLock (Address: 0x101f7238)
InterlockedFlushSList (Address: 0x101f717c)
IsDebuggerPresent (Address: 0x101f71ac)
IsProcessorFeaturePresent (Address: 0x101f71b0)
IsValidCodePage (Address: 0x101f70f8)
IsValidLocale (Address: 0x101f7130)
LCMapStringEx (Address: 0x101f71e0)
LCMapStringW (Address: 0x101f7138)
LeaveCriticalSection (Address: 0x101f7248)
LoadLibraryA (Address: 0x101f7098)
LoadLibraryExW (Address: 0x101f7168)
LocalFree (Address: 0x101f7260)
MultiByteToWideChar (Address: 0x101f7074)
OutputDebugStringW (Address: 0x101f710c)
QueryPerformanceCounter (Address: 0x101f7090)
QueryPerformanceFrequency (Address: 0x101f7094)
RaiseException (Address: 0x101f7184)
ReadConsoleW (Address: 0x101f7110)
ReadFile (Address: 0x101f70a8)
ReadProcessMemory (Address: 0x101f70a0)
ReleaseSRWLockExclusive (Address: 0x101f723c)
RemoveVectoredExceptionHandler (Address: 0x101f720c)
ResetEvent (Address: 0x101f71bc)
ResumeThread (Address: 0x101f7064)
RtlUnwind (Address: 0x101f7180)
SetEndOfFile (Address: 0x101f7278)
SetEnvironmentVariableW (Address: 0x101f70dc)
SetEvent (Address: 0x101f7204)
SetFilePointerEx (Address: 0x101f727c)
SetLastError (Address: 0x101f71cc)
SetStdHandle (Address: 0x101f70d4)
SetThreadContext (Address: 0x101f706c)
SetUnhandledExceptionFilter (Address: 0x101f7194)
Sleep (Address: 0x101f71f8)
SuspendThread (Address: 0x101f7060)
TerminateProcess (Address: 0x101f718c)
TlsAlloc (Address: 0x101f7178)
TlsFree (Address: 0x101f716c)
TlsGetValue (Address: 0x101f7174)
TlsSetValue (Address: 0x101f7170)
TryEnterCriticalSection (Address: 0x101f7250)
UnhandledExceptionFilter (Address: 0x101f71a8)
VerifyVersionInfoW (Address: 0x101f709c)
VerSetConditionMask (Address: 0x101f708c)
VirtualAlloc (Address: 0x101f70cc)
VirtualFree (Address: 0x101f70d0)
VirtualProtect (Address: 0x101f71a0)
VirtualQuery (Address: 0x101f719c)
VirtualQueryEx (Address: 0x101f7198)
WaitForSingleObject (Address: 0x101f7200)
WaitForSingleObjectEx (Address: 0x101f71b8)
WideCharToMultiByte (Address: 0x101f7078)
WriteConsoleW (Address: 0x101f7154)
WriteFile (Address: 0x101f70ac)
WriteProcessMemory (Address: 0x101f70a4)

SHELL32.dll

Shell_NotifyIconA (Address: 0x101f72a0)
SHGetFolderPathA (Address: 0x101f72a4)

USER32.dll

BeginPaint (Address: 0x101f7334)
CallWindowProcA (Address: 0x101f7340)
ClientToScreen (Address: 0x101f7300)
CloseClipboard (Address: 0x101f72c8)
CreateWindowExA (Address: 0x101f733c)
DefWindowProcA (Address: 0x101f7348)
DispatchMessageA (Address: 0x101f72b0)
EmptyClipboard (Address: 0x101f72d4)
EndPaint (Address: 0x101f7330)
FlashWindowEx (Address: 0x101f72c0)
GetAsyncKeyState (Address: 0x101f7354)
GetCapture (Address: 0x101f72dc)
GetClientRect (Address: 0x101f72f0)
GetClipboardData (Address: 0x101f72d0)
GetCursorPos (Address: 0x101f72fc)
GetDC (Address: 0x101f72e8)
GetForegroundWindow (Address: 0x101f7320)
GetKeyState (Address: 0x101f7314)
GetMessageA (Address: 0x101f7310)
GetSystemMetrics (Address: 0x101f731c)
GetWindowLongA (Address: 0x101f732c)
LoadCursorA (Address: 0x101f7304)
LoadIconA (Address: 0x101f7324)
LoadImageA (Address: 0x101f7358)
MonitorFromWindow (Address: 0x101f7308)
OpenClipboard (Address: 0x101f72c4)
PostQuitMessage (Address: 0x101f7328)
RegisterClassExA (Address: 0x101f7318)
ReleaseCapture (Address: 0x101f72e4)
ReleaseDC (Address: 0x101f72ec)
ScreenToClient (Address: 0x101f72b8)
SendMessageA (Address: 0x101f734c)
SetCapture (Address: 0x101f72e0)
SetClipboardData (Address: 0x101f72cc)
SetCursor (Address: 0x101f72f8)
SetCursorPos (Address: 0x101f72f4)
SetProcessDPIAware (Address: 0x101f730c)
SetWindowLongA (Address: 0x101f7350)
SetWindowTextA (Address: 0x101f72b4)
ShowWindow (Address: 0x101f72bc)
TranslateMessage (Address: 0x101f72ac)
UnregisterClassA (Address: 0x101f7344)
UpdateWindow (Address: 0x101f7338)
wsprintfA (Address: 0x101f72d8)

WINMM.dll

PlaySoundA (Address: 0x101f7360)

WS2_32.dll

__WSAFDIsSet (Address: 0x101f7378)
closesocket (Address: 0x101f737c)
connect (Address: 0x101f7380)
gethostbyname (Address: 0x101f73a8)
gethostname (Address: 0x101f73ac)
htonl (Address: 0x101f7388)
htons (Address: 0x101f738c)
inet_addr (Address: 0x101f7374)
ioctlsocket (Address: 0x101f7384)
ntohl (Address: 0x101f7390)
ntohs (Address: 0x101f7394)
recv (Address: 0x101f7398)
select (Address: 0x101f739c)
send (Address: 0x101f73a0)
socket (Address: 0x101f736c)
WSACleanup (Address: 0x101f7368)
WSAGetLastError (Address: 0x101f7370)
WSAStartup (Address: 0x101f73a4)

XINPUT9_1_0.dll

XInputGetCapabilities (Address: 0x101f73b4)
XInputGetState (Address: 0x101f73b8)