reflex.dll

Description:

Authors:

Version:

Architecture: 64-bit

Operating System:

SHA256: 033096dbd0e79abb775abbcbea1ceb71

File Size: 173.5 KB

Uploaded At: May 27, 2026, 7:13 p.m.

Views: 52

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllMain (Ordinal: 1, Address: 0x1000)
  • Watchdog (Ordinal: 2, Address: 0x2c20)

Imported DLLs & Functions

advapi32.dll
  • CloseServiceHandle (Address: 0x180025078)
  • ControlService (Address: 0x180025070)
  • CreateServiceW (Address: 0x180025088)
  • DeleteService (Address: 0x1800250a8)
  • GetTokenInformation (Address: 0x180025090)
  • OpenProcessToken (Address: 0x180025098)
  • OpenSCManagerW (Address: 0x1800250b0)
  • OpenServiceW (Address: 0x1800250a0)
  • StartServiceW (Address: 0x180025080)
api-ms-win-core-synch-l1-2-0.dll
  • WaitOnAddress (Address: 0x1800250c8)
  • WakeByAddressAll (Address: 0x1800250c0)
  • WakeByAddressSingle (Address: 0x1800250d0)
api-ms-win-crt-math-l1-1-0.dll
  • ceil (Address: 0x1800250e8)
  • log10 (Address: 0x1800250e0)
api-ms-win-crt-runtime-l1-1-0.dll
  • _cexit (Address: 0x180025128)
  • _configure_narrow_argv (Address: 0x180025100)
  • _execute_onexit_table (Address: 0x180025130)
  • _initialize_narrow_environment (Address: 0x180025110)
  • _initialize_onexit_table (Address: 0x180025120)
  • _initterm (Address: 0x180025118)
  • _initterm_e (Address: 0x180025108)
  • _seh_filter_dll (Address: 0x1800250f8)
api-ms-win-crt-string-l1-1-0.dll
  • strlen (Address: 0x180025140)
bcryptprimitives.dll
  • ProcessPrng (Address: 0x180025150)
kernel32.dll
  • AllocConsole (Address: 0x180025388)
  • CloseHandle (Address: 0x180025378)
  • CopyFileExW (Address: 0x1800252e8)
KERNEL32.dll
  • CreateDirectoryW (Address: 0x180025000)
kernel32.dll
  • CreateEventW (Address: 0x1800251b0)
KERNEL32.dll
  • CreateFileW (Address: 0x180025020)
kernel32.dll
  • CreateProcessW (Address: 0x1800252a0)
  • CreateToolhelp32Snapshot (Address: 0x180025168)
  • CreateWaitableTimerExW (Address: 0x180025228)
  • ExitProcess (Address: 0x180025218)
  • FindClose (Address: 0x180025368)
  • FindFirstFileExW (Address: 0x180025338)
  • FindNextFileW (Address: 0x1800252e0)
  • FlushInstructionCache (Address: 0x180025268)
  • FormatMessageW (Address: 0x180025248)
  • GetConsoleMode (Address: 0x180025318)
  • GetConsoleOutputCP (Address: 0x180025310)
KERNEL32.dll
  • GetCurrentDirectoryW (Address: 0x180025008)
kernel32.dll
  • GetCurrentProcess (Address: 0x180025280)
  • GetCurrentProcessId (Address: 0x1800252a8)
  • GetCurrentThread (Address: 0x180025160)
  • GetCurrentThreadId (Address: 0x180025170)
  • GetFileInformationByHandle (Address: 0x180025358)
  • GetFileInformationByHandleEx (Address: 0x180025330)
  • GetFinalPathNameByHandleW (Address: 0x1800252f0)
  • GetFullPathNameW (Address: 0x180025350)
  • GetLastError (Address: 0x180025380)
  • GetModuleFileNameW (Address: 0x1800252b8)
  • GetModuleHandleA (Address: 0x1800251c0)
  • GetModuleHandleW (Address: 0x180025240)
  • GetProcAddress (Address: 0x180025290)
  • GetProcessHeap (Address: 0x1800251f8)
  • GetStdHandle (Address: 0x180025320)
  • GetSystemInfo (Address: 0x180025270)
  • GetSystemTimeAsFileTime (Address: 0x180025288)
  • GetSystemTimePreciseAsFileTime (Address: 0x180025360)
  • GetTempPathW (Address: 0x1800252f8)
  • GetThreadContext (Address: 0x180025260)
  • HeapAlloc (Address: 0x180025210)
  • HeapCreate (Address: 0x180025258)
  • HeapFree (Address: 0x180025200)
  • HeapReAlloc (Address: 0x180025208)
  • InitializeSListHead (Address: 0x1800251a0)
  • IsDebuggerPresent (Address: 0x1800252c8)
  • IsProcessorFeaturePresent (Address: 0x180025328)
  • LoadLibraryExA (Address: 0x180025250)
  • LoadLibraryW (Address: 0x1800252b0)
KERNEL32.dll
  • MultiByteToWideChar (Address: 0x180025018)
kernel32.dll
  • OpenEventW (Address: 0x1800251b8)
  • OpenProcess (Address: 0x1800251d0)
  • OpenThread (Address: 0x180025180)
KERNEL32.dll
  • QueryPerformanceCounter (Address: 0x180025028)
  • QueryPerformanceFrequency (Address: 0x180025010)
kernel32.dll
  • ResumeThread (Address: 0x180025198)
  • RtlCaptureContext (Address: 0x1800251e8)
  • RtlLookupFunctionEntry (Address: 0x1800251f0)
  • RtlVirtualUnwind (Address: 0x1800252c0)
  • SetEvent (Address: 0x1800251d8)
  • SetFileInformationByHandle (Address: 0x180025340)
  • SetFilePointerEx (Address: 0x180025300)
  • SetFileTime (Address: 0x180025348)
  • SetLastError (Address: 0x180025370)
  • SetThreadContext (Address: 0x1800251e0)
  • SetUnhandledExceptionFilter (Address: 0x1800252d8)
  • SetWaitableTimer (Address: 0x180025230)
  • Sleep (Address: 0x180025238)
  • SuspendThread (Address: 0x180025190)
  • SwitchToThread (Address: 0x180025220)
  • TerminateProcess (Address: 0x1800253a0)
  • Thread32First (Address: 0x180025178)
  • Thread32Next (Address: 0x180025188)
  • UnhandledExceptionFilter (Address: 0x1800252d0)
  • VirtualAlloc (Address: 0x1800251a8)
  • VirtualFree (Address: 0x180025278)
  • VirtualProtect (Address: 0x180025398)
  • VirtualQuery (Address: 0x180025390)
  • WaitForMultipleObjects (Address: 0x180025298)
  • WaitForSingleObject (Address: 0x1800251c8)
  • WriteConsoleW (Address: 0x180025308)
ntdll.dll
  • NtOpenFile (Address: 0x1800253d0)
  • NtReadFile (Address: 0x1800253b8)
  • NtTerminateProcess (Address: 0x1800253c8)
  • NtWriteFile (Address: 0x1800253c0)
  • RtlNtStatusToDosError (Address: 0x1800253b0)
oleaut32.dll
  • SysFreeString (Address: 0x1800253e0)
  • SysStringLen (Address: 0x1800253e8)
shell32.dll
  • ShellExecuteW (Address: 0x1800253f8)
user32.dll
  • MessageBoxA (Address: 0x180025408)
VCRUNTIME140.dll
  • __C_specific_handler (Address: 0x180025050)
  • __std_type_info_destroy_list (Address: 0x180025058)
  • memcmp (Address: 0x180025040)
  • memcpy (Address: 0x180025060)
  • memmove (Address: 0x180025038)
  • memset (Address: 0x180025048)