reflex.dll

Description:

Authors:

Version:

Architecture: 64-bit

Operating System:

SHA256: e093d25d8b5565876560149f808b59a0

File Size: 172.5 KB

Uploaded At: June 8, 2026, 8:20 p.m.

Views: 24

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllMain (Ordinal: 1, Address: 0x1313)
  • Watchdog (Ordinal: 2, Address: 0x2efb)

Imported DLLs & Functions

advapi32.dll
  • CloseServiceHandle (Address: 0x1800292d0)
  • ControlService (Address: 0x1800292d8)
  • CreateServiceW (Address: 0x1800292e0)
  • DeleteService (Address: 0x1800292e8)
  • GetTokenInformation (Address: 0x1800292f0)
  • OpenProcessToken (Address: 0x1800292f8)
  • OpenSCManagerW (Address: 0x180029300)
  • OpenServiceW (Address: 0x180029308)
  • StartServiceW (Address: 0x180029310)
api-ms-win-core-synch-l1-2-0.dll
  • WaitOnAddress (Address: 0x180029340)
  • WakeByAddressAll (Address: 0x180029348)
  • WakeByAddressSingle (Address: 0x180029350)
api-ms-win-crt-math-l1-1-0.dll
  • ceil (Address: 0x1800293e0)
  • log10 (Address: 0x1800293e8)
api-ms-win-crt-runtime-l1-1-0.dll
  • _cexit (Address: 0x180029398)
  • _configure_narrow_argv (Address: 0x1800293a0)
  • _execute_onexit_table (Address: 0x1800293a8)
  • _initialize_narrow_environment (Address: 0x1800293b0)
  • _initialize_onexit_table (Address: 0x1800293b8)
  • _initterm (Address: 0x1800293c0)
  • _initterm_e (Address: 0x1800293c8)
  • _seh_filter_dll (Address: 0x1800293d0)
api-ms-win-crt-string-l1-1-0.dll
  • strlen (Address: 0x1800293f8)
bcryptprimitives.dll
  • ProcessPrng (Address: 0x180028ff8)
kernel32.dll
  • AllocConsole (Address: 0x180029008)
  • CloseHandle (Address: 0x180029010)
  • CopyFileExW (Address: 0x180029018)
  • CreateDirectoryW (Address: 0x180029020)
  • CreateEventW (Address: 0x180029028)
  • CreateFileW (Address: 0x180029030)
  • CreateProcessW (Address: 0x180029038)
  • CreateToolhelp32Snapshot (Address: 0x180029040)
  • CreateWaitableTimerExW (Address: 0x180029048)
  • ExitProcess (Address: 0x180029050)
  • FindClose (Address: 0x180029058)
  • FindFirstFileExW (Address: 0x180029060)
  • FindNextFileW (Address: 0x180029068)
  • FlushInstructionCache (Address: 0x180029070)
  • FormatMessageW (Address: 0x180029078)
  • GetConsoleMode (Address: 0x180029080)
  • GetConsoleOutputCP (Address: 0x180029088)
  • GetCurrentDirectoryW (Address: 0x180029090)
  • GetCurrentProcess (Address: 0x180029098)
  • GetCurrentProcessId (Address: 0x1800290a0)
  • GetCurrentThread (Address: 0x1800290a8)
  • GetCurrentThreadId (Address: 0x1800290b0)
  • GetFileInformationByHandle (Address: 0x1800290b8)
  • GetFileInformationByHandleEx (Address: 0x1800290c0)
  • GetFinalPathNameByHandleW (Address: 0x1800290c8)
  • GetFullPathNameW (Address: 0x1800290d0)
  • GetLastError (Address: 0x1800290d8)
  • GetModuleFileNameW (Address: 0x1800290e0)
  • GetModuleHandleA (Address: 0x1800290e8)
  • GetModuleHandleW (Address: 0x1800290f0)
  • GetProcAddress (Address: 0x1800290f8)
  • GetProcessHeap (Address: 0x180029100)
  • GetStdHandle (Address: 0x180029108)
  • GetSystemInfo (Address: 0x180029110)
  • GetSystemTimeAsFileTime (Address: 0x180029118)
  • GetSystemTimePreciseAsFileTime (Address: 0x180029120)
  • GetTempPathW (Address: 0x180029128)
  • GetThreadContext (Address: 0x180029130)
  • HeapAlloc (Address: 0x180029138)
  • HeapCreate (Address: 0x180029140)
  • HeapFree (Address: 0x180029148)
  • HeapReAlloc (Address: 0x180029150)
  • InitializeSListHead (Address: 0x180029158)
  • IsDebuggerPresent (Address: 0x180029160)
  • IsProcessorFeaturePresent (Address: 0x180029168)
  • LoadLibraryExA (Address: 0x180029170)
  • LoadLibraryW (Address: 0x180029178)
  • MultiByteToWideChar (Address: 0x180029180)
  • OpenEventW (Address: 0x180029188)
  • OpenProcess (Address: 0x180029190)
  • OpenThread (Address: 0x180029198)
  • QueryPerformanceCounter (Address: 0x1800291a0)
  • QueryPerformanceFrequency (Address: 0x1800291a8)
  • ResumeThread (Address: 0x1800291b0)
  • RtlCaptureContext (Address: 0x1800291b8)
  • RtlLookupFunctionEntry (Address: 0x1800291c0)
  • RtlVirtualUnwind (Address: 0x1800291c8)
  • SetEvent (Address: 0x1800291d0)
  • SetFileInformationByHandle (Address: 0x1800291d8)
  • SetFilePointerEx (Address: 0x1800291e0)
  • SetFileTime (Address: 0x1800291e8)
  • SetLastError (Address: 0x1800291f0)
  • SetThreadContext (Address: 0x1800291f8)
  • SetUnhandledExceptionFilter (Address: 0x180029200)
  • SetWaitableTimer (Address: 0x180029208)
  • Sleep (Address: 0x180029210)
  • SuspendThread (Address: 0x180029218)
  • SwitchToThread (Address: 0x180029220)
  • TerminateProcess (Address: 0x180029228)
  • Thread32First (Address: 0x180029230)
  • Thread32Next (Address: 0x180029238)
  • UnhandledExceptionFilter (Address: 0x180029240)
  • VirtualAlloc (Address: 0x180029248)
  • VirtualFree (Address: 0x180029250)
  • VirtualProtect (Address: 0x180029258)
  • VirtualQuery (Address: 0x180029260)
  • WaitForMultipleObjects (Address: 0x180029268)
  • WaitForSingleObject (Address: 0x180029270)
  • WriteConsoleW (Address: 0x180029278)
ntdll.dll
  • NtOpenFile (Address: 0x180029288)
  • NtReadFile (Address: 0x180029290)
  • NtTerminateProcess (Address: 0x180029298)
  • NtWriteFile (Address: 0x1800292a0)
  • RtlNtStatusToDosError (Address: 0x1800292a8)
oleaut32.dll
  • SysFreeString (Address: 0x1800292b8)
  • SysStringLen (Address: 0x1800292c0)
shell32.dll
  • ShellExecuteW (Address: 0x180029330)
user32.dll
  • MessageBoxA (Address: 0x180029320)
VCRUNTIME140.dll
  • __C_specific_handler (Address: 0x180029360)
  • __std_type_info_destroy_list (Address: 0x180029368)
  • memcmp (Address: 0x180029370)
  • memcpy (Address: 0x180029378)
  • memmove (Address: 0x180029380)
  • memset (Address: 0x180029388)