reflex.dll

Description:

Authors:

Version:

Architecture: 64-bit

Operating System:

SHA256: fbe543c41fd61b5efccd1d0551f755c8

File Size: 177.0 KB

Uploaded At: July 12, 2026, 5:55 a.m.

Views: 19

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllMain (Ordinal: 1, Address: 0x1323)
  • Watchdog (Ordinal: 2, Address: 0x2f44)

Imported DLLs & Functions

advapi32.dll
  • CloseServiceHandle (Address: 0x1800240a0)
  • ControlService (Address: 0x1800240a8)
  • CreateServiceW (Address: 0x1800240b0)
  • DeleteService (Address: 0x180024090)
  • GetTokenInformation (Address: 0x180024098)
  • OpenProcessToken (Address: 0x180024088)
  • OpenSCManagerW (Address: 0x180024070)
  • OpenServiceW (Address: 0x180024078)
  • StartServiceW (Address: 0x180024080)
api-ms-win-core-synch-l1-2-0.dll
  • WaitOnAddress (Address: 0x1800240c0)
  • WakeByAddressAll (Address: 0x1800240d0)
  • WakeByAddressSingle (Address: 0x1800240c8)
api-ms-win-crt-math-l1-1-0.dll
  • ceil (Address: 0x1800240e8)
  • log10 (Address: 0x1800240e0)
api-ms-win-crt-runtime-l1-1-0.dll
  • _cexit (Address: 0x180024138)
  • _configure_narrow_argv (Address: 0x180024100)
  • _crt_atexit (Address: 0x180024130)
  • _execute_onexit_table (Address: 0x180024128)
  • _initialize_narrow_environment (Address: 0x180024110)
  • _initialize_onexit_table (Address: 0x180024118)
  • _initterm (Address: 0x180024140)
  • _initterm_e (Address: 0x180024108)
  • _register_onexit_function (Address: 0x180024120)
  • _seh_filter_dll (Address: 0x1800240f8)
api-ms-win-crt-string-l1-1-0.dll
  • strlen (Address: 0x180024150)
bcryptprimitives.dll
  • ProcessPrng (Address: 0x180024160)
kernel32.dll
  • AllocConsole (Address: 0x1800243c0)
  • CloseHandle (Address: 0x1800243b0)
  • CopyFileExW (Address: 0x180024318)
KERNEL32.dll
  • CreateDirectoryW (Address: 0x180024018)
kernel32.dll
  • CreateEventW (Address: 0x1800242c8)
KERNEL32.dll
  • CreateFileW (Address: 0x180024028)
kernel32.dll
  • CreateProcessW (Address: 0x1800242b8)
  • CreateToolhelp32Snapshot (Address: 0x180024178)
  • CreateWaitableTimerExW (Address: 0x180024270)
  • ExitProcess (Address: 0x180024260)
  • FindClose (Address: 0x1800243a0)
  • FindFirstFileExW (Address: 0x180024370)
  • FindNextFileW (Address: 0x180024308)
  • FlsAlloc (Address: 0x180024228)
  • FlsFree (Address: 0x180024238)
  • FlsSetValue (Address: 0x180024240)
  • FlushInstructionCache (Address: 0x1800242a0)
  • FormatMessageW (Address: 0x180024220)
  • GetConsoleMode (Address: 0x180024348)
  • GetConsoleOutputCP (Address: 0x180024340)
KERNEL32.dll
  • GetCurrentDirectoryW (Address: 0x180024020)
kernel32.dll
  • GetCurrentProcess (Address: 0x1800241e0)
  • GetCurrentProcessId (Address: 0x1800242d0)
  • GetCurrentThread (Address: 0x180024170)
  • GetCurrentThreadId (Address: 0x180024180)
  • GetFileInformationByHandle (Address: 0x180024390)
  • GetFileInformationByHandleEx (Address: 0x180024360)
  • GetFinalPathNameByHandleW (Address: 0x180024320)
  • GetFullPathNameW (Address: 0x180024388)
  • GetLastError (Address: 0x1800243b8)
  • GetModuleFileNameW (Address: 0x1800242e0)
  • GetModuleHandleA (Address: 0x1800243d0)
  • GetModuleHandleExW (Address: 0x180024230)
  • GetModuleHandleW (Address: 0x180024218)
  • GetProcAddress (Address: 0x1800241f8)
  • GetProcessHeap (Address: 0x180024208)
  • GetStdHandle (Address: 0x180024350)
  • GetSystemInfo (Address: 0x1800242a8)
  • GetSystemTimeAsFileTime (Address: 0x1800242c0)
  • GetSystemTimePreciseAsFileTime (Address: 0x180024398)
  • GetTempPathW (Address: 0x180024328)
  • GetThreadContext (Address: 0x180024298)
  • HeapAlloc (Address: 0x180024258)
  • HeapCreate (Address: 0x1800243c8)
  • HeapFree (Address: 0x180024210)
  • HeapReAlloc (Address: 0x180024250)
  • InitializeSListHead (Address: 0x180024358)
  • IsDebuggerPresent (Address: 0x1800242e8)
  • IsProcessorFeaturePresent (Address: 0x180024300)
  • IsThreadAFiber (Address: 0x180024248)
  • LoadLibraryExA (Address: 0x180024288)
  • LoadLibraryW (Address: 0x1800242d8)
KERNEL32.dll
  • MultiByteToWideChar (Address: 0x180024000)
kernel32.dll
  • OpenEventW (Address: 0x180024310)
  • OpenProcess (Address: 0x1800241c0)
  • OpenThread (Address: 0x180024190)
KERNEL32.dll
  • QueryPerformanceCounter (Address: 0x180024010)
  • QueryPerformanceFrequency (Address: 0x180024008)
kernel32.dll
  • ResumeThread (Address: 0x1800241a8)
  • RtlCaptureContext (Address: 0x1800241b0)
  • RtlLookupFunctionEntry (Address: 0x1800241c8)
  • RtlVirtualUnwind (Address: 0x1800241d8)
  • SetEvent (Address: 0x1800241e8)
  • SetFileInformationByHandle (Address: 0x180024378)
  • SetFilePointerEx (Address: 0x180024330)
  • SetFileTime (Address: 0x180024380)
  • SetLastError (Address: 0x1800243a8)
  • SetThreadContext (Address: 0x1800241f0)
  • SetUnhandledExceptionFilter (Address: 0x1800242f8)
  • SetWaitableTimer (Address: 0x180024278)
  • Sleep (Address: 0x180024280)
  • SuspendThread (Address: 0x1800241a0)
  • SwitchToThread (Address: 0x180024268)
  • TerminateProcess (Address: 0x1800243d8)
  • Thread32First (Address: 0x180024188)
  • Thread32Next (Address: 0x180024198)
  • UnhandledExceptionFilter (Address: 0x1800242f0)
  • VirtualAlloc (Address: 0x1800241b8)
  • VirtualFree (Address: 0x1800242b0)
  • VirtualProtect (Address: 0x1800241d0)
  • VirtualQuery (Address: 0x180024290)
  • WaitForMultipleObjects (Address: 0x180024200)
  • WaitForSingleObject (Address: 0x180024368)
  • WriteConsoleW (Address: 0x180024338)
ntdll.dll
  • NtOpenFile (Address: 0x180024408)
  • NtReadFile (Address: 0x1800243f0)
  • NtTerminateProcess (Address: 0x180024400)
  • NtWriteFile (Address: 0x1800243f8)
  • RtlNtStatusToDosError (Address: 0x1800243e8)
oleaut32.dll
  • SysFreeString (Address: 0x180024418)
  • SysStringLen (Address: 0x180024420)
shell32.dll
  • ShellExecuteW (Address: 0x180024430)
user32.dll
  • MessageBoxW (Address: 0x180024440)
VCRUNTIME140.dll
  • __C_specific_handler (Address: 0x180024048)
  • __std_type_info_destroy_list (Address: 0x180024060)
  • memcmp (Address: 0x180024038)
  • memcpy (Address: 0x180024050)
  • memmove (Address: 0x180024058)
  • memset (Address: 0x180024040)