Reflect.dll

: Communication with remote servers to retrieve RSA public keys for file encryption. 4. Mitigation and Defense

The stager uses Invoke-Expression to run a reflective loader in memory. reflect.dll

: Disabling of "System Restore" and "Automatic Startup Repair". : Communication with remote servers to retrieve RSA