Windows.Detection.ReflectedAssemblies

https://docs.velociraptor.app/exchange/artifacts/pages/reflectedassemblies/

Collects currently running .NET assemblies and replicates ProcessHacker’s .NET Assemblies view.