Benign Download

1f8dc085e250847f7a31d7785710be49b17eed1e1c6e460478e2e5232bda689a.dll

Dynamic library loading via LoadLibraryW

SHA-2561f8dc085e250847f7a31d7785710be49b17eed1e1c6e460478e2e5232bda689a

MaleculeH(Ds)

Evidence

Dynamic library loading via LoadLibraryW 0x5ff0–0x6030

0x5ff000000000000000000000000000000000................
0x600000a7030000000000b4a60300a4a60300................
0x601090a60300000000004201008000000000........B.......
0x6020d6a60300000000001ca7030000000000................
0x6030000000007b816b5f0000000002000000....{.k_........

.dll extension reference 0x3a6c0–0x3a6f0

0x3a6c0616e646c655700004b45524e454c3332andleW..KERNEL32
0x3a6d02e646c6c00001700526173456e756d41.dll....RasEnumA
0x3a6e075746f6469616c416464726573736573utodialAddresses
0x3a6f057005241                        W.RA            

PE version resource structure 0x4d56e–0x4d59e

0x4d56e09907998615302300000180e34000000..y.aS.0....4...
0x4d57e560053005f0056004500520053004900V.S._.V.E.R.S.I.
0x4d58e4f004e005f0049004e0046004f000000O.N._.I.N.F.O...
0x4d59e0000bd04effe000001001b00040000  ............... 

PE FileVersion metadata field 0x4d752–0x4d7a2

0x4d752650061006e007300000036000b000100e.a.n.s...6.....
0x4d762460069006c0065005600650072007300F.i.l.e.V.e.r.s.
0x4d77269006f006e0000000000300034002e00i.o.n.....0.4...
0x4d782320037002e0039002e003000300000002.7...9...0.0...
0x4d792000036000b000100460075006c006c00..6.....F.u.l.l.
0x4d7a220005600                         .V.            

PE ProductVersion metadata field 0x4e306–0x4e356

0x4e306410036003000000000003a000b000100A.6.0.....:.....
0x4e316500072006f0064007500630074005600P.r.o.d.u.c.t.V.
0x4e32665007200730069006f006e0000003000e.r.s.i.o.n...0.
0x4e3362e0034002e003200370039002e003000..4...2.7.9...0.
0x4e346300000000000440000000100560061000.....D.....V.a.
0x4e3567200460069006c00                r.F.i.l.        