Benign Download

7a91d43923b23b640842519263ff8dc2eb0f411f2f1688727db5c7dfacbab7be.dll

Dynamic library loading via LoadLibraryW

SHA-2567a91d43923b23b640842519263ff8dc2eb0f411f2f1688727db5c7dfacbab7be

MaleculeH(Ds)

Evidence

Dynamic library loading via LoadLibraryW 0x6008–0x6048

0x60083a9c010000000000a89b010000000000:...............
0x6018bc9b0100d09b0100f49b0100e49b0100................
0x60280000000020010080000000005c9c0100.... .......\...
0x603800000000169c01000000000000000000................
0x60480000000000000000                ........        

.dll extension reference 0x19b74–0x19bd4

0x19b74169c0100000000004f4c454155543332........OLEAUT32
0x19b842e646c6c00007602526567536176654b.dll..v.RegSaveK
0x19b9465794578410041445641504933322e64eyExA.ADVAPI32.d
⋯4 more rows

PE version resource structure 0x2956e–0x2959e

0x2956e09907998615302300000180e34000000..y.aS.0....4...
0x2957e560053005f0056004500520053004900V.S._.V.E.R.S.I.
0x2958e4f004e005f0049004e0046004f000000O.N._.I.N.F.O...
0x2959e0000bd04effe000001000a00490034  ............I.4 

PE FileVersion metadata field 0x29752–0x297a2

0x29752650061006e007300000036000b000100e.a.n.s...6.....
0x29762460069006c0065005600650072007300F.i.l.e.V.e.r.s.
0x2977269006f006e0000000000370033002e00i.o.n.....7.3...
0x29782310030002e0038002e003500320000001.0...8...5.2...
0x29792000036000b000100460075006c006c00..6.....F.u.l.l.
0x297a220005600                         .V.            

PE ProductVersion metadata field 0x2a306–0x2a356

0x2a306440036003000000000003a000b000100D.6.0.....:.....
0x2a316500072006f0064007500630074005600P.r.o.d.u.c.t.V.
0x2a32665007200730069006f006e0000003700e.r.s.i.o.n...7.
0x2a3362e0033002e003100300038002e003500..3...1.0.8...5.
0x2a346320000000000440000000100560061002.....D.....V.a.
0x2a3567200460069006c00                r.F.i.l.        