The “3.exe” is a legitimate executable and it is signed by “ESET, spol. and it is being abused for DLL hijacking technique to execute http_dll.dll which decodes and loads the malicious payload http_dll.dat