SecuriteInfo[.]com[.]Program[.]Unwanted[.]4468[.]24384[.]5290[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Program.Unwanted.4468.24384.5290.exe
Size 3.7MB
Sample240122-prrm8afdfl
SHA256 83d48ca1aa2299d974223ddbb4ea182e7064e57d6dd5ead72d0088d71e444ae0
MD5 3137bbf88d80a164b35def3024ef152a
SHA1 c0bab2f371cdcd7bd53fd1cff6cadcd3505c4fa1
SHA512 a59452c610fe845b00feff5a98972ebdc39f8ffbbb3261bed6d54eab5c3066bec5e2fd1c118d4880faf8402ede29d23934d7e98ba6feb9a64efab66c8baf7899
SSDEEP 98304:uHLi/kJwZwPb9L/0rQq98ZU+LsXCKqRkMccz2938N:XYwgVqWjwCKibB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SCMx86/msiexec.exe

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

File Explorer

SecuriteInfo.com.Program.Unwanted.4468.24384.5290.exe

.exe 3.7MB
SCMx86/SCMx86Setup.msi

.msi 3.9MB
SCMx86/msiexec.exe

.exe 71KB
SCMx86/setup.exe

.exe 420KB

SecuriteInfo.com.Program.Unwanted.4468.24384.5290.exe

IMPHASH 57e98d9a5a72c8d7ad8fb7a6a58b3daf
SHA256 83d48ca1aa2299d974223ddbb4ea182e7064e57d6dd5ead72d0088d71e444ae0
MD5 3137bbf88d80a164b35def3024ef152a
SHA1 c0bab2f371cdcd7bd53fd1cff6cadcd3505c4fa1
SHA512 a59452c610fe845b00feff5a98972ebdc39f8ffbbb3261bed6d54eab5c3066bec5e2fd1c118d4880faf8402ede29d23934d7e98ba6feb9a64efab66c8baf7899
SSDEEP 98304:uHLi/kJwZwPb9L/0rQq98ZU+LsXCKqRkMccz2938N:XYwgVqWjwCKibB
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

bd:8a:64:fb:ed:dd:08:76:1e:7c:72:28:40:f5:48:49:1f:65:e1:25:24:7e:1d:0e:43:92:25:af:d1:2a:e8:ab

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Kuzyakov Artur Vyacheslavovich IP,O=Kuzyakov Artur Vyacheslavovich IP,STREET=kv.29\, 24K1 Tashkentskaya ul.,L=Moscow,ST=Moscow,C=RU

Chains

Feb 6, 2020

CN=Kuzyakov Artur Vyacheslavovich IP,O=Kuzyakov Artur Vyacheslavovich IP,STREET=kv.29\, 24K1 Tashkentskaya ul.,L=Moscow,ST=Moscow,C=RU

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Digest

78:59:14:f1:44:27:e0:d4:45:73:4f:5a:c5:91:57:d7:3d:6a:9d:4d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Kuzyakov Artur Vyacheslavovich IP,O=Kuzyakov Artur Vyacheslavovich IP,STREET=kv.29\, 24K1 Tashkentskaya ul.,L=Moscow,ST=Moscow,C=RU

Chains

Feb 6, 2020

CN=Kuzyakov Artur Vyacheslavovich IP,O=Kuzyakov Artur Vyacheslavovich IP,STREET=kv.29\, 24K1 Tashkentskaya ul.,L=Moscow,ST=Moscow,C=RU

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Serial Number

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 7, 2005 - May 30, 2020

Subject

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 27, 2011 - May 30, 2020

Subject

CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49

Issuer

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - May 30, 2020

Subject

CN=Kuzyakov Artur Vyacheslavovich IP,O=Kuzyakov Artur Vyacheslavovich IP,STREET=kv.29\, 24K1 Tashkentskaya ul.,L=Moscow,ST=Moscow,C=RU

Serial Number

1f:28:98:08:7c:f9:36:4d:a9:b4:f2:33:2f:11:c7:40

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 9, 2019 - Aug 8, 2020

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Timespan

Nov 2, 2018 - Dec 31, 2030

Subject

CN=Kuzyakov Artur Vyacheslavovich IP,O=Kuzyakov Artur Vyacheslavovich IP,STREET=kv.29\, 24K1 Tashkentskaya ul.,L=Moscow,ST=Moscow,C=RU

Serial Number

1f:28:98:08:7c:f9:36:4d:a9:b4:f2:33:2f:11:c7:40

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 9, 2019 - Aug 8, 2020

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping

Timespan

Nov 2, 2018 - Dec 31, 2030

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Aug 1, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

Major OS version

Entry point

13069

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableA CreateFileA GetFileSize GetModuleFileNameA ReadFile GetCurrentProcess CopyFileA Sleep GetTickCount GetWindowsDirectoryA GetTempPathA GetCommandLineA lstrlenA GetVersion SetErrorMode lstrcpynA ExitProcess SetCurrentDirectoryA GlobalLock CreateThread GetLastError CreateDirectoryA CreateProcessA RemoveDirectoryA GetTempFileNameA WriteFile lstrcpyA MoveFileExA lstrcatA GetSystemDirectoryA GetProcAddress GetExitCodeProcess WaitForSingleObject CompareFileTime SetFileAttributesA GetFileAttributesA GetShortPathNameA MoveFileA GetFullPathNameA SetFileTime SearchPathA CloseHandle lstrcmpiA GlobalUnlock GetDiskFreeSpaceA lstrcmpA FindFirstFileA FindNextFileA DeleteFileA SetFilePointer GetPrivateProfileStringA FindClose MultiByteToWideChar FreeLibrary MulDiv WritePrivateProfileStringA LoadLibraryExA GetModuleHandleA GlobalAlloc GlobalFree ExpandEnvironmentStringsA

user32

ScreenToClient GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard PostQuitMessage GetWindowRect EnableMenuItem CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA ReleaseDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndDialog RegisterClassA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx GetDC CreateDialogParamA SetTimer GetDlgItem SetWindowLongA SetForegroundWindow LoadImageA IsWindow SendMessageTimeoutA FindWindowExA OpenClipboard TrackPopupMenu AppendMenuA EndPaint DestroyWindow wsprintfA ShowWindow SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExA SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA SHFileOperationA

advapi32

AdjustTokenPrivileges RegCreateKeyExA RegOpenKeyExA SetFileSecurityA OpenProcessToken LookupPrivilegeValueA RegEnumValueA RegDeleteKeyA RegDeleteValueA RegCloseKey RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

SCMx86/msiexec.exe

IMPHASH d978d78f24d00067ae727581cca0b391
SHA256 da986c4c25eccc3741e4c6a8f21e1e602f768a3834438d3fa42e0c950e529330
MD5 a8492e3929e7b981da541286709c8479
SHA1 bbfaccd7a8d252ecdd071d210ef7306dca1a0017
SHA512 12936cfe9b7dbfacf01e378caa688f36c632f92d1001a3ec3b9e744df2d84f487114484ddfbf19fbc45be0cca2f7111ea62ce593b72eb47378d1d2574c52b560
SSDEEP 1536:zMkRppGNVvCo2ki7N9wu/w9W+E2bh3GFsL9f:zMkpGNVvCo2ki7N9wu/uW+E2bgFsL9f
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

15792

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegOpenKeyExW RegCreateKeyExW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken OpenThreadToken FreeSid GetLengthSid AllocateAndInitializeSid DeregisterEventSource ReportEventW RegisterEventSourceW MakeSelfRelativeSD GetSecurityDescriptorLength SetSecurityDescriptorGroup SetSecurityDescriptorOwner SetSecurityDescriptorDacl InitializeSecurityDescriptor GetAce AddAccessAllowedAce InitializeAcl RegCloseKey RegSetValueExW RegDeleteKeyW RegQueryValueExW RegDeleteValueW RegEnumKeyW CloseServiceHandle CreateServiceW OpenSCManagerW SetThreadToken DeleteService QueryServiceStatus ControlService OpenServiceW RegEnumKeyExW SetServiceStatus RegisterServiceCtrlHandlerW EqualSid GetSecurityDescriptorOwner RegGetKeySecurity MakeAbsoluteSD GetTokenInformation RevertToSelf StartServiceCtrlDispatcherW

kernel32

lstrlenW lstrcmpiW CloseHandle InterlockedExchange GetCurrentProcess GetLastError GetCurrentThread Sleep GetVersionExW GetEnvironmentVariableW InitializeCriticalSection DeleteCriticalSection GetProcAddress LoadLibraryW MultiByteToWideChar WideCharToMultiByte SetLastError GlobalAlloc GlobalFree FreeLibrary UnhandledExceptionFilter GetVersion GetModuleHandleW WaitForSingleObject CreateProcessW GetModuleFileNameW InterlockedDecrement InterlockedIncrement lstrcmpW FormatMessageW GetSystemDefaultLangID LoadLibraryExW SetCurrentDirectoryW OutputDebugStringW WriteFile GetLocaleInfoW GetACP LeaveCriticalSection EnterCriticalSection OpenProcess CreateEventW OpenEventW CompareStringW GetFileType GetStdHandle GetCommandLineW ExitProcess SetEvent SetConsoleCtrlHandler CreateThread GetSystemDirectoryW GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter GetModuleHandleA TerminateProcess SetUnhandledExceptionFilter GetStartupInfoA InterlockedCompareExchange

user32

MsgWaitForMultipleObjects IsCharAlphaNumericW GetMessageW PeekMessageW DispatchMessageW TranslateMessage PostQuitMessage PostThreadMessageW

msvcrt

_acmdln _initterm _amsg_exit __setusermatherr __p__commode __p__fmode __set_app_type _unlock __dllonexit _lock _onexit ?terminate@@YAXXZ _controlfp exit _ismbblead _XcptFilter _exit _cexit __getmainargs _vsnprintf _vsnwprintf _wcsicmp memcpy memset wcsrchr

ntdll

RtlNtStatusToDosError RtlUnwind NtQueryInformationProcess

ole32

CoInitialize CoRevokeClassObject CoRegisterClassObject StgOpenStorage CoUninitialize

msi

ord141 ord70 ord190 ord280 ord197 ord228 ord136 ord169 ord78 ord148 ord8 ord88 ord199 ord131 ord184 ord175 ord240 ord222 ord196

SCMx86/setup.exe

IMPHASH cfa06eb8ecb157d3e1e5170182639085
SHA256 f0fbc759f323f60f4253516b95c31a3f9062f68c26551fdb5ba842483d2fadb6
MD5 5152547409903834c5f329a69f1e3872
SHA1 70034442230bc3b29040a51a24edfac20976ba88
SHA512 5eaa18284588e5b87e653101204a00b25e47aee184249f663cd4bd7b56d71c8b1dabcc15fef95eb8ac5835312c2f608f66cd85cc17f9e836bea970fe6f841b54
SSDEEP 6144:gqIpd/w8ylWKxavR+dJ1oMBClrbMAo+nhmuFfvY0SHZvuD3RojDuUlX2eO3:g7IRWDvFa+nhmuF3Y0scReDuUlXba
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

9d:a4:e8:ee:0e:b2:3e:5b:87:c4:70:8c:c8:eb:a5:75:2d:d1:ab:4f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Micro-Star International CO.\, LTD.,O=Micro-Star International CO.\, LTD.,L=New Taipei City,C=TW

Chains

Jan 19, 2024

Minor OS version

Major OS version

Entry point

189761

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

Process32NextW Process32FirstW CreateToolhelp32Snapshot GetCurrentProcessId GetNativeSystemInfo SetFilePointer HeapSetInformation CreateEventW SetEvent SizeofResource LockResource LoadResource FindResourceW GetVersionExW CompareStringW GetFileAttributesW GetModuleFileNameW ExpandEnvironmentStringsW GlobalFree OpenProcess GetSystemDirectoryW DeleteFileW GetTempFileNameW GetTempPathW LocalFree FormatMessageW ReadFile GetTimeFormatW GetDateFormatW CreateDirectoryW CopyFileW WideCharToMultiByte GetWindowsDirectoryW GetSystemInfo GetCurrentProcess GetEnvironmentVariableW GetModuleHandleW GetVersion CreateFileW EndUpdateResourceW Sleep GetDiskFreeSpaceExW DeleteCriticalSection CreateThread InitializeCriticalSection EnterCriticalSection LeaveCriticalSection MulDiv lstrlenW GetExitCodeProcess SetEndOfFile GetTickCount FindFirstFileW FindNextFileW FindClose GlobalAlloc LoadLibraryW UpdateResourceA BeginUpdateResourceA InterlockedCompareExchange FindResourceA DeleteFileA lstrlenA CreateFileA UpdateResourceW BeginUpdateResourceW GetEnvironmentVariableA SetStdHandle WriteConsoleW HeapReAlloc IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID HeapSize FlushFileBuffers GetConsoleMode GetConsoleCP GetProcessHeap MultiByteToWideChar LCMapStringW GetStringTypeW GetLocaleInfoW IsValidCodePage GetOEMCP GetACP IsDebuggerPresent UnhandledExceptionFilter TerminateProcess HeapAlloc IsProcessorFeaturePresent GetSystemTimeAsFileTime QueryPerformanceCounter HeapCreate GetCurrentThreadId InterlockedExchange SwitchToThread GetLastError WaitForSingleObject CloseHandle GetProcAddress FreeLibrary WriteFile SetLastError InterlockedIncrement TlsFree TlsSetValue TlsGetValue TlsAlloc GetFileType InitializeCriticalSectionAndSpinCount LocalAlloc LoadLibraryA RaiseException GetCommandLineW GetStartupInfoW RtlUnwind HeapFree InterlockedDecrement GetCPInfo SetUnhandledExceptionFilter ExitProcess GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount

gdi32

GetStockObject EnumFontFamiliesExW CreateFontIndirectW DeleteObject CreateCompatibleDC GetDeviceCaps GetObjectW DeleteDC SelectObject GetTextMetricsW GetTextExtentPoint32W

ole32

CoUninitialize CoInitialize

secur32

GetComputerObjectNameW

shell32

ShellExecuteExW SHGetMalloc SHGetPathFromIDListW SHGetSpecialFolderLocation ShellExecuteW ShellExecuteA

user32

MessageBoxA ShowScrollBar GetClientRect SendMessageA SetClassLongW SetWindowTextW LoadCursorW SetCursor CreateDialogIndirectParamW SetForegroundWindow EnableWindow GetFocus SetFocus ScreenToClient MoveWindow LoadIconW SetDlgItemTextW SendMessageW GetDlgItem MsgWaitForMultipleObjects PeekMessageW IsDialogMessageW TranslateMessage DispatchMessageW DestroyWindow ShowWindow SendDlgItemMessageW GetWindowRect SystemParametersInfoW ExitWindowsEx MessageBoxW DrawTextW GetSystemMetrics GetDC GetDialogBaseUnits ReleaseDC CreateDialogParamW LoadImageW

crypt32

CertFreeCertificateChain CertVerifyCertificateChainPolicy CertGetCertificateChain

wininet

InternetCrackUrlW InternetCombineUrlW

msi

ord8 ord150 ord78 ord92

SecuriteInfo.com.Program.Unwanted.4468.24384.5290.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

SCMx86/SCMx86Setup.msi

SCMx86/msiexec.exe

advapi32

kernel32

user32

msvcrt

ntdll

ole32

msi

generic

SCMx86/setup.exe

PE Signature issue

kernel32

gdi32

ole32

secur32

shell32

user32

crypt32

wininet

msi

generic