2026-08-10_e6e35984a8d6f2bcb12dcae843fa399a_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-stealer_magniber_njrat_revil_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_e6e35984a8d6f2bcb12dcae843fa399a_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-stealer_magniber_njrat_revil_smoke-loader
Size 61.5MB
Sample260810-gf2p2ssbnb
SHA256 d102e879a37857e496dd781799cf4dbfa65c3bd811eea9e4f001e42907b2ece5
MD5 e6e35984a8d6f2bcb12dcae843fa399a
SHA1 3a90a655a782ad8b6c809f53f74f421fa232f0bc
SHA512 4a377a961eb8a8535b61ed7b52abf57e68bfb7d87d6a89e03765b0900d65ef7e3299d8cf638903b27374e6eb5f48d83fbec1ffffaf3b1e6b497506937c39c6ac
SSDEEP 1572864:dwmOY4vL93vX5PLm2Cyyjf5sgFOLeZV1o/3or5/YE:SmAL93vX5jmZy5gjZ/o/YFwE
TLSH
T19DE723217A02C075EA8101B2967DABBE856C9B351B2A50D393D82F3A5E705D33F32F57
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-08-10_e6e35984a8d6f2bcb12dcae843fa399a_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-stealer_magniber_njrat_revil_smoke-loader

.exe 61.5MB

2026-08-10_e6e35984a8d6f2bcb12dcae843fa399a_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-stealer_magniber_njrat_revil_smoke-loader

IMPHASH 09cfb41b43a3ce80e971ea7d6eb4fa8a
SHA256 d102e879a37857e496dd781799cf4dbfa65c3bd811eea9e4f001e42907b2ece5
MD5 e6e35984a8d6f2bcb12dcae843fa399a
SHA1 3a90a655a782ad8b6c809f53f74f421fa232f0bc
SHA512 4a377a961eb8a8535b61ed7b52abf57e68bfb7d87d6a89e03765b0900d65ef7e3299d8cf638903b27374e6eb5f48d83fbec1ffffaf3b1e6b497506937c39c6ac
SSDEEP 1572864:dwmOY4vL93vX5PLm2Cyyjf5sgFOLeZV1o/3or5/YE:SmAL93vX5jmZy5gjZ/o/YFwE
TLSH
T19DE723217A02C075EA8101B2967DABBE856C9B351B2A50D393D82F3A5E705D33F32F57
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

07:64:9e:65:49:7d:b6:68:b6:32:c0:98:bd:90:31:79:c0:d8:8f:ac:d0:08:3c:97:d0:0c:df:c4:15:78:85:e2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91510100MA7EUJ0408,CN=Chengdu Aishang Office Technology Co.\, Ltd.,O=Chengdu Aishang Office Technology Co.\, Ltd.,L=Chengdu,ST=Sichuan,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#131b5369636875616e205469616e6675204e6577204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13075369636875616e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Jul 6, 2026

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 13, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

0b:41:cc:5a:c5:d7:73:88:cd:8d:35:d1:46:0a:c3:b2

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 30, 2025 - Jul 29, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

4190980

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\workspace\cadviewer_ve\Output\Bin\Release\Win32\Setup.pdb

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

kernel32

CreateEventW CreateIoCompletionPort GetQueuedCompletionStatus GetFileAttributesExW FlushViewOfFile UnmapViewOfFile SetEndOfFile CreateFileMappingW MapViewOfFile GetFileSizeEx GetLongPathNameW IsBadReadPtr DeviceIoControl GetDriveTypeW GetLogicalDriveStringsW GetDiskFreeSpaceExW GetVolumeInformationW K32EnumProcessModules Thread32First Thread32Next VirtualAllocEx WriteProcessMemory VirtualFreeEx CreateRemoteThread ReadProcessMemory GetProcessId Module32FirstW Module32NextW lstrcmpA InitializeCriticalSectionAndSpinCount SetErrorMode FormatMessageA SleepEx WaitForMultipleObjects GetFileType GetStdHandle PeekNamedPipe ExpandEnvironmentStringsA FindFirstFileA FindNextFileA QueryPerformanceCounter LoadLibraryA GlobalMemoryStatus FlushConsoleInputBuffer FindNextFileW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindFirstFileExW PeekConsoleInputA ReadConsoleInputW GetNumberOfConsoleInputEvents SetConsoleMode GetTimeZoneInformation SetStdHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect IsThreadAFiber PostQueuedCompletionStatus FlsSetValue FlsGetValue GetVersionExW GetFullPathNameW GetCurrentDirectoryW SetCurrentDirectoryW GetCurrentThread GetConsoleOutputCP ReadConsoleW GetConsoleMode GetConsoleCP SetConsoleCtrlHandler ExitProcess SetFilePointerEx FreeLibraryAndExitThread ResumeThread ExitThread WriteConsoleW GetModuleHandleExW SystemTimeToTzSpecificLocalTime GetFileInformationByHandle TlsFree TlsSetValue TlsGetValue TlsAlloc InterlockedFlushSList RtlUnwind SetUnhandledExceptionFilter UnhandledExceptionFilter CreateSymbolicLinkW FindFirstFileW CloseThreadpoolWait SetThreadpoolWait CreateThreadpoolWait CloseThreadpoolTimer WaitForThreadpoolTimerCallbacks SetThreadpoolTimer CreateThreadpoolTimer FreeLibraryWhenCallbackReturns GetTickCount64 GetSystemTimeAsFileTime GetCurrentProcessorNumber FlushProcessWriteBuffers CreateSemaphoreExW CreateEventExW InitOnceExecuteOnce SetFileInformationByHandle LCMapStringEx GetCPInfo CompareStringEx GetLocaleInfoEx QueryPerformanceFrequency SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive GetStringTypeW SwitchToThread WaitForSingleObjectEx LoadLibraryExA VirtualFree VirtualAlloc IsProcessorFeaturePresent FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead EncodePointer IsDebuggerPresent GetExitCodeThread ResetEvent SetEvent GetSystemTime GetNativeSystemInfo GetComputerNameW LocalFileTimeToFileTime FlushFileBuffers lstrcpynA lstrlenA MoveFileExW SetFileAttributesW lstrcpyW WTSGetActiveConsoleSessionId GetEnvironmentVariableW GetSystemDirectoryW SetThreadLocale GetThreadLocale GetModuleFileNameA CreateFileA SystemTimeToFileTime GetWindowsDirectoryW FileTimeToSystemTime GetCurrentProcess OpenEventW LocalFree LocalAlloc GetFileSize K32GetModuleFileNameExW Process32NextW Process32FirstW CreateToolhelp32Snapshot ReadFile GetStartupInfoW CreatePipe TerminateProcess GetExitCodeProcess CreateProcessW CreateDirectoryW MoveFileW RemoveDirectoryW FlsFree FindClose SetFilePointer GetPrivateProfileStringW GlobalUnlock GlobalLock GetFileTime SetFileTime WriteFile GetTempFileNameW LoadLibraryW FreeResource GlobalFree GlobalAlloc MulDiv VerSetConditionMask VerifyVersionInfoW GetCurrentProcessId OpenProcess GetModuleHandleA WritePrivateProfileStringW lstrcmpiW LoadLibraryExW GetProcAddress FreeLibrary CreateFileW GetVersion GetCurrentThreadId SetLastError RaiseException WideCharToMultiByte MultiByteToWideChar lstrlenW lstrcatW lstrcpynW FindResourceW SizeofResource LockResource LoadResource GetModuleHandleW GetModuleFileNameW FindResourceExW GetTickCount GetLocalTime GetSystemInfo Sleep GetPrivateProfileIntW CreateMutexW WaitForSingleObject ReleaseMutex LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CloseHandle OutputDebugStringW OutputDebugStringA GetTempPathW DeleteFileW DeleteCriticalSection InitializeCriticalSectionEx GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy GetLastError DecodePointer CopyFileW GlobalSize CreateThread GetFileInformationByHandleEx TerminateThread FlsAlloc

user32

DestroyWindow GetWindowLongW SetWindowPos MoveWindow GetDlgItem IsWindow CreateWindowExW GetClassInfoExW RegisterClassExW CallWindowProcW DefWindowProcW GetClientRect GetWindowRect MapWindowPoints PostMessageW OffsetRect LoadCursorW DrawTextW GetCursor FillRect SetWindowTextW GetWindowTextLengthW GetFocus GetWindowThreadProcessId AttachThreadInput GetParent GetWindow MonitorFromWindow GetMonitorInfoW SetTimer KillTimer PostQuitMessage ShowWindow LoadIconW MessageBoxW GetMessageW TranslateMessage DispatchMessageW PeekMessageW CharNextW GetCursorPos WindowFromPoint GetDC ReleaseDC MonitorFromPoint LoadImageW SetRectEmpty IsRectEmpty GetIconInfo CopyRect EqualRect SetCursor ClientToScreen PtInRect ScreenToClient GetDoubleClickTime IntersectRect SystemParametersInfoW BeginPaint EndPaint IsIconic InvalidateRect TrackMouseEvent GetWindowTextW SetCapture ReleaseCapture SetLayeredWindowAttributes SetWindowLongW SendMessageW EnumDisplayMonitors UnregisterClassW IsZoomed IsWindowVisible SetForegroundWindow SetWindowRgn EnableWindow BringWindowToTop SetActiveWindow UpdateLayeredWindow MonitorFromRect SetFocus UpdateWindow wsprintfW GetCaretBlinkTime CreateCaret SetCaretPos GetSysColor RegisterClipboardFormatW IsClipboardFormatAvailable GetShellWindow CharLowerBuffW OpenClipboard EmptyClipboard CloseClipboard SetClipboardData GetProcessWindowStation GetUserObjectInformationW MessageBoxA GetForegroundWindow

gdi32

GetObjectA CreateCompatibleBitmap GetDIBits RealizePalette SelectPalette CopyMetaFileW GetViewportOrgEx SetTextCharacterExtra GetCurrentObject GetTextColor SetBitmapBits CreateFontIndirectW Rectangle CreatePen RestoreDC ExtSelectClipRgn CreateRectRgnIndirect SaveDC GetStockObject SetBkColor CreateSolidBrush GetTextExtentPointW SetTextColor SetBkMode CreateRectRgn CombineRgn CreateRoundRectRgn GetBitmapBits StretchBlt SetStretchBltMode DeleteDC BitBlt SetPixel SelectObject CreateCompatibleDC GetObjectW CreateDIBSection DeleteObject GetDeviceCaps

comdlg32

GetOpenFileNameW

advapi32

CryptDeriveKey RegOpenKeyExW RegQueryValueExW InitializeSecurityDescriptor ReportEventA RegisterEventSourceA DeregisterEventSource RegNotifyChangeKeyValue RegConnectRegistryW RegGetValueW GetLengthSid SetTokenInformation FreeSid CheckTokenMembership AllocateAndInitializeSid AdjustTokenPrivileges LookupPrivilegeValueW EnumServicesStatusExW CreateProcessAsUserW AccessCheck MapGenericMask DuplicateToken GetFileSecurityW CryptDecrypt CryptEncrypt CryptHashData CryptReleaseContext CryptDestroyKey CryptDestroyHash CryptCreateHash CryptAcquireContextW ConvertStringSecurityDescriptorToSecurityDescriptorW GetUserNameW GetUserNameA LookupAccountNameA GetSidSubAuthority GetSidSubAuthorityCount GetSidIdentifierAuthority IsValidSid ConvertSidToStringSidW LookupAccountNameW GetTokenInformation DeleteService CloseServiceHandle ControlService StartServiceW ChangeServiceConfigW QueryServiceConfigW QueryServiceStatus OpenServiceW OpenSCManagerW RegSetKeySecurity RegEnumKeyW CreateProcessWithTokenW DuplicateTokenEx OpenProcessToken RegSetValueExW RegQueryInfoKeyW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW SetSecurityDescriptorDacl RegCloseKey

shell32

ShellExecuteW ExtractIconW SHFileOperationW SHGetPathFromIDListW SHGetSpecialFolderLocation SHBrowseForFolderW SHCreateDirectoryExW SHGetFolderPathW ord165 SHChangeNotify SHGetSpecialFolderPathW SHGetMalloc SHGetKnownFolderPath SHCreateItemFromParsingName ShellExecuteExW

ole32

CoCreateInstance CoCreateGuid CoTaskMemFree CoUninitialize CoTaskMemAlloc CoTaskMemRealloc CoInitialize CreateStreamOnHGlobal ReleaseStgMedium CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes OleCreateStaticFromData OleSetContainedObject RevokeDragDrop OleDuplicateData CoSetProxyBlanket CoInitializeSecurity CoInitializeEx OleRun RegisterDragDrop

oleaut32

VariantChangeType SetErrorInfo GetErrorInfo CreateErrorInfo VarDateFromStr SystemTimeToVariantTime VariantTimeToSystemTime VariantClear VariantCopy VariantInit SysStringByteLen SysAllocStringByteLen VarBstrCmp SysAllocStringLen SysAllocString VarUI4FromStr LoadRegTypeLi LoadTypeLi SysStringLen SysFreeString

shlwapi

PathCanonicalizeW StrToIntExW ord176 PathIsPrefixW PathCombineW StrFormatByteSizeW PathRelativePathToW StrStrIW ord487 PathAppendW PathFileExistsW PathIsDirectoryW PathRemoveFileSpecW PathFindFileNameW PathRemoveExtensionW PathAddBackslashW PathCommonPrefixW StrCmpIW SHGetValueW PathSearchAndQualifyW SHDeleteKeyW SHDeleteValueW PathRemoveBackslashW PathRemoveFileSpecA PathAppendA PathSearchAndQualifyA StrCpyNW SHSetValueW AssocQueryStringW UrlGetPartW PathIsRootW

comctl32

ord17 DrawShadowText InitCommonControlsEx

msimg32

AlphaBlend

dbghelp

ImageNtHeader ImageDirectoryEntryToData

wininet

InternetOpenW InternetSetOptionW InternetConnectW HttpOpenRequestW HttpSendRequestW HttpQueryInfoW InternetCrackUrlW InternetSetFilePointer InternetReadFile InternetCloseHandle

gdiplus

GdipCreateFont GdipDeleteFontFamily GdipCreateFontFamilyFromName GdipDrawString GdipSetTextRenderingHint GdipCreateSolidFill GdipCloneBrush GdipDeleteBrush GdipGetImageEncoders GdipGetImageEncodersSize GdipBitmapLockBits GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromHICON GdipCreateBitmapFromHBITMAP GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipCreateBitmapFromStreamICM GdiplusStartup GdipCreateBitmapFromFileICM GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipSaveImageToFile GdipCloneImage GdipLoadImageFromStream GdipLoadImageFromStreamICM GdipLoadImageFromFile GdipLoadImageFromFileICM GdipDrawImageRectRectI GdipDrawImageRectI GdipSetSmoothingMode GdipSetInterpolationMode GdipDeleteGraphics GdipGetImageGraphicsContext GdipCreateFromHDC GdipDisposeImage GdipAlloc GdipFree GdipDeleteFont GdipCreateBitmapFromFile

secur32

GetUserNameExW

crypt32

CryptBinaryToStringA CryptBinaryToStringW CryptStringToBinaryA CryptStringToBinaryW CertGetNameStringW

wtsapi32

WTSQueryUserToken

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

netapi32

Netbios

ws2_32

__WSAFDIsSet WSAGetLastError gethostbyname inet_ntoa gethostname ntohl recvfrom WSASetLastError sendto closesocket getaddrinfo WSACleanup socket WSAStartup setsockopt freeaddrinfo select recv getservbyname htonl shutdown ioctlsocket listen accept WSAIoctl ntohs htons getsockopt getsockname getpeername connect bind send

wldap32

ord79 ord133 ord147 ord301 ord46 ord167 ord142 ord14 ord127 ord27 ord26 ord118 ord41 ord208 ord216 ord145

iphlpapi

GetAdaptersInfo GetIpAddrTable

wintrust

CryptCATCatalogInfoFromContext CryptCATAdminEnumCatalogFromHash CryptCATAdminReleaseContext CryptCATAdminAcquireContext WTHelperProvDataFromStateData WinVerifyTrust CryptCATAdminCalcHashFromFileHandle CryptCATAdminReleaseCatalogContext

Name

.text

Size

4.7MB

Virtual Size

4.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

814KB

Virtual Size

813KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

60KB

Virtual Size

169KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

55.7MB

Virtual Size

55.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

196KB

Virtual Size

196KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_e6e35984a8d6f2bcb12dcae843fa399a_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-stealer_magniber_njrat_revil_smoke-loader

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

dbghelp

wininet

gdiplus

secur32

crypt32

wtsapi32

userenv

netapi32

ws2_32

wldap32

iphlpapi

wintrust

generic