2026-09-16_550c4a7fc47c54149138d72bfe3f22c0_akira_cobalt-strike_coinminer_glassworm_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-16_550c4a7fc47c54149138d72bfe3f22c0_akira_cobalt-strike_coinminer_glassworm_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar
Size 21.7MB
Sample260916-1dfvcaee44
SHA256 1eac48704aa5e4291b17e82694cbeb50c7e10053d2a0214a7a9fa3a322d74e94
MD5 550c4a7fc47c54149138d72bfe3f22c0
SHA1 1b9827f75c6f7fa16724eb801bb2b704ceaf334a
SHA512 52df142416ee2a1d6c8057fa77904b220a6f94c0edd3b7191e36cdc42a64f0dc5a46afed716604263c18002d9e4f851385520a96b7782a96e7bfc9d5b7476f64
SSDEEP 393216:XUvarI1Ryvy201orU3SKiGBapPKrU30JS+:XUefrWSyaIrW
TLSH
T1ED37CE06BA9A45E8C099C874C2864A179B72B4D70736B7EF07D406292F7BBE11F3D316
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Insecure Codesign Algorithm 1 IoCs

File was codesigned using an insecure algorithm.

resource
2026-09-16_550c4a7fc47c54149138d72bfe3f22c0_akira_cobalt-strike_coinminer_glassworm_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar

File Explorer

2026-09-16_550c4a7fc47c54149138d72bfe3f22c0_akira_cobalt-strike_coinminer_glassworm_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar

.exe 21.7MB

2026-09-16_550c4a7fc47c54149138d72bfe3f22c0_akira_cobalt-strike_coinminer_glassworm_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar

IMPHASH 7f37a240a5841640d810d4621734c2f3
SHA256 1eac48704aa5e4291b17e82694cbeb50c7e10053d2a0214a7a9fa3a322d74e94
MD5 550c4a7fc47c54149138d72bfe3f22c0
SHA1 1b9827f75c6f7fa16724eb801bb2b704ceaf334a
SHA512 52df142416ee2a1d6c8057fa77904b220a6f94c0edd3b7191e36cdc42a64f0dc5a46afed716604263c18002d9e4f851385520a96b7782a96e7bfc9d5b7476f64
SSDEEP 393216:XUvarI1Ryvy201orU3SKiGBapPKrU30JS+:XUefrWSyaIrW
TLSH
T1ED37CE06BA9A45E8C099C874C2864A179B72B4D70736B7EF07D406292F7BBE11F3D316
MD5 SHA1 SHA512 SSDEEP TLSH

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

b4:72:a2:e8:f1:17:89:a0:db:eb:78:ab:5d:df:2b:46:54:69:48:45:8c:f7:66:60:4e:5d:d2:48:95:55:02:60:73:8e:83:a4:05:06:f8:cf:b2:3b:68:ac:5d:7f:c1:9f:d7:81:15:0d:0c:95:2a:33:bc:2b:23:a2:13:05:cb:e1

Digest Algorithm

sha512

PE Digests Matches

Trusted

Signing Certificate

CN=Dell Technologies Inc.,OU=DUP Client Creation Service,O=Dell Technologies Inc.,L=Round Rock,ST=Texas,C=US

Chains

Sep 8, 2026

CN=Dell Technologies Inc.,OU=DUP Client Creation Service,O=Dell Technologies Inc.,L=Round Rock,ST=Texas,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Dell Technologies Inc.,OU=DUP Client Creation Service,O=Dell Technologies Inc.,L=Round Rock,ST=Texas,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Dell Technologies Inc.,OU=DUP Client Creation Service,O=Dell Technologies Inc.,L=Round Rock,ST=Texas,C=US

Serial Number

07:49:06:85:fd:49:82:65:0e:bf:1b:a1:7c:16:43:3d

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 7, 2026 - May 7, 2027

Subject

CN=DigiCert SHA512 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

0c:68:21:84:d3:7f:b8:56:8e:82:5f:c5:d6:18:f6:30

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

9299848

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

SelfExtractable.pdb

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

kernel32

WriteFileEx GetModuleHandleW CreateThread GetFullPathNameW CreateFileW SetFileTime FindFirstFileExW GetFileInformationByHandle GetFileInformationByHandleEx ReadConsoleW GetSystemTimePreciseAsFileTime WaitForMultipleObjects GetOverlappedResult CreateEventW CancelIo ReadFile GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetModuleFileNameW GetTempPathW DeleteFileW CopyFileExW CreateSymbolicLinkW SetFilePointerEx FindNextFileW PostQueuedCompletionStatus SetConsoleCtrlHandler CreateIoCompletionPort GlobalFree LoadLibraryExA FreeLibrary SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable InitializeConditionVariable ReadFileEx GetCurrentProcessId RemoveDirectoryW FindFirstFileW GetFileAttributesW CreateDirectoryW ResetEvent IsProcessorFeaturePresent WriteConsoleW GetSystemInfo GetNativeSystemInfo SleepEx GetProcAddress GetModuleHandleA GetExitCodeProcess TerminateProcess GetCurrentThread SetThreadStackGuarantee LoadLibraryExW GetConsoleOutputCP GetModuleHandleExW FindClose GetDriveTypeW SetLastError PeekNamedPipe ExitProcess ExitThread GetConsoleMode LocalFree DeviceIoControl DuplicateHandle GetDiskFreeSpaceExA ReleaseMutex CreateMutexW Sleep WaitForSingleObject SetWaitableTimer CreateWaitableTimerExW SetFileInformationByHandle MoveFileExW FreeLibraryAndExitThread FlushFileBuffers LoadLibraryA GetFileSizeEx GetFileAttributesExW SetEndOfFile SystemTimeToTzSpecificLocalTime SystemTimeToFileTime GetTimeZoneInformationForYear GetFinalPathNameByHandleW GetQueuedCompletionStatusEx GetCurrentProcess CloseHandle GetCurrentThreadId GetStdHandle CreateMutexA WaitForSingleObjectEx GetStartupInfoW SwitchToThread GetLastError SetUnhandledExceptionFilter InitializeSListHead IsDebuggerPresent GetStringTypeW SleepConditionVariableCS EncodePointer LCMapStringEx GetCPInfo OutputDebugStringW RtlUnwindEx RtlPcToFileHeader GetCommandLineA CompareStringW LCMapStringW UnhandledExceptionFilter GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetTimeZoneInformation IsValidCodePage GetOEMCP ReadConsoleA SetConsoleMode LoadLibraryW GetSystemDirectoryA CreateSemaphoreA GetExitCodeThread ReleaseSemaphore TryEnterCriticalSection GetACP RtlUnwind WriteFile GetFileType AcquireSRWLockShared AcquireSRWLockExclusive ReleaseSRWLockShared ReleaseSRWLockExclusive InitializeSRWLock GetTickCount64 InitOnceExecuteOnce UnregisterWait RegisterWaitForSingleObject TlsFree TlsSetValue TlsGetValue TlsAlloc GetSystemDefaultLangID SetStdHandle FormatMessageA LeaveCriticalSection EnterCriticalSection InitializeCriticalSection FileTimeToSystemTime GetSystemTimeAsFileTime FileTimeToLocalFileTime CreateEventA SetEvent FindResourceW SizeofResource LockResource LoadResource FindResourceExW GetFileAttributesA CreateDirectoryA CopyFileW GetTimeFormatW GetDateFormatW GetSystemTime GetStartupInfoA GetModuleFileNameA CreateProcessA FindNextFileA FindFirstFileA GetCurrentDirectoryA SetCurrentDirectoryA GetSystemFirmwareTable HeapSize HeapDestroy InitializeCriticalSectionEx ExpandEnvironmentStringsA FindFirstVolumeA GetLogicalDriveStringsA DeleteCriticalSection InitializeCriticalSectionAndSpinCount RaiseException DecodePointer GetVolumeInformationA FindVolumeClose GlobalAlloc GlobalSize GetCommandLineW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter QueryPerformanceFrequency GetEnvironmentVariableW MultiByteToWideChar GetCurrentDirectoryW SetEnvironmentVariableW CompareStringOrdinal SetCurrentDirectoryW AddVectoredExceptionHandler GetProcessHeap HeapFree HeapReAlloc GlobalLock GlobalUnlock HeapAlloc FormatMessageW WideCharToMultiByte CreateFileMappingW MapViewOfFile VirtualProtect UnmapViewOfFile GetUserPreferredUILanguages RtlCaptureContext RtlLookupFunctionEntry lstrlenW RtlVirtualUnwind

user32

ClipCursor GetClipCursor SetWindowLongPtrW PeekMessageW GetWindowRect TranslateMessage DispatchMessageW AdjustWindowRectEx SetForegroundWindow DestroyWindow GetClientRect SetWindowDisplayAffinity FlashWindowEx GetWindowLongPtrW GetWindowLongW DefWindowProcW SetWindowPos GetSystemMetrics IsIconic IsProcessDPIAware ShowCursor CreateWindowExW SetWindowTextW LoadCursorW SetWindowPlacement GetWindowPlacement SetCursor GetCursorPos SetWindowLongW SendMessageW ShowWindow RegisterWindowMessageA SystemParametersInfoA DestroyCursor TrackPopupMenu SetMenuDefaultItem EnableMenuItem PostMessageW IsWindowVisible CreateIcon DestroyIcon GetSystemMenu GetForegroundWindow GetMenu MessageBoxW MsgWaitForMultipleObjectsEx CloseClipboard GetDC ReleaseDC GetClipboardData OpenClipboard EmptyClipboard RedrawWindow RegisterRawInputDevices ReleaseCapture ChangeDisplaySettingsExW InvalidateRgn GetMonitorInfoW MonitorFromWindow GetRawInputData MapVirtualKeyW MapVirtualKeyExW RegisterClassExW MonitorFromPoint ValidateRect GetActiveWindow SetClipboardData GetKeyboardState GetUserObjectInformationW GetProcessWindowStation GetAsyncKeyState RegisterTouchWindow SendInput GetKeyboardLayout GetKeyState SetCapture CloseTouchInputHandle MonitorFromRect GetTouchInputInfo ScreenToClient TrackMouseEvent ToUnicodeEx ClientToScreen

advapi32

GetLengthSid RevertToSelf ImpersonateAnonymousToken RegEnumKeyExW RegEnumValueW GetTokenInformation RegQueryValueExW LookupAccountSidW RegCreateKeyExW RegDeleteValueW RegSetValueExW EqualSid RegCloseKey RegDeleteKeyExW AllocateAndInitializeSid RegOpenKeyExW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken FreeSid GetUserNameW InitiateSystemShutdownW ConvertStringSecurityDescriptorToSecurityDescriptorW RegisterEventSourceW ReportEventW DeregisterEventSource GetNamedSecurityInfoW ConvertStringSidToSidW SetEntriesInAclW SetNamedSecurityInfoW RegOpenKeyExA RegQueryValueExA CloseServiceHandle OpenSCManagerA OpenServiceA QueryServiceStatusEx ConvertStringSecurityDescriptorToSecurityDescriptorA CheckTokenMembership CryptGenRandom CryptReleaseContext CryptAcquireContextW ReportEventA RegisterEventSourceA

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

ntdll

NtCancelIoFileEx NtWriteFile NtDeviceIoControlFile NtOpenFile NtCreateNamedPipeFile NtReadFile RtlNtStatusToDosError

oleaut32

SafeArrayGetLBound SafeArrayGetElement SafeArrayPutElement SafeArrayDestroy SafeArrayCreateVector SysAllocString SysStringByteLen VariantClear VariantInit SysStringLen SysFreeString SafeArrayCreate SysAllocStringLen VarBstrCat SysAllocStringByteLen SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound GetErrorInfo

shlwapi

AssocQueryStringW

shell32

DragQueryFileW DragFinish SHFileOperationA SHFileOperationW

gdi32

CreateRectRgn DeleteObject GetDeviceCaps DeleteDC SelectObject CreateDIBSection CreateCompatibleDC BitBlt

wintrust

WinVerifyTrust

ole32

CoInitializeSecurity CoCreateInstance CoInitializeEx CoUninitialize CoCreateGuid CoSetProxyBlanket RevokeDragDrop OleInitialize RegisterDragDrop

imm32

ImmSetCompositionWindow ImmReleaseContext ImmAssociateContextEx ImmGetCompositionStringW ImmGetContext ImmSetCandidateWindow

uxtheme

SetWindowTheme

dwmapi

DwmEnableBlurBehindWindow DwmSetWindowAttribute

ws2_32

connect closesocket getservbyname getservbyport gethostbyaddr inet_ntoa getpeername setsockopt inet_addr recvfrom freeaddrinfo socket select ntohs getsockopt getsockname ioctlsocket WSAGetLastError WSASetLastError send recv inet_ntop getnameinfo WSACleanup getaddrinfo WSAStartup sendto gethostbyname shutdown htons htonl

iphlpapi

NotifyIpInterfaceChange CancelMibChangeNotify2 GetAdaptersAddresses GetIpInterfaceEntry

bcrypt

BCryptGenRandom

crypt32

CertOpenSystemStoreW CertFreeCertificateContext CertCloseStore CertFindCertificateInStore

??0CMTRedfishCRUDOperation@@QEAA@AEBV0@@Z ??0CMTRedfishCRUDOperation@@QEAA@XZ ??0DSMIPMIInterfaceImpl@@QEAA@XZ ??1CMTRedfishCRUDOperation@@QEAA@XZ ??1DSMIPMIInterfaceImpl@@UEAA@XZ ??4CMTRedfishCRUDOperation@@QEAAAEAV0@AEBV0@@Z ??4DSMIPMIInterfaceImpl@@QEAAAEAV0@AEBV0@@Z ??_7DSMIPMIInterfaceImpl@@6B@ ?AddAuthInfo@CMTRedfishCRUDOperation@@AEAAXPEAUICMTRedfishOAuthMethod@@AEAUCMTRedfishConnection@@@Z ?AddSocketInfo@CMTRedfishCRUDOperation@@AEAAXAEAUCMTRedfishConnection@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H1@Z ?CreateRedfishBasicAuthIF@API_CMT_REDFISH@@YAHAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0PEAPEAUICMTRedfishBasicAuthMethod@@@Z ?CreateRedfishCRUDInterfaceObj@CMTRedfishCRUDOperation@@AEAAPEAVICMTRedfishCRUDInterface@@W4CMT_REDFISH_URL_CALL_TYPE@@@Z ?CreateRedfishInventoryIF@API_CMT_REDFISH@@YAHAEBUCMTRedfishConnection@@PEAPEAUICMTRedfishSoftwareInventory@@@Z ?CreateRedfishOAuthAuthIF@API_CMT_REDFISH@@YAHPEAPEAUICMTRedfishOAuthMethod@@@Z ?CreateRedfishSystemActionIF@API_CMT_REDFISH@@YAHAEBUCMTRedfishConnection@@PEAPEAUICMTRedfishSystemAction@@@Z ?CreateRedfishSystemInfoIF@API_CMT_REDFISH@@YAHAEBUCMTRedfishConnection@@PEAPEAUICMTRedfishSystemInfo@@@Z ?CreateRedfishUpdateIF@API_CMT_REDFISH@@YAHAEBUCMTRedfishConnection@@PEAPEAUICMTRedfishSoftwareUpdate@@@Z ?CreateUsbnicInterface@API_CMT_REDFISH@@YAHPEAPEAUICMTUsbnicInterface@@@Z ?ExecuteRedfishCall@CMTRedfishCRUDOperation@@QEAAHW4CMT_REDFISH_URL_CALL_TYPE@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAV34@11@Z ?Finalize@API_CMT_REDFISH@@YAHXZ ?FinalizeRedfishInterface@CMTRedfishCRUDOperation@@AEAAXXZ ?GetConnectedBMCType@CMTRedfishCRUDOperation@@QEAA?AW4CMT_BMC_TYPES@@XZ ?GetSystemGeneration@API_CMT_REDFISH@@YAHXZ ?IPMIRequest@DSMIPMIInterfaceImpl@@QEAAIPEAU_DSMIPMICommandData@@@Z ?Initialize@API_CMT_REDFISH@@YAHAEBUCMTRedfishLibInitParam@@@Z ?Initialize@DSMIPMIInterfaceImpl@@QEAAIPEBU_DSMIPMIConfiguration@@@Z ?Initialize@DSMIPMIInterfaceImpl@@QEAAIVDSMString@@@Z ?InitializeDSMLogger@DSMIPMIInterfaceImpl@@AEAAXXZ ?InitializeRedfishInterface@CMTRedfishCRUDOperation@@AEAAHXZ ?Release@DSMIPMIInterfaceImpl@@QEAAIXZ ?SetBMCType@CMTRedfishCRUDOperation@@AEAAHAEAW4CMT_BMC_TYPES@@@Z ?USBNicInterfaceDisable@CMTRedfishCRUDOperation@@AEAAHPEAUICMTUsbnicInterface@@@Z ?USBNicInterfaceEnable@CMTRedfishCRUDOperation@@AEAAHPEAUICMTUsbnicInterface@@AEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEAH1@Z ?freePMInfo@@YAHPEAUPMInfo@@@Z ?getHttpStatus@CMTRedfishCRUDOperation@@QEAAHXZ ?getPMInfo@@YAHHPEAPEAUPMInfo@@@Z ?getPMStatus@@YAHXZ ?getResponseBody@CMTRedfishCRUDOperation@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?getResponseHeader@CMTRedfishCRUDOperation@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?getTestPMInfo@@YAHHPEAPEAUPMInfo@@@Z get_redfish_pm_details

Name

.text

Size

9.2MB

Virtual Size

9.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.1MB

Virtual Size

4.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

175KB

Virtual Size

198KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

400KB

Virtual Size

400KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

115KB

Virtual Size

114KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-16_550c4a7fc47c54149138d72bfe3f22c0_akira_cobalt-strike_coinminer_glassworm_icedid_megazord_njrat_rusty-stealer_satacom_stealc_vidar

bcryptprimitives

api-ms-win-core-synch-l1-2-0

kernel32

user32

advapi32

version

ntdll

oleaut32

shlwapi

shell32

gdi32

wintrust

ole32

imm32

uxtheme

dwmapi

ws2_32

iphlpapi

bcrypt

crypt32

generic