initialize IWebBrowser2

rule:
  meta:
    name: initialize IWebBrowser2
    namespace: communication/http
    authors:
      - matthew.williams@mandiant.com
    scopes:
      static: basic block
      dynamic: unsupported  # requires bytes features
    mbc:
      - Communication::HTTP Communication::IWebBrowser [C0002.010]
    references:
      - https://docs.microsoft.com/en-us/previous-versions/windows/internet-explorer/ie-developer/platform-apis/aa752127(v%3Dvs.85)
    examples:
      - 395EB0DDD99D2C9E37B6D0B73485EE9C:0x402130
  features:
    - and:
      - api: ole32.CoCreateInstance
      - bytes: 01 DF 02 00 00 00 00 00 C0 00 00 00 00 00 00 46 = CLSID_InternetExplorer
      - bytes: 61 16 0C D3 AF CD D0 11 8A 3E 00 C0 4F C9 E2 6E = IID_IWebBrowser2