Thanks to D_Biel for some offline help!
We have tracked this to the inclusion of wininet.dll in the distribution kit. It is Known Issue 312179. The solution is to simply remove wininet.dll from the distribution kit and rely on the dll that is part of the Windows install on the target machine.
--Ian