jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]WebSearch[.]gen[.]578f6744a32d63298c455a8f6c120249

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.WebSearch.gen.578f6744a32d63298c455a8f6c120249
Size 1.2MB
Sample261014-ffslpswt3k
SHA256 a0692466f4354a043443b76694afed846b17364033fc7951d46d7b11d6687d6e
MD5 578f6744a32d63298c455a8f6c120249
SHA1 ce569ff1b442501462d05e23855b0c8d957cab52
SHA512 47f4c9b1325e4e0f07252ad5bf0b28df0e9217f1d98bab5a9090e9640cb9c563fd3e9c06c2e28e11c2f8f440a0a2e2f0a50a5f4c1c59f1259bd5c6ba6b9ddc6d
SSDEEP 24576:+dxzGZtVp1m7Haxq04hvQknbdaZPWXqCqHsSs/zRjWEGFUtaS:EIwAh4hvQknbcZ+XqPHvCtKiES
TLSH
T1B945230226568025CDAB573688D9EB29E5E4BC65FBF11F1A056036243F73B83FD4D3A2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.WebSearch.gen.578f6744a32d63298c455a8f6c120249
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll

Untrusted Codesign Signers 2 IoCs

Codesigned file was signed by an untrusted entity.

resource
unpack001/$PLUGINSDIR/npHelper.dll
unpack001/$_14_/$_14_/$_18_.exe

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.WebSearch.gen.578f6744a32d63298c455a8f6c120249

.exe 1.2MB
$PLUGINSDIR/System.dll

.dll 11KB
$PLUGINSDIR/npHelper.dll

.dll 295KB
$PLUGINSDIR/nsDialogs.dll

.dll 9KB
$PLUGINSDIR/terms.rtf

.rtf 25KB
$_14_/$_14_/$_18_.exe

.exe 2.0MB
$_14_/$_14_/Uninstall.exe.nsis

7KB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.WebSearch.gen.578f6744a32d63298c455a8f6c120249

IMPHASH 4ea4df5d94204fc550be1874e1b77ea7
SHA256 a0692466f4354a043443b76694afed846b17364033fc7951d46d7b11d6687d6e
MD5 578f6744a32d63298c455a8f6c120249
SHA1 ce569ff1b442501462d05e23855b0c8d957cab52
SHA512 47f4c9b1325e4e0f07252ad5bf0b28df0e9217f1d98bab5a9090e9640cb9c563fd3e9c06c2e28e11c2f8f440a0a2e2f0a50a5f4c1c59f1259bd5c6ba6b9ddc6d
SSDEEP 24576:+dxzGZtVp1m7Haxq04hvQknbdaZPWXqCqHsSs/zRjWEGFUtaS:EIwAh4hvQknbcZ+XqPHvCtKiES
TLSH
T1B945230226568025CDAB573688D9EB29E5E4BC65FBF11F1A056036243F73B83FD4D3A2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount CreateFileW GetFileSize MoveFileW SetFileAttributesW GetModuleFileNameW CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode WaitForSingleObject GetCurrentProcess CompareFileTime GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GetDiskFreeSpaceW lstrlenW lstrcpynW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 2e226715419a5882e2e14278940ee8ef0aa648a3ef7af5b3dc252674111962bc
MD5 a4dd044bcd94e9b3370ccf095b31f896
SHA1 17c78201323ab2095bc53184aa8267c9187d5173
SHA512 87335a43b9ca13e1300c7c23e702e87c669e2bcf4f6065f0c684fc53165e9c1f091cc4d79a3eca3910f0518d3b647120ac0be1a68eaade2e75eaa64adfc92c5a
SSDEEP 192:em24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlESl:m8QIl975eXqlWBrz7YLOlE
TLSH
T168325C12135081F3E4918138886B3A276B6A15029BF98E57DFD39646BE21BE3BD7D603
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/npHelper.dll

IMPHASH 6059cb915201f2d893d2aa7c06199129
SHA256 884894a631f0e2585e0414cf26c836b13763b319993126ac28b1d96d2b6f7abc
MD5 131acdb9fb02af0f12e6a3854386caf2
SHA1 9488242580d4de08d86b7ec3a2cf38fcb4b9a057
SHA512 a4fe99f6c4e53568c3331f39f4e2a3215e203f44c121a80231ae9df936d4b0d12150725e9077024a65a25790716a681a2a572d29faee09503351506071d8e59f
SSDEEP 6144:/b0Bj6u2vizcDXjC+fCwzCGrwIUhAO3MZblU:/gx2vSSXmOCAahhmblU
TLSH
T1B5549D21B582C036E0BE05343438D6664ABD7E300FB599EBA7D84E6D4F742C19B35E6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

f8:f7:98:d0:fd:d7:83:77:9c:52:11:08:c5:6e:21:ee:97:1d:8f:74

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=SpringTech Ltd,O=SpringTech Ltd,L=Limassol,ST=Limassol,C=CY

Chains

Oct 7, 2026

CN=SpringTech Ltd,O=SpringTech Ltd,L=Limassol,ST=Limassol,C=CY

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Minor OS version

Major OS version

Entry point

81378

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetFileSize GetModuleFileNameW SizeofResource LockResource LoadResource FindResourceW FindResourceExW HeapDestroy HeapSize HeapReAlloc HeapFree HeapAlloc GetProcessHeap MultiByteToWideChar WideCharToMultiByte InitializeCriticalSectionAndSpinCount RaiseException DecodePointer DeleteCriticalSection CreateToolhelp32Snapshot Process32FirstW SetFilePointer Process32NextW OpenProcess TerminateProcess LoadLibraryW FreeLibrary GetTempPathW FindFirstFileW FindNextFileW FindClose GlobalFree lstrcpyW lstrcpynW GlobalAlloc WriteConsoleW SetEndOfFile GetConsoleCP WriteFile FlushFileBuffers SetStdHandle ReadFile GetLastError GetModuleHandleW GetProcAddress CreateFileW GetCurrentProcessId CloseHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExA EnumSystemLocalesW GetUserDefaultLCID IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection SetLastError CreateEventW Sleep TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime EncodePointer LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId InitializeSListHead RtlUnwind LoadLibraryExW InterlockedFlushSList ExitProcess GetModuleHandleExW GetModuleFileNameA GetACP SetFilePointerEx GetStdHandle GetFileType GetConsoleMode ReadConsoleW IsValidLocale

user32

IsWindow GetWindow GetWindowThreadProcessId wsprintfW SendMessageW GetTopWindow

advapi32

CryptDestroyHash CryptHashData CryptReleaseContext CryptCreateHash CryptAcquireContextW CryptGetHashParam

shell32

CommandLineToArgvW

ole32

CoTaskMemFree

psapi

GetModuleFileNameExW

wininet

InternetCrackUrlW InternetOpenW InternetConnectW HttpOpenRequestW HttpSendRequestW InternetCloseHandle InternetReadFile

$PLUGINSDIR/nsDialogs.dll

IMPHASH e2ee55bddad4241d619d6a8a38e2d869
SHA256 067c77d51df034b4a614f83803140fbf4cd2f8684b88ea8c8acdf163edad085a
MD5 0d45588070cf728359055f776af16ec4
SHA1 c4375ceb2883dee74632e81addbfa4e8b0c6d84a
SHA512 751ebf4c43f100b41f799d0fbf8db118ea8751df029c1f4c4b0daeb0fef200ddf2e41c1c9c55c2dc94f2c841cf6acb7df355e98a2e5877a7797f0f1d41a7e415
SSDEEP 192:ob8cSzvTyl4tgi8pPjQM0PuAg0YNyhIFtSP:mBSzm+t18pZ0WAg0RhIFg
TLSH
T1E412F793E5A820B3C2D3533F35BE2B2EC7B95335B0512C0482739A497A6947A6E38347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7443

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$_14_/$_14_/$_18_.exe

IMPHASH f7b4393490b301edbf957b12e479aa73
SHA256 8a8fcde6287c92b435e947ff15d577bb4553d9265c78e55907b71823cf8dc9fc
MD5 bed5050567df247e174ae41b5f14b04b
SHA1 69d56071412a4350681792a007c51ea59e34bf0e
SHA512 fc2c2fa47a23a7bcab9ec1c37b15cd0cfd3117491d25a4ac65a5b8616393f283461824869ff68aceb60bcf3aad8db13c3289e72da0acd52ec0cb3d4fafd03e1c
SSDEEP 49152:TY2bzYO4kwB+s++jO1QydlMNaXYMHt/uWdMyhx3ivBfrre8FHFO:TPh4kwAdhNHj
TLSH
T1DB95BF247A80C437C13201329E7EE2AD55BD7D229F6548C772DC3E6D1FF86D16A31A2A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

60:05:71:8a:47:40:89:0d:56:6d:18:e9:21:ca:26:6b:15:f7:86:a0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=SpringTech Ltd,O=SpringTech Ltd,L=Limassol,ST=Limassol,C=CY

Chains

Oct 7, 2026

CN=SpringTech Ltd,O=SpringTech Ltd,L=Limassol,ST=Limassol,C=CY

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Minor OS version

Major OS version

Entry point

248951

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Autobuild\Work\trunk\SearchBar\Release\SearchBar.pdb

urlmon

CoInternetSetFeatureEnabled

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

wininet

HttpOpenRequestW InternetOpenW HttpQueryInfoW InternetCrackUrlW HttpSendRequestW InternetReadFile InternetSetOptionW InternetConnectW InternetCloseHandle

kernel32

HeapDestroy GetProcAddress GlobalLock DeleteCriticalSection GetProcessHeap GetModuleHandleW WideCharToMultiByte GetTempFileNameW GlobalUnlock lstrcmpW MulDiv WriteFile CreateFileW CloseHandle GetVersionExW VerSetConditionMask FreeLibrary VerifyVersionInfoW InitializeCriticalSectionAndSpinCount InitializeCriticalSection ReadFile SetNamedPipeHandleState CreateNamedPipeW DisconnectNamedPipe QueueUserWorkItem CreateEventW SetEvent WaitForSingleObjectEx WaitNamedPipeW ConnectNamedPipe FlushFileBuffers GetCommandLineW GetCurrentProcessId lstrcmpiW LoadLibraryExW K32GetModuleFileNameExW GetTempPathW LocalAlloc GetFileAttributesW OpenProcess SetFileAttributesW CreateToolhelp32Snapshot GetPrivateProfileStringW Process32NextW Process32FirstW LocalFree CopyFileW MoveFileW FindClose EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetFileType GetACP GetStdHandle ExitProcess GetModuleHandleExW ExitThread HeapAlloc GetSystemInfo RtlUnwind UnregisterWaitEx QueryDepthSList InterlockedFlushSList ReleaseSemaphore VirtualProtect GetModuleHandleA FreeLibraryAndExitThread GetThreadTimes UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation GetThreadPriority SetThreadPriority CreateThread SwitchToThread SignalObjectAndWait CreateTimerQueue GetStartupInfoW TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter ResetEvent OutputDebugStringW IsDebuggerPresent LoadLibraryExA VirtualFree VirtualAlloc IsProcessorFeaturePresent FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead GetLocaleInfoW LCMapStringW CompareStringW GetCPInfo EncodePointer GetTickCount GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc QueryPerformanceCounter GetCurrentThread GetCurrentProcess DuplicateHandle TryEnterCriticalSection GetStringTypeW FindResourceW LoadResource FindResourceExW LoadLibraryW RaiseException HeapReAlloc DeleteFileW GlobalAlloc LockResource GetLastError Sleep MultiByteToWideChar HeapSize GetCurrentThreadId InitializeCriticalSectionEx LeaveCriticalSection GetModuleFileNameW EnterCriticalSection SetLastError HeapFree SizeofResource DecodePointer FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetConsoleCP GetConsoleMode SetFilePointerEx WriteConsoleW VirtualQuery

user32

SetForegroundWindow InvalidateRect ReleaseDC BeginPaint EndPaint EnableWindow GetWindowTextW SetWindowContextHelpId UnhookWindowsHookEx GetForegroundWindow CallNextHookEx CloseWindow IsWindowVisible GetCursorPos FillRect ReleaseCapture DialogBoxParamW RegisterWindowMessageW GetParent GetClassInfoExW GetDesktopWindow SetWindowsHookExW MapDialogRect GetMessageW GetKeyState DispatchMessageW SetLayeredWindowAttributes TranslateMessage EndDialog SetDlgItemTextW MapWindowPoints KillTimer GetUpdateRect SetCursor DrawTextW GetWindowLongW GetWindowTextLengthW DefWindowProcW CallWindowProcW PostMessageW GetWindow GetWindowRect GetFocus DestroyWindow GetDC SetWindowPos MonitorFromWindow GetClientRect CreateWindowExW DeleteMenu ScreenToClient SendMessageW GetSystemMetrics UnregisterClassW SetWindowTextW CreatePopupMenu SetMenuItemBitmaps RegisterClassExW TrackPopupMenu GetActiveWindow ShowWindow IsWindow InvalidateRgn SetTimer RedrawWindow GetMonitorInfoW ClientToScreen DestroyAcceleratorTable IsChild GetSysColor IsWindowEnabled MoveWindow CreateAcceleratorTableW LoadBitmapW DestroyMenu SetFocus CharNextW LoadIconW LoadCursorW GetClassNameW SetCapture InsertMenuW SetWindowLongW GetDlgItem

gdi32

BitBlt CreateCompatibleBitmap SelectObject CreateCompatibleDC GetDeviceCaps DeleteDC GetObjectW DeleteObject CreateSolidBrush CreateFontIndirectW ExtTextOutW SetBkColor SetViewportOrgEx SetTextColor SetBkMode GetStockObject

advapi32

RegQueryValueExW GetTokenInformation RegCloseKey RegQueryInfoKeyW RegDeleteKeyW RegCreateKeyExW RegEnumKeyExW RegSetValueExW RegOpenKeyExW RegDeleteValueW GetSecurityDescriptorSacl SetSecurityDescriptorDacl GetSecurityDescriptorDacl GetSecurityDescriptorGroup GetSecurityDescriptorControl GetSecurityDescriptorOwner InitializeSecurityDescriptor GetSecurityDescriptorLength MakeSelfRelativeSD CopySid IsValidSid GetLengthSid OpenProcessToken ConvertSidToStringSidW DuplicateTokenEx

shell32

ShellExecuteExW SHAppBarMessage CommandLineToArgvW Shell_NotifyIconW

ole32

CoCreateInstance CLSIDFromProgID CoTaskMemFree CreateStreamOnHGlobal OleInitialize CLSIDFromString OleLockRunning CoTaskMemRealloc CoGetClassObject OleUninitialize CoTaskMemAlloc StringFromGUID2

oleaut32

SysAllocStringLen VariantClear SysAllocString OleCreateFontIndirect VarBstrCat VarUI4FromStr SysFreeString LoadTypeLi VariantInit LoadRegTypeLi DispCallFunc SysStringLen

shlwapi

PathFindFileNameW PathRemoveExtensionW PathFileExistsW PathAppendW

userenv

UnloadUserProfile

uxtheme

OpenThemeData DrawThemeText GetThemeSysColor CloseThemeData

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.WebSearch.gen.578f6744a32d63298c455a8f6c120249

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/npHelper.dll

PE Signature issue

kernel32

user32

advapi32

shell32

ole32

psapi

wininet

generic

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/terms.rtf

$_14_/$_14_/$_18_.exe

PE Signature issue

urlmon

version

wininet

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

userenv

uxtheme

generic

$_14_/$_14_/Uninstall.exe.nsis