| File name: | FileZilla_3.68.1_win64_sponsored2-setup.exe |
| Full analysis: | https://app.any.run/tasks/100843e9-7baa-4b7a-8f55-93ba98302630 |
| Verdict: | Malicious activity |
| Threats: | Adware is a form of malware that targets users with unwanted advertisements, often disrupting their browsing experience. It typically infiltrates systems through software bundling, malicious websites, or deceptive downloads. Once installed, it may track user activity, collect sensitive data, and display intrusive ads, including pop-ups or banners. Some advanced adware variants can bypass security measures and establish persistence on devices, making removal challenging. Additionally, adware can create vulnerabilities that other malware can exploit, posing a significant risk to user privacy and system security. |
| Analysis date: | November 14, 2024, 19:16:16 |
| OS: | Windows 10 Professional (build: 19045, 64 bit) |
| Tags: | |
| Indicators: | |
| MIME: | application/vnd.microsoft.portable-executable |
| File info: | PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections |
| MD5: | 41E39E83D12AA385F007FE751B9B8B59 |
| SHA1: | FEF145C600566BDC6E1F989BE7F7F3C7FFA2E4BA |
| SHA256: | 5065624A6AC6562CC5DA499CF170F5956189DABA093AA622E63DCCD70A2B3749 |
| SSDEEP: | 98304:Kqo+6Kz8QVqhHD/zbJrUi8U/D51BMOiK0G/qkqcXLvlQV6FNtCCsXJPBWifQODL3:KWF0hKDGcAQh9o53t4WElv7IX0q |
| .exe | | | Win32 Executable MS Visual C++ (generic) (67.4) |
|---|---|---|
| .dll | | | Win32 Dynamic Link Library (generic) (14.2) |
| .exe | | | Win32 Executable (generic) (9.7) |
| .exe | | | Generic Win/DOS Executable (4.3) |
| .exe | | | DOS Executable Generic (4.3) |
| MachineType: | Intel 386 or later, and compatibles |
|---|---|
| TimeStamp: | 2023:07:02 02:09:43+00:00 |
| ImageFileCharacteristics: | No relocs, Executable, No line numbers, No symbols, 32-bit |
| PEType: | PE32 |
| LinkerVersion: | 6 |
| CodeSize: | 26624 |
| InitializedDataSize: | 139776 |
| UninitializedDataSize: | 2048 |
| EntryPoint: | 0x3645 |
| OSVersion: | 4 |
| ImageVersion: | 6 |
| SubsystemVersion: | 4 |
| Subsystem: | Windows GUI |
| FileVersionNumber: | 3.68.1.0 |
| ProductVersionNumber: | 3.68.1.0 |
| FileFlagsMask: | 0x0000 |
| FileFlags: | (none) |
| FileOS: | Win32 |
| ObjectFileType: | Executable application |
| FileSubtype: | - |
| LanguageCode: | English (U.S.) |
| CharacterSet: | Unicode |
| CompanyName: | Tim Kosse |
| FileDescription: | FileZilla FTP Client |
| FileVersion: | 3.68.1 |
| LegalCopyright: | Tim Kosse |
| OriginalFileName: | FileZilla_3.68.1_win32-setup.exe |
| ProductName: | FileZilla |
| ProductVersion: | 3.68.1 |
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 632 | "C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --field-trial-handle=6408,i,2415365188275512644,14780031622391212856,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:8 | C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe | — | AvastBrowser.exe | |||||||||||
User: admin Company: Gen Digital Inc. Integrity Level: MEDIUM Description: Avast Secure Browser Exit code: 0 Version: 130.0.27176.93 | |||||||||||||||
| 780 | "C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --field-trial-handle=2120,i,17678943120727202168,16340811310850113376,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:3 | C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe | AvastBrowser.exe | ||||||||||||
User: admin Company: Gen Digital Inc. Integrity Level: MEDIUM Description: Avast Secure Browser Exit code: 0 Version: 130.0.27176.93 Modules
| |||||||||||||||
| 780 | "C:\Program Files\AVAST Software\Browser\Application\130.0.27176.93\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --force-configure-user-settings | C:\Program Files\AVAST Software\Browser\Application\130.0.27176.93\Installer\chrmstp.exe | — | AvastBrowser.exe | |||||||||||
User: admin Company: Gen Digital Inc. Integrity Level: MEDIUM Description: Avast Secure Browser Installer Exit code: 0 Version: 130.0.27176.93 | |||||||||||||||
| 848 | "C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --string-annotations=is-enterprise-managed=no --field-trial-handle=4876,i,2415365188275512644,14780031622391212856,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:8 | C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe | — | AvastBrowser.exe | |||||||||||
User: admin Company: Gen Digital Inc. Integrity Level: LOW Description: Avast Secure Browser Exit code: 0 Version: 130.0.27176.93 | |||||||||||||||
| 916 | "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /ping 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-PGh3IHBoeXNtZW1vcnk9IjQiIHNzZT0iMSIgc3NlMj0iMSIgc3NlMz0iMSIgc3NzZTM9IjEiIHNzZTQxPSIxIiBzc2U0Mj0iMSIgYXZ4PSIxIi8-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMTkwNDUuNDA0NiIgc3A9IiIgYXJjaD0ieDY0Ii8-PGFwcCBhcHBpZD0iezZEMzdDNzYwLThGRUQtNDhBNS1BNEE0LUNFQzA5NUIyRDhERH0iIHZlcnNpb249IiIgbmV4dHZlcnNpb249IjEuOC4xNjk3LjYiIGxhbmc9ImVuLVVTIiBicmFuZD0iNjE1OCIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIGluc3RhbGxfdGltZV9tcz0iODkxIi8-PC9hcHA-PC9yZXF1ZXN0Pg | C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe | AvastBrowserUpdate.exe | ||||||||||||
User: admin Company: Gen Digital Inc. Integrity Level: HIGH Description: Avast Browser Exit code: 0 Version: 1.8.1697.6 Modules
| |||||||||||||||
| 1028 | "C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=gpu-process --string-annotations=is-enterprise-managed=no --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2056,i,17678943120727202168,16340811310850113376,262144 --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:2 | C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe | — | AvastBrowser.exe | |||||||||||
User: admin Company: Gen Digital Inc. Integrity Level: LOW Description: Avast Secure Browser Exit code: 0 Version: 130.0.27176.93 Modules
| |||||||||||||||
| 1176 | "C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --field-trial-handle=4396,i,17678943120727202168,16340811310850113376,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8 | C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe | — | AvastBrowser.exe | |||||||||||
User: admin Company: Gen Digital Inc. Integrity Level: MEDIUM Description: Avast Secure Browser Exit code: 0 Version: 130.0.27176.93 Modules
| |||||||||||||||
| 1252 | "C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3332,i,17678943120727202168,16340811310850113376,262144 --variations-seed-version --mojo-platform-channel-handle=3152 /prefetch:1 | C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe | — | AvastBrowser.exe | |||||||||||
User: admin Company: Gen Digital Inc. Integrity Level: LOW Description: Avast Secure Browser Exit code: 0 Version: 130.0.27176.93 Modules
| |||||||||||||||
| 1280 | "C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations=is-enterprise-managed=no --field-trial-handle=4712,i,17678943120727202168,16340811310850113376,262144 --variations-seed-version --mojo-platform-channel-handle=4664 /prefetch:8 | C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe | — | AvastBrowser.exe | |||||||||||
User: admin Company: Gen Digital Inc. Integrity Level: LOW Description: Avast Secure Browser Exit code: 0 Version: 130.0.27176.93 | |||||||||||||||
| 1432 | "C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --string-annotations=is-enterprise-managed=no --field-trial-handle=4236,i,2415365188275512644,14780031622391212856,262144 --variations-seed-version --mojo-platform-channel-handle=4100 /prefetch:8 | C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe | — | AvastBrowser.exe | |||||||||||
User: admin Company: Gen Digital Inc. Integrity Level: LOW Description: Avast Secure Browser Exit code: 0 Version: 130.0.27176.93 | |||||||||||||||
| (PID) Process: | (6100) FileZilla_3.68.1_win64_sponsored2-setup.exe | Key: | HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\GCAPITemp |
| Operation: | write | Name: | test |
Value: te | |||
| (PID) Process: | (6100) FileZilla_3.68.1_win64_sponsored2-setup.exe | Key: | HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\GCAPITemp |
| Operation: | delete value | Name: | test |
Value: te | |||
| (PID) Process: | (6100) FileZilla_3.68.1_win64_sponsored2-setup.exe | Key: | HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\GCAPITemp |
| Operation: | delete key | Name: | (default) |
Value: | |||
| (PID) Process: | (6100) FileZilla_3.68.1_win64_sponsored2-setup.exe | Key: | HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
| (PID) Process: | (6100) FileZilla_3.68.1_win64_sponsored2-setup.exe | Key: | HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies |
| Operation: | write | Name: | CachePrefix |
Value: Cookie: | |||
| (PID) Process: | (6100) FileZilla_3.68.1_win64_sponsored2-setup.exe | Key: | HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History |
| Operation: | write | Name: | CachePrefix |
Value: Visited: | |||
| (PID) Process: | (6840) avast_secure_browser_setup.exe | Key: | HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Browser |
| Operation: | write | Name: | installer_run_count |
Value: 1 | |||
| (PID) Process: | (6840) avast_secure_browser_setup.exe | Key: | HKEY_LOCAL_MACHINE\SOFTWARE\AVAST Software\Browser |
| Operation: | write | Name: | machine_id |
Value: 0000B0E1009ABA5E95F7227E57434874 | |||
| (PID) Process: | (6840) avast_secure_browser_setup.exe | Key: | HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Browser |
| Operation: | write | Name: | machine_id |
Value: 0000B0E1009ABA5E95F7227E57434874 | |||
| (PID) Process: | (6840) avast_secure_browser_setup.exe | Key: | HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content |
| Operation: | write | Name: | CachePrefix |
Value: | |||
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 3912 | FileZilla_3.68.1_win64_sponsored2-setup.exe | C:\Users\admin\AppData\Local\Temp\nstB81F.tmp\System.dll | executable | |
MD5:4ADD245D4BA34B04F213409BFE504C07 | SHA256:9111099EFE9D5C9B391DC132B2FAF0A3851A760D4106D5368E30AC744EB42706 | |||
| 6100 | FileZilla_3.68.1_win64_sponsored2-setup.exe | C:\Users\admin\AppData\Local\Temp\nsvBBC9.tmp\UserInfo.dll | executable | |
MD5:D458B8251443536E4A334147E0170E95 | SHA256:4913D4CCCF84CD0534069107CFF3E8E2F427160CAD841547DB9019310AC86CC7 | |||
| 6100 | FileZilla_3.68.1_win64_sponsored2-setup.exe | C:\Users\admin\AppData\Local\Temp\nshD8CA.tmp | image | |
MD5:3944AC469603D2D37D4D07D2A4461E03 | SHA256:99F62EAB1E884811C056FD7441249C4D0A41B34386D8B8B03F20CA0113F9FA48 | |||
| 3912 | FileZilla_3.68.1_win64_sponsored2-setup.exe | C:\Users\admin\AppData\Local\Temp\nstB81F.tmp\UAC.dll | executable | |
MD5:ADB29E6B186DAA765DC750128649B63D | SHA256:2F7F8FC05DC4FD0D5CDA501B47E4433357E887BBFED7292C028D99C73B52DC08 | |||
| 6100 | FileZilla_3.68.1_win64_sponsored2-setup.exe | C:\Users\admin\AppData\Local\Temp\nsvBBC9.tmp\UAC.dll | executable | |
MD5:ADB29E6B186DAA765DC750128649B63D | SHA256:2F7F8FC05DC4FD0D5CDA501B47E4433357E887BBFED7292C028D99C73B52DC08 | |||
| 6100 | FileZilla_3.68.1_win64_sponsored2-setup.exe | C:\Users\admin\AppData\Local\Temp\nsvBBC9.tmp\System.dll | executable | |
MD5:4ADD245D4BA34B04F213409BFE504C07 | SHA256:9111099EFE9D5C9B391DC132B2FAF0A3851A760D4106D5368E30AC744EB42706 | |||
| 6100 | FileZilla_3.68.1_win64_sponsored2-setup.exe | C:\Users\admin\AppData\Local\Temp\nsvBBC9.tmp\nsDialogs.dll | executable | |
MD5:1D8F01A83DDD259BC339902C1D33C8F1 | SHA256:4B7D17DA290F41EBE244827CC295CE7E580DA2F7E9F7CC3EFC1ABC6898E3C9ED | |||
| 6100 | FileZilla_3.68.1_win64_sponsored2-setup.exe | C:\Users\admin\AppData\Local\Temp\nsvBBC9.tmp\modern-wizard.bmp | image | |
MD5:CBE40FD2B1EC96DAEDC65DA172D90022 | SHA256:3AD2DC318056D0A2024AF1804EA741146CFC18CC404649A44610CBF8B2056CF2 | |||
| 6840 | avast_secure_browser_setup.exe | C:\Users\admin\AppData\Local\Temp\nse2AEE.tmp\FF.places.tmp | — | |
MD5:— | SHA256:— | |||
| 6100 | FileZilla_3.68.1_win64_sponsored2-setup.exe | C:\Users\admin\AppData\Local\Microsoft\Windows\INetCache\IE\RR3E01RZ\AvastImage[1].bmp | image | |
MD5:1D3412FB6A97AF76D06C5A3A8155325B | SHA256:018BDCA28E7DA0D2B7CF8FFFE5833355D6BC653DAF4D5821C78AB68B1639CB9E | |||
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
6100 | FileZilla_3.68.1_win64_sponsored2-setup.exe | POST | 200 | 18.245.86.105:80 | http://api.playanext.com/httpapi | unknown | — | — | whitelisted |
748 | lsass.exe | GET | 200 | 18.66.142.79:80 | http://ocsp.rootca1.amazontrust.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8%2B5VZ5%2Fa9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwdzEkzUBtJnwJkc3SmanzgxeYU%3D | unknown | — | — | unknown |
4360 | SearchApp.exe | GET | 200 | 192.229.221.95:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAI5PUjXAkJafLQcAAsO18o%3D | unknown | — | — | whitelisted |
— | — | GET | 200 | 88.221.169.152:80 | http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl | unknown | — | — | whitelisted |
6100 | FileZilla_3.68.1_win64_sponsored2-setup.exe | POST | 200 | 18.245.86.105:80 | http://api.playanext.com/httpapi | unknown | — | — | whitelisted |
5488 | MoUsoCoreWorker.exe | GET | 200 | 88.221.169.152:80 | http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl | unknown | — | — | whitelisted |
5488 | MoUsoCoreWorker.exe | GET | 200 | 2.16.164.106:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
— | — | GET | 200 | 2.16.164.106:80 | http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl | unknown | — | — | whitelisted |
2364 | svchost.exe | GET | 200 | 192.229.221.95:80 | http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D | unknown | — | — | whitelisted |
6100 | FileZilla_3.68.1_win64_sponsored2-setup.exe | POST | 200 | 18.245.86.105:80 | http://api.playanext.com/httpapi | unknown | — | — | whitelisted |
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
4 | System | 192.168.100.255:137 | — | — | — | whitelisted |
6944 | svchost.exe | 4.231.128.59:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
— | — | 4.231.128.59:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
5488 | MoUsoCoreWorker.exe | 2.16.164.106:80 | crl.microsoft.com | Akamai International B.V. | NL | whitelisted |
— | — | 2.16.164.106:80 | crl.microsoft.com | Akamai International B.V. | NL | whitelisted |
5488 | MoUsoCoreWorker.exe | 88.221.169.152:80 | www.microsoft.com | AKAMAI-AS | DE | whitelisted |
— | — | 88.221.169.152:80 | www.microsoft.com | AKAMAI-AS | DE | whitelisted |
4020 | svchost.exe | 239.255.255.250:1900 | — | — | — | whitelisted |
— | — | 51.104.136.2:443 | settings-win.data.microsoft.com | MICROSOFT-CORP-MSN-AS-BLOCK | IE | whitelisted |
4 | System | 192.168.100.255:138 | — | — | — | whitelisted |
Domain | IP | Reputation |
|---|---|---|
settings-win.data.microsoft.com |
| whitelisted |
crl.microsoft.com |
| whitelisted |
www.microsoft.com |
| whitelisted |
google.com |
| whitelisted |
api.playanext.com |
| whitelisted |
offers.playanext.com |
| unknown |
ocsp.rootca1.amazontrust.com |
| shared |
www.bing.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
login.live.com |
| whitelisted |
PID | Process | Class | Message |
|---|---|---|---|
6100 | FileZilla_3.68.1_win64_sponsored2-setup.exe | Possibly Unwanted Program Detected | ADWARE [ANY.RUN] Driver Updater Setup Process |
6100 | FileZilla_3.68.1_win64_sponsored2-setup.exe | Possibly Unwanted Program Detected | ADWARE [ANY.RUN] Driver Updater Setup Process |
6100 | FileZilla_3.68.1_win64_sponsored2-setup.exe | Possibly Unwanted Program Detected | ADWARE [ANY.RUN] Driver Updater Setup Process |
6100 | FileZilla_3.68.1_win64_sponsored2-setup.exe | Possibly Unwanted Program Detected | ADWARE [ANY.RUN] Driver Updater Setup Process |
6100 | FileZilla_3.68.1_win64_sponsored2-setup.exe | Possibly Unwanted Program Detected | ADWARE [ANY.RUN] Driver Updater Setup Process |
6100 | FileZilla_3.68.1_win64_sponsored2-setup.exe | Possibly Unwanted Program Detected | ADWARE [ANY.RUN] Driver Updater Setup Process |
6100 | FileZilla_3.68.1_win64_sponsored2-setup.exe | Possibly Unwanted Program Detected | ADWARE [ANY.RUN] Driver Updater Setup Process |
3580 | AvastBrowserUpdate.exe | Potential Corporate Privacy Violation | ET POLICY PE EXE or DLL Windows file download HTTP |
— | — | Misc activity | ET INFO External IP Lookup Service in DNS Query (ip-info .ff .avast .com) |
— | — | Misc activity | ET INFO Observed External IP Lookup Domain (ip-info .ff .avast .com) in TLS SNI |
Process | Message |
|---|---|
avast_secure_browser_setup.exe | 2024-11-14T19:16:54 [libnsis] {00001ab8:00001720} <2:Info> (893f00f663353e48\src\jsis-plugins\plugins\Plugin.cpp:82) JSIS Plugin logging enabled
|
avast_secure_browser_setup.exe | 2024-11-14T19:16:54 [libnsis] {00001ab8:00001720} <4:Error> (893f00f663353e48\src\jsis-plugins\plugins\UtilitiesPlugin\TagData.cpp:85) 0x00000400000715 91aa05bf654a77ad\src\sbplugins\windows\RCData.cpp:62
|
avast_secure_browser_setup.exe | 2024-11-14T19:16:54 [libnsis] {00001ab8:00001720} <1:Debug> (91aa05bf654a77ad\src\sbplugins\windows\RCData.cpp:62) Throwing exception 0x00000400000715
|
avast_secure_browser_setup.exe | 2024-11-14T19:16:55 [libnsis] {00001ab8:00001720} <1:Debug> (6641f181bd7f7928\src\acu\database\Sqlite.cpp:75) Execute Sqlite query SELECT ((visits.visit_time/1000000)-11644473600) /60 /60 / 24 AS vtime FROM 'visits' WHERE vtime >= 20011 AND vtime <= 20042 GROUP BY vtime
|
avast_secure_browser_setup.exe | 2024-11-14T19:16:55 [libnsis] {00001ab8:00001720} <1:Debug> (6641f181bd7f7928\src\acu\database\Sqlite.cpp:38) Oepn Sqlite DB C:\Users\admin\AppData\Local\Temp\nse2AEE.tmp\CR.History.tmp
|
avast_secure_browser_setup.exe | 2024-11-14T19:16:55 [libnsis] {00001ab8:00001720} <1:Debug> (6641f181bd7f7928\src\acu\database\Sqlite.cpp:38) Oepn Sqlite DB C:\Users\admin\AppData\Local\Temp\nse2AEE.tmp\CR.History.tmp
|
avast_secure_browser_setup.exe | 2024-11-14T19:16:55 [libnsis] {00001ab8:00001720} <1:Debug> (6641f181bd7f7928\src\acu\database\Sqlite.cpp:75) Execute Sqlite query SELECT ((visits.visit_time/1000000)-11644473600) /60 /60 / 24 AS vtime FROM 'visits' WHERE vtime >= 20011 AND vtime <= 20042 GROUP BY vtime
|
avast_secure_browser_setup.exe | 2024-11-14T19:16:55 [libnsis] {00001ab8:00001720} <1:Debug> (6641f181bd7f7928\src\acu\database\Sqlite.cpp:38) Oepn Sqlite DB C:\Users\admin\AppData\Local\Temp\nse2AEE.tmp\FF.places.tmp
|
avast_secure_browser_setup.exe | 2024-11-14T19:16:55 [libnsis] {00001ab8:00001720} <1:Debug> (6641f181bd7f7928\src\acu\database\Sqlite.cpp:75) Execute Sqlite query SELECT last_visit_date / 1000000 /60 /60 / 24 AS vtime FROM 'moz_places' WHERE vtime >= 20011 AND vtime <= 20042 GROUP BY vtime
|
avast_secure_browser_setup.exe | 2024-11-14T19:16:55 [libnsis] {00001ab8:00001720} <1:Debug> (6641f181bd7f7928\src\acu\database\Sqlite.cpp:75) Execute Sqlite query SELECT last_visit_date / 1000000 /60 /60 / 24 AS vtime FROM 'moz_places' WHERE vtime >= 20011 AND vtime <= 20042 GROUP BY vtime
|