Edit C:\Users\All Users\CheckPoint\Logs\TELog.log
?2019-11-01 11:19:46,459 [1738:6] [FATAL] [Engine] <-------------------- Starting version: '8.60.5.8003' --------------------> 2019-11-01 11:19:46,491 [1738:6] [INFO] [Engine] *** Security protocols enabled: Tls, Tls11, Tls12 2019-11-01 11:19:46,663 [1738:6] [INFO] [Database] Creating database: C:\ProgramData\CheckPoint\Endpoint Security\Threat Emulation\TEDB.db 2019-11-01 11:19:48,709 [1738:6] [INFO] [Database] Insert or update db info: True, version: 2 2019-11-01 11:19:48,725 [1738:9] [WARN] [Engine] DbControlThread Started! 2019-11-01 11:19:48,725 [1738:6] [WARN] [EngineState] Engine state changed from: Off to Initializing 2019-11-01 11:19:48,772 [1738:6] [INFO] [ExtensionsConnector] Start to listen on port: 58145. Authorization value is: 55016fcd-5acf-46cd-a55c-ff16153d69f3 2019-11-01 11:19:48,772 [1738:6] [INFO] [Engine] DAF is working in Cipolla mode 2019-11-01 11:19:48,772 [1738:6] [INFO] [BladeNavel] ########## BladeNavel Created ########## in Process TESvc PID=5944 ########## 2019-11-01 11:19:48,803 [1738:6] [INFO] [Engine] DAF initialized True, current PAC: ePAC_Connected 2019-11-01 11:19:48,803 [1738:6] [WARN] [EngineState] Engine state changed from: Initializing to Running 2019-11-01 11:19:48,819 [1738:6] [WARN] [SettingsProvider] Applying default TE policy 2019-11-01 11:19:48,819 [1738:6] [INFO] [SettingsProvider] BMPolicy: Applying default BMPolicy Rules 2019-11-01 11:19:48,897 [1738:6] [INFO] [SettingsProvider] BrowserExtensionsAdditionalData te=silent;sa_mode=Silent;upload_limit_per_day=2;upload_limit_per_type=2 2019-11-01 11:19:48,913 [1738:6] [WARN] [SettingsProvider] Case Sensitive FS processing is disabled. 2019-11-01 11:19:48,913 [1738:6] [WARN] [SettingsProvider] TE Is License Check enabled: True 2019-11-01 11:19:48,913 [1738:6] [WARN] [SettingsProvider] TE is working in silent mode. 2019-11-01 11:19:48,913 [1738:6] [WARN] [SettingsProvider] New summary reports are enabled 2019-11-01 11:19:48,913 [1738:6] [INFO] [SettingsProvider] BMPolicy: BlockMode policy path not present, loading default BM policy 2019-11-01 11:19:48,913 [1738:6] [INFO] [SettingsProvider] BMPolicy: Applying default BMPolicy Rules 2019-11-01 11:19:48,975 [1738:6] [INFO] [SettingsProvider] BMPolicy Applied Configuration: BlockMode = Silent AllowUserUnblockFiles = False BMRules: RuleConditions: RuleType = ProcessSigner RuleValue = Check Point Software Technologies Ltd. RuleType = ProcessPath RuleValue = *\ISWMGR.exe RuleAction = Block RuleConditions: RuleType = ProcessSigner RuleValue = Check Point Software Technologies Ltd. RuleAction = Ignore RuleConditions: RuleType = ProcessPath RuleValue = *\CheckPoint\Endpoint Security\UIFramework\Bin\utils\wkhtmltopdf.exe RuleType = ProcessMd5 RuleValue = A81170F8841876FC808AD77EAA4AF956 RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = *\McAfee\Agent\* RuleType = ProcessSigner RuleValue = "McAfee RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = *\Sophos\* RuleType = ProcessSigner RuleValue = Sophos Limited RuleAction = Ignore RuleConditions: RuleType = ProcessSigner RuleValue = Symantec Corporation RuleAction = Ignore RuleConditions: RuleType = ProcessSigner RuleValue = Trend Micro RuleAction = Ignore RuleConditions: RuleType = ProcessSigner RuleValue = Trend Micro, Inc. RuleAction = Ignore RuleConditions: RuleType = ProcessSigner RuleValue = McAfee, Inc. RuleAction = Ignore RuleConditions: RuleType = ProcessSigner RuleValue = McAfee ePO Development (SPC) RuleAction = Ignore RuleConditions: RuleType = ProcessSigner RuleValue = Kaspersky Lab RuleAction = Ignore RuleConditions: RuleType = ProcessSigner RuleValue = Microsoft Windows RuleType = ProcessPath RuleValue = *SetupPrep.exe RuleAction = Ignore RuleConditions: RuleType = ProcessSigner RuleValue = Microsoft Windows RuleType = ProcessPath RuleValue = *SetupHost.exe RuleAction = Ignore RuleConditions: RuleType = ProcessSigner RuleValue = Microsoft Windows Publisher RuleType = ProcessPath RuleValue = *svchost.exe RuleType = Path RuleValue = *Windows\SoftwareDistribution\Download* RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = %PROGRAMFILES(X86)%\CheckPoint\* RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = %PROGRAMFILES(X86)%\Common Files\CheckPoint\* RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = %PROGRAMFILES%\CheckPoint\* RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = %PROGRAMFILES%\Common Files\CheckPoint\* RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = %PROGRAMW6432%\CheckPoint\* RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = %PROGRAMW6432%\Common Files\CheckPoint\* RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = %PROGRAMDATA%\CheckPoint\* RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = ?:\SandBlastBackup\* RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = %PROGRAMDATA%\Microsoft\Windows Defender\Scans\FilesStash\* RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = %SYSTEMDRIVE%\Users\*\AppData\Roaming\Microsoft\Powerpoint\* RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = %SYSTEMDRIVE%\Users\*\AppData\Roaming\Microsoft\Word\* RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = %SYSTEMDRIVE%\Users\*\AppData\Roaming\Microsoft\Excel\* RuleAction = Ignore RuleConditions: RuleType = FileType RuleValue = gz RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = ?:\Users\*\AppData\Local\Mozilla\Firefox\Profiles\*\startupCache\* RuleType = FileType RuleValue = zip RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = ?:\Windows\Logs\CBS\CbsPersist_\*.cab RuleType = FileType RuleValue = cab RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = %WINDIR%\WinSxS\Temp\InFlight\* RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = %WINDIR%\SoftwareDistribution\Download\* RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = %WINDIR%\Windows\CbsTemp\* RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = ?:\ProgramData\Microsoft\Windows\WER\Temp\WER*.csv RuleType = FileType RuleValue = csv RuleAction = Ignore RuleConditions: RuleType = ProcessPath RuleValue = WerFault.exe RuleType = ProcessOriginalFilename RuleValue = WerFault.exe RuleType = ProcessSigner RuleValue = Microsoft Windows RuleAction = Ignore RuleConditions: RuleType = ProcessPath RuleValue = wermgr.exe RuleType = ProcessOriginalFilename RuleValue = WerMgr RuleType = ProcessSigner RuleValue = Microsoft Windows RuleAction = Ignore RuleConditions: RuleType = ProcessPath RuleValue = WerFaultSecure.exe RuleType = ProcessOriginalFilename RuleValue = WerFaultSecure.exe RuleType = ProcessSigner RuleValue = Microsoft Windows RuleAction = Ignore RuleConditions: RuleType = ProcessPath RuleValue = CompatTelRunner.exe RuleType = ProcessOriginalFilename RuleValue = CompatTelRunner.exe RuleType = ProcessSigner RuleValue = Microsoft Windows RuleAction = Ignore RuleConditions: RuleType = ProcessPath RuleValue = MsMpEng.exe RuleType = ProcessOriginalFilename RuleValue = MsMpEng.exe RuleType = ProcessSigner RuleValue = Microsoft Corporation RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = C:\ProgramData\CheckPoint\Endpoint Security\Threat Emulation\Backup\ RuleAction = Ignore RuleConditions: RuleType = Path RuleValue = C:\ProgramData\CheckPoint\Endpoint Security\Threat Emulation\Reports\ RuleAction = Ignore 2019-11-01 11:19:48,975 [1738:6] [INFO] [SettingsProvider] SAPolicy: Applying default SAPolicy 2019-11-01 11:19:48,975 [1738:6] [INFO] [SettingsProvider] SAPolicy: parse mode Silent from guidb edit 2019-11-01 11:19:48,975 [1738:6] [INFO] [SettingsProvider] SA Policy : SA Mode = Silent , Telemetry mode = True , Timeout = 3 , Detection Confidence = Medium 2019-11-01 11:19:48,975 [1738:6] [INFO] [SettingsProvider] FRPolicy: Applying default FRPolicy 2019-11-01 11:19:48,975 [1738:6] [INFO] [SettingsProvider] FR Policy : File Reputation Mode = Silent , Telemetry mode = True , Verdict Confidence = Low, Fuzzy hashing enabled=True 2019-11-01 11:19:48,975 [1738:6] [INFO] [SettingsProvider] upload_limit_per_day == 2 2019-11-01 11:19:48,991 [1738:6] [INFO] [SettingsProvider] upload_limit_per_type == 2 2019-11-01 11:19:48,991 [1738:6] [INFO] [SettingsProvider] TE policy applied: PAC: ePAC_Disconnected, Ver: 1, Name: Default TE settings 2019-11-01 11:19:48,991 [1738:6] [INFO] [TEAntexConnector] AntexNotificationCallback return code:0x1 2019-11-01 11:19:49,006 [1738:6] [INFO] [Enforcement] Initializing remediation... 2019-11-01 11:19:49,053 [1738:6] [INFO] [CertificateHelper] Certificate attributes unwanted NotSignatureValid, UntrustedRoot, PartialChain, CtlNotSignatureValid, CtlNotValidForUsage 2019-11-01 11:19:49,084 [1738:6] [WARN] [Engine] Configuring dynamic settings 2019-11-01 11:19:49,084 [1738:6] [INFO] [TlsSslPublicKeyVerifier] Configuring trust mode: 'TrustByRootCaCertificateList' 2019-11-01 11:19:49,100 [1738:6] [INFO] [LoadManager] Notify Inspection Site Changed 2019-11-01 11:19:49,100 [1738:6] [INFO] [LoadManager] Inspection site pool organized. Clouds: 1, Appliances: 0 2019-11-01 11:19:49,100 [1738:b] [INFO] [ChromeExtensionManager] DeployemntMonitorThread: deploying.. 2019-11-01 11:19:49,100 [1738:6] [INFO] [LoadManager] Inspection site '0' of '1' instance Type: 'GlobalCloud', Url base: 'https://te.checkpoint.com/tecloud/sba/v1/file/' 2019-11-01 11:19:49,163 [1738:6] [INFO] [Engine] Eligible file type extensions from TE policy: exe 2019-11-01 11:19:49,194 [1738:6] [INFO] [Dispatcher] FS events. CPEPMon: 'Silent', Max file size: '10485760', Process exclusions: '5' 2019-11-01 11:19:49,194 [1738:6] [INFO] [Dispatcher] Process exclusion 1 of 5: FT: , FP: , SHA1: , MD5: , PP: WerFault.exe, PSN: Microsoft Windows, PON: WerFault.exe, PMD5: 2019-11-01 11:19:49,194 [1738:6] [INFO] [Dispatcher] Process exclusion 2 of 5: FT: , FP: , SHA1: , MD5: , PP: wermgr.exe, PSN: Microsoft Windows, PON: WerMgr, PMD5: 2019-11-01 11:19:49,194 [1738:6] [INFO] [Dispatcher] Process exclusion 3 of 5: FT: , FP: , SHA1: , MD5: , PP: WerFaultSecure.exe, PSN: Microsoft Windows, PON: WerFaultSecure.exe, PMD5: 2019-11-01 11:19:49,194 [1738:6] [INFO] [Dispatcher] Process exclusion 4 of 5: FT: , FP: , SHA1: , MD5: , PP: CompatTelRunner.exe, PSN: Microsoft Windows, PON: CompatTelRunner.exe, PMD5: 2019-11-01 11:19:49,209 [1738:6] [INFO] [Dispatcher] Process exclusion 5 of 5: FT: , FP: , SHA1: , MD5: , PP: MsMpEng.exe, PSN: Microsoft Corporation, PON: MsMpEng.exe, PMD5: 2019-11-01 11:19:49,209 [1738:6] [INFO] [Dispatcher] *** TE Config: cpepmonMode:Silent, Enable_te:True, FileMonitorEnabled:True 2019-11-01 11:19:50,522 [1738:6] [INFO] [CpepmonBridge] Found processor cores: 2 2019-11-01 11:19:50,522 [1738:6] [INFO] [CpepmonBridge] Starting Processing threads: 2 2019-11-01 11:19:50,538 [1738:6] [WARN] [CpepmonBridge] Reported about volume 'C:\' of type 'TeVolumeFixed' 2019-11-01 11:19:50,553 [1738:6] [INFO] [CpepmonBridge] Sending commit request for sig: 16796 (exe) 2019-11-01 11:19:50,553 [1738:16] [INFO] [Dispatcher] DispatcherQuant is :1000 2019-11-01 11:19:50,553 [1738:6] [INFO] [UpdaterTasks] Updater task interval 2 was taken from default. 2019-11-01 11:19:50,678 [1738:6] [INFO] [StaticAnalysisConnector] SA Start is called 2019-11-01 11:19:50,834 [1738:6] [INFO] [FileReputationConnector] FR Start is called 2019-11-01 11:19:50,834 [1738:6] [INFO] [FileReputation] Start Engine is called 2019-11-01 11:19:50,850 [1738:6] [INFO] [PolicyHandler] Apply FR policy is been called 2019-11-01 11:19:50,850 [1738:6] [INFO] [PolicyHandler] FR policy: File Reputation Mode = Silent , Telemetry mode = True , Verdict Confidence = Low, Fuzzy hashing enabled=True 2019-11-01 11:19:50,850 [1738:6] [INFO] [Engine] Engine initialized 2019-11-01 11:19:51,559 [1738:5] [INFO] [Engine+GarbageCollectionTrigger] Garbage collection trigger. Private memory used before: 48836kb; afer: 48768kb, Delta: 68b; Time(ms) used: 0, Total memory: 4808kb 2019-11-01 11:20:03,668 [1738:1a] [INFO] [BladeNavel] Exit, PolicyID=100 retval=0 2019-11-01 11:20:52,012 [1738:19] [INFO] [CpepmonBridge] Associations registry changed, updating kernel. 2019-11-01 11:20:52,012 [1738:19] [INFO] [CpepmonBridge] Sending commit request for sig: 16796 (exe) 2019-11-01 11:24:51,555 [1738:5] [INFO] [Engine+GarbageCollectionTrigger] Garbage collection trigger. Private memory used before: 52160kb; afer: 52232kb, Delta: -72b; Time(ms) used: 0, Total memory: 5511kb 2019-11-01 11:25:13,686 [1738:1a] [INFO] [BladeNavel] Exit, PolicyID=100 retval=0 2019-11-01 11:29:51,577 [1738:18] [INFO] [Engine+GarbageCollectionTrigger] Garbage collection trigger. Private memory used before: 52540kb; afer: 52540kb, Delta: 0b; Time(ms) used: 0, Total memory: 5538kb 2019-11-01 11:30:23,686 [1738:1a] [INFO] [BladeNavel] Exit, PolicyID=100 retval=0 2019-11-01 11:33:52,030 [1738:17] [INFO] [CpepmonBridge] Associations registry changed, updating kernel. 2019-11-01 11:33:52,033 [1738:17] [INFO] [CpepmonBridge] Sending commit request for sig: 16796 (exe) 2019-11-01 11:34:01,673 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe' fileSize: 393680, md5: a901c16727dad300e8e538f406d09d50, sha1: 43591053de2bb6f737d6289dff681820f404b727, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe', id: '5664', signer: 'Mozilla Corporation', original file name: 'maintenanceservice.exe', md5: 'e94b72f28c1557945b40d623c32977d6', creation time: '11/01/2019 14:34:01', dbindex: 4294967295, reason: LocalCopy, sig id: 16796 2019-11-01 11:34:01,678 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'LocalCopy', allowing. Path: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe' Db index: '4294967295' 2019-11-01 11:34:01,681 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:4294967295, file 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:34:01,688 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', Times: created:0ms; proces start:1ms; 1UnMap:5ms; 2UnMap:0ms; 1DbUpdate:6ms; proces finish:0ms; total: 12ms 2019-11-01 11:34:03,083 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe' fileSize: 393680, md5: a901c16727dad300e8e538f406d09d50, sha1: 43591053de2bb6f737d6289dff681820f404b727, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe', id: '3848', signer: 'Mozilla Corporation', original file name: 'maintenanceservice.exe', md5: 'e94b72f28c1557945b40d623c32977d6', creation time: '11/01/2019 14:34:03', dbindex: 4294967295, reason: LocalCopy, sig id: 16796 2019-11-01 11:34:03,084 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'LocalCopy', allowing. Path: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe' Db index: '4294967295' 2019-11-01 11:34:03,085 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:4294967295, file 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:34:03,086 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', Times: created:0ms; proces start:0ms; 1UnMap:1ms; 2UnMap:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 2ms 2019-11-01 11:34:03,124 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\firefox.exe.moz-callback' fileSize: 522704, md5: 68ad21ca1a0070b39a53a4d7b98fcce3, sha1: 11fc6327613fef352f3e15f58559f11443f6d672, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 4294967295, reason: LocalCopy, sig id: 16796 2019-11-01 11:34:03,125 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'LocalCopy', allowing. Path: 'C:\Program Files\Mozilla Firefox\firefox.exe.moz-callback' Db index: '4294967295' 2019-11-01 11:34:03,125 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:4294967295, file 'C:\Program Files\Mozilla Firefox\firefox.exe.moz-callback', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:34:03,125 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\firefox.exe.moz-callback', Times: created:0ms; proces start:0ms; 1UnMap:0ms; 2UnMap:0ms; 1DbUpdate:0ms; proces finish:0ms; total: 0ms 2019-11-01 11:34:06,714 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\vcruntime140.dll' fileSize: 87200, md5: 6e2b2ddb1bc783122018d99d38497298, sha1: 414dfc02289926416399fd986a303e32e812c595, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 63, reason: None, sig id: 16796 2019-11-01 11:34:06,733 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\updater.exe' fileSize: 394784, md5: 10f58f28781e94fc2fda753ebe727101, sha1: ea3121688583d39b4549a1c35573108b62d4647d, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 62, reason: None, sig id: 16796 2019-11-01 11:34:06,748 [1738:12] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\vcruntime140.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:06,749 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\vcruntime140.dll' Db index: '63' 2019-11-01 11:34:06,750 [1738:13] [INFO] [CpepmonBridge] Type has no associations, path: 'C:\Program Files\Mozilla Firefox\updater.exe', type: 'exe' 2019-11-01 11:34:06,750 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:63, file 'C:\Program Files\Mozilla Firefox\vcruntime140.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 1, messages in process: 'Processed' 2019-11-01 11:34:06,778 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\vcruntime140.dll', Times: created:0ms; 1premap:48ms; 2premap:1ms; proces start:1ms; fill start:2ms; 1open stream:20ms; 2open stream:0ms; 1backup:0ms; unmap before:5ms; unmap after:0ms; 2backup:0ms; 1classify:1ms; 1UnMap:3ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:12ms; proces finish:14ms; total: 107ms 2019-11-01 11:34:06,778 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe' fileSize: 940360, md5: b44ffe1d5383634be3a58d4f4dcb2aa0, sha1: e076bf7545988d7a27296b5ffbb0ab609fde27e4, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 63, reason: None, sig id: 16796 2019-11-01 11:34:06,783 [1738:12] [INFO] [CpepmonBridge] Type has no associations, path: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', type: 'exe' 2019-11-01 11:34:07,490 [1738:12] [ERROR] [ZoneLabsCertificateRepository] Could not load certificate file: System.IO.IOException: The process cannot access the file 'C:\Program Files (x86)\CheckPoint\Endpoint Security\Reputation\pa_certs.xml' because it is being used by another process. at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath) at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost) at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy) at System.IO.FileStream..ctor(String path, FileMode mode) at EPNetUtils.Helper.XMLHelper.XMLDeserializeObjectFromPath[T](String path) at FR.DAL.DTOs.ZoneLabsCertificateRepository.get__zaCertificatesContainer() 2019-11-01 11:34:07,507 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\updater.exe' is signed by trusted vendor 2019-11-01 11:34:07,507 [1738:12] [INFO] [CpepmonBridge] Type has no associations, path: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', type: 'exe' 2019-11-01 11:34:07,508 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\ucrtbase.dll' fileSize: 1016584, md5: 0e0bac3d1dcc1833eae4e3e4cf83c4ef, sha1: 4189f4459c54e69c6d3155a82524bda7549a75a6, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 61, reason: None, sig id: 16796 2019-11-01 11:34:07,507 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'Signed', allowing. Path: 'C:\Program Files\Mozilla Firefox\updater.exe' Db index: '62' 2019-11-01 11:34:07,512 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:62, file 'C:\Program Files\Mozilla Firefox\updater.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 22, messages in process: 'Processed' 2019-11-01 11:34:07,515 [1738:12] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\ucrtbase.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:07,516 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\ucrtbase.dll' Db index: '61' 2019-11-01 11:34:07,516 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:61, file 'C:\Program Files\Mozilla Firefox\ucrtbase.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 21, messages in process: 'Processed' 2019-11-01 11:34:07,517 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\updater.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:7ms; 2open stream:0ms; 1backup:0ms; unmap before:7ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:1ms; 2FRTrust:756ms; 1UnMap:5ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:3ms; total: 780ms 2019-11-01 11:34:07,518 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\softokn3.dll' fileSize: 289312, md5: 263aee0f2bcd3d28d29b1af44f82ec38, sha1: ca01ba8fe2e91c586b41c0796a7b5e1b414a1ec2, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 60, reason: None, sig id: 16796 2019-11-01 11:34:07,522 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\softokn3.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:07,522 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\softokn3.dll' Db index: '60' 2019-11-01 11:34:07,523 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:60, file 'C:\Program Files\Mozilla Firefox\softokn3.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 20, messages in process: 'Processed' 2019-11-01 11:34:07,524 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\softokn3.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:709ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 712ms 2019-11-01 11:34:07,525 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\qipcap64.dll' fileSize: 17440, md5: 39b06c108ef0c0c3f79f389d0e0875f0, sha1: be859b202410b42c53b5378acf19c00028f2f8a9, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 59, reason: None, sig id: 16796 2019-11-01 11:34:07,529 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\qipcap64.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:07,518 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\ucrtbase.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:712ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:2ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:0ms; proces finish:0ms; total: 716ms 2019-11-01 11:34:07,530 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\plugin-hang-ui.exe' fileSize: 35872, md5: a07b72b1d024038ca802551b8e0a1eec, sha1: 797969145f70906375851f2eadf053e0d8c1e8c6, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 58, reason: None, sig id: 16796 2019-11-01 11:34:07,529 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\qipcap64.dll' Db index: '59' 2019-11-01 11:34:07,531 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:59, file 'C:\Program Files\Mozilla Firefox\qipcap64.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 19, messages in process: 'Processed' 2019-11-01 11:34:07,535 [1738:12] [INFO] [CpepmonBridge] Type has no associations, path: 'C:\Program Files\Mozilla Firefox\plugin-hang-ui.exe', type: 'exe' 2019-11-01 11:34:07,537 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\qipcap64.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:712ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:3ms; proces finish:2ms; total: 720ms 2019-11-01 11:34:07,537 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\plugin-container.exe' fileSize: 284192, md5: 28785c05bdb460ee6513e36d8470a4d6, sha1: bdb9078cabf567c09c27eb4f4d3b3444f7928430, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 57, reason: None, sig id: 16796 2019-11-01 11:34:07,545 [1738:13] [INFO] [CpepmonBridge] Type has no associations, path: 'C:\Program Files\Mozilla Firefox\plugin-container.exe', type: 'exe' 2019-11-01 11:34:07,573 [1738:12] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\plugin-hang-ui.exe' is signed by trusted vendor 2019-11-01 11:34:07,574 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'Signed', allowing. Path: 'C:\Program Files\Mozilla Firefox\plugin-hang-ui.exe' Db index: '58' 2019-11-01 11:34:07,574 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:58, file 'C:\Program Files\Mozilla Firefox\plugin-hang-ui.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 19, messages in process: 'Processed' 2019-11-01 11:34:07,582 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\plugin-container.exe' is signed by trusted vendor 2019-11-01 11:34:07,582 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'Signed', allowing. Path: 'C:\Program Files\Mozilla Firefox\plugin-container.exe' Db index: '57' 2019-11-01 11:34:07,583 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:57, file 'C:\Program Files\Mozilla Firefox\plugin-container.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 18, messages in process: 'Processed' 2019-11-01 11:34:07,582 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\plugin-hang-ui.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:712ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:0ms; 2FRTrust:37ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:6ms; total: 759ms 2019-11-01 11:34:07,583 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\plugin-container.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:707ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:5ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:11ms; 2FRTrust:24ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 750ms 2019-11-01 11:34:07,584 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\pingsender.exe' fileSize: 68128, md5: 0b1b03ed9634f5be4571255777b019d1, sha1: 199d18d31b8d2df62537daf02d5c35bb9e60a257, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 56, reason: None, sig id: 16796 2019-11-01 11:34:07,584 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\nssdbm3.dll' fileSize: 139808, md5: e51dc26e2524cbc516570dc1007044a9, sha1: 1d9f2784aa51ad46c1a6ad88c5ad41565b473157, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 55, reason: None, sig id: 16796 2019-11-01 11:34:07,591 [1738:12] [INFO] [CpepmonBridge] Type has no associations, path: 'C:\Program Files\Mozilla Firefox\pingsender.exe', type: 'exe' 2019-11-01 11:34:07,592 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\nssdbm3.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:07,593 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\nssdbm3.dll' Db index: '55' 2019-11-01 11:34:07,605 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:55, file 'C:\Program Files\Mozilla Firefox\nssdbm3.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 17, messages in process: 'Processed' 2019-11-01 11:34:07,613 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\nssdbm3.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:444ms; fill start:0ms; 1open stream:5ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:1ms; 1UnMap:13ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:2ms; proces finish:5ms; total: 470ms 2019-11-01 11:34:07,644 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\nssckbi.dll' fileSize: 414752, md5: df2461693bc4d30e9b9c2b4a6ab43a20, sha1: f97d30144d15390b50102aa86fb8699d923d77ec, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 54, reason: None, sig id: 16796 2019-11-01 11:34:07,657 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\nssckbi.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:07,657 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\nssckbi.dll' Db index: '54' 2019-11-01 11:34:07,658 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:54, file 'C:\Program Files\Mozilla Firefox\nssckbi.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 16, messages in process: 'Processed' 2019-11-01 11:34:07,714 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\nssckbi.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:489ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:3ms; unmap after:0ms; 2backup:0ms; 1classify:4ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:55ms; total: 556ms 2019-11-01 11:34:07,714 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\nss3.dll' fileSize: 2785824, md5: cf7dd9af7ec477896c45c5b4dbd42ac3, sha1: 27f7c627e09537f28fa1572c39d843a58b3a849b, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 53, reason: None, sig id: 16796 2019-11-01 11:34:07,721 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\nss3.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:07,721 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\nss3.dll' Db index: '53' 2019-11-01 11:34:07,721 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:53, file 'C:\Program Files\Mozilla Firefox\nss3.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 16, messages in process: 'Processed' 2019-11-01 11:34:07,724 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\nss3.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:469ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 473ms 2019-11-01 11:34:07,724 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\msvcp140.dll' fileSize: 625808, md5: eb1b46c4b900e4c83066760a737986cd, sha1: 90444980a36e79c043e6f037841822a9ef89af9d, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 52, reason: None, sig id: 16796 2019-11-01 11:34:07,729 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\msvcp140.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:07,729 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\msvcp140.dll' Db index: '52' 2019-11-01 11:34:07,730 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:52, file 'C:\Program Files\Mozilla Firefox\msvcp140.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 15, messages in process: 'Processed' 2019-11-01 11:34:07,732 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\msvcp140.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:460ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 463ms 2019-11-01 11:34:07,732 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\mozglue.dll' fileSize: 219168, md5: 1063845e31a89491022465bbadc8a647, sha1: 26db0c7881810f39ed777330d2e61ab8058d5296, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 51, reason: None, sig id: 16796 2019-11-01 11:34:07,736 [1738:12] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\pingsender.exe' is signed by trusted vendor 2019-11-01 11:34:07,736 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'Signed', allowing. Path: 'C:\Program Files\Mozilla Firefox\pingsender.exe' Db index: '56' 2019-11-01 11:34:07,736 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\mozglue.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:07,737 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\mozglue.dll' Db index: '51' 2019-11-01 11:34:07,737 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:51, file 'C:\Program Files\Mozilla Firefox\mozglue.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 13, messages in process: 'Processed' 2019-11-01 11:34:07,737 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:56, file 'C:\Program Files\Mozilla Firefox\pingsender.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 14, messages in process: 'Processed' 2019-11-01 11:34:07,739 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\mozglue.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:458ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 462ms 2019-11-01 11:34:07,741 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\mozavutil.dll' fileSize: 198176, md5: 1f134252ac4b67ea74f6a4af6d5e7dea, sha1: eae7f6ce71745ec85986fd0bc40092a36bd13c5c, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 50, reason: None, sig id: 16796 2019-11-01 11:34:07,741 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\pingsender.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:748ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:3ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:0ms; 2FRTrust:143ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:3ms; proces finish:0ms; total: 899ms 2019-11-01 11:34:07,743 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\mozavcodec.dll' fileSize: 2057248, md5: 27d04e47806a904c50f730ba9bdd5ae8, sha1: 567acbeb9329dc6dc891a6868ce3e0512a862100, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 49, reason: None, sig id: 16796 2019-11-01 11:34:07,748 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\mozavutil.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:07,750 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\mozavutil.dll' Db index: '50' 2019-11-01 11:34:07,750 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:50, file 'C:\Program Files\Mozilla Firefox\mozavutil.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 13, messages in process: 'Processed' 2019-11-01 11:34:07,751 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\mozavutil.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:459ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:2ms; 1UnMap:2ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 466ms 2019-11-01 11:34:07,751 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\minidump-analyzer.exe' fileSize: 653856, md5: c4badc720e4173d5e2b3ba0668159875, sha1: 2a56a845c901a93524b7f51e5f515e1f4e221810, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 48, reason: None, sig id: 16796 2019-11-01 11:34:07,756 [1738:13] [INFO] [CpepmonBridge] Type has no associations, path: 'C:\Program Files\Mozilla Firefox\minidump-analyzer.exe', type: 'exe' 2019-11-01 11:34:07,749 [1738:12] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\mozavcodec.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:07,776 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\mozavcodec.dll' Db index: '49' 2019-11-01 11:34:07,777 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:49, file 'C:\Program Files\Mozilla Firefox\mozavcodec.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 12, messages in process: 'Processed' 2019-11-01 11:34:07,781 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\mozavcodec.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:413ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:27ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:2ms; proces finish:1ms; total: 447ms 2019-11-01 11:34:07,782 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe' fileSize: 161344, md5: 22eb79a356265f9f4c8f6091e92573f4, sha1: 82c7d06155f11291dd2ec26b6076bb6f93b77d28, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 47, reason: None, sig id: 16796 2019-11-01 11:34:07,791 [1738:12] [INFO] [CpepmonBridge] Type has no associations, path: 'C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe', type: 'exe' 2019-11-01 11:34:07,815 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\minidump-analyzer.exe' is signed by trusted vendor 2019-11-01 11:34:07,815 [1738:12] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe' is signed by trusted vendor 2019-11-01 11:34:07,816 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'Signed', allowing. Path: 'C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe' Db index: '47' 2019-11-01 11:34:07,816 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:47, file 'C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 11, messages in process: 'Processed' 2019-11-01 11:34:07,815 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'Signed', allowing. Path: 'C:\Program Files\Mozilla Firefox\minidump-analyzer.exe' Db index: '48' 2019-11-01 11:34:07,818 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:48, file 'C:\Program Files\Mozilla Firefox\minidump-analyzer.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 10, messages in process: 'Processed' 2019-11-01 11:34:07,820 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:433ms; fill start:0ms; 1open stream:7ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:0ms; 2FRTrust:23ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:2ms; total: 466ms 2019-11-01 11:34:07,820 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\maintenanceservice.exe' fileSize: 242720, md5: b89103f3e1ba77b9fe86e66fedbae683, sha1: e9399d16935bfe1fd15ffac3cc1f099e48c803fe, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 46, reason: None, sig id: 16796 2019-11-01 11:34:07,825 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\minidump-analyzer.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:408ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:0ms; 2FRTrust:58ms; 1UnMap:3ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:5ms; total: 477ms 2019-11-01 11:34:07,825 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\libGLESv2.dll' fileSize: 4629536, md5: bb3a4d79144560ca433006b4ddf92863, sha1: 6a00fa175dde24dbad7099590f4e8043865b35ab, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 45, reason: None, sig id: 16796 2019-11-01 11:34:07,833 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\libGLESv2.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:07,833 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\libGLESv2.dll' Db index: '45' 2019-11-01 11:34:07,833 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:45, file 'C:\Program Files\Mozilla Firefox\libGLESv2.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 9, messages in process: 'Processed' 2019-11-01 11:34:07,835 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\libGLESv2.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:360ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:2ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 365ms 2019-11-01 11:34:07,836 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\libEGL.dll' fileSize: 40992, md5: cbb619330f0dd78807564437e4811b19, sha1: b610899ae89bc4426b86c3628d7860dd072cbf65, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 44, reason: None, sig id: 16796 2019-11-01 11:34:07,840 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\libEGL.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:07,826 [1738:12] [INFO] [CpepmonBridge] Type has no associations, path: 'C:\Program Files\Mozilla Firefox\maintenanceservice.exe', type: 'exe' 2019-11-01 11:34:07,841 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\libEGL.dll' Db index: '44' 2019-11-01 11:34:07,842 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:44, file 'C:\Program Files\Mozilla Firefox\libEGL.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 8, messages in process: 'Processed' 2019-11-01 11:34:07,844 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\libEGL.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:368ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 372ms 2019-11-01 11:34:07,845 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\lgpllibs.dll' fileSize: 37408, md5: 4063eae8875b9138fdd25ad09e79d523, sha1: e7df9b02ab9b233a800a5c8624c00779f0637739, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 43, reason: None, sig id: 16796 2019-11-01 11:34:07,850 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\lgpllibs.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:07,850 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\lgpllibs.dll' Db index: '43' 2019-11-01 11:34:07,851 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:43, file 'C:\Program Files\Mozilla Firefox\lgpllibs.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 7, messages in process: 'Processed' 2019-11-01 11:34:07,862 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\lgpllibs.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:374ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:10ms; total: 388ms 2019-11-01 11:34:07,863 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\clearkey.dll' fileSize: 111136, md5: 080b6117126f9cb4f57787513d1a14fa, sha1: a238f1af83f43578f59b5371fa22075a1ee41a0f, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 42, reason: None, sig id: 16796 2019-11-01 11:34:07,871 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\clearkey.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:07,871 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\clearkey.dll' Db index: '42' 2019-11-01 11:34:07,872 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:42, file 'C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\clearkey.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 6, messages in process: 'Processed' 2019-11-01 11:34:07,874 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\clearkey.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:381ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:3ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 388ms 2019-11-01 11:34:07,874 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\freebl3.dll' fileSize: 603680, md5: cdab11c27b936df9340ba3ff58995353, sha1: c0d68d1252070b3bf1dcdc1b7ff51868a0f50b15, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 41, reason: None, sig id: 16796 2019-11-01 11:34:07,879 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\freebl3.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:07,879 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\freebl3.dll' Db index: '41' 2019-11-01 11:34:07,880 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:41, file 'C:\Program Files\Mozilla Firefox\freebl3.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 5, messages in process: 'Processed' 2019-11-01 11:34:07,882 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\freebl3.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:368ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 372ms 2019-11-01 11:34:07,882 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\firefox.exe' fileSize: 577568, md5: c1a8461f26a7aa5baefcc2926fc2f989, sha1: dd1cf5447dc85dad1f5a7dd4f2d1c9f22d97a16c, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 59, reason: None, sig id: 16796 2019-11-01 11:34:07,889 [1738:13] [INFO] [CpepmonBridge] Type has no associations, path: 'C:\Program Files\Mozilla Firefox\firefox.exe', type: 'exe' 2019-11-01 11:34:07,913 [1738:12] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\maintenanceservice.exe' is signed by trusted vendor 2019-11-01 11:34:07,914 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'Signed', allowing. Path: 'C:\Program Files\Mozilla Firefox\maintenanceservice.exe' Db index: '46' 2019-11-01 11:34:07,914 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:46, file 'C:\Program Files\Mozilla Firefox\maintenanceservice.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 4, messages in process: 'Processed' 2019-11-01 11:34:07,916 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\maintenanceservice.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:462ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:16ms; 2FRTrust:71ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 553ms 2019-11-01 11:34:07,916 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\d3dcompiler_47.dll' fileSize: 4346120, md5: 222d020bd33c90170a8296adc1b7036a, sha1: 612e6f443d927330b9b8ac13cc4a2a6b959cee48, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 54, reason: None, sig id: 16796 2019-11-01 11:34:07,922 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\firefox.exe' is signed by trusted vendor 2019-11-01 11:34:07,924 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'Signed', allowing. Path: 'C:\Program Files\Mozilla Firefox\firefox.exe' Db index: '59' 2019-11-01 11:34:07,924 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:59, file 'C:\Program Files\Mozilla Firefox\firefox.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 3, messages in process: 'Processed' 2019-11-01 11:34:07,926 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\firefox.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:317ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:0ms; 2FRTrust:33ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 357ms 2019-11-01 11:34:07,926 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\crashreporter.exe' fileSize: 231456, md5: 289ae8627d965b5591b98a5e47216ad0, sha1: 24dc1d6415773bfb4e52d45c533e0b635ace587f, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 51, reason: None, sig id: 16796 2019-11-01 11:34:07,924 [1738:12] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\d3dcompiler_47.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:07,930 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\d3dcompiler_47.dll' Db index: '54' 2019-11-01 11:34:07,931 [1738:13] [INFO] [CpepmonBridge] Type has no associations, path: 'C:\Program Files\Mozilla Firefox\crashreporter.exe', type: 'exe' 2019-11-01 11:34:07,931 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:54, file 'C:\Program Files\Mozilla Firefox\d3dcompiler_47.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 2, messages in process: 'Processed' 2019-11-01 11:34:07,940 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\d3dcompiler_47.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:195ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:3ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:6ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:7ms; total: 214ms 2019-11-01 11:34:07,955 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\crashreporter.exe' is signed by trusted vendor 2019-11-01 11:34:07,955 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'Signed', allowing. Path: 'C:\Program Files\Mozilla Firefox\crashreporter.exe' Db index: '51' 2019-11-01 11:34:07,956 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:51, file 'C:\Program Files\Mozilla Firefox\crashreporter.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 1, messages in process: 'Processed' 2019-11-01 11:34:07,957 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\crashreporter.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:185ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:0ms; 2FRTrust:23ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 211ms 2019-11-01 11:34:08,699 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-utility-l1-1-0.dll' fileSize: 19208, md5: 54f27114eb0fda1588362bb6b5567979, sha1: eaa07829d012206ac55fb1af5cc6a35f341d22be, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 51, reason: None, sig id: 16796 2019-11-01 11:34:08,701 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-time-l1-1-0.dll' fileSize: 21256, md5: 6b33b34888ccecca636971fbea5e3de0, sha1: ee815a158baacb357d9e074c0755b6f6c286b625, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 54, reason: None, sig id: 16796 2019-11-01 11:34:08,708 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-time-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,708 [1738:12] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-utility-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,708 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-time-l1-1-0.dll' Db index: '54' 2019-11-01 11:34:08,708 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-utility-l1-1-0.dll' Db index: '51' 2019-11-01 11:34:08,709 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:51, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-utility-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 4, messages in process: 'Processed' 2019-11-01 11:34:08,709 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:54, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-time-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 5, messages in process: 'Processed' 2019-11-01 11:34:08,711 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-utility-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:3ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 8ms 2019-11-01 11:34:08,711 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-string-l1-1-0.dll' fileSize: 24840, md5: 96da689947c6e215a009b9c1eca5aec2, sha1: 7f389e6f2d6e5beb2a3baf622a0c0ea24bc4de60, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 59, reason: None, sig id: 16796 2019-11-01 11:34:08,715 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-time-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:1ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:4ms; proces finish:1ms; total: 11ms 2019-11-01 11:34:08,716 [1738:12] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-string-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,717 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-string-l1-1-0.dll' Db index: '59' 2019-11-01 11:34:08,717 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:59, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-string-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 6, messages in process: 'Processed' 2019-11-01 11:34:08,717 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-stdio-l1-1-0.dll' fileSize: 24840, md5: 76e0a89c91a28cf7657779d998e679e5, sha1: 982b5da1c1f5b9d74af6243885bcba605d54df8c, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 46, reason: None, sig id: 16796 2019-11-01 11:34:08,719 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-string-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:8ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 12ms 2019-11-01 11:34:08,720 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-runtime-l1-1-0.dll' fileSize: 23304, md5: 8b9b0d1c8b0e9d4b576d42c66980977a, sha1: a19acefa3f95d1b565650fdbc40ef98c793358e9, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 41, reason: None, sig id: 16796 2019-11-01 11:34:08,730 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-stdio-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,731 [1738:12] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-runtime-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,731 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-runtime-l1-1-0.dll' Db index: '41' 2019-11-01 11:34:08,732 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:41, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-runtime-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 11, messages in process: 'Processed' 2019-11-01 11:34:08,731 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-stdio-l1-1-0.dll' Db index: '46' 2019-11-01 11:34:08,734 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:46, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-stdio-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 11, messages in process: 'Processed' 2019-11-01 11:34:08,734 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-runtime-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:12ms; fill start:0ms; 1open stream:8ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:1ms; total: 22ms 2019-11-01 11:34:08,735 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-process-l1-1-0.dll' fileSize: 19720, md5: 595d79870970565be93db076afbe73b5, sha1: ec96f7beeaec14d3b6c437b97b4a18a365534b9b, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 51, reason: None, sig id: 16796 2019-11-01 11:34:08,741 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-stdio-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:13ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:3ms; unmap after:0ms; 2backup:0ms; 1classify:2ms; 1UnMap:3ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:2ms; proces finish:4ms; total: 31ms 2019-11-01 11:34:08,742 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-private-l1-1-0.dll' fileSize: 71432, md5: 50740f0bc326f0637c4166698298d218, sha1: 0c33cfe40edd278a692c2e73e941184fd24286d9, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 54, reason: None, sig id: 16796 2019-11-01 11:34:08,742 [1738:12] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-process-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,743 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-process-l1-1-0.dll' Db index: '51' 2019-11-01 11:34:08,743 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:51, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-process-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 14, messages in process: 'Processed' 2019-11-01 11:34:08,746 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-private-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,747 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-private-l1-1-0.dll' Db index: '54' 2019-11-01 11:34:08,747 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:54, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-private-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 14, messages in process: 'Processed' 2019-11-01 11:34:08,747 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-process-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:25ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:2ms; proces finish:1ms; total: 33ms 2019-11-01 11:34:08,749 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-multibyte-l1-1-0.dll' fileSize: 26888, md5: 4e033cfee32edf6be7847e80a5114894, sha1: 91eef52c557aefd0fde27e8df4e3c3b7f99862f2, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 42, reason: None, sig id: 16796 2019-11-01 11:34:08,749 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-private-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:27ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 30ms 2019-11-01 11:34:08,750 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-math-l1-1-0.dll' fileSize: 27912, md5: 4dd7a61590d07500704e7e775255cb00, sha1: 8b35ec4676bd96c2c4508dc5f98ca471b22deed7, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 59, reason: None, sig id: 16796 2019-11-01 11:34:08,757 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-math-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,757 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-math-l1-1-0.dll' Db index: '59' 2019-11-01 11:34:08,758 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:59, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-math-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 14, messages in process: 'Processed' 2019-11-01 11:34:08,758 [1738:12] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-multibyte-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,760 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-math-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:31ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 38ms 2019-11-01 11:34:08,760 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-multibyte-l1-1-0.dll' Db index: '42' 2019-11-01 11:34:08,761 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-locale-l1-1-0.dll' fileSize: 19208, md5: ab206f2943977256ca3a59e5961e3a4f, sha1: 9c1df49a8dbdc8496ac6057f886f5c17b2c39e3e, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 43, reason: None, sig id: 16796 2019-11-01 11:34:08,761 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:42, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-multibyte-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 13, messages in process: 'Processed' 2019-11-01 11:34:08,765 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-locale-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,766 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-multibyte-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:32ms; fill start:0ms; 1open stream:6ms; 2open stream:0ms; 1backup:0ms; unmap before:2ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:3ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:3ms; proces finish:0ms; total: 46ms 2019-11-01 11:34:08,766 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-locale-l1-1-0.dll' Db index: '43' 2019-11-01 11:34:08,766 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-heap-l1-1-0.dll' fileSize: 19720, md5: f9e20dd3b07766307fccf463ab26e3ca, sha1: 60b4cf246c5f414fc1cd12f506c41a1043d473ee, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 44, reason: None, sig id: 16796 2019-11-01 11:34:08,766 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:43, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-locale-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 12, messages in process: 'Processed' 2019-11-01 11:34:08,772 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-locale-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:40ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:4ms; proces finish:0ms; total: 47ms 2019-11-01 11:34:08,772 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-filesystem-l1-1-0.dll' fileSize: 20744, md5: f0d507de92851a8c0404ac78c383c5cd, sha1: 78fa03c89ea12ff93fa499c38673039cc2d55d40, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 45, reason: None, sig id: 16796 2019-11-01 11:34:08,772 [1738:12] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-heap-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,773 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-heap-l1-1-0.dll' Db index: '44' 2019-11-01 11:34:08,773 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:44, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-heap-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 11, messages in process: 'Processed' 2019-11-01 11:34:08,778 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-heap-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:43ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:2ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:2ms; proces finish:2ms; total: 51ms 2019-11-01 11:34:08,779 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-environment-l1-1-0.dll' fileSize: 19208, md5: c712515d052a385991d30b9c6afc767f, sha1: 9a4818897251cacb7fe1c6fe1be3e854985186ad, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 48, reason: None, sig id: 16796 2019-11-01 11:34:08,783 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-filesystem-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,784 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-filesystem-l1-1-0.dll' Db index: '45' 2019-11-01 11:34:08,784 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:45, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-filesystem-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 12, messages in process: 'Processed' 2019-11-01 11:34:08,784 [1738:12] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-environment-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,785 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-environment-l1-1-0.dll' Db index: '48' 2019-11-01 11:34:08,785 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:48, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-environment-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 11, messages in process: 'Processed' 2019-11-01 11:34:08,786 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-filesystem-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:47ms; fill start:0ms; 1open stream:7ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:2ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 57ms 2019-11-01 11:34:08,786 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-convert-l1-1-0.dll' fileSize: 22792, md5: d53637eab49fe1fe1bd45d12f8e69c1f, sha1: c84e41fdcc4ca89a76ae683cb390a9b86500d3ca, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 47, reason: None, sig id: 16796 2019-11-01 11:34:08,791 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-convert-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,791 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-convert-l1-1-0.dll' Db index: '47' 2019-11-01 11:34:08,791 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:47, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-convert-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 10, messages in process: 'Processed' 2019-11-01 11:34:08,791 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-environment-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:51ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:5ms; total: 61ms 2019-11-01 11:34:08,792 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-conio-l1-1-0.dll' fileSize: 19720, md5: 6c88d0006cf852f2d8462dfa4e9ca8d1, sha1: 49002b58cb0df2ee8d868dec335133cf225657df, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 41, reason: None, sig id: 16796 2019-11-01 11:34:08,793 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-convert-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:56ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 60ms 2019-11-01 11:34:08,793 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-timezone-l1-1-0.dll' fileSize: 19208, md5: f62b66f451f2daa8410ad62d453fa0a2, sha1: 4bf13db65943e708690d6256d7ddd421cc1cc72b, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 46, reason: None, sig id: 16796 2019-11-01 11:34:08,801 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\api-ms-win-core-timezone-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,801 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-timezone-l1-1-0.dll' Db index: '46' 2019-11-01 11:34:08,802 [1738:12] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-conio-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,802 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-conio-l1-1-0.dll' Db index: '41' 2019-11-01 11:34:08,802 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:46, file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-timezone-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 10, messages in process: 'Processed' 2019-11-01 11:34:08,803 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:41, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-conio-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 9, messages in process: 'Processed' 2019-11-01 11:34:08,805 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-timezone-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:59ms; fill start:0ms; 1open stream:5ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:2ms; proces finish:0ms; total: 67ms 2019-11-01 11:34:08,805 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-synch-l1-2-0.dll' fileSize: 19208, md5: 47388f3966e732706054fe3d530ed0dc, sha1: a9aebbbb73b7b846b051325d7572f2398f5986ee, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 49, reason: None, sig id: 16796 2019-11-01 11:34:08,807 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-conio-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:60ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:3ms; unmap after:0ms; 2backup:0ms; 1classify:1ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:1ms; total: 71ms 2019-11-01 11:34:08,807 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-processthreads-l1-1-1.dll' fileSize: 19208, md5: d699333637db92d319661286df7cc39e, sha1: 0bffb9ed366853e7019452644d26e8e8f236241b, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 50, reason: None, sig id: 16796 2019-11-01 11:34:08,813 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\api-ms-win-core-synch-l1-2-0.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,813 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-synch-l1-2-0.dll' Db index: '49' 2019-11-01 11:34:08,814 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:49, file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-synch-l1-2-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 8, messages in process: 'Processed' 2019-11-01 11:34:08,814 [1738:12] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\api-ms-win-core-processthreads-l1-1-1.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,815 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-processthreads-l1-1-1.dll' Db index: '50' 2019-11-01 11:34:08,815 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:50, file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-processthreads-l1-1-1.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 7, messages in process: 'Processed' 2019-11-01 11:34:08,816 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-synch-l1-2-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:69ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:3ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:1ms; total: 77ms 2019-11-01 11:34:08,817 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-localization-l1-2-0.dll' fileSize: 21256, md5: 588bd2a8e0152e0918742c1a69038f1d, sha1: 9874398548891f6a08fc06437996f84eb7495783, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 56, reason: None, sig id: 16796 2019-11-01 11:34:08,819 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-processthreads-l1-1-1.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:69ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:1ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:2ms; total: 77ms 2019-11-01 11:34:08,819 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l2-1-0.dll' fileSize: 18696, md5: bfffa7117fd9b1622c66d949bac3f1d7, sha1: 402b7b8f8dcfd321b1d12fc85a1ee5137a5569b2, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 51, reason: None, sig id: 16796 2019-11-01 11:34:08,825 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\api-ms-win-core-localization-l1-2-0.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,826 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-localization-l1-2-0.dll' Db index: '56' 2019-11-01 11:34:08,826 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:56, file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-localization-l1-2-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 6, messages in process: 'Processed' 2019-11-01 11:34:08,827 [1738:12] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l2-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,829 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-localization-l1-2-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:76ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:3ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 84ms 2019-11-01 11:34:08,830 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l1-2-0.dll' fileSize: 18696, md5: 49c3ffd47257dbcb67a6be9ee112ba7f, sha1: 04669214375b25e2dc8a3635484e6eeb206bc4eb, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 54, reason: None, sig id: 16796 2019-11-01 11:34:08,829 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l2-1-0.dll' Db index: '51' 2019-11-01 11:34:08,832 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:51, file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l2-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 5, messages in process: 'Processed' 2019-11-01 11:34:08,835 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l1-2-0.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,835 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l2-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:75ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:1ms; 1UnMap:4ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:3ms; proces finish:0ms; total: 87ms 2019-11-01 11:34:08,836 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\IA2Marshal.dll' fileSize: 79904, md5: 52c37828543f2a221ded27d80be9949a, sha1: e7d89d8d8c118c9c07db72dd52ae17125fc760a3, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 44, reason: None, sig id: 16796 2019-11-01 11:34:08,835 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l1-2-0.dll' Db index: '54' 2019-11-01 11:34:08,837 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:54, file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l1-2-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 4, messages in process: 'Processed' 2019-11-01 11:34:08,841 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l1-2-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:83ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:2ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:2ms; proces finish:0ms; total: 89ms 2019-11-01 11:34:08,841 [1738:12] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\IA2Marshal.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,842 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\AccessibleMarshal.dll' fileSize: 28192, md5: 37552e083f77a953e543240724729eaf, sha1: 87e3b7733b981bcedd548a3709893592ea623de3, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 43, reason: None, sig id: 16796 2019-11-01 11:34:08,842 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\IA2Marshal.dll' Db index: '44' 2019-11-01 11:34:08,843 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:44, file 'C:\Program Files\Mozilla Firefox\IA2Marshal.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 3, messages in process: 'Processed' 2019-11-01 11:34:08,847 [1738:13] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\AccessibleMarshal.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,848 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\AccessibleMarshal.dll' Db index: '43' 2019-11-01 11:34:08,848 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:43, file 'C:\Program Files\Mozilla Firefox\AccessibleMarshal.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 2, messages in process: 'Processed' 2019-11-01 11:34:08,847 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\IA2Marshal.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:57ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:3ms; proces finish:0ms; total: 64ms 2019-11-01 11:34:08,850 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\AccessibleMarshal.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:60ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 64ms 2019-11-01 11:34:08,851 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files\Mozilla Firefox\AccessibleHandler.dll' fileSize: 166944, md5: bf9e90b9009ef68315f0b4dac2afd948, sha1: b444d77897e55e4a63f5c7bc67af538c359337cd, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 47, reason: None, sig id: 16796 2019-11-01 11:34:08,858 [1738:12] [INFO] [CpepmonBridge] File 'C:\Program Files\Mozilla Firefox\AccessibleHandler.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:08,859 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\AccessibleHandler.dll' Db index: '47' 2019-11-01 11:34:08,859 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:47, file 'C:\Program Files\Mozilla Firefox\AccessibleHandler.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 1, messages in process: 'Processed' 2019-11-01 11:34:08,861 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\AccessibleHandler.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:60ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 64ms 2019-11-01 11:34:09,985 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Windows\Temp\nsi6A0F.tmp\System.dll' fileSize: 11776, md5: 17ed1c86bd67e78ade4712be48a7d2bd, sha1: 1cc9fe86d6d6030b4dae45ecddce5907991c01a0, process: Process: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', id: '3500', signer: 'Mozilla Corporation', original file name: 'helper.exe', md5: 'b44ffe1d5383634be3a58d4f4dcb2aa0', creation time: '11/01/2019 14:34:09', dbindex: 47, reason: ForeignProcess, sig id: 16796 2019-11-01 11:34:09,993 [1738:12] [INFO] [CpepmonBridge] File 'C:\Windows\Temp\nsi6A0F.tmp\System.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:09,994 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Temp\nsi6A0F.tmp\System.dll' Db index: '47' 2019-11-01 11:34:09,994 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:47, file 'C:\Windows\Temp\nsi6A0F.tmp\System.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 1, messages in process: 'Processed' 2019-11-01 11:34:09,996 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Windows\Temp\nsi6A0F.tmp\System.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:4ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 7ms 2019-11-01 11:34:09,997 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Windows\Temp\nsi6A0F.tmp\CityHash.dll' fileSize: 44544, md5: 737379945745bb94f8a0dadcc18cad8d, sha1: 6a1f497b4dc007f5935b66ec83b00e5a394332c6, process: Process: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', id: '3500', signer: 'Mozilla Corporation', original file name: 'helper.exe', md5: 'b44ffe1d5383634be3a58d4f4dcb2aa0', creation time: '11/01/2019 14:34:09', dbindex: 43, reason: ForeignProcess, sig id: 16796 2019-11-01 11:34:10,003 [1738:12] [INFO] [CpepmonBridge] File 'C:\Windows\Temp\nsi6A0F.tmp\CityHash.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:10,003 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Temp\nsi6A0F.tmp\CityHash.dll' Db index: '43' 2019-11-01 11:34:10,004 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:43, file 'C:\Windows\Temp\nsi6A0F.tmp\CityHash.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 1, messages in process: 'Processed' 2019-11-01 11:34:10,005 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Windows\Temp\nsi6A0F.tmp\CityHash.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 5ms 2019-11-01 11:34:10,043 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Windows\Temp\nsi6A0F.tmp\liteFirewallW.dll' fileSize: 9216, md5: 2c8980aa8fad2477864defb3fde39ca4, sha1: 9e400cfa6856637dbe0620fb89ab6482f2308d15, process: Process: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', id: '3500', signer: 'Mozilla Corporation', original file name: 'helper.exe', md5: 'b44ffe1d5383634be3a58d4f4dcb2aa0', creation time: '11/01/2019 14:34:09', dbindex: 43, reason: ForeignProcess, sig id: 16796 2019-11-01 11:34:10,048 [1738:13] [INFO] [CpepmonBridge] File 'C:\Windows\Temp\nsi6A0F.tmp\liteFirewallW.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:10,048 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Temp\nsi6A0F.tmp\liteFirewallW.dll' Db index: '43' 2019-11-01 11:34:10,049 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:43, file 'C:\Windows\Temp\nsi6A0F.tmp\liteFirewallW.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 1, messages in process: 'Processed' 2019-11-01 11:34:10,051 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Windows\Temp\nsi6A0F.tmp\liteFirewallW.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 4ms 2019-11-01 11:34:10,055 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Windows\Temp\nsi6A0F.tmp\ShellLink.dll' fileSize: 4608, md5: d62d3e349689811f838dd10fb216eba1, sha1: edcafd517860cb6b4bd299e20b17ad74a6fa2a5d, process: Process: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', id: '3500', signer: 'Mozilla Corporation', original file name: 'helper.exe', md5: 'b44ffe1d5383634be3a58d4f4dcb2aa0', creation time: '11/01/2019 14:34:09', dbindex: 43, reason: ForeignProcess, sig id: 16796 2019-11-01 11:34:10,060 [1738:13] [INFO] [CpepmonBridge] File 'C:\Windows\Temp\nsi6A0F.tmp\ShellLink.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:10,061 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Temp\nsi6A0F.tmp\ShellLink.dll' Db index: '43' 2019-11-01 11:34:10,061 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:43, file 'C:\Windows\Temp\nsi6A0F.tmp\ShellLink.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 1, messages in process: 'Processed' 2019-11-01 11:34:10,063 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Windows\Temp\nsi6A0F.tmp\ShellLink.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 5ms 2019-11-01 11:34:10,688 [1738:17] [ERROR] [StaticAnalysisConnector] SA Calculation is skipped because SA failed to initialize 2019-11-01 11:34:10,689 [1738:17] [INFO] [Dispatcher] File 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe' is Benign by reputation - mark as white and skip emulation 2019-11-01 11:34:10,689 [1738:17] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:63, file 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:34:10,691 [1738:17] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:11ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:0ms; 2FRTrust:723ms; proces end:1ms; 1UnMap:3180ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 3919ms 2019-11-01 11:34:10,692 [1738:17] [INFO] [Dispatcher] File Processed2, removing from processing queue sha1:'e076bf7545988d7a27296b5ffbb0ab609fde27e4' path:'C:\Program Files\Mozilla Firefox\uninstall\helper.exe' 2019-11-01 11:34:10,692 [1738:17] [INFO] [Dispatcher] Processing finished: sha1 'e076bf7545988d7a27296b5ffbb0ab609fde27e4' path 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe' 2019-11-01 11:34:11,346 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Windows\Temp\nsi6A0F.tmp\UserInfo.dll' fileSize: 4096, md5: 1b446b36f5b4022d50ffdc0cf567b24a, sha1: d9a0a99fe5ea3932cbd2774af285ddf35fcdd4f9, process: Process: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', id: '3500', signer: 'Mozilla Corporation', original file name: 'helper.exe', md5: 'b44ffe1d5383634be3a58d4f4dcb2aa0', creation time: '11/01/2019 14:34:09', dbindex: 63, reason: ForeignProcess, sig id: 16796 2019-11-01 11:34:11,351 [1738:13] [INFO] [CpepmonBridge] File 'C:\Windows\Temp\nsi6A0F.tmp\UserInfo.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:11,351 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Temp\nsi6A0F.tmp\UserInfo.dll' Db index: '63' 2019-11-01 11:34:11,352 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:63, file 'C:\Windows\Temp\nsi6A0F.tmp\UserInfo.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:34:11,353 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Windows\Temp\nsi6A0F.tmp\UserInfo.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 3ms 2019-11-01 11:34:11,358 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Windows\Temp\nsi6A0F.tmp\ServicesHelper.dll' fileSize: 4608, md5: d0b5c37ca029913314dfc21924423c6f, sha1: 864d2de00539e6a3230febddeecda121d0e27051, process: Process: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', id: '3500', signer: 'Mozilla Corporation', original file name: 'helper.exe', md5: 'b44ffe1d5383634be3a58d4f4dcb2aa0', creation time: '11/01/2019 14:34:09', dbindex: 63, reason: ForeignProcess, sig id: 16796 2019-11-01 11:34:11,364 [1738:13] [INFO] [CpepmonBridge] File 'C:\Windows\Temp\nsi6A0F.tmp\ServicesHelper.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:11,364 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Temp\nsi6A0F.tmp\ServicesHelper.dll' Db index: '63' 2019-11-01 11:34:11,365 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:63, file 'C:\Windows\Temp\nsi6A0F.tmp\ServicesHelper.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:34:11,367 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Windows\Temp\nsi6A0F.tmp\ServicesHelper.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:1ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 6ms 2019-11-01 11:34:12,332 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice_tmp.exe' fileSize: 242720, md5: b89103f3e1ba77b9fe86e66fedbae683, sha1: e9399d16935bfe1fd15ffac3cc1f099e48c803fe, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe', id: '3848', signer: 'Mozilla Corporation', original file name: 'maintenanceservice.exe', md5: 'e94b72f28c1557945b40d623c32977d6', creation time: '11/01/2019 14:34:03', dbindex: 4294967295, reason: LocalCopy, sig id: 16796 2019-11-01 11:34:12,333 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'LocalCopy', allowing. Path: 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice_tmp.exe' Db index: '4294967295' 2019-11-01 11:34:12,333 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:4294967295, file 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice_tmp.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:34:12,335 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice_tmp.exe', Times: created:0ms; proces start:0ms; 1UnMap:1ms; 2UnMap:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 2ms 2019-11-01 11:34:12,871 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe' fileSize: 242720, md5: b89103f3e1ba77b9fe86e66fedbae683, sha1: e9399d16935bfe1fd15ffac3cc1f099e48c803fe, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice_tmp.exe', id: '5224', signer: 'Mozilla Corporation', original file name: 'maintenanceservice.exe', md5: 'b89103f3e1ba77b9fe86e66fedbae683', creation time: '11/01/2019 14:34:12', dbindex: 4294967295, reason: LocalCopy, sig id: 16796 2019-11-01 11:34:12,873 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'LocalCopy', allowing. Path: 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe' Db index: '4294967295' 2019-11-01 11:34:12,875 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:4294967295, file 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:34:12,875 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe', Times: created:0ms; proces start:1ms; 1UnMap:2ms; 2UnMap:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 4ms 2019-11-01 11:34:13,023 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\System.dll' fileSize: 11776, md5: 17ed1c86bd67e78ade4712be48a7d2bd, sha1: 1cc9fe86d6d6030b4dae45ecddce5907991c01a0, process: Process: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', id: '6920', signer: 'Mozilla Corporation', original file name: 'helper.exe', md5: 'b44ffe1d5383634be3a58d4f4dcb2aa0', creation time: '11/01/2019 14:34:12', dbindex: 63, reason: None, sig id: 16796 2019-11-01 11:34:13,030 [1738:12] [INFO] [CpepmonBridge] File 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\System.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:13,031 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\System.dll' Db index: '63' 2019-11-01 11:34:13,032 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\System.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:34:13,037 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\CityHash.dll' fileSize: 44544, md5: 737379945745bb94f8a0dadcc18cad8d, sha1: 6a1f497b4dc007f5935b66ec83b00e5a394332c6, process: Process: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', id: '6920', signer: 'Mozilla Corporation', original file name: 'helper.exe', md5: 'b44ffe1d5383634be3a58d4f4dcb2aa0', creation time: '11/01/2019 14:34:12', dbindex: 63, reason: None, sig id: 16796 2019-11-01 11:34:13,041 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\System.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:7ms; total: 14ms 2019-11-01 11:34:13,041 [1738:13] [INFO] [CpepmonBridge] File 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\CityHash.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:13,042 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\CityHash.dll' Db index: '63' 2019-11-01 11:34:13,042 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\CityHash.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:34:13,045 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\CityHash.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:1ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:2ms; proces finish:0ms; total: 7ms 2019-11-01 11:34:14,026 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\ShellLink.dll' fileSize: 4608, md5: d62d3e349689811f838dd10fb216eba1, sha1: edcafd517860cb6b4bd299e20b17ad74a6fa2a5d, process: Process: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', id: '6920', signer: 'Mozilla Corporation', original file name: 'helper.exe', md5: 'b44ffe1d5383634be3a58d4f4dcb2aa0', creation time: '11/01/2019 14:34:12', dbindex: 63, reason: None, sig id: 16796 2019-11-01 11:34:14,031 [1738:13] [INFO] [CpepmonBridge] File 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\ShellLink.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:14,032 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\ShellLink.dll' Db index: '63' 2019-11-01 11:34:14,032 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\ShellLink.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:34:14,034 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\ShellLink.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 4ms 2019-11-01 11:34:14,212 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\UserInfo.dll' fileSize: 4096, md5: 1b446b36f5b4022d50ffdc0cf567b24a, sha1: d9a0a99fe5ea3932cbd2774af285ddf35fcdd4f9, process: Process: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', id: '6920', signer: 'Mozilla Corporation', original file name: 'helper.exe', md5: 'b44ffe1d5383634be3a58d4f4dcb2aa0', creation time: '11/01/2019 14:34:12', dbindex: 63, reason: None, sig id: 16796 2019-11-01 11:34:14,216 [1738:12] [INFO] [CpepmonBridge] File 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\UserInfo.dll' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:34:14,221 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\UserInfo.dll' Db index: '63' 2019-11-01 11:34:14,222 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\UserInfo.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:34:14,239 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\UserInfo.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:5ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:12ms; proces finish:4ms; total: 23ms 2019-11-01 11:34:51,586 [1738:19] [INFO] [Engine+GarbageCollectionTrigger] Garbage collection trigger. Private memory used before: 57440kb; afer: 57496kb, Delta: -56b; Time(ms) used: 12.6953, Total memory: 6686kb 2019-11-01 11:34:52,017 [1738:1c] [INFO] [CpepmonBridge] Associations registry changed, updating kernel. 2019-11-01 11:34:52,021 [1738:1c] [INFO] [CpepmonBridge] Sending commit request for sig: 16796 (exe) 2019-11-01 11:35:06,489 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Users\Admin\Downloads\RevoUninstaller_Portable\RevoUninstaller_Portable\RevoUPort.exe' fileSize: 205440, md5: 2f814a927d097a09911111dbf0fc2e93, sha1: 8e4e953c60653a333182320345209765695d4e17, process: Process: 'C:\Windows\Explorer.EXE', id: '2056', signer: '', original file name: 'EXPLORER.EXE', md5: '38ae1b3c38faef56fe4907922f0385ba', creation time: '11/01/2019 13:49:00', dbindex: 63, reason: None, sig id: 16796 2019-11-01 11:35:06,495 [1738:12] [INFO] [CpepmonBridge] Type has no associations, path: 'C:\Users\Admin\Downloads\RevoUninstaller_Portable\RevoUninstaller_Portable\RevoUPort.exe', type: 'exe' 2019-11-01 11:35:06,759 [1738:12] [INFO] [CpepmonBridge] Type has no associations, path: 'C:\Users\Admin\Downloads\RevoUninstaller_Portable\RevoUninstaller_Portable\RevoUPort.exe', type: 'exe' 2019-11-01 11:35:08,537 [1738:19] [ERROR] [StaticAnalysisConnector] SA Calculation is skipped because SA failed to initialize 2019-11-01 11:35:08,537 [1738:19] [INFO] [Dispatcher] File 'C:\Users\Admin\Downloads\RevoUninstaller_Portable\RevoUninstaller_Portable\RevoUPort.exe' is Benign by reputation - mark as white and skip emulation 2019-11-01 11:35:08,537 [1738:19] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:63, file 'C:\Users\Admin\Downloads\RevoUninstaller_Portable\RevoUninstaller_Portable\RevoUPort.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:35:08,540 [1738:19] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Users\Admin\Downloads\RevoUninstaller_Portable\RevoUninstaller_Portable\RevoUPort.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:0ms; 2FRTrust:264ms; proces end:0ms; 1UnMap:1777ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 2045ms 2019-11-01 11:35:08,540 [1738:19] [INFO] [Dispatcher] File Processed2, removing from processing queue sha1:'8e4e953c60653a333182320345209765695d4e17' path:'C:\Users\Admin\Downloads\RevoUninstaller_Portable\RevoUninstaller_Portable\RevoUPort.exe' 2019-11-01 11:35:08,540 [1738:19] [INFO] [Dispatcher] Processing finished: sha1 '8e4e953c60653a333182320345209765695d4e17' path 'C:\Users\Admin\Downloads\RevoUninstaller_Portable\RevoUninstaller_Portable\RevoUPort.exe' 2019-11-01 11:35:33,689 [1738:1a] [INFO] [BladeNavel] Exit, PolicyID=100 retval=0 2019-11-01 11:35:37,531 [1738:14] [INFO] [CpepmonBridge] First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ZaarInstHelp.dll 2019-11-01 11:35:37,531 [1738:14] [INFO] [CpepmonBridge] pre-filter mapping have not to be created for: C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ZaarInstHelp.dll 2019-11-01 11:35:37,531 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ZaarInstHelp.dll' fileSize: 1129184, md5: 6bb9b98c708d1391f15d939a44426434, sha1: a2ea8ba77d43a946aeecd08f90cf5a9318b74ea1, process: Process: 'C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe', id: '6928', signer: 'Check Point Software Technologies Ltd.', original file name: '', md5: 'da0ef8f262e56d4189870f19cf49f927', creation time: '11/01/2019 14:35:37', dbindex: 63, reason: None, sig id: 16796 2019-11-01 11:35:37,531 [1738:12] [INFO] [CpepmonBridge] First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ZaarInstHelp.dll 2019-11-01 11:35:37,531 [1738:12] [INFO] [CpepmonBridge] Process C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe was filtered access to dbIdx: 63 2019-11-01 11:35:37,531 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'PolicyExclusion', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ZaarInstHelp.dll' Db index: '63' 2019-11-01 11:35:37,531 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ZaarInstHelp.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:35:37,531 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ZaarInstHelp.dll', Times: created:0ms; proces start:2ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 4ms 2019-11-01 11:35:37,546 [1738:14] [INFO] [CpepmonBridge] First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ztel.exe 2019-11-01 11:35:37,562 [1738:14] [INFO] [CpepmonBridge] pre-filter mapping have not to be created for: C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ztel.exe 2019-11-01 11:35:37,562 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ztel.exe' fileSize: 876256, md5: 72c6512474e7bc1d942b503298197cc3, sha1: 5394616a4ffbccde9a766eae258157257bc3722a, process: Process: 'C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe', id: '6928', signer: 'Check Point Software Technologies Ltd.', original file name: '', md5: 'da0ef8f262e56d4189870f19cf49f927', creation time: '11/01/2019 14:35:37', dbindex: 63, reason: None, sig id: 16796 2019-11-01 11:35:37,562 [1738:12] [INFO] [CpepmonBridge] First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ztel.exe 2019-11-01 11:35:37,562 [1738:12] [INFO] [CpepmonBridge] Process C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe was filtered access to dbIdx: 63 2019-11-01 11:35:37,562 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'PolicyExclusion', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ztel.exe' Db index: '63' 2019-11-01 11:35:37,562 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ztel.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:35:37,562 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ztel.exe', Times: created:0ms; proces start:1ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:0ms; proces finish:0ms; total: 1ms 2019-11-01 11:35:37,562 [1738:14] [INFO] [CpepmonBridge] First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\dltel.exe 2019-11-01 11:35:37,562 [1738:14] [INFO] [CpepmonBridge] pre-filter mapping have not to be created for: C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\dltel.exe 2019-11-01 11:35:37,562 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\dltel.exe' fileSize: 827616, md5: 3ab8119292a674e3ab0ed337a81d498c, sha1: 6b1e7ccb4fac4f46fdee652d1356ea4b8629bf39, process: Process: 'C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe', id: '6928', signer: 'Check Point Software Technologies Ltd.', original file name: '', md5: 'da0ef8f262e56d4189870f19cf49f927', creation time: '11/01/2019 14:35:37', dbindex: 63, reason: None, sig id: 16796 2019-11-01 11:35:37,562 [1738:12] [INFO] [CpepmonBridge] First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\dltel.exe 2019-11-01 11:35:37,562 [1738:12] [INFO] [CpepmonBridge] Process C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe was filtered access to dbIdx: 63 2019-11-01 11:35:37,578 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'PolicyExclusion', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\dltel.exe' Db index: '63' 2019-11-01 11:35:37,578 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\dltel.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:35:37,578 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\dltel.exe', Times: created:0ms; proces start:1ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:0ms; proces finish:0ms; total: 2ms 2019-11-01 11:35:37,578 [1738:14] [INFO] [CpepmonBridge] First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\System.dll 2019-11-01 11:35:37,578 [1738:14] [INFO] [CpepmonBridge] pre-filter mapping have not to be created for: C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\System.dll 2019-11-01 11:35:37,578 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\System.dll' fileSize: 11776, md5: 9625d5b1754bc4ff29281d415d27a0fd, sha1: 80e85afc5cccd4c0a3775edbb90595a1a59f5ce0, process: Process: 'C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe', id: '6928', signer: 'Check Point Software Technologies Ltd.', original file name: '', md5: 'da0ef8f262e56d4189870f19cf49f927', creation time: '11/01/2019 14:35:37', dbindex: 63, reason: None, sig id: 16796 2019-11-01 11:35:37,578 [1738:12] [INFO] [CpepmonBridge] First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\System.dll 2019-11-01 11:35:37,578 [1738:12] [INFO] [CpepmonBridge] Process C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe was filtered access to dbIdx: 63 2019-11-01 11:35:37,578 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'PolicyExclusion', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\System.dll' Db index: '63' 2019-11-01 11:35:37,578 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\System.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:35:37,578 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\System.dll', Times: created:0ms; proces start:1ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:2ms; proces finish:0ms; total: 4ms 2019-11-01 11:35:37,609 [1738:14] [INFO] [CpepmonBridge] First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\nsExec.dll 2019-11-01 11:35:37,609 [1738:14] [INFO] [CpepmonBridge] pre-filter mapping have not to be created for: C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\nsExec.dll 2019-11-01 11:35:37,609 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\nsExec.dll' fileSize: 6656, md5: 35200be9cf105f3defe2ae0ee44cea12, sha1: 3f4a09eeb477d3f048cdfb848b95aa39b20d89dc, process: Process: 'C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe', id: '6928', signer: 'Check Point Software Technologies Ltd.', original file name: '', md5: 'da0ef8f262e56d4189870f19cf49f927', creation time: '11/01/2019 14:35:37', dbindex: 63, reason: None, sig id: 16796 2019-11-01 11:35:37,609 [1738:12] [INFO] [CpepmonBridge] First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\nsExec.dll 2019-11-01 11:35:37,625 [1738:12] [INFO] [CpepmonBridge] Process C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe was filtered access to dbIdx: 63 2019-11-01 11:35:37,625 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'PolicyExclusion', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\nsExec.dll' Db index: '63' 2019-11-01 11:35:37,625 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\nsExec.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:35:37,625 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\nsExec.dll', Times: created:0ms; proces start:1ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:0ms; proces finish:0ms; total: 2ms 2019-11-01 11:35:37,859 [1738:14] [INFO] [CpepmonBridge] First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\GraphicalInstaller.dll 2019-11-01 11:35:37,859 [1738:14] [INFO] [CpepmonBridge] pre-filter mapping have not to be created for: C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\GraphicalInstaller.dll 2019-11-01 11:35:37,859 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\GraphicalInstaller.dll' fileSize: 106496, md5: a8585c5c04faf053f310b32baefe69ba, sha1: b0be89ca64abf144dd930783588bb82538ec8d11, process: Process: 'C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe', id: '6928', signer: 'Check Point Software Technologies Ltd.', original file name: '', md5: 'da0ef8f262e56d4189870f19cf49f927', creation time: '11/01/2019 14:35:37', dbindex: 63, reason: None, sig id: 16796 2019-11-01 11:35:37,859 [1738:12] [INFO] [CpepmonBridge] First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\GraphicalInstaller.dll 2019-11-01 11:35:37,859 [1738:12] [INFO] [CpepmonBridge] Process C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe was filtered access to dbIdx: 63 2019-11-01 11:35:37,859 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'PolicyExclusion', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\GraphicalInstaller.dll' Db index: '63' 2019-11-01 11:35:37,859 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\GraphicalInstaller.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:35:37,875 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\GraphicalInstaller.dll', Times: created:0ms; proces start:1ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:0ms; proces finish:0ms; total: 2ms 2019-11-01 11:35:38,265 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Users\Admin\AppData\Local\Temp\~nsuA.tmp\Un_A.exe' fileSize: 51232, md5: b215ea40c70da834afdbe41c580ba663, sha1: ce07326f1b45287b57caa97baabf618fab399277, process: Process: 'C:\Program Files (x86)\CheckPoint\ICM\uninst.exe', id: '5704', signer: 'Check Point Software Technologies Ltd.', original file name: '', md5: 'b215ea40c70da834afdbe41c580ba663', creation time: '11/01/2019 14:35:38', dbindex: 4294967295, reason: LocalCopy, sig id: 16796 2019-11-01 11:35:38,265 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'LocalCopy', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\~nsuA.tmp\Un_A.exe' Db index: '4294967295' 2019-11-01 11:35:38,265 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:4294967295, file 'C:\Users\Admin\AppData\Local\Temp\~nsuA.tmp\Un_A.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:35:38,265 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\~nsuA.tmp\Un_A.exe', Times: created:0ms; proces start:0ms; 1UnMap:0ms; 2UnMap:0ms; 1DbUpdate:2ms; proces finish:0ms; total: 2ms 2019-11-01 11:35:38,390 [1738:14] [INFO] [CpepmonBridge] First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsdC374.tmp\nsExec.dll 2019-11-01 11:35:38,390 [1738:14] [INFO] [CpepmonBridge] pre-filter mapping have not to be created for: C:\Users\Admin\AppData\Local\Temp\nsdC374.tmp\nsExec.dll 2019-11-01 11:35:38,390 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsdC374.tmp\nsExec.dll' fileSize: 6656, md5: b5a1f9dc73e2944a388a61411bdd8c70, sha1: dc9b20df3f3810c2e81a0c54dea385704ba8bef7, process: Process: 'C:\Users\Admin\AppData\Local\Temp\~nsuA.tmp\Un_A.exe', id: '5512', signer: 'Check Point Software Technologies Ltd.', original file name: '', md5: 'b215ea40c70da834afdbe41c580ba663', creation time: '11/01/2019 14:35:38', dbindex: 63, reason: None, sig id: 16796 2019-11-01 11:35:38,390 [1738:12] [INFO] [CpepmonBridge] First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsdC374.tmp\nsExec.dll 2019-11-01 11:35:38,390 [1738:12] [INFO] [CpepmonBridge] Process C:\Users\Admin\AppData\Local\Temp\~nsuA.tmp\Un_A.exe was filtered access to dbIdx: 63 2019-11-01 11:35:38,390 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'PolicyExclusion', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsdC374.tmp\nsExec.dll' Db index: '63' 2019-11-01 11:35:38,390 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsdC374.tmp\nsExec.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:35:38,406 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsdC374.tmp\nsExec.dll', Times: created:0ms; proces start:1ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:0ms; proces finish:0ms; total: 1ms 2019-11-01 11:35:52,015 [1738:1d] [INFO] [CpepmonBridge] Associations registry changed, updating kernel. 2019-11-01 11:35:52,015 [1738:1d] [INFO] [CpepmonBridge] Sending commit request for sig: 16796 (exe) 2019-11-01 11:36:03,828 [1738:13] [INFO] [CpepmonBridge] NewFile event: 'C:\Windows\Installer\MSI26D1.tmp' fileSize: 158720, md5: a6348edb0c4cc417c459a13e733929cb, sha1: b94eb83cde788ddd81968c6975e38901bafa79f6, process: Process: 'C:\Windows\system32\msiexec.exe', id: '5156', signer: '', original file name: 'msiexec.exe', md5: '4153511a1ce96f3ed8f5140e91363242', creation time: '11/01/2019 14:36:03', dbindex: 63, reason: None, sig id: 16796 2019-11-01 11:36:03,828 [1738:13] [INFO] [CpepmonBridge] File 'C:\Windows\Installer\MSI26D1.tmp' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:36:03,828 [1738:13] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Installer\MSI26D1.tmp' Db index: '63' 2019-11-01 11:36:03,828 [1738:13] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:63, file 'C:\Windows\Installer\MSI26D1.tmp', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:36:03,828 [1738:13] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Windows\Installer\MSI26D1.tmp', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 5ms 2019-11-01 11:36:05,343 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Windows\Installer\MSI2CB0.tmp' fileSize: 1559800, md5: 3bc1da8ae6295b781e8f6d7a8bf1ce55, sha1: d7240bf9f077c028e3c4abdaff2c0f70dc738c31, process: Process: 'C:\Windows\system32\msiexec.exe', id: '5156', signer: '', original file name: 'msiexec.exe', md5: '4153511a1ce96f3ed8f5140e91363242', creation time: '11/01/2019 14:36:03', dbindex: 63, reason: None, sig id: 16796 2019-11-01 11:36:05,343 [1738:12] [INFO] [CpepmonBridge] File 'C:\Windows\Installer\MSI2CB0.tmp' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:36:05,343 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Installer\MSI2CB0.tmp' Db index: '63' 2019-11-01 11:36:05,343 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:63, file 'C:\Windows\Installer\MSI2CB0.tmp', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:36:05,343 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Windows\Installer\MSI2CB0.tmp', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 5ms 2019-11-01 11:36:06,546 [1738:3] [WARN] [BladeNavel] channel_Faulted 2019-11-01 11:36:06,546 [1738:3] [WARN] [BladeNavel] Reconnecting.... System.EventArgs 2019-11-01 11:36:06,562 [1738:3] [ERROR] [BladeNavel] There was no endpoint listening at net.pipe://localhost/Cipolla that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details. 2019-11-01 11:36:06,593 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Windows\Installer\MSI3193.tmp' fileSize: 1501432, md5: b010d3a30de3054614920de8d23f1be1, sha1: c9aaa28e068c3fb70cf73f0cc14695b021c5598a, process: Process: 'C:\Windows\system32\msiexec.exe', id: '5156', signer: '', original file name: 'msiexec.exe', md5: '4153511a1ce96f3ed8f5140e91363242', creation time: '11/01/2019 14:36:03', dbindex: 63, reason: None, sig id: 16796 2019-11-01 11:36:06,593 [1738:12] [INFO] [CpepmonBridge] File 'C:\Windows\Installer\MSI3193.tmp' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:36:06,593 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Installer\MSI3193.tmp' Db index: '63' 2019-11-01 11:36:06,593 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:63, file 'C:\Windows\Installer\MSI3193.tmp', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:36:06,593 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Windows\Installer\MSI3193.tmp', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:6ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 8ms 2019-11-01 11:36:16,562 [1738:18] [ERROR] [BladeNavel] There was no endpoint listening at net.pipe://localhost/Cipolla that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details. 2019-11-01 11:36:26,562 [1738:5] [ERROR] [BladeNavel] There was no endpoint listening at net.pipe://localhost/Cipolla that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details. 2019-11-01 11:36:36,562 [1738:1e] [ERROR] [BladeNavel] There was no endpoint listening at net.pipe://localhost/Cipolla that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details. 2019-11-01 11:36:36,625 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Windows\Installer\MSIA6E3.tmp' fileSize: 1559800, md5: 271bc984a6a4be3d007b2c6a40e96dae, sha1: ca5cf125e22bcbf40321a510bff40f4bb26c6eb7, process: Process: 'C:\Windows\system32\msiexec.exe', id: '5156', signer: '', original file name: 'msiexec.exe', md5: '4153511a1ce96f3ed8f5140e91363242', creation time: '11/01/2019 14:36:03', dbindex: 63, reason: None, sig id: 16796 2019-11-01 11:36:36,625 [1738:12] [INFO] [CpepmonBridge] File 'C:\Windows\Installer\MSIA6E3.tmp' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:36:36,625 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Installer\MSIA6E3.tmp' Db index: '63' 2019-11-01 11:36:36,625 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:63, file 'C:\Windows\Installer\MSIA6E3.tmp', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:36:36,625 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Windows\Installer\MSIA6E3.tmp', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 6ms 2019-11-01 11:36:46,562 [1738:1f] [ERROR] [BladeNavel] There was no endpoint listening at net.pipe://localhost/Cipolla that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details. 2019-11-01 11:36:48,234 [1738:12] [INFO] [CpepmonBridge] NewFile event: 'C:\Windows\Installer\MSID43E.tmp' fileSize: 1559800, md5: 3bc1da8ae6295b781e8f6d7a8bf1ce55, sha1: d7240bf9f077c028e3c4abdaff2c0f70dc738c31, process: Process: 'C:\Windows\system32\msiexec.exe', id: '5156', signer: '', original file name: 'msiexec.exe', md5: '4153511a1ce96f3ed8f5140e91363242', creation time: '11/01/2019 14:36:03', dbindex: 63, reason: None, sig id: 16796 2019-11-01 11:36:48,234 [1738:12] [INFO] [CpepmonBridge] File 'C:\Windows\Installer\MSID43E.tmp' has signature id '16796' with type 'pe', eligible: 'false' 2019-11-01 11:36:48,234 [1738:12] [INFO] [CpepmonBridge] File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Installer\MSID43E.tmp' Db index: '63' 2019-11-01 11:36:48,234 [1738:12] [INFO] [CpepmonBridge] FinishFileProcessing dbindex:63, file 'C:\Windows\Installer\MSID43E.tmp', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed' 2019-11-01 11:36:48,234 [1738:12] [INFO] [CpepmonBridge] CpepmonFsEventNewFile: file 'C:\Windows\Installer\MSID43E.tmp', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:2ms; total: 8ms 2019-11-01 11:36:48,250 [1738:17] [FATAL] [Engine] <-------------------- Exiting --------------------------------> 2019-11-01 11:36:48,250 [1738:17] [WARN] [EngineState] Engine state changed from: Running to ShuttingDown 2019-11-01 11:36:48,250 [1738:17] [INFO] [TEAntexConnector] No need to stop antex _initialized is false 2019-11-01 11:36:48,250 [1738:17] [INFO] [Engine] shutdown: Dispatcher 2019-11-01 11:36:48,250 [1738:17] [INFO] [Engine] shutdown: Emulator 2019-11-01 11:36:48,250 [1738:17] [INFO] [Engine] shutdown: Scheduler 2019-11-01 11:36:48,250 [1738:17] [INFO] [Engine] shutdown: PostponeImagesBeingProcessed 2019-11-01 11:36:48,250 [1738:17] [INFO] [Engine] shutdown: ExtensionsConnector 2019-11-01 11:36:48,250 [1738:17] [INFO] [ExtensionsConnector] Going to stop ExtennsionsConnector 2019-11-01 11:36:48,250 [1738:17] [INFO] [Engine] shutdown: UpdatesManager 2019-11-01 11:36:48,250 [1738:4] [INFO] [ExtensionsConnector] Listener is not listening anymore 2019-11-01 11:36:48,250 [1738:17] [INFO] [Engine] shutdown: StaticAnalysis 2019-11-01 11:36:48,250 [1738:17] [INFO] [StaticAnalysisConnector] SA Stop is called 2019-11-01 11:36:48,250 [1738:17] [INFO] [Engine] shutdown: FileReputation 2019-11-01 11:36:48,250 [1738:17] [INFO] [FileReputationConnector] FR Stop is called 2019-11-01 11:36:48,250 [1738:17] [INFO] [FileReputation] Stop Engine is called 2019-11-01 11:36:48,265 [1738:17] [INFO] [Engine] shutdown: Database 2019-11-01 11:36:48,265 [1738:9] [WARN] [Engine] DbControlThread Stopped! 2019-11-01 11:36:48,265 [1738:17] [WARN] [LockableDatabaseContext] Stoping Database... 2019-11-01 11:36:48,281 [1738:17] [WARN] [LockableDatabaseContext] Database Stoped... 2019-11-01 11:36:48,281 [1738:17] [INFO] [Engine] shutdown: UiWrapper 2019-11-01 11:36:48,281 [1738:17] [INFO] [Engine] <-------------------- The End --------------------------------> 2019-11-01 11:36:48,281 [1738:17] [INFO] [Engine] <-------------------- The End --------------------------------> 2019-11-01 11:36:48,281 [1738:17] [INFO] [Engine] <-------------------- The End --------------------------------> 2019-11-01 11:36:52,015 [1738:4] [INFO] [CpepmonBridge] Associations registry changed, updating kernel. 2019-11-01 11:36:52,015 [1738:4] [INFO] [CpepmonBridge] Sending commit request for sig: 16796 (exe) 2019-11-01 11:36:56,562 [1738:20] [ERROR] [BladeNavel] There was no endpoint listening at net.pipe://localhost/Cipolla that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details. 2019-11-01 11:37:06,562 [1738:18] [ERROR] [BladeNavel] There was no endpoint listening at net.pipe://localhost/Cipolla that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details. 2019-11-01 11:37:16,562 [1738:6] [ERROR] [BladeNavel] There was no endpoint listening at net.pipe://localhost/Cipolla that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details.
Ms-Dos/Windows
Unix
Write backup
jsp File Browser version 1.2 by
www.vonloesch.de