SQLite format 3@ ( -  t se/ ##%tableextCountersextCounters CREATE TABLE extCounters ( id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT UNIQUE, t datetime not null, -- date s nvarchar(4000) null, -- strong extension n nvarchar(4000) null, -- naive extension fs int not null, -- files seen se int not null, -- sha1 exclusion pe int not null, -- path exclusion el int not null, -- eligible ce int not null, -- certificate re int not null, -- reputation lcb int not null, -- local cache benign lcml int not null, -- local cache malicious low lcmm int not null, -- local cache malicious medium lcmh int not null, -- local cache malicious high rtexb int not null, -- remote TeX benign raml int not null, -- remote AV malicious low ramm int not null, -- remote AV malicious medium ramh int not null, -- remote AV malicious high rcb int not null, -- remote cache benign rcml int not null, -- remote cache malicious low rcmm int not null, -- remote cache malicious medium rcmh int not null, -- remote cache malicious high reb int not null, -- remote emulation benign reml int not null, -- remote emulation malicious low remm int not null, -- remote emulation malicious medium remh int not null, -- remote emulation malicious high rif int not null, -- remote io failure rwsf int not null, -- remote web secret failure rwof int not null, -- remote web failure rlf int not null, -- remote limit failure rpf int not null, -- remote protocol failure rof int not null -- remote other failure )5 I#indexsqlite_autoindex_extCounters_1extCounters T ))ctableuploadCountersuploadCounters CREATE TABLE uploadCounters ( id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT UNIQUE, ud datetime not null, -- upload date cd datetime not null, -- created date md datetime not null, -- modified date ad datetime not null, -- access date p nvarchar(4000) null, -- dir n nvarchar(4000) null, -- name s nvarchar(4000) null, -- file type a int not null -- attributes ); O)indexsqlite_autoindex_uploadCounters_1uploadCounters A##ItablepathEntriespathEntriesCREATE TABLE pathEntries ( id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT UNIQUE, filePath nvarchar(4000) not null, -- may have problems with UNC file paths status int not null, -- 0 - not processed, 1 - postponed, 2 - failed to read, 3 - failed to emulate, 4 - processed checkCount int not null, -- after reaching the limit will not be rechecked addedTime datetime not null, hashId int null )5I#indexsqlite_autoindex_pathEntries_1pathEntries !## tablehashEntrieshashEntriesCREATE TABLE hashEntries ( id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT UNIQUE, sha1 nchar(40) not null unique, sha256 nchar(64), status int not null, -- 0 - unknown, 1 - benign, 2 - malicious, 3 - not eligible addedTime datetime not null )5I#indexsqlite_autoindex_hashEntries_2hashEntries5I#indexsqlite_autoindex_hashEntries_1hashEntriesP++Ytablesqlite_sequencesqlite_sequenceCREATE TABLE sqlite_sequence(name,seq))--tableinfectionEntriesinfectionEntriesCREATE TABLE infectionEntries ( id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT UNIQUE, sha1 nchar(40) not null, sha256 nchar(64), filePath nvarchar(4000) not null, detectionTime datetime not null, xmlReportPath nvarchar(4000) null, pdfReportPath nvarchar(4000) null, verdictConfidence int not null, -- 0 - unknown, 1 - low, 2 - medium, 3 - high enforcementAction int not null, isVisibleInUi int not null, remediationId int not null, incidentId nchar(36) not null, detectionType int not null )?S-indexsqlite_autoindex_infectionEntries_1infectionEntries   5cpepmonNotificationsB#hashEntries>#pathEntriesC  dbInfo >pX x@ ` ( H  h 0 P  p 8 X x@`(Hh0Pp6>]ca5cf125e22bcbf40321a510bff40f4bb26c6eb7^QP6=]c9aaa28e068c3fb70cf73f0cc14695b021c5598a^j\6<]d7240bf9f077c028e3c4abdaff2c0f70dc738c31^Ӭ,<6;]b94eb83cde788ddd81968c6975e38901bafa79f6^"6:]8e4e953c60653a333182320345209765695d4e17^ذ69]864d2de00539e6a3230febddeecda121d0e27051^؏68]d9a0a99fe5ea3932cbd2774af285ddf35fcdd4f9^؏67]edcafd517860cb6b4bd299e20b17ad74a6fa2a5d^؎66]9e400cfa6856637dbe0620fb89ab6482f2308d15^؎65]6a1f497b4dc007f5935b66ec83b00e5a394332c6^؎64]1cc9fe86d6d6030b4dae45ecddce5907991c01a0^؎Ꟈ63]b444d77897e55e4a63f5c7bc67af538c359337cd^؎=R62]87e3b7733b981bcedd548a3709893592ea623de3^؎;61]e7d89d8d8c118c9c07db72dd52ae17125fc760a3^؎:60]04669214375b25e2dc8a3635484e6eeb206bc4eb^؎986/]402b7b8f8dcfd321b1d12fc85a1ee5137a5569b2^؎8g6.]9874398548891f6a08fc06437996f84eb7495783^؎7O6-]0bffb9ed366853e7019452644d26e8e8f236241b^؎66,]a9aebbbb73b7b846b051325d7572f2398f5986ee^؎6f6+]4bf13db65943e708690d6256d7ddd421cc1cc72b^؎46*]49002b58cb0df2ee8d868dec335133cf225657df^؎4;6)]c84e41fdcc4ca89a76ae683cb390a9b86500d3ca^؎306(]9a4818897251cacb7fe1c6fe1be3e854985186ad^؎1n6']78fa03c89ea12ff93fa499c38673039cc2d55d40^؎16&]60b4cf246c5f414fc1cd12f506c41a1043d473ee^؎06%]9c1df49a8dbdc8496ac6057f886f5c17b2c39e3e^؎/P6$]8b35ec4676bd96c2c4508dc5f98ca471b22deed7^؎-v6#]91eef52c557aefd0fde27e8df4e3c3b7f99862f2^؎-`6"]0c33cfe40edd278a692c2e73e941184fd24286d9^؎,U6!]ec96f7beeaec14d3b6c437b97b4a18a365534b9b^؎+6 ]a19acefa3f95d1b565650fdbc40ef98c793358e9^؎)36]982b5da1c1f5b9d74af6243885bcba605d54df8c^؎)46]7f389e6f2d6e5beb2a3baf622a0c0ea24bc4de60^؎'o6]ee815a158baacb357d9e074c0755b6f6c286b625^؎&_6]eaa07829d012206ac55fb1af5cc6a35f341d22be^؎%a6]24dc1d6415773bfb4e52d45c533e0b635ace587f^؍6]612e6f443d927330b9b8ac13cc4a2a6b959cee48^؍k6]dd1cf5447dc85dad1f5a7dd4f2d1c9f22d97a16c^؍46]c0d68d1252070b3bf1dcdc1b7ff51868a0f50b15^؍06]a238f1af83f43578f59b5371fa22075a1ee41a0f^؍96]e7df9b02ab9b233a800a5c8624c00779f0637739^؍6]b610899ae89bc4426b86c3628d7860dd072cbf65^؍36]6a00fa175dde24dbad7099590f4e8043865b35ab^؍6]e9399d16935bfe1fd15ffac3cc1f099e48c803fe^؍6]82c7d06155f11291dd2ec26b6076bb6f93b77d28^؍s6]2a56a845c901a93524b7f51e5f515e1f4e221810^؍<6]567acbeb9329dc6dc891a6868ce3e0512a862100^؍ 6]eae7f6ce71745ec85986fd0bc40092a36bd13c5c^؍36]26db0c7881810f39ed777330d2e61ab8058d5296^؍A6 ]90444980a36e79c043e6f037841822a9ef89af9d^؍6 ]27f7c627e09537f28fa1572c39d843a58b3a849b^؍`6 ]f97d30144d15390b50102aa86fb8699d923d77ec^؍ئ6 ]1d9f2784aa51ad46c1a6ad88c5ad41565b473157^؍|46 ]199d18d31b8d2df62537daf02d5c35bb9e60a257^؍{6]bdb9078cabf567c09c27eb4f4d3b3444f7928430^؍tt{6]797969145f70906375851f2eadf053e0d8c1e8c6^؍sit6]be859b202410b42c53b5378acf19c00028f2f8a9^؍r6]ca01ba8fe2e91c586b41c0796a7b5e1b414a1ec2^؍q6]4189f4459c54e69c6d3155a82524bda7549a75a6^؍p"86]e076bf7545988d7a27296b5ffbb0ab609fde27e4^؍H6]ea3121688583d39b4549a1c35573108b62d4647d^،B6]414dfc02289926416399fd986a303e32e812c595^،T >~xrlf`ZTNHB<60*$ >>==<<;;::99887766554433221100//..--,,++**))((''&&%%$$##""!!       > l? B Mr 1 S o } & 7    a E P H u) zd #   ^ 4V ,]ca5cf125e22bcbf40321a510bff40f4bb26c6eb7>,]c9aaa28e068c3fb70cf73f0cc14695b021c5598a=,]d7240bf9f077c028e3c4abdaff2c0f70dc738c31<,]b94eb83cde788ddd81968c6975e38901bafa79f6;,]8e4e953c60653a333182320345209765695d4e17:,]864d2de00539e6a3230febddeecda121d0e270519,]d9a0a99fe5ea3932cbd2774af285ddf35fcdd4f98,]edcafd517860cb6b4bd299e20b17ad74a6fa2a5d7,]9e400cfa6856637dbe0620fb89ab6482f2308d156,]6a1f497b4dc007f5935b66ec83b00e5a394332c65,]1cc9fe86d6d6030b4dae45ecddce5907991c01a04,]b444d77897e55e4a63f5c7bc67af538c359337cd3,]87e3b7733b981bcedd548a3709893592ea623de32,]e7d89d8d8c118c9c07db72dd52ae17125fc760a31,]04669214375b25e2dc8a3635484e6eeb206bc4eb0,]402b7b8f8dcfd321b1d12fc85a1ee5137a5569b2/,]9874398548891f6a08fc06437996f84eb7495783.,]0bffb9ed366853e7019452644d26e8e8f236241b-,]a9aebbbb73b7b846b051325d7572f2398f5986ee,,]4bf13db65943e708690d6256d7ddd421cc1cc72b+,]49002b58cb0df2ee8d868dec335133cf225657df*,]c84e41fdcc4ca89a76ae683cb390a9b86500d3ca),]9a4818897251cacb7fe1c6fe1be3e854985186ad(,]78fa03c89ea12ff93fa499c38673039cc2d55d40',]60b4cf246c5f414fc1cd12f506c41a1043d473ee&,]9c1df49a8dbdc8496ac6057f886f5c17b2c39e3e%,]8b35ec4676bd96c2c4508dc5f98ca471b22deed7$,]91eef52c557aefd0fde27e8df4e3c3b7f99862f2#,]0c33cfe40edd278a692c2e73e941184fd24286d9",]ec96f7beeaec14d3b6c437b97b4a18a365534b9b!,]a19acefa3f95d1b565650fdbc40ef98c793358e9 ,]982b5da1c1f5b9d74af6243885bcba605d54df8c,]7f389e6f2d6e5beb2a3baf622a0c0ea24bc4de60,]ee815a158baacb357d9e074c0755b6f6c286b625,]eaa07829d012206ac55fb1af5cc6a35f341d22be,]24dc1d6415773bfb4e52d45c533e0b635ace587f,]612e6f443d927330b9b8ac13cc4a2a6b959cee48,]dd1cf5447dc85dad1f5a7dd4f2d1c9f22d97a16c,]c0d68d1252070b3bf1dcdc1b7ff51868a0f50b15,]a238f1af83f43578f59b5371fa22075a1ee41a0f,]e7df9b02ab9b233a800a5c8624c00779f0637739,]b610899ae89bc4426b86c3628d7860dd072cbf65,]6a00fa175dde24dbad7099590f4e8043865b35ab,]e9399d16935bfe1fd15ffac3cc1f099e48c803fe,]82c7d06155f11291dd2ec26b6076bb6f93b77d28,]2a56a845c901a93524b7f51e5f515e1f4e221810,]567acbeb9329dc6dc891a6868ce3e0512a862100,]eae7f6ce71745ec85986fd0bc40092a36bd13c5c,]26db0c7881810f39ed777330d2e61ab8058d5296,]90444980a36e79c043e6f037841822a9ef89af9d ,]27f7c627e09537f28fa1572c39d843a58b3a849b ,]f97d30144d15390b50102aa86fb8699d923d77ec ,]1d9f2784aa51ad46c1a6ad88c5ad41565b473157 ,]199d18d31b8d2df62537daf02d5c35bb9e60a257 ,]bdb9078cabf567c09c27eb4f4d3b3444f7928430,]797969145f70906375851f2eadf053e0d8c1e8c6,]be859b202410b42c53b5378acf19c00028f2f8a9,]ca01ba8fe2e91c586b41c0796a7b5e1b414a1ec2,]4189f4459c54e69c6d3155a82524bda7549a75a6,]e076bf7545988d7a27296b5ffbb0ab609fde27e4,]ea3121688583d39b4549a1c35573108b62d4647d+] 414dfc02289926416399fd986a303e32e812c595 XTXrKXh7\DeviceXW\Device\HarddiskVolume2\Program Files\Mozilla Firefox\IA2Marshal.dll^؎:?1X]!\Device\HarddiskVolume2\Program Files\Mozilla Firefox\uninstall\helper.exe^؍n \Device\HarddiskVolume2\Prograg\Device\HarddiskVolume2\Users\Admin\Downloads\RGw\Device\HarddiskVolume2\Windows\Installer\MSID43E.tmp^>==<<;;::99887766554433221100//..--,,++**))((''&&%%$$##""!!       : @:1{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0859375,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036840.1669922,"InformationCollectionDuration":0.0839844,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\vcruntime140.dll","Sha1":"414dfc02289926416399fd986a303e32e812c595","Size":87200,"StartingProcessInformation":null,"StrongExtension":"pe"}}^،Z"7{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0019531,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Unknown","VerdictSource":"LocalCopy"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":0.0039063,"InformationCollectionDuration":0.0009766,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"LocalCopy","NotificationReasonFlags":32,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\firefox.exe.moz-callback","Sha1":"11fc6327613fef352f3e15f58559f11443f6d672","Size":522704,"StartingProcessInformation":null,"StrongExtension":null}}^؊8u<k{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0029297,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Unknown","VerdictSource":"LocalCopy"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":3848,"ProcessMd5":"e94b72f28c1557945b40d623c32977d6","ProcessOriginalName":"maintenanceservice.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":1.421875,"InformationCollectionDuration":0.0009766,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"LocalCopy","NotificationReasonFlags":32,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","Sha1":"43591053de2bb6f737d6289dff681820f404b727","Size":393680,"StartingProcessInformation":null,"StrongExtension":null}}^؊o=m{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0126953,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Unknown","VerdictSource":"LocalCopy"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5664,"ProcessMd5":"e94b72f28c1557945b40d623c32977d6","ProcessOriginalName":"maintenanceservice.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":0.0107422,"InformationCollectionDuration":0.0058594,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"LocalCopy","NotificationReasonFlags":32,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","Sha1":"43591053de2bb6f737d6289dff681820f404b727","Size":393680,"StartingProcessInformation":null,"StrongExtension":null}}^؉!a e je%{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.71875,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036840.4560547,"InformationCollectionDuration":0.7167968,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\qipcap64.dll","Sha1":"be859b202410b42c53b5378acf19c00028f2f8a9","Size":17440,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؍sit0S{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.71484379999999992,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036840.4365234,"InformationCollectionDuration":0.71386719999999992,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\softokn3.dll","Sha1":"ca01ba8fe2e91c586b41c0796a7b5e1b414a1ec2","Size":289312,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؍r8G3Y{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.71972649999999994,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036840.419921897,"InformationCollectionDuration":0.71972649999999994,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\ucrtbase.dll","Sha1":"4189f4459c54e69c6d3155a82524bda7549a75a6","Size":1016584,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؍q-?{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.7802734,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"Signed"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036840.3447266,"InformationCollectionDuration":0.7744141,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\updater.exe","Sha1":"ea3121688583d39b4549a1c35573108b62d4647d","Size":394784,"StartingProcessInformation":null,"StrongExtension":"exe"}}^؍p T bT1 U{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.50292969999999992,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036840.841796897,"InformationCollectionDuration":0.50195309999999993,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\nssckbi.dll","Sha1":"f97d30144d15390b50102aa86fb8699d923d77ec","Size":414752,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؍ȏ$ ;{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.46679679999999996,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036840.8203125,"InformationCollectionDuration":0.453125,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\nssdbm3.dll","Sha1":"1d9f2784aa51ad46c1a6ad88c5ad41565b473157","Size":139808,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؍0 S{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.75292969999999992,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"Signed"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036840.4873047,"InformationCollectionDuration":0.75195309999999993,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\plugin-container.exe","Sha1":"bdb9078cabf567c09c27eb4f4d3b3444f7928430","Size":284192,"StartingProcessInformation":null,"StrongExtension":"exe"}}^؍{O> ){"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.7578125,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"Signed"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036840.467773497,"InformationCollectionDuration":0.7568359,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\plugin-hang-ui.exe","Sha1":"797969145f70906375851f2eadf053e0d8c1e8c6","Size":35872,"StartingProcessInformation":null,"StrongExtension":"exe"}}^؍z m dm!5{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.9042968,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"Signed"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036840.499023497,"InformationCollectionDuration":0.90039059999999993,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\pingsender.exe","Sha1":"199d18d31b8d2df62537daf02d5c35bb9e60a257","Size":68128,"StartingProcessInformation":null,"StrongExtension":"exe"}}^؍&‡-{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.4638672,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036840.972656198,"InformationCollectionDuration":0.4628906,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\mozglue.dll","Sha1":"26db0c7881810f39ed777330d2e61ab8058d5296","Size":219168,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؍0S{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.46582029999999996,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036840.9599609,"InformationCollectionDuration":0.46484369999999997,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\msvcp140.dll","Sha1":"90444980a36e79c043e6f037841822a9ef89af9d","Size":625808,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؍o %{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.4775391,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036840.9365234,"InformationCollectionDuration":0.4765625,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\nss3.dll","Sha1":"27f7c627e09537f28fa1572c39d843a58b3a849b","Size":2785824,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؍B = L=-{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.4755859,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"Signed"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036841.0566407,"InformationCollectionDuration":0.4716796,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\minidump-analyzer.exe","Sha1":"2a56a845c901a93524b7f51e5f515e1f4e221810","Size":653856,"StartingProcessInformation":null,"StrongExtension":"exe"}}^؍^χ>o{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.46777349999999995,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"Signed"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036841.067382798,"InformationCollectionDuration":0.46679689999999996,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\maintenanceservice_installer.exe","Sha1":"82c7d06155f11291dd2ec26b6076bb6f93b77d28","Size":161344,"StartingProcessInformation":null,"StrongExtension":"exe"}}^؍^+I{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.45019529999999996,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036841.036132798,"InformationCollectionDuration":0.4472656,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\mozavcodec.dll","Sha1":"567acbeb9329dc6dc891a6868ce3e0512a862100","Size":2057248,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؍Bȇ1U{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.46777349999999995,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036840.9833984,"InformationCollectionDuration":0.46777349999999995,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\mozavutil.dll","Sha1":"eae7f6ce71745ec85986fd0bc40092a36bd13c5c","Size":198176,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؍` [ ][;i{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.3896485,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036840.802734297,"InformationCollectionDuration":0.38867189999999996,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\gmp-clearkey\\0.1\\clearkey.dll","Sha1":"a238f1af83f43578f59b5371fa22075a1ee41a0f","Size":111136,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؍j%={"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.37988289999999997,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036841.2050781,"InformationCollectionDuration":0.3789063,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\lgpllibs.dll","Sha1":"e7df9b02ab9b233a800a5c8624c00779f0637739","Size":37408,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؍I%{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.3759766,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036841.1972656,"InformationCollectionDuration":0.3740234,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\libEGL.dll","Sha1":"b610899ae89bc4426b86c3628d7860dd072cbf65","Size":40992,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؍| 3{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.3691406,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036841.191406198,"InformationCollectionDuration":0.3691406,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\libGLESv2.dll","Sha1":"6a00fa175dde24dbad7099590f4e8043865b35ab","Size":4629536,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؍ s d%s/Q{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.20996099999999998,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036841.487304598,"InformationCollectionDuration":0.2089844,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\d3dcompiler_47.dll","Sha1":"612e6f443d927330b9b8ac13cc4a2a6b959cee48","Size":4346120,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؍{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.3603516,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"Signed"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036841.321289,"InformationCollectionDuration":0.359375,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\firefox.exe","Sha1":"dd1cf5447dc85dad1f5a7dd4f2d1c9f22d97a16c","Size":577568,"StartingProcessInformation":null,"StrongExtension":"exe"}}^؍ԇ(C{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.55664059999999993,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"Signed"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036841.0791016,"InformationCollectionDuration":0.5556641,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\maintenanceservice.exe","Sha1":"e9399d16935bfe1fd15ffac3cc1f099e48c803fe","Size":242720,"StartingProcessInformation":null,"StrongExtension":"exe"}}^؍6%{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.375,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036841.246093698,"InformationCollectionDuration":0.3740235,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\freebl3.dll","Sha1":"c0d68d1252070b3bf1dcdc1b7ff51868a0f50b15","Size":603680,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؍ ( N(< k{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0146485,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036842.497070298,"InformationCollectionDuration":0.013671899999999999,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-string-l1-1-0.dll","Sha1":"7f389e6f2d6e5beb2a3baf622a0c0ea24bc4de60","Size":24840,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؎(,/Q{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0097657,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036842.488281198,"InformationCollectionDuration":0.0078125,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-time-l1-1-0.dll","Sha1":"ee815a158baacb357d9e074c0755b6f6c286b625","Size":21256,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؎'j2W{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0117188,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036842.482421897,"InformationCollectionDuration":0.0097656,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-utility-l1-1-0.dll","Sha1":"eaa07829d012206ac55fb1af5cc6a35f341d22be","Size":19208,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؎'Dه/Q{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.21386709999999998,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"Signed"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036841.513671897,"InformationCollectionDuration":0.21289059999999999,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\crashreporter.exe","Sha1":"24dc1d6415773bfb4e52d45c533e0b635ace587f","Size":231456,"StartingProcessInformation":null,"StrongExtension":"exe"}}^؍;b  B:$g{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0341797,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036842.546875,"InformationCollectionDuration":0.033203199999999995,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-private-l1-1-0.dll","Sha1":"0c33cfe40edd278a692c2e73e941184fd24286d9","Size":71432,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؎,o0#S{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0332031,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036842.5390625,"InformationCollectionDuration":0.0332031,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-process-l1-1-0.dll","Sha1":"ec96f7beeaec14d3b6c437b97b4a18a365534b9b","Size":19720,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؎,U؇0"S{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0283204,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036842.526367098,"InformationCollectionDuration":0.0253907,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-stdio-l1-1-0.dll","Sha1":"982b5da1c1f5b9d74af6243885bcba605d54df8c","Size":24840,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؎*;!i{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.024413999999999998,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036842.5341797,"InformationCollectionDuration":0.0234375,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-runtime-l1-1-0.dll","Sha1":"a19acefa3f95d1b565650fdbc40ef98c793358e9","Size":23304,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؎*:  N ,(K{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0507812,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036842.578125,"InformationCollectionDuration":0.0498047,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-heap-l1-1-0.dll","Sha1":"60b4cf246c5f414fc1cd12f506c41a1043d473ee","Size":19720,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؎1<'k{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.048828199999999995,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036842.568359297,"InformationCollectionDuration":0.0449219,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-locale-l1-1-0.dll","Sha1":"9c1df49a8dbdc8496ac6057f886f5c17b2c39e3e","Size":19208,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؎0=&m{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.045898499999999995,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036842.5546875,"InformationCollectionDuration":0.0439453,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-multibyte-l1-1-0.dll","Sha1":"91eef52c557aefd0fde27e8df4e3c3b7f99862f2","Size":26888,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؎/Pɇ/%Q{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0410156,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036842.561523497,"InformationCollectionDuration":0.0390625,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-math-l1-1-0.dll","Sha1":"8b35ec4676bd96c2c4508dc5f98ca471b22deed7","Size":27912,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؎.X  J H,{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.069335899999999992,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036842.7080079,"InformationCollectionDuration":0.067382799999999993,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-timezone-l1-1-0.dll","Sha1":"4bf13db65943e708690d6256d7ddd421cc1cc72b","Size":19208,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؎5/+Q{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0634766,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036842.690429598,"InformationCollectionDuration":0.0625,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-convert-l1-1-0.dll","Sha1":"c84e41fdcc4ca89a76ae683cb390a9b86500d3ca","Size":22792,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؎3WA*u{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.058593799999999994,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036842.684570298,"InformationCollectionDuration":0.0576172,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-environment-l1-1-0.dll","Sha1":"9a4818897251cacb7fe1c6fe1be3e854985186ad","Size":19208,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؎2P3)Y{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0595703,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036842.6552734,"InformationCollectionDuration":0.0585937,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-filesystem-l1-1-0.dll","Sha1":"78fa03c89ea12ff93fa499c38673039cc2d55d40","Size":20744,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؎2  D40[{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0878907,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036842.96875,"InformationCollectionDuration":0.0859375,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-localization-l1-2-0.dll","Sha1":"9874398548891f6a08fc06437996f84eb7495783","Size":21256,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؎9&|N/{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.077148399999999992,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036842.8359375,"InformationCollectionDuration":0.077148399999999992,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-processthreads-l1-1-1.dll","Sha1":"0bffb9ed366853e7019452644d26e8e8f236241b","Size":19208,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؎7\9.e{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.078125,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036842.7207031,"InformationCollectionDuration":0.077148399999999992,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\api-ms-win-core-synch-l1-2-0.dll","Sha1":"a9aebbbb73b7b846b051325d7572f2398f5986ee","Size":19208,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؎769-e{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0712891,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036842.6992188,"InformationCollectionDuration":0.069335899999999992,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\api-ms-win-crt-conio-l1-1-0.dll","Sha1":"49002b58cb0df2ee8d868dec335133cf225657df","Size":19720,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؎5 ? B?&4?{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0664062,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036843.162109397,"InformationCollectionDuration":0.0654297,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\AccessibleMarshal.dll","Sha1":"87e3b7733b981bcedd548a3709893592ea623de3","Size":28192,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؎7{  };<}{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0078125,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":3500,"ProcessMd5":"b44ffe1d5383634be3a58d4f4dcb2aa0","ProcessOriginalName":"helper.exe","ProcessPath":"C:\\Program Files\\Mozilla Firefox\\uninstall\\helper.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":0,"InformationCollectionDuration":0.006836,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"ForeignProcess","NotificationReasonFlags":8,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Windows\\Temp\\nsi6A0F.tmp\\ServicesHelper.dll","Sha1":"864d2de00539e6a3230febddeecda121d0e27051","Size":4608,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؏nw;{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0058594,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":3500,"ProcessMd5":"b44ffe1d5383634be3a58d4f4dcb2aa0","ProcessOriginalName":"helper.exe","ProcessPath":"C:\\Program Files\\Mozilla Firefox\\uninstall\\helper.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":0.00097649999999999994,"InformationCollectionDuration":0.0048829,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"ForeignProcess","NotificationReasonFlags":8,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Windows\\Temp\\nsi6A0F.tmp\\UserInfo.dll","Sha1":"d9a0a99fe5ea3932cbd2774af285ddf35fcdd4f9","Size":4096,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؏~':A{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":3.9238280999999997,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"White"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5668,"ProcessMd5":"a901c16727dad300e8e538f406d09d50","ProcessOriginalName":"updater.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\update\\updater.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036840.091796897,"InformationCollectionDuration":3.9228516,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files\\Mozilla Firefox\\uninstall\\helper.exe","Sha1":"e076bf7545988d7a27296b5ffbb0ab609fde27e4","Size":940360,"StartingProcessInformation":null,"StrongExtension":"exe"}}^؏Uv9s{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.006836,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":3500,"ProcessMd5":"b44ffe1d5383634be3a58d4f4dcb2aa0","ProcessOriginalName":"helper.exe","ProcessPath":"C:\\Program Files\\Mozilla Firefox\\uninstall\\helper.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":0,"InformationCollectionDuration":0.0058594,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"ForeignProcess","NotificationReasonFlags":8,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Windows\\Temp\\nsi6A0F.tmp\\ShellLink.dll","Sha1":"edcafd517860cb6b4bd299e20b17ad74a6fa2a5d","Size":4608,"StartingProcessInformation":null,"StrongExtension":"pe"}}^؎h B 9kB@{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0078125,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":6920,"ProcessMd5":"b44ffe1d5383634be3a58d4f4dcb2aa0","ProcessOriginalName":"helper.exe","ProcessPath":"C:\\Program Files\\Mozilla Firefox\\uninstall\\helper.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":0,"InformationCollectionDuration":0.0068359,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Users\\__user__\\AppData\\Local\\Temp\\nsm75F5.tmp\\CityHash.dll","Sha1":"6a1f497b4dc007f5935b66ec83b00e5a394332c6","Size":44544,"StartingProcessInformation":null,"StrongExtension":"pe"}}^ؐ?{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.008789,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":6920,"ProcessMd5":"b44ffe1d5383634be3a58d4f4dcb2aa0","ProcessOriginalName":"helper.exe","ProcessPath":"C:\\Program Files\\Mozilla Firefox\\uninstall\\helper.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":0.0009766,"InformationCollectionDuration":0.0078125,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Users\\__user__\\AppData\\Local\\Temp\\nsm75F5.tmp\\System.dll","Sha1":"1cc9fe86d6d6030b4dae45ecddce5907991c01a0","Size":11776,"StartingProcessInformation":null,"StrongExtension":"pe"}}^ؐYK> {"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0039063,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Unknown","VerdictSource":"LocalCopy"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":5224,"ProcessMd5":"b89103f3e1ba77b9fe86e66fedbae683","ProcessOriginalName":"maintenanceservice.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice_tmp.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":32036842.4316406,"InformationCollectionDuration":0.0019531,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"LocalCopy","NotificationReasonFlags":32,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe","Sha1":"e9399d16935bfe1fd15ffac3cc1f099e48c803fe","Size":242720,"StartingProcessInformation":null,"StrongExtension":null}}^ؐͰD={{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0029297,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Unknown","VerdictSource":"LocalCopy"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":3848,"ProcessMd5":"e94b72f28c1557945b40d623c32977d6","ProcessOriginalName":"maintenanceservice.exe","ProcessPath":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":0.0019531,"InformationCollectionDuration":0.0019531,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"LocalCopy","NotificationReasonFlags":32,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice_tmp.exe","Sha1":"e9399d16935bfe1fd15ffac3cc1f099e48c803fe","Size":242720,"StartingProcessInformation":null,"StrongExtension":null}}^ؐPfi  ZB{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.0214844,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":6920,"ProcessMd5":"b44ffe1d5383634be3a58d4f4dcb2aa0","ProcessOriginalName":"helper.exe","ProcessPath":"C:\\Program Files\\Mozilla Firefox\\uninstall\\helper.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":0,"InformationCollectionDuration":0.0097656,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Users\\__user__\\AppData\\Local\\Temp\\nsm75F5.tmp\\UserInfo.dll","Sha1":"d9a0a99fe5ea3932cbd2774af285ddf35fcdd4f9","Size":4096,"StartingProcessInformation":null,"StrongExtension":"pe"}}^ؑr #A9{"Access":[],"Finish":{"TimesUploaded":0,"TotalProcessingDuration":0.006836,"UserAcknowledgedBlocking":false,"UserReleasedFile":false,"Verdict":"Benign","VerdictSource":"TypeNotEligible"},"Trigger":{"AccessingProcessInformation":null,"CreatingProcessInformation":{"ProcessId":6920,"ProcessMd5":"b44ffe1d5383634be3a58d4f4dcb2aa0","ProcessOriginalName":"helper.exe","ProcessPath":"C:\\Program Files\\Mozilla Firefox\\uninstall\\helper.exe","ProcessSignerName":"Mozilla Corporation"},"CreationTimeDelta":0.00097649999999999994,"InformationCollectionDuration":0.0058594,"MagicExtension":16796,"MatchingRule":null,"NotificationReason":"None","NotificationReasonFlags":0,"NotificationType":"NewFile","OperatingMode":"Silent","Path":"C:\\Users\\__user__\\AppData\\Local\\Temp\\nsm75F5.tmp\\ShellLink.dll","Sha1":"edcafd517860cb6b4bd299e20b17ad74a6fa2a5d","Size":4608,"StartingProcessInformation":null,"StrongExtension":"pe"}}^ؑSa