2019-11-01 11:19:46,459 [1738:6] [FATAL] [Engine]  <-------------------- Starting version: '8.60.5.8003' -------------------->
2019-11-01 11:19:46,491 [1738:6] [INFO] [Engine]  *** Security protocols enabled: Tls, Tls11, Tls12
2019-11-01 11:19:46,663 [1738:6] [INFO] [Database]  Creating database: C:\ProgramData\CheckPoint\Endpoint Security\Threat Emulation\TEDB.db
2019-11-01 11:19:48,709 [1738:6] [INFO] [Database]  Insert or update db info: True, version: 2
2019-11-01 11:19:48,725 [1738:9] [WARN] [Engine]  DbControlThread Started!
2019-11-01 11:19:48,725 [1738:6] [WARN] [EngineState]  Engine state changed from: Off to Initializing
2019-11-01 11:19:48,772 [1738:6] [INFO] [ExtensionsConnector]  Start to listen on port: 58145. Authorization value is: 55016fcd-5acf-46cd-a55c-ff16153d69f3
2019-11-01 11:19:48,772 [1738:6] [INFO] [Engine]  DAF is working in Cipolla mode
2019-11-01 11:19:48,772 [1738:6] [INFO] [BladeNavel]  ########## BladeNavel Created ########## in Process TESvc PID=5944 ##########
2019-11-01 11:19:48,803 [1738:6] [INFO] [Engine]  DAF initialized True, current PAC: ePAC_Connected
2019-11-01 11:19:48,803 [1738:6] [WARN] [EngineState]  Engine state changed from: Initializing to Running
2019-11-01 11:19:48,819 [1738:6] [WARN] [SettingsProvider]  Applying default TE policy
2019-11-01 11:19:48,819 [1738:6] [INFO] [SettingsProvider]  BMPolicy: Applying default BMPolicy Rules
2019-11-01 11:19:48,897 [1738:6] [INFO] [SettingsProvider]  BrowserExtensionsAdditionalData te=silent;sa_mode=Silent;upload_limit_per_day=2;upload_limit_per_type=2
2019-11-01 11:19:48,913 [1738:6] [WARN] [SettingsProvider]  Case Sensitive FS processing is disabled.
2019-11-01 11:19:48,913 [1738:6] [WARN] [SettingsProvider]  TE Is License Check enabled: True
2019-11-01 11:19:48,913 [1738:6] [WARN] [SettingsProvider]  TE is working in silent mode.
2019-11-01 11:19:48,913 [1738:6] [WARN] [SettingsProvider]  New summary reports are enabled
2019-11-01 11:19:48,913 [1738:6] [INFO] [SettingsProvider]  BMPolicy: BlockMode policy path not present, loading default BM policy
2019-11-01 11:19:48,913 [1738:6] [INFO] [SettingsProvider]  BMPolicy: Applying default BMPolicy Rules
2019-11-01 11:19:48,975 [1738:6] [INFO] [SettingsProvider]  BMPolicy Applied Configuration:
BlockMode = Silent
AllowUserUnblockFiles = False
BMRules:
	RuleConditions:
		RuleType = ProcessSigner
		RuleValue = Check Point Software Technologies Ltd.
		RuleType = ProcessPath
		RuleValue = *\ISWMGR.exe
	RuleAction = Block
	RuleConditions:
		RuleType = ProcessSigner
		RuleValue = Check Point Software Technologies Ltd.
	RuleAction = Ignore
	RuleConditions:
		RuleType = ProcessPath
		RuleValue = *\CheckPoint\Endpoint Security\UIFramework\Bin\utils\wkhtmltopdf.exe
		RuleType = ProcessMd5
		RuleValue = A81170F8841876FC808AD77EAA4AF956
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = *\McAfee\Agent\*
		RuleType = ProcessSigner
		RuleValue = "McAfee
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = *\Sophos\*
		RuleType = ProcessSigner
		RuleValue = Sophos Limited
	RuleAction = Ignore
	RuleConditions:
		RuleType = ProcessSigner
		RuleValue = Symantec Corporation
	RuleAction = Ignore
	RuleConditions:
		RuleType = ProcessSigner
		RuleValue = Trend Micro
	RuleAction = Ignore
	RuleConditions:
		RuleType = ProcessSigner
		RuleValue = Trend Micro, Inc.
	RuleAction = Ignore
	RuleConditions:
		RuleType = ProcessSigner
		RuleValue = McAfee, Inc.
	RuleAction = Ignore
	RuleConditions:
		RuleType = ProcessSigner
		RuleValue = McAfee ePO Development (SPC)
	RuleAction = Ignore
	RuleConditions:
		RuleType = ProcessSigner
		RuleValue = Kaspersky Lab
	RuleAction = Ignore
	RuleConditions:
		RuleType = ProcessSigner
		RuleValue = Microsoft Windows
		RuleType = ProcessPath
		RuleValue = *SetupPrep.exe
	RuleAction = Ignore
	RuleConditions:
		RuleType = ProcessSigner
		RuleValue = Microsoft Windows
		RuleType = ProcessPath
		RuleValue = *SetupHost.exe
	RuleAction = Ignore
	RuleConditions:
		RuleType = ProcessSigner
		RuleValue = Microsoft Windows Publisher
		RuleType = ProcessPath
		RuleValue = *svchost.exe
		RuleType = Path
		RuleValue = *Windows\SoftwareDistribution\Download*
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = %PROGRAMFILES(X86)%\CheckPoint\*
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = %PROGRAMFILES(X86)%\Common Files\CheckPoint\*
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = %PROGRAMFILES%\CheckPoint\*
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = %PROGRAMFILES%\Common Files\CheckPoint\*
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = %PROGRAMW6432%\CheckPoint\*
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = %PROGRAMW6432%\Common Files\CheckPoint\*
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = %PROGRAMDATA%\CheckPoint\*
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = ?:\SandBlastBackup\*
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = %PROGRAMDATA%\Microsoft\Windows Defender\Scans\FilesStash\*
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = %SYSTEMDRIVE%\Users\*\AppData\Roaming\Microsoft\Powerpoint\*
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = %SYSTEMDRIVE%\Users\*\AppData\Roaming\Microsoft\Word\*
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = %SYSTEMDRIVE%\Users\*\AppData\Roaming\Microsoft\Excel\*
	RuleAction = Ignore
	RuleConditions:
		RuleType = FileType
		RuleValue = gz
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = ?:\Users\*\AppData\Local\Mozilla\Firefox\Profiles\*\startupCache\*
		RuleType = FileType
		RuleValue = zip
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = ?:\Windows\Logs\CBS\CbsPersist_\*.cab
		RuleType = FileType
		RuleValue = cab
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = %WINDIR%\WinSxS\Temp\InFlight\*
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = %WINDIR%\SoftwareDistribution\Download\*
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = %WINDIR%\Windows\CbsTemp\*
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = ?:\ProgramData\Microsoft\Windows\WER\Temp\WER*.csv
		RuleType = FileType
		RuleValue = csv
	RuleAction = Ignore
	RuleConditions:
		RuleType = ProcessPath
		RuleValue = WerFault.exe
		RuleType = ProcessOriginalFilename
		RuleValue = WerFault.exe
		RuleType = ProcessSigner
		RuleValue = Microsoft Windows
	RuleAction = Ignore
	RuleConditions:
		RuleType = ProcessPath
		RuleValue = wermgr.exe
		RuleType = ProcessOriginalFilename
		RuleValue = WerMgr
		RuleType = ProcessSigner
		RuleValue = Microsoft Windows
	RuleAction = Ignore
	RuleConditions:
		RuleType = ProcessPath
		RuleValue = WerFaultSecure.exe
		RuleType = ProcessOriginalFilename
		RuleValue = WerFaultSecure.exe
		RuleType = ProcessSigner
		RuleValue = Microsoft Windows
	RuleAction = Ignore
	RuleConditions:
		RuleType = ProcessPath
		RuleValue = CompatTelRunner.exe
		RuleType = ProcessOriginalFilename
		RuleValue = CompatTelRunner.exe
		RuleType = ProcessSigner
		RuleValue = Microsoft Windows
	RuleAction = Ignore
	RuleConditions:
		RuleType = ProcessPath
		RuleValue = MsMpEng.exe
		RuleType = ProcessOriginalFilename
		RuleValue = MsMpEng.exe
		RuleType = ProcessSigner
		RuleValue = Microsoft Corporation
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = C:\ProgramData\CheckPoint\Endpoint Security\Threat Emulation\Backup\
	RuleAction = Ignore
	RuleConditions:
		RuleType = Path
		RuleValue = C:\ProgramData\CheckPoint\Endpoint Security\Threat Emulation\Reports\
	RuleAction = Ignore

2019-11-01 11:19:48,975 [1738:6] [INFO] [SettingsProvider]  SAPolicy: Applying default SAPolicy
2019-11-01 11:19:48,975 [1738:6] [INFO] [SettingsProvider]  SAPolicy: parse mode Silent from guidb edit
2019-11-01 11:19:48,975 [1738:6] [INFO] [SettingsProvider]  SA Policy : SA Mode = Silent , Telemetry mode = True , Timeout = 3 , Detection Confidence = Medium
2019-11-01 11:19:48,975 [1738:6] [INFO] [SettingsProvider]  FRPolicy: Applying default FRPolicy
2019-11-01 11:19:48,975 [1738:6] [INFO] [SettingsProvider]  FR Policy : File Reputation Mode = Silent , Telemetry mode = True , Verdict Confidence = Low, Fuzzy hashing enabled=True
2019-11-01 11:19:48,975 [1738:6] [INFO] [SettingsProvider]  upload_limit_per_day == 2
2019-11-01 11:19:48,991 [1738:6] [INFO] [SettingsProvider]  upload_limit_per_type == 2
2019-11-01 11:19:48,991 [1738:6] [INFO] [SettingsProvider]  TE policy applied: PAC: ePAC_Disconnected, Ver: 1, Name: Default TE settings
2019-11-01 11:19:48,991 [1738:6] [INFO] [TEAntexConnector]  AntexNotificationCallback return code:0x1
2019-11-01 11:19:49,006 [1738:6] [INFO] [Enforcement]  Initializing remediation...
2019-11-01 11:19:49,053 [1738:6] [INFO] [CertificateHelper]  Certificate attributes unwanted NotSignatureValid, UntrustedRoot, PartialChain, CtlNotSignatureValid, CtlNotValidForUsage
2019-11-01 11:19:49,084 [1738:6] [WARN] [Engine]  Configuring dynamic settings
2019-11-01 11:19:49,084 [1738:6] [INFO] [TlsSslPublicKeyVerifier]  Configuring trust mode: 'TrustByRootCaCertificateList'
2019-11-01 11:19:49,100 [1738:6] [INFO] [LoadManager]  Notify Inspection Site Changed
2019-11-01 11:19:49,100 [1738:6] [INFO] [LoadManager]  Inspection site pool organized. Clouds: 1, Appliances: 0
2019-11-01 11:19:49,100 [1738:b] [INFO] [ChromeExtensionManager]  DeployemntMonitorThread: deploying..
2019-11-01 11:19:49,100 [1738:6] [INFO] [LoadManager]  Inspection site '0' of '1' instance Type: 'GlobalCloud', Url base: 'https://te.checkpoint.com/tecloud/sba/v1/file/'
2019-11-01 11:19:49,163 [1738:6] [INFO] [Engine]  Eligible file type extensions from TE policy:
exe 
2019-11-01 11:19:49,194 [1738:6] [INFO] [Dispatcher]  FS events. CPEPMon: 'Silent', Max file size: '10485760', Process exclusions: '5'
2019-11-01 11:19:49,194 [1738:6] [INFO] [Dispatcher]  Process exclusion 1 of 5: FT: , FP: , SHA1: , MD5: , PP: WerFault.exe, PSN: Microsoft Windows, PON: WerFault.exe, PMD5: 
2019-11-01 11:19:49,194 [1738:6] [INFO] [Dispatcher]  Process exclusion 2 of 5: FT: , FP: , SHA1: , MD5: , PP: wermgr.exe, PSN: Microsoft Windows, PON: WerMgr, PMD5: 
2019-11-01 11:19:49,194 [1738:6] [INFO] [Dispatcher]  Process exclusion 3 of 5: FT: , FP: , SHA1: , MD5: , PP: WerFaultSecure.exe, PSN: Microsoft Windows, PON: WerFaultSecure.exe, PMD5: 
2019-11-01 11:19:49,194 [1738:6] [INFO] [Dispatcher]  Process exclusion 4 of 5: FT: , FP: , SHA1: , MD5: , PP: CompatTelRunner.exe, PSN: Microsoft Windows, PON: CompatTelRunner.exe, PMD5: 
2019-11-01 11:19:49,209 [1738:6] [INFO] [Dispatcher]  Process exclusion 5 of 5: FT: , FP: , SHA1: , MD5: , PP: MsMpEng.exe, PSN: Microsoft Corporation, PON: MsMpEng.exe, PMD5: 
2019-11-01 11:19:49,209 [1738:6] [INFO] [Dispatcher]   *** TE Config: cpepmonMode:Silent, Enable_te:True, FileMonitorEnabled:True
2019-11-01 11:19:50,522 [1738:6] [INFO] [CpepmonBridge]  Found processor cores: 2
2019-11-01 11:19:50,522 [1738:6] [INFO] [CpepmonBridge]  Starting Processing threads: 2
2019-11-01 11:19:50,538 [1738:6] [WARN] [CpepmonBridge]  Reported about volume 'C:\' of type 'TeVolumeFixed'
2019-11-01 11:19:50,553 [1738:6] [INFO] [CpepmonBridge]  Sending commit request for sig: 16796 (exe)
2019-11-01 11:19:50,553 [1738:16] [INFO] [Dispatcher]  DispatcherQuant is :1000
2019-11-01 11:19:50,553 [1738:6] [INFO] [UpdaterTasks]  Updater task interval 2 was taken from default.
2019-11-01 11:19:50,678 [1738:6] [INFO] [StaticAnalysisConnector]  SA Start is called
2019-11-01 11:19:50,834 [1738:6] [INFO] [FileReputationConnector]  FR Start is called
2019-11-01 11:19:50,834 [1738:6] [INFO] [FileReputation]  Start Engine is called
2019-11-01 11:19:50,850 [1738:6] [INFO] [PolicyHandler]  Apply FR policy is been called
2019-11-01 11:19:50,850 [1738:6] [INFO] [PolicyHandler]  FR policy: File Reputation Mode = Silent , Telemetry mode = True , Verdict Confidence = Low, Fuzzy hashing enabled=True
2019-11-01 11:19:50,850 [1738:6] [INFO] [Engine]  Engine initialized
2019-11-01 11:19:51,559 [1738:5] [INFO] [Engine+GarbageCollectionTrigger]  Garbage collection trigger. Private memory used before: 48836kb; afer: 48768kb, Delta: 68b; Time(ms) used: 0, Total memory: 4808kb
2019-11-01 11:20:03,668 [1738:1a] [INFO] [BladeNavel]  Exit, PolicyID=100 retval=0
2019-11-01 11:20:52,012 [1738:19] [INFO] [CpepmonBridge]  Associations registry changed, updating kernel.
2019-11-01 11:20:52,012 [1738:19] [INFO] [CpepmonBridge]  Sending commit request for sig: 16796 (exe)
2019-11-01 11:24:51,555 [1738:5] [INFO] [Engine+GarbageCollectionTrigger]  Garbage collection trigger. Private memory used before: 52160kb; afer: 52232kb, Delta: -72b; Time(ms) used: 0, Total memory: 5511kb
2019-11-01 11:25:13,686 [1738:1a] [INFO] [BladeNavel]  Exit, PolicyID=100 retval=0
2019-11-01 11:29:51,577 [1738:18] [INFO] [Engine+GarbageCollectionTrigger]  Garbage collection trigger. Private memory used before: 52540kb; afer: 52540kb, Delta: 0b; Time(ms) used: 0, Total memory: 5538kb
2019-11-01 11:30:23,686 [1738:1a] [INFO] [BladeNavel]  Exit, PolicyID=100 retval=0
2019-11-01 11:33:52,030 [1738:17] [INFO] [CpepmonBridge]  Associations registry changed, updating kernel.
2019-11-01 11:33:52,033 [1738:17] [INFO] [CpepmonBridge]  Sending commit request for sig: 16796 (exe)
2019-11-01 11:34:01,673 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe' fileSize: 393680, md5: a901c16727dad300e8e538f406d09d50, sha1: 43591053de2bb6f737d6289dff681820f404b727, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe', id: '5664', signer: 'Mozilla Corporation', original file name: 'maintenanceservice.exe', md5: 'e94b72f28c1557945b40d623c32977d6', creation time: '11/01/2019 14:34:01', dbindex: 4294967295, reason: LocalCopy, sig id: 16796
2019-11-01 11:34:01,678 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'LocalCopy', allowing. Path: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe' Db index: '4294967295'
2019-11-01 11:34:01,681 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:4294967295, file 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:34:01,688 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', Times: created:0ms; proces start:1ms; 1UnMap:5ms; 2UnMap:0ms; 1DbUpdate:6ms; proces finish:0ms; total: 12ms
2019-11-01 11:34:03,083 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe' fileSize: 393680, md5: a901c16727dad300e8e538f406d09d50, sha1: 43591053de2bb6f737d6289dff681820f404b727, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe', id: '3848', signer: 'Mozilla Corporation', original file name: 'maintenanceservice.exe', md5: 'e94b72f28c1557945b40d623c32977d6', creation time: '11/01/2019 14:34:03', dbindex: 4294967295, reason: LocalCopy, sig id: 16796
2019-11-01 11:34:03,084 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'LocalCopy', allowing. Path: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe' Db index: '4294967295'
2019-11-01 11:34:03,085 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:4294967295, file 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:34:03,086 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', Times: created:0ms; proces start:0ms; 1UnMap:1ms; 2UnMap:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 2ms
2019-11-01 11:34:03,124 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\firefox.exe.moz-callback' fileSize: 522704, md5: 68ad21ca1a0070b39a53a4d7b98fcce3, sha1: 11fc6327613fef352f3e15f58559f11443f6d672, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 4294967295, reason: LocalCopy, sig id: 16796
2019-11-01 11:34:03,125 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'LocalCopy', allowing. Path: 'C:\Program Files\Mozilla Firefox\firefox.exe.moz-callback' Db index: '4294967295'
2019-11-01 11:34:03,125 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:4294967295, file 'C:\Program Files\Mozilla Firefox\firefox.exe.moz-callback', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:34:03,125 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\firefox.exe.moz-callback', Times: created:0ms; proces start:0ms; 1UnMap:0ms; 2UnMap:0ms; 1DbUpdate:0ms; proces finish:0ms; total: 0ms
2019-11-01 11:34:06,714 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\vcruntime140.dll' fileSize: 87200, md5: 6e2b2ddb1bc783122018d99d38497298, sha1: 414dfc02289926416399fd986a303e32e812c595, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 63, reason: None, sig id: 16796
2019-11-01 11:34:06,733 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\updater.exe' fileSize: 394784, md5: 10f58f28781e94fc2fda753ebe727101, sha1: ea3121688583d39b4549a1c35573108b62d4647d, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 62, reason: None, sig id: 16796
2019-11-01 11:34:06,748 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\vcruntime140.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:06,749 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\vcruntime140.dll' Db index: '63'
2019-11-01 11:34:06,750 [1738:13] [INFO] [CpepmonBridge]  Type has no associations, path: 'C:\Program Files\Mozilla Firefox\updater.exe', type: 'exe'
2019-11-01 11:34:06,750 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:63, file 'C:\Program Files\Mozilla Firefox\vcruntime140.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 1, messages in process: 'Processed'
2019-11-01 11:34:06,778 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\vcruntime140.dll', Times: created:0ms; 1premap:48ms; 2premap:1ms; proces start:1ms; fill start:2ms; 1open stream:20ms; 2open stream:0ms; 1backup:0ms; unmap before:5ms; unmap after:0ms; 2backup:0ms; 1classify:1ms; 1UnMap:3ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:12ms; proces finish:14ms; total: 107ms
2019-11-01 11:34:06,778 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe' fileSize: 940360, md5: b44ffe1d5383634be3a58d4f4dcb2aa0, sha1: e076bf7545988d7a27296b5ffbb0ab609fde27e4, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 63, reason: None, sig id: 16796
2019-11-01 11:34:06,783 [1738:12] [INFO] [CpepmonBridge]  Type has no associations, path: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', type: 'exe'
2019-11-01 11:34:07,490 [1738:12] [ERROR] [ZoneLabsCertificateRepository]  Could not load certificate file: System.IO.IOException: The process cannot access the file 'C:\Program Files (x86)\CheckPoint\Endpoint Security\Reputation\pa_certs.xml' because it is being used by another process.
   at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
   at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
   at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy)
   at System.IO.FileStream..ctor(String path, FileMode mode)
   at EPNetUtils.Helper.XMLHelper.XMLDeserializeObjectFromPath[T](String path)
   at FR.DAL.DTOs.ZoneLabsCertificateRepository.get__zaCertificatesContainer()
2019-11-01 11:34:07,507 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\updater.exe' is signed by trusted vendor
2019-11-01 11:34:07,507 [1738:12] [INFO] [CpepmonBridge]  Type has no associations, path: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', type: 'exe'
2019-11-01 11:34:07,508 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\ucrtbase.dll' fileSize: 1016584, md5: 0e0bac3d1dcc1833eae4e3e4cf83c4ef, sha1: 4189f4459c54e69c6d3155a82524bda7549a75a6, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 61, reason: None, sig id: 16796
2019-11-01 11:34:07,507 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'Signed', allowing. Path: 'C:\Program Files\Mozilla Firefox\updater.exe' Db index: '62'
2019-11-01 11:34:07,512 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:62, file 'C:\Program Files\Mozilla Firefox\updater.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 22, messages in process: 'Processed'
2019-11-01 11:34:07,515 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\ucrtbase.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:07,516 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\ucrtbase.dll' Db index: '61'
2019-11-01 11:34:07,516 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:61, file 'C:\Program Files\Mozilla Firefox\ucrtbase.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 21, messages in process: 'Processed'
2019-11-01 11:34:07,517 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\updater.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:7ms; 2open stream:0ms; 1backup:0ms; unmap before:7ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:1ms; 2FRTrust:756ms; 1UnMap:5ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:3ms; total: 780ms
2019-11-01 11:34:07,518 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\softokn3.dll' fileSize: 289312, md5: 263aee0f2bcd3d28d29b1af44f82ec38, sha1: ca01ba8fe2e91c586b41c0796a7b5e1b414a1ec2, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 60, reason: None, sig id: 16796
2019-11-01 11:34:07,522 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\softokn3.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:07,522 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\softokn3.dll' Db index: '60'
2019-11-01 11:34:07,523 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:60, file 'C:\Program Files\Mozilla Firefox\softokn3.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 20, messages in process: 'Processed'
2019-11-01 11:34:07,524 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\softokn3.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:709ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 712ms
2019-11-01 11:34:07,525 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\qipcap64.dll' fileSize: 17440, md5: 39b06c108ef0c0c3f79f389d0e0875f0, sha1: be859b202410b42c53b5378acf19c00028f2f8a9, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 59, reason: None, sig id: 16796
2019-11-01 11:34:07,529 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\qipcap64.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:07,518 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\ucrtbase.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:712ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:2ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:0ms; proces finish:0ms; total: 716ms
2019-11-01 11:34:07,530 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\plugin-hang-ui.exe' fileSize: 35872, md5: a07b72b1d024038ca802551b8e0a1eec, sha1: 797969145f70906375851f2eadf053e0d8c1e8c6, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 58, reason: None, sig id: 16796
2019-11-01 11:34:07,529 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\qipcap64.dll' Db index: '59'
2019-11-01 11:34:07,531 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:59, file 'C:\Program Files\Mozilla Firefox\qipcap64.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 19, messages in process: 'Processed'
2019-11-01 11:34:07,535 [1738:12] [INFO] [CpepmonBridge]  Type has no associations, path: 'C:\Program Files\Mozilla Firefox\plugin-hang-ui.exe', type: 'exe'
2019-11-01 11:34:07,537 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\qipcap64.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:712ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:3ms; proces finish:2ms; total: 720ms
2019-11-01 11:34:07,537 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\plugin-container.exe' fileSize: 284192, md5: 28785c05bdb460ee6513e36d8470a4d6, sha1: bdb9078cabf567c09c27eb4f4d3b3444f7928430, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 57, reason: None, sig id: 16796
2019-11-01 11:34:07,545 [1738:13] [INFO] [CpepmonBridge]  Type has no associations, path: 'C:\Program Files\Mozilla Firefox\plugin-container.exe', type: 'exe'
2019-11-01 11:34:07,573 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\plugin-hang-ui.exe' is signed by trusted vendor
2019-11-01 11:34:07,574 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'Signed', allowing. Path: 'C:\Program Files\Mozilla Firefox\plugin-hang-ui.exe' Db index: '58'
2019-11-01 11:34:07,574 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:58, file 'C:\Program Files\Mozilla Firefox\plugin-hang-ui.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 19, messages in process: 'Processed'
2019-11-01 11:34:07,582 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\plugin-container.exe' is signed by trusted vendor
2019-11-01 11:34:07,582 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'Signed', allowing. Path: 'C:\Program Files\Mozilla Firefox\plugin-container.exe' Db index: '57'
2019-11-01 11:34:07,583 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:57, file 'C:\Program Files\Mozilla Firefox\plugin-container.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 18, messages in process: 'Processed'
2019-11-01 11:34:07,582 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\plugin-hang-ui.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:712ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:0ms; 2FRTrust:37ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:6ms; total: 759ms
2019-11-01 11:34:07,583 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\plugin-container.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:707ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:5ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:11ms; 2FRTrust:24ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 750ms
2019-11-01 11:34:07,584 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\pingsender.exe' fileSize: 68128, md5: 0b1b03ed9634f5be4571255777b019d1, sha1: 199d18d31b8d2df62537daf02d5c35bb9e60a257, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 56, reason: None, sig id: 16796
2019-11-01 11:34:07,584 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\nssdbm3.dll' fileSize: 139808, md5: e51dc26e2524cbc516570dc1007044a9, sha1: 1d9f2784aa51ad46c1a6ad88c5ad41565b473157, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 55, reason: None, sig id: 16796
2019-11-01 11:34:07,591 [1738:12] [INFO] [CpepmonBridge]  Type has no associations, path: 'C:\Program Files\Mozilla Firefox\pingsender.exe', type: 'exe'
2019-11-01 11:34:07,592 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\nssdbm3.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:07,593 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\nssdbm3.dll' Db index: '55'
2019-11-01 11:34:07,605 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:55, file 'C:\Program Files\Mozilla Firefox\nssdbm3.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 17, messages in process: 'Processed'
2019-11-01 11:34:07,613 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\nssdbm3.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:444ms; fill start:0ms; 1open stream:5ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:1ms; 1UnMap:13ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:2ms; proces finish:5ms; total: 470ms
2019-11-01 11:34:07,644 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\nssckbi.dll' fileSize: 414752, md5: df2461693bc4d30e9b9c2b4a6ab43a20, sha1: f97d30144d15390b50102aa86fb8699d923d77ec, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 54, reason: None, sig id: 16796
2019-11-01 11:34:07,657 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\nssckbi.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:07,657 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\nssckbi.dll' Db index: '54'
2019-11-01 11:34:07,658 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:54, file 'C:\Program Files\Mozilla Firefox\nssckbi.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 16, messages in process: 'Processed'
2019-11-01 11:34:07,714 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\nssckbi.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:489ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:3ms; unmap after:0ms; 2backup:0ms; 1classify:4ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:55ms; total: 556ms
2019-11-01 11:34:07,714 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\nss3.dll' fileSize: 2785824, md5: cf7dd9af7ec477896c45c5b4dbd42ac3, sha1: 27f7c627e09537f28fa1572c39d843a58b3a849b, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 53, reason: None, sig id: 16796
2019-11-01 11:34:07,721 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\nss3.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:07,721 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\nss3.dll' Db index: '53'
2019-11-01 11:34:07,721 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:53, file 'C:\Program Files\Mozilla Firefox\nss3.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 16, messages in process: 'Processed'
2019-11-01 11:34:07,724 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\nss3.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:469ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 473ms
2019-11-01 11:34:07,724 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\msvcp140.dll' fileSize: 625808, md5: eb1b46c4b900e4c83066760a737986cd, sha1: 90444980a36e79c043e6f037841822a9ef89af9d, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 52, reason: None, sig id: 16796
2019-11-01 11:34:07,729 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\msvcp140.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:07,729 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\msvcp140.dll' Db index: '52'
2019-11-01 11:34:07,730 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:52, file 'C:\Program Files\Mozilla Firefox\msvcp140.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 15, messages in process: 'Processed'
2019-11-01 11:34:07,732 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\msvcp140.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:460ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 463ms
2019-11-01 11:34:07,732 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\mozglue.dll' fileSize: 219168, md5: 1063845e31a89491022465bbadc8a647, sha1: 26db0c7881810f39ed777330d2e61ab8058d5296, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 51, reason: None, sig id: 16796
2019-11-01 11:34:07,736 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\pingsender.exe' is signed by trusted vendor
2019-11-01 11:34:07,736 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'Signed', allowing. Path: 'C:\Program Files\Mozilla Firefox\pingsender.exe' Db index: '56'
2019-11-01 11:34:07,736 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\mozglue.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:07,737 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\mozglue.dll' Db index: '51'
2019-11-01 11:34:07,737 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:51, file 'C:\Program Files\Mozilla Firefox\mozglue.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 13, messages in process: 'Processed'
2019-11-01 11:34:07,737 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:56, file 'C:\Program Files\Mozilla Firefox\pingsender.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 14, messages in process: 'Processed'
2019-11-01 11:34:07,739 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\mozglue.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:458ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 462ms
2019-11-01 11:34:07,741 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\mozavutil.dll' fileSize: 198176, md5: 1f134252ac4b67ea74f6a4af6d5e7dea, sha1: eae7f6ce71745ec85986fd0bc40092a36bd13c5c, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 50, reason: None, sig id: 16796
2019-11-01 11:34:07,741 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\pingsender.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:748ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:3ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:0ms; 2FRTrust:143ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:3ms; proces finish:0ms; total: 899ms
2019-11-01 11:34:07,743 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\mozavcodec.dll' fileSize: 2057248, md5: 27d04e47806a904c50f730ba9bdd5ae8, sha1: 567acbeb9329dc6dc891a6868ce3e0512a862100, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 49, reason: None, sig id: 16796
2019-11-01 11:34:07,748 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\mozavutil.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:07,750 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\mozavutil.dll' Db index: '50'
2019-11-01 11:34:07,750 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:50, file 'C:\Program Files\Mozilla Firefox\mozavutil.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 13, messages in process: 'Processed'
2019-11-01 11:34:07,751 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\mozavutil.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:459ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:2ms; 1UnMap:2ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 466ms
2019-11-01 11:34:07,751 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\minidump-analyzer.exe' fileSize: 653856, md5: c4badc720e4173d5e2b3ba0668159875, sha1: 2a56a845c901a93524b7f51e5f515e1f4e221810, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 48, reason: None, sig id: 16796
2019-11-01 11:34:07,756 [1738:13] [INFO] [CpepmonBridge]  Type has no associations, path: 'C:\Program Files\Mozilla Firefox\minidump-analyzer.exe', type: 'exe'
2019-11-01 11:34:07,749 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\mozavcodec.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:07,776 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\mozavcodec.dll' Db index: '49'
2019-11-01 11:34:07,777 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:49, file 'C:\Program Files\Mozilla Firefox\mozavcodec.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 12, messages in process: 'Processed'
2019-11-01 11:34:07,781 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\mozavcodec.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:413ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:27ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:2ms; proces finish:1ms; total: 447ms
2019-11-01 11:34:07,782 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe' fileSize: 161344, md5: 22eb79a356265f9f4c8f6091e92573f4, sha1: 82c7d06155f11291dd2ec26b6076bb6f93b77d28, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 47, reason: None, sig id: 16796
2019-11-01 11:34:07,791 [1738:12] [INFO] [CpepmonBridge]  Type has no associations, path: 'C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe', type: 'exe'
2019-11-01 11:34:07,815 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\minidump-analyzer.exe' is signed by trusted vendor
2019-11-01 11:34:07,815 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe' is signed by trusted vendor
2019-11-01 11:34:07,816 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'Signed', allowing. Path: 'C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe' Db index: '47'
2019-11-01 11:34:07,816 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:47, file 'C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 11, messages in process: 'Processed'
2019-11-01 11:34:07,815 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'Signed', allowing. Path: 'C:\Program Files\Mozilla Firefox\minidump-analyzer.exe' Db index: '48'
2019-11-01 11:34:07,818 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:48, file 'C:\Program Files\Mozilla Firefox\minidump-analyzer.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 10, messages in process: 'Processed'
2019-11-01 11:34:07,820 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:433ms; fill start:0ms; 1open stream:7ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:0ms; 2FRTrust:23ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:2ms; total: 466ms
2019-11-01 11:34:07,820 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\maintenanceservice.exe' fileSize: 242720, md5: b89103f3e1ba77b9fe86e66fedbae683, sha1: e9399d16935bfe1fd15ffac3cc1f099e48c803fe, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 46, reason: None, sig id: 16796
2019-11-01 11:34:07,825 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\minidump-analyzer.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:408ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:0ms; 2FRTrust:58ms; 1UnMap:3ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:5ms; total: 477ms
2019-11-01 11:34:07,825 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\libGLESv2.dll' fileSize: 4629536, md5: bb3a4d79144560ca433006b4ddf92863, sha1: 6a00fa175dde24dbad7099590f4e8043865b35ab, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 45, reason: None, sig id: 16796
2019-11-01 11:34:07,833 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\libGLESv2.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:07,833 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\libGLESv2.dll' Db index: '45'
2019-11-01 11:34:07,833 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:45, file 'C:\Program Files\Mozilla Firefox\libGLESv2.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 9, messages in process: 'Processed'
2019-11-01 11:34:07,835 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\libGLESv2.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:360ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:2ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 365ms
2019-11-01 11:34:07,836 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\libEGL.dll' fileSize: 40992, md5: cbb619330f0dd78807564437e4811b19, sha1: b610899ae89bc4426b86c3628d7860dd072cbf65, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 44, reason: None, sig id: 16796
2019-11-01 11:34:07,840 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\libEGL.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:07,826 [1738:12] [INFO] [CpepmonBridge]  Type has no associations, path: 'C:\Program Files\Mozilla Firefox\maintenanceservice.exe', type: 'exe'
2019-11-01 11:34:07,841 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\libEGL.dll' Db index: '44'
2019-11-01 11:34:07,842 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:44, file 'C:\Program Files\Mozilla Firefox\libEGL.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 8, messages in process: 'Processed'
2019-11-01 11:34:07,844 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\libEGL.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:368ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 372ms
2019-11-01 11:34:07,845 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\lgpllibs.dll' fileSize: 37408, md5: 4063eae8875b9138fdd25ad09e79d523, sha1: e7df9b02ab9b233a800a5c8624c00779f0637739, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 43, reason: None, sig id: 16796
2019-11-01 11:34:07,850 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\lgpllibs.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:07,850 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\lgpllibs.dll' Db index: '43'
2019-11-01 11:34:07,851 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:43, file 'C:\Program Files\Mozilla Firefox\lgpllibs.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 7, messages in process: 'Processed'
2019-11-01 11:34:07,862 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\lgpllibs.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:374ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:10ms; total: 388ms
2019-11-01 11:34:07,863 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\clearkey.dll' fileSize: 111136, md5: 080b6117126f9cb4f57787513d1a14fa, sha1: a238f1af83f43578f59b5371fa22075a1ee41a0f, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 42, reason: None, sig id: 16796
2019-11-01 11:34:07,871 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\clearkey.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:07,871 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\clearkey.dll' Db index: '42'
2019-11-01 11:34:07,872 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:42, file 'C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\clearkey.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 6, messages in process: 'Processed'
2019-11-01 11:34:07,874 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\clearkey.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:381ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:3ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 388ms
2019-11-01 11:34:07,874 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\freebl3.dll' fileSize: 603680, md5: cdab11c27b936df9340ba3ff58995353, sha1: c0d68d1252070b3bf1dcdc1b7ff51868a0f50b15, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 41, reason: None, sig id: 16796
2019-11-01 11:34:07,879 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\freebl3.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:07,879 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\freebl3.dll' Db index: '41'
2019-11-01 11:34:07,880 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:41, file 'C:\Program Files\Mozilla Firefox\freebl3.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 5, messages in process: 'Processed'
2019-11-01 11:34:07,882 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\freebl3.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:368ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 372ms
2019-11-01 11:34:07,882 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\firefox.exe' fileSize: 577568, md5: c1a8461f26a7aa5baefcc2926fc2f989, sha1: dd1cf5447dc85dad1f5a7dd4f2d1c9f22d97a16c, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 59, reason: None, sig id: 16796
2019-11-01 11:34:07,889 [1738:13] [INFO] [CpepmonBridge]  Type has no associations, path: 'C:\Program Files\Mozilla Firefox\firefox.exe', type: 'exe'
2019-11-01 11:34:07,913 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\maintenanceservice.exe' is signed by trusted vendor
2019-11-01 11:34:07,914 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'Signed', allowing. Path: 'C:\Program Files\Mozilla Firefox\maintenanceservice.exe' Db index: '46'
2019-11-01 11:34:07,914 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:46, file 'C:\Program Files\Mozilla Firefox\maintenanceservice.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 4, messages in process: 'Processed'
2019-11-01 11:34:07,916 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\maintenanceservice.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:462ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:16ms; 2FRTrust:71ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 553ms
2019-11-01 11:34:07,916 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\d3dcompiler_47.dll' fileSize: 4346120, md5: 222d020bd33c90170a8296adc1b7036a, sha1: 612e6f443d927330b9b8ac13cc4a2a6b959cee48, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 54, reason: None, sig id: 16796
2019-11-01 11:34:07,922 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\firefox.exe' is signed by trusted vendor
2019-11-01 11:34:07,924 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'Signed', allowing. Path: 'C:\Program Files\Mozilla Firefox\firefox.exe' Db index: '59'
2019-11-01 11:34:07,924 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:59, file 'C:\Program Files\Mozilla Firefox\firefox.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 3, messages in process: 'Processed'
2019-11-01 11:34:07,926 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\firefox.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:317ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:0ms; 2FRTrust:33ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 357ms
2019-11-01 11:34:07,926 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\crashreporter.exe' fileSize: 231456, md5: 289ae8627d965b5591b98a5e47216ad0, sha1: 24dc1d6415773bfb4e52d45c533e0b635ace587f, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 51, reason: None, sig id: 16796
2019-11-01 11:34:07,924 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\d3dcompiler_47.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:07,930 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\d3dcompiler_47.dll' Db index: '54'
2019-11-01 11:34:07,931 [1738:13] [INFO] [CpepmonBridge]  Type has no associations, path: 'C:\Program Files\Mozilla Firefox\crashreporter.exe', type: 'exe'
2019-11-01 11:34:07,931 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:54, file 'C:\Program Files\Mozilla Firefox\d3dcompiler_47.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 2, messages in process: 'Processed'
2019-11-01 11:34:07,940 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\d3dcompiler_47.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:195ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:3ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:6ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:7ms; total: 214ms
2019-11-01 11:34:07,955 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\crashreporter.exe' is signed by trusted vendor
2019-11-01 11:34:07,955 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'Signed', allowing. Path: 'C:\Program Files\Mozilla Firefox\crashreporter.exe' Db index: '51'
2019-11-01 11:34:07,956 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:51, file 'C:\Program Files\Mozilla Firefox\crashreporter.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 1, messages in process: 'Processed'
2019-11-01 11:34:07,957 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\crashreporter.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:185ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:0ms; 2FRTrust:23ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 211ms
2019-11-01 11:34:08,699 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-utility-l1-1-0.dll' fileSize: 19208, md5: 54f27114eb0fda1588362bb6b5567979, sha1: eaa07829d012206ac55fb1af5cc6a35f341d22be, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 51, reason: None, sig id: 16796
2019-11-01 11:34:08,701 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-time-l1-1-0.dll' fileSize: 21256, md5: 6b33b34888ccecca636971fbea5e3de0, sha1: ee815a158baacb357d9e074c0755b6f6c286b625, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 54, reason: None, sig id: 16796
2019-11-01 11:34:08,708 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-time-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,708 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-utility-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,708 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-time-l1-1-0.dll' Db index: '54'
2019-11-01 11:34:08,708 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-utility-l1-1-0.dll' Db index: '51'
2019-11-01 11:34:08,709 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:51, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-utility-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 4, messages in process: 'Processed'
2019-11-01 11:34:08,709 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:54, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-time-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 5, messages in process: 'Processed'
2019-11-01 11:34:08,711 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-utility-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:3ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 8ms
2019-11-01 11:34:08,711 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-string-l1-1-0.dll' fileSize: 24840, md5: 96da689947c6e215a009b9c1eca5aec2, sha1: 7f389e6f2d6e5beb2a3baf622a0c0ea24bc4de60, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 59, reason: None, sig id: 16796
2019-11-01 11:34:08,715 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-time-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:1ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:4ms; proces finish:1ms; total: 11ms
2019-11-01 11:34:08,716 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-string-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,717 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-string-l1-1-0.dll' Db index: '59'
2019-11-01 11:34:08,717 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:59, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-string-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 6, messages in process: 'Processed'
2019-11-01 11:34:08,717 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-stdio-l1-1-0.dll' fileSize: 24840, md5: 76e0a89c91a28cf7657779d998e679e5, sha1: 982b5da1c1f5b9d74af6243885bcba605d54df8c, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 46, reason: None, sig id: 16796
2019-11-01 11:34:08,719 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-string-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:8ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 12ms
2019-11-01 11:34:08,720 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-runtime-l1-1-0.dll' fileSize: 23304, md5: 8b9b0d1c8b0e9d4b576d42c66980977a, sha1: a19acefa3f95d1b565650fdbc40ef98c793358e9, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 41, reason: None, sig id: 16796
2019-11-01 11:34:08,730 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-stdio-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,731 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-runtime-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,731 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-runtime-l1-1-0.dll' Db index: '41'
2019-11-01 11:34:08,732 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:41, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-runtime-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 11, messages in process: 'Processed'
2019-11-01 11:34:08,731 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-stdio-l1-1-0.dll' Db index: '46'
2019-11-01 11:34:08,734 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:46, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-stdio-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 11, messages in process: 'Processed'
2019-11-01 11:34:08,734 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-runtime-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:12ms; fill start:0ms; 1open stream:8ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:1ms; total: 22ms
2019-11-01 11:34:08,735 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-process-l1-1-0.dll' fileSize: 19720, md5: 595d79870970565be93db076afbe73b5, sha1: ec96f7beeaec14d3b6c437b97b4a18a365534b9b, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 51, reason: None, sig id: 16796
2019-11-01 11:34:08,741 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-stdio-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:13ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:3ms; unmap after:0ms; 2backup:0ms; 1classify:2ms; 1UnMap:3ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:2ms; proces finish:4ms; total: 31ms
2019-11-01 11:34:08,742 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-private-l1-1-0.dll' fileSize: 71432, md5: 50740f0bc326f0637c4166698298d218, sha1: 0c33cfe40edd278a692c2e73e941184fd24286d9, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 54, reason: None, sig id: 16796
2019-11-01 11:34:08,742 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-process-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,743 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-process-l1-1-0.dll' Db index: '51'
2019-11-01 11:34:08,743 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:51, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-process-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 14, messages in process: 'Processed'
2019-11-01 11:34:08,746 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-private-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,747 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-private-l1-1-0.dll' Db index: '54'
2019-11-01 11:34:08,747 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:54, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-private-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 14, messages in process: 'Processed'
2019-11-01 11:34:08,747 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-process-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:25ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:2ms; proces finish:1ms; total: 33ms
2019-11-01 11:34:08,749 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-multibyte-l1-1-0.dll' fileSize: 26888, md5: 4e033cfee32edf6be7847e80a5114894, sha1: 91eef52c557aefd0fde27e8df4e3c3b7f99862f2, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 42, reason: None, sig id: 16796
2019-11-01 11:34:08,749 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-private-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:27ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 30ms
2019-11-01 11:34:08,750 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-math-l1-1-0.dll' fileSize: 27912, md5: 4dd7a61590d07500704e7e775255cb00, sha1: 8b35ec4676bd96c2c4508dc5f98ca471b22deed7, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 59, reason: None, sig id: 16796
2019-11-01 11:34:08,757 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-math-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,757 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-math-l1-1-0.dll' Db index: '59'
2019-11-01 11:34:08,758 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:59, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-math-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 14, messages in process: 'Processed'
2019-11-01 11:34:08,758 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-multibyte-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,760 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-math-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:31ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 38ms
2019-11-01 11:34:08,760 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-multibyte-l1-1-0.dll' Db index: '42'
2019-11-01 11:34:08,761 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-locale-l1-1-0.dll' fileSize: 19208, md5: ab206f2943977256ca3a59e5961e3a4f, sha1: 9c1df49a8dbdc8496ac6057f886f5c17b2c39e3e, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 43, reason: None, sig id: 16796
2019-11-01 11:34:08,761 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:42, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-multibyte-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 13, messages in process: 'Processed'
2019-11-01 11:34:08,765 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-locale-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,766 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-multibyte-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:32ms; fill start:0ms; 1open stream:6ms; 2open stream:0ms; 1backup:0ms; unmap before:2ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:3ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:3ms; proces finish:0ms; total: 46ms
2019-11-01 11:34:08,766 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-locale-l1-1-0.dll' Db index: '43'
2019-11-01 11:34:08,766 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-heap-l1-1-0.dll' fileSize: 19720, md5: f9e20dd3b07766307fccf463ab26e3ca, sha1: 60b4cf246c5f414fc1cd12f506c41a1043d473ee, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 44, reason: None, sig id: 16796
2019-11-01 11:34:08,766 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:43, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-locale-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 12, messages in process: 'Processed'
2019-11-01 11:34:08,772 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-locale-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:40ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:4ms; proces finish:0ms; total: 47ms
2019-11-01 11:34:08,772 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-filesystem-l1-1-0.dll' fileSize: 20744, md5: f0d507de92851a8c0404ac78c383c5cd, sha1: 78fa03c89ea12ff93fa499c38673039cc2d55d40, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 45, reason: None, sig id: 16796
2019-11-01 11:34:08,772 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-heap-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,773 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-heap-l1-1-0.dll' Db index: '44'
2019-11-01 11:34:08,773 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:44, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-heap-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 11, messages in process: 'Processed'
2019-11-01 11:34:08,778 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-heap-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:43ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:2ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:2ms; proces finish:2ms; total: 51ms
2019-11-01 11:34:08,779 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-environment-l1-1-0.dll' fileSize: 19208, md5: c712515d052a385991d30b9c6afc767f, sha1: 9a4818897251cacb7fe1c6fe1be3e854985186ad, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 48, reason: None, sig id: 16796
2019-11-01 11:34:08,783 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-filesystem-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,784 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-filesystem-l1-1-0.dll' Db index: '45'
2019-11-01 11:34:08,784 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:45, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-filesystem-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 12, messages in process: 'Processed'
2019-11-01 11:34:08,784 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-environment-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,785 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-environment-l1-1-0.dll' Db index: '48'
2019-11-01 11:34:08,785 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:48, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-environment-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 11, messages in process: 'Processed'
2019-11-01 11:34:08,786 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-filesystem-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:47ms; fill start:0ms; 1open stream:7ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:2ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 57ms
2019-11-01 11:34:08,786 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-convert-l1-1-0.dll' fileSize: 22792, md5: d53637eab49fe1fe1bd45d12f8e69c1f, sha1: c84e41fdcc4ca89a76ae683cb390a9b86500d3ca, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 47, reason: None, sig id: 16796
2019-11-01 11:34:08,791 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-convert-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,791 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-convert-l1-1-0.dll' Db index: '47'
2019-11-01 11:34:08,791 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:47, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-convert-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 10, messages in process: 'Processed'
2019-11-01 11:34:08,791 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-environment-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:51ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:5ms; total: 61ms
2019-11-01 11:34:08,792 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-conio-l1-1-0.dll' fileSize: 19720, md5: 6c88d0006cf852f2d8462dfa4e9ca8d1, sha1: 49002b58cb0df2ee8d868dec335133cf225657df, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 41, reason: None, sig id: 16796
2019-11-01 11:34:08,793 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-convert-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:56ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 60ms
2019-11-01 11:34:08,793 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-timezone-l1-1-0.dll' fileSize: 19208, md5: f62b66f451f2daa8410ad62d453fa0a2, sha1: 4bf13db65943e708690d6256d7ddd421cc1cc72b, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 46, reason: None, sig id: 16796
2019-11-01 11:34:08,801 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\api-ms-win-core-timezone-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,801 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-timezone-l1-1-0.dll' Db index: '46'
2019-11-01 11:34:08,802 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-conio-l1-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,802 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-conio-l1-1-0.dll' Db index: '41'
2019-11-01 11:34:08,802 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:46, file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-timezone-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 10, messages in process: 'Processed'
2019-11-01 11:34:08,803 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:41, file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-conio-l1-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 9, messages in process: 'Processed'
2019-11-01 11:34:08,805 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-timezone-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:59ms; fill start:0ms; 1open stream:5ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:2ms; proces finish:0ms; total: 67ms
2019-11-01 11:34:08,805 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-synch-l1-2-0.dll' fileSize: 19208, md5: 47388f3966e732706054fe3d530ed0dc, sha1: a9aebbbb73b7b846b051325d7572f2398f5986ee, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 49, reason: None, sig id: 16796
2019-11-01 11:34:08,807 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-crt-conio-l1-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:60ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:3ms; unmap after:0ms; 2backup:0ms; 1classify:1ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:1ms; total: 71ms
2019-11-01 11:34:08,807 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-processthreads-l1-1-1.dll' fileSize: 19208, md5: d699333637db92d319661286df7cc39e, sha1: 0bffb9ed366853e7019452644d26e8e8f236241b, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 50, reason: None, sig id: 16796
2019-11-01 11:34:08,813 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\api-ms-win-core-synch-l1-2-0.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,813 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-synch-l1-2-0.dll' Db index: '49'
2019-11-01 11:34:08,814 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:49, file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-synch-l1-2-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 8, messages in process: 'Processed'
2019-11-01 11:34:08,814 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\api-ms-win-core-processthreads-l1-1-1.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,815 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-processthreads-l1-1-1.dll' Db index: '50'
2019-11-01 11:34:08,815 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:50, file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-processthreads-l1-1-1.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 7, messages in process: 'Processed'
2019-11-01 11:34:08,816 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-synch-l1-2-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:69ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:3ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:1ms; total: 77ms
2019-11-01 11:34:08,817 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-localization-l1-2-0.dll' fileSize: 21256, md5: 588bd2a8e0152e0918742c1a69038f1d, sha1: 9874398548891f6a08fc06437996f84eb7495783, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 56, reason: None, sig id: 16796
2019-11-01 11:34:08,819 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-processthreads-l1-1-1.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:69ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:1ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:2ms; total: 77ms
2019-11-01 11:34:08,819 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l2-1-0.dll' fileSize: 18696, md5: bfffa7117fd9b1622c66d949bac3f1d7, sha1: 402b7b8f8dcfd321b1d12fc85a1ee5137a5569b2, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 51, reason: None, sig id: 16796
2019-11-01 11:34:08,825 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\api-ms-win-core-localization-l1-2-0.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,826 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-localization-l1-2-0.dll' Db index: '56'
2019-11-01 11:34:08,826 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:56, file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-localization-l1-2-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 6, messages in process: 'Processed'
2019-11-01 11:34:08,827 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l2-1-0.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,829 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-localization-l1-2-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:76ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:3ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 84ms
2019-11-01 11:34:08,830 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l1-2-0.dll' fileSize: 18696, md5: 49c3ffd47257dbcb67a6be9ee112ba7f, sha1: 04669214375b25e2dc8a3635484e6eeb206bc4eb, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 54, reason: None, sig id: 16796
2019-11-01 11:34:08,829 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l2-1-0.dll' Db index: '51'
2019-11-01 11:34:08,832 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:51, file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l2-1-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 5, messages in process: 'Processed'
2019-11-01 11:34:08,835 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l1-2-0.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,835 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l2-1-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:75ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:1ms; 1UnMap:4ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:3ms; proces finish:0ms; total: 87ms
2019-11-01 11:34:08,836 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\IA2Marshal.dll' fileSize: 79904, md5: 52c37828543f2a221ded27d80be9949a, sha1: e7d89d8d8c118c9c07db72dd52ae17125fc760a3, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 44, reason: None, sig id: 16796
2019-11-01 11:34:08,835 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l1-2-0.dll' Db index: '54'
2019-11-01 11:34:08,837 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:54, file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l1-2-0.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 4, messages in process: 'Processed'
2019-11-01 11:34:08,841 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l1-2-0.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:83ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:2ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:2ms; proces finish:0ms; total: 89ms
2019-11-01 11:34:08,841 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\IA2Marshal.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,842 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\AccessibleMarshal.dll' fileSize: 28192, md5: 37552e083f77a953e543240724729eaf, sha1: 87e3b7733b981bcedd548a3709893592ea623de3, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 43, reason: None, sig id: 16796
2019-11-01 11:34:08,842 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\IA2Marshal.dll' Db index: '44'
2019-11-01 11:34:08,843 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:44, file 'C:\Program Files\Mozilla Firefox\IA2Marshal.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 3, messages in process: 'Processed'
2019-11-01 11:34:08,847 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\AccessibleMarshal.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,848 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\AccessibleMarshal.dll' Db index: '43'
2019-11-01 11:34:08,848 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:43, file 'C:\Program Files\Mozilla Firefox\AccessibleMarshal.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 2, messages in process: 'Processed'
2019-11-01 11:34:08,847 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\IA2Marshal.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:57ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:3ms; proces finish:0ms; total: 64ms
2019-11-01 11:34:08,850 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\AccessibleMarshal.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:60ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 64ms
2019-11-01 11:34:08,851 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files\Mozilla Firefox\AccessibleHandler.dll' fileSize: 166944, md5: bf9e90b9009ef68315f0b4dac2afd948, sha1: b444d77897e55e4a63f5c7bc67af538c359337cd, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe', id: '5668', signer: 'Mozilla Corporation', original file name: 'updater.exe', md5: 'a901c16727dad300e8e538f406d09d50', creation time: '11/01/2019 14:34:03', dbindex: 47, reason: None, sig id: 16796
2019-11-01 11:34:08,858 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Program Files\Mozilla Firefox\AccessibleHandler.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:08,859 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Program Files\Mozilla Firefox\AccessibleHandler.dll' Db index: '47'
2019-11-01 11:34:08,859 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:47, file 'C:\Program Files\Mozilla Firefox\AccessibleHandler.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 1, messages in process: 'Processed'
2019-11-01 11:34:08,861 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\AccessibleHandler.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:60ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 64ms
2019-11-01 11:34:09,985 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Windows\Temp\nsi6A0F.tmp\System.dll' fileSize: 11776, md5: 17ed1c86bd67e78ade4712be48a7d2bd, sha1: 1cc9fe86d6d6030b4dae45ecddce5907991c01a0, process: Process: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', id: '3500', signer: 'Mozilla Corporation', original file name: 'helper.exe', md5: 'b44ffe1d5383634be3a58d4f4dcb2aa0', creation time: '11/01/2019 14:34:09', dbindex: 47, reason: ForeignProcess, sig id: 16796
2019-11-01 11:34:09,993 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Windows\Temp\nsi6A0F.tmp\System.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:09,994 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Temp\nsi6A0F.tmp\System.dll' Db index: '47'
2019-11-01 11:34:09,994 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:47, file 'C:\Windows\Temp\nsi6A0F.tmp\System.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 1, messages in process: 'Processed'
2019-11-01 11:34:09,996 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Windows\Temp\nsi6A0F.tmp\System.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:4ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 7ms
2019-11-01 11:34:09,997 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Windows\Temp\nsi6A0F.tmp\CityHash.dll' fileSize: 44544, md5: 737379945745bb94f8a0dadcc18cad8d, sha1: 6a1f497b4dc007f5935b66ec83b00e5a394332c6, process: Process: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', id: '3500', signer: 'Mozilla Corporation', original file name: 'helper.exe', md5: 'b44ffe1d5383634be3a58d4f4dcb2aa0', creation time: '11/01/2019 14:34:09', dbindex: 43, reason: ForeignProcess, sig id: 16796
2019-11-01 11:34:10,003 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Windows\Temp\nsi6A0F.tmp\CityHash.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:10,003 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Temp\nsi6A0F.tmp\CityHash.dll' Db index: '43'
2019-11-01 11:34:10,004 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:43, file 'C:\Windows\Temp\nsi6A0F.tmp\CityHash.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 1, messages in process: 'Processed'
2019-11-01 11:34:10,005 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Windows\Temp\nsi6A0F.tmp\CityHash.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 5ms
2019-11-01 11:34:10,043 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Windows\Temp\nsi6A0F.tmp\liteFirewallW.dll' fileSize: 9216, md5: 2c8980aa8fad2477864defb3fde39ca4, sha1: 9e400cfa6856637dbe0620fb89ab6482f2308d15, process: Process: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', id: '3500', signer: 'Mozilla Corporation', original file name: 'helper.exe', md5: 'b44ffe1d5383634be3a58d4f4dcb2aa0', creation time: '11/01/2019 14:34:09', dbindex: 43, reason: ForeignProcess, sig id: 16796
2019-11-01 11:34:10,048 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Windows\Temp\nsi6A0F.tmp\liteFirewallW.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:10,048 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Temp\nsi6A0F.tmp\liteFirewallW.dll' Db index: '43'
2019-11-01 11:34:10,049 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:43, file 'C:\Windows\Temp\nsi6A0F.tmp\liteFirewallW.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 1, messages in process: 'Processed'
2019-11-01 11:34:10,051 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Windows\Temp\nsi6A0F.tmp\liteFirewallW.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 4ms
2019-11-01 11:34:10,055 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Windows\Temp\nsi6A0F.tmp\ShellLink.dll' fileSize: 4608, md5: d62d3e349689811f838dd10fb216eba1, sha1: edcafd517860cb6b4bd299e20b17ad74a6fa2a5d, process: Process: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', id: '3500', signer: 'Mozilla Corporation', original file name: 'helper.exe', md5: 'b44ffe1d5383634be3a58d4f4dcb2aa0', creation time: '11/01/2019 14:34:09', dbindex: 43, reason: ForeignProcess, sig id: 16796
2019-11-01 11:34:10,060 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Windows\Temp\nsi6A0F.tmp\ShellLink.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:10,061 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Temp\nsi6A0F.tmp\ShellLink.dll' Db index: '43'
2019-11-01 11:34:10,061 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:43, file 'C:\Windows\Temp\nsi6A0F.tmp\ShellLink.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 1, messages in process: 'Processed'
2019-11-01 11:34:10,063 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Windows\Temp\nsi6A0F.tmp\ShellLink.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 5ms
2019-11-01 11:34:10,688 [1738:17] [ERROR] [StaticAnalysisConnector]  SA Calculation is skipped because SA failed to initialize
2019-11-01 11:34:10,689 [1738:17] [INFO] [Dispatcher]  File 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe' is Benign by reputation - mark as white and skip emulation
2019-11-01 11:34:10,689 [1738:17] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:63, file 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:34:10,691 [1738:17] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:11ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:0ms; 2FRTrust:723ms; proces end:1ms; 1UnMap:3180ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 3919ms
2019-11-01 11:34:10,692 [1738:17] [INFO] [Dispatcher]  File Processed2, removing from processing queue sha1:'e076bf7545988d7a27296b5ffbb0ab609fde27e4' path:'C:\Program Files\Mozilla Firefox\uninstall\helper.exe'
2019-11-01 11:34:10,692 [1738:17] [INFO] [Dispatcher]  Processing finished: sha1 'e076bf7545988d7a27296b5ffbb0ab609fde27e4' path 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe'
2019-11-01 11:34:11,346 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Windows\Temp\nsi6A0F.tmp\UserInfo.dll' fileSize: 4096, md5: 1b446b36f5b4022d50ffdc0cf567b24a, sha1: d9a0a99fe5ea3932cbd2774af285ddf35fcdd4f9, process: Process: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', id: '3500', signer: 'Mozilla Corporation', original file name: 'helper.exe', md5: 'b44ffe1d5383634be3a58d4f4dcb2aa0', creation time: '11/01/2019 14:34:09', dbindex: 63, reason: ForeignProcess, sig id: 16796
2019-11-01 11:34:11,351 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Windows\Temp\nsi6A0F.tmp\UserInfo.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:11,351 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Temp\nsi6A0F.tmp\UserInfo.dll' Db index: '63'
2019-11-01 11:34:11,352 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:63, file 'C:\Windows\Temp\nsi6A0F.tmp\UserInfo.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:34:11,353 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Windows\Temp\nsi6A0F.tmp\UserInfo.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 3ms
2019-11-01 11:34:11,358 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Windows\Temp\nsi6A0F.tmp\ServicesHelper.dll' fileSize: 4608, md5: d0b5c37ca029913314dfc21924423c6f, sha1: 864d2de00539e6a3230febddeecda121d0e27051, process: Process: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', id: '3500', signer: 'Mozilla Corporation', original file name: 'helper.exe', md5: 'b44ffe1d5383634be3a58d4f4dcb2aa0', creation time: '11/01/2019 14:34:09', dbindex: 63, reason: ForeignProcess, sig id: 16796
2019-11-01 11:34:11,364 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Windows\Temp\nsi6A0F.tmp\ServicesHelper.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:11,364 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Temp\nsi6A0F.tmp\ServicesHelper.dll' Db index: '63'
2019-11-01 11:34:11,365 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:63, file 'C:\Windows\Temp\nsi6A0F.tmp\ServicesHelper.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:34:11,367 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Windows\Temp\nsi6A0F.tmp\ServicesHelper.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:1ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 6ms
2019-11-01 11:34:12,332 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice_tmp.exe' fileSize: 242720, md5: b89103f3e1ba77b9fe86e66fedbae683, sha1: e9399d16935bfe1fd15ffac3cc1f099e48c803fe, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe', id: '3848', signer: 'Mozilla Corporation', original file name: 'maintenanceservice.exe', md5: 'e94b72f28c1557945b40d623c32977d6', creation time: '11/01/2019 14:34:03', dbindex: 4294967295, reason: LocalCopy, sig id: 16796
2019-11-01 11:34:12,333 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'LocalCopy', allowing. Path: 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice_tmp.exe' Db index: '4294967295'
2019-11-01 11:34:12,333 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:4294967295, file 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice_tmp.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:34:12,335 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice_tmp.exe', Times: created:0ms; proces start:0ms; 1UnMap:1ms; 2UnMap:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 2ms
2019-11-01 11:34:12,871 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe' fileSize: 242720, md5: b89103f3e1ba77b9fe86e66fedbae683, sha1: e9399d16935bfe1fd15ffac3cc1f099e48c803fe, process: Process: 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice_tmp.exe', id: '5224', signer: 'Mozilla Corporation', original file name: 'maintenanceservice.exe', md5: 'b89103f3e1ba77b9fe86e66fedbae683', creation time: '11/01/2019 14:34:12', dbindex: 4294967295, reason: LocalCopy, sig id: 16796
2019-11-01 11:34:12,873 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'LocalCopy', allowing. Path: 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe' Db index: '4294967295'
2019-11-01 11:34:12,875 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:4294967295, file 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:34:12,875 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe', Times: created:0ms; proces start:1ms; 1UnMap:2ms; 2UnMap:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 4ms
2019-11-01 11:34:13,023 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\System.dll' fileSize: 11776, md5: 17ed1c86bd67e78ade4712be48a7d2bd, sha1: 1cc9fe86d6d6030b4dae45ecddce5907991c01a0, process: Process: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', id: '6920', signer: 'Mozilla Corporation', original file name: 'helper.exe', md5: 'b44ffe1d5383634be3a58d4f4dcb2aa0', creation time: '11/01/2019 14:34:12', dbindex: 63, reason: None, sig id: 16796
2019-11-01 11:34:13,030 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\System.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:13,031 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\System.dll' Db index: '63'
2019-11-01 11:34:13,032 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\System.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:34:13,037 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\CityHash.dll' fileSize: 44544, md5: 737379945745bb94f8a0dadcc18cad8d, sha1: 6a1f497b4dc007f5935b66ec83b00e5a394332c6, process: Process: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', id: '6920', signer: 'Mozilla Corporation', original file name: 'helper.exe', md5: 'b44ffe1d5383634be3a58d4f4dcb2aa0', creation time: '11/01/2019 14:34:12', dbindex: 63, reason: None, sig id: 16796
2019-11-01 11:34:13,041 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\System.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:4ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:7ms; total: 14ms
2019-11-01 11:34:13,041 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\CityHash.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:13,042 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\CityHash.dll' Db index: '63'
2019-11-01 11:34:13,042 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\CityHash.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:34:13,045 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\CityHash.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:1ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:2ms; proces finish:0ms; total: 7ms
2019-11-01 11:34:14,026 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\ShellLink.dll' fileSize: 4608, md5: d62d3e349689811f838dd10fb216eba1, sha1: edcafd517860cb6b4bd299e20b17ad74a6fa2a5d, process: Process: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', id: '6920', signer: 'Mozilla Corporation', original file name: 'helper.exe', md5: 'b44ffe1d5383634be3a58d4f4dcb2aa0', creation time: '11/01/2019 14:34:12', dbindex: 63, reason: None, sig id: 16796
2019-11-01 11:34:14,031 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\ShellLink.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:14,032 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\ShellLink.dll' Db index: '63'
2019-11-01 11:34:14,032 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\ShellLink.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:34:14,034 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\ShellLink.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 4ms
2019-11-01 11:34:14,212 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\UserInfo.dll' fileSize: 4096, md5: 1b446b36f5b4022d50ffdc0cf567b24a, sha1: d9a0a99fe5ea3932cbd2774af285ddf35fcdd4f9, process: Process: 'C:\Program Files\Mozilla Firefox\uninstall\helper.exe', id: '6920', signer: 'Mozilla Corporation', original file name: 'helper.exe', md5: 'b44ffe1d5383634be3a58d4f4dcb2aa0', creation time: '11/01/2019 14:34:12', dbindex: 63, reason: None, sig id: 16796
2019-11-01 11:34:14,216 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\UserInfo.dll' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:34:14,221 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\UserInfo.dll' Db index: '63'
2019-11-01 11:34:14,222 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\UserInfo.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:34:14,239 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsm75F5.tmp\UserInfo.dll', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:2ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:5ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:12ms; proces finish:4ms; total: 23ms
2019-11-01 11:34:51,586 [1738:19] [INFO] [Engine+GarbageCollectionTrigger]  Garbage collection trigger. Private memory used before: 57440kb; afer: 57496kb, Delta: -56b; Time(ms) used: 12.6953, Total memory: 6686kb
2019-11-01 11:34:52,017 [1738:1c] [INFO] [CpepmonBridge]  Associations registry changed, updating kernel.
2019-11-01 11:34:52,021 [1738:1c] [INFO] [CpepmonBridge]  Sending commit request for sig: 16796 (exe)
2019-11-01 11:35:06,489 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Users\Admin\Downloads\RevoUninstaller_Portable\RevoUninstaller_Portable\RevoUPort.exe' fileSize: 205440, md5: 2f814a927d097a09911111dbf0fc2e93, sha1: 8e4e953c60653a333182320345209765695d4e17, process: Process: 'C:\Windows\Explorer.EXE', id: '2056', signer: '', original file name: 'EXPLORER.EXE', md5: '38ae1b3c38faef56fe4907922f0385ba', creation time: '11/01/2019 13:49:00', dbindex: 63, reason: None, sig id: 16796
2019-11-01 11:35:06,495 [1738:12] [INFO] [CpepmonBridge]  Type has no associations, path: 'C:\Users\Admin\Downloads\RevoUninstaller_Portable\RevoUninstaller_Portable\RevoUPort.exe', type: 'exe'
2019-11-01 11:35:06,759 [1738:12] [INFO] [CpepmonBridge]  Type has no associations, path: 'C:\Users\Admin\Downloads\RevoUninstaller_Portable\RevoUninstaller_Portable\RevoUPort.exe', type: 'exe'
2019-11-01 11:35:08,537 [1738:19] [ERROR] [StaticAnalysisConnector]  SA Calculation is skipped because SA failed to initialize
2019-11-01 11:35:08,537 [1738:19] [INFO] [Dispatcher]  File 'C:\Users\Admin\Downloads\RevoUninstaller_Portable\RevoUninstaller_Portable\RevoUPort.exe' is Benign by reputation - mark as white and skip emulation
2019-11-01 11:35:08,537 [1738:19] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:63, file 'C:\Users\Admin\Downloads\RevoUninstaller_Portable\RevoUninstaller_Portable\RevoUPort.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:35:08,540 [1738:19] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Users\Admin\Downloads\RevoUninstaller_Portable\RevoUninstaller_Portable\RevoUPort.exe', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 2classify:0ms; 1FRTrust:0ms; 2FRTrust:264ms; proces end:0ms; 1UnMap:1777ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 2045ms
2019-11-01 11:35:08,540 [1738:19] [INFO] [Dispatcher]  File Processed2, removing from processing queue sha1:'8e4e953c60653a333182320345209765695d4e17' path:'C:\Users\Admin\Downloads\RevoUninstaller_Portable\RevoUninstaller_Portable\RevoUPort.exe'
2019-11-01 11:35:08,540 [1738:19] [INFO] [Dispatcher]  Processing finished: sha1 '8e4e953c60653a333182320345209765695d4e17' path 'C:\Users\Admin\Downloads\RevoUninstaller_Portable\RevoUninstaller_Portable\RevoUPort.exe'
2019-11-01 11:35:33,689 [1738:1a] [INFO] [BladeNavel]  Exit, PolicyID=100 retval=0
2019-11-01 11:35:37,531 [1738:14] [INFO] [CpepmonBridge]  First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ZaarInstHelp.dll
2019-11-01 11:35:37,531 [1738:14] [INFO] [CpepmonBridge]  pre-filter mapping have not to be created for: C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ZaarInstHelp.dll
2019-11-01 11:35:37,531 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ZaarInstHelp.dll' fileSize: 1129184, md5: 6bb9b98c708d1391f15d939a44426434, sha1: a2ea8ba77d43a946aeecd08f90cf5a9318b74ea1, process: Process: 'C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe', id: '6928', signer: 'Check Point Software Technologies Ltd.', original file name: '', md5: 'da0ef8f262e56d4189870f19cf49f927', creation time: '11/01/2019 14:35:37', dbindex: 63, reason: None, sig id: 16796
2019-11-01 11:35:37,531 [1738:12] [INFO] [CpepmonBridge]  First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ZaarInstHelp.dll
2019-11-01 11:35:37,531 [1738:12] [INFO] [CpepmonBridge]  Process C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe was filtered access to dbIdx: 63
2019-11-01 11:35:37,531 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'PolicyExclusion', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ZaarInstHelp.dll' Db index: '63'
2019-11-01 11:35:37,531 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ZaarInstHelp.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:35:37,531 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ZaarInstHelp.dll', Times: created:0ms; proces start:2ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 4ms
2019-11-01 11:35:37,546 [1738:14] [INFO] [CpepmonBridge]  First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ztel.exe
2019-11-01 11:35:37,562 [1738:14] [INFO] [CpepmonBridge]  pre-filter mapping have not to be created for: C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ztel.exe
2019-11-01 11:35:37,562 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ztel.exe' fileSize: 876256, md5: 72c6512474e7bc1d942b503298197cc3, sha1: 5394616a4ffbccde9a766eae258157257bc3722a, process: Process: 'C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe', id: '6928', signer: 'Check Point Software Technologies Ltd.', original file name: '', md5: 'da0ef8f262e56d4189870f19cf49f927', creation time: '11/01/2019 14:35:37', dbindex: 63, reason: None, sig id: 16796
2019-11-01 11:35:37,562 [1738:12] [INFO] [CpepmonBridge]  First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ztel.exe
2019-11-01 11:35:37,562 [1738:12] [INFO] [CpepmonBridge]  Process C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe was filtered access to dbIdx: 63
2019-11-01 11:35:37,562 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'PolicyExclusion', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ztel.exe' Db index: '63'
2019-11-01 11:35:37,562 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ztel.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:35:37,562 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\ztel.exe', Times: created:0ms; proces start:1ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:0ms; proces finish:0ms; total: 1ms
2019-11-01 11:35:37,562 [1738:14] [INFO] [CpepmonBridge]  First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\dltel.exe
2019-11-01 11:35:37,562 [1738:14] [INFO] [CpepmonBridge]  pre-filter mapping have not to be created for: C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\dltel.exe
2019-11-01 11:35:37,562 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\dltel.exe' fileSize: 827616, md5: 3ab8119292a674e3ab0ed337a81d498c, sha1: 6b1e7ccb4fac4f46fdee652d1356ea4b8629bf39, process: Process: 'C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe', id: '6928', signer: 'Check Point Software Technologies Ltd.', original file name: '', md5: 'da0ef8f262e56d4189870f19cf49f927', creation time: '11/01/2019 14:35:37', dbindex: 63, reason: None, sig id: 16796
2019-11-01 11:35:37,562 [1738:12] [INFO] [CpepmonBridge]  First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\dltel.exe
2019-11-01 11:35:37,562 [1738:12] [INFO] [CpepmonBridge]  Process C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe was filtered access to dbIdx: 63
2019-11-01 11:35:37,578 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'PolicyExclusion', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\dltel.exe' Db index: '63'
2019-11-01 11:35:37,578 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\dltel.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:35:37,578 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\dltel.exe', Times: created:0ms; proces start:1ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:0ms; proces finish:0ms; total: 2ms
2019-11-01 11:35:37,578 [1738:14] [INFO] [CpepmonBridge]  First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\System.dll
2019-11-01 11:35:37,578 [1738:14] [INFO] [CpepmonBridge]  pre-filter mapping have not to be created for: C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\System.dll
2019-11-01 11:35:37,578 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\System.dll' fileSize: 11776, md5: 9625d5b1754bc4ff29281d415d27a0fd, sha1: 80e85afc5cccd4c0a3775edbb90595a1a59f5ce0, process: Process: 'C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe', id: '6928', signer: 'Check Point Software Technologies Ltd.', original file name: '', md5: 'da0ef8f262e56d4189870f19cf49f927', creation time: '11/01/2019 14:35:37', dbindex: 63, reason: None, sig id: 16796
2019-11-01 11:35:37,578 [1738:12] [INFO] [CpepmonBridge]  First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\System.dll
2019-11-01 11:35:37,578 [1738:12] [INFO] [CpepmonBridge]  Process C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe was filtered access to dbIdx: 63
2019-11-01 11:35:37,578 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'PolicyExclusion', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\System.dll' Db index: '63'
2019-11-01 11:35:37,578 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\System.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:35:37,578 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\System.dll', Times: created:0ms; proces start:1ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:2ms; proces finish:0ms; total: 4ms
2019-11-01 11:35:37,609 [1738:14] [INFO] [CpepmonBridge]  First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\nsExec.dll
2019-11-01 11:35:37,609 [1738:14] [INFO] [CpepmonBridge]  pre-filter mapping have not to be created for: C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\nsExec.dll
2019-11-01 11:35:37,609 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\nsExec.dll' fileSize: 6656, md5: 35200be9cf105f3defe2ae0ee44cea12, sha1: 3f4a09eeb477d3f048cdfb848b95aa39b20d89dc, process: Process: 'C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe', id: '6928', signer: 'Check Point Software Technologies Ltd.', original file name: '', md5: 'da0ef8f262e56d4189870f19cf49f927', creation time: '11/01/2019 14:35:37', dbindex: 63, reason: None, sig id: 16796
2019-11-01 11:35:37,609 [1738:12] [INFO] [CpepmonBridge]  First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\nsExec.dll
2019-11-01 11:35:37,625 [1738:12] [INFO] [CpepmonBridge]  Process C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe was filtered access to dbIdx: 63
2019-11-01 11:35:37,625 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'PolicyExclusion', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\nsExec.dll' Db index: '63'
2019-11-01 11:35:37,625 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\nsExec.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:35:37,625 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\nsExec.dll', Times: created:0ms; proces start:1ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:0ms; proces finish:0ms; total: 2ms
2019-11-01 11:35:37,859 [1738:14] [INFO] [CpepmonBridge]  First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\GraphicalInstaller.dll
2019-11-01 11:35:37,859 [1738:14] [INFO] [CpepmonBridge]  pre-filter mapping have not to be created for: C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\GraphicalInstaller.dll
2019-11-01 11:35:37,859 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\GraphicalInstaller.dll' fileSize: 106496, md5: a8585c5c04faf053f310b32baefe69ba, sha1: b0be89ca64abf144dd930783588bb82538ec8d11, process: Process: 'C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe', id: '6928', signer: 'Check Point Software Technologies Ltd.', original file name: '', md5: 'da0ef8f262e56d4189870f19cf49f927', creation time: '11/01/2019 14:35:37', dbindex: 63, reason: None, sig id: 16796
2019-11-01 11:35:37,859 [1738:12] [INFO] [CpepmonBridge]  First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\GraphicalInstaller.dll
2019-11-01 11:35:37,859 [1738:12] [INFO] [CpepmonBridge]  Process C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\uninst.exe was filtered access to dbIdx: 63
2019-11-01 11:35:37,859 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'PolicyExclusion', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\GraphicalInstaller.dll' Db index: '63'
2019-11-01 11:35:37,859 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\GraphicalInstaller.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:35:37,875 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsxC009.tmp\GraphicalInstaller.dll', Times: created:0ms; proces start:1ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:0ms; proces finish:0ms; total: 2ms
2019-11-01 11:35:38,265 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Users\Admin\AppData\Local\Temp\~nsuA.tmp\Un_A.exe' fileSize: 51232, md5: b215ea40c70da834afdbe41c580ba663, sha1: ce07326f1b45287b57caa97baabf618fab399277, process: Process: 'C:\Program Files (x86)\CheckPoint\ICM\uninst.exe', id: '5704', signer: 'Check Point Software Technologies Ltd.', original file name: '', md5: 'b215ea40c70da834afdbe41c580ba663', creation time: '11/01/2019 14:35:38', dbindex: 4294967295, reason: LocalCopy, sig id: 16796
2019-11-01 11:35:38,265 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'LocalCopy', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\~nsuA.tmp\Un_A.exe' Db index: '4294967295'
2019-11-01 11:35:38,265 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:4294967295, file 'C:\Users\Admin\AppData\Local\Temp\~nsuA.tmp\Un_A.exe', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:35:38,265 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\~nsuA.tmp\Un_A.exe', Times: created:0ms; proces start:0ms; 1UnMap:0ms; 2UnMap:0ms; 1DbUpdate:2ms; proces finish:0ms; total: 2ms
2019-11-01 11:35:38,390 [1738:14] [INFO] [CpepmonBridge]  First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsdC374.tmp\nsExec.dll
2019-11-01 11:35:38,390 [1738:14] [INFO] [CpepmonBridge]  pre-filter mapping have not to be created for: C:\Users\Admin\AppData\Local\Temp\nsdC374.tmp\nsExec.dll
2019-11-01 11:35:38,390 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Users\Admin\AppData\Local\Temp\nsdC374.tmp\nsExec.dll' fileSize: 6656, md5: b5a1f9dc73e2944a388a61411bdd8c70, sha1: dc9b20df3f3810c2e81a0c54dea385704ba8bef7, process: Process: 'C:\Users\Admin\AppData\Local\Temp\~nsuA.tmp\Un_A.exe', id: '5512', signer: 'Check Point Software Technologies Ltd.', original file name: '', md5: 'b215ea40c70da834afdbe41c580ba663', creation time: '11/01/2019 14:35:38', dbindex: 63, reason: None, sig id: 16796
2019-11-01 11:35:38,390 [1738:12] [INFO] [CpepmonBridge]  First Try policy exclusion for file C:\Users\Admin\AppData\Local\Temp\nsdC374.tmp\nsExec.dll
2019-11-01 11:35:38,390 [1738:12] [INFO] [CpepmonBridge]  Process C:\Users\Admin\AppData\Local\Temp\~nsuA.tmp\Un_A.exe was filtered access to dbIdx: 63
2019-11-01 11:35:38,390 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'PolicyExclusion', allowing. Path: 'C:\Users\Admin\AppData\Local\Temp\nsdC374.tmp\nsExec.dll' Db index: '63'
2019-11-01 11:35:38,390 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:63, file 'C:\Users\Admin\AppData\Local\Temp\nsdC374.tmp\nsExec.dll', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:35:38,406 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Users\Admin\AppData\Local\Temp\nsdC374.tmp\nsExec.dll', Times: created:0ms; proces start:1ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:0ms; proces finish:0ms; total: 1ms
2019-11-01 11:35:52,015 [1738:1d] [INFO] [CpepmonBridge]  Associations registry changed, updating kernel.
2019-11-01 11:35:52,015 [1738:1d] [INFO] [CpepmonBridge]  Sending commit request for sig: 16796 (exe)
2019-11-01 11:36:03,828 [1738:13] [INFO] [CpepmonBridge]  NewFile event: 'C:\Windows\Installer\MSI26D1.tmp' fileSize: 158720, md5: a6348edb0c4cc417c459a13e733929cb, sha1: b94eb83cde788ddd81968c6975e38901bafa79f6, process: Process: 'C:\Windows\system32\msiexec.exe', id: '5156', signer: '', original file name: 'msiexec.exe', md5: '4153511a1ce96f3ed8f5140e91363242', creation time: '11/01/2019 14:36:03', dbindex: 63, reason: None, sig id: 16796
2019-11-01 11:36:03,828 [1738:13] [INFO] [CpepmonBridge]  File 'C:\Windows\Installer\MSI26D1.tmp' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:36:03,828 [1738:13] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Installer\MSI26D1.tmp' Db index: '63'
2019-11-01 11:36:03,828 [1738:13] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:63, file 'C:\Windows\Installer\MSI26D1.tmp', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:36:03,828 [1738:13] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Windows\Installer\MSI26D1.tmp', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:0ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 5ms
2019-11-01 11:36:05,343 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Windows\Installer\MSI2CB0.tmp' fileSize: 1559800, md5: 3bc1da8ae6295b781e8f6d7a8bf1ce55, sha1: d7240bf9f077c028e3c4abdaff2c0f70dc738c31, process: Process: 'C:\Windows\system32\msiexec.exe', id: '5156', signer: '', original file name: 'msiexec.exe', md5: '4153511a1ce96f3ed8f5140e91363242', creation time: '11/01/2019 14:36:03', dbindex: 63, reason: None, sig id: 16796
2019-11-01 11:36:05,343 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Windows\Installer\MSI2CB0.tmp' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:36:05,343 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Installer\MSI2CB0.tmp' Db index: '63'
2019-11-01 11:36:05,343 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:63, file 'C:\Windows\Installer\MSI2CB0.tmp', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:36:05,343 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Windows\Installer\MSI2CB0.tmp', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 5ms
2019-11-01 11:36:06,546 [1738:3] [WARN] [BladeNavel]  channel_Faulted
2019-11-01 11:36:06,546 [1738:3] [WARN] [BladeNavel]  Reconnecting.... System.EventArgs
2019-11-01 11:36:06,562 [1738:3] [ERROR] [BladeNavel]  There was no endpoint listening at net.pipe://localhost/Cipolla that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details.
2019-11-01 11:36:06,593 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Windows\Installer\MSI3193.tmp' fileSize: 1501432, md5: b010d3a30de3054614920de8d23f1be1, sha1: c9aaa28e068c3fb70cf73f0cc14695b021c5598a, process: Process: 'C:\Windows\system32\msiexec.exe', id: '5156', signer: '', original file name: 'msiexec.exe', md5: '4153511a1ce96f3ed8f5140e91363242', creation time: '11/01/2019 14:36:03', dbindex: 63, reason: None, sig id: 16796
2019-11-01 11:36:06,593 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Windows\Installer\MSI3193.tmp' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:36:06,593 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Installer\MSI3193.tmp' Db index: '63'
2019-11-01 11:36:06,593 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:63, file 'C:\Windows\Installer\MSI3193.tmp', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:36:06,593 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Windows\Installer\MSI3193.tmp', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:6ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:0ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 8ms
2019-11-01 11:36:16,562 [1738:18] [ERROR] [BladeNavel]  There was no endpoint listening at net.pipe://localhost/Cipolla that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details.
2019-11-01 11:36:26,562 [1738:5] [ERROR] [BladeNavel]  There was no endpoint listening at net.pipe://localhost/Cipolla that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details.
2019-11-01 11:36:36,562 [1738:1e] [ERROR] [BladeNavel]  There was no endpoint listening at net.pipe://localhost/Cipolla that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details.
2019-11-01 11:36:36,625 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Windows\Installer\MSIA6E3.tmp' fileSize: 1559800, md5: 271bc984a6a4be3d007b2c6a40e96dae, sha1: ca5cf125e22bcbf40321a510bff40f4bb26c6eb7, process: Process: 'C:\Windows\system32\msiexec.exe', id: '5156', signer: '', original file name: 'msiexec.exe', md5: '4153511a1ce96f3ed8f5140e91363242', creation time: '11/01/2019 14:36:03', dbindex: 63, reason: None, sig id: 16796
2019-11-01 11:36:36,625 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Windows\Installer\MSIA6E3.tmp' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:36:36,625 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Installer\MSIA6E3.tmp' Db index: '63'
2019-11-01 11:36:36,625 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:63, file 'C:\Windows\Installer\MSIA6E3.tmp', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:36:36,625 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Windows\Installer\MSIA6E3.tmp', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:0ms; total: 6ms
2019-11-01 11:36:46,562 [1738:1f] [ERROR] [BladeNavel]  There was no endpoint listening at net.pipe://localhost/Cipolla that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details.
2019-11-01 11:36:48,234 [1738:12] [INFO] [CpepmonBridge]  NewFile event: 'C:\Windows\Installer\MSID43E.tmp' fileSize: 1559800, md5: 3bc1da8ae6295b781e8f6d7a8bf1ce55, sha1: d7240bf9f077c028e3c4abdaff2c0f70dc738c31, process: Process: 'C:\Windows\system32\msiexec.exe', id: '5156', signer: '', original file name: 'msiexec.exe', md5: '4153511a1ce96f3ed8f5140e91363242', creation time: '11/01/2019 14:36:03', dbindex: 63, reason: None, sig id: 16796
2019-11-01 11:36:48,234 [1738:12] [INFO] [CpepmonBridge]  File 'C:\Windows\Installer\MSID43E.tmp' has signature id '16796' with type 'pe', eligible: 'false'
2019-11-01 11:36:48,234 [1738:12] [INFO] [CpepmonBridge]  File should not be processed: 'TypeNotEligible', allowing. Path: 'C:\Windows\Installer\MSID43E.tmp' Db index: '63'
2019-11-01 11:36:48,234 [1738:12] [INFO] [CpepmonBridge]  FinishFileProcessing dbindex:63, file 'C:\Windows\Installer\MSID43E.tmp', FsType 'FsTypeExecutable' allow access 'True', eligible: 0, messages in process: 'Processed'
2019-11-01 11:36:48,234 [1738:12] [INFO] [CpepmonBridge]  CpepmonFsEventNewFile: file 'C:\Windows\Installer\MSID43E.tmp', Times: created:0ms; 1premap:0ms; 2premap:0ms; proces start:0ms; fill start:0ms; 1open stream:3ms; 2open stream:0ms; 1backup:0ms; unmap before:1ms; unmap after:0ms; 2backup:0ms; 1classify:0ms; 1UnMap:1ms; 2UnMap:0ms; 1FinishKernel:0ms; 2FinishKernel:0ms; 1DbUpdate:1ms; proces finish:2ms; total: 8ms
2019-11-01 11:36:48,250 [1738:17] [FATAL] [Engine]  <-------------------- Exiting -------------------------------->
2019-11-01 11:36:48,250 [1738:17] [WARN] [EngineState]  Engine state changed from: Running to ShuttingDown
2019-11-01 11:36:48,250 [1738:17] [INFO] [TEAntexConnector]  No need to stop antex _initialized is false
2019-11-01 11:36:48,250 [1738:17] [INFO] [Engine]  shutdown: Dispatcher
2019-11-01 11:36:48,250 [1738:17] [INFO] [Engine]  shutdown: Emulator
2019-11-01 11:36:48,250 [1738:17] [INFO] [Engine]  shutdown: Scheduler
2019-11-01 11:36:48,250 [1738:17] [INFO] [Engine]  shutdown: PostponeImagesBeingProcessed
2019-11-01 11:36:48,250 [1738:17] [INFO] [Engine]  shutdown: ExtensionsConnector
2019-11-01 11:36:48,250 [1738:17] [INFO] [ExtensionsConnector]  Going to stop ExtennsionsConnector
2019-11-01 11:36:48,250 [1738:17] [INFO] [Engine]  shutdown: UpdatesManager
2019-11-01 11:36:48,250 [1738:4] [INFO] [ExtensionsConnector]  Listener is not listening anymore
2019-11-01 11:36:48,250 [1738:17] [INFO] [Engine]  shutdown: StaticAnalysis
2019-11-01 11:36:48,250 [1738:17] [INFO] [StaticAnalysisConnector]  SA Stop is called
2019-11-01 11:36:48,250 [1738:17] [INFO] [Engine]  shutdown: FileReputation
2019-11-01 11:36:48,250 [1738:17] [INFO] [FileReputationConnector]  FR Stop is called
2019-11-01 11:36:48,250 [1738:17] [INFO] [FileReputation]  Stop Engine is called
2019-11-01 11:36:48,265 [1738:17] [INFO] [Engine]  shutdown: Database
2019-11-01 11:36:48,265 [1738:9] [WARN] [Engine]  DbControlThread Stopped!
2019-11-01 11:36:48,265 [1738:17] [WARN] [LockableDatabaseContext]  Stoping Database...
2019-11-01 11:36:48,281 [1738:17] [WARN] [LockableDatabaseContext]  Database Stoped...
2019-11-01 11:36:48,281 [1738:17] [INFO] [Engine]  shutdown: UiWrapper
2019-11-01 11:36:48,281 [1738:17] [INFO] [Engine]  <-------------------- The End -------------------------------->
2019-11-01 11:36:48,281 [1738:17] [INFO] [Engine]  <-------------------- The End -------------------------------->
2019-11-01 11:36:48,281 [1738:17] [INFO] [Engine]  <-------------------- The End -------------------------------->
2019-11-01 11:36:52,015 [1738:4] [INFO] [CpepmonBridge]  Associations registry changed, updating kernel.
2019-11-01 11:36:52,015 [1738:4] [INFO] [CpepmonBridge]  Sending commit request for sig: 16796 (exe)
2019-11-01 11:36:56,562 [1738:20] [ERROR] [BladeNavel]  There was no endpoint listening at net.pipe://localhost/Cipolla that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details.
2019-11-01 11:37:06,562 [1738:18] [ERROR] [BladeNavel]  There was no endpoint listening at net.pipe://localhost/Cipolla that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details.
2019-11-01 11:37:16,562 [1738:6] [ERROR] [BladeNavel]  There was no endpoint listening at net.pipe://localhost/Cipolla that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details.