We have deployed AppLocker in our organization and have whitelisted Firefox with a publisher rule. However, I am seeing logs where certain DLL files used by Firefox (I'm pretty sure) when doing updates that are getting blocked. Here are some examples: %TEMP%\NSG8B0B.TMP\SHELLLINK.DLL %TEMP%\NSW8F97.TMP\SYSTEM.DLL %TEMP%\NSOE41F.TMP\CITYHASH.DLL %TEMP%\NSZB4A8.TMP\USERINFO.DLL %TEMP%\NSG8B0B.TMP\APPLICATIONID.DLL

The files are already gone whenever I go to inspect them. I have attempted to deny delete permissions on the %TEMP% folder in order to catch them, but I have not been successful. According to the browser Firefox is still updating successfully. So, I assume the DLLs are not integral to the update process. But I do see a string of these getting blocked every so often, just as Firefox is starting up. Anyone using application whitelisting that has come across this have a suggestion? Or any general information on the files mentioned? Thanks