Each time I start up my PC Glasswire shows a file with the .tmp.exe extention making connection.
The file has a different name every time, for example:
a230df85-cfd2-4e9b-98a0-bf0c3bf240c8.tmp.exe
4766891e-3adf-43a6-bf42-3fe3189c269f.tmp.exe
4d617c51-b01c-4399-9384-d4e667f09ec2.tmp.exe
These files are always located in c:\users\NAME\appdata\local\temp\ and connect to ocsp .comodoca. com. cdn. cloudflare. net:80 (sorry for the spaces, new users apparently can not post links)
