Each time I start up my PC Glasswire shows a file with the .tmp.exe extention making connection.
The file has a different name every time, for example:
These files are always located in c:\users\NAME\appdata\local\temp\ and connect to ocsp .comodoca. com. cdn. cloudflare. net:80 (sorry for the spaces, new users apparently can not post links)