2020-04-29 19:08:59,676,C:\Windows\System32\services.exe,53,Allowed ;Execution of an application (C:\windows\System32\svchost.exe -k WerSvcGroup)
2020-04-29 19:09:06,4892,C:\Program Files (x86)\FreeCommander\FreeCommander.exe,53,Allowed ;Execution of an application ("C:\temp\Lenny_Fox_test portable\AnvirTask Manager\AnVir.exe" )
2020-04-29 19:09:06,5036,C:\temp\Lenny_Fox_test portable\AnvirTask Manager\AnVir.exe,40,Blocked ;Opening process or thread for modify access (taskhost.exe(pid=3512))
2020-04-29 19:09:07,5036,C:\temp\Lenny_Fox_test portable\AnvirTask Manager\AnVir.exe,51,Blocked ;Inter-process communication (TaskScheduler)
2020-04-29 19:09:12,5036,C:\temp\Lenny_Fox_test portable\AnvirTask Manager\AnVir.exe,57,Blocked ;Opening protected process for reading access (explorer.exe(pid=3628))
2020-04-29 19:09:12,5036,C:\temp\Lenny_Fox_test portable\AnvirTask Manager\AnVir.exe,50,Blocked ;Accessing the network via DNS Resolver service 
2020-04-29 19:09:12,5036,C:\temp\Lenny_Fox_test portable\AnvirTask Manager\AnVir.exe,48,Blocked ;Outgoing network access 
2020-04-29 19:09:15,5036,C:\temp\Lenny_Fox_test portable\AnvirTask Manager\AnVir.exe,53,Allowed ;Execution of an application ("C:\temp\Lenny_Fox_test portable\AnvirTask Manager\anvir64.exe" )
2020-04-29 19:09:15,5036,C:\temp\Lenny_Fox_test portable\AnvirTask Manager\AnvirHook75.dll,03,Blocked ;Installing WH_CALLWNDPROCRET hook 
2020-04-29 19:09:15,5036,C:\temp\Lenny_Fox_test portable\AnvirTask Manager\AnvirHook75.dll,07,Blocked ;Installing WH_GETMESSAGE hook 
2020-04-29 19:09:15,5036,C:\temp\Lenny_Fox_test portable\AnvirTask Manager\AnvirHook75.dll,04,Blocked ;Installing WH_CBT hook 
2020-04-29 19:09:15,520,C:\temp\Lenny_Fox_test portable\AnvirTask Manager\anvir64.exe,40,Blocked ;Opening process or thread for modify access (taskhost.exe(pid=3512))
2020-04-29 19:09:16,520,C:\temp\Lenny_Fox_test portable\AnvirTask Manager\AnvirHook75_64.dll,03,Blocked ;Installing WH_CALLWNDPROCRET hook 
2020-04-29 19:09:16,520,C:\temp\Lenny_Fox_test portable\AnvirTask Manager\AnvirHook75_64.dll,07,Blocked ;Installing WH_GETMESSAGE hook 
2020-04-29 19:09:16,520,C:\temp\Lenny_Fox_test portable\AnvirTask Manager\AnvirHook75_64.dll,04,Blocked ;Installing WH_CBT hook 
2020-04-29 19:09:32,4892,C:\Program Files (x86)\FreeCommander\FreeCommander.exe,53,Allowed ;Execution of an application ("C:\temp\Lenny_Fox_test portable\Autoruns\autoruns.exe" )
2020-04-29 19:09:32,4880,C:\temp\Lenny_Fox_test portable\Autoruns\autoruns.exe,40,Blocked ;Opening process or thread for modify access (taskhost.exe(pid=3512))
2020-04-29 19:09:32,4880,C:\temp\Lenny_Fox_test portable\Autoruns\autoruns.exe,51,Blocked ;Inter-process communication (TaskScheduler)
2020-04-29 19:09:48,4892,C:\Program Files (x86)\FreeCommander\FreeCommander.exe,53,Allowed ;Execution of an application ("C:\temp\Lenny_Fox_test portable\Everything-1.4.1.935\Everything.exe" )
2020-04-29 19:09:48,3156,C:\temp\Lenny_Fox_test portable\Everything-1.4.1.935\Everything.exe,60,Blocked ;Opening protected file for reading access (K:\)
2020-04-29 19:09:48,3156,C:\temp\Lenny_Fox_test portable\Everything-1.4.1.935\Everything.exe,40,Blocked ;Opening process or thread for modify access (taskhost.exe(pid=3512))
2020-04-29 19:09:55,3156,C:\temp\Lenny_Fox_test portable\Everything-1.4.1.935\Everything.exe,64,Blocked ;Opening protected file for reading access (D:\Dokumenty)
2020-04-29 19:10:06,4892,C:\Program Files (x86)\FreeCommander\FreeCommander.exe,50,Allowed ;Accessing the network via DNS Resolver service 
2020-04-29 19:10:06,4892,C:\Program Files (x86)\FreeCommander\FreeCommander.exe,48,Allowed ;Outgoing network access 
2020-04-29 19:10:11,4892,C:\Program Files (x86)\FreeCommander\FreeCommander.exe,53,Allowed ;Execution of an application ("C:\temp\Lenny_Fox_test portable\Privazer\PrivaZer.exe" )
2020-04-29 19:10:11,4652,C:\temp\Lenny_Fox_test portable\Privazer\PrivaZer.exe,60,Blocked ;Opening protected file for reading access (Q:\)
2020-04-29 19:10:12,4652,C:\temp\Lenny_Fox_test portable\Privazer\PrivaZer.exe,51,Blocked ;Inter-process communication (TaskScheduler)
2020-04-29 19:10:12,4652,C:\temp\Lenny_Fox_test portable\Privazer\PrivaZer.exe,40,Blocked ;Opening process or thread for modify access (taskhost.exe(pid=3512))
2020-04-29 19:10:18,4652,C:\temp\Lenny_Fox_test portable\Privazer\PrivaZer.exe,50,Blocked ;Accessing the network via DNS Resolver service 
2020-04-29 19:10:19,4652,C:\temp\Lenny_Fox_test portable\Privazer\PrivaZer.exe,48,Blocked ;Outgoing network access 
2020-04-29 19:10:29,4652,C:\temp\Lenny_Fox_test portable\Privazer\PrivaZer.exe,64,Blocked ;Opening protected file for reading access (D:\Dokumenty)
2020-04-29 19:10:49,4652,C:\temp\Lenny_Fox_test portable\Privazer\PrivaZer.exe,53,Allowed ;Execution of an application (regedit.exe /s "C:\Users\Maciek\AppData\Local\Temp\000clean.reg")
2020-04-29 19:10:58,4892,C:\Program Files (x86)\FreeCommander\FreeCommander.exe,53,Allowed ;Execution of an application ("C:\temp\Lenny_Fox_test portable\RevoUninstaller_Portable\RevoUPort.exe" )
2020-04-29 19:11:00,1556,C:\temp\Lenny_Fox_test portable\RevoUninstaller_Portable\RevoUPort.exe,53,Allowed ;Execution of an application ("C:\temp\Lenny_Fox_test portable\RevoUninstaller_Portable\x64\RevoUn.exe")
2020-04-29 19:11:01,2640,C:\temp\Lenny_Fox_test portable\RevoUninstaller_Portable\x64\RevoUn.exe,40,Blocked ;Opening process or thread for modify access (taskhost.exe(pid=3512))
2020-04-29 19:11:24,2640,C:\temp\Lenny_Fox_test portable\RevoUninstaller_Portable\x64\RevoUn.exe,53,Allowed ;Execution of an application (C:\windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_303_ActiveX.exe -maintain activex)
2020-04-29 19:11:25,3168,C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_303_ActiveX.exe,55,Allowed ;Recording keyboard input using DirectX 
2020-04-29 19:11:26,3168,C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_303_ActiveX.exe,40,Allowed ;Opening process or thread for modify access (taskhost.exe(pid=3512))
2020-04-29 19:11:31,3168,C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_303_ActiveX.exe,57,Allowed ;Opening protected process for reading access (explorer.exe(pid=3628))
2020-04-29 19:11:32,3168,C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_303_ActiveX.exe,57,Allowed ;Opening protected process for reading access (explorer.exe(pid=3628))
2020-04-29 19:11:39,3168,C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_303_ActiveX.exe,26,Allowed ;Modifying protected registry key (HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER,AllowProtectedRenames)
2020-04-29 19:11:39,676,C:\Windows\System32\services.exe,53,Allowed ;Execution of an application (C:\windows\System32\svchost.exe -k WerSvcGroup)
2020-04-29 19:11:40,3168,C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_303_ActiveX.exe,26,Allowed ;Modifying protected registry key (HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER,PendingFileRenameOperations)
2020-04-29 19:11:41,3168,C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_303_ActiveX.exe,26,Allowed ;Modifying protected registry key (HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER,AllowProtectedRenames)
2020-04-29 19:11:42,3168,C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_303_ActiveX.exe,26,Allowed ;Modifying protected registry key (HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER,PendingFileRenameOperations)
2020-04-29 19:11:42,3168,C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_303_ActiveX.exe,26,Allowed ;Modifying protected registry key (HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER,AllowProtectedRenames)
2020-04-29 19:11:43,3168,C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_303_ActiveX.exe,26,Allowed ;Modifying protected registry key (HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER,PendingFileRenameOperations)
2020-04-29 19:11:44,3168,C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_303_ActiveX.exe,53,Allowed ;Execution of an application ("C:\windows\system32\Macromed\Temp\{6EE5ABE5-B3BB-4242-BF70-D7A49A373301}\InstallFlashPlayer.exe" -uninstall activex)
2020-04-29 19:11:50,5092,C:\Windows\SysWOW64\Macromed\Temp\{6EE5ABE5-B3BB-4242-BF70-D7A49A373301}\InstallFlashPlayer.exe,55,Allowed ;Recording keyboard input using DirectX 
2020-04-29 19:11:52,3168,C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_303_ActiveX.exe,50,Allowed ;Accessing the network via DNS Resolver service 
2020-04-29 19:11:52,856,C:\Windows\System32\svchost.exe,53,Allowed ;Execution of an application (C:\windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF})
2020-04-29 19:11:55,3168,C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_303_ActiveX.exe,48,Allowed ;Outgoing network access 
2020-04-29 19:12:00,3168,C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_303_ActiveX.exe,53,Allowed ;Execution of an application ("C:\windows\system32\cmd.exe" /c del "C:\windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_303_ActiveX.exe" >> NUL)
2020-04-29 19:12:00,636,C:\Windows\System32\csrss.exe,53,Allowed ;Execution of an application (\??\C:\windows\system32\conhost.exe "76876269-2069869282-31929857980540780286441302-1624286236-961421299-1982208285")
2020-04-29 19:12:00,968,C:\Windows\System32\conhost.exe,52,Allowed ;Changing properties of window belonging to other process (cmd.exe(pid=3252))
2020-04-29 19:12:43,4892,C:\Program Files (x86)\FreeCommander\FreeCommander.exe,53,Allowed ;Execution of an application ("C:\temp\Lenny_Fox_test portable\Speedyfox\speedyfox.exe" )
2020-04-29 19:12:43,2768,C:\temp\Lenny_Fox_test portable\Speedyfox\speedyfox.exe,40,Blocked ;Opening process or thread for modify access (taskhost.exe(pid=3512))
2020-04-29 19:12:43,2768,C:\temp\Lenny_Fox_test portable\Speedyfox\speedyfox.exe,50,Blocked ;Accessing the network via DNS Resolver service 
2020-04-29 19:12:43,856,C:\Windows\System32\svchost.exe,53,Allowed ;Execution of an application (C:\windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF})
2020-04-29 19:12:43,2768,C:\temp\Lenny_Fox_test portable\Speedyfox\speedyfox.exe,48,Blocked ;Outgoing network access 
2020-04-29 19:12:45,2768,C:\temp\Lenny_Fox_test portable\Speedyfox\speedyfox.exe,57,Blocked ;Opening protected process for reading access (explorer.exe(pid=3628))
2020-04-29 19:13:29,4892,C:\Program Files (x86)\FreeCommander\FreeCommander.exe,53,Allowed ;Execution of an application ("C:\temp\Lenny_Fox_test install\1by1_194.exe" )
2020-04-29 19:13:29,1296,C:\temp\Lenny_Fox_test install\1by1_194.exe,40,Blocked ;Opening process or thread for modify access (taskhost.exe(pid=3512))
2020-04-29 19:13:32,2304,C:\Windows\System32\SearchIndexer.exe,53,Allowed ;Execution of an application ("C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microso)
2020-04-29 19:13:32,2304,C:\Windows\System32\SearchIndexer.exe,53,Allowed ;Execution of an application ("C:\windows\system32\SearchFilterHost.exe" 0 524 528 536 65536 532 )
2020-04-29 19:13:33,856,C:\Windows\System32\svchost.exe,53,Allowed ;Execution of an application (C:\windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5})
2020-04-29 19:13:46,4892,C:\Program Files (x86)\FreeCommander\FreeCommander.exe,53,Allowed ;Execution of an application ("C:\temp\Lenny_Fox_test install\mbae-setup-1.13.1.164.exe" )
2020-04-29 19:13:59,1664,C:\temp\Lenny_Fox_test install\mbae-setup-1.13.1.164.exe,53,Allowed ;Execution of an application ("C:\Users\Maciek\AppData\Local\Temp\is-1UT72.tmp\mbae-setup-1.13.1.164.tmp" /SL5="$D04C2,1745018,56832,C:\temp\Lenny_Fox_test install\mbae-setup-1.13.1.164.exe" )
2020-04-29 19:14:00,2380,C:\Users\Maciek\AppData\Local\Temp\is-1UT72.tmp\mbae-setup-1.13.1.164.tmp,40,Allowed ;Opening process or thread for modify access (taskhost.exe(pid=3512))
2020-04-29 19:14:01,856,C:\Windows\System32\svchost.exe,53,Allowed ;Execution of an application (C:\windows\system32\wbem\wmiprvse.exe -secured -Embedding)
2020-04-29 19:14:09,2380,C:\Users\Maciek\AppData\Local\Temp\is-1UT72.tmp\mbae-setup-1.13.1.164.tmp,53,Allowed ;Execution of an application ("C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-uninstaller.exe" /install)
2020-04-29 19:14:09,636,C:\Windows\System32\csrss.exe,53,Allowed ;Execution of an application (\??\C:\windows\system32\conhost.exe "-5154049402100348581694818023217742796-1259702160-1177770661-2062975824-1075067624")
2020-04-29 19:14:09,3092,C:\Windows\System32\conhost.exe,52,Allowed ;Changing properties of window belonging to other process (mbae-uninstaller.exe(pid=4880))
2020-04-29 19:14:09,4880,C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-uninstaller.exe,53,Allowed ;Execution of an application ("C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe" -install)
2020-04-29 19:14:13,676,C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe,39,Allowed ;Registering driver or service 
2020-04-29 19:14:13,4984,C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe,26,Allowed ;Modifying protected registry key (HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run,Malwarebytes Anti-Exploit)
2020-04-29 19:14:13,676,C:\Windows\System32\services.exe,53,Allowed ;Execution of an application ("C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe")
2020-04-29 19:14:14,1968,C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe,53,Allowed ;Execution of an application ("C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe" /mbt)
2020-04-29 19:14:14,540,C:\Windows\System32\csrss.exe,53,Allowed ;Execution of an application (\??\C:\windows\system32\conhost.exe "-7231162012065664013-11038541971695061648-1118687169-647576654-2110697206-1445266614")
2020-04-29 19:14:16,676,C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys,39,Allowed ;Registering driver or service 
2020-04-29 19:14:16,1968,C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe,53,Allowed ;Execution of an application ("C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe" /Start 0 "eqnedt32.exe|winrar.exe|winzip.exe|7z.exe|7zFM.exe|7zG.exe|S7Z.exe|7zextractor.exe|Winzip32.exe|Winzip64.exe|wzdisktools.exe|winzipss.exe|cmd.exe|winhlp32.exe|mshta.exe|wscript.exe|cscrip)
2020-04-29 19:14:16,540,C:\Windows\System32\csrss.exe,53,Allowed ;Execution of an application (\??\C:\windows\system32\conhost.exe "-261208912-306327178-1081879550-15257728451466298386-384792208-15846801021484862185")
2020-04-29 19:14:17,4984,C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe,53,Allowed ;Execution of an application ("C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe")
2020-04-29 19:14:17,1836,C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe,40,Allowed ;Opening process or thread for modify access (taskhost.exe(pid=3512))
2020-04-29 19:14:33,4892,C:\Program Files (x86)\FreeCommander\FreeCommander.exe,53,Allowed ;Execution of an application ("C:\temp\Lenny_Fox_test install\SetPoint6.69.126_smart.exe" )
2020-04-29 19:14:38,1380,C:\temp\Lenny_Fox_test install\SetPoint6.69.126_smart.exe,53,Allowed ;Execution of an application (C:\Users\Maciek\AppData\Local\Temp\Logitech\SetPointSI_1\Setup.exe /smartcheck expr=SetVar(level,"1")==SetVar(indent,"2") )
2020-04-29 19:14:40,4184,C:\Users\Maciek\AppData\Local\Temp\Logitech\SetPointSI_1\Setup.exe,53,Allowed ;Execution of an application ("C:\Users\Maciek\AppData\Local\Temp\Logitech\SetPointSI_1\MSetup.exe"  /smartcheck expr=SetVar(level,"1")==SetVar(indent,"2") )
2020-04-29 19:14:43,2612,C:\Users\Maciek\AppData\Local\Temp\Logitech\SetPointSI_1\MSetup.exe,53,Allowed ;Execution of an application ("C:\Users\Maciek\AppData\Local\Temp\Logitech\SetPointSI_1\5-SetPoint\Setup.exe" /check=yes /level=1 /indent=2)
2020-04-29 19:14:45,2612,C:\Users\Maciek\AppData\Local\Temp\Logitech\SetPointSI_1\MSetup.exe,53,Allowed ;Execution of an application ("C:\Users\Maciek\AppData\Local\Temp\Logitech\SetPointSI_1\6-Unifying\Setup.exe" /S /instMode=embedded /check=yes)
2020-04-29 19:14:47,2612,C:\Users\Maciek\AppData\Local\Temp\Logitech\SetPointSI_1\MSetup.exe,53,Allowed ;Execution of an application ("C:\Users\Maciek\AppData\Local\Temp\Logitech\SetPointSI_1\tools\SetClean.exe" /check_legacy /regKey=Logitech\sp6\Legacy /savedFilesFolder=C:\Users\Maciek\AppData\Local\Temp\Logishrd\SaveSettings /level=1 /indent=2)
2020-04-29 19:14:48,4856,C:\Users\Maciek\AppData\Local\Temp\Logitech\SetPointSI_1\tools\SetClean.exe,53,Allowed ;Execution of an application (C:\Users\Maciek\AppData\Roaming\LogiShrd\SetClean\RunNE /wait C:\Users\Maciek\AppData\Roaming\LogiShrd\SetClean\LDConfig.exe @-KHAL:C:\Users\Maciek\AppData\Local\Temp\Logishrd\SaveSettings\Khal\devices.ini)
2020-04-29 19:14:48,3344,C:\Users\Maciek\AppData\Roaming\Logishrd\SetClean\NonElevatedDll.dll,03,Allowed ;Installing WH_CALLWNDPROCRET hook 
2020-04-29 19:14:57,3628,C:\Users\Maciek\AppData\Roaming\LogiShrd\SetClean\NonElevatedDll.dll,56,Allowed ;Global Hook installation (explorer.exe(pid=3628))
2020-04-29 19:14:57,3628,C:\Windows\explorer.exe,53,Allowed ;Execution of an application ("C:\Users\Maciek\AppData\Roaming\Logishrd\SetClean\LDConfig.exe" -KHAL:C:\Users\Maciek\AppData\Local\Temp\Logishrd\SaveSettings\Khal\devices.ini)
2020-04-29 19:14:58,4856,C:\Users\Maciek\AppData\Local\Temp\Logitech\SetPointSI_1\tools\SetClean.exe,53,Allowed ;Execution of an application (C:\Users\Maciek\AppData\Roaming\LogiShrd\SetClean\LDConfig.exe -PS2KBD:QUERY)
2020-04-29 19:14:59,4856,C:\Users\Maciek\AppData\Local\Temp\Logitech\SetPointSI_1\tools\SetClean.exe,53,Allowed ;Execution of an application (C:\Users\Maciek\AppData\Roaming\LogiShrd\SetClean\LDConfig.exe -PS2MOU:QUERY)
2020-04-29 19:15:00,4856,C:\Users\Maciek\AppData\Local\Temp\Logitech\SetPointSI_1\tools\SetClean.exe,41,Allowed ;Modifying protected file (C:\Users\Maciek\AppData\Roaming\Logishrd\SetClean\NonElevatedDll.dll)
2020-04-29 19:15:01,2612,C:\Users\Maciek\AppData\Local\Temp\Logitech\SetPointSI_1\MSetup.exe,40,Allowed ;Opening process or thread for modify access (taskhost.exe(pid=3512))
2020-04-29 19:15:07,2612,C:\Users\Maciek\AppData\Local\Temp\Logitech\SetPointSI_1\MSetup.exe,57,Allowed ;Opening protected process for reading access (explorer.exe(pid=3628))
2020-04-29 19:15:14,2612,C:\Users\Maciek\AppData\Local\Temp\Logitech\SetPointSI_1\MSetup.exe,50,Allowed ;Accessing the network via DNS Resolver service 
2020-04-29 19:15:16,2612,C:\Users\Maciek\AppData\Local\Temp\Logitech\SetPointSI_1\MSetup.exe,48,Allowed ;Outgoing network access 
2020-04-29 19:15:16,676,C:\Windows\System32\services.exe,53,Allowed ;Execution of an application (C:\windows\system32\msiexec.exe /V)
2020-04-29 19:15:21,856,C:\Windows\System32\svchost.exe,53,Allowed ;Execution of an application (C:\windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF})
2020-04-29 19:15:46,4892,C:\Program Files (x86)\FreeCommander\FreeCommander.exe,53,Allowed ;Execution of an application ("C:\temp\Lenny_Fox_test install\tfinstall.exe" )
2020-04-29 19:15:46,1248,C:\temp\Lenny_Fox_test install\tfinstall.exe,53,Allowed ;Execution of an application ("C:\Users\Maciek\AppData\Local\Temp\is-E857P.tmp\tfinstall.tmp" /SL5="$120496,9458127,64512,C:\temp\Lenny_Fox_test install\tfinstall.exe" )
2020-04-29 19:15:46,4752,C:\Users\Maciek\AppData\Local\Temp\is-E857P.tmp\tfinstall.tmp,40,Allowed ;Opening process or thread for modify access (taskhost.exe(pid=3512))
2020-04-29 19:15:53,4752,C:\Users\Maciek\AppData\Local\Temp\is-E857P.tmp\tfinstall.tmp,41,Allowed ;Modifying protected file (C:\Windows\System32\drivers)
2020-04-29 19:15:55,2304,C:\Windows\System32\SearchIndexer.exe,53,Allowed ;Execution of an application ("C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe6_ Global\UsGthrCtrlFltPipeMssGthrPipe6 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microso)
2020-04-29 19:15:55,4752,C:\Users\Maciek\AppData\Local\Temp\is-E857P.tmp\tfinstall.tmp,26,Allowed ;Modifying protected registry key (HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run,ThreatFire)
2020-04-29 19:15:55,2304,C:\Windows\System32\SearchIndexer.exe,53,Allowed ;Execution of an application ("C:\windows\system32\SearchFilterHost.exe" 0 524 528 536 65536 532 )
2020-04-29 19:15:55,4752,C:\Users\Maciek\AppData\Local\Temp\is-E857P.tmp\tfinstall.tmp,53,Allowed ;Execution of an application ("C:\Program Files (x86)\ThreatFire\TFHS.exe" install)
2020-04-29 19:15:55,4304,C:\Program Files (x86)\ThreatFire\TFHS.exe,57,Allowed ;Opening protected process for reading access (explorer.exe(pid=3628))
2020-04-29 19:15:55,4304,C:\Program Files (x86)\ThreatFire\TFHS.exe,40,Allowed ;Opening process or thread for modify access (taskhost.exe(pid=3512))
2020-04-29 19:15:55,856,C:\Windows\System32\svchost.exe,53,Allowed ;Execution of an application (C:\windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5})
2020-04-29 19:15:57,4304,C:\Program Files (x86)\ThreatFire\TFHS.exe,50,Allowed ;Accessing the network via DNS Resolver service 
2020-04-29 19:15:57,856,C:\Windows\System32\svchost.exe,53,Allowed ;Execution of an application (C:\windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF})
2020-04-29 19:16:01,4304,C:\Program Files (x86)\ThreatFire\TFHS.exe,48,Allowed ;Outgoing network access 
2020-04-29 19:16:19,4892,C:\Program Files (x86)\FreeCommander\FreeCommander.exe,53,Allowed ;Execution of an application ("C:\windows\System32\msiexec.exe" /i "C:\temp\Lenny_Fox_test install\TinyWall-v3-Installer.msi" )
2020-04-29 19:16:19,4508,C:\Windows\SysWOW64\msiexec.exe,40,Allowed ;Opening process or thread for modify access (taskhost.exe(pid=3512))
2020-04-29 19:16:19,4508,C:\Windows\SysWOW64\msiexec.exe,41,Allowed ;Modifying protected file (K:\MSIed645.tmp)
2020-04-29 19:16:19,4508,C:\Windows\SysWOW64\msiexec.exe,60,Allowed ;Opening protected file for reading access (K:\)
2020-04-29 19:16:31,3944,C:\Windows\System32\msiexec.exe,53,Allowed ;Execution of an application (C:\Windows\syswow64\MsiExec.exe -Embedding 9FC25FD934247DA0DC42D499C7DCD32E C)
2020-04-29 19:16:32,676,C:\Windows\System32\services.exe,53,Allowed ;Execution of an application (C:\windows\system32\vssvc.exe)
2020-04-29 19:16:32,676,C:\Windows\System32\services.exe,53,Allowed ;Execution of an application (C:\windows\System32\svchost.exe -k swprv)
2020-04-29 19:17:15,3944,C:\Windows\System32\msiexec.exe,53,Allowed ;Execution of an application (C:\Windows\syswow64\MsiExec.exe -Embedding 49E1F41BA3BA817678ADB66656CF5229)
2020-04-29 19:17:17,3944,C:\Windows\System32\msiexec.exe,53,Allowed ;Execution of an application (C:\Windows\syswow64\MsiExec.exe -Embedding 37AA86AD10F0A546123C27A829004E8E E Global\MSI0000)
2020-04-29 19:17:18,3944,C:\Windows\System32\msiexec.exe,53,Allowed ;Execution of an application ("C:\Program Files\TinyWall\TinyWall.exe" /install)
2020-04-29 19:17:29,1860,C:\Program Files\TinyWall\TinyWall.exe,41,Allowed ;Modifying protected file (C:\Windows\System32\InstallUtil.InstallLog)
2020-04-29 19:17:32,676,C:\Program Files\TinyWall\TinyWall.exe,39,Allowed ;Registering driver or service 
2020-04-29 19:17:35,1860,C:\Program Files\TinyWall\TinyWall.exe,26,Allowed ;Modifying protected registry key (HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run,TinyWall Controller)
2020-04-29 19:17:35,676,C:\Windows\System32\services.exe,53,Allowed ;Execution of an application ("C:\Program Files\TinyWall\TinyWall.exe")
2020-04-29 19:17:36,3944,C:\Windows\System32\msiexec.exe,53,Allowed ;Execution of an application ("C:\Program Files\TinyWall\TinyWall.exe" /desktop /autowhitelist)
2020-04-29 19:17:39,856,C:\Windows\System32\svchost.exe,53,Allowed ;Execution of an application (C:\windows\system32\wbem\wmiprvse.exe -secured -Embedding)
2020-04-29 19:17:46,856,C:\Windows\System32\svchost.exe,53,Allowed ;Execution of an application (C:\windows\system32\wbem\wmiprvse.exe -Embedding)
2020-04-29 19:17:56,856,C:\Windows\System32\svchost.exe,53,Allowed ;Execution of an application (C:\windows\system32\wbem\wmiprvse.exe -secured -Embedding)