CIS prompted me to allow or deny:
C:/windows/temp/{312960DD-9577-407D-8E19-B0350E4CB1CF}.exe
from connecting to the internet.
I blocked it and was unable to find it on my computer’s temp file.
Perhaps it’s generated by another file? A google search for the path
and for just the file name turned up nothing.
Have you looked at the file’s properties? Often there’s a company name or a description in there. It’d also be good to know what process ran that program (aka, the “parent process”). You can use a nice utility from SysInternals (now part of Microsoft) named “ProcessExplorer” to find that out.
Also the date created and date modified fields might jog your memory to what it’s related to.
I think installers make temporary executables like this and maybe some VPN clients too.