start::
closeprocesses:
createrestorepoint:
C:\Users\ariel\AppData\Roaming\Bloom
HKU\S-1-5-21-858394339-3323934644-574242159-1005\...\Run: [Bloom] => C:\Users\ariel\AppData\Roaming\Bloom\Bloom.exe [134332092 2022-04-21] (Bloom Ltd) [File not signed]
HKU\S-1-5-21-858394339-3323934644-574242159-1005\...\Run: [RestMinder] => C:\Users\ariel\AppData\Local\Programs\RestMinder\RestMinder.exe [199232 2021-09-06] (Globalhop Ltd -> )
C:\Users\ariel\AppData\Local\Programs\RestMinder
2022-04-21 19:03 - 2022-04-21 19:04 - 000000000 ____D C:\Users\ariel\AppData\Roaming\Bloom
2022-04-21 19:00 - 2022-04-21 19:00 - 000000000 ____D C:\Users\ariel\AppData\Local\Bloom
C:\Users\ariel\AppData\Local\Programs\RestMinder
cmd: DISM /Online /Cleanup-image /Restorehealth
emptytemp:
end::