start::
closeprocesses:
createrestorepoint:
C:\Program Files (x86)\MaskVPN
HKU\S-1-5-21-2328733025-361101407-2532457998-1003\...\Run: [GalaxyClient] => [X] 
HKU\S-1-5-21-2328733025-361101407-2532457998-1003\...\MountPoints2: {62c5bd72-0303-11ea-86fa-04d4c48d3397} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2328733025-361101407-2532457998-1003\...\MountPoints2: {69e6a0db-9055-11ec-932a-04d4c48d3397} - "F:\HiSuiteDownLoader.exe"
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
S4 ssudmdm; \SystemRoot\system32\DRIVERS\ssudmdm.sys [X]
S4 VBoxUSB; \SystemRoot\System32\Drivers\VBoxUSB.sys [X] 
R2 MaskVPNService; C:\Program Files (x86)\MaskVPN\mask_svc.exe [7493560 2020-08-06] (Global Media (Thailand) Co., Ltd -> Global Media (Thailand) Co., Ltd) 
2022-05-08 17:43 - 2022-05-15 19:34 - 000000000 ____D C:\Program Files (x86)\MaskVPN 
FirewallRules: [{70FBB148-43E0-42AB-8CB2-76135B8943B8}] => (Allow) C:\Program Files (x86)\MaskVPN\mask_svc.exe (Global Media (Thailand) Co., Ltd -> Global Media (Thailand) Co., Ltd)
FirewallRules: [{AC6395A3-7575-48F0-9C79-9A6081C2BC9D}] => (Allow) C:\Program Files (x86)\MaskVPN\MaskVPN.exe (Global Media (Thailand) Co., Ltd -> Global Media (Thailand) Co., Ltd)
FirewallRules: [{98B0C721-C4B9-4A69-9857-CC51B87DDAB6}] => (Allow) C:\Program Files (x86)\MaskVPN\MaskVPNUpdate.exe (Global Media (Thailand) Co., Ltd -> Global Media (Thailand) Co., Ltd)
FirewallRules: [{EA68209D-F06A-4680-9F56-A5BA98A2A2BF}] => (Allow) C:\Program Files (x86)\MaskVPN\tunnle.exe (Global Media (Thailand) Co., Ltd -> Global Media (Thailand) Co., Ltd) 
emptytemp:
end::