Initiated:true Image:\\msiexec.exe (DestinationPort:80 OR DestinationPort:443)