28:T406,"Nullsoft Install System v2.46.5-Unicode" (Indicator: "requestedExecutionLevel level="highestAvailable"")29:T4b6,Process "dismhost.exe" (UID: 00000000-00001968) was launched with modified environment variables: "LOCALAPPDATA, USERDOMAIN, TEMP, APPDATA, USERPROFILE, TMP" Process "dismhost.exe" (UID: 00000000-00001968) was launched with missing environment variables: "LOGONSERVER, HOMEPATH, HOMEDRIVE" Process "preinstall.exe" (UID: 00000000-00001984) was launched with new environment variables: "PROCESSOR_ARCHITEW6432="AMD64", LOGONSERVER="\\HAPUBWS-PC", HOMEPATH="\Users\NHuVlZ5", HOMEDRIVE="C:"" Process "preinstall.exe" (UID: 00000000-00001984) was launched with modified environment variables: "CommonProgramFiles, LOCALAPPDATA, USERDOMAIN, PROCESSOR_ARCHITECTURE, TEMP, APPDATA, USERPROFILE, TMP, ProgramFiles" Process "iexplore.exe" (UID: 00000000-00003164) was launched with modified environment variables: "Path" Process "booter.exe" (UID: 00000000-00001676) was launched with modified environment variables: "Path" Process "IEXPLORE.EXE" (UID: 00000000-00002328) was launched with modified environment variables: "CommonProgramFiles, Path, PROCESSOR_ARCHITECTURE, ProgramFiles" Process "IEXPLORE.EXE" (UID: 00000000-00002328) was launched with missing environment variables: "PROCESSOR_ARCHITEW6432"2a:T569,