The process msiexec.exe is the one, the threat is being attributed to.