AV we're using is Windows Defender ATP. I examined the Device timeline on the machine and was able to see that there was an entry for file created (by PanGPA.exe) c:\users\\appdata\local\temp\_temp.msi, but no activity beyond that.
AV we're using is Windows Defender ATP. I examined the Device timeline on the machine and was able to see that there was an entry for file created (by PanGPA.exe) c:\users\\appdata\local\temp\_temp.msi, but no activity beyond that.