Suspected Trojanised NSIS Installer

Detects execution of installers from common user download locations with NSIS style command line indicators, consistent with trojanised installer delivery chains.