ine-Client.exe (PID: 3824) 
 nsE4AC.tmp net stop OutlineService (PID: 3716) 
 net.exe net stop OutlineService (PID: 3016) 
 net1.exe %WINDIR%\system32\net1 stop OutlineService (PID: 2424) 
 nsF92F.tmp %WINDIR%\system32\cmd.exe /c add_tap_device.bat (PID: 3936) 
 cmd.exe /c add_tap_device.bat (PID: 2584) 
 netsh.exe netsh interface show interface name=outline-tap0 (PID: 2680) 
 tapinstall.exe tap-windows6\tapinstall install tap-windows6\OemVista.inf tap0901 (PID: 3464) 
 reg.exe reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318} /s /f "tap0901" /e /d (PID: 276) 
 findstr.exe findstr "HKEY.*\\[0-9][0-9][0-9][0-9]$" (PID: 1500) 
 cmd.exe /c type ""%TEMP%\netadapters.txt"" (PID: 780) 
 cmd.exe /c reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318}\0011 /v "NetCfgInstanceId" (PID: 2992) 
 reg.exe reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318}\0011 /v "NetCfgInstanceId" (PID: 3956) 
 cmd.exe /c reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318}\0011 /v "InstallTimeStamp" (PID: 944) 
 reg.exe reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318}\0011 /v "InstallTimeStamp" (PID: 2812) 
 cmd.exe /c reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\{241435B3-5FE7-42C4-8F6B-AA6ABCFA6070}\Connection /v "Name" (PID: 1256) 
 reg.exe reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\{241435B3-5FE7-42C4-8F6B-AA6ABCFA6070}\Connection /v "Name" (PID: 1348) 
 netsh.exe netsh interface ip show interfaces (PID: 1360) 
 find.exe find "Local Area Connection 2" (PID: 2220) 
 netsh.exe netsh interface set interface name="Local Area Connection 2" newname="outline-tap0" (PID: 592) 
 powershell.exe powershell "Rename-NetAdapter -Name \"Local Area Connection 2\" -NewName \"outline-tap0\"" (PID: 3756)