.. /.Msi

Executable
Double Click

Contributors:

mr.d0x

Description:

MSI is a Windows Installer package which execute programs similiar to EXE files.

OS:

Windows

Recommendation:

Block the download and execution of MSI files. Whitelist users/groups when required.

Resources:

https://isc.sans.edu/forums/diary/Malware+Delivered+via+Windows+Installer+Files/23349/

File Samples: