MSI package disguised as vcredist DLL silently installed via msiexec

Duo Tech@duotech

•updated Jul 2, 2026•0•0•2

Detects the use of msiexec.exe to execute installation commands specifically involving Visual C++ Redistributable DLLs (vcredist_x64.dll or vcredist_x86.dll) with quiet installation flags. This behavior may indicate an attempt to bundle or install dependencies via msiexec to proxy execution.