Back to Techniques
msiexec.exe
msiexec.exe is the Windows Installer engine. Frequently used in admin and attacker workflows to install or repair packages. Supports quiet installs, transforms, and logging. Useful for command-exec demos with benign MSIs.
Demonstrates command execution via msiexec /i against a trusted URL or local MSI. Use harmless packages in testing.
Press Win-R
Type:
msiexec /i C:\Windows\System32\shell.mui /qn /L*v %TEMP%\msi.logPress Enter
Mitigations:
Restrict MSI installs; monitor
msiexecnetwork access and odd sources
Contributor:
ClickGrab
(2025-09-16)