https://www.cybereason.com/blog/threat-analysis-msi-masquerading-as-software-installer