Windows MSIExec DLLRegisterServer Execution

The analytic detects the execution of msiexec.exe with the /y switch parameter, which enables the loading of DLLRegisterServer. This activity can indicate an attempt to register malicious DLLs, potentially leading to code execution or persistence on the system. If confirmed malicious, this could allow an attacker to execute arbitrary code, escalate privileges, or maintain persistence within the environment.