As I now have an example with open source software it may be easier to analyze. I checked the MSI setup of NodeJS and there is no custom action that is opening the nodejs.exe from what I can see. As ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results