As I now have an example with open source software it may be easier to analyze. I checked the MSI setup of NodeJS and there is no custom action that is opening the nodejs.exe from what I can see. As ...