How to identify, if an executable was installed by MS Click-to-Run installer?
For a classic MSI installer I can just open the MSI file with tools like Orca and then I can easily see if a given file was part of this installation. But how can I check the same for any Click-to-Run installation?
E.g. I want to check, if outlook.exe is still the original one being installed or if it may be tampered. Any ideas?
