The win_pe Package parser should return more information from MSI files. Running the file command on an MSI returns the following string:
$ file 8a70.msi
8a70.msi: Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Python 3.9.5 Core Interpreter (64-bit), Author: Python Software Foundation, Keywords: Installer, Comments: This installer database contains the logic and data required to install Python 3.9.5 Core Interpreter (64-bit)., Template: x64;1033, Revision Number: {B4EE3B98-9538-4F06-A985-EB11048BD7CF}, Create Time/Date: Mon May 3 18:39:40 2021, Last Saved Time/Date: Mon May 3 18:39:40 2021, Number of Pages: 300, Number of Words: 10, Name of Creating Application: Windows Installer XML Toolset (3.11.1.2318), Security: 2
When I scan 8a70.msi with scancode, I do not get any information back other than it is an MSI. We should be able to get the MSI metadata, especially if it shows package name and version.
The win_pe Package parser should return more information from MSI files. Running the
filecommand on an MSI returns the following string:When I scan 8a70.msi with scancode, I do not get any information back other than it is an MSI. We should be able to get the MSI metadata, especially if it shows package name and version.