Wise Installer SSYNC10G.EXE extracts recursively and thus infinitely due to internal setup executable #207

Open
opened 2026-01-29 21:07:10 +00:00 by claunia · 0 comments
Owner

Originally created by @HeroponRikiBestest on GitHub (Dec 8, 2025).

I'm not sure if this would be considered a Serialization issue or a ProtectionScan issue. Regardless, a wise installer is scanned recursively, infinitely, due to its internal setup executable being scanned.

I might take a look at it later, but I'm not sure I want to touch your wise extraction code given how well it functions, and the fact that this is probably "technically" correct behavior.

Executable in question:

SSYNC10G.EXE.zip

The loop:

$ ~/ProtectionScan/ProtectionScan SSYNC10G.EXE 
0.00%:  - 
0.00%: /home/bestest/rondoo/RONDOMEDIA/SSYNC10G.EXE - Checking file
--> 0.00%:  - 
--> 0.00%: /CustomDialogSet_-SureSync Setup - Checking file from archive
--> 4.55%: /FILE00XX.DAT - 
--> 3.03%: /FILE00XX.DAT - Checking file from archive
--> 3.03%: /CustomBillboardSet_0082-15-150000 - 
--> 4.55%: /FILE000A - Checking file from archive
--> 1.52%: /CustomBillboardSet_0082-15-150000 - Checking file from archive
--> 1.52%: /CustomDialogSet_-SureSync Setup - 
--> 6.06%: /FILE000A - 
--> 6.06%: /FILE0009 - Checking file from archive
--> 7.58%: /FILE0009 - 
--> 7.58%: /FILE0008 - Checking file from archive
--> 9.09%: /Ocxreg32.EXE - Checking file from archive
--> 9.09%: /FILE0008 - 
--> 10.61%: /Ocxreg32.EXE - 
--> 10.61%: /CTL3D32.DLL - Checking file from archive
--> 12.12%: /CTL3D32.DLL - 
--> 12.12%: /WISE0001.DLL - Checking file from archive
--> 13.64%: /WISE0001.DLL - 
--> 13.64%: /WiseScript.bin - Checking file from archive
--> 15.15%: /MS_SHARED/DAO350.DLL - Checking file from archive
--> 15.15%: /WiseScript.bin - 
--> 16.67%: /MS_SHARED/DAO350.DLL - 
--> 16.67%: /SERVICELOCATN/SyncServ.exe - Checking file from archive
--> 18.18%: /SERVICELOCATN/SyncServ.exe - 
--> 18.18%: /SERVICELOCATN/srvany.exe - Checking file from archive
--> 19.70%: /SERVICELOCATN/srvany.exe - 
--> 19.70%: /MAINDIR/Uninstal.EXE - Checking file from archive
--> --> 0.00%:  - 
--> --> 0.00%: /Uninstal.EXE-embedded_resource_1 (300, 30202, 1033).bin - Checking file from archive
--> --> 50.00%: /Uninstal.EXE-embedded_resource_1 (300, 30202, 1033).bin - 
--> --> 50.00%: /Uninstal.EXE-embedded_resource_0 (300, 30201, 1033).bin - Checking file from archive
--> --> 100.00%: /Uninstal.EXE-embedded_resource_0 (300, 30201, 1033).bin - 
--> 21.21%: /MAINDIR/Uninstal.EXE - Embedded Executable, Embedded GZip Archive, Embedded Executable
--> 21.21%: /MAINDIR/regsvr32.EXE - Checking file from archive
--> 22.73%: /MAINDIR/regsvr32.EXE - 
--> 22.73%: /MAINDIR/racmgr32.EXE - Checking file from archive
--> 24.24%: /MAINDIR/racmgr32.EXE - 
--> 24.24%: /MAINDIR/CLIREG32.EXE - Checking file from archive
--> 25.76%: /MAINDIR/CLIREG32.EXE - 
--> 25.76%: /MAINDIR/Setup.exe - Checking file from archive
--> --> 0.00%:  - 
--> --> 0.00%: /CustomDialogSet_-SureSync Setup - Checking file from archive
--> --> 3.12%: /CustomDialogSet_-SureSync Setup - 
--> --> 3.12%: /CustomBillboardSet_0082-15-150000 - Checking file from archive
--> --> 6.25%: /CustomBillboardSet_0082-15-150000 - 
--> --> 6.25%: /FILE00XX.DAT - Checking file from archive
--> --> 9.38%: /FILE00XX.DAT - 
--> --> 9.38%: /FILE000A - Checking file from archive
--> --> 12.50%: /FILE000A - 
--> --> 12.50%: /FILE0009 - Checking file from archive
--> --> 15.62%: /FILE0009 - 
--> --> 15.62%: /FILE0008 - Checking file from archive
--> --> 18.75%: /FILE0008 - 
--> --> 18.75%: /Ocxreg32.EXE - Checking file from archive
--> --> 21.88%: /Ocxreg32.EXE - 
--> --> 21.88%: /CTL3D32.DLL - Checking file from archive
--> --> 25.00%: /CTL3D32.DLL - 
--> --> 25.00%: /WISE0001.DLL - Checking file from archive
--> --> 28.12%: /WISE0001.DLL - 
--> --> 28.12%: /WiseScript.bin - Checking file from archive
--> --> 31.25%: /WiseScript.bin - 
--> --> 31.25%: /MAINDIR/Setup.exe - Checking file from archive
--> --> --> 0.00%:  - 
--> --> --> 0.00%: /CustomDialogSet_-SureSync Setup - Checking file from archive
--> --> --> 3.12%: /CustomDialogSet_-SureSync Setup - 
--> --> --> 3.12%: /CustomBillboardSet_0082-15-150000 - Checking file from archive
--> --> --> 6.25%: /CustomBillboardSet_0082-15-150000 - 
--> --> --> 6.25%: /FILE00XX.DAT - Checking file from archive
--> --> --> 9.38%: /FILE00XX.DAT - 
--> --> --> 9.38%: /FILE000A - Checking file from archive
--> --> --> 12.50%: /FILE000A - 
--> --> --> 12.50%: /FILE0009 - Checking file from archive
--> --> --> 15.62%: /FILE0009 - 
--> --> --> 15.62%: /FILE0008 - Checking file from archive
--> --> --> 18.75%: /FILE0008 - 
--> --> --> 18.75%: /Ocxreg32.EXE - Checking file from archive
--> --> --> 21.88%: /Ocxreg32.EXE - 
--> --> --> 21.88%: /CTL3D32.DLL - Checking file from archive
--> --> --> 25.00%: /CTL3D32.DLL - 
--> --> --> 25.00%: /WISE0001.DLL - Checking file from archive
--> --> --> 28.12%: /WISE0001.DLL - 
--> --> --> 28.12%: /WiseScript.bin - Checking file from archive
--> --> --> 31.25%: /WiseScript.bin - 
--> --> --> 31.25%: /MAINDIR/Setup.exe - Checking file from archive
--> --> --> --> 0.00%:  - 
[etc]
Originally created by @HeroponRikiBestest on GitHub (Dec 8, 2025). I'm not sure if this would be considered a Serialization issue or a ProtectionScan issue. Regardless, a wise installer is scanned recursively, infinitely, due to its internal setup executable being scanned. I might take a look at it later, but I'm not sure I want to touch your wise extraction code given how well it functions, and the fact that this is probably "technically" correct behavior. Executable in question: [SSYNC10G.EXE.zip](https://github.com/user-attachments/files/24037017/SSYNC10G.EXE.zip) The loop: ``` $ ~/ProtectionScan/ProtectionScan SSYNC10G.EXE 0.00%: - 0.00%: /home/bestest/rondoo/RONDOMEDIA/SSYNC10G.EXE - Checking file --> 0.00%: - --> 0.00%: /CustomDialogSet_-SureSync Setup - Checking file from archive --> 4.55%: /FILE00XX.DAT - --> 3.03%: /FILE00XX.DAT - Checking file from archive --> 3.03%: /CustomBillboardSet_0082-15-150000 - --> 4.55%: /FILE000A - Checking file from archive --> 1.52%: /CustomBillboardSet_0082-15-150000 - Checking file from archive --> 1.52%: /CustomDialogSet_-SureSync Setup - --> 6.06%: /FILE000A - --> 6.06%: /FILE0009 - Checking file from archive --> 7.58%: /FILE0009 - --> 7.58%: /FILE0008 - Checking file from archive --> 9.09%: /Ocxreg32.EXE - Checking file from archive --> 9.09%: /FILE0008 - --> 10.61%: /Ocxreg32.EXE - --> 10.61%: /CTL3D32.DLL - Checking file from archive --> 12.12%: /CTL3D32.DLL - --> 12.12%: /WISE0001.DLL - Checking file from archive --> 13.64%: /WISE0001.DLL - --> 13.64%: /WiseScript.bin - Checking file from archive --> 15.15%: /MS_SHARED/DAO350.DLL - Checking file from archive --> 15.15%: /WiseScript.bin - --> 16.67%: /MS_SHARED/DAO350.DLL - --> 16.67%: /SERVICELOCATN/SyncServ.exe - Checking file from archive --> 18.18%: /SERVICELOCATN/SyncServ.exe - --> 18.18%: /SERVICELOCATN/srvany.exe - Checking file from archive --> 19.70%: /SERVICELOCATN/srvany.exe - --> 19.70%: /MAINDIR/Uninstal.EXE - Checking file from archive --> --> 0.00%: - --> --> 0.00%: /Uninstal.EXE-embedded_resource_1 (300, 30202, 1033).bin - Checking file from archive --> --> 50.00%: /Uninstal.EXE-embedded_resource_1 (300, 30202, 1033).bin - --> --> 50.00%: /Uninstal.EXE-embedded_resource_0 (300, 30201, 1033).bin - Checking file from archive --> --> 100.00%: /Uninstal.EXE-embedded_resource_0 (300, 30201, 1033).bin - --> 21.21%: /MAINDIR/Uninstal.EXE - Embedded Executable, Embedded GZip Archive, Embedded Executable --> 21.21%: /MAINDIR/regsvr32.EXE - Checking file from archive --> 22.73%: /MAINDIR/regsvr32.EXE - --> 22.73%: /MAINDIR/racmgr32.EXE - Checking file from archive --> 24.24%: /MAINDIR/racmgr32.EXE - --> 24.24%: /MAINDIR/CLIREG32.EXE - Checking file from archive --> 25.76%: /MAINDIR/CLIREG32.EXE - --> 25.76%: /MAINDIR/Setup.exe - Checking file from archive --> --> 0.00%: - --> --> 0.00%: /CustomDialogSet_-SureSync Setup - Checking file from archive --> --> 3.12%: /CustomDialogSet_-SureSync Setup - --> --> 3.12%: /CustomBillboardSet_0082-15-150000 - Checking file from archive --> --> 6.25%: /CustomBillboardSet_0082-15-150000 - --> --> 6.25%: /FILE00XX.DAT - Checking file from archive --> --> 9.38%: /FILE00XX.DAT - --> --> 9.38%: /FILE000A - Checking file from archive --> --> 12.50%: /FILE000A - --> --> 12.50%: /FILE0009 - Checking file from archive --> --> 15.62%: /FILE0009 - --> --> 15.62%: /FILE0008 - Checking file from archive --> --> 18.75%: /FILE0008 - --> --> 18.75%: /Ocxreg32.EXE - Checking file from archive --> --> 21.88%: /Ocxreg32.EXE - --> --> 21.88%: /CTL3D32.DLL - Checking file from archive --> --> 25.00%: /CTL3D32.DLL - --> --> 25.00%: /WISE0001.DLL - Checking file from archive --> --> 28.12%: /WISE0001.DLL - --> --> 28.12%: /WiseScript.bin - Checking file from archive --> --> 31.25%: /WiseScript.bin - --> --> 31.25%: /MAINDIR/Setup.exe - Checking file from archive --> --> --> 0.00%: - --> --> --> 0.00%: /CustomDialogSet_-SureSync Setup - Checking file from archive --> --> --> 3.12%: /CustomDialogSet_-SureSync Setup - --> --> --> 3.12%: /CustomBillboardSet_0082-15-150000 - Checking file from archive --> --> --> 6.25%: /CustomBillboardSet_0082-15-150000 - --> --> --> 6.25%: /FILE00XX.DAT - Checking file from archive --> --> --> 9.38%: /FILE00XX.DAT - --> --> --> 9.38%: /FILE000A - Checking file from archive --> --> --> 12.50%: /FILE000A - --> --> --> 12.50%: /FILE0009 - Checking file from archive --> --> --> 15.62%: /FILE0009 - --> --> --> 15.62%: /FILE0008 - Checking file from archive --> --> --> 18.75%: /FILE0008 - --> --> --> 18.75%: /Ocxreg32.EXE - Checking file from archive --> --> --> 21.88%: /Ocxreg32.EXE - --> --> --> 21.88%: /CTL3D32.DLL - Checking file from archive --> --> --> 25.00%: /CTL3D32.DLL - --> --> --> 25.00%: /WISE0001.DLL - Checking file from archive --> --> --> 28.12%: /WISE0001.DLL - --> --> --> 28.12%: /WiseScript.bin - Checking file from archive --> --> --> 31.25%: /WiseScript.bin - --> --> --> 31.25%: /MAINDIR/Setup.exe - Checking file from archive --> --> --> --> 0.00%: - [etc] ```
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SabreTools/BinaryObjectScanner#207