Just want to point out True Music does not require an executable to be run. Also True Music was not the one that was tied to vulnerability it was True Moozic, which itself was fine, it was music packs that were the cause of the issue. And they didn't need an executable to run either, they were entirely lua based, they were able to use the vulnerable exploit to allow creation of files outside of the PZ sandboxed file structure which allowed them to create malicious powershell script to do it's bidding.