Pavel Yosifovich

@zodiacon · Twitter · 2026-07-12 13:58 UTC

New video: App Execution Aliases. Type notepad, get the Store one, not the System32 one. Why? App Execution Aliases. https://trainsec.net/library/windows-internals/how-windows-app-execution-aliases-work-and-how-to-read-them-in-c/