files on NTFS also have alternate streams. this is how Windows knows you're executing a file downloaded from the internet via internet explorer, for example.

files on NTFS also have alternate streams. this is how Windows knows you're executing a file downloaded from the internet via internet explorer, for example. it's easy to hide stuff in those streams as well.