Tag
Explains how the Mark-of-the-Web (MoTW) mechanism in Windows can be used to make installer applications behave differently depending on the website they are downloaded from, exploiting NTFS alternate data streams.