Defense in depth — the Microsoft way (part 45): filesystem redirection fails to redirect the application directory

Posted by Stefan Kanthak on Oct 20

Hi @ll,

on x64 editions of Windows, RegEdit.exe exists both as
%windir%regedit.exe and %windir%SysWOW64regedit.exe.

<https://msdn.microsoft.com/en-us/library/aa384187.aspx> states

| […] whenever a 32-bit application attempts to access […]
| %windir%regedit.exe is redirected to %windir%SysWOW64regedit.exe.

But what is the “application directory” when a 32-bit application
runs %windir%regedit.exe?
Is it %windir% or…

Leave a Reply