``` SELECT FROM authenticode WHERE path = SELECT substr path

Question

``` SELECT FROM authenticode WHERE path = SELECT substr path 0 21 FROM processes WHERE path LIKE winlogon || procexp exe ```

Mustafa · Answer

thanks for your supports < terracatta> < alessandrogario> this gives Windows System32 instead of Windows

alessandrogario · Answer

You can adjust the substr parameters 21 to cut away the System32 portion

Mustafa · Answer

it works thank you very much