[phito]

So they keep extra file metadata god-knows-where to flag internet downloaded files, to disable their preview because their preview sucks and is insecure? How about they make their preview, I don't know, just render local documents without following URLs?

What a shit OS. I can't believe there are still so many tech oriented people willing to put up with this crap just to keep their habits.

[nom]

Let me ground you a bit. This feature is 20 years old. The data is stored in NTFS alternate data streams.

https://en.wikipedia.org/wiki/Mark_of_the_Web

[childintime]

Wow, it contains forensic info:

"As of Windows 10, the contents [...] include the keys HostIpAddress, HostUrl, and ReferrerUrl.[...] they typically contain the domain name and exact URL of the original online download location".

[phito]

Interesting, thanks