This flag is saved in NTFS Alternate Data Streams (ADS). Any plugin or program which is able to show such streams can be used for this. Starting in version 10.0 TC itself is also able to display from this specific ADS in Ctrl+L dialog and in custom columns.
Note that ADS can contain arbitrary data. This flag is just an ADS with a specific content.
Theoretically it's possible to add the ADS to a file to block it again. The quesion is why would you want to do that? Windows doesn't prevent executing a file with this flag, it just adds another confirmation layer (one that doesn't add any security IMO).
[EDIT] Fixed typo, thanks to Gral. [/EDIT]
Regards
Dalai
Note that ADS can contain arbitrary data. This flag is just an ADS with a specific content.
Theoretically it's possible to add the ADS to a file to block it again. The quesion is why would you want to do that? Windows doesn't prevent executing a file with this flag, it just adds another confirmation layer (one that doesn't add any security IMO).
[EDIT] Fixed typo, thanks to Gral. [/EDIT]
Regards
Dalai
Statistics: Posted by Dalai — 2024-03-16, 21:02 UTC