There are three levels of security warnings you may see when opening a downloaded file. In short, it checks with what program you open the file, the type of the file, and the source from where you obtained the file. Such streams, also known as 'metadata', only exist on NTFS partitions.Īttachment Manager identifies how risky the downloaded file can be for you by several factors.
It writes the zone information to a special area called 'alternate data steam' which is invisible to the end user. This functionality is implemented in the Attachment Manager component. If the zone info presents and is refers to the 'unsafe' source, you see a warning. When you are opening any file, the operating systems analyzes that data.
By default, Windows adds a zone information to each of the files downloaded from the Internet or received by email.