>Where is this metadata written and at which point? NTFS alternate data stream. It's the responsibility of the software that created the file to populate such

>Where is this metadata written and at which point? NTFS alternate data stream. It's the responsibility of the software that created the file to populate such a stream. Common browsers do so for downloaded files. Something like `curl` probably doesn't (I don't have Windows to check). >Does adding this metadata messes up checksum or digital signature? ADS contents are not considered when checking the signature.