Little Addendum: Seeing a zero-Byte sized file in Explorer does not necessarily mean that the file doesn't have any contents or meaning.
1. Might be write-opened by any process. File size information might not be updated immediately.
2. The file's main data stream might be empty, indeed, but further data can also hide in Alternate Data Streams.
3. It may encode information through its attributes like timestamp or size, also its mere presence might be a switch (flagfile).
Just something to consider.
1. Might be write-opened by any process. File size information might not be updated immediately.
2. The file's main data stream might be empty, indeed, but further data can also hide in Alternate Data Streams.
3. It may encode information through its attributes like timestamp or size, also its mere presence might be a switch (flagfile).
Just something to consider.
Logged