Attributes Tool Window
The Attributes Tool Window displays the current file's attributes. It also allows you to modify the state of some attributes.
The following attributes are displayed for files and file streams:
| Attribute | Description | Changeable? |
|---|---|---|
| File Name | Full file's path | NO |
| Archive | File is ready to be archived (file has been modified since last archival) | YES |
| Hidden | File is hidden | YES |
| System | File is system | YES |
| Read-Only | File is read only | YES |
| Sparse | File is a sparse file | NO |
| Temporary | File is a temporary | NO |
| Offline | File is offline | NO |
| Encrypted | File is encrypted | NO |
| Compressed | File is compressed | NO |
| Has Reparse Points | File has reparse points | NO |
| Created Date/Time | File's creation date and time | YES |
| Last Access Date/Time | File's last access date and time | YES |
| Last Write Date/Time | File's last write date and time | YES |
| Hard Links | A number of file's hard links | NO |
| Streams | A number of alternate data streams in a file | NO |
| Total Size (with streams) | A total size a file occupies on the disk | NO |
| Total Size (without streams) | A size of the file's unnamed (default) stream | NO |
| Total Streams Size | A total size of all file's named streams | NO |
The following attributes are displayed for opened processes:
| Attribute | Description | Changeable? |
|---|---|---|
| Process Name (ID) | The process name and process ID | NO |
| File Path | Full path to process' executable | NO |
| Number of Blocks | Total number of opened memory blocks | NO |
| Number of Modules | Total number of opened modules | NO |
| Start | Starting memory address | NO |
| Size | Size of opened range | NO |
| End | Ending memory address | NO |
To a change a flag value, click on the checkbox. To change a date/time value, double-click on it. The following window appears:
To apply changes you made to a file's attributes, execute the Tools » Attributes » Apply Changes command. The Tools » Attributes » Reset Attributes command may be used to undo all attribute changes.