Mostly as a reminder for myself, here are the Internet Zone IDs (taken from HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones on a Windows 8.1 machine, there is also a HKLM entry) as used in the Zone.Identifier ADS:
| Zone ID | Displayname | Description |
|---|---|---|
| 0 | Computer | Your computer |
| 1 | Local intranet | This zone contains all Web sites that are on your organization’s intranet. |
| 2 | Trusted sites | This zone contains Web sites that you trust not to damage your computer or data. |
| 3 | Internet | This zone contains all Web sites you haven’t placed in other zones |
| 4 | Restricted sites | This zone contains Web sites that could potentially damage your computer or data. |
Didier Stevens 
[…] Zone IDs: here. […]
Pingback by Quickpost: Zone.Identifier | Didier Stevens — Tuesday 9 May 2017 @ 16:10
There is also URLZONE_ESC_FLAG and Smart Screen uses a undocumented entry in the ADS.
Comment by WindowsSucks — Wednesday 10 May 2017 @ 20:00
[…] Quickpost: Internet Zone IDs […]
Pingback by Overview of Content Published In May | Didier Stevens — Wednesday 7 June 2017 @ 0:15
[…] simulate a download, I will add the ADS myself, and I often refer to my own blog post here and here, as I don’t remember the exact syntax and […]
Pingback by zoneidentifier.exe | Didier Stevens — Wednesday 25 December 2019 @ 13:53