That standardized marker is also known as the 'Mark of the Web' (MOTW) in case you want to search for more details about it.

In general, there is a tool which comes with the SysInternals suite that allows you to see which files have streams and their size:

https://learn.microsoft.com/en-us/sysinternals/downloads/str...