NTFS File Sector Information Utility.

Copyright (C) Microsoft Corporation 1999. All rights reserved.





File 0

Master File Table ($Mft)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $DATA (nonresident)

        logical sectors 45056-45567 (0xb000-0xb1ff)

    $BITMAP (nonresident)

        logical sectors 45048-45055 (0xaff8-0xafff)



File 1

Master File Table Mirror ($MftMirr)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $DATA (nonresident)

        logical sectors 16-23 (0x10-0x17)



File 2

Log File ($LogFile)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $DATA (nonresident)

        logical sectors 36840-40935 (0x8fe8-0x9fe7)



File 3

DASD ($Volume)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $SECURITY_DESCRIPTOR (resident)

    $VOLUME_NAME (resident)

    $VOLUME_INFORMATION (resident)

    $DATA (resident)



File 4

Attribute Definition Table ($AttrDef)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $SECURITY_DESCRIPTOR (resident)

    $DATA (nonresident)

        logical sectors 41456-41463 (0xa1f0-0xa1f7)



File 5

Root Directory

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $OBJECT_ID (resident)

    $SECURITY_DESCRIPTOR (resident)

    $INDEX_ROOT $I30 (resident)

    $INDEX_ALLOCATION $I30 (nonresident)

        logical sectors 352-359 (0x160-0x167)

    $BITMAP $I30 (resident)

    Attribute Type 0x100 $TXF_DATA (resident)



File 6

Volume Bitmap ($BitMap)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $DATA (nonresident)

        logical sectors 45032-45039 (0xafe8-0xafef)



File 7

Boot Sectors ($Boot)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $SECURITY_DESCRIPTOR (resident)

    $DATA (nonresident)

        logical sectors 0-15 (0x0-0xf)



File 8

Bad Cluster List ($BadClus)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $DATA (resident)

    $DATA $Bad (nonresident)



File 9

Security ($Secure)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $DATA $SDS (nonresident)

        logical sectors 40936-41455 (0x9fe8-0xa1ef)

    $INDEX_ROOT $SDH (resident)

    $INDEX_ROOT $SII (resident)

    $INDEX_ALLOCATION $SDH (nonresident)

        logical sectors 43648-43655 (0xaa80-0xaa87)

    $BITMAP $SDH (resident)



File 10

Upcase Table ($UpCase)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $DATA (nonresident)

        logical sectors 24-279 (0x18-0x117)



File 11

Extend Table ($Extend)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $INDEX_ROOT $I30 (resident)



File 12

(unknown/unnamed)

    $STANDARD_INFORMATION (resident)

    $SECURITY_DESCRIPTOR (resident)

    $DATA (resident)



File 13

(unknown/unnamed)

    $STANDARD_INFORMATION (resident)

    $SECURITY_DESCRIPTOR (resident)

    $DATA (resident)



File 14

(unknown/unnamed)

    $STANDARD_INFORMATION (resident)

    $SECURITY_DESCRIPTOR (resident)

    $DATA (resident)



File 15

(unknown/unnamed)

    $STANDARD_INFORMATION (resident)

    $SECURITY_DESCRIPTOR (resident)

    $DATA (resident)



File 24

\$Extend\$Quota

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $INDEX_ROOT $O (resident)

    $INDEX_ROOT $Q (resident)



File 25

\$Extend\$ObjId

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $INDEX_ROOT $O (resident)



File 26

\$Extend\$Reparse

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $INDEX_ROOT $R (resident)



File 27

\$Extend\$RmMetadata

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $INDEX_ROOT $I30 (resident)



File 28

\$Extend\$RmMetadata\$Repair

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $DATA (nonresident)

    $DATA $Config (resident)



File 29

\$Extend\$RmMetadata\$TxfLog

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $INDEX_ROOT $I30 (resident)

    $INDEX_ALLOCATION $I30 (nonresident)

        logical sectors 43640-43647 (0xaa78-0xaa7f)

    $BITMAP $I30 (resident)



File 30

\$Extend\$RmMetadata\$Txf

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $INDEX_ROOT $I30 (resident)

    Attribute Type 0x100 $TXF_DATA (resident)



File 31

\$Extend\$RmMetadata\$TxfLog\$Tops

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $DATA (resident)

    $DATA $T (nonresident)

        logical sectors 41464-43511 (0xa1f8-0xa9f7)



File 32

\$Extend\$RmMetadata\$TxfLog\$TxfLog.blf

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $DATA (nonresident)

        logical sectors 43512-43639 (0xa9f8-0xaa77)



File 33

\$Extend\$RmMetadata\$TxfLog\$TXFLO~1

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $FILE_NAME (resident)

    $DATA (nonresident)

        logical sectors 360-4455 (0x168-0x1167)



File 34

\$Extend\$RmMetadata\$TxfLog\$TXFLO~2

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $FILE_NAME (resident)

    $DATA (nonresident)

        logical sectors 4456-8551 (0x1168-0x2167)



File 35

\Test.txt

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $OBJECT_ID (resident)

    $DATA (resident)



File 36

\$RECYCLE.BIN

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $INDEX_ROOT $I30 (resident)



File 37

\$RECYCLE.BIN\S-1-5-21-3014507357-289372790-1290460715-1000

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $FILE_NAME (resident)

    $INDEX_ROOT $I30 (resident)



File 38

\$RECYCLE.BIN\S-1-5-21-3014507357-289372790-1290460715-1000\desktop.ini

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $DATA (resident)