NTFS File Sector Information Utility.

Copyright (C) Microsoft Corporation 1999. All rights reserved.





File 0

Master File Table ($Mft)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $DATA (nonresident)

        logical sectors 6291456-6291551 (0x600000-0x60005f)

    $BITMAP (nonresident)

        logical sectors 6291455-6291455 (0x5fffff-0x5fffff)



File 1

Master File Table Mirror ($MftMirr)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $DATA (nonresident)

        logical sectors 134217727-134217734 (0x7ffffff-0x8000006)



File 2

Log File ($LogFile)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $DATA (nonresident)

        logical sectors 6160368-6291439 (0x5dfff0-0x5fffef)



File 3

DASD ($Volume)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $OBJECT_ID (resident)

    $SECURITY_DESCRIPTOR (resident)

    $VOLUME_NAME (resident)

    $VOLUME_INFORMATION (resident)

    $DATA (resident)



File 4

Attribute Definition Table ($AttrDef)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $SECURITY_DESCRIPTOR (resident)

    $DATA (nonresident)

        logical sectors 6291440-6291444 (0x5ffff0-0x5ffff4)



File 5

Root Directory

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $SECURITY_DESCRIPTOR (nonresident)

        logical sectors 134217814-134217822 (0x8000056-0x800005e)

    $INDEX_ROOT $I30 (resident)

    $INDEX_ALLOCATION $I30 (nonresident)

        logical sectors 134217806-134217813 (0x800004e-0x8000055)

    $BITMAP $I30 (resident)



File 6

Volume Bitmap ($BitMap)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $DATA (nonresident)

        logical sectors 134217823-134283358 (0x800005f-0x801005e)



File 7

Boot Sectors ($Boot)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $SECURITY_DESCRIPTOR (resident)

    $DATA (nonresident)

        logical sectors 0-15 (0x0-0xf)



File 8

Bad Cluster List ($BadClus)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $DATA (resident)

    $DATA $Bad (nonresident)



File 9

Security ($Secure)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $DATA $SDS (nonresident)

        logical sectors 16-528 (0x10-0x210)

        logical sectors 6291445-6291445 (0x5ffff5-0x5ffff5)

        logical sectors 6291454-6291454 (0x5ffffe-0x5ffffe)

        logical sectors 134217743-134217743 (0x800000f-0x800000f)

    $INDEX_ROOT $SDH (resident)

    $INDEX_ROOT $SII (resident)

    $INDEX_ALLOCATION $SDH (nonresident)

        logical sectors 6291446-6291453 (0x5ffff6-0x5ffffd)

    $INDEX_ALLOCATION $SII (nonresident)

        logical sectors 134217744-134217751 (0x8000010-0x8000017)

    $BITMAP $SDH (resident)

    $BITMAP $SII (resident)



File 10

Upcase Table ($UpCase)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $DATA (nonresident)

        logical sectors 134283359-134283614 (0x801005f-0x801015e)



File 11

Extend Table ($Extend)

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $INDEX_ROOT $I30 (resident)



File 12

(unknown/unnamed)

    $STANDARD_INFORMATION (resident)

    $SECURITY_DESCRIPTOR (resident)

    $DATA (resident)



File 13

(unknown/unnamed)

    $STANDARD_INFORMATION (resident)

    $SECURITY_DESCRIPTOR (resident)

    $DATA (resident)



File 14

(unknown/unnamed)

    $STANDARD_INFORMATION (resident)

    $SECURITY_DESCRIPTOR (resident)

    $DATA (resident)



File 15

(unknown/unnamed)

    $STANDARD_INFORMATION (resident)

    $SECURITY_DESCRIPTOR (resident)

    $DATA (resident)



File 24

\$Extend\$Quota

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $INDEX_ROOT $O (resident)

    $INDEX_ROOT $Q (resident)



File 25

\$Extend\$ObjId

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $INDEX_ROOT $O (resident)



File 26

\$Extend\$Reparse

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $INDEX_ROOT $R (resident)



File 27

\SYSTEM~1

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $FILE_NAME (resident)

    $INDEX_ROOT $I30 (resident)

    $INDEX_ALLOCATION $I30 (nonresident)

        logical sectors 134217735-134217742 (0x8000007-0x800000e)

    $BITMAP $I30 (resident)



File 28

\System Volume Information\tracking.log

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $DATA (nonresident)

        logical sectors 529-568 (0x211-0x238)



File 29

\SYSTEM~1\MOUNTP~1

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $FILE_NAME (resident)

    $DATA (resident)



File 30

\RECYCLER

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $INDEX_ROOT $I30 (resident)



File 31

\System Volume Information\_restore{62D93D09-65F6-48C5-9B18-E26A18A918A7}

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $FILE_NAME (resident)

    $INDEX_ROOT $I30 (resident)



File 32

\System Volume Information\_restore{62D93D09-65F6-48C5-9B18-E26A18A918A7}\RP0

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $INDEX_ROOT $I30 (resident)



File 33

\System Volume Information\_restore{62D93D09-65F6-48C5-9B18-E26A18A918A7}\RP0\change.log.1

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $FILE_NAME (resident)

    $DATA (nonresident)

        logical sectors 134217752-134217754 (0x8000018-0x800001a)



File 34

\RECYCLER\S-1-5-21-606747145-1682526488-682003330-1003

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $FILE_NAME (resident)

    $INDEX_ROOT $I30 (resident)



File 35

\RECYCLER\S-1-5-21-606747145-1682526488-682003330-1003\desktop.ini

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $DATA (resident)



File 36

\RECYCLER\S-1-5-21-606747145-1682526488-682003330-1003\INFO2

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $DATA (resident)



File 37

\System Volume Information\_restore{62D93D09-65F6-48C5-9B18-E26A18A918A7}\RP5\RestorePointSize

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $FILE_NAME (resident)

    $DATA (resident)



File 38

\System Volume Information\_restore{62D93D09-65F6-48C5-9B18-E26A18A918A7}\RP5

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $INDEX_ROOT $I30 (resident)



File 39

\System Volume Information\_restore{62D93D09-65F6-48C5-9B18-E26A18A918A7}\RP5\change.log.1

    $STANDARD_INFORMATION (resident)

    $FILE_NAME (resident)

    $FILE_NAME (resident)

    $DATA (nonresident)

        logical sectors 134217755-134217756 (0x800001b-0x800001c)

