Dumping Inode 3129 (0xc39) Upd. Seq. Array Off.: 48 (0x30) Upd. Seq. Array Count: 3 (0x3) Upd. Seq. Number: 87 (0x57) LogFile Seq. Number: 0x2d6a9d0e MFT Record Seq. Numb.: 1 (0x1) Number of Hard Links: 1 (0x1) Attribute Offset: 56 (0x38) MFT Record Flags: IN_USE DIRECTORY Bytes Used: 784 (0x310) bytes Bytes Allocated: 1024 (0x400) bytes Next Attribute Instance: 10 (0xa) MFT Padding: 00 00 Dumping attribute $STANDARD_INFORMATION (0x10) from mft record 3129 (0xc39) Resident: Yes Attribute flags: 0x0000 Attribute instance: 0 (0x0) Data size: 72 (0x48) Resident flags: 0x00 File Creation Time: Thu Nov 2 11:18:36 2006 File Altered Time: Wed Jul 15 22:17:03 2009 MFT Changed Time: Wed Jul 15 22:17:03 2009 Last Accessed Time: Wed Jul 15 22:17:03 2009 File attributes: ARCHIVE (0x00000000) Maximum versions: 0 Version number: 0 Class ID: 0 User ID: 0 (0x0) Security ID: 276 (0x114) Quota charged: 0 (0x0) Update Sequence Number: 105878808 (0x64f9518) Dumping attribute $ATTRIBUTE_LIST (0x20) from mft record 3129 (0xc39) Resident: Yes Attribute flags: 0x0000 Attribute instance: 8 (0x8) Data size: 232 (0xe8) Resident flags: 0x00 Dumping attribute $FILE_NAME (0x30) from mft record 3129 (0xc39) Resident: Yes Attribute flags: 0x0000 Attribute instance: 2 (0x2) Data size: 82 (0x52) Resident flags: 0x01 Parent directory: 2222 (0x8ae) File Creation Time: Wed May 13 10:02:04 2009 File Altered Time: Wed May 13 10:02:04 2009 MFT Changed Time: Wed May 13 10:02:04 2009 Last Accessed Time: Wed May 13 10:02:04 2009 Allocated Size: 0 (0x0) Data Size: 0 (0x0) Filename Length: 8 (0x8) File attributes: I30_INDEX (0x00000000) Namespace: Win32 & DOS Filename: 'System32' Dumping attribute $INDEX_ROOT (0x90) from mft record 3129 (0xc39) Resident: Yes Attribute name: '$I30' Attribute flags: 0x0000 Attribute instance: 7 (0x7) Data size: 56 (0x38) Resident flags: 0x00 Indexed Attr Type: DIRECTORY_I30 Collation Rule: 1 (0x1) Index Block Size: 4096 (0x1000) Clusters Per Block: 1 (0x1) Entries Offset: 16 (0x10) Index Size: 40 (0x28) Allocated Size: 40 (0x28) Index header flags: 0x01 Index entries total: 1 Dumping attribute $INDEX_ALLOCATION (0xa0) from mft record 66931 (0x10573) Resident: No Attribute name: '$I30' Attribute flags: 0x0000 Attribute instance: 0 (0x0) Compression unit: 0 (0x0) Data size: 786432 (0xc0000) Allocated size: 786432 (0xc0000) Initialized size: 786432 (0xc0000) Index entries total: 2808 INDX blocks total: 141 Dumping attribute $BITMAP (0xb0) from mft record 3129 (0xc39) Resident: Yes Attribute name: '$I30' Attribute flags: 0x0000 Attribute instance: 4 (0x4) Data size: 32 (0x20) Resident flags: 0x00 Dumping attribute $LOGGED_UTILITY_STREAM (0x100) from mft record 3129 (0xc39) Resident: Yes Attribute name: '$TXF_DATA' Attribute flags: 0x0000 Attribute instance: 9 (0x9) Data size: 56 (0x38) Resident flags: 0x00 End of inode reached