Marked-Up Disk Editor View of $MFT Metafile
Sample Records from Real Win OS
Disk Drives
Copyright©2018 by Daniel B. Sedory
(NOT to be reproduced in any form without Permission of the Author !)
The first 17 Records of a $MFT file from a Windows XP Professional OS; including a BAAD record as the last one (MFT#16).
This is a hex editor view of the first 17 records of an $MFT file found in a Windows XP Professional OS install on a real disk drive. The $MFT file was located at...
Physical Sectors: 6,498,304 - 6,614,015 Logical Sectors: 6,291,456 - 6,407,167 AND at: Physical Sectors: 101,811,200 - 102,515,711 Logical Sectors: 101,604,352 - 102,308,863
These 17 records are located at Logical Sectors 6291456 (0x600000) thru 6291489 (0x600021), or: Logical Byte Offsets: 3,221,225,472 (0xC0000000) thru 3,221,242,879 (0xC00043FF). The Volume Boot Record (VBR) states there are 8 sectors per cluster and that $MFT begins at cluster # 786432; which gives us: 8 x 786432 = Logical Sector 6291456.
Note: For all NTFS version 3.1 (Windows XP or later) MFT file records, the hex byte at offset 0x04 is 0x30 (an ASCII 0 character). Prior to NTFS v. 3.1, this byte was 0x2A. Thus, the Update Sequence Number (USN) for each record in this sample begins at offset 0x30. (For example, the USN for MFT Record # 0 here is: "D9 0D"; which also occurs at the end of each sector for that record.)
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F $MFT Record # 0: The $MFT File 0000 46 49 4C 45 30 00 03 00 67 53 00 FA 0E 00 00 00 FILE0...gS...... 0010 01 00 01 00 38 00 01 00 A0 01 00 00 00 04 00 00 ....8........... 0020 00 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 ................ 0030 D9 0D 00 00 00 00 00 00 10 00 00 00 60 00 00 00 ............`... 0040 00 00 18 00 00 00 00 00 48 00 00 00 18 00 00 00 ........H....... 0050 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 0060 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 0070 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0080 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ................ 0090 00 00 00 00 00 00 00 00 30 00 00 00 68 00 00 00 ........0...h... 00A0 00 00 18 00 00 00 03 00 4A 00 00 00 18 00 01 00 ........J....... 00B0 05 00 00 00 00 00 05 00 5E A4 67 7C 69 E3 CA 01 ........^.g|i... 00C0 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 00D0 5E A4 67 7C 69 E3 CA 01 00 80 F3 16 00 00 00 00 ^.g|i........... 00E0 00 80 F3 16 00 00 00 00 06 00 00 00 00 00 00 00 ................ 00F0 04 03 24 00 4D 00 46 00 54 00 00 00 00 00 00 00 ..$.M.F.T....... 0100 80 00 00 00 50 00 00 00 01 00 40 00 00 00 01 00 ....P.....@..... 0110 00 00 00 00 00 00 00 00 37 6F 01 00 00 00 00 00 ........7o...... 0120 40 00 00 00 00 00 00 00 00 80 F3 16 00 00 00 00 @............... 0130 00 80 F3 16 00 00 00 00 00 80 F3 16 00 00 00 00 ................ 0140 33 B8 69 01 00 00 0C 42 80 05 8A 30 BF 00 00 B8 3.i....B...0.... 0150 B0 00 00 00 48 00 00 00 01 00 40 00 00 00 05 00 ....H.....@..... 0160 00 00 00 00 00 00 00 00 0B 00 00 00 00 00 00 00 ................ 0170 40 00 00 00 00 00 00 00 00 C0 00 00 00 00 00 00 @............... 0180 A0 B7 00 00 00 00 00 00 A0 B7 00 00 00 00 00 00 ................ 0190 31 0C B5 82 00 00 00 00 FF FF FF FF 00 00 00 00 1............... 01A0 FF FF FF FF 00 00 00 00 FF FF FF FF 00 00 00 00 ................ 01B0 FF FF FF FF 00 00 00 00 FF FF FF FF 00 00 00 00 ................ 01C0 FF FF FF FF 00 00 00 00 FF FF FF FF 00 00 00 00 ................ 01D0 40 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 @............... 01E0 08 00 00 00 00 00 00 00 08 00 00 00 00 00 00 00 ................ 01F0 31 01 FF FF 0B 00 00 00 FF FF FF FF 00 00 D9 0D 1............... 0200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0250 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0260 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0270 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0280 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0290 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 02A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 02B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 02C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 02D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 02E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 02F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0310 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0330 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0350 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0370 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0390 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 D9 0D ................ $MFT Record # 1: The $MFTMirr File 0400 46 49 4C 45 30 00 03 00 2D 0F 00 02 00 00 00 00 FILE0...-....... 0410 01 00 01 00 38 00 01 00 58 01 00 00 00 04 00 00 ....8...X....... 0420 00 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 ................ 0430 C3 0D 00 00 00 00 00 00 10 00 00 00 60 00 00 00 ............`... 0440 00 00 18 00 00 00 00 00 48 00 00 00 18 00 00 00 ........H....... 0450 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 0460 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 0470 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0480 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ................ 0490 00 00 00 00 00 00 00 00 30 00 00 00 70 00 00 00 ........0...p... 04A0 00 00 18 00 00 00 02 00 52 00 00 00 18 00 01 00 ........R....... 04B0 05 00 00 00 00 00 05 00 5E A4 67 7C 69 E3 CA 01 ........^.g|i... 04C0 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 04D0 5E A4 67 7C 69 E3 CA 01 00 10 00 00 00 00 00 00 ^.g|i........... 04E0 00 10 00 00 00 00 00 00 06 00 00 00 00 00 00 00 ................ 04F0 08 03 24 00 4D 00 46 00 54 00 4D 00 69 00 72 00 ..$.M.F.T.M.i.r. 0500 72 00 00 00 00 00 00 00 80 00 00 00 48 00 00 00 r...........H... 0510 01 00 40 00 00 00 01 00 00 00 00 00 00 00 00 00 ..@............. 0520 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@....... 0530 00 10 00 00 00 00 00 00 00 10 00 00 00 00 00 00 ................ 0540 00 10 00 00 00 00 00 00 31 01 5E FD 4F 00 00 00 ........1.^.O... 0550 FF FF FF FF 00 00 00 00 20 00 00 00 20 02 00 00 ........ ... ... 0560 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 0570 80 00 00 00 48 00 00 00 01 00 40 00 00 00 01 00 ....H.....@..... 0580 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0590 40 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 @............... 05A0 00 10 00 00 00 00 00 00 00 10 00 00 00 00 00 00 ................ 05B0 31 01 5E FD 4F 00 00 00 FF FF FF FF 00 00 00 00 1.^.O........... 05C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 05D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 05E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 05F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 C3 0D ................ 0600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0610 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0620 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0630 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0640 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0650 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0660 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0670 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0680 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0690 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 06A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 06B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 06C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 06D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 06E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 06F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0700 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0710 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0720 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0730 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0740 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0750 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0760 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0770 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0780 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0790 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 07A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 07B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 07C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 07D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 07E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 07F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 C3 0D ................ $MFT Record # 2: The $LogFile 0800 46 49 4C 45 30 00 03 00 73 0F 00 02 00 00 00 00 FILE0...s....... 0810 02 00 01 00 38 00 01 00 58 01 00 00 00 04 00 00 ....8...X....... 0820 00 00 00 00 00 00 00 00 04 00 00 00 02 00 00 00 ................ 0830 C3 0D 00 00 00 00 00 00 10 00 00 00 60 00 00 00 ............`... 0840 00 00 18 00 00 00 00 00 48 00 00 00 18 00 00 00 ........H....... 0850 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 0860 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 0870 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0880 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ................ 0890 00 00 00 00 00 00 00 00 30 00 00 00 70 00 00 00 ........0...p... 08A0 00 00 18 00 00 00 02 00 52 00 00 00 18 00 01 00 ........R....... 08B0 05 00 00 00 00 00 05 00 5E A4 67 7C 69 E3 CA 01 ........^.g|i... 08C0 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 08D0 5E A4 67 7C 69 E3 CA 01 00 00 00 04 00 00 00 00 ^.g|i........... 08E0 00 00 00 04 00 00 00 00 06 00 00 00 00 00 00 00 ................ 08F0 08 03 24 00 4C 00 6F 00 67 00 46 00 69 00 6C 00 ..$.L.o.g.F.i.l. 0900 65 00 00 00 00 00 00 00 80 00 00 00 48 00 00 00 e...........H... 0910 01 00 40 00 00 00 01 00 00 00 00 00 00 00 00 00 ..@............. 0920 FF 3F 00 00 00 00 00 00 40 00 00 00 00 00 00 00 .?......@....... 0930 00 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 ................ 0940 00 00 00 04 00 00 00 00 32 00 40 FE BF 0B 00 00 ........2.@..... 0950 FF FF FF FF 00 00 00 00 20 00 00 00 20 02 00 00 ........ ... ... 0960 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 0970 80 00 00 00 48 00 00 00 01 00 40 00 00 00 01 00 ....H.....@..... 0980 00 00 00 00 00 00 00 00 FF 3F 00 00 00 00 00 00 .........?...... 0990 40 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 @............... 09A0 00 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 ................ 09B0 32 00 40 FE BF 0B 00 00 FF FF FF FF 00 00 00 00 2.@............. 09C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 09D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 09E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 09F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 C3 0D ................ 0A00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0A10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0A20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0A30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0A40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0A50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0A60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0A70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0A80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0A90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0AA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0AB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0AC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0AD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0AE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0AF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0B00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0B10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0B20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0B30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0B40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0B50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0B60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0B70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0B80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0B90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0BA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0BB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0BC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0BD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0BE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0BF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 C3 0D ................ $MFT Record # 3: $Volume 0C00 46 49 4C 45 30 00 03 00 2C 08 00 FC 0E 00 00 00 FILE0...,....... 0C10 03 00 01 00 38 00 01 00 A0 01 00 00 00 04 00 00 ....8........... 0C20 00 00 00 00 00 00 00 00 0E 00 00 00 03 00 00 00 ................ 0C30 D6 0D 00 00 00 00 00 00 10 00 00 00 60 00 00 00 ............`... 0C40 00 00 18 00 00 00 00 00 48 00 00 00 18 00 00 00 ........H....... 0C50 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 0C60 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 0C70 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0C80 00 00 00 00 01 01 00 00 00 00 00 00 00 00 00 00 ................ 0C90 00 00 00 00 00 00 00 00 30 00 00 00 68 00 00 00 ........0...h... 0CA0 00 00 18 00 00 00 01 00 50 00 00 00 18 00 01 00 ........P....... 0CB0 05 00 00 00 00 00 05 00 5E A4 67 7C 69 E3 CA 01 ........^.g|i... 0CC0 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 0CD0 5E A4 67 7C 69 E3 CA 01 00 00 00 00 00 00 00 00 ^.g|i........... 0CE0 00 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 ................ 0CF0 07 03 24 00 56 00 6F 00 6C 00 75 00 6D 00 65 00 ..$.V.o.l.u.m.e. 0D00 40 00 00 00 28 00 00 00 00 00 00 00 00 00 0D 00 @...(........... 0D10 10 00 00 00 18 00 00 00 D8 C3 69 E0 31 B5 BF 46 ..........i.1..F 0D20 B2 0E DF 0D 62 54 AE F8 60 00 00 00 30 00 00 00 ....bT..`...0... 0D30 00 00 18 00 00 00 04 00 12 00 00 00 18 00 00 00 ................ 0D40 31 00 5F 00 54 00 42 00 2D 00 31 00 5F 00 4F 00 1._.T.B.-.1._.O. 0D50 53 00 53 00 28 00 00 00 70 00 00 00 28 00 00 00 S.S.(...p...(... 0D60 00 00 18 00 00 00 05 00 0C 00 00 00 18 00 00 00 ................ 0D70 00 00 00 00 00 00 00 00 03 01 00 00 00 00 00 00 ................ 0D80 80 00 00 00 18 00 00 00 00 00 18 00 00 00 03 00 ................ 0D90 00 00 00 00 18 00 00 00 FF FF FF FF 00 00 00 00 ................ 0DA0 14 00 00 00 18 00 00 00 38 00 32 00 30 00 47 00 ........8.2.0.G. 0DB0 42 00 2D 00 31 00 5F 00 4F 00 53 00 28 00 00 00 B.-.1._.O.S.(... 0DC0 70 00 00 00 28 00 00 00 00 00 18 00 00 00 05 00 p...(........... 0DD0 0C 00 00 00 18 00 00 00 00 00 00 00 00 00 00 00 ................ 0DE0 03 01 00 00 00 00 00 00 80 00 00 00 18 00 00 00 ................ 0DF0 00 00 18 00 00 00 03 00 00 00 00 00 18 00 D6 0D ................ 0E00 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0E10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0E20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0E30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0E40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0E50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0E60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0E70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0E80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0E90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0EA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0EB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0EC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0ED0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0EE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0EF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0F00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0F10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0F20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0F30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0F40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0F50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0F60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0F70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0F80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0F90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0FA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0FB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0FC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0FD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0FE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0FF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 D6 0D ................ $MFT Record # 4: $AttrDef 1000 46 49 4C 45 30 00 03 00 98 13 00 02 00 00 00 00 FILE0........... 1010 04 00 01 00 38 00 01 00 C0 01 00 00 00 04 00 00 ....8........... 1020 00 00 00 00 00 00 00 00 05 00 00 00 04 00 00 00 ................ 1030 DE C1 00 00 00 00 00 00 10 00 00 00 48 00 00 00 ............H... 1040 00 00 18 00 00 00 00 00 30 00 00 00 18 00 00 00 ........0....... 1050 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 1060 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 1070 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1080 30 00 00 00 70 00 00 00 00 00 18 00 00 00 02 00 0...p........... 1090 52 00 00 00 18 00 01 00 05 00 00 00 00 00 05 00 R............... 10A0 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 10B0 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 10C0 00 10 00 00 00 00 00 00 00 0A 00 00 00 00 00 00 ................ 10D0 06 00 00 00 00 00 00 00 08 03 24 00 41 00 74 00 ..........$.A.t. 10E0 74 00 72 00 44 00 65 00 66 00 00 00 00 00 00 00 t.r.D.e.f....... 10F0 50 00 00 00 80 00 00 00 00 00 18 00 00 00 03 00 P............... 1100 68 00 00 00 18 00 00 00 01 00 04 80 48 00 00 00 h...........H... 1110 58 00 00 00 00 00 00 00 14 00 00 00 02 00 34 00 X.............4. 1120 02 00 00 00 00 00 14 00 89 00 12 00 01 01 00 00 ................ 1130 00 00 00 05 12 00 00 00 00 00 18 00 89 00 12 00 ................ 1140 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 1150 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 1160 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 1170 80 00 00 00 48 00 00 00 01 00 00 00 00 00 04 00 ....H........... 1180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1190 40 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 @............... 11A0 00 0A 00 00 00 00 00 00 00 0A 00 00 00 00 00 00 ................ 11B0 31 01 FE FF 0B 00 20 89 FF FF FF FF 00 00 00 00 1..... ......... 11C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 11D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 11E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 11F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 DE C1 ................ 1200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1250 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1260 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1270 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1280 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1290 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 12A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 12B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 12C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 12D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 12E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 12F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1310 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1330 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1350 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1370 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1390 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 13A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 13B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 13C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 13D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 13E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 13F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 DE C1 ................ $MFT Record # 5: The Root Directory (".") 1400 46 49 4C 45 30 00 03 00 C3 BB 50 84 14 00 00 00 FILE0.....P..... 1410 05 00 01 00 38 00 03 00 80 03 00 00 00 04 00 00 ....8........... 1420 00 00 00 00 00 00 00 00 74 00 00 00 05 00 00 00 ........t....... 1430 FC C1 53 00 00 00 00 00 10 00 00 00 48 00 00 00 ..S.........H... 1440 00 00 18 00 00 00 00 00 30 00 00 00 18 00 00 00 ........0....... 1450 5E A4 67 7C 69 E3 CA 01 1C 65 45 C1 B9 9D D3 01 ^.g|i....eE..... 1460 1C 65 45 C1 B9 9D D3 01 3E 6A 54 3D B1 9E D3 01 .eE.....>jT=.... 1470 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1480 30 00 00 00 60 00 00 00 00 00 18 00 00 00 01 00 0...`........... 1490 44 00 00 00 18 00 01 00 05 00 00 00 00 00 05 00 D............... 14A0 5E A4 67 7C 69 E3 CA 01 38 D5 28 A9 1B BE D1 01 ^.g|i...8.(..... 14B0 38 D5 28 A9 1B BE D1 01 6E 85 DE 68 24 BE D1 01 8.(.....n..h$... 14C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 14D0 06 00 00 10 00 00 00 00 01 03 2E 00 00 00 00 00 ................ <-- File Name (".") is here! 14E0 40 00 00 00 28 00 00 00 00 00 00 00 00 00 0A 00 @...(........... 14F0 10 00 00 00 18 00 00 00 75 19 13 33 14 8D DF 11 ........u..3.... 1500 9D F9 00 50 56 C0 00 08 50 00 00 00 48 00 00 00 ...PV...P...H... 1510 01 00 40 00 00 00 02 00 00 00 00 00 00 00 00 00 ..@............. 1520 01 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@....... 1530 00 20 00 00 00 00 00 00 30 10 00 00 00 00 00 00 . ......0....... 1540 30 10 00 00 00 00 00 00 31 02 69 FD 4F 00 00 00 0.......1.i.O... 1550 90 00 00 00 48 01 00 00 00 04 18 00 00 00 71 00 ....H.........q. 1560 28 01 00 00 20 00 00 00 24 00 49 00 33 00 30 00 (... ...$.I.3.0. 1570 30 00 00 00 01 00 00 00 00 10 00 00 01 00 00 00 0............... 1580 10 00 00 00 18 01 00 00 18 01 00 00 01 00 00 00 ................ 1590 4B 0E 00 00 00 00 01 00 88 00 6E 00 01 00 00 00 K.........n..... 15A0 05 00 00 00 00 00 05 00 A8 E4 2B A4 34 E3 CA 01 ..........+.4... 15B0 04 D7 CA 0A BD 34 CF 01 04 D7 CA 0A BD 34 CF 01 .....4.......4.. 15C0 3E 6A 54 3D B1 9E D3 01 00 00 00 00 00 00 00 00 >jT=............ 15D0 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 ................ 15E0 16 01 44 00 6F 00 63 00 75 00 6D 00 65 00 6E 00 ..D.o.c.u.m.e.n. 15F0 74 00 73 00 20 00 61 00 6E 00 64 00 20 00 FC C1 t.s. .a.n.d. ... 1600 65 00 74 00 74 00 69 00 6E 00 67 00 73 00 00 00 e.t.t.i.n.g.s... 1610 00 00 00 00 00 00 00 00 FA 61 00 00 00 00 01 00 .........a...... 1620 68 00 4C 00 01 00 00 00 05 00 00 00 00 00 05 00 h.L............. 1630 12 74 F0 29 8C E3 CA 01 22 CD 2B 3D 2F B3 D2 01 .t.)....".+=/... 1640 22 CD 2B 3D 2F B3 D2 01 46 35 54 BF 3F 9D D3 01 ".+=/...F5T.?... 1650 00 10 00 00 00 00 00 00 00 04 00 00 00 00 00 00 ................ 1660 20 00 00 00 00 00 00 00 05 02 52 00 4E 00 44 00 .........R.N.D. 1670 7E 00 31 00 6D 00 20 00 01 00 00 00 00 00 00 00 ~.1.m. ......... 1680 00 00 00 00 00 00 00 00 18 00 00 00 03 00 00 00 ................ 1690 02 00 00 00 00 00 00 00 A0 00 00 00 50 00 00 00 ............P... 16A0 01 04 40 00 00 00 73 00 00 00 00 00 00 00 00 00 ..@...s......... 16B0 02 00 00 00 00 00 00 00 48 00 00 00 00 00 00 00 ........H....... 16C0 00 30 00 00 00 00 00 00 00 30 00 00 00 00 00 00 .0.......0...... 16D0 00 30 00 00 00 00 00 00 24 00 49 00 33 00 30 00 .0......$.I.3.0. 16E0 41 03 AB BB D5 00 00 00 B0 00 00 00 28 00 00 00 A...........(... 16F0 00 04 18 00 00 00 72 00 08 00 00 00 20 00 00 00 ......r..... ... 1700 24 00 49 00 33 00 30 00 07 00 00 00 00 00 00 00 $.I.3.0......... 1710 00 01 00 00 68 00 00 00 00 09 18 00 00 00 09 00 ....h........... 1720 38 00 00 00 30 00 00 00 24 00 54 00 58 00 46 00 8...0...$.T.X.F. 1730 5F 00 44 00 41 00 54 00 41 00 00 00 00 00 00 00 _.D.A.T.A....... 1740 05 00 00 00 00 00 05 00 01 00 00 00 01 00 00 00 ................ 1750 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1760 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1770 02 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 00 ................ 1780 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1790 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 17A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 17B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 17C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 17D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 17E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 17F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FC C1 ................ $MFT Record # 6: $Bitmap 1800 46 49 4C 45 30 00 03 00 B3 A1 01 F4 08 00 00 00 FILE0........... 1810 06 00 01 00 38 00 01 00 60 01 00 00 00 04 00 00 ....8...`....... 1820 00 00 00 00 00 00 00 00 04 00 00 00 06 00 00 00 ................ 1830 E0 C1 00 00 00 00 00 00 10 00 00 00 60 00 00 00 ............`... 1840 00 00 18 00 00 00 00 00 48 00 00 00 18 00 00 00 ........H....... 1850 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 1860 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 1870 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1880 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ................ 1890 00 00 00 00 00 00 00 00 30 00 00 00 68 00 00 00 ........0...h... 18A0 00 00 18 00 00 00 02 00 50 00 00 00 18 00 01 00 ........P....... 18B0 05 00 00 00 00 00 05 00 5E A4 67 7C 69 E3 CA 01 ........^.g|i... 18C0 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 18D0 5E A4 67 7C 69 E3 CA 01 00 00 1D 00 00 00 00 00 ^.g|i........... 18E0 F8 FD 1C 00 00 00 00 00 06 00 00 00 00 00 00 00 ................ 18F0 07 03 24 00 42 00 69 00 74 00 6D 00 61 00 70 00 ..$.B.i.t.m.a.p. 1900 80 00 00 00 58 00 00 00 01 00 40 00 00 00 01 00 ....X.....@..... 1910 00 00 00 00 00 00 00 00 CF 01 00 00 00 00 00 00 ................ 1920 40 00 00 00 00 00 00 00 00 00 1D 00 00 00 00 00 @............... 1930 F8 FD 1C 00 00 00 00 00 F8 FD 1C 00 00 00 00 00 ................ 1940 32 40 01 6B FD 4F 32 86 00 5F 4F 01 31 0A C4 EB 2@.k.O2.._O.1... 1950 FD 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 00 ................ 1960 20 00 00 00 20 02 00 00 80 00 00 00 48 00 00 00 ... .......H... 1970 01 00 40 00 00 00 01 00 00 00 00 00 00 00 00 00 ..@............. 1980 3F 01 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ?.......@....... 1990 00 00 14 00 00 00 00 00 58 FF 13 00 00 00 00 00 ........X....... 19A0 58 FF 13 00 00 00 00 00 32 40 01 6B FD 4F 00 00 X.......2@.k.O.. 19B0 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ................ 19C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 19D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 19E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 19F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E0 C1 ................ 1A00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1A10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1A20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1A30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1A40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1A50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1A60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1A70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1A80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1A90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1AA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1AB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1AC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1AD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1AE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1AF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1B00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1B10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1B20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1B30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1B40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1B50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1B60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1B70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1B80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1B90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1BA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1BB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1BC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1BD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1BE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1BF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E0 C1 ................ $MFT Record # 7: $Boot 1C00 46 49 4C 45 30 00 03 00 00 00 00 00 00 00 00 00 FILE0........... 1C10 07 00 01 00 38 00 01 00 B8 01 00 00 00 04 00 00 ....8........... 1C20 00 00 00 00 00 00 00 00 04 00 00 00 07 00 00 00 ................ 1C30 D7 C1 00 00 00 00 00 00 10 00 00 00 48 00 00 00 ............H... 1C40 00 00 18 00 00 00 00 00 30 00 00 00 18 00 00 00 ........0....... 1C50 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 1C60 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 1C70 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1C80 30 00 00 00 68 00 00 00 00 00 18 00 00 00 02 00 0...h........... 1C90 4C 00 00 00 18 00 01 00 05 00 00 00 00 00 05 00 L............... 1CA0 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 1CB0 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 1CC0 00 20 00 00 00 00 00 00 00 20 00 00 00 00 00 00 . ....... ...... 1CD0 06 00 00 00 00 00 00 00 05 03 24 00 42 00 6F 00 ..........$.B.o. 1CE0 6F 00 74 00 00 00 00 00 50 00 00 00 80 00 00 00 o.t.....P....... 1CF0 00 00 18 00 00 00 03 00 68 00 00 00 18 00 00 00 ........h....... 1D00 01 00 04 80 48 00 00 00 58 00 00 00 00 00 00 00 ....H...X....... 1D10 14 00 00 00 02 00 34 00 02 00 00 00 00 00 14 00 ......4......... 1D20 89 00 12 00 01 01 00 00 00 00 00 05 12 00 00 00 ................ 1D30 00 00 18 00 89 00 12 00 01 02 00 00 00 00 00 05 ................ 1D40 20 00 00 00 20 02 00 00 01 02 00 00 00 00 00 05 ... ........... 1D50 20 00 00 00 20 02 00 00 01 02 00 00 00 00 00 05 ... ........... 1D60 20 00 00 00 20 02 00 00 80 00 00 00 48 00 00 00 ... .......H... 1D70 01 00 40 00 00 00 01 00 00 00 00 00 00 00 00 00 ..@............. 1D80 01 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@....... 1D90 00 20 00 00 00 00 00 00 00 20 00 00 00 00 00 00 . ....... ...... 1DA0 00 20 00 00 00 00 00 00 11 02 00 00 00 00 00 00 . .............. 1DB0 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1DC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1DD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1DE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1DF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 D7 C1 ................ 1E00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1E10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1E20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1E30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1E40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1E50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1E60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1E70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1E80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1E90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1EA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1EB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1EC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1ED0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1EE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1EF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1F00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1F10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1F20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1F30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1F40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1F50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1F60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1F70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1F80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1F90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1FA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1FB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1FC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1FD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1FE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1FF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 D7 C1 ................ $MFT Record # 8: $BadClus 2000 46 49 4C 45 30 00 03 00 4E 10 00 02 00 00 00 00 FILE0...N....... 2010 08 00 01 00 38 00 01 00 80 01 00 00 00 04 00 00 ....8........... 2020 00 00 00 00 00 00 00 00 06 00 00 00 08 00 00 00 ................ 2030 55 00 00 00 00 00 00 00 10 00 00 00 60 00 00 00 U...........`... 2040 00 00 18 00 00 00 00 00 48 00 00 00 18 00 00 00 ........H....... 2050 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 2060 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 2070 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2080 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ................ 2090 00 00 00 00 00 00 00 00 30 00 00 00 70 00 00 00 ........0...p... 20A0 00 00 18 00 00 00 03 00 52 00 00 00 18 00 01 00 ........R....... 20B0 05 00 00 00 00 00 05 00 5E A4 67 7C 69 E3 CA 01 ........^.g|i... 20C0 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 20D0 5E A4 67 7C 69 E3 CA 01 00 00 00 00 00 00 00 00 ^.g|i........... 20E0 00 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 ................ 20F0 08 03 24 00 42 00 61 00 64 00 43 00 6C 00 75 00 ..$.B.a.d.C.l.u. 2100 73 00 00 00 00 00 00 00 80 00 00 00 18 00 00 00 s............... 2110 00 00 18 00 00 00 02 00 00 00 00 00 18 00 00 00 ................ 2120 80 00 00 00 58 00 00 00 01 04 40 00 00 00 05 00 ....X.....@..... 2130 00 00 00 00 00 00 00 00 BB FA 9F 00 00 00 00 00 ................ 2140 48 00 00 00 00 00 00 00 00 C0 AB FF 09 00 00 00 H............... 2150 00 C0 AB FF 09 00 00 00 00 00 00 00 00 00 00 00 ................ 2160 24 00 42 00 61 00 64 00 03 19 84 42 31 01 19 84 $.B.a.d....B1... 2170 42 03 A2 76 5D 00 00 00 FF FF FF FF 00 00 00 00 B..v]........... 2180 04 BC FA 9F 00 00 00 00 FF FF FF FF 00 00 00 00 ................ 2190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 21A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 21B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 21C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 21D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 21E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 21F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 00 ..............U. 2200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2250 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2260 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2270 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2280 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2290 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 22A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 22B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 22C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 22D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 22E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 22F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2310 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2330 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2350 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2370 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2390 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 23A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 23B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 23C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 23D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 23E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 23F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 00 ..............U. $MFT Record # 9: $Secure 2400 46 49 4C 45 30 00 03 00 2B 45 03 6A 14 00 00 00 FILE0...+E.j.... 2410 09 00 01 00 38 00 09 00 F0 03 00 00 00 04 00 00 ....8........... 2420 00 00 00 00 00 00 00 00 44 00 00 00 09 00 00 00 ........D....... 2430 63 00 44 00 00 00 00 00 10 00 00 00 60 00 00 00 c.D.........`... 2440 00 00 18 00 00 00 00 00 48 00 00 00 18 00 00 00 ........H....... 2450 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 2460 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 2470 06 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 ... ............ 2480 00 00 00 00 01 01 00 00 00 00 00 00 00 00 00 00 ................ 2490 00 00 00 00 00 00 00 00 20 00 00 00 98 01 00 00 ........ ....... 24A0 00 00 18 00 00 00 43 00 80 01 00 00 18 00 00 00 ......C......... 24B0 10 00 00 00 20 00 00 1A 00 00 00 00 00 00 00 00 .... ........... 24C0 09 00 00 00 00 00 09 00 00 00 44 00 45 00 56 00 ..........D.E.V. 24D0 30 00 00 00 20 00 00 1A 00 00 00 00 00 00 00 00 0... ........... 24E0 09 00 00 00 00 00 09 00 07 00 44 00 30 00 30 00 ..........D.0.0. 24F0 80 00 00 00 28 00 04 1A 00 00 00 00 00 00 00 00 ....(........... 2500 3E DC 00 00 00 00 18 00 00 00 24 00 53 00 44 00 >.........$.S.D. 2510 53 00 56 00 45 00 4E 00 80 00 00 00 28 00 04 1A S.V.E.N.....(... 2520 5F 06 00 00 00 00 00 00 89 44 01 00 00 00 8C 00 _........D...... 2530 00 00 24 00 53 00 44 00 53 00 00 00 00 00 00 00 ..$.S.D.S....... 2540 90 00 00 00 28 00 04 1A 00 00 00 00 00 00 00 00 ....(........... 2550 09 00 00 00 00 00 09 00 3F 00 24 00 53 00 44 00 ........?.$.S.D. 2560 48 00 00 00 00 00 00 00 90 00 00 00 28 00 04 1A H...........(... 2570 00 00 00 00 00 00 00 00 09 00 00 00 00 00 09 00 ................ 2580 3B 00 24 00 53 00 49 00 49 00 00 00 00 00 00 00 ;.$.S.I.I....... 2590 A0 00 00 00 28 00 04 1A 00 00 00 00 00 00 00 00 ....(........... 25A0 B6 6D 00 00 00 00 01 00 0E 00 24 00 53 00 44 00 .m........$.S.D. 25B0 48 00 00 00 00 00 00 00 A0 00 00 00 28 00 04 1A H...........(... 25C0 00 00 00 00 00 00 00 00 09 00 00 00 00 00 09 00 ................ 25D0 3D 00 24 00 53 00 49 00 49 00 00 00 00 00 00 00 =.$.S.I.I....... 25E0 B0 00 00 00 28 00 04 1A 00 00 00 00 00 00 00 00 ....(........... 25F0 09 00 00 00 00 00 09 00 40 00 24 00 53 00 63 00 ........@.$.S.c. 2600 48 00 00 00 00 00 00 00 B0 00 00 00 28 00 04 1A H...........(... 2610 00 00 00 00 00 00 00 00 09 00 00 00 00 00 09 00 ................ 2620 3C 00 24 00 53 00 49 00 49 00 00 00 00 00 00 00 <.$.S.I.I....... 2630 30 00 00 00 68 00 00 00 00 00 00 00 00 00 07 00 0...h........... 2640 50 00 00 00 18 00 01 00 05 00 00 00 00 00 05 00 P............... 2650 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 2660 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 2670 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2680 06 00 00 20 00 00 00 00 07 03 24 00 53 00 65 00 ... ......$.S.e. 2690 63 00 75 00 72 00 65 00 90 00 00 00 58 00 00 00 c.u.r.e.....X... 26A0 00 04 18 00 00 00 3F 00 38 00 00 00 20 00 00 00 ......?.8... ... 26B0 24 00 53 00 44 00 48 00 00 00 00 00 12 00 00 00 $.S.D.H......... 26C0 00 10 00 00 01 00 00 00 10 00 00 00 28 00 00 00 ............(... 26D0 28 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 (............... 26E0 18 00 00 00 03 00 00 00 0C 00 00 00 00 00 00 00 ................ 26F0 90 00 00 00 58 00 00 00 00 04 18 00 00 00 3B 00 ....X.........;. 2700 38 00 00 00 20 00 00 00 24 00 53 00 49 00 49 00 8... ...$.S.I.I. 2710 00 00 00 00 10 00 00 00 00 10 00 00 01 00 00 00 ................ 2720 10 00 00 00 28 00 00 00 28 00 00 00 01 00 00 00 ....(...(....... 2730 00 00 00 00 00 00 00 00 18 00 00 00 03 00 00 00 ................ 2740 0D 00 00 00 00 00 00 00 A0 00 00 00 50 00 00 00 ............P... 2750 01 04 40 00 00 00 3D 00 00 00 00 00 00 00 00 00 ..@...=......... 2760 27 00 00 00 00 00 00 00 48 00 00 00 00 00 00 00 '.......H....... 2770 00 80 02 00 00 00 00 00 00 80 02 00 00 00 00 00 ................ 2780 00 80 02 00 00 00 00 00 24 00 53 00 49 00 49 00 ........$.S.I.I. 2790 21 28 FB 47 00 00 00 00 B0 00 00 00 28 00 00 00 !(.G........(... 27A0 00 04 18 00 00 00 40 00 08 00 00 00 20 00 00 00 ......@..... ... 27B0 24 00 53 00 44 00 48 00 FF FB FF 7F 00 00 00 00 $.S.D.H......... 27C0 B0 00 00 00 28 00 00 00 00 04 18 00 00 00 3C 00 ....(.........<. 27D0 08 00 00 00 20 00 00 00 24 00 53 00 49 00 49 00 .... ...$.S.I.I. 27E0 FF FF FF BF 0D 00 00 00 FF FF FF FF 78 00 00 00 ............x... 27F0 07 00 00 00 00 00 00 00 FF FF FF FF 00 00 63 00 ..............c. $MFT Record #10: $UpCase 2800 46 49 4C 45 30 00 03 00 DA 07 25 FA 0E 00 00 00 FILE0.....%..... 2810 0A 00 01 00 38 00 01 00 98 01 00 00 00 04 00 00 ....8........... 2820 00 00 00 00 00 00 00 00 09 00 00 00 0A 00 00 00 ................ 2830 54 00 00 00 00 00 00 00 10 00 00 00 60 00 00 00 T...........`... 2840 00 00 18 00 00 00 00 00 48 00 00 00 18 00 00 00 ........H....... 2850 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 2860 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 2870 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2880 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ................ 2890 00 00 00 00 00 00 00 00 30 00 00 00 68 00 00 00 ........0...h... 28A0 00 00 18 00 00 00 02 00 50 00 00 00 18 00 01 00 ........P....... 28B0 05 00 00 00 00 00 05 00 5E A4 67 7C 69 E3 CA 01 ........^.g|i... 28C0 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 28D0 5E A4 67 7C 69 E3 CA 01 00 00 02 00 00 00 00 00 ^.g|i........... 28E0 00 00 02 00 00 00 00 00 06 00 00 00 00 00 00 00 ................ 28F0 07 03 24 00 55 00 70 00 43 00 61 00 73 00 65 00 ..$.U.p.C.a.s.e. 2900 80 00 00 00 48 00 00 00 01 00 40 00 00 00 07 00 ....H.....@..... 2910 00 00 00 00 00 00 00 00 1F 00 00 00 00 00 00 00 ................ 2920 40 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 @............... 2930 00 00 02 00 00 00 00 00 00 00 02 00 00 00 00 00 ................ 2940 31 20 D5 B8 41 00 00 00 80 00 00 00 48 00 00 00 1 ..A.......H... 2950 00 05 18 00 00 00 08 00 20 00 00 00 28 00 00 00 ........ ...(... 2960 24 00 49 00 6E 00 66 00 6F 00 00 00 00 00 00 00 $.I.n.f.o....... 2970 20 00 00 00 00 00 00 00 69 EA B7 DD E9 0D 45 A8 .......i.....E. 2980 05 00 00 00 01 00 00 00 28 0A 00 00 00 00 00 00 ........(....... 2990 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ................ 29A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 29B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 29C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 29D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 29E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 29F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 54 00 ..............T. 2A00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2A10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2A20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2A30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2A40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2A50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2A60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2A70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2A80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2A90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2AA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2AB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2AC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2AD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2AE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2AF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2B00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2B10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2B20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2B30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2B40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2B50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2B60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2B70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2B80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2B90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2BA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2BB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2BC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2BD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2BE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2BF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 54 00 ..............T. $MFT Record #11: $Extend 2C00 46 49 4C 45 30 00 03 00 C1 3E 53 B1 0C 00 00 00 FILE0....>S..... 2C10 0B 00 01 00 38 00 03 00 50 03 00 00 00 04 00 00 ....8...P....... 2C20 00 00 00 00 00 00 00 00 07 00 00 00 0B 00 00 00 ................ 2C30 4F 00 00 00 00 00 00 00 10 00 00 00 60 00 00 00 O...........`... 2C40 00 00 18 00 00 00 00 00 48 00 00 00 18 00 00 00 ........H....... 2C50 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 2C60 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 2C70 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2C80 00 00 00 00 01 01 00 00 00 00 00 00 00 00 00 00 ................ 2C90 00 00 00 00 00 00 00 00 30 00 00 00 68 00 00 00 ........0...h... 2CA0 00 00 00 00 00 00 03 00 50 00 00 00 18 00 01 00 ........P....... 2CB0 05 00 00 00 00 00 05 00 5E A4 67 7C 69 E3 CA 01 ........^.g|i... 2CC0 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 2CD0 5E A4 67 7C 69 E3 CA 01 00 00 00 00 00 00 00 00 ^.g|i........... 2CE0 00 00 00 00 00 00 00 00 06 00 00 10 00 00 00 00 ................ 2CF0 07 03 24 00 45 00 78 00 74 00 65 00 6E 00 64 00 ..$.E.x.t.e.n.d. 2D00 90 00 00 00 48 02 00 00 00 04 18 00 00 00 06 00 ....H........... 2D10 28 02 00 00 20 00 00 00 24 00 49 00 33 00 30 00 (... ...$.I.3.0. 2D20 30 00 00 00 01 00 00 00 00 10 00 00 01 00 00 00 0............... 2D30 10 00 00 00 18 02 00 00 18 02 00 00 00 00 00 00 ................ 2D40 19 00 00 00 00 00 01 00 60 00 4E 00 00 00 00 00 ........`.N..... 2D50 0B 00 00 00 00 00 0B 00 E6 E9 2F 7D 69 E3 CA 01 ........../}i... 2D60 E6 E9 2F 7D 69 E3 CA 01 E6 E9 2F 7D 69 E3 CA 01 ../}i...../}i... 2D70 E6 E9 2F 7D 69 E3 CA 01 00 00 00 00 00 00 00 00 ../}i........... 2D80 00 00 00 00 00 00 00 00 26 00 00 20 00 00 00 00 ........&.. .... 2D90 06 03 24 00 4F 00 62 00 6A 00 49 00 64 00 00 00 ..$.O.b.j.I.d... 2DA0 18 00 00 00 00 00 01 00 60 00 4E 00 00 00 00 00 ........`.N..... 2DB0 0B 00 00 00 00 00 0B 00 E6 E9 2F 7D 69 E3 CA 01 ........../}i... 2DC0 E6 E9 2F 7D 69 E3 CA 01 E6 E9 2F 7D 69 E3 CA 01 ../}i...../}i... 2DD0 E6 E9 2F 7D 69 E3 CA 01 00 00 00 00 00 00 00 00 ../}i........... 2DE0 00 00 00 00 00 00 00 00 26 00 00 20 00 00 00 00 ........&.. .... 2DF0 06 03 24 00 51 00 75 00 6F 00 74 00 61 00 4F 00 ..$.Q.u.o.t.a.O. 2E00 1A 00 00 00 00 00 01 00 68 00 52 00 00 00 00 00 ........h.R..... 2E10 0B 00 00 00 00 00 0B 00 E6 E9 2F 7D 69 E3 CA 01 ........../}i... 2E20 E6 E9 2F 7D 69 E3 CA 01 E6 E9 2F 7D 69 E3 CA 01 ../}i...../}i... 2E30 E6 E9 2F 7D 69 E3 CA 01 00 00 00 00 00 00 00 00 ../}i........... 2E40 00 00 00 00 00 00 00 00 26 00 00 20 00 00 00 00 ........&.. .... 2E50 08 03 24 00 52 00 65 00 70 00 61 00 72 00 73 00 ..$.R.e.p.a.r.s. 2E60 65 00 00 00 00 00 00 00 1A 0C 00 00 00 00 0B 00 e............... 2E70 68 00 58 00 00 00 00 00 0B 00 00 00 00 00 0B 00 h.X............. 2E80 BF B2 2D CE 57 EA CA 01 BF B2 2D CE 57 EA CA 01 ..-.W.....-.W... 2E90 BF B2 2D CE 57 EA CA 01 BF B2 2D CE 57 EA CA 01 ..-.W.....-.W... 2EA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2EB0 06 00 00 10 00 00 00 00 0B 00 24 00 52 00 6D 00 ..........$.R.m. 2EC0 4D 00 65 00 74 00 61 00 64 00 61 00 74 00 61 00 M.e.t.a.d.a.t.a. 2ED0 05 44 02 00 00 00 2E 00 68 00 52 00 00 00 00 00 .D......h.R..... 2EE0 0B 00 00 00 00 00 0B 00 F4 1C 04 7C 03 BC D0 01 ...........|.... 2EF0 F4 1C 04 7C 03 BC D0 01 F4 1C 04 7C 03 BC D0 01 ...|.......|.... 2F00 F4 1C 04 7C 03 BC D0 01 00 00 00 00 00 00 00 00 ...|............ 2F10 00 00 00 00 00 00 00 00 26 02 00 00 00 00 00 00 ........&....... 2F20 08 03 24 00 55 00 73 00 6E 00 4A 00 72 00 6E 00 ..$.U.s.n.J.r.n. 2F30 6C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 l............... 2F40 10 00 00 00 02 00 00 00 FF FF FF FF 00 00 00 00 ................ 2F50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2F60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2F70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2F80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2F90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2FA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2FB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2FC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2FD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2FE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2FF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4F 00 ..............O. $MFT Record #12: First of 4 Empty RESERVED Records 3000 46 49 4C 45 30 00 03 00 00 00 00 00 00 00 00 00 FILE0........... 3010 0C 00 00 00 38 00 01 00 20 01 00 00 00 04 00 00 ....8... ....... 3020 00 00 00 00 00 00 00 00 03 00 00 00 0C 00 00 00 ................ 3030 01 00 00 00 00 00 00 00 10 00 00 00 48 00 00 00 ............H... 3040 00 00 18 00 00 00 00 00 30 00 00 00 18 00 00 00 ........0....... 3050 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 3060 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 3070 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3080 50 00 00 00 80 00 00 00 00 00 18 00 00 00 02 00 P............... 3090 68 00 00 00 18 00 00 00 01 00 04 80 48 00 00 00 h...........H... 30A0 58 00 00 00 00 00 00 00 14 00 00 00 02 00 34 00 X.............4. 30B0 02 00 00 00 00 00 14 00 9F 01 12 00 01 01 00 00 ................ 30C0 00 00 00 05 12 00 00 00 00 00 18 00 9F 01 12 00 ................ 30D0 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 30E0 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 30F0 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 3100 80 00 00 00 18 00 00 00 00 00 18 00 00 00 01 00 ................ 3110 00 00 00 00 18 00 00 00 FF FF FF FF 00 00 00 00 ................ 3120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 31A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 31B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 31C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 31D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 31E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 31F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................ 3200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3250 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3260 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3270 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3280 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3290 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 32A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 32B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 32C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 32D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 32E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 32F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3310 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3330 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3350 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3370 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3390 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 33A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 33B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 33C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 33D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 33E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 33F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................ $MFT Record #13: 2 of 4 Empty RESERVED Records 3400 46 49 4C 45 30 00 03 00 00 00 00 00 00 00 00 00 FILE0........... 3410 0D 00 00 00 38 00 01 00 20 01 00 00 00 04 00 00 ....8... ....... 3420 00 00 00 00 00 00 00 00 03 00 00 00 0D 00 00 00 ................ 3430 01 00 00 00 00 00 00 00 10 00 00 00 48 00 00 00 ............H... 3440 00 00 18 00 00 00 00 00 30 00 00 00 18 00 00 00 ........0....... 3450 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 3460 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 3470 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3480 50 00 00 00 80 00 00 00 00 00 18 00 00 00 02 00 P............... 3490 68 00 00 00 18 00 00 00 01 00 04 80 48 00 00 00 h...........H... 34A0 58 00 00 00 00 00 00 00 14 00 00 00 02 00 34 00 X.............4. 34B0 02 00 00 00 00 00 14 00 9F 01 12 00 01 01 00 00 ................ 34C0 00 00 00 05 12 00 00 00 00 00 18 00 9F 01 12 00 ................ 34D0 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 34E0 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 34F0 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 3500 80 00 00 00 18 00 00 00 00 00 18 00 00 00 01 00 ................ 3510 00 00 00 00 18 00 00 00 FF FF FF FF 00 00 00 00 ................ 3520 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3530 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3540 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3550 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3560 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3570 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3580 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3590 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 35A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 35B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 35C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 35D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 35E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 35F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................ 3600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3610 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3620 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3630 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3640 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3650 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3660 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3670 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3680 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3690 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 36A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 36B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 36C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 36D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 36E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 36F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3700 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3710 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3720 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3730 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3740 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3750 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3760 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3770 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3780 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3790 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 37A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 37B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 37C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 37D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 37E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 37F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................ $MFT Record #14: 3 of 4 Empty RESERVED Records 3800 46 49 4C 45 30 00 03 00 00 00 00 00 00 00 00 00 FILE0........... 3810 0E 00 00 00 38 00 01 00 20 01 00 00 00 04 00 00 ....8... ....... 3820 00 00 00 00 00 00 00 00 03 00 00 00 0E 00 00 00 ................ 3830 01 00 00 00 00 00 00 00 10 00 00 00 48 00 00 00 ............H... 3840 00 00 18 00 00 00 00 00 30 00 00 00 18 00 00 00 ........0....... 3850 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 3860 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 3870 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3880 50 00 00 00 80 00 00 00 00 00 18 00 00 00 02 00 P............... 3890 68 00 00 00 18 00 00 00 01 00 04 80 48 00 00 00 h...........H... 38A0 58 00 00 00 00 00 00 00 14 00 00 00 02 00 34 00 X.............4. 38B0 02 00 00 00 00 00 14 00 9F 01 12 00 01 01 00 00 ................ 38C0 00 00 00 05 12 00 00 00 00 00 18 00 9F 01 12 00 ................ 38D0 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 38E0 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 38F0 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 3900 80 00 00 00 18 00 00 00 00 00 18 00 00 00 01 00 ................ 3910 00 00 00 00 18 00 00 00 FF FF FF FF 00 00 00 00 ................ 3920 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3930 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3940 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3950 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3960 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3970 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3980 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3990 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 39A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 39B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 39C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 39D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 39E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 39F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................ 3A00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3A10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3A20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3A30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3A40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3A50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3A60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3A70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3A80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3A90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3AA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3AB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3AC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3AD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3AE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3AF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3B00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3B10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3B20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3B30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3B40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3B50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3B60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3B70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3B80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3B90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3BA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3BB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3BC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3BD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3BE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3BF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................ $MFT Record #15: Last of 4 Empty RESERVED Records 3C00 46 49 4C 45 30 00 03 00 00 00 00 00 00 00 00 00 FILE0........... 3C10 0F 00 00 00 38 00 01 00 20 01 00 00 00 04 00 00 ....8... ....... 3C20 00 00 00 00 00 00 00 00 03 00 00 00 0F 00 00 00 ................ 3C30 01 00 00 00 00 00 00 00 10 00 00 00 48 00 00 00 ............H... 3C40 00 00 18 00 00 00 00 00 30 00 00 00 18 00 00 00 ........0....... 3C50 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 3C60 5E A4 67 7C 69 E3 CA 01 5E A4 67 7C 69 E3 CA 01 ^.g|i...^.g|i... 3C70 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3C80 50 00 00 00 80 00 00 00 00 00 18 00 00 00 02 00 P............... 3C90 68 00 00 00 18 00 00 00 01 00 04 80 48 00 00 00 h...........H... 3CA0 58 00 00 00 00 00 00 00 14 00 00 00 02 00 34 00 X.............4. 3CB0 02 00 00 00 00 00 14 00 9F 01 12 00 01 01 00 00 ................ 3CC0 00 00 00 05 12 00 00 00 00 00 18 00 9F 01 12 00 ................ 3CD0 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 3CE0 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 3CF0 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 3D00 80 00 00 00 18 00 00 00 00 00 18 00 00 00 01 00 ................ 3D10 00 00 00 00 18 00 00 00 FF FF FF FF 00 00 00 00 ................ 3D20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3D30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3D40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3D50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3D60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3D70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3D80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3D90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3DA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3DB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3DC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3DD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3DE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3DF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................ 3E00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3E10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3E20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3E30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3E40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3E50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3E60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3E70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3E80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3E90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3EA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3EB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3EC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3ED0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3EE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3EF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3F00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3F10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3F20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3F30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3F40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3F50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3F60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3F70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3F80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3F90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3FA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3FB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3FC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3FD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3FE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3FF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................ Technically this is MFT Record #16; but there is no record number inside this entry which indicates that, because it is a 'bad' record! 4000 42 41 41 44 00 00 00 00 00 00 00 00 00 00 00 00 BAAD............ 4010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 40A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 40B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 40C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 40D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 40E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 40F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4110 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 41A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 41B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 41C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 41D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 41E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 41F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................ 4200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4250 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4260 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4270 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4280 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4290 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 42A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 42B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 42C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 42D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 42E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 42F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4310 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4330 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4350 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4370 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4390 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 43A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 43B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 43C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 43D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 43E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 43F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................
Updated: 11 FEB 2018 (11.02.2018); 27 NOV 2018 (27.11.2018).
Last Update: 30 November 2018
(30.11.2018).
You can write to me using this: online reply form.
(It opens in a new window.)
MBR and Boot Records
Index
The Starman's Realm Index Page