Marked-Up Disk Editor View of $MFT Metafile
Sample Records from Real Win OS
Disk Drives
Copyright©2018 by Daniel B. Sedory
(NOT to be reproduced in any form without Permission of the Author !)
These are the first 17 Records of a $MFT file from a Windows 2000 Professional OS (MFT#0 through MFT#16).
This is a hex editor view of the first 17 records of an $MFT file found in a Windows 2000 Professional OS install on a real disk drive. The $MFT file was quite fragmented (45 fragments!), so only the first fragment is listed here:
Physical Sectors: 95 - 181,214 Logical Sectors: 32 - 181,151
These 17 records are located at Logical Sectors 32 (0x4000) thru 65 (0x83FF), or: Logical Byte Offsets: 16,384 (0x4000) thru 33,791 (0x83FF). The Volume Boot Record (VBR) states there are 8 sectors per cluster and that $MFT begins at cluster # 4; which gives us: 8 x 4 = Logical Sector 32.
Note: For all Windows 2000 (and earlier NT versions) MFT file records, the hex byte at offset 0x04 is 0x2A (an ASCII * character). With the introduction of Windows XP (specifically, NTFS version 3.1), this byte changed to 0x30. Thus, the Update Sequence Number (USN) for each record in this sample begins at offset 0x2A. (For example, the USN for MFT Record # 0 here is: "1B 2B"; which also occurs at the end of each sector for that record.)
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F $MFT Record # 0: The $MFT File 0000 46 49 4C 45 2A 00 03 00 53 BB 15 D0 16 00 00 00 FILE*...S....... 0010 01 00 01 00 30 00 01 00 60 02 00 00 00 04 00 00 ....0...`....... 0020 00 00 00 00 00 00 00 00 06 00 1B 2B E6 00 00 00 ...........+.... 0030 10 00 00 00 60 00 00 00 00 00 18 00 00 00 00 00 ....`........... 0040 48 00 00 00 18 00 00 00 30 40 B6 C5 D2 17 BD 01 H.......0@...... 0050 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 0060 30 40 B6 C5 D2 17 BD 01 06 00 00 00 00 00 00 00 0@.............. 0070 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ................ 0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0090 30 00 00 00 68 00 00 00 00 00 18 00 00 00 03 00 0...h........... 00A0 4A 00 00 00 18 00 01 00 05 00 00 00 00 00 05 00 J............... 00B0 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 00C0 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 00D0 00 F0 9F 07 00 00 00 00 00 E4 9F 07 00 00 00 00 ................ 00E0 06 00 00 00 00 00 00 00 04 03 24 00 4D 00 46 00 ..........$.M.F. 00F0 54 00 00 00 00 00 00 00 80 00 00 00 08 01 00 00 T............... 0100 01 00 40 00 00 00 01 00 00 00 00 00 00 00 00 00 ..@............. 0110 7B 82 00 00 00 00 00 00 40 00 00 00 00 00 00 00 {.......@....... 0120 00 C0 27 08 00 00 00 00 00 C0 27 08 00 00 00 00 ..'.......'..... 0130 00 C0 27 08 00 00 00 00 12 70 58 04 21 1E 54 7E ..'......pX.!.T~ 0140 31 1D 9D 60 1A 21 1D D0 B5 21 1B D2 4A 21 18 23 1..`.!...!..J!.# 0150 FF 21 13 55 F5 21 0F C4 DD 21 0F 00 0E 21 0F F0 .!.U.!...!...!.. 0160 0D 21 0F 50 02 21 0F F0 0F 21 0B 94 F2 31 0B 4F .!.P.!...!...1.O 0170 93 E5 31 09 83 2B 1A 31 1D ED D8 E5 31 1C 30 70 ..1..+.1....1.0p 0180 1A 21 1C 50 FD 21 12 0A 07 21 0F 43 01 31 0F C0 .!.P.!...!.C.1.. 0190 A1 E5 21 0F DD FD 31 0D F5 09 1A 31 0D E8 28 F2 ..!...1....1..(. 01A0 31 0C 49 FB 0D 31 0C 43 1D F6 31 0B 8E D6 08 31 1.I..1.C..1....1 01B0 0A 81 EA 00 31 08 7B 93 FE 31 05 CB 4C 01 21 19 ....1.{..1..L.!. 01C0 1B 24 21 18 A4 DC 21 18 FC F9 31 18 F0 0B E6 31 .$!...!...1....1 01D0 17 C2 0B 1A 21 17 C3 ED 31 17 51 11 E6 21 17 0D ....!...1.Q..!.. 01E0 F7 21 17 CD EB 31 16 C1 7D 1A 21 16 62 FD 11 0C .!...1..}.!.b... 01F0 E0 21 0B 1B 04 21 01 02 ED 32 04 27 FA 22 1B 2B .!...!...2.'.".+ 0200 B0 00 00 00 58 00 00 00 01 00 40 00 00 00 05 00 ....X.....@..... 0210 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 ................ 0220 40 00 00 00 00 00 00 00 00 50 00 00 00 00 00 00 @........P...... 0230 40 41 00 00 00 00 00 00 40 41 00 00 00 00 00 00 @A......@A...... 0240 11 01 02 31 01 71 9A 07 31 01 23 DF 03 31 01 0C ...1.q..1.#..1.. 0250 B2 0E 31 01 0C 66 FF 00 FF FF FF FF 00 00 00 00 ..1..f.......... 0260 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0270 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0280 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0290 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 02A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 02B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 02C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 02D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 02E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 02F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0310 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0330 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0350 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0370 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0390 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1B 2B ...............+ $MFT Record # 1: The $MFTMirr File 0400 46 49 4C 45 2A 00 03 00 FF 0E 00 06 00 00 00 00 FILE*........... 0410 01 00 01 00 30 00 01 00 50 01 00 00 00 04 00 00 ....0...P....... 0420 00 00 00 00 00 00 00 00 04 00 10 2B 00 00 00 00 ...........+.... 0430 10 00 00 00 60 00 00 00 00 00 18 00 00 00 00 00 ....`........... 0440 48 00 00 00 18 00 00 00 30 40 B6 C5 D2 17 BD 01 H.......0@...... 0450 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 0460 30 40 B6 C5 D2 17 BD 01 06 00 00 00 00 00 00 00 0@.............. 0470 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ................ 0480 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0490 30 00 00 00 70 00 00 00 00 00 18 00 00 00 02 00 0...p........... 04A0 52 00 00 00 18 00 01 00 05 00 00 00 00 00 05 00 R............... 04B0 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 04C0 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 04D0 00 10 00 00 00 00 00 00 00 10 00 00 00 00 00 00 ................ 04E0 06 00 00 00 00 00 00 00 08 03 24 00 4D 00 46 00 ..........$.M.F. 04F0 54 00 4D 00 69 00 72 00 72 00 00 00 00 00 00 00 T.M.i.r.r....... 0500 80 00 00 00 48 00 00 00 01 00 40 00 00 00 01 00 ....H.....@..... 0510 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0520 40 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 @............... 0530 00 10 00 00 00 00 00 00 00 10 00 00 00 00 00 00 ................ 0540 31 01 8D EF 00 00 00 00 FF FF FF FF 00 00 00 00 1............... 0550 20 00 00 00 20 02 00 00 01 02 00 00 00 00 00 05 ... ........... 0560 20 00 00 00 20 02 00 00 80 00 00 00 48 00 00 00 ... .......H... 0570 01 00 40 00 00 00 01 00 00 00 00 00 00 00 00 00 ..@............. 0580 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@....... 0590 00 10 00 00 00 00 00 00 00 10 00 00 00 00 00 00 ................ 05A0 00 10 00 00 00 00 00 00 31 01 FB 29 26 00 00 00 ........1..)&... 05B0 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ................ 05C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 05D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 05E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 05F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 2B ...............+ 0600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0610 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0620 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0630 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0640 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0650 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0660 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0670 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0680 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0690 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 06A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 06B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 06C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 06D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 06E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 06F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0700 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0710 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0720 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0730 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0740 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0750 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0760 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0770 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0780 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0790 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 07A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 07B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 07C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 07D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 07E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 07F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 2B ...............+ $MFT Record # 2: The $LogFile 0800 46 49 4C 45 2A 00 03 00 45 0F 00 06 00 00 00 00 FILE*...E....... 0810 02 00 01 00 30 00 01 00 50 01 00 00 00 04 00 00 ....0...P....... 0820 00 00 00 00 00 00 00 00 04 00 10 2B 00 00 00 00 ...........+.... 0830 10 00 00 00 60 00 00 00 00 00 18 00 00 00 00 00 ....`........... 0840 48 00 00 00 18 00 00 00 30 40 B6 C5 D2 17 BD 01 H.......0@...... 0850 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 0860 30 40 B6 C5 D2 17 BD 01 06 00 00 00 00 00 00 00 0@.............. 0870 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ................ 0880 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0890 30 00 00 00 70 00 00 00 00 00 18 00 00 00 02 00 0...p........... 08A0 52 00 00 00 18 00 01 00 05 00 00 00 00 00 05 00 R............... 08B0 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 08C0 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 08D0 00 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 ................ 08E0 06 00 00 00 00 00 00 00 08 03 24 00 4C 00 6F 00 ..........$.L.o. 08F0 67 00 46 00 69 00 6C 00 65 00 00 00 00 00 00 00 g.F.i.l.e....... 0900 80 00 00 00 48 00 00 00 01 00 40 00 00 00 01 00 ....H.....@..... 0910 00 00 00 00 00 00 00 00 FF 3F 00 00 00 00 00 00 .........?...... 0920 40 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 @............... 0930 00 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 ................ 0940 32 00 40 82 AF 00 00 00 FF FF FF FF 00 00 00 00 2.@............. 0950 20 00 00 00 20 02 00 00 01 02 00 00 00 00 00 05 ... ........... 0960 20 00 00 00 20 02 00 00 80 00 00 00 48 00 00 00 ... .......H... 0970 01 00 40 00 00 00 01 00 00 00 00 00 00 00 00 00 ..@............. 0980 FF 3F 00 00 00 00 00 00 40 00 00 00 00 00 00 00 .?......@....... 0990 00 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 ................ 09A0 00 00 00 04 00 00 00 00 32 00 40 FC 29 26 00 00 ........2.@.)&.. 09B0 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ................ 09C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 09D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 09E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 09F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 2B ...............+ 0A00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0A10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0A20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0A30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0A40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0A50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0A60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0A70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0A80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0A90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0AA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0AB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0AC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0AD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0AE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0AF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0B00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0B10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0B20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0B30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0B40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0B50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0B60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0B70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0B80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0B90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0BA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0BB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0BC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0BD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0BE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0BF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 2B ...............+ $MFT Record # 3: $Volume 0C00 46 49 4C 45 2A 00 03 00 90 0C 05 68 12 00 00 00 FILE*......h.... 0C10 03 00 01 00 30 00 01 00 00 02 00 00 00 04 00 00 ....0........... 0C20 00 00 00 00 00 00 00 00 07 00 19 2B 00 00 00 00 ...........+.... 0C30 10 00 00 00 48 00 00 00 00 00 18 00 00 00 00 00 ....H........... 0C40 30 00 00 00 18 00 00 00 30 40 B6 C5 D2 17 BD 01 0.......0@...... 0C50 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 0C60 30 40 B6 C5 D2 17 BD 01 06 00 00 00 00 00 00 00 0@.............. 0C70 00 00 00 00 00 00 00 00 30 00 00 00 68 00 00 00 ........0...h... 0C80 00 00 18 00 00 00 01 00 50 00 00 00 18 00 01 00 ........P....... 0C90 05 00 00 00 00 00 05 00 30 40 B6 C5 D2 17 BD 01 ........0@...... 0CA0 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 0CB0 30 40 B6 C5 D2 17 BD 01 00 00 00 00 00 00 00 00 0@.............. 0CC0 00 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 ................ 0CD0 07 03 24 00 56 00 6F 00 6C 00 75 00 6D 00 65 00 ..$.V.o.l.u.m.e. 0CE0 40 00 00 00 28 00 00 00 00 00 00 00 00 00 06 00 @...(........... 0CF0 10 00 00 00 18 00 00 00 2A 2A E2 E5 BB 9A 8A 40 ........**.....@ 0D00 A7 29 8D A6 57 64 14 E7 50 00 00 00 80 00 00 00 .)..Wd..P....... 0D10 00 00 18 00 00 00 02 00 68 00 00 00 18 00 00 00 ........h....... 0D20 01 00 04 80 48 00 00 00 58 00 00 00 00 00 00 00 ....H...X....... 0D30 14 00 00 00 02 00 34 00 02 00 00 00 00 00 14 00 ......4......... 0D40 9F 01 12 00 01 01 00 00 00 00 00 05 12 00 00 00 ................ 0D50 00 00 18 00 9F 01 12 00 01 02 00 00 00 00 00 05 ................ 0D60 20 00 00 00 20 02 00 00 01 02 00 00 00 00 00 05 ... ........... 0D70 20 00 00 00 20 02 00 00 01 02 00 00 00 00 00 05 ... ........... 0D80 20 00 00 00 20 02 00 00 60 00 00 00 30 00 00 00 ... ...`...0... 0D90 00 00 18 00 00 00 04 00 18 00 00 00 18 00 00 00 ................ 0DA0 32 00 30 00 2D 00 31 00 5F 00 57 00 69 00 6E 00 2.0.-.1._.W.i.n. 0DB0 32 00 30 00 30 00 30 00 70 00 00 00 28 00 00 00 2.0.0.0.p...(... 0DC0 00 00 18 00 00 00 05 00 0C 00 00 00 18 00 00 00 ................ 0DD0 00 00 00 00 00 00 00 00 03 01 00 00 00 00 00 00 ................ 0DE0 80 00 00 00 18 00 00 00 00 00 18 00 00 00 03 00 ................ 0DF0 00 00 00 00 18 00 00 00 FF FF FF FF 00 00 19 2B ...............+ 0E00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0E10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0E20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0E30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0E40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0E50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0E60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0E70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0E80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0E90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0EA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0EB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0EC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0ED0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0EE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0EF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0F00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0F10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0F20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0F30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0F40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0F50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0F60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0F70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0F80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0F90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0FA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0FB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0FC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0FD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0FE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0FF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 2B ...............+ $MFT Record # 4: $AttrDef 1000 46 49 4C 45 2A 00 03 00 66 13 00 06 00 00 00 00 FILE*...f....... 1010 04 00 01 00 30 00 01 00 B8 01 00 00 00 04 00 00 ....0........... 1020 00 00 00 00 00 00 00 00 05 00 BA 5E 00 00 00 00 ...........^.... 1030 10 00 00 00 48 00 00 00 00 00 18 00 00 00 00 00 ....H........... 1040 30 00 00 00 18 00 00 00 30 40 B6 C5 D2 17 BD 01 0.......0@...... 1050 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 1060 30 40 B6 C5 D2 17 BD 01 06 00 00 00 00 00 00 00 0@.............. 1070 00 00 00 00 00 00 00 00 30 00 00 00 70 00 00 00 ........0...p... 1080 00 00 18 00 00 00 02 00 52 00 00 00 18 00 01 00 ........R....... 1090 05 00 00 00 00 00 05 00 30 40 B6 C5 D2 17 BD 01 ........0@...... 10A0 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 10B0 30 40 B6 C5 D2 17 BD 01 00 10 00 00 00 00 00 00 0@.............. 10C0 00 0A 00 00 00 00 00 00 06 00 00 00 00 00 00 00 ................ 10D0 08 03 24 00 41 00 74 00 74 00 72 00 44 00 65 00 ..$.A.t.t.r.D.e. 10E0 66 00 00 00 00 00 00 00 50 00 00 00 80 00 00 00 f.......P....... 10F0 00 00 18 00 00 00 03 00 68 00 00 00 18 00 00 00 ........h....... 1100 01 00 04 80 48 00 00 00 58 00 00 00 00 00 00 00 ....H...X....... 1110 14 00 00 00 02 00 34 00 02 00 00 00 00 00 14 00 ......4......... 1120 89 00 12 00 01 01 00 00 00 00 00 05 12 00 00 00 ................ 1130 00 00 18 00 89 00 12 00 01 02 00 00 00 00 00 05 ................ 1140 20 00 00 00 20 02 00 00 01 02 00 00 00 00 00 05 ... ........... 1150 20 00 00 00 20 02 00 00 01 02 00 00 00 00 00 05 ... ........... 1160 20 00 00 00 20 02 00 00 80 00 00 00 48 00 00 00 ... .......H... 1170 01 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 ................ 1180 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@....... 1190 00 10 00 00 00 00 00 00 00 0A 00 00 00 00 00 00 ................ 11A0 00 0A 00 00 00 00 00 00 11 01 03 00 00 00 00 00 ................ 11B0 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ................ 11C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 11D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 11E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 11F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 BA 5E ...............^ 1200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1250 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1260 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1270 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1280 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1290 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 12A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 12B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 12C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 12D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 12E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 12F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1310 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1330 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1350 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1370 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1390 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 13A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 13B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 13C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 13D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 13E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 13F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 BA 5E ...............^ $MFT Record # 5: The Root Directory (".") 1400 46 49 4C 45 2A 00 03 00 24 A3 22 42 17 00 00 00 FILE*...$."B.... 1410 05 00 01 00 30 00 03 00 50 02 00 00 00 04 00 00 ....0...P....... 1420 00 00 00 00 00 00 00 00 7E 0C CA 5E 00 00 00 00 ........~..^.... 1430 10 00 00 00 48 00 00 00 00 00 18 00 00 00 00 00 ....H........... 1440 30 00 00 00 18 00 00 00 30 40 B6 C5 D2 17 BD 01 0.......0@...... 1450 B0 C5 3C BF 99 8B CA 01 20 EB 60 31 77 87 D4 01 ..<..... .`1w... 1460 40 41 1D E5 86 87 D4 01 26 00 00 00 00 00 00 00 @A......&....... 1470 00 00 00 00 00 00 00 00 30 00 00 00 60 00 00 00 ........0...`... 1480 00 00 18 00 00 00 01 00 44 00 00 00 18 00 01 00 ........D....... 1490 05 00 00 00 00 00 05 00 30 40 B6 C5 D2 17 BD 01 ........0@...... 14A0 C0 F6 9F BD D5 92 C5 01 70 72 AB C8 F3 96 C5 01 ........pr...... 14B0 20 D4 9F 96 43 97 C5 01 00 00 00 00 00 00 00 00 ...C........... 14C0 00 00 00 00 00 00 00 00 26 00 00 10 00 00 00 00 ........&....... 14D0 01 03 2E 00 00 00 00 00 40 00 00 00 28 00 00 00 ........@...(... <-- File Name (".") is here! 14E0 00 00 00 00 00 00 B7 02 10 00 00 00 18 00 00 00 ................ 14F0 70 08 80 35 5C AD D7 11 B4 7E 00 90 27 EE 0A 2C p..5\....~..'.., 1500 50 00 00 00 68 00 00 00 00 00 18 00 00 00 02 00 P...h........... 1510 50 00 00 00 18 00 00 00 01 00 04 80 30 00 00 00 P...........0... 1520 40 00 00 00 00 00 00 00 14 00 00 00 02 00 1C 00 @............... 1530 01 00 00 00 00 03 14 00 FF 01 1F 00 01 01 00 00 ................ 1540 00 00 00 01 00 00 00 00 01 02 00 00 00 00 00 05 ................ 1550 20 00 00 00 20 02 00 00 01 02 00 00 00 00 00 05 ... ........... 1560 20 00 00 00 20 02 00 00 90 00 00 00 58 00 00 00 ... .......X... 1570 00 04 18 00 00 00 4D 09 38 00 00 00 20 00 00 00 ......M.8... ... 1580 24 00 49 00 33 00 30 00 30 00 00 00 01 00 00 00 $.I.3.0.0....... 1590 00 10 00 00 01 00 00 00 10 00 00 00 28 00 00 00 ............(... 15A0 28 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 (............... 15B0 18 00 00 00 03 00 00 00 04 00 00 00 00 00 00 00 ................ 15C0 A0 00 00 00 60 00 00 00 01 04 40 00 00 00 4F 09 ....`.....@...O. 15D0 00 00 00 00 00 00 00 00 09 00 00 00 00 00 00 00 ................ 15E0 48 00 00 00 00 00 00 00 00 A0 00 00 00 00 00 00 H............... 15F0 00 A0 00 00 00 00 00 00 00 A0 00 00 00 00 CA 5E ...............^ 1600 24 00 49 00 33 00 30 00 31 07 93 54 01 31 01 3E $.I.3.0.1..T.1.> 1610 2B 0A 31 01 C9 4A 0A 31 01 E7 2C EF 00 A7 41 80 +.1..J.1..,...A. 1620 B0 00 00 00 28 00 00 00 00 04 18 00 00 00 4E 09 ....(.........N. 1630 08 00 00 00 20 00 00 00 24 00 49 00 33 00 30 00 .... ...$.I.3.0. 1640 BF 03 00 00 00 00 00 00 FF FF FF FF 00 00 00 00 ................ 1650 31 07 93 54 01 31 01 3E 2B 0A 31 01 C9 4A 0A 31 1..T.1.>+.1..J.1 1660 01 E7 2C EF 00 A7 41 80 B0 00 00 00 28 00 00 00 ..,...A.....(... 1670 00 04 18 00 00 00 4E 09 08 00 00 00 20 00 00 00 ......N..... ... 1680 24 00 49 00 33 00 30 00 BF 03 00 00 00 00 00 00 $.I.3.0......... 1690 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ................ 16A0 00 00 00 00 00 00 00 00 0F 00 00 00 00 00 00 00 ................ 16B0 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ................ 16C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 16D0 00 00 00 00 00 00 00 00 0F 00 00 00 00 00 00 00 ................ 16E0 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ................ 16F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1700 0F 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 00 ................ 1710 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1720 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1730 0F 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 00 ................ 1740 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1750 00 00 00 00 00 00 00 00 0F 00 00 00 00 00 00 00 ................ 1760 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1770 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1780 0F 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 00 ................ 1790 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 17A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 17B0 0F 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 00 ................ 17C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 17D0 00 00 00 00 00 00 00 00 0F 00 00 00 00 00 00 00 ................ 17E0 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ................ 17F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 CA 5E ...............^ $MFT Record # 6: $Bitmap 1800 46 49 4C 45 2A 00 03 00 8B 0F 00 06 00 00 00 00 FILE*........... 1810 06 00 01 00 30 00 01 00 48 01 00 00 00 04 00 00 ....0...H....... 1820 00 00 00 00 00 00 00 00 04 00 C0 5E 00 00 00 00 ...........^.... 1830 10 00 00 00 60 00 00 00 00 00 18 00 00 00 00 00 ....`........... 1840 48 00 00 00 18 00 00 00 30 40 B6 C5 D2 17 BD 01 H.......0@...... 1850 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 1860 30 40 B6 C5 D2 17 BD 01 06 00 00 00 00 00 00 00 0@.............. 1870 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ................ 1880 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1890 30 00 00 00 68 00 00 00 00 00 18 00 00 00 02 00 0...h........... 18A0 50 00 00 00 18 00 01 00 05 00 00 00 00 00 05 00 P............... 18B0 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 18C0 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 18D0 00 60 03 00 00 00 00 00 E8 5C 03 00 00 00 00 00 .`.......\...... 18E0 06 00 00 00 00 00 00 00 07 03 24 00 42 00 69 00 ..........$.B.i. 18F0 74 00 6D 00 61 00 70 00 80 00 00 00 48 00 00 00 t.m.a.p.....H... 1900 01 00 40 00 00 00 01 00 00 00 00 00 00 00 00 00 ..@............. 1910 35 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 5.......@....... 1920 00 60 03 00 00 00 00 00 E8 5C 03 00 00 00 00 00 .`.......\...... 1930 E8 5C 03 00 00 00 00 00 31 36 82 49 07 00 00 00 .\......16.I.... 1940 FF FF FF FF 00 00 00 00 20 00 00 00 20 02 00 00 ........ ... ... 1950 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 1960 80 00 00 00 48 00 00 00 01 00 40 00 00 00 01 00 ....H.....@..... 1970 00 00 00 00 00 00 00 00 98 00 00 00 00 00 00 00 ................ 1980 40 00 00 00 00 00 00 00 00 90 09 00 00 00 00 00 @............... 1990 80 8A 09 00 00 00 00 00 80 8A 09 00 00 00 00 00 ................ 19A0 32 99 00 06 6A 26 00 00 FF FF FF FF 00 00 00 00 2...j&.......... 19B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 19C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 19D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 19E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 19F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 C0 5E ...............^ 1A00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1A10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1A20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1A30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1A40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1A50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1A60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1A70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1A80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1A90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1AA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1AB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1AC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1AD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1AE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1AF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1B00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1B10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1B20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1B30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1B40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1B50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1B60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1B70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1B80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1B90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1BA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1BB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1BC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1BD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1BE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1BF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 C0 5E ...............^ $MFT Record # 7: $Boot 1C00 46 49 4C 45 2A 00 03 00 00 00 00 00 00 00 00 00 FILE*........... 1C10 07 00 01 00 30 00 01 00 B0 01 00 00 00 04 00 00 ....0........... 1C20 00 00 00 00 00 00 00 00 04 00 B7 5E 00 00 00 00 ...........^.... 1C30 10 00 00 00 48 00 00 00 00 00 18 00 00 00 00 00 ....H........... 1C40 30 00 00 00 18 00 00 00 30 40 B6 C5 D2 17 BD 01 0.......0@...... 1C50 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 1C60 30 40 B6 C5 D2 17 BD 01 06 00 00 00 00 00 00 00 0@.............. 1C70 00 00 00 00 00 00 00 00 30 00 00 00 68 00 00 00 ........0...h... 1C80 00 00 18 00 00 00 02 00 4C 00 00 00 18 00 01 00 ........L....... 1C90 05 00 00 00 00 00 05 00 30 40 B6 C5 D2 17 BD 01 ........0@...... 1CA0 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 1CB0 30 40 B6 C5 D2 17 BD 01 00 20 00 00 00 00 00 00 0@....... ...... 1CC0 00 20 00 00 00 00 00 00 06 00 00 00 00 00 00 00 . .............. 1CD0 05 03 24 00 42 00 6F 00 6F 00 74 00 00 00 00 00 ..$.B.o.o.t..... 1CE0 50 00 00 00 80 00 00 00 00 00 18 00 00 00 03 00 P............... 1CF0 68 00 00 00 18 00 00 00 01 00 04 80 48 00 00 00 h...........H... 1D00 58 00 00 00 00 00 00 00 14 00 00 00 02 00 34 00 X.............4. 1D10 02 00 00 00 00 00 14 00 89 00 12 00 01 01 00 00 ................ 1D20 00 00 00 05 12 00 00 00 00 00 18 00 89 00 12 00 ................ 1D30 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 1D40 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 1D50 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 1D60 80 00 00 00 48 00 00 00 01 00 40 00 00 00 01 00 ....H.....@..... 1D70 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................ 1D80 40 00 00 00 00 00 00 00 00 20 00 00 00 00 00 00 @........ ...... 1D90 00 20 00 00 00 00 00 00 00 20 00 00 00 00 00 00 . ....... ...... 1DA0 11 02 00 00 00 00 00 00 FF FF FF FF 00 00 00 00 ................ 1DB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1DC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1DD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1DE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1DF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 B7 5E ...............^ 1E00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1E10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1E20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1E30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1E40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1E50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1E60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1E70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1E80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1E90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1EA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1EB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1EC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1ED0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1EE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1EF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1F00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1F10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1F20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1F30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1F40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1F50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1F60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1F70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1F80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1F90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1FA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1FB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1FC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1FD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1FE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1FF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 B7 5E ...............^ $MFT Record # 8: $BadClus 2000 46 49 4C 45 2A 00 03 00 22 10 00 06 00 00 00 00 FILE*..."....... 2010 08 00 01 00 30 00 01 00 78 01 00 00 00 04 00 00 ....0...x....... 2020 00 00 00 00 00 00 00 00 05 00 5D 0B 00 00 00 00 ..........]..... 2030 10 00 00 00 60 00 00 00 00 00 18 00 00 00 00 00 ....`........... 2040 48 00 00 00 18 00 00 00 30 40 B6 C5 D2 17 BD 01 H.......0@...... 2050 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 2060 30 40 B6 C5 D2 17 BD 01 06 00 00 00 00 00 00 00 0@.............. 2070 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ................ 2080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2090 30 00 00 00 70 00 00 00 00 00 18 00 00 00 03 00 0...p........... 20A0 52 00 00 00 18 00 01 00 05 00 00 00 00 00 05 00 R............... 20B0 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 20C0 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 20D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 20E0 06 00 00 00 00 00 00 00 08 03 24 00 42 00 61 00 ..........$.B.a. 20F0 64 00 43 00 6C 00 75 00 73 00 00 00 00 00 00 00 d.C.l.u.s....... 2100 80 00 00 00 18 00 00 00 00 00 18 00 00 00 02 00 ................ 2110 00 00 00 00 18 00 00 00 80 00 00 00 58 00 00 00 ............X... 2120 01 04 40 00 00 00 01 00 00 00 00 00 00 00 00 00 ..@............. 2130 34 E7 1A 00 00 00 00 00 48 00 00 00 00 00 00 00 4.......H....... 2140 00 50 73 AE 01 00 00 00 00 50 73 AE 01 00 00 00 .Ps......Ps..... 2150 00 00 00 00 00 00 00 00 24 00 42 00 61 00 64 00 ........$.B.a.d. 2160 03 16 7C 05 13 1F 6B 15 FF 00 FF FF 00 00 00 00 ..|...k......... 2170 FF FF FF FF 00 00 00 00 00 00 00 00 18 00 00 00 ................ 2180 80 00 00 00 50 00 00 00 01 04 40 00 00 00 01 00 ....P.....@..... 2190 00 00 00 00 00 00 00 00 F6 53 4C 00 00 00 00 00 .........SL..... 21A0 48 00 00 00 00 00 00 00 00 70 3F C5 04 00 00 00 H........p?..... 21B0 00 70 3F C5 04 00 00 00 00 00 00 00 00 00 00 00 .p?............. 21C0 24 00 42 00 61 00 64 00 03 F7 53 4C 00 00 00 00 $.B.a.d...SL.... 21D0 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ................ 21E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 21F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5D 0B ..............]. 2200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2250 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2260 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2270 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2280 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2290 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 22A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 22B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 22C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 22D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 22E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 22F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2310 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2330 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2350 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2370 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2390 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 23A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 23B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 23C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 23D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 23E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 23F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5D 0B ..............]. $MFT Record # 9: $Secure 2400 46 49 4C 45 2A 00 03 00 70 2E 2A 30 17 00 00 00 FILE*...p.*0.... 2410 09 00 01 00 30 00 09 00 D0 02 00 00 00 04 00 00 ....0........... 2420 00 00 00 00 00 00 00 00 26 00 64 0B 1E 00 00 00 ........&.d..... 2430 10 00 00 00 60 00 00 00 00 00 18 00 00 00 00 00 ....`........... 2440 48 00 00 00 18 00 00 00 30 40 B6 C5 D2 17 BD 01 H.......0@...... 2450 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 2460 30 40 B6 C5 D2 17 BD 01 06 00 00 20 00 00 00 00 0@......... .... 2470 00 00 00 00 00 00 00 00 00 00 00 00 01 01 00 00 ................ 2480 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2490 20 00 00 00 48 00 00 00 01 00 00 00 00 00 23 00 ...H.........#. 24A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 24B0 40 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 @............... 24C0 58 01 00 00 00 00 00 00 58 01 00 00 00 00 00 00 X.......X....... 24D0 31 01 C3 6E 01 00 00 00 30 00 00 00 68 00 00 00 1..n....0...h... 24E0 00 00 00 00 00 00 07 00 50 00 00 00 18 00 01 00 ........P....... 24F0 05 00 00 00 00 00 05 00 30 40 B6 C5 D2 17 BD 01 ........0@...... 2500 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 2510 30 40 B6 C5 D2 17 BD 01 00 00 00 00 00 00 00 00 0@.............. 2520 00 00 00 00 00 00 00 00 06 00 00 20 00 00 00 00 ........... .... 2530 07 03 24 00 53 00 65 00 63 00 75 00 72 00 65 00 ..$.S.e.c.u.r.e. 2540 90 00 00 00 58 00 00 00 00 04 18 00 00 00 25 00 ....X.........%. 2550 38 00 00 00 20 00 00 00 24 00 53 00 44 00 48 00 8... ...$.S.D.H. 2560 00 00 00 00 12 00 00 00 00 10 00 00 01 00 00 00 ................ 2570 10 00 00 00 28 00 00 00 28 00 00 00 01 00 00 00 ....(...(....... 2580 00 00 00 00 00 00 00 00 18 00 00 00 03 00 00 00 ................ 2590 09 00 00 00 00 00 00 00 90 00 00 00 58 00 00 00 ............X... 25A0 00 04 18 00 00 00 24 00 38 00 00 00 20 00 00 00 ......$.8... ... 25B0 24 00 53 00 49 00 49 00 00 00 00 00 10 00 00 00 $.S.I.I......... 25C0 00 10 00 00 01 00 00 00 10 00 00 00 28 00 00 00 ............(... 25D0 28 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 (............... 25E0 18 00 00 00 03 00 00 00 0B 00 00 00 00 00 00 00 ................ 25F0 A0 00 00 00 B0 00 00 00 01 04 40 00 00 00 64 0B ..........@...d. 2600 00 00 00 00 00 00 00 00 14 00 00 00 00 00 00 00 ................ 2610 48 00 00 00 00 00 00 00 00 50 01 00 00 00 00 00 H........P...... 2620 00 50 01 00 00 00 00 00 00 50 01 00 00 00 00 00 .P.......P...... 2630 24 00 53 00 49 00 49 00 31 01 D2 EF 00 31 01 40 $.S.I.I.1....1.@ 2640 F9 09 31 01 D3 7F 0B 31 01 68 8E FE 31 01 74 77 ..1....1.h..1.tw 2650 EC 21 01 0A FA 21 01 91 FA 31 01 C6 4D 05 31 01 .!...!...1..M.1. 2660 98 86 0F 31 01 73 D1 EF 31 01 6C 31 0F 21 01 22 ...1.s..1.l1.!." 2670 02 21 01 64 38 31 01 45 D9 FD 31 01 EB EF F7 31 .!.d81.E..1....1 2680 01 B3 F4 00 31 01 19 93 FA 31 01 36 3A FD 31 01 ....1....1.6:.1. 2690 CA 86 09 31 01 A4 81 F9 31 01 07 E4 0D 00 00 00 ...1....1....... 26A0 B0 00 00 00 28 00 00 00 00 04 18 00 00 00 1D 00 ....(........... 26B0 08 00 00 00 20 00 00 00 24 00 53 00 49 00 49 00 .... ...$.S.I.I. 26C0 FF FF 1F 00 00 00 00 00 FF FF FF FF 80 00 00 00 ................ 26D0 14 00 14 00 00 00 00 00 30 00 04 00 01 00 00 00 ........0....... 26E0 D7 02 00 00 BA 10 F1 D0 D7 02 00 00 D0 D2 01 00 ................ 26F0 00 00 00 00 B8 00 00 00 07 00 00 00 00 00 00 00 ................ 2700 14 00 14 00 00 00 00 00 30 00 04 00 01 00 00 00 ........0....... 2710 09 03 00 00 65 55 A4 8B 09 03 00 00 B0 11 02 00 ....eU.......... 2720 00 00 00 00 54 01 00 00 08 00 00 00 00 00 00 00 ....T........... 2730 00 00 00 00 00 00 00 00 18 00 00 00 03 00 00 00 ................ 2740 0A 00 00 00 00 00 00 00 A0 00 00 00 80 00 00 00 ................ 2750 01 04 40 00 00 00 1E 00 00 00 00 00 00 00 00 00 ..@............. 2760 0A 00 00 00 00 00 00 00 48 00 00 00 00 00 00 00 ........H....... 2770 00 B0 00 00 00 00 00 00 00 B0 00 00 00 00 00 00 ................ 2780 00 B0 00 00 00 00 00 00 24 00 53 00 49 00 49 00 ........$.S.I.I. 2790 31 01 D2 EF 00 31 01 40 F9 09 31 01 D3 7F 0B 31 1....1.@..1....1 27A0 01 68 8E FE 31 01 74 77 EC 21 01 0A FA 21 01 91 .h..1.tw.!...!.. 27B0 FA 31 01 C6 4D 05 31 01 98 86 0F 31 01 73 D1 EF .1..M.1....1.s.. 27C0 31 01 6C 31 0F 00 BC BE B0 00 00 00 28 00 00 00 1.l1........(... 27D0 00 04 18 00 00 00 1D 00 08 00 00 00 20 00 00 00 ............ ... 27E0 24 00 53 00 49 00 49 00 FF 07 00 00 00 00 00 00 $.S.I.I......... 27F0 FF FF FF FF 80 00 00 00 FF FF FF FF 00 00 64 0B ..............d. $MFT Record #10: $UpCase 2800 46 49 4C 45 2A 00 03 00 D1 0F 00 06 00 00 00 00 FILE*........... 2810 0A 00 01 00 30 00 01 00 48 01 00 00 00 04 00 00 ....0...H....... 2820 00 00 00 00 00 00 00 00 04 00 5B 0B 00 00 00 00 ..........[..... 2830 10 00 00 00 60 00 00 00 00 00 18 00 00 00 00 00 ....`........... 2840 48 00 00 00 18 00 00 00 30 40 B6 C5 D2 17 BD 01 H.......0@...... 2850 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 2860 30 40 B6 C5 D2 17 BD 01 06 00 00 00 00 00 00 00 0@.............. 2870 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ................ 2880 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2890 30 00 00 00 68 00 00 00 00 00 18 00 00 00 02 00 0...h........... 28A0 50 00 00 00 18 00 01 00 05 00 00 00 00 00 05 00 P............... 28B0 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 28C0 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 28D0 00 00 02 00 00 00 00 00 00 00 02 00 00 00 00 00 ................ 28E0 06 00 00 00 00 00 00 00 07 03 24 00 55 00 70 00 ..........$.U.p. 28F0 43 00 61 00 73 00 65 00 80 00 00 00 48 00 00 00 C.a.s.e.....H... 2900 01 00 40 00 00 00 01 00 00 00 00 00 00 00 00 00 ..@............. 2910 1F 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@....... 2920 00 00 02 00 00 00 00 00 00 00 02 00 00 00 00 00 ................ 2930 00 00 02 00 00 00 00 00 31 20 D3 EF 00 00 00 00 ........1 ...... 2940 FF FF FF FF 00 00 00 00 20 00 00 00 20 02 00 00 ........ ... ... 2950 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ... 2960 80 00 00 00 48 00 00 00 01 00 40 00 00 00 01 00 ....H.....@..... 2970 00 00 00 00 00 00 00 00 1F 00 00 00 00 00 00 00 ................ 2980 40 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 @............... 2990 00 00 02 00 00 00 00 00 00 00 02 00 00 00 00 00 ................ 29A0 31 20 9F 6A 26 00 00 00 FF FF FF FF 00 00 00 00 1 .j&........... 29B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 29C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 29D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 29E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 29F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5B 0B ..............[. 2A00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2A10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2A20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2A30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2A40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2A50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2A60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2A70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2A80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2A90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2AA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2AB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2AC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2AD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2AE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2AF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2B00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2B10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2B20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2B30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2B40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2B50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2B60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2B70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2B80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2B90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2BA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2BB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2BC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2BD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2BE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2BF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5B 0B ..............[. $MFT Record #11: $Extend 2C00 46 49 4C 45 2A 00 03 00 94 11 00 06 00 00 00 00 FILE*........... 2C10 0B 00 01 00 30 00 03 00 78 02 00 00 00 04 00 00 ....0...x....... 2C20 00 00 00 00 00 00 00 00 05 00 57 0B F7 D6 00 00 ..........W..... 2C30 10 00 00 00 60 00 00 00 00 00 18 00 00 00 00 00 ....`........... 2C40 48 00 00 00 18 00 00 00 30 40 B6 C5 D2 17 BD 01 H.......0@...... 2C50 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 2C60 30 40 B6 C5 D2 17 BD 01 06 00 00 00 00 00 00 00 0@.............. 2C70 00 00 00 00 00 00 00 00 00 00 00 00 01 01 00 00 ................ 2C80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2C90 30 00 00 00 68 00 00 00 00 00 00 00 00 00 03 00 0...h........... 2CA0 50 00 00 00 18 00 01 00 05 00 00 00 00 00 05 00 P............... 2CB0 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 2CC0 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 2CD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2CE0 06 00 00 10 00 00 00 00 07 03 24 00 45 00 78 00 ..........$.E.x. 2CF0 74 00 65 00 6E 00 64 00 90 00 00 00 78 01 00 00 t.e.n.d.....x... 2D00 00 04 18 00 00 00 04 00 58 01 00 00 20 00 00 00 ........X... ... 2D10 24 00 49 00 33 00 30 00 30 00 00 00 01 00 00 00 $.I.3.0.0....... 2D20 00 10 00 00 01 00 00 00 10 00 00 00 48 01 00 00 ............H... 2D30 48 01 00 00 00 00 00 00 F7 10 00 00 00 00 04 00 H............... 2D40 60 00 4E 00 00 00 00 00 0B 00 00 00 00 00 0B 00 `.N............. 2D50 10 E8 75 4E CA 4F C2 01 10 E8 75 4E CA 4F C2 01 ..uN.O....uN.O.. 2D60 10 E8 75 4E CA 4F C2 01 10 E8 75 4E CA 4F C2 01 ..uN.O....uN.O.. 2D70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2D80 26 00 00 20 00 00 00 00 06 03 24 00 4F 00 62 00 &.. ......$.O.b. 2D90 6A 00 49 00 64 00 00 00 A0 0F 00 00 00 00 BD 3E j.I.d..........> 2DA0 60 00 4E 00 00 00 00 00 0B 00 00 00 00 00 0B 00 `.N............. 2DB0 E0 60 74 4E CA 4F C2 01 E0 60 74 4E CA 4F C2 01 .`tN.O...`tN.O.. 2DC0 E0 60 74 4E CA 4F C2 01 E0 60 74 4E CA 4F C2 01 .`tN.O...`tN.O.. 2DD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2DE0 26 00 00 20 00 00 00 00 06 03 24 00 51 00 75 00 &.. ......$.Q.u. 2DF0 6F 00 74 00 61 00 00 00 42 18 00 00 00 00 57 0B o.t.a...B.....W. 2E00 68 00 52 00 00 00 00 00 0B 00 00 00 00 00 0B 00 h.R............. 2E10 40 6F 77 4E CA 4F C2 01 40 6F 77 4E CA 4F C2 01 @owN.O..@owN.O.. 2E20 40 6F 77 4E CA 4F C2 01 40 DA 9D F5 6F 87 D4 01 @owN.O..@...o... 2E30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2E40 26 00 00 20 00 00 00 00 08 03 24 00 52 00 65 00 &.. ......$.R.e. 2E50 70 00 61 00 72 00 73 00 65 00 00 00 00 00 00 00 p.a.r.s.e....... 2E60 00 00 00 00 00 00 00 00 10 00 00 00 02 00 00 00 ................ 2E70 FF FF FF FF 00 00 00 00 40 6F 77 4E CA 4F C2 01 ........@owN.O.. 2E80 40 6F 77 4E CA 4F C2 01 40 6F 77 4E CA 4F C2 01 @owN.O..@owN.O.. 2E90 40 6F 77 4E CA 4F C2 01 00 00 00 00 00 00 00 00 @owN.O.......... 2EA0 00 00 00 00 00 00 00 00 26 00 00 20 00 00 00 00 ........&.. .... 2EB0 08 03 24 00 52 00 65 00 70 00 61 00 72 00 73 00 ..$.R.e.p.a.r.s. 2EC0 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e............... 2ED0 10 00 00 00 02 00 00 00 FF FF FF FF 00 00 00 00 ................ 2EE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2EF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2F00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2F10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2F20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2F30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2F40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2F50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2F60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2F70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2F80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2F90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2FA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2FB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2FC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2FD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2FE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2FF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 57 0B ..............W. $MFT Record #12: First of 4 Empty RESERVED Records 3000 46 49 4C 45 2A 00 03 00 00 00 00 00 00 00 00 00 FILE*........... 3010 0C 00 00 00 30 00 01 00 18 01 00 00 00 04 00 00 ....0........... 3020 00 00 00 00 00 00 00 00 03 00 01 00 00 00 00 00 ................ 3030 10 00 00 00 48 00 00 00 00 00 18 00 00 00 00 00 ....H........... 3040 30 00 00 00 18 00 00 00 30 40 B6 C5 D2 17 BD 01 0.......0@...... 3050 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 3060 30 40 B6 C5 D2 17 BD 01 06 00 00 00 00 00 00 00 0@.............. 3070 00 00 00 00 00 00 00 00 50 00 00 00 80 00 00 00 ........P....... 3080 00 00 18 00 00 00 02 00 68 00 00 00 18 00 00 00 ........h....... 3090 01 00 04 80 48 00 00 00 58 00 00 00 00 00 00 00 ....H...X....... 30A0 14 00 00 00 02 00 34 00 02 00 00 00 00 00 14 00 ......4......... 30B0 9F 01 12 00 01 01 00 00 00 00 00 05 12 00 00 00 ................ 30C0 00 00 18 00 9F 01 12 00 01 02 00 00 00 00 00 05 ................ 30D0 20 00 00 00 20 02 00 00 01 02 00 00 00 00 00 05 ... ........... 30E0 20 00 00 00 20 02 00 00 01 02 00 00 00 00 00 05 ... ........... 30F0 20 00 00 00 20 02 00 00 80 00 00 00 18 00 00 00 ... ........... 3100 00 00 18 00 00 00 01 00 00 00 00 00 18 00 00 00 ................ 3110 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 31A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 31B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 31C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 31D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 31E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 31F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................ 3200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3250 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3260 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3270 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3280 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3290 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 32A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 32B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 32C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 32D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 32E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 32F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3310 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3330 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3350 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3370 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3390 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 33A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 33B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 33C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 33D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 33E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 33F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................ $MFT Record #13: 2 of 4 Empty RESERVED Records 3400 46 49 4C 45 2A 00 03 00 00 00 00 00 00 00 00 00 FILE*........... 3410 0D 00 00 00 30 00 01 00 18 01 00 00 00 04 00 00 ....0........... 3420 00 00 00 00 00 00 00 00 03 00 01 00 00 00 00 00 ................ 3430 10 00 00 00 48 00 00 00 00 00 18 00 00 00 00 00 ....H........... 3440 30 00 00 00 18 00 00 00 30 40 B6 C5 D2 17 BD 01 0.......0@...... 3450 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 3460 30 40 B6 C5 D2 17 BD 01 06 00 00 00 00 00 00 00 0@.............. 3470 00 00 00 00 00 00 00 00 50 00 00 00 80 00 00 00 ........P....... 3480 00 00 18 00 00 00 02 00 68 00 00 00 18 00 00 00 ........h....... 3490 01 00 04 80 48 00 00 00 58 00 00 00 00 00 00 00 ....H...X....... 34A0 14 00 00 00 02 00 34 00 02 00 00 00 00 00 14 00 ......4......... 34B0 9F 01 12 00 01 01 00 00 00 00 00 05 12 00 00 00 ................ 34C0 00 00 18 00 9F 01 12 00 01 02 00 00 00 00 00 05 ................ 34D0 20 00 00 00 20 02 00 00 01 02 00 00 00 00 00 05 ... ........... 34E0 20 00 00 00 20 02 00 00 01 02 00 00 00 00 00 05 ... ........... 34F0 20 00 00 00 20 02 00 00 80 00 00 00 18 00 00 00 ... ........... 3500 00 00 18 00 00 00 01 00 00 00 00 00 18 00 00 00 ................ 3510 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3520 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3530 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3540 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3550 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3560 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3570 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3580 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3590 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 35A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 35B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 35C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 35D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 35E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 35F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................ 3600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3610 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3620 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3630 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3640 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3650 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3660 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3670 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3680 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3690 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 36A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 36B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 36C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 36D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 36E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 36F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3700 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3710 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3720 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3730 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3740 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3750 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3760 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3770 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3780 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3790 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 37A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 37B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 37C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 37D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 37E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 37F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................ $MFT Record #14: 3 of 4 Empty RESERVED Records 3800 46 49 4C 45 2A 00 03 00 00 00 00 00 00 00 00 00 FILE*........... 3810 0E 00 00 00 30 00 01 00 18 01 00 00 00 04 00 00 ....0........... 3820 00 00 00 00 00 00 00 00 03 00 01 00 00 00 00 00 ................ 3830 10 00 00 00 48 00 00 00 00 00 18 00 00 00 00 00 ....H........... 3840 30 00 00 00 18 00 00 00 30 40 B6 C5 D2 17 BD 01 0.......0@...... 3850 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 3860 30 40 B6 C5 D2 17 BD 01 06 00 00 00 00 00 00 00 0@.............. 3870 00 00 00 00 00 00 00 00 50 00 00 00 80 00 00 00 ........P....... 3880 00 00 18 00 00 00 02 00 68 00 00 00 18 00 00 00 ........h....... 3890 01 00 04 80 48 00 00 00 58 00 00 00 00 00 00 00 ....H...X....... 38A0 14 00 00 00 02 00 34 00 02 00 00 00 00 00 14 00 ......4......... 38B0 9F 01 12 00 01 01 00 00 00 00 00 05 12 00 00 00 ................ 38C0 00 00 18 00 9F 01 12 00 01 02 00 00 00 00 00 05 ................ 38D0 20 00 00 00 20 02 00 00 01 02 00 00 00 00 00 05 ... ........... 38E0 20 00 00 00 20 02 00 00 01 02 00 00 00 00 00 05 ... ........... 38F0 20 00 00 00 20 02 00 00 80 00 00 00 18 00 00 00 ... ........... 3900 00 00 18 00 00 00 01 00 00 00 00 00 18 00 00 00 ................ 3910 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3920 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3930 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3940 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3950 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3960 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3970 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3980 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3990 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 39A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 39B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 39C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 39D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 39E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 39F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................ 3A00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3A10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3A20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3A30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3A40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3A50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3A60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3A70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3A80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3A90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3AA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3AB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3AC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3AD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3AE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3AF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3B00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3B10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3B20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3B30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3B40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3B50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3B60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3B70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3B80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3B90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3BA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3BB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3BC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3BD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3BE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3BF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................ $MFT Record #15: Last of 4 Empty RESERVED Records 3C00 46 49 4C 45 2A 00 03 00 00 00 00 00 00 00 00 00 FILE*........... 3C10 0F 00 00 00 30 00 01 00 18 01 00 00 00 04 00 00 ....0........... 3C20 00 00 00 00 00 00 00 00 03 00 01 00 00 00 00 00 ................ 3C30 10 00 00 00 48 00 00 00 00 00 18 00 00 00 00 00 ....H........... 3C40 30 00 00 00 18 00 00 00 30 40 B6 C5 D2 17 BD 01 0.......0@...... 3C50 30 40 B6 C5 D2 17 BD 01 30 40 B6 C5 D2 17 BD 01 0@......0@...... 3C60 30 40 B6 C5 D2 17 BD 01 06 00 00 00 00 00 00 00 0@.............. 3C70 00 00 00 00 00 00 00 00 50 00 00 00 80 00 00 00 ........P....... 3C80 00 00 18 00 00 00 02 00 68 00 00 00 18 00 00 00 ........h....... 3C90 01 00 04 80 48 00 00 00 58 00 00 00 00 00 00 00 ....H...X....... 3CA0 14 00 00 00 02 00 34 00 02 00 00 00 00 00 14 00 ......4......... 3CB0 9F 01 12 00 01 01 00 00 00 00 00 05 12 00 00 00 ................ 3CC0 00 00 18 00 9F 01 12 00 01 02 00 00 00 00 00 05 ................ 3CD0 20 00 00 00 20 02 00 00 01 02 00 00 00 00 00 05 ... ........... 3CE0 20 00 00 00 20 02 00 00 01 02 00 00 00 00 00 05 ... ........... 3CF0 20 00 00 00 20 02 00 00 80 00 00 00 18 00 00 00 ... ........... 3D00 00 00 18 00 00 00 01 00 00 00 00 00 18 00 00 00 ................ 3D10 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3D20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3D30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3D40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3D50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3D60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3D70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3D80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3D90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3DA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3DB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3DC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3DD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3DE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3DF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................ 3E00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3E10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3E20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3E30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3E40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3E50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3E60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3E70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3E80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3E90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3EA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3EB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3EC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3ED0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3EE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3EF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3F00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3F10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3F20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3F30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3F40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3F50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3F60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3F70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3F80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3F90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3FA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3FB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3FC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3FD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3FE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 3FF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................ MFT Record #16; A Normal Empty Record: 4000 46 49 4C 45 2A 00 03 00 00 00 00 00 00 00 00 00 FILE*........... 4010 00 00 00 00 30 00 00 00 38 00 00 00 00 04 00 00 ....0...8....... 4020 00 00 00 00 00 00 00 00 00 00 05 00 00 00 00 00 ................ 4030 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 40A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 40B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 40C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 40D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 40E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 40F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4110 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 41A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 41B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 41C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 41D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 41E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 41F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 00 ................ 4200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4250 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4260 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4270 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4280 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4290 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 42A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 42B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 42C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 42D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 42E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 42F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4310 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4330 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4350 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4370 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 4390 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 43A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 43B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 43C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 43D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 43E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 43F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 00 ................
Last Update: 30 November 2018 (30.11.2018).
You can write to me using this: online reply form.
(It opens in a new window.)
MBR and Boot Records
Index
The Starman's Realm Index Page