NTFS Documentation: Standard Information Attribute

Interest

Basic DOS® properties of a file. This file attribute is always resident.

Layout of the stream

Offset to the beginning of the stream Length Description
0 8 File creation time
8 8 Last modification time
10 8 Last modification time for FILE record
18 8 Last access time
20 4 DOS® file permissions
24 C Always 00 00 00 00 00 00 00 00 00 00 00 00, unused ?

Time
Values are stored in universal coordinated time, like in Linux. But Windows NT® starts the clock on Jan 1, 1601 (instead of 1970) and uses units of 100 ns (instead of 1 s). It is not clear whether the value should be considered signed:-). It explains why the Linux driver would like to have 64 bits arithmetic in the kernel.

DOS® file permissions
Also called attribute in the DOS® terminology.

Bit Signification
08 00 Compressed
04 00 Symbolic link
00 20 Archive
00 04 System
00 02 Hidden
00 01 Read-only

Regis Duchesne at VIA, ECP, France
Last modified: Mon Feb 15 07:00:46 PST 1999