Dumping Inode 67594 (0x1080a) Upd. Seq. Array Off.: 48 (0x30) Upd. Seq. Array Count: 3 (0x3) Upd. Seq. Number: 675 (0x2a3) LogFile Seq. Number: 0x1b01ade3d MFT Record Seq. Numb.: 50 (0x32) Number of Hard Links: 1 (0x1) Attribute Offset: 56 (0x38) MFT Record Flags: IN_USE DIRECTORY Bytes Used: 992 (0x3e0) bytes Bytes Allocated: 1024 (0x400) bytes Next Attribute Instance: 27 (0x1b) MFT Padding: 00 00 Dumping attribute $STANDARD_INFORMATION (0x10) from mft record 67594 (0x1080a) Resident: Yes Attribute flags: 0x0000 Attribute instance: 0 (0x0) Data size: 72 (0x48) Resident flags: 0x00 File Creation Time: Sun Feb 5 14:51:02 2017 UTC File Altered Time: Thu Nov 9 23:03:41 2017 UTC MFT Changed Time: Thu Nov 9 23:03:41 2017 UTC Last Accessed Time: Thu Nov 9 23:03:41 2017 UTC File attributes: READONLY ARCHIVE REPARSE_POINT (0x00000421) Maximum versions: 0 Version number: 0 Class ID: 0 User ID: 0 (0x0) Security ID: 400 (0x190) Quota charged: 0 (0x0) Update Sequence Number: 348919400 (0x14cc1668) Dumping attribute $FILE_NAME (0x30) from mft record 67594 (0x1080a) Resident: Yes Attribute flags: 0x0000 Attribute instance: 4 (0x4) Data size: 82 (0x52) Resident flags: 0x01 Parent directory: 5 (0x5) File Creation Time: Sun Feb 5 14:51:02 2017 UTC File Altered Time: Sun Feb 5 14:51:02 2017 UTC MFT Changed Time: Sun Feb 5 14:51:02 2017 UTC Last Accessed Time: Sun Feb 5 14:51:02 2017 UTC Allocated Size: 0 (0x0) Data Size: 0 (0x0) Filename Length: 8 (0x8) File attributes: I30_INDEX (0x10000000) Namespace: Win32 & DOS Filename: 'OneDrive' Dumping attribute $OBJECT_ID (0x40) from mft record 67594 (0x1080a) Resident: Yes Attribute flags: 0x0000 Attribute instance: 5 (0x5) Data size: 16 (0x10) Resident flags: 0x00 Object ID: 2bff09e0-ebb2-11e6-8291-525400747059 Birth Volume ID: missing Birth Object ID: missing Domain ID: missing Dumping attribute $DATA (0x80) from mft record 67594 (0x1080a) Resident: Yes Attribute name: '${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.SyncRootIdentity' Attribute flags: 0x0000 Attribute instance: 26 (0x1a) Data size: 212 (0xd4) Resident flags: 0x00 Dumping attribute $INDEX_ROOT (0x90) from mft record 67594 (0x1080a) Resident: Yes Attribute name: '$I30' Attribute flags: 0x0000 Attribute instance: 8 (0x8) Data size: 56 (0x38) Resident flags: 0x00 Indexed Attr Type: DIRECTORY_I30 Collation Rule: 1 (0x1) Index Block Size: 4096 (0x1000) Clusters Per Block: 1 (0x1) Entries Offset: 16 (0x10) Index Size: 40 (0x28) Allocated Size: 40 (0x28) Index header flags: 0x01 Index entries total: 1 Dumping attribute $INDEX_ALLOCATION (0xa0) from mft record 67594 (0x1080a) Resident: No Attribute name: '$I30' Attribute flags: 0x0000 Attribute instance: 6 (0x6) Compression unit: 0 (0x0) Data size: 4096 (0x1000) Allocated size: 4096 (0x1000) Initialized size: 4096 (0x1000) Index entries total: 20 INDX blocks total: 1 Dumping attribute $BITMAP (0xb0) from mft record 67594 (0x1080a) Resident: Yes Attribute name: '$I30' Attribute flags: 0x0000 Attribute instance: 7 (0x7) Data size: 8 (0x8) Resident flags: 0x00 Dumping attribute $REPARSE_POINT (0xc0) from mft record 67594 (0x1080a) Resident: Yes Attribute flags: 0x0000 Attribute instance: 25 (0x19) Data size: 92 (0x5c) Resident flags: 0x00 End of inode reached