{"id":934,"date":"2012-05-04T17:09:22","date_gmt":"2012-05-04T17:09:22","guid":{"rendered":"http:\/\/www.hexacorn.com\/blog\/?p=934"},"modified":"2012-05-04T17:16:25","modified_gmt":"2012-05-04T17:16:25","slug":"sector-size-and-mft-file-record-size","status":"publish","type":"post","link":"https:\/\/www.hexacorn.com\/blog\/2012\/05\/04\/sector-size-and-mft-file-record-size\/","title":{"rendered":"Sector size and MFT FILE Record size"},"content":{"rendered":"<p>This is a quick post to clarify a very common misconception about sizes of a sector and a single MFT FILE record on NTFS file system.<\/p>\n<p>The most common values associated with these 2 parameters are:<\/p>\n<ul>\n<li>512 bytes &#8211; for a sector<\/li>\n<li>1024 bytes &#8211; for a single MFT FILE record<\/li>\n<\/ul>\n<p>It turns out that new large drives are often seen by OS as having a sector size that is larger than 512 bytes and as a result, the MFT FILE record size is often also larger. This is not a big issue and many forensic tools handle it properly, but seeing many people explicite calling out these &#8216;hard wired&#8217; values, I thought I will make an attempt to clarify it a bit.<\/p>\n<p>A side effect of this is that $MFT size may quickly grow to many GiBs.<\/p>\n<p>I do not work with hardcore file carving on daily basis, so I am pretty sure that someone who does could (and I hope will) offer a more in-depth explanation of what&#8217;s going on under the hood (e.g. whether the 4096 is a virtual sector made out of 8 &#8216;old-school&#8217; physical sectors that are 512 bytes, etc.).<\/p>\n<p>On a practical level, one can confirm the size of the sector and cluster as well as MFT FILE record size using e.g. fsutil tool in Windows.<\/p>\n<p>For a drive with a 512-bytes long sector, you may get a result like this:<\/p>\n<pre style=\"padding-left: 30px;\">fsutil fsinfo ntfsinfo c:<\/pre>\n<pre style=\"padding-left: 30px;\">[...]<\/pre>\n<pre style=\"padding-left: 30px;\">Bytes Per Sector\u00a0 :\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 512  &lt;- sector size\r\nBytes Per Cluster :\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 4096 &lt;- cluster size = 8 sectors\r\nBytes Per FileRecord Segment\u00a0\u00a0\u00a0 : 1024 &lt;- MFT FILE Record size = 2 sectors<\/pre>\n<pre style=\"padding-left: 30px;\">[...]<\/pre>\n<p>For a drive with 4096 bytes long sectors, the fsutil can give the following result:<\/p>\n<pre style=\"padding-left: 30px;\">fsutil fsinfo ntfsinfo g:<\/pre>\n<pre style=\"padding-left: 30px;\">[...]<\/pre>\n<pre style=\"padding-left: 30px;\">Bytes Per Sector\u00a0 :\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 4096 &lt;- sector size\r\nBytes Per Cluster :\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 4096 &lt;- cluster size = 1 sector\r\nBytes Per FileRecord Segment\u00a0\u00a0\u00a0 : 4096 &lt;- MFT FILE Record size \r\n                                          = 1 sector = 1 cluster<\/pre>\n<pre style=\"padding-left: 30px;\">[...]<\/pre>\n<p>&nbsp;<\/p>\n<p>The values for a logical volume can be read from BPB (BIOS Parameter Block)\u00a0 &#8211; a decent explanation on encoding used to preserve the value of FILE record size can be found <a href=\"http:\/\/bootmaster.filerecovery.biz\/appnote3.html\">here<\/a>.<\/p>\n<p>This is an example of a FILE record on such a large drive:<\/p>\n<pre>000000000 46 49 4C 45 30 00 09 00 27 25 00 02 00 00 00 00 FILE0...'%......\r\n000000010 01 00 01 00 48 00 01 00 68 01 00 00 00 10 00 00 ....H...h.......\r\n000000020 00 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 ................\r\n000000030 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000040 00 00 00 00 00 00 00 00 10 00 00 00 60 00 00 00 ............`...\r\n000000050 00 00 18 00 00 00 00 00 48 00 00 00 18 00 00 00 ........H.......\r\n000000060 B9 78 C5 A0 47 51 CB 01 B9 78 C5 A0 47 51 CB 01 .x..GQ...x..GQ..\r\n000000070 B9 78 C5 A0 47 51 CB 01 B9 78 C5 A0 47 51 CB 01 .x..GQ...x..GQ..\r\n000000080 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000090 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ................\r\n0000000A0 00 00 00 00 00 00 00 00 30 00 00 00 70 00 00 00 ........0...p...\r\n0000000B0 00 00 18 00 00 00 02 00 52 00 00 00 18 00 01 00 ........R.......\r\n0000000C0 05 00 00 00 00 00 05 00 B9 78 C5 A0 47 51 CB 01 .........x..GQ..\r\n0000000D0 B9 78 C5 A0 47 51 CB 01 B9 78 C5 A0 47 51 CB 01 .x..GQ...x..GQ..\r\n0000000E0 B9 78 C5 A0 47 51 CB 01 00 40 00 00 00 00 00 00 .x..GQ...@......\r\n0000000F0 00 40 00 00 00 00 00 00 06 00 00 00 00 00 00 00 .@..............\r\n000000100 08 03 24 00 4D 00 46 00 54 00 4D 00 69 00 72 00 ..$.M.F.T.M.i.r.\r\n000000110 72 00 00 00 00 00 00 00 80 00 00 00 48 00 00 00 r...........H...\r\n000000120 01 00 40 00 00 00 01 00 00 00 00 00 00 00 00 00 ..@.............\r\n000000130 03 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 ........@.......\r\n000000140 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 .@.......@......\r\n000000150 00 40 00 00 00 00 00 00 11 04 02 00 00 00 00 00 .@..............\r\n000000160 FF FF FF FF 00 00 00 00 20 00 00 00 20 02 00 00 ........ ... ...\r\n000000170 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 ........ ... ...\r\n000000180 80 00 00 00 48 00 00 00 01 00 40 00 00 00 01 00 ....H.....@.....\r\n000000190 00 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 ................\r\n0000001A0 40 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 @........@......\r\n0000001B0 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 .@.......@......\r\n0000001C0 11 04 02 00 00 00 00 00 FF FF FF FF 00 00 00 00 ................\r\n0000001D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000001E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000001F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 ................\r\n000000200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000230 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000250 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000260 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000270 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000280 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000290 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000002A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000002B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000002C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000002D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000002E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000002F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000310 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000330 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000350 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000370 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000390 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000003A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000003B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000003C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000003D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000003E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000003F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 ................\r\n000000400 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000410 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000420 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000430 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000440 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000450 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000460 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000470 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000480 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000490 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000004A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000004B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000004C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000004D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000004E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000004F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000500 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000510 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000520 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000530 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000540 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000550 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000560 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000570 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000580 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000590 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000005A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000005B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000005C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000005D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000005E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000005F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 ................\r\n000000600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000610 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000620 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000630 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000640 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000650 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000660 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000670 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000680 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000690 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000006A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000006B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000006C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000006D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000006E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000006F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000700 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000710 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000720 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000730 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000740 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000750 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000760 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000770 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000780 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000790 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000007A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000007B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000007C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000007D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000007E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000007F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 ................\r\n000000800 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000810 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000820 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000830 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000840 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000850 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000860 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000870 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000880 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000890 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000008A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000008B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000008C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000008D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000008E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000008F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000900 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000910 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000920 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000930 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000940 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000950 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000960 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000970 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000980 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000990 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000009A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000009B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000009C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000009D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000009E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n0000009F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 ................\r\n000000A00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000A10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000A20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000A30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000A40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000A50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000A60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000A70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000A80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000A90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000AA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000AB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000AC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000AD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000AE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000AF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000B00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000B10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000B20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000B30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000B40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000B50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000B60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000B70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000B80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000B90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000BA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000BB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000BC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000BD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000BE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000BF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 ................\r\n000000C00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000C10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000C20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000C30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000C40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000C50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000C60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000C70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000C80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000C90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000CA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000CB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000CC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000CD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000CE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000CF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000D00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000D10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000D20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000D30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000D40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000D50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000D60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000D70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000D80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000D90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000DA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000DB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000DC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000DD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000DE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000DF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 ................\r\n000000E00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000E10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000E20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000E30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000E40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000E50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000E60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000E70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000E80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000E90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000EA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000EB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000EC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000ED0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000EE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000EF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000F00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000F10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000F20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000F30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000F40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000F50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000F60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000F70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000F80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000F90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000FA0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000FB0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000FC0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000FD0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000FE0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\r\n000000FF0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 ................<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>This is a quick post to clarify a very common misconception about sizes of a sector and a single MFT FILE record on NTFS file system. The most common values associated with these 2 parameters are: 512 bytes &#8211; for &hellip; <a href=\"https:\/\/www.hexacorn.com\/blog\/2012\/05\/04\/sector-size-and-mft-file-record-size\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[19],"tags":[],"_links":{"self":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/934"}],"collection":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/comments?post=934"}],"version-history":[{"count":8,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/934\/revisions"}],"predecessor-version":[{"id":940,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/934\/revisions\/940"}],"wp:attachment":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/media?parent=934"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/categories?post=934"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/tags?post=934"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}