Edit

FILE_STAT_INFORMATION structure (ntifs.h)

  • Article

FILE_STAT_INFORMATION contains metadata about a file.

Syntax

typedef struct _FILE_STAT_INFORMATION {
  LARGE_INTEGER FileId;
  LARGE_INTEGER CreationTime;
  LARGE_INTEGER LastAccessTime;
  LARGE_INTEGER LastWriteTime;
  LARGE_INTEGER ChangeTime;
  LARGE_INTEGER AllocationSize;
  LARGE_INTEGER EndOfFile;
  ULONG         FileAttributes;
  ULONG         ReparseTag;
  ULONG         NumberOfLinks;
  ACCESS_MASK   EffectiveAccess;
} FILE_STAT_INFORMATION, *PFILE_STAT_INFORMATION;

Members

FileId

Specifies the id of a file.

CreationTime

Specifies the creation time of a file.

LastAccessTime

Specifies the last time a file was accessed.

LastWriteTime

Specifies the last time a file was written to.

ChangeTime

Specifies the last time a file was changed.

AllocationSize

File allocation size, in bytes. Usually this value is a multiple of the sector or cluster size of the underlying physical device.

EndOfFile

Absolute new end-of-file position as a byte offset from the start of the file. EndOfFile specifies the byte offset to the end of the file. Because this value is zero-based, it actually refers to the first free byte in the file. In other words, EndOfFile is the offset to the byte immediately following the last valid byte in the file.

FileAttributes

File attributes, which can be any valid combination of the following:

Attribute Value
FILE_ATTRIBUTE_READONLY 0x00000001
FILE_ATTRIBUTE_HIDDEN 0x00000002
FILE_ATTRIBUTE_SYSTEM 0x00000004
FILE_ATTRIBUTE_DIRECTORY 0x00000010
FILE_ATTRIBUTE_ARCHIVE 0x00000020
FILE_ATTRIBUTE_NORMAL 0x00000080

ReparseTag

Reparse point tag. See About reparse points for more information.

NumberOfLinks

Specifies the number of links to the file.

EffectiveAccess

Specifies the access rights of the file.

Remarks

NtQueryInformationByName and NtQueryInformationFile return information in a FILE_STAT_INFORMATION structure when their FileInformationClass parameter is FileStatInformation.

Requirements

Requirement Value
Header ntifs.h

See also

NtQueryInformationByName

NtQueryInformationFile