There may be a way to hack the permissions using a disc editor (DMDE). I confess that I don't understand most of the following, though.
For example, this is the $MFT record for the empty "ESD" directory on one of my drives:
Code:
LBA:311051032 vol.sec:311048984 Clus:38881123 sec:0 (MFT 901008)
[-] File # 901008 (20)
magic ("FILE") FILE
fixups offset 0x 30
fixups count 3
LSNlo 0x 034EA02C
LSNHi 0x 0000003C
seq. number 20
hlink number 1
attrs offset 38
flags 3
used size 336
record size 1024
basefileref 0
[0x24] 0x 0
basefileref seq. 0
next attribute # 3
[0x2A] 0x 0
file # 901008
fixup 0x 04EA
[-] #0 $STANDARD_INFORMATION
Attr. type 0x 10
Attr. length 0x60
Non-resident 0
Attrname len 0
Attrname ofs 0x0
Flags 0x 0000 -- --
Attr. number 0
Data Size 72
Data Offset 0x 18
created 2020-10-21 03:21:02.061
modified 2020-10-21 04:01:33.772
changed 2020-10-21 04:01:33.772
accessed 2024-03-19 23:42:07.097
attrs -------------i-- ----------------
Max versions 0
Version 0
Class Id 0 <-----------------------
Owner Id 0 <-----------------------
Security Id 11736 <-----------------------
Quota Charged 0
USN 29677933368
[-] #2 $FILE_NAME
Attr. type 0x 30
Attr. length 0x60
Non-resident 0
Attrname len 0
Attrname ofs 0x0
Flags 0x 0000 -- --
Attr. number 2
Data Size 72
Data Offset 0x 18
directory 5 (5 )
created 2020-10-21 03:21:02.061
modified 2020-10-21 03:21:02.061
changed 2020-10-21 03:21:02.061
accessed 2020-10-21 03:21:02.061
allocated 0
size 0
attrs -------------i-- ------------D---
reparse 0
name len 3
posix 3
name ESD
[-] #1 $INDEX_ROOT
Attr. type 0x 90
Attr. length 0x50
Non-resident 0
Attrname len 4
Attrname ofs 0x18
Flags 0x 0000 -- --
Attr. number 1
Data Size 48
Data Offset 0x 20
Attr. name $I30
0 (0 ) END MARK
Hex
0000: 00 00 00 00 00 00 00 00 10 00 00 00 02 00 00 00 ................
FFFFFFFFh End Mark
FAQ
Search
Login
Register
HDDGURU FILES
