Standard information attribute

The layout of the data in the standard information is as follows. Note that all offsets are relativ to the beginning of the data, not to the attribute

    Offset(length)    Description
    0(8)              File creation time
    8(8)              Last modification time
    10(8)             Last modification time for MFT record
    18(8)             Last access time
    20(4)             MS-DOS file permissions:
                      800         file is compressed
    				  020         archive bit
    				  004         system bit
    				  002         hidden bit
    				  001         read-only bit
    24(C)             unused, zero

The time values are stored in universal coordinated time, which is based on Jan 1, 1601, and in units of 100ns. It is not clear whether the value should be considered signed :-).

Where is the other information mentioned on p. 23?