Type -- Attribute -- Name -- Purpose
0x10 16....$STANDARD_INFORMATION --- General information --- flags, MAC times, owner, and security id.
0x20 32....$ATTRIBUTE_LIST --- Pointers to other attributes and a list of nonresident attributes.
0x30 48....$FILE_NAME --- File name --- (Unicode) and outdated MAC times
0x40 64....$VOLUME_VERSION --- Volume information --- NTFS v1.2 only and Windows NT, no longer used
0x40 64....$OBJECT_ID --- 16B unique identifier --- for file or directory (NTFS 3.0+; Windows 2000+)
0x50 80....$SECURITY_DESCRIPTOR --- File's access control list and security properties
0x60 96....$VOLUME_NAME --- Volume name
0x70 112...$VOLUME_INFORMATION --- File system version and other information
0x80 128...$DATA --- File contents
0x90 144...$INDEX_ROOT --- Root node of an index tree
0xA0 160...$INDEX_ALLOCATION --- Nodes of an index tree --- with a root in $INDEX_ROOT
0xB0 176...$BITMAP --- Bitmap --- for the $MFT file and for indexes (directories)
0xC0 192...$SYMBOLIC_LINK --- Soft link information --- (NTFS v1.2 only and Windows NT)
0xC0 192...$REPARSE_POINT --- Data about a reparse point --- used for a soft link (NTFS 3.0+; Windows 2000+)
0xD0 208...$EA_INFORMATION --- Used for backward compatibility with OS/2 applications (HPFS)
0xE0 224...$EA --- Used for backward compatibility with OS/2 applications (HPFS)
0x100 256..$LOGGED_UTILITY_STREAM --- Keys and other information about encrypted attributes (NTFS 3.0+; Windows 2000+)