FILE_BASIC_INFORMATION

typedef struct FILE_BASIC_INFORMATION {
    LARGE_INTEGER CreationTime;
    LARGE_INTEGER LastAccessTime;
    LARGE_INTEGER LastWriteTime;
    LARGE_INTEGER ChangeTime;
    ULONG FileAttributes;
} FILE_BASIC_INFORMATION, *PFILE_BASIC_INFORMATION;

Members

CreationTime

The time that the file was created.

LastAccessTime

The last time that the file was accessed.

LastWriteTime

The last time that the file was written to.

ChangeTime

The last time the file was changed.

FileAttributes

The file attributes, which can be any valid combination of the following:

FILE_ATTRIBUTE_READONLY
FILE_ATTRIBUTE_HIDDEN
FILE_ATTRIBUTE_SYSTEM
FILE_ATTRIBUTE_DIRECTORY
FILE_ATTRIBUTE_ARCHIVE
FILE_ATTRIBUTE_NORMAL
FILE_ATTRIBUTE_TEMPORARY
FILE_ATTRIBUTE_ATOMIC_WRITE
FILE_ATTRIBUTE_XACTION_WRITE
FILE_ATTRIBUTE_COMPRESSED
FILE_ATTRIBUTE_HAS_EMBEDDING

Comments

FILE_ATTRIBUTE_NORMAL can neither be set nor returned in combination with any other attributes. All other FileAttributes values override this attribute.

All dates and times are in system-time format. Absolute system time is the number of 100-nanosecond intervals since the start of 1601.

See Also

KeQuerySystemTime, ZwCreateFile, ZwQueryInformationFile, ZwSetInformationFile