#ifndef _NTIOAPI_H

//
// NtQueryInformationFile/NtSetInformationFile types
//

typedef enum _FILE_INFORMATION_CLASS
{
    FileDirectoryInformation = 1,                   // q: FILE_DIRECTORY_INFORMATION (requires FILE_LIST_DIRECTORY) (NtQueryDirectoryFile[Ex])
    FileFullDirectoryInformation,                   // q: FILE_FULL_DIR_INFORMATION (requires FILE_LIST_DIRECTORY) (NtQueryDirectoryFile[Ex])
    FileBothDirectoryInformation,                   // q: FILE_BOTH_DIR_INFORMATION (requires FILE_LIST_DIRECTORY) (NtQueryDirectoryFile[Ex])
    FileBasicInformation,                           // qs: FILE_BASIC_INFORMATION (q: requires FILE_READ_ATTRIBUTES; s: requires FILE_WRITE_ATTRIBUTES)
    FileStandardInformation,                        // q: FILE_STANDARD_INFORMATION, FILE_STANDARD_INFORMATION_EX
    FileInternalInformation,                        // q: FILE_INTERNAL_INFORMATION
    FileEaInformation,                              // q: FILE_EA_INFORMATION (requires FILE_READ_EA)
    FileAccessInformation,                          // q: FILE_ACCESS_INFORMATION
    FileNameInformation,                            // q: FILE_NAME_INFORMATION
    FileRenameInformation,                          // s: FILE_RENAME_INFORMATION (requires DELETE) // 10
    FileLinkInformation,                            // s: FILE_LINK_INFORMATION
    FileNamesInformation,                           // q: FILE_NAMES_INFORMATION (requires FILE_LIST_DIRECTORY) (NtQueryDirectoryFile[Ex])
    FileDispositionInformation,                     // s: FILE_DISPOSITION_INFORMATION (requires DELETE)
    FilePositionInformation,                        // qs: FILE_POSITION_INFORMATION (q: requires FILE_READ_ATTRIBUTES; s: requires FILE_WRITE_ATTRIBUTES)
    FileFullEaInformation,                          // q: FILE_FULL_EA_INFORMATION (requires FILE_READ_EA)
    FileModeInformation,                            // qs: FILE_MODE_INFORMATION (q: requires FILE_READ_ATTRIBUTES; s: requires FILE_WRITE_ATTRIBUTES)
    FileAlignmentInformation,                       // q: FILE_ALIGNMENT_INFORMATION
    FileAllInformation,                             // q: FILE_ALL_INFORMATION
    FileAllocationInformation,                      // s: FILE_ALLOCATION_INFORMATION (requires FILE_WRITE_DATA)
    FileEndOfFileInformation,                       // s: FILE_END_OF_FILE_INFORMATION (requires FILE_WRITE_DATA) // 20
    FileAlternateNameInformation,                   // q: FILE_NAME_INFORMATION
    FileStreamInformation,                          // q: FILE_STREAM_INFORMATION
    FilePipeInformation,                            // qs: FILE_PIPE_INFORMATION (q: requires FILE_READ_ATTRIBUTES; s: requires FILE_WRITE_ATTRIBUTES)
    FilePipeLocalInformation,                       // q: FILE_PIPE_LOCAL_INFORMATION
    FilePipeRemoteInformation,                      // qs: FILE_PIPE_REMOTE_INFORMATION (q: requires FILE_READ_ATTRIBUTES; s: requires FILE_WRITE_ATTRIBUTES)
    FileMailslotQueryInformation,                   // q: FILE_MAILSLOT_QUERY_INFORMATION
    FileMailslotSetInformation,                     // s: FILE_MAILSLOT_SET_INFORMATION
    FileCompressionInformation,                     // q: FILE_COMPRESSION_INFORMATION
    FileObjectIdInformation,                        // q: FILE_OBJECTID_INFORMATION (requires FILE_LIST_DIRECTORY) (NtQueryDirectoryFile[Ex])
    FileCompletionInformation,                      // s: FILE_COMPLETION_INFORMATION // 30
    FileMoveClusterInformation,                     // s: FILE_MOVE_CLUSTER_INFORMATION (requires FILE_WRITE_DATA)
    FileQuotaInformation,                           // q: FILE_QUOTA_INFORMATION (requires FILE_LIST_DIRECTORY) (NtQueryDirectoryFile[Ex])
    FileReparsePointInformation,                    // q: FILE_REPARSE_POINT_INFORMATION (requires FILE_LIST_DIRECTORY) (NtQueryDirectoryFile[Ex])
    FileNetworkOpenInformation,                     // q: FILE_NETWORK_OPEN_INFORMATION
    FileAttributeTagInformation,                    // q: FILE_ATTRIBUTE_TAG_INFORMATION
    FileTrackingInformation,                        // s: FILE_TRACKING_INFORMATION (requires FILE_WRITE_DATA)
    FileIdBothDirectoryInformation,                 // q: FILE_ID_BOTH_DIR_INFORMATION (requires FILE_LIST_DIRECTORY) (NtQueryDirectoryFile[Ex])
    FileIdFullDirectoryInformation,                 // q: FILE_ID_FULL_DIR_INFORMATION (requires FILE_LIST_DIRECTORY) (NtQueryDirectoryFile[Ex])
    FileValidDataLengthInformation,                 // s: FILE_VALID_DATA_LENGTH_INFORMATION (requires FILE_WRITE_DATA and/or SeManageVolumePrivilege)
    FileShortNameInformation,                       // s: FILE_NAME_INFORMATION (requires DELETE) // 40
    FileIoCompletionNotificationInformation,        // qs: FILE_IO_COMPLETION_NOTIFICATION_INFORMATION (q: requires FILE_READ_ATTRIBUTES; s: requires FILE_WRITE_ATTRIBUTES) // since VISTA
    FileIoStatusBlockRangeInformation,              // s: FILE_IOSTATUSBLOCK_RANGE_INFORMATION (requires SeLockMemoryPrivilege)
    FileIoPriorityHintInformation,                  // qs: FILE_IO_PRIORITY_HINT_INFORMATION, FILE_IO_PRIORITY_HINT_INFORMATION_EX (q: requires FILE_READ_DATA)
    FileSfioReserveInformation,                     // qs: FILE_SFIO_RESERVE_INFORMATION (q: requires FILE_READ_DATA)
    FileSfioVolumeInformation,                      // q: FILE_SFIO_VOLUME_INFORMATION
    FileHardLinkInformation,                        // q: FILE_LINKS_INFORMATION
    FileProcessIdsUsingFileInformation,             // q: FILE_PROCESS_IDS_USING_FILE_INFORMATION
    FileNormalizedNameInformation,                  // q: FILE_NAME_INFORMATION
    FileNetworkPhysicalNameInformation,             // q: FILE_NETWORK_PHYSICAL_NAME_INFORMATION
    FileIdGlobalTxDirectoryInformation,             // q: FILE_ID_GLOBAL_TX_DIR_INFORMATION (requires FILE_LIST_DIRECTORY) (NtQueryDirectoryFile[Ex]) // since WIN7 // 50
    FileIsRemoteDeviceInformation,                  // q: FILE_IS_REMOTE_DEVICE_INFORMATION
    FileUnusedInformation,                          // q: 
    FileNumaNodeInformation,                        // q: FILE_NUMA_NODE_INFORMATION
    FileStandardLinkInformation,                    // q: FILE_STANDARD_LINK_INFORMATION
    FileRemoteProtocolInformation,                  // q: FILE_REMOTE_PROTOCOL_INFORMATION
    FileRenameInformationBypassAccessCheck,         // s: FILE_RENAME_INFORMATION // (kernel-mode only) // since WIN8
    FileLinkInformationBypassAccessCheck,           // s: FILE_LINK_INFORMATION // (kernel-mode only)
    FileVolumeNameInformation,                      // q: FILE_VOLUME_NAME_INFORMATION
    FileIdInformation,                              // q: FILE_ID_INFORMATION
    FileIdExtdDirectoryInformation,                 // q: FILE_ID_EXTD_DIR_INFORMATION (requires FILE_LIST_DIRECTORY) (NtQueryDirectoryFile[Ex]) // 60
    FileReplaceCompletionInformation,               // s: FILE_COMPLETION_INFORMATION // since WINBLUE
    FileHardLinkFullIdInformation,                  // q: FILE_LINK_ENTRY_FULL_ID_INFORMATION // FILE_LINKS_FULL_ID_INFORMATION
    FileIdExtdBothDirectoryInformation,             // q: FILE_ID_EXTD_BOTH_DIR_INFORMATION (requires FILE_LIST_DIRECTORY) (NtQueryDirectoryFile[Ex]) // since THRESHOLD
    FileDispositionInformationEx,                   // s: FILE_DISPOSITION_INFO_EX (requires DELETE) // since REDSTONE
    FileRenameInformationEx,                        // s: FILE_RENAME_INFORMATION_EX
    FileRenameInformationExBypassAccessCheck,       // s: FILE_RENAME_INFORMATION_EX // (kernel-mode only)
    FileDesiredStorageClassInformation,             // qs: FILE_DESIRED_STORAGE_CLASS_INFORMATION // since REDSTONE2
    FileStatInformation,                            // q: FILE_STAT_INFORMATION
    FileMemoryPartitionInformation,                 // s: FILE_MEMORY_PARTITION_INFORMATION // since REDSTONE3
    FileStatLxInformation,                          // q: FILE_STAT_LX_INFORMATION (requires FILE_READ_ATTRIBUTES and FILE_READ_EA) // since REDSTONE4 // 70
    FileCaseSensitiveInformation,                   // qs: FILE_CASE_SENSITIVE_INFORMATION
    FileLinkInformationEx,                          // s: FILE_LINK_INFORMATION_EX // since REDSTONE5
    FileLinkInformationExBypassAccessCheck,         // s: FILE_LINK_INFORMATION_EX // (kernel-mode only)
    FileStorageReserveIdInformation,                // qs: FILE_STORAGE_RESERVE_ID_INFORMATION
    FileCaseSensitiveInformationForceAccessCheck,   // qs: FILE_CASE_SENSITIVE_INFORMATION
    FileKnownFolderInformation,                     // qs: FILE_KNOWN_FOLDER_INFORMATION // since WIN11
    FileStatBasicInformation,                       // qs: FILE_STAT_BASIC_INFORMATION // since 23H2
    FileId64ExtdDirectoryInformation,               // q: FILE_ID_64_EXTD_DIR_INFORMATION
    FileId64ExtdBothDirectoryInformation,           // q: FILE_ID_64_EXTD_BOTH_DIR_INFORMATION
    FileIdAllExtdDirectoryInformation,              // q: FILE_ID_ALL_EXTD_DIR_INFORMATION
    FileIdAllExtdBothDirectoryInformation,          // q: FILE_ID_ALL_EXTD_BOTH_DIR_INFORMATION
    FileStreamReservationInformation,               // q: FILE_STREAM_RESERVATION_INFORMATION // since 24H2
    FileMupProviderInfo,                            // qs: MUP_PROVIDER_INFORMATION
    FileMaximumInformation
} FILE_INFORMATION_CLASS, *PFILE_INFORMATION_CLASS;

#endif
View code on GitHub

// wdm.h

typedef enum _FILE_INFORMATION_CLASS {
  FileDirectoryInformation = 1,
  FileFullDirectoryInformation = 2,
  FileBothDirectoryInformation = 3,
  FileBasicInformation = 4,
  FileStandardInformation = 5,
  FileInternalInformation = 6,
  FileEaInformation = 7,
  FileAccessInformation = 8,
  FileNameInformation = 9,
  FileRenameInformation = 10,
  FileLinkInformation = 11,
  FileNamesInformation = 12,
  FileDispositionInformation = 13,
  FilePositionInformation = 14,
  FileFullEaInformation = 15,
  FileModeInformation = 16,
  FileAlignmentInformation = 17,
  FileAllInformation = 18,
  FileAllocationInformation = 19,
  FileEndOfFileInformation = 20,
  FileAlternateNameInformation = 21,
  FileStreamInformation = 22,
  FilePipeInformation = 23,
  FilePipeLocalInformation = 24,
  FilePipeRemoteInformation = 25,
  FileMailslotQueryInformation = 26,
  FileMailslotSetInformation = 27,
  FileCompressionInformation = 28,
  FileObjectIdInformation = 29,
  FileCompletionInformation = 30,
  FileMoveClusterInformation = 31,
  FileQuotaInformation = 32,
  FileReparsePointInformation = 33,
  FileNetworkOpenInformation = 34,
  FileAttributeTagInformation = 35,
  FileTrackingInformation = 36,
  FileIdBothDirectoryInformation = 37,
  FileIdFullDirectoryInformation = 38,
  FileValidDataLengthInformation = 39,
  FileShortNameInformation = 40,
  FileIoCompletionNotificationInformation = 41,
  FileIoStatusBlockRangeInformation = 42,
  FileIoPriorityHintInformation = 43,
  FileSfioReserveInformation = 44,
  FileSfioVolumeInformation = 45,
  FileHardLinkInformation = 46,
  FileProcessIdsUsingFileInformation = 47,
  FileNormalizedNameInformation = 48,
  FileNetworkPhysicalNameInformation = 49,
  FileIdGlobalTxDirectoryInformation = 50,
  FileIsRemoteDeviceInformation = 51,
  FileUnusedInformation = 52,
  FileNumaNodeInformation = 53,
  FileStandardLinkInformation = 54,
  FileRemoteProtocolInformation = 55,
  FileRenameInformationBypassAccessCheck = 56,
  FileLinkInformationBypassAccessCheck = 57,
  FileVolumeNameInformation = 58,
  FileIdInformation = 59,
  FileIdExtdDirectoryInformation = 60,
  FileReplaceCompletionInformation = 61,
  FileHardLinkFullIdInformation = 62,
  FileIdExtdBothDirectoryInformation = 63,
  FileDispositionInformationEx = 64,
  FileRenameInformationEx = 65,
  FileRenameInformationExBypassAccessCheck = 66,
  FileDesiredStorageClassInformation = 67,
  FileStatInformation = 68,
  FileMemoryPartitionInformation = 69,
  FileStatLxInformation = 70,
  FileCaseSensitiveInformation = 71,
  FileLinkInformationEx = 72,
  FileLinkInformationExBypassAccessCheck = 73,
  FileStorageReserveIdInformation = 74,
  FileCaseSensitiveInformationForceAccessCheck = 75,
  FileKnownFolderInformation = 76,
  FileStatBasicInformation = 77,
  FileId64ExtdDirectoryInformation = 78,
  FileId64ExtdBothDirectoryInformation = 79,
  FileIdAllExtdDirectoryInformation = 80,
  FileIdAllExtdBothDirectoryInformation = 81,
  FileStreamReservationInformation,
  FileMupProviderInfo,
  FileMaximumInformation
} FILE_INFORMATION_CLASS, *PFILE_INFORMATION_CLASS;
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (ne-wdm-_file_information_class)

Description

A FILE_INFORMATION_CLASS value specifies which structure to use to query or set information for a file object.

Constants

`FileStreamInformation:22`

A message buffer that contains one or more FILE_STREAM_INFORMATION structures.

`FilePipeInformation:23`

A FILE_PIPE_INFORMATION structure.

`FilePipeLocalInformation:24`

A FILE_PIPE_LOCAL_INFORMATION structure.

`FilePipeRemoteInformation:25`

A FILE_PIPE_REMOTE_INFORMATION structure.

`FileMailslotQueryInformation:26`

A FILE_MAILSLOT_QUERY_INFORMATION structure.

`FileMailslotSetInformation:27`

A FILE_MAILSLOT_SET_INFORMATION structure.

`FileCompressionInformation:28`

A FILE_COMPRESSION_INFORMATION structure.

`FileObjectIdInformation:29`

A FILE_OBJECTID_INFORMATION structure.

`FileCompletionInformation:30`

This value is reserved for system use.

`FileMoveClusterInformation:31`

This value is reserved for system use.

`FileQuotaInformation:32`

A FILE_QUOTA_INFORMATION structure.

`FileReparsePointInformation:33`

A FILE_REPARSE_POINT_INFORMATION structure.

`FileNetworkOpenInformation:34`

A FILE_NETWORK_OPEN_INFORMATION structure.

`FileAttributeTagInformation:35`

A FILE_ATTRIBUTE_TAG_INFORMATION structure.

`FileTrackingInformation:36`

This value is reserved for system use.

`FileIdBothDirectoryInformation:37`

A FILE_ID_BOTH_DIR_INFORMATION structure.

`FileIdFullDirectoryInformation:38`

A FILE_ID_FULL_DIR_INFORMATION structure.

`FileValidDataLengthInformation:39`

A FILE_VALID_DATA_LENGTH_INFORMATION structure.

`FileShortNameInformation:40`

A FILE_NAME_INFORMATION structure.

`FileIoCompletionNotificationInformation:41`

This value is reserved for system use. This value is available starting with Windows Vista.

`FileIoStatusBlockRangeInformation:42`

This value is reserved for system use. This value is available starting with Windows Vista.

`FileIoPriorityHintInformation:43`

A FILE_IO_PRIORITY_HINT_INFORMATION structure. This value is available starting with Windows Vista.

`FileSfioReserveInformation:44`

This value is reserved for system use. This value is available starting with Windows Vista.

`FileSfioVolumeInformation:45`

This value is reserved for system use. This value is available starting with Windows Vista.

`FileHardLinkInformation:46`

A FILE_LINKS_INFORMATION structure. This value is available starting with Windows Vista.

`FileProcessIdsUsingFileInformation:47`

A FILE_PROCESS_IDS_USING_FILE_INFORMATION structure. This value is reserved for system use. This value is available starting with Windows Vista.

`FileNormalizedNameInformation:48`

A FILE_NAME_INFORMATION structure. This value is defined starting with Windows Vista. It is supported starting with Windows 8.

`FileNetworkPhysicalNameInformation:49`

A FILE_NETWORK_PHYSICAL_NAME_INFORMATION structure. This value is available starting with Windows Vista.

`FileIdGlobalTxDirectoryInformation:50`

A FILE_ID_GLOBAL_TX_DIR_INFORMATION structure. This value is available starting with Windows 7.

`FileIsRemoteDeviceInformation:51`

A FILE_IS_REMOTE_DEVICE_INFORMATION structure. This value is reserved for system use. This value is available starting with Windows 7.

`FileUnusedInformation:52`

This value is reserved for system use. This value is available starting with Windows 7.

`FileNumaNodeInformation:53`

A FILE_NUMA_NODE_INFORMATION structure. This value is reserved for system use. This value is available starting with Windows 7.

`FileStandardLinkInformation:54`

A FILE_STANDARD_LINK_INFORMATION structure. This value is reserved for system use. This value is available starting with Windows 7.

`FileRemoteProtocolInformation:55`

A FILE_REMOTE_PROTOCOL_INFORMATION structure. This value is available starting with Windows 7.

`FileRenameInformationBypassAccessCheck:56`

A FILE_RENAME_INFORMATION structure. This is a special version of the FileRenameInformation operation that is used by kernel-mode drivers only in order to bypass security access checks. This operation is only recognized by the IOManager and a file system should never receive it. This value is available starting with Windows 10.

`FileLinkInformationBypassAccessCheck:57`

A FILE_LINK_INFORMATION structure. This is a special version of the FileLinkInformation operation that is used by kernel-mode drivers only in order to bypass security access checks. This operation is only recognized by the IOManager and a file system should never receive it. This value is available starting with Windows 10.

`FileVolumeNameInformation:58`

A FILE_VOLUME_NAME_INFORMATION structure. This value is reserved for system use. This value is available starting with Windows 10.

`FileIdInformation:59`

A FILE_ID_INFORMATION structure. This value is reserved for system use. This value is available starting with Windows 10.

`FileIdExtdDirectoryInformation:60`

A FILE_ID_EXTD_DIR_INFORMATION structure. This value is reserved for system use. This value is available starting with Windows 10.

`FileReplaceCompletionInformation:61`

A FILE_COMPLETION_INFORMATION structure to change or remove the completion port associated with a file handle. This value is available starting with Windows 8.1.

`FileHardLinkFullIdInformation:62`

A FILE_LINKS_FULL_ID_INFORMATION structure. This value is reserved for system use. This value is available starting with Windows 10.

`FileIdExtdBothDirectoryInformation:63`

A FILE_ID_EXTD_BOTH_DIR_INFORMATION structure. This value is reserved for system use. This value is available starting with Windows 10.

`FileDispositionInformationEx:64`

A FILE_DISPOSITION_INFORMATION_EX structure that indicates how the operating system should delete a file. This value is available starting with Windows 10, version 1709.

`FileRenameInformationEx:65`

A FILE_RENAME_INFORMATION structure which contains additional flags. This value is available starting with Windows 10, version 1709.

`FileRenameInformationExBypassAccessCheck:66`

A FILE_RENAME_INFORMATION structure which contains additional flags. This value is available starting with Windows 10, version 1709. This is a special version of the FileRenameInformation operation that is used by kernel-mode drivers only in order to bypass security access checks. This operation is only recognized by the IOManager and a file system should never receive it.

`FileDesiredStorageClassInformation:67`

A FILE_DESIRED_STORAGE_CLASS_INFORMATION structure, declared in ntifs.h. This value is available starting with Windows 10, version 1709.

`FileStatInformation:68`

A FILE_STAT_INFORMATION structure, declared in ntifs.h. This value is available starting with Windows 10, version 1709.

`FileMemoryPartitionInformation:69`

Reserved. This value is available starting with Windows 10, version 1709.

`FileStatLxInformation:70`

A FILE_STAT_LX_INFORMATION structure, declared in ntifs.h. This information class is used for fields refer to Linux metadata used/created by the Windows Subsystem for Linux. This value is available starting with Windows 10 April 2018 Update.

`FileCaseSensitiveInformation:71`

A FILE_CASE_SENSITIVE_INFORMATION structure, declared in ntifs.h. This value is available starting with Windows 10 April 2018 Update.

`FileLinkInformationEx:72`

A FILE_LINK_INFORMATION structure which contains additional flags. This value is available starting with Windows 10, version 1809.

`FileLinkInformationExBypassAccessCheck:73`

A FILE_LINK_INFORMATION structure which contains additional flags. This is a special version of the FileLinkInformation operation that is used by kernel-mode drivers only in order to bypass security access checks. This operation is only recognized by the IOManager and a file system should never receive it. This value is available starting with Windows 10, version 1809.

`FileStorageReserveIdInformation:74`

A FILE_STORAGE_RESERVE_ID_INFORMATION structure, declared in ntifs.h. This value is available starting with Windows 10, version 1809.

`FileCaseSensitiveInformationForceAccessCheck:75`

A FILE_CASE_SENSITIVE_INFORMATION structure, declared in ntifs.h. This is a special version of the FileCaseSensitiveInformation operation that is used to force the IOManager to perform access checks for the kernel-mode driver, similar to the checks that apply to a user-mode caller. This operation is only recognized by the IOManager and a file system should never receive it. This value is available starting with Windows 10, version 1809.

`FileKnownFolderInformation:76`

A FILE_KNOWN_FOLDER_INFORMATION structure, declared in ntifs.h. This value is available starting with Windows Server 2022.

`FileStatBasicInformation:77`

A FILE_STAT_BASIC_INFORMATION structure, declared in ntifs.h. This value is available starting with Windows 11, build 26048.

`FileId64ExtdDirectoryInformation:78`

A FILE_ID_64_EXTD_DIR_INFORMATION structure, declared in ntifs.h. This value is available starting with Windows 11, version 23H2.

`FileId64ExtdBothDirectoryInformation:79`

A FILE_ID_64_EXTD_BOTH_DIR_INFORMATION structure, declared in ntifs.h. This value is available starting with Windows 11, version 23H2.

`FileIdAllExtdDirectoryInformation:80`

A FILE_ID_ALL_EXTD_DIR_INFORMATION structure, declared in ntifs.h. This value is available starting with Windows 11, version 23H2.

`FileIdAllExtdBothDirectoryInformation:81`

A FILE_ID_ALL_EXTD_BOTH_DIR_INFORMATION structure, declared in ntifs.h. This value is available starting with Windows 11, version 23H2.

`FileMaximumInformation`

Maximum value of this enumeration. This value is available starting with Windows 7.

View the official Windows Driver Kit DDI reference

Edit description on GitHub

NTinternals.net (undocumented.ntinternals.net)

This enumeration is documented in Windows Driver Kit.

Enumeration type FILE_INFORMATION_CLASS defines informational classes for File Objects. It's used by NtQueryInformationFile, NtQueryDirectoryFile and NtSetInformationFile functions.

FileDirectoryInformation=1

Action: Query
Buffer size: 0x48
Structure: FILE_DIRECTORY_INFORMATION
Function: NtQueryDirectoryFile

FileFullDirectoryInformation

Action: Query
Buffer size: 0x48
Structure: FILE_FULL_DIR_INFORMATION
Function: NtQueryDirectoryFile

FileBothDirectoryInformation

Action: Query
Buffer size: 0x48
Structure: FILE_BOTH_DIR_INFORMATION
Function: NtQueryDirectoryFile

FileBasicInformation

Action: Query
Buffer size: 0x28
Structure: FILE_BASIC_INFORMATION
Function: NtQueryInformationFile

Action: Set
Buffer size: 0x28
Structure: FILE_BASIC_INFORMATION
Function: NtSetInformationFile

FileStandardInformation

Action: Query
Buffer size: 0x18
Structure: FILE_STANDARD_INFORMATION
Function: NtQueryInformationFile

FileInternalInformation

Action: Query
Buffer size: 0x08
Structure: FILE_INTERNAL_INFORMATION
Function: NtQueryInformationFile

FileEaInformation

Action: Query
Buffer size: 0x04
Structure: FILE_EA_INFORMATION
Function: NtQueryInformationFile

FileAccessInformation

// 8 FILE_ACCESS_INFORMATION 0x04 NtQueryInformationFile

FileNameInformation

Action: Query
Buffer size: 0x08+
Structure: FILE_NAME_INFORMATION
Function: NtQueryInformationFile

FileRenameInformation

Action: Set
Buffer size: 0x10
Structure: FILE_RENAME_INFORMATION
Function: NtSetInformationFile

FileLinkInformation

Action: Set
Buffer size: 0x10
Structure: FILE_LINK_INFORMATION
Function: NtSetInformationFile

FileNamesInformation

Action: Query
Buffer size: 0x10
Structure: FILE_NAMES_INFORMATION
Function: NtQueryDirectoryFile

FileDispositionInformation

Action: Set
Buffer size: 0x01
Structure: FILE_DISPOSITION_INFORMATION
Function: NtSetInformationFile

FilePositionInformation

Action: Query
Buffer size: 0x08
Structure: FILE_POSITION_INFORMATION
Function: NtQueryInformationFile

Action: Set
Buffer size: 0x08
Structure: FILE_POSITION_INFORMATION
Function: NtSetInformationFile

FileFullEaInformation

// 15 FILE_FULL_EA_INFORMATION ??? ???

FileModeInformation

// 16 FILE_MODE_INFORMATION 0x04 0x04 NtQueryInformationFile

FileAlignmentInformation

// 17 FILE_ALIGNMENT_INFORMATION 0x04 NtQueryInformationFile

FileAllInformation

Action: Query
Buffer size: 0x68
Structure: FILE_ALL_INFORMATION
Function: NtQueryInformationFile

FileAllocationInformation

// 19 FILE_ALLOCATION_INFORMATION 0x08

FileEndOfFileInformation

Action: Set
Buffer size: 0x08
Structure: FILE_END_OF_FILE_INFORMATION
Function: NtSetInformationFile

FileAlternateNameInformation

Action: Query
Buffer size: 0x08+
Structure: FILE_NAME_INFORMATION
Function: NtQueryInformationFile

FileStreamInformation

// 22 FILE_STREAM_INFORMATION 0x20 NtQueryInformationFile

FilePipeInformation

// 23 FILE_PIPE_INFORMATION 0x08 0x08 NtQueryInformationFile

FilePipeLocalInformation

// 24 FILE_PIPE_LOCAL_INFORMATION 0x28 NtQueryInformationFile

FilePipeRemoteInformation

// 25 FILE_PIPE_REMOTE_INFORMATION 0x10 0x10 NtQueryInformationFile

FileMailslotQueryInformation

// 26 FILE_MAILSLOT_QUERY_INFORMATION 0x18 NtQueryInformationFile

FileMailslotSetInformation

// 27 FILE_MAILSLOT_SET_INFORMATION 0x04

FileCompressionInformation

// 28 FILE_COMPRESSION_INFORMATION 0x10 NtQueryInformationFile

FileCopyOnWriteInformation

// 29 FILE_COPY_ON_WRITE_INFORMATION 0x10

FileCompletionInformation

Action: Set
Buffer size: 0x08
Structure: FILE_COMPLETION_INFORMATION
Function: NtSetInformationFile

FileMoveClusterInformation

// 31 0x10

FileQuotaInformation

// 32 FILE_QUOTA_INFORMATION 0x10 -> FileOleClassIdInformation

FileReparsePointInformation

// 33 0x08 -> FileOleStateBitsInformation

FileNetworkOpenInformation

Action: Query
Buffer size: 0x38
Structure: FILE_NETWORK_OPEN_INFORMATION
Function: NtQueryInformationFile

FileObjectIdInformation

// 35 FILE_ATTRIBUTE_TAG_INFORMATION 0x14

FileTrackingInformation

// 36 0xC0 NtQueryInformationFile -> FileOleAllInformation

FileOleDirectoryInformation

// 37 0x60 NtQueryDirectoryFile

FileContentIndexInformation

// 38 0x01

FileInheritContentIndexInformation

// 39 0x01

FileOleInformation

// 40 0x38 0x38 NtQueryInformationFile

FileMaximumInformation

// 41

Documented by

Tomasz Nowak
Bo Branten
SysInternals

NtDoc

Windows Driver Kit DDI reference (ne-wdm-_file_information_class)

Description

Constants

FileDirectoryInformation:1

FileFullDirectoryInformation:2

FileBothDirectoryInformation:3

FileBasicInformation:4

FileStandardInformation:5

FileInternalInformation:6

FileEaInformation:7

FileAccessInformation:8

FileNameInformation:9

FileRenameInformation:10

FileLinkInformation:11

FileNamesInformation:12

FileDispositionInformation:13

FilePositionInformation:14

FileFullEaInformation:15

FileModeInformation:16

FileAlignmentInformation:17

FileAllInformation:18

FileAllocationInformation:19

FileEndOfFileInformation:20

FileAlternateNameInformation:21

FileStreamInformation:22

FilePipeInformation:23

FilePipeLocalInformation:24

FilePipeRemoteInformation:25

FileMailslotQueryInformation:26

FileMailslotSetInformation:27

FileCompressionInformation:28

FileObjectIdInformation:29

FileCompletionInformation:30

FileMoveClusterInformation:31

FileQuotaInformation:32

FileReparsePointInformation:33

FileNetworkOpenInformation:34

FileAttributeTagInformation:35

FileTrackingInformation:36

FileIdBothDirectoryInformation:37

FileIdFullDirectoryInformation:38

FileValidDataLengthInformation:39

FileShortNameInformation:40

FileIoCompletionNotificationInformation:41

FileIoStatusBlockRangeInformation:42

FileIoPriorityHintInformation:43

FileSfioReserveInformation:44

FileSfioVolumeInformation:45

FileHardLinkInformation:46

FileProcessIdsUsingFileInformation:47

FileNormalizedNameInformation:48

FileNetworkPhysicalNameInformation:49

FileIdGlobalTxDirectoryInformation:50

FileIsRemoteDeviceInformation:51

FileUnusedInformation:52

FileNumaNodeInformation:53

FileStandardLinkInformation:54

FileRemoteProtocolInformation:55

FileRenameInformationBypassAccessCheck:56

FileLinkInformationBypassAccessCheck:57

FileVolumeNameInformation:58

FileIdInformation:59

FileIdExtdDirectoryInformation:60

FileReplaceCompletionInformation:61

FileHardLinkFullIdInformation:62

FileIdExtdBothDirectoryInformation:63

FileDispositionInformationEx:64

FileRenameInformationEx:65

FileRenameInformationExBypassAccessCheck:66

FileDesiredStorageClassInformation:67

FileStatInformation:68

FileMemoryPartitionInformation:69

FileStatLxInformation:70

FileCaseSensitiveInformation:71

FileLinkInformationEx:72

FileLinkInformationExBypassAccessCheck:73

FileStorageReserveIdInformation:74

FileCaseSensitiveInformationForceAccessCheck:75

FileKnownFolderInformation:76

`FileDirectoryInformation:1`

`FileFullDirectoryInformation:2`

`FileBothDirectoryInformation:3`

`FileBasicInformation:4`

`FileStandardInformation:5`

`FileInternalInformation:6`

`FileEaInformation:7`

`FileAccessInformation:8`

`FileNameInformation:9`

`FileRenameInformation:10`

`FileLinkInformation:11`

`FileNamesInformation:12`

`FileDispositionInformation:13`

`FilePositionInformation:14`

`FileFullEaInformation:15`

`FileModeInformation:16`

`FileAlignmentInformation:17`

`FileAllInformation:18`

`FileAllocationInformation:19`

`FileEndOfFileInformation:20`

`FileAlternateNameInformation:21`

`FileStreamInformation:22`

`FilePipeInformation:23`

`FilePipeLocalInformation:24`

`FilePipeRemoteInformation:25`

`FileMailslotQueryInformation:26`

`FileMailslotSetInformation:27`

`FileCompressionInformation:28`

`FileObjectIdInformation:29`

`FileCompletionInformation:30`

`FileMoveClusterInformation:31`

`FileQuotaInformation:32`

`FileReparsePointInformation:33`

`FileNetworkOpenInformation:34`

`FileAttributeTagInformation:35`

`FileTrackingInformation:36`

`FileIdBothDirectoryInformation:37`

`FileIdFullDirectoryInformation:38`

`FileValidDataLengthInformation:39`

`FileShortNameInformation:40`

`FileIoCompletionNotificationInformation:41`

`FileIoStatusBlockRangeInformation:42`

`FileIoPriorityHintInformation:43`

`FileSfioReserveInformation:44`

`FileSfioVolumeInformation:45`

`FileHardLinkInformation:46`

`FileProcessIdsUsingFileInformation:47`

`FileNormalizedNameInformation:48`

`FileNetworkPhysicalNameInformation:49`

`FileIdGlobalTxDirectoryInformation:50`

`FileIsRemoteDeviceInformation:51`

`FileUnusedInformation:52`

`FileNumaNodeInformation:53`

`FileStandardLinkInformation:54`

`FileRemoteProtocolInformation:55`

`FileRenameInformationBypassAccessCheck:56`

`FileLinkInformationBypassAccessCheck:57`

`FileVolumeNameInformation:58`

`FileIdInformation:59`

`FileIdExtdDirectoryInformation:60`

`FileReplaceCompletionInformation:61`

`FileHardLinkFullIdInformation:62`

`FileIdExtdBothDirectoryInformation:63`

`FileDispositionInformationEx:64`

`FileRenameInformationEx:65`

`FileRenameInformationExBypassAccessCheck:66`

`FileDesiredStorageClassInformation:67`

`FileStatInformation:68`

`FileMemoryPartitionInformation:69`

`FileStatLxInformation:70`

`FileCaseSensitiveInformation:71`

`FileLinkInformationEx:72`

`FileLinkInformationExBypassAccessCheck:73`

`FileStorageReserveIdInformation:74`

`FileCaseSensitiveInformationForceAccessCheck:75`

`FileKnownFolderInformation:76`

`FileStatBasicInformation:77`

`FileId64ExtdDirectoryInformation:78`

`FileId64ExtdBothDirectoryInformation:79`

`FileIdAllExtdDirectoryInformation:80`