#ifndef _NTIOAPI_H

/**
 * The FILE_NETWORK_OPEN_INFORMATION structure is used to query for information that is commonly needed when a file is opened across a network.
 * \sa https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/ns-wdm-_file_network_open_information
 */
typedef struct _FILE_NETWORK_OPEN_INFORMATION
{
    LARGE_INTEGER CreationTime;
    LARGE_INTEGER LastAccessTime;
    LARGE_INTEGER LastWriteTime;
    LARGE_INTEGER ChangeTime;
    LARGE_INTEGER AllocationSize;
    LARGE_INTEGER EndOfFile;
    ULONG FileAttributes;
} FILE_NETWORK_OPEN_INFORMATION, *PFILE_NETWORK_OPEN_INFORMATION;

#endif
View code on GitHub

// wdm.h

typedef struct _FILE_NETWORK_OPEN_INFORMATION {
  LARGE_INTEGER CreationTime;
  LARGE_INTEGER LastAccessTime;
  LARGE_INTEGER LastWriteTime;
  LARGE_INTEGER ChangeTime;
  LARGE_INTEGER AllocationSize;
  LARGE_INTEGER EndOfFile;
  ULONG         FileAttributes;
} FILE_NETWORK_OPEN_INFORMATION, *PFILE_NETWORK_OPEN_INFORMATION;
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (ns-wdm-_file_network_open_information)

_FILE_NETWORK_OPEN_INFORMATION structure

Description

The FILE_NETWORK_OPEN_INFORMATION structure is used as an argument to ZwQueryInformationFile.

Members

`CreationTime`

Specifies the time that the file was created.

`LastAccessTime`

Specifies the time that the file was last accessed.

`LastWriteTime`

Specifies the time that the file was last written to.

`ChangeTime`

Specifies the time that the file was last changed.

`AllocationSize`

Specifies the file allocation size, in bytes. Usually, this value is a multiple of the sector or cluster size of the underlying physical device.

`EndOfFile`

Specifies the absolute end-of-file position as a byte offset from the start of the file. EndOfFile specifies the byte offset to the end of the file. Because this value is zero-based, it actually refers to the first free byte in the file. In other words, EndOfFile is the offset to the byte immediately following the last valid byte in the file.

`FileAttributes`

Specifies one or more FILE_ATTRIBUTE_XXX flags. For descriptions of these flags, see the documentation of the GetFileAttributes function in the Microsoft Windows SDK.

Remarks

FILE_READ_ATTRIBUTES access to the file is required to query this information.

Time values CreationTime, LastAccessTime, LastWriteTime, and ChangeTime are expressed in absolute system time format. Absolute system time is the number of 100-nanosecond intervals since the start of the year 1601 in the Gregorian calendar.

This structure must be aligned on a LONGLONG (8-byte) boundary.

NTinternals.net (undocumented.ntinternals.net)

This structure is documented in Windows Driver Kit.

FILE_NETWORK_OPEN_INFORMATION structure is used with two file functions:

NtQueryFullAttributesFile,
NtQueryInformationFile with FileNetworkOpenInformation information class.

CreationTime

Indicates time of file creation.

LastAccessTime

Time of last open file.

LastWriteTime

Time of last write operation.

ChangeTime

Time of any last change.

AllocationSize

Number of bytes that file use on storage, equal or greater to EndOfFile.

EndOfFile

Length of file, in bytes.

FileAttributes

File attributes.

Unknown

???

Documented by

Tomasz Nowak
Bo Branten

FILE_NETWORK_OPEN_INFORMATION - NtDoc