Technical Reference • Windows 10 & 11 NTFS Architecture

How DriveSpaceManager Works
Under the Hood.

A transparent look at our dual-engine Win32/USN scanner, SHA-256 content hashing, native NTFS hardlinks (CreateHardLinkW), directory junctions, Git worktree inspection, and complete edition specifications.

Free Inspection vs. Pro Filesystem Operations

Free covers full local scanning, SHA-256 duplicate discovery, and backup/Git status reporting. Pro adds advanced NTFS and Git workflows.

Check projects before cleaning a dev workspace

Know which repositories have uncommitted or unpushed work before you remove caches or old checkouts.

Free Git report: clean, uncommitted, unpushed and local-only repositories and worktrees (up to 80 per scan, not while elevated).
Pro Remote Git operations (fetch, push, GC, prune) from the same view.

Deduplicate static assets via NTFS hardlinks

Find repeated camera exports, model files or vendor libraries and reclaim duplicate cluster allocation without breaking file paths.

Free Duplicate discovery by full-file SHA-256, with every path listed for review.
Pro Replace verified copies of static files with NTFS hardlinks (CreateHardLinkW). Linked paths share data clusters, so a later edit through one path changes all of them.

Relocate heavy archives with NTFS junctions

Free space on C: while keeping the original folder path working transparently for applications that expect it.

Free Find large, inactive project and media folders with Largest and the unversioned-folder report.
Pro Move a supported folder to another local NTFS drive and create a directory junction at the old path. Windows and system folders are excluded for safety.

9 Technical Deep-Dives

Detailed engineering breakdowns of each subsystem in DriveSpaceManager.

⚡ Multi-Volume & Virtual Mounts

Switch Between Physical NVMe Volumes & Cloud Mounts

Windows Explorer makes it difficult to compare physical disk allocation against virtual cloud mounts. DriveSpaceManager enumerates local fixed drives alongside Dokan/Cloud Filter virtual drives (Google Drive, OneDrive) and distinguishes physical SSD cache usage from online-only cloud placeholders.

  • Dokan & Cloud Filter Awareness: Inspect multi-terabyte cloud mounts without hydrating online-only files to your local SSD.
Interactive Volume Switcher Click to test switching ↓
OS (C:) 2.0 TB NVMe 618 GB used (66.6%)
• Games & Media: 290 GB
• System & Windows: 123.6 GB
• Developer & AI: 117 GB
• Free Space: 310 GB available
☁️ Cloud Sync Heuristics

Directory-Level Cloud & Git Sync Indicator Detection

DriveSpaceManager cross-references scanned paths against registered OneDrive and Google Drive sync roots, file attributes, and Git upstream tracking references so you can see whether a folder is backed up or strictly local.

  • Google Drive ☁️ Matched to local Google Drive sync root or signature.
Sync Indicator Demo (simulated) Hover or tap any row ↓
📁 Family_Vacation_Photos_4K
Google Drive ☁️
📁 Financial_Tax_Documents
OneDrive 🔵
📁 client-mobile-app
Git Clean 🐙
📁 Heavy_Uncompressed_Footage
Local Only 🔴
Hover or tap any folder above to inspect its detected sync indicators.
⚡ Dual-Engine Architecture

Standard Win32 Traversal & Optional Elevated USN Pre-Read

By default, scans run entirely as a standard user via concurrent Win32 directory traversal (FindFirstFileExW / ScanDirectoryWin32), requiring zero administrator elevation.

When run with Administrator privileges, enabling MFT Turbo performs an optional Update Sequence Number Journal pre-read pass (FSCTL_ENUM_USN_DATA) before building directory structures through Win32 enumeration.

  • Zero Elevation by Default: Everyday standard-user scanning without UAC prompts.
Architecture Workflow Documented Pipeline
1. Standard User Mode (Default)
Runs concurrent Win32 directory traversal using native file system handles. Requires zero elevated permissions.
2. Optional Elevated USN Pre-Read
When run elevated as Administrator, queries FSCTL_ENUM_USN_DATA across the NTFS volume prior to directory enumeration.
3. Interactive Squarified Treemap
Populates the multi-depth squarified treemap and heuristic analysis categories for immediate inspection.
🧹 Heuristic Cleanup Buckets

Cleanup Candidates: Temp, Logs, Caches & Virtual Environments

Instead of manually hunting through hidden AppData and build directories, DriveSpaceManager groups reclaimable candidates (caches, compiler outputs, and virtual environments) into 6 structured buckets for review:

  • 1-Click Recovery Vault: Stage items into the Recovery Vault before permanent deletion so you can restore with 1 click.
🧹 Temp & Logs 61.3 GB
183 diagnostic log files
🤖 AI & Pip Caches 32.3 GB
11 HuggingFace weight caches
🐍 Python .venv 30.2 GB
70 rebuildable environments
📦 node_modules 6.2 GB
51 stale npm/yarn trees
Candidates to review (simulated): 132 GB
🔗 NTFS Hardlinks (CreateHardLinkW)

Full-File SHA-256 Deduplication & NTFS Hardlink Merging

Deleting a duplicate file outright can break shortcuts, virtual environments, or build scripts that still reference that file path.

DriveSpaceManager verifies exact byte-for-byte identity via full-file SHA-256 hashing and uses native Windows NTFS Hardlinks (CreateHardLinkW) to point multiple directory entries on the same volume to a single on-disk allocation.

⚠️ Note on Hardlink Behavior: Because hardlinked files share identical disk clusters, future in-place writes through any linked path modify the shared content for all links. Hardlinking is designed for static, immutable files and libraries.

Hardlink Preview (simulated)
📦 torch_cuda.dll (3 copies) 1.5 GB wasted
Found in 3 separate Python virtual environments
↳ Linked via NTFS Hardlinks. Allocation saved: 1.5 GB (all paths kept)
🎬 Wedding_Video_Export.mov (2 copies) 16.5 GB wasted
Found in Videos\Final & Desktop\Share
↳ Linked via NTFS Hardlinks. Allocation saved: 16.5 GB
📁 NTFS Reparse Points (Junctions)

Cross-Volume Folder Archiving with Transparent NTFS Junctions

When your primary C: NVMe drive fills up, moving folders manually breaks application paths. DriveSpaceManager copies eligible folders to your secondary NTFS drive, verifies file integrity, and creates a transparent Windows Directory Junction at the original path.

Applications continue reading and writing via the original C: path while the physical clusters reside on your secondary volume.

Archive Move Preview (simulated)
Original C: Drive Location:
C:\Users\Alex\Downloads\HeavyArchive
↳ Transparent Junction Target:
D:\StorageVault\HeavyArchive (85.2 GB)
✓ 85.2 GB freed on OS (C:) • Original path remains active via NTFS junction
🌿 Git & Worktree Intelligence

Audit Git Repositories, Linked Worktrees & Unpushed Commits

Standard disk visualizers treat .git folders as opaque directories. DriveSpaceManager inspects repository state across your workspace so you never accidentally delete uncommitted code or unpushed branches.

  • Worktree & Branch Auditing: Detects dirty working trees, untracked files, unpushed commits, and local-only repositories with no configured remote.
Git Projects Dashboard 75 Repos • 419 Worktrees
Clean vs Upstream
43 Clean
Uncommitted / Dirty
19 Uncommitted
📦 OpenMontage (⎇ main)
↳ origin: https://github.com/organization/OpenMontage.git
↳ .M remotion-composer/package-lock.json
📊 File Ranking & Sync Indicators

Rank Multi-Gigabyte Files & Cross-Reference Sync Status

DriveSpaceManager ranks the largest individual files across the scanned volume and pairs each entry with its detected cloud sync or Git status indicator.

  • Pinpoint Giant Binaries: Spot 17 GB AI checkpoint weights, 8 GB WSL/Docker .vhdx virtual disks, and system paging files immediately.
Top Largest Files Ranking
pagefile.sys (System Paging) 42.1 GB
diffusion_model_checkpoint.safetensors 17.4 GB
rootfs.vhdx (WSL / Docker Disk) 8.2 GB
✓ Archive to secondary (Pro): 17.4 GB moved, original path kept via junction
📈 Filesystem Cluster Telemetry

Logical vs. Physical Allocation, Cluster Slack & Age Distribution

Storing hundreds of thousands of small files wastes gigabytes of physical disk space due to 4 KB NTFS cluster rounding. DriveSpaceManager computes both logical byte size and physical cluster allocation to expose hidden slack overhead.

  • Cluster Slack Analysis: Quantifies exact disk overhead lost to 4 KB sector boundaries.
Age & Slack Telemetry
Cluster Slack Space Overhead: 4.8 GB
< 7 Days Active Work: 191 GB (30.56%)
> 3 Years Stale Candidates: 14.1 GB (2.25%)
Total: 2,062,738 files across 544,987 directories

Detailed Edition Breakdown

Full side-by-side specification of Free, Personal Pro ($15), Perpetual Plus ($25), and Team Studio ($49).

Feature Breakdown Community Free ($0) Personal Pro ($15)
Own v2.x Forever
Perpetual Plus ($25)
Lifetime Upgrades (v2, v3+)
Team Studio ($49)
Commercial + Portable USB
Edition Highlights, Upgrades & Offline Mode (How Plans Tier)
Software Updates & Future Versions Community Updates All v2.x Updates Included
(Own v2 forever; v3.0+ optional)
✓ Lifetime Major Upgrades (v2.x, v3.0, v4.0+)
PC Activations (Seats) 1 Home PC Up to 3 Personal PCs Up to 5 Commercial Workstations
100% Offline / Air-Gapped Scanning Mode Requires Internet (Trial/Basic Check) ✓ 100% Offline Forever ✓ 100% Offline Forever
First-Launch 72-Hour Full Pro Trial ✓ 72 Hours Full Pro Included ✓ Permanent Pro License ✓ Permanent Pro License
Commercial / Business Use & Tax/VAT Invoice ✕ Personal Only ✕ Personal Only ✓ Commercial & Client Use
Portable Zero-Install USB Technician Mode ✕ No ✕ No ✓ Included (Team Studio)
Scanning & Hardware Engine
Win32 Multi-Threaded Scanning (Standard User) ✓ Included ✓ Included ✓ Included
NTFS USN Journal Pre-Read (Elevated Mode) ✓ Included ✓ Included ✓ Included
Interactive Multi-Level Squarified Treemap ✓ Included ✓ Included ✓ Included
Coloring Modes (Depth, Type, Age, Backup & Git) All 4 for 72h → 3 Basic Modes ✓ All 4 Modes (+ Backup & Git) ✓ All 4 Modes (+ Backup & Git)
Single-Child Path Compaction (e.g. Lib/site-packages) ✓ Included ✓ Included ✓ Included
Cloud Storage & Backup Auditing
Google Drive & OneDrive Sync Folder Verification Full for 72h → Summary Preview ✓ Full Per-Folder Verification ✓ Full Per-Folder Verification
Sync & Provider Indicators (Google Drive, OneDrive, Git) Full for 72h → Summary Preview ✓ Included Forever (Pro) ✓ Included Forever (Pro)
Copy Folders to a Cloud Sync Folder 72-Hour Pro Trial ✓ Included Forever (Pro) ✓ Included Forever (Pro)
Smart Space Cleanup & Deduplication
Smart Reclaimable Space Analyzer + 1-Click Recovery Vault 72h Vault → Standard Recycle Bin ✓ + 1-Click Recovery Vault ✓ + 1-Click Recovery Vault
Fast SHA-256 Exact Duplicate File Finder Full for 72h → Summary Preview ✓ Full List & Filters ✓ Full List & Filters
NTFS Hardlink Replacement for Verified Duplicates 72-Hour Pro Trial ✓ Included Forever (Pro) ✓ Included Forever (Pro)
Move Eligible Folders to a Second Drive (NTFS Junction) 72-Hour Pro Trial ✓ Included Forever (Pro) ✓ Included Forever (Pro)
Git Repositories & Developer Health
Git Repositories & Multi-Worktree Health Scanner Full for 72h → Summary Preview ✓ Full Worktree Audit ✓ Full Worktree Audit
Uncommitted & Unpushed Work Indicators Full for 72h → Summary Preview ✓ Included Forever (Pro) ✓ Included Forever (Pro)
Remote Git Operations (Fetch, Push, GC, Prune) 72-Hour Pro Trial ✓ Included Forever (Pro) ✓ Included Forever (Pro)
Choose Your Plan on Main Page →