Create mismatch between disk size and actual NTFS size
I keep looking for 10kb files, but the disk size is 10gb. Trying to figure out how this is done, who has any ideas?
You can create sparse files on NTFS as well as any real filesystem. :-)
Search (10GB - 10KB), write 10KB of data. There you have a so called 10GB file which is actually only 10KB. :-)
You can create streams in NTFS files. It's like a separate file but with the same name. See here: Alternative data streams
I'm not sure in your case (or it might be a mistake in your question), but when you create a sparse NTFS file it will show different sizes for those fields.
When I create a 10MB sparse file and fill it with 1MB of data, the data explorer will show:
Size: 10MB
Size on disk: 1MB
But in your case, it's the other way around. (or error.)