NTFS has a bug. If you have $MFT or $MFTMirr files opened by name, then
subsequent IRP_MJ_QUERY_INFORMATION for file name returns $MFT or $MFTMirr
for corresponding file.
If these files was opened by FileId, then subsequent query for name returns
$Mft or $MftMirr for corresponding file.
It’s important on filtering when you try to identify NTFS metadata, because
NTFS is case sensitive.
That was discovered on Windows 7. I didn’t try other Windows versions.