Hi, Crosslinked files use the same cluster and can come from as already said a bad shutdown. Can also be generated from an application that quits for some reason.