(Root) SME Kind PropertyId Root Computer ObjectId SME~Computer Initialization Status StringId Healthy Name String SME Version String 2019-07-04T05:56:22Z -- Kilimanjaro (Computer) SME~Computer Kind PropertyId Computer Boot Firmware StringId UEFI Description String Microsoft Windows 10 Client Workstation 10.0.19041 Device Array array[1] = {SME~Computer~Sg916682BF} Disk Group Array array[1] = {SME~Computer~BgM916682BFRegion-0} Drive Letter Array array[16] = {E:, F:, G:, H:, I:, K:, M:, O:, P:, Q:, T:, U:, W:, X:, Y:, Z:} Encoding uint32 1252 (4e4h) File System Encoding uint32 437 (1b5h) Initialization Errors empty Initialization Status StringId Healthy Installed Software Array array[3] = {SME~Computer~IsInstalledOS-MicrosoftWindows10Client-SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-3~Fs1/Windows/, SME~Computer~IsBootManager-EFIBootManager-NVRAM-VM916682BFRegion-0-1, SME~Computer~IsRecoveryEnvironment-WindowsRecoveryEnvironment-\\?\Volume{5004b27d-206f-4c88-b0c4-61b38d7e39df}/recovery/WindowsRE/boot.sdi} Name String Brian-PC Root ObjectId SME (Device) SME~Computer~Sg916682BF Kind PropertyId Device Bus Type StringId RAID Computer ObjectId SME~Computer Device Id String M916682BF Device Number uint32 0 Initialization Status StringId Healthy Is Available bool true Is Device Physical bool true Is Media Removable bool false Location String IDE Primary Master Media ObjectId SME~Computer~Sg916682BF~M916682BF Model String ST1000DM010-2EP102 Name String \\.\PhysicalDrive0 Serial Number String Z9AYCDL9 (Media) SME~Computer~Sg916682BF~M916682BF Kind PropertyId Media Device ObjectId SME~Computer~Sg916682BF Initialization Status StringId Healthy Is Missing bool false Is Mounted bool true Physical Sector Size uint32 4096 (1000h) Read-Only bool false Region Array array[1] = {SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0} Sector Count uint64 1953525168 (74706db0h) Sector Size uint32 512 (200h) Serial Number uint32 2439414463 (916682bfh) Size uint64 1000204886016 (e8e0db6000h) (Region) SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0 Kind PropertyId Region Extended Partition ObjectId ~ Initialization Status StringId Healthy Is Restricted bool false Media ObjectId SME~Computer~Sg916682BF~M916682BF Offset On Media uint64 0 Partition Array array[4] = {SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0~P2048, SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0~P1333248, SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0~P1595392, SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0~P1951471616} Sector Count uint64 1953525168 (74706db0h) Size uint64 1000204886016 (e8e0db6000h) Type StringId GPT (Partition) SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0~P2048 Kind PropertyId Partition Initialization Status StringId Healthy Is Active bool false Is Cylinder Aligned bool false Is Hidden bool false Is Logical bool false Offset On Media uint64 2048 (800h) Partition Data Start uint64 0 Partition Name String EFI system partition Partition Type StringId Unused or unknown Region ObjectId SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0 Sector Count uint64 1331200 (145000h) Volume Usage Type StringId EFI System (Partition) SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0~P1333248 Kind PropertyId Partition Initialization Status StringId Healthy Is Active bool false Is Cylinder Aligned bool false Is Hidden bool false Is Logical bool false Offset On Media uint64 1333248 (145800h) Partition Data Start uint64 0 Partition Name String Microsoft reserved partition Partition Type StringId Unused or unknown Region ObjectId SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0 Sector Count uint64 262144 (40000h) Volume Usage Type StringId Microsoft Reserved (Partition) SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0~P1595392 Kind PropertyId Partition Initialization Status StringId Healthy Is Active bool false Is Cylinder Aligned bool false Is Hidden bool false Is Logical bool false Offset On Media uint64 1595392 (185800h) Partition Data Start uint64 0 Partition Name String Basic data partition Partition Type StringId Unused or unknown Region ObjectId SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0 Sector Count uint64 1949876224 (7438c000h) Volume Usage Type StringId Basic Data (Partition) SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0~P1951471616 Kind PropertyId Partition Initialization Status StringId Healthy Is Active bool false Is Cylinder Aligned bool false Is Hidden bool false Is Logical bool false Offset On Media uint64 1951471616 (74511800h) Partition Data Start uint64 0 Partition Name String Partition Type StringId Unused or unknown Region ObjectId SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0 Sector Count uint64 2027520 (1ef000h) Volume Usage Type StringId Windows Recovery Environment (Disk Group) SME~Computer~BgM916682BFRegion-0 Kind PropertyId Disk Group Computer ObjectId SME~Computer Initialization Status StringId Healthy Region Array array[1] = {SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0} Segment Array array[6] = {SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-5, SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-1, SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-2, SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-3, SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-4, SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-6} Sub Type StringId Unknown Type StringId Basic Volume Array array[4] = {SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-1, SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-2, SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-3, SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-4} (Segment) SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-5 Kind PropertyId Segment Can Create Logical bool false Can Create Primary bool true Disk Group ObjectId SME~Computer~BgM916682BFRegion-0 Initialization Status StringId Healthy Is Allocated bool false Is Cylinder Aligned bool false Is Logical bool false Offset In Volume uint64 0 Offset On Media uint64 34 (22h) Partition ObjectId ~ Partition Type uint32 0 Partition Type Label StringId Unused or unknown Physical Sector Size uint32 4096 (1000h) Position in Volume uint32 0 Region ObjectId SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0 Sector Count uint64 2014 (7deh) Sector Size uint32 512 (200h) Size uint64 1031168 (fbc00h) Volume Replicant ObjectId ~ (Segment) SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-1 Kind PropertyId Segment Can Create Logical bool false Can Create Primary bool false Disk Group ObjectId SME~Computer~BgM916682BFRegion-0 Initialization Status StringId Healthy Is Allocated bool true Is Cylinder Aligned bool false Is Logical bool false Offset In Volume uint64 0 Offset On Media uint64 2048 (800h) Partition ObjectId SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0~P2048 Partition Type uint32 0 Partition Type Label StringId Unused or unknown Physical Sector Size uint32 4096 (1000h) Position in Volume uint32 0 Region ObjectId SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0 Sector Count uint64 1331200 (145000h) Sector Size uint32 512 (200h) Size uint64 681574400 (28a00000h) Volume Replicant ObjectId SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-1~R1 (Segment) SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-2 Kind PropertyId Segment Can Create Logical bool false Can Create Primary bool false Disk Group ObjectId SME~Computer~BgM916682BFRegion-0 Initialization Status StringId Healthy Is Allocated bool true Is Cylinder Aligned bool false Is Logical bool false Offset In Volume uint64 0 Offset On Media uint64 1333248 (145800h) Partition ObjectId SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0~P1333248 Partition Type uint32 0 Partition Type Label StringId Unused or unknown Physical Sector Size uint32 4096 (1000h) Position in Volume uint32 0 Region ObjectId SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0 Sector Count uint64 262144 (40000h) Sector Size uint32 512 (200h) Size uint64 134217728 (8000000h) Volume Replicant ObjectId SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-2~R1 (Segment) SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-3 Kind PropertyId Segment Can Create Logical bool false Can Create Primary bool false Disk Group ObjectId SME~Computer~BgM916682BFRegion-0 Initialization Status StringId Healthy Is Allocated bool true Is Cylinder Aligned bool false Is Logical bool false Offset In Volume uint64 0 Offset On Media uint64 1595392 (185800h) Partition ObjectId SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0~P1595392 Partition Type uint32 0 Partition Type Label StringId Unused or unknown Physical Sector Size uint32 4096 (1000h) Position in Volume uint32 0 Region ObjectId SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0 Sector Count uint64 1949876224 (7438c000h) Sector Size uint32 512 (200h) Size uint64 998336626688 (e871800000h) Volume Replicant ObjectId SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-3~R1 (Segment) SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-4 Kind PropertyId Segment Can Create Logical bool false Can Create Primary bool false Disk Group ObjectId SME~Computer~BgM916682BFRegion-0 Initialization Status StringId Healthy Is Allocated bool true Is Cylinder Aligned bool false Is Logical bool false Offset In Volume uint64 0 Offset On Media uint64 1951471616 (74511800h) Partition ObjectId SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0~P1951471616 Partition Type uint32 0 Partition Type Label StringId Unused or unknown Physical Sector Size uint32 4096 (1000h) Position in Volume uint32 0 Region ObjectId SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0 Sector Count uint64 2027520 (1ef000h) Sector Size uint32 512 (200h) Size uint64 1038090240 (3de00000h) Volume Replicant ObjectId SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-4~R1 (Segment) SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-6 Kind PropertyId Segment Can Create Logical bool false Can Create Primary bool true Disk Group ObjectId SME~Computer~BgM916682BFRegion-0 Initialization Status StringId Healthy Is Allocated bool false Is Cylinder Aligned bool false Is Logical bool false Offset In Volume uint64 0 Offset On Media uint64 1953499136 (74700800h) Partition ObjectId ~ Partition Type uint32 0 Partition Type Label StringId Unused or unknown Physical Sector Size uint32 4096 (1000h) Position in Volume uint32 0 Region ObjectId SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0 Sector Count uint64 25999 (658fh) Sector Size uint32 512 (200h) Size uint64 13311488 (cb1e00h) Volume Replicant ObjectId ~ (Volume) SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-1 Kind PropertyId Volume Disk Group ObjectId SME~Computer~BgM916682BFRegion-0 File System ObjectId SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-1~Fs1 Initialization Status StringId Healthy Installed Software Array array[1] = {SME~Computer~IsBootManager-EFIBootManager-NVRAM-VM916682BFRegion-0-1} Is Active bool false Is Dedupd bool false Is Hidden bool false Is Lockable bool true Is Mounted bool false Minimum Sotf Size uint64 268982272 (10085800h) Mount Points empty Mount state StringId Not Partition Oriented Type StringId FAT32 Physical Sector Size uint32 4096 (1000h) Read-Only bool false Sector Count uint64 1331200 (145000h) Sector Size uint32 512 (200h) Size uint64 681574400 (28a00000h) Uses Restricted Region bool false Volume Name String BasicDiskVolume-M916682BFRegion-0-1 Volume Replicant Array array[1] = {SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-1~R1} Volume Status StringId Healthy Volume Type StringId Simple Volume Usage Type StringId EFI System (Volume Replicant) SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-1~R1 Kind PropertyId Volume Replicant Initialization Status StringId Healthy Segment Array array[1] = {SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-1} Volume ObjectId SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-1 (File System) SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-1~Fs1 Kind PropertyId File System Cluster Count uint64 165376 (28600h) Cluster Size uint32 4096 (1000h) Creation Date and Time uint32 0 Encoding uint32 437 (1b5h) Free Bytes uint64 641785856 (2640e000h) Initialization Status StringId Healthy Is File Access Available bool true Is File System Encrypted bool false Label String ESP Last Modified Date and Time uint32 0 Sector Count uint64 1331200 (145000h) Sector Size uint32 512 (200h) Serial Number String 1257394777 Type StringId FAT32 Used Bytes uint64 39788544 (25f2000h) Version String 1.0 Volume ObjectId SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-1 (Volume) SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-2 Kind PropertyId Volume Disk Group ObjectId SME~Computer~BgM916682BFRegion-0 File System ObjectId ~ Initialization Status StringId Healthy Installed Software empty Is Active bool false Is Dedupd bool false Is Hidden bool false Is Lockable bool true Is Mounted bool false Minimum Sotf Size uint64 134217728 (8000000h) Mount Points empty Mount state StringId Not Partition Oriented Type StringId Unused or unknown Physical Sector Size uint32 4096 (1000h) Read-Only bool false Sector Count uint64 262144 (40000h) Sector Size uint32 512 (200h) Size uint64 134217728 (8000000h) Uses Restricted Region bool false Volume Name String BasicDiskVolume-M916682BFRegion-0-2 Volume Replicant Array array[1] = {SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-2~R1} Volume Status StringId Healthy Volume Type StringId Simple Volume Usage Type StringId Microsoft Reserved (Volume Replicant) SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-2~R1 Kind PropertyId Volume Replicant Initialization Status StringId Healthy Segment Array array[1] = {SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-2} Volume ObjectId SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-2 (Volume) SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-3 Kind PropertyId Volume Disk Group ObjectId SME~Computer~BgM916682BFRegion-0 File System ObjectId SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-3~Fs1 Initialization Status StringId Healthy Installed Software Array array[1] = {SME~Computer~IsInstalledOS-MicrosoftWindows10Client-SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-3~Fs1/Windows/} Is Active bool false Is Dedupd bool false Is Hidden bool false Is Lockable bool false Is Mounted bool true Minimum Sotf Size uint64 122360192512 (1c7d3c5e00h) Mount Points Array array[1] = {C:\} Mount state StringId Mounted Partition Oriented Type StringId NTFS Physical Sector Size uint32 4096 (1000h) Read-Only bool false Sector Count uint64 1949876224 (7438c000h) Sector Size uint32 512 (200h) Size uint64 998336626688 (e871800000h) Uses Restricted Region bool false Volume Name String BasicDiskVolume-M916682BFRegion-0-3 Volume Replicant Array array[1] = {SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-3~R1} Volume Status StringId Healthy Volume Type StringId Simple Volume Usage Type StringId Basic Data (Volume Replicant) SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-3~R1 Kind PropertyId Volume Replicant Initialization Status StringId Healthy Segment Array array[1] = {SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-3} Volume ObjectId SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-3 (File System) SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-3~Fs1 Kind PropertyId File System Cluster Count uint64 243734527 (e8717ffh) Cluster Size uint32 4096 (1000h) Creation Date and Time uint32 0 Encoding uint32 65001 (fde9h) Free Bytes uint64 938372468736 (da7b5b9000h) Initialization Status StringId Healthy Is File Access Available bool true Is File System Encrypted bool false Label String OS Last Modified Date and Time uint32 0 Sector Count uint64 1949876216 (7438bff8h) Sector Size uint32 512 (200h) Serial Number String 1144944838 Type StringId NTFS Used Bytes uint64 59964153856 (df6246000h) Version String 3.1 Volume ObjectId SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-3 (Volume) SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-4 Kind PropertyId Volume Disk Group ObjectId SME~Computer~BgM916682BFRegion-0 File System ObjectId SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-4~Fs1 Initialization Status StringId Healthy Installed Software Array array[1] = {SME~Computer~IsRecoveryEnvironment-WindowsRecoveryEnvironment-\\?\Volume{5004b27d-206f-4c88-b0c4-61b38d7e39df}/recovery/WindowsRE/boot.sdi} Is Active bool false Is Dedupd bool false Is Hidden bool false Is Lockable bool true Is Mounted bool false Minimum Sotf Size uint64 549322240 (20bdfe00h) Mount Points empty Mount state StringId Not Partition Oriented Type StringId NTFS Physical Sector Size uint32 4096 (1000h) Read-Only bool false Sector Count uint64 2027520 (1ef000h) Sector Size uint32 512 (200h) Size uint64 1038090240 (3de00000h) Uses Restricted Region bool false Volume Name String BasicDiskVolume-M916682BFRegion-0-4 Volume Replicant Array array[1] = {SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-4~R1} Volume Status StringId Healthy Volume Type StringId Simple Volume Usage Type StringId Windows Recovery Environment (Volume Replicant) SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-4~R1 Kind PropertyId Volume Replicant Initialization Status StringId Healthy Segment Array array[1] = {SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-4} Volume ObjectId SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-4 (File System) SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-4~Fs1 Kind PropertyId File System Cluster Count uint64 253439 (3ddffh) Cluster Size uint32 4096 (1000h) Creation Date and Time uint32 0 Encoding uint32 65001 (fde9h) Free Bytes uint64 553644032 (20fff000h) Initialization Status StringId Healthy Is File Access Available bool true Is File System Encrypted bool false Label String WINRETOOLS Last Modified Date and Time uint32 0 Sector Count uint64 2027512 (1eeff8h) Sector Size uint32 512 (200h) Serial Number String 5383651791027221189 Type StringId NTFS Used Bytes uint64 484442112 (1ce00000h) Version String 3.1 Volume ObjectId SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-4 (Installed Software) SME~Computer~IsInstalledOS-MicrosoftWindows10Client-SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-3~Fs1/Windows/ Kind PropertyId Installed Software Computer ObjectId SME~Computer Initialization Status StringId Healthy Location String SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-3~Fs1/Windows/ Sub Type StringId Microsoft Windows 10 Client Type StringId Installed OS Volume Array array[1] = {SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-3} (Installed Software) SME~Computer~IsBootManager-EFIBootManager-NVRAM-VM916682BFRegion-0-1 Kind PropertyId Installed Software Computer ObjectId SME~Computer Initialization Status StringId Healthy Location String NVRAM-VM916682BFRegion-0-1 Sub Type StringId EFI Boot Manager Type StringId Boot Manager Volume Array array[1] = {SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-1} (Installed Software) SME~Computer~IsRecoveryEnvironment-WindowsRecoveryEnvironment-\\?\Volume{5004b27d-206f-4c88-b0c4-61b38d7e39df}/recovery/WindowsRE/boot.sdi Kind PropertyId Installed Software Computer ObjectId SME~Computer Initialization Status StringId Healthy Location String \\?\Volume{5004b27d-206f-4c88-b0c4-61b38d7e39df}/recovery/WindowsRE/boot.sdi Sub Type StringId Windows Recovery Environment Type StringId Recovery Environment Volume Array array[1] = {SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-4} ---------------------------------------------------------------------------------------------------- Debug Log Contents * 2020-08-14T21:57:40.4260000Z Main Thread(1680) ---------------------------------------------------------------------------------------------------- Starting Application Debug Log * 2020-08-14T21:57:40.4860000Z Main Thread(1680) Context: PROCESS : ERR Cpu.cpp(233) Function: CPU::QueryCpuInfo mSystemCPUs(6) should be a multiple of mLogicalProcessorsPerPackage(16) * 2020-08-14T21:57:40.5030000Z DumpDebug(11832) Context: PROCESS : THREAD New Thread is running at priority 0 * 2020-08-14T21:57:40.5040000Z Main Thread(1680) Context: BASE : INFO OsVersion.cpp(2651) Function: OsVersion::GetExchangeInfo LoadHive ():Loading registry hive file:///C:/Windows/System32/config/SOFTWARE * 2020-08-14T21:57:40.5040000Z VdsLoader(11980) Context: PROCESS : THREAD New Thread is running at priority 0 * 2020-08-14T21:57:42.0870000Z Main Thread(1680) Context: SME : INFO SmeCommon.cpp(492) Function: SmeCommon::Initialize !--+============================== Starting Engine Initialization ================================== * 2020-08-14T21:57:42.1050000Z Main Thread(1680) Context: SME : INFO WindowsComputer.cpp(2310) Function: WindowsComputer::DetectBootFirmwareType Setting the system boot type to UEFI or BIOS * 2020-08-14T21:57:42.1670000Z Main Thread(1680) Context: BASE : INFO WMISession.cpp(179) Function: WMISession::Connect Connected to \\.\root\CIMV2\Security\MicrosoftVolumeEncryption * 2020-08-14T21:57:42.2490000Z Main Thread(1680) Context: SME : INFO WindowsVolume.cpp(713) Function: WindowsVolume::IsVolumeBitLocked ProtectionStatus for volume \\?\Volume{dea00cc3-4fc6-4202-9040-915f8058be84}\ is :0 * 2020-08-14T21:57:42.2490000Z Main Thread(1680) Context: BASE : INFO WMISession.cpp(188) Function: WMISession::Disconnect Disconnected from \\.\root\CIMV2\Security\MicrosoftVolumeEncryption * 2020-08-14T21:57:42.2660000Z Main Thread(1680) Context: BASE : INFO WMISession.cpp(179) Function: WMISession::Connect Connected to \\.\root\CIMV2\Security\MicrosoftVolumeEncryption * 2020-08-14T21:57:42.2710000Z Main Thread(1680) Context: BASE : INFO WMISession.cpp(188) Function: WMISession::Disconnect Disconnected from \\.\root\CIMV2\Security\MicrosoftVolumeEncryption * 2020-08-14T21:57:42.2820000Z Main Thread(1680) Context: BASE : INFO WMISession.cpp(179) Function: WMISession::Connect Connected to \\.\root\CIMV2\Security\MicrosoftVolumeEncryption * 2020-08-14T21:57:42.2870000Z Main Thread(1680) Context: BASE : INFO WMISession.cpp(188) Function: WMISession::Disconnect Disconnected from \\.\root\CIMV2\Security\MicrosoftVolumeEncryption * 2020-08-14T21:57:42.3020000Z Main Thread(1680) Windows Mount Point Map -------------------------------- [DRIVE_FIXED ] C:\ --> \\?\Volume{dea00cc3-4fc6-4202-9040-915f8058be84}\ --> [DRIVE_FIXED ] --> \\?\Volume{5004b27d-206f-4c88-b0c4-61b38d7e39df}\ --> [DRIVE_FIXED ] --> \\?\Volume{b119523d-7deb-476a-8b19-6727574ed480}\ --> * 2020-08-14T21:57:42.3020000Z Main Thread(1680) Context: SNAPSHOT : INFO WindowsComputer.cpp(1230) Function: WindowsComputer::AddPageFileInfo pagefile name=?:\pagefile.sys * 2020-08-14T21:57:42.3020000Z Main Thread(1680) Context: BASE : INFO OsVersion.cpp(2651) Function: OsVersion::GetExchangeInfo LoadHive ():Loading registry hive file:///C:/Windows/System32/config/SOFTWARE * 2020-08-14T21:57:42.3080000Z Main Thread(1680) Context: DEVICE : INFO WindowsDeviceDiscovery.cpp(583) Function: WindowsDeviceDiscovery::QueryDisks Detected machine type as: 1 * 2020-08-14T21:57:42.3020000Z Main Thread(1680) Context: DEVICE : INFO WindowsDeviceDiscovery.cpp(549) Function: WindowsDeviceDiscovery::QueryDisks -------------------------------- Initializing Windows VDS Interface -------------------------------- Disk Name: \\?\CdRom0 Address: Port0Path0Target2Lun0 Friendly Name: HL-DT-ST DVD+-RW GU90N Adaptor Name: Intel(R) Chipset SATA/PCIe RST Premium Controller Device Path: \\?\scsi#cdrom&ven_hl-dt-st&prod_dvd+-rw_gu90n#4&2ea3f521&0&000200#{53f56308-b6bf-11d0-94f2-00a0c91efb8b} VDS Guid: b9423540-bd3a-4db0-b474-3633412b430e Status: No Media Reserve Mode: VDS_LRM_NONE Health: VDS_H_HEALTHY Device Type: FILE_DEVICE_DVD Media Type: Unknown Size: 0 Bytes Per Sector: 0 Sectors Per Track: 0 Tracks Per Cylinder: 0 Flags: 0 Bus Type: VDSBusTypeRAID Partition Style: VDS_PST_UNKNOWN Disk Name: \\?\PhysicalDrive0 Address: Port0Path0Target0Lun0 Friendly Name: ST1000DM010-2EP102 Adaptor Name: Intel(R) Chipset SATA/PCIe RST Premium Controller Device Path: \\?\scsi#disk&ven_st1000dm&prod_010-2ep102#4&2ea3f521&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b} VDS Guid: cd527098-97ee-46d5-aa51-f8784fab7888 Status: Online Reserve Mode: VDS_LRM_NONE Health: VDS_H_HEALTHY Device Type: FILE_DEVICE_DISK Media Type: FixedMedia Size: 1000204886016 Bytes Per Sector: 512 Sectors Per Track: 63 Tracks Per Cylinder: 255 Flags: 23424 Bus Type: VDSBusTypeRAID Partition Style: VDS_PST_GPT Disk Guid: b21d82f5-b52d-461c-98b1-861f9ebfb762 ------------------------------- Uninitializing Windows VDS Interface ------------------------------- * 2020-08-14T21:57:42.4340000Z Main Thread(1680) Device constructor: unique id: Sg916682BF name: \\.\PhysicalDrive0 * 2020-08-14T21:57:42.4340000Z CollectQueryData(PhyDrv0)(11992) Context: PROCESS : THREAD New Thread is running at priority 0 * 2020-08-14T21:57:42.4340000Z CollectQueryData(PhyDrv_Total)(10520) Context: PROCESS : THREAD New Thread is running at priority 0 * 2020-08-14T21:57:42.4340000Z ThrottleRunner(10548) Context: PROCESS : THREAD New Thread is running at priority 2 * 2020-08-14T21:57:42.4350000Z Main Thread(1680) Context: DEVICE : INFO WindowsDevice.cpp(1210) Function: WindowsDevice::CheckKernelDeviceName The kernel device name for \\.\PhysicalDrive0 is \Device\Harddisk0\DR0. * 2020-08-14T21:57:42.4350000Z Main Thread(1680) Context: DEVICE : INFO WindowsDevice.cpp(2818) Function: WindowsDevice::SendATACommand2000 IOCTL_SCSI_RESCAN_BUS call to device \\.\PhysicalDrive0 failed (Not a SCSI device). * 2020-08-14T21:57:42.4350000Z Main Thread(1680) Context: DEVICE : INFO Device.cpp(823) Function: Device::GetIdentifyDeviceInfo IDENTIFY DEVICE - sending ATA_COMMAND_IDENTIFY failed on \\.\PhysicalDrive0 (Not an ATA device). * 2020-08-14T21:57:42.4340000Z Main Thread(1680) Context: DEVICE : INFO WindowsDevice.cpp(785) Function: WindowsDevice::GetDeviceCharacteristics ----------------------------- Entering GetDeviceCharacteristics(v1.5) ------------------------------ GetDriveGeometry succeeded for \\.\PhysicalDrive0. Cyls: 121601 Hds: 255 Scts: 63 BPS: 512 BPPS: 4096. Media Type: Fixed. Bus Type: RAID. Calling DeviceIoControl(IOCTL_DISK_GET_PARTITION_INFO). IOCTL_DISK_GET_PARTITION_INFO returned 1953525168 sector(s). maxSectorCount is now 1953525168 sector(s). Calling DeviceIoControl (IOCTL_SCSI_GET_ADDRESS). Found serial number from calling GetSmartDriveData: Z9AYCDL9. Location: IDE Primary Master. Calling CanChangeDeviceAddressableSectors. Model Name: ST1000DM010-2EP102 of device \\.\PhysicalDrive0. The NT Drive Signature for \\.\PhysicalDrive0 is 2439414463. Creating a media for \\.\PhysicalDrive0, with 2439414463 as the NT Drive Signature. --------------------------------- Leaving GetDeviceCharacteristics --------------------------------- * 2020-08-14T21:57:42.4380000Z Main Thread(1680) Context: DEVICE : INFO WindowsDevice.cpp(3052) Function: WindowsDevice::CheckGoBackEnabled GoBack is not active on device \\.\PhysicalDrive0 * 2020-08-14T21:57:42.4610000Z Main Thread(1680) Context: SME : INFO MbrRegion.cpp(3956) Function: MbrRegion::GetDriveLayout After Direct GetDriveLayout Disk : 0 Sector : 0 NT Signature : 916682BF # Type Boot SCyl SHead SSector ECyl EHead ESector Sector Before Sector Count - ---- ---- ------------------ ------------------ ------------- ------------ 0 EE 00 0 0 2 768 254 63 1 4294967295 1 00 00 0 0 0 0 0 0 0 0 2 00 00 0 0 0 0 0 0 0 0 3 00 00 0 0 0 0 0 0 0 0 * 2020-08-14T21:57:42.4610000Z Main Thread(1680) Context: SME : INFO WindowsDriveLayout.cpp(189) Function: WindowsComputer::GetDriveLayout After GetDriveLayout DriveLayout for drive: B21D82F5 PartitionStyle : GPT PartitionCount : 4 DiskId : b21d82f5-b52d-461c-98b1-861f9ebfb762 StartingUsableOffset : 4400 UsableLength : E8E0DADA00 MaxPartitionCount : 80 Part StartingOffset PartitionLength PartitionTypeGuid UniquePartitionGuid Attributes Name ---- ----------------- ------------------ ------------------------------------ ------------------------------------ ---------------- ---------------------------- 1 100000 28A00000 c12a7328-f81f-11d2-ba4b-00a0c93ec93b b119523d-7deb-476a-8b19-6727574ed480 8000000000000000 EFI system partition 2 28B00000 8000000 e3c9e316-0b5c-4db8-817d-f92df00215ae 8de48e0e-cbfc-4226-9d31-47fc6abb4ed5 8000000000000000 Microsoft reserved partition 3 30B00000 E871800000 ebd0a0a2-b9e5-4433-87c0-68b6b72699c7 dea00cc3-4fc6-4202-9040-915f8058be84 0 Basic data partition 4 E8A2300000 3DE00000 de94bba4-06d1-4d40-a16a-bfd50179d6ac 5004b27d-206f-4c88-b0c4-61b38d7e39df 8000000000000001 * 2020-08-14T21:57:42.4610000Z Main Thread(1680) Context: SME : INFO RegionFactory.cpp(94) Function: RegionFactory::Instantiate Region for SME~Computer~Sg916682BF~M916682BF is SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0 * 2020-08-14T21:57:42.4620000Z Main Thread(1680) Context: SME : INFO WindowsVolumeHandle.cpp(358) Function: WindowsVolumeHandle::GetHandle WindowsVolume: \\?\Volume{b119523d-7deb-476a-8b19-6727574ed480} opened with handle 0000000000000634 * 2020-08-14T21:57:42.4620000Z Main Thread(1680) Context: VOLUME_MGT : INFO Volume.cpp(288) Function: Volume::Volume Creating VM916682BFRegion-0-1 in BgM916682BFRegion-0 from disk 0 * 2020-08-14T21:57:42.4940000Z Main Thread(1680) Context: RESULT_CLASS : RESULT NtfsFileSystem.cpp(551) Function: NtfsFileSystem::InitImplementationObject Error SME_ERROR_NO_NTFS_FILESYSTEM (E0BB01A3): No recognizable NTFS file system found. (UMI:V-*-187-419) * 2020-08-14T21:57:42.4940000Z Main Thread(1680) Context: RESULT_CLASS : RESULT Error ERROR_ERRORS_EXIST (EBAB0005): Errors exist. (UMI:V-*-2987-5) * 2020-08-14T21:57:42.4940000Z Main Thread(1680) Context: RESULT_CLASS : RESULT Error ERROR_ERRORS_EXIST (EBAB0005): Errors exist. (UMI:V-*-2987-5) * 2020-08-14T21:57:42.4940000Z Main Thread(1680) Context: RESULT_CLASS : RESULT Error ERROR_ERRORS_EXIST (EBAB0005): Errors exist. (UMI:V-*-2987-5) * 2020-08-14T21:57:42.5270000Z Main Thread(1680) Context: VOLUME_MGT : INFO Volume.cpp(397) Function: Volume::Volume Finished creating VM916682BFRegion-0-1 in BgM916682BFRegion-0 from disk 0 * 2020-08-14T21:57:42.5270000Z Main Thread(1680) Context: VOLUME_MGT : INFO Volume.cpp(288) Function: Volume::Volume Creating VM916682BFRegion-0-2 in BgM916682BFRegion-0 from disk 0 * 2020-08-14T21:57:42.5390000Z Main Thread(1680) Context: RESULT_CLASS : RESULT NtfsFileSystem.cpp(551) Function: NtfsFileSystem::InitImplementationObject Error SME_ERROR_NO_NTFS_FILESYSTEM (E0BB01A3): No recognizable NTFS file system found. (UMI:V-*-187-419) * 2020-08-14T21:57:42.5390000Z Main Thread(1680) Context: RESULT_CLASS : RESULT Error ERROR_ERRORS_EXIST (EBAB0005): Errors exist. (UMI:V-*-2987-5) * 2020-08-14T21:57:42.5390000Z Main Thread(1680) Context: RESULT_CLASS : RESULT Error ERROR_ERRORS_EXIST (EBAB0005): Errors exist. (UMI:V-*-2987-5) * 2020-08-14T21:57:42.5390000Z Main Thread(1680) Context: RESULT_CLASS : RESULT Error ERROR_ERRORS_EXIST (EBAB0005): Errors exist. (UMI:V-*-2987-5) * 2020-08-14T21:57:42.5390000Z Main Thread(1680) Context: RESULT_CLASS : RESULT Error ERROR_ERRORS_EXIST (EBAB0005): Errors exist. (UMI:V-*-2987-5) * 2020-08-14T21:57:42.5430000Z Main Thread(1680) Context: VOLUME_MGT : INFO Volume.cpp(397) Function: Volume::Volume Finished creating VM916682BFRegion-0-2 in BgM916682BFRegion-0 from disk 0 * 2020-08-14T21:57:42.5430000Z Main Thread(1680) Context: SME : INFO WindowsVolumeHandle.cpp(358) Function: WindowsVolumeHandle::GetHandle WindowsVolume: \\?\Volume{dea00cc3-4fc6-4202-9040-915f8058be84} opened with handle 0000000000000680 * 2020-08-14T21:57:42.5430000Z Main Thread(1680) Context: VOLUME_MGT : INFO Volume.cpp(288) Function: Volume::Volume Creating VM916682BFRegion-0-3 in BgM916682BFRegion-0 from disk 0 * 2020-08-14T21:57:45.9350000Z Main Thread(1680) Context: VOLUME_MGT : INFO Volume.cpp(397) Function: Volume::Volume Finished creating VM916682BFRegion-0-3 in BgM916682BFRegion-0 from disk 0 * 2020-08-14T21:57:45.9352339Z Main Thread(1680) Context: SME : INFO WindowsVolumeHandle.cpp(358) Function: WindowsVolumeHandle::GetHandle WindowsVolume: \\?\Volume{5004b27d-206f-4c88-b0c4-61b38d7e39df} opened with handle 0000000000000684 * 2020-08-14T21:57:45.9352804Z Main Thread(1680) Context: VOLUME_MGT : INFO Volume.cpp(288) Function: Volume::Volume Creating VM916682BFRegion-0-4 in BgM916682BFRegion-0 from disk 0 * 2020-08-14T21:57:46.0152399Z Main Thread(1680) Context: VOLUME_MGT : INFO Volume.cpp(397) Function: Volume::Volume Finished creating VM916682BFRegion-0-4 in BgM916682BFRegion-0 from disk 0 * 2020-08-14T21:57:46.0591230Z Main Thread(1680) Context: BASE : INFO OsVersion.cpp(2651) Function: OsVersion::GetExchangeInfo LoadHive ():Loading registry hive file:///C:/Windows/System32/config/SOFTWARE * 2020-08-14T21:57:46.0905036Z Main Thread(1680) Context: RESULT_CLASS : RESULT Frs.cpp(2582) Function: NTFS_FRS::GetShortName Error ERR_ATTR_NOT_PRESENT (EA3905ED): Required file attribute missing. (UMI:V-*-2617-1517) * 2020-08-14T21:57:46.0913096Z Main Thread(1680) Context: RESULT_CLASS : RESULT Frs.cpp(2582) Function: NTFS_FRS::GetShortName Error ERR_ATTR_NOT_PRESENT (EA3905ED): Required file attribute missing. (UMI:V-*-2617-1517) * 2020-08-14T21:57:46.0914610Z Main Thread(1680) Context: RESULT_CLASS : RESULT Frs.cpp(2582) Function: NTFS_FRS::GetShortName Error ERR_ATTR_NOT_PRESENT (EA3905ED): Required file attribute missing. (UMI:V-*-2617-1517) * 2020-08-14T21:57:46.0926784Z Main Thread(1680) Context: RESULT_CLASS : RESULT Frs.cpp(2582) Function: NTFS_FRS::GetShortName Error ERR_ATTR_NOT_PRESENT (EA3905ED): Required file attribute missing. (UMI:V-*-2617-1517) * 2020-08-14T21:57:46.2199910Z Main Thread(1680) Context: SNAPSHOT : INFO WindowsSnapshot.cpp(1753) Function: WindowsComputer::IsVSSSnapshotPossible Volume: \\?\Volume{5004b27d-206f-4c88-b0c4-61b38d7e39df}\ . Total Size = 1038090240, free size = 549449728 * 2020-08-14T21:57:46.2200874Z Main Thread(1680) Context: SNAPSHOT : INFO WindowsSnapshot.cpp(1753) Function: WindowsComputer::IsVSSSnapshotPossible Volume: \\?\Volume{b119523d-7deb-476a-8b19-6727574ed480}\ . Total Size = 681574400, free size = 641785856 * 2020-08-14T21:57:46.2201416Z Main Thread(1680) Context: SME : INFO SmeCommon.cpp(510) Function: SmeCommon::Initialize --------------------------------------- DiscoRoot Initialize --------------------------------------- * 2020-08-14T21:57:46.2229307Z Main Thread(1680) Context: NTFS : INFO NtfsFs.cpp(710) Function: NtfsFs::GetVolBitmap Reading NTFS Bitmap * 2020-08-14T21:57:46.2249772Z Main Thread(1680) Context: TIMING : INFO SmeCommon::Initialize (Pre-Apply) Result: Success. CPU Speed: 3000MHz TimingData App Total : 1 5.932 Section Total : 1 5.932 Path::LinkFileAccessor : 247 0.063 0.000255 Path::GetString ... Segmentize : 39 0.000 0.000000 Path::GetString : 116 0.000 0.000001 OSFileAccessor::Parse : 441 0.009 0.000021 OSFileAccessor::NormalizeOsPath : 35 0.004 0.000102 GetOnDiskPathName : 35 0.001 0.000032 LocallyMappedPathToUNCPath : 35 0.001 0.000037 OSFileAccessor::IsRemovableMedia : 35 0.006 0.000160 Computer Initialization : 1 3.735 Init All Devices : 1 0.159 Init Windows Devices : 1 0.159 ThrottledObject:\\.\PhysicalDrive0 : 18 0.000 0.000000 Init Windows device \\.\PhysicalDrive0 : 1 0.027 ThrottleRunner : 35 0.000 0.000003 SB Cache Init : 10 0.000 0.000001 SB Cache Read : 8 0.025 0.003171 NT SP:PhyDrv0:Read : 15 0.017 0.001136 Init all diskgroups : 1 3.555 Init Dynamic diskgroups : 1 0.000 IsLdm(M916682BFRegion-0) : 1 0.000 Init BasicDiskGroup BgM916682BFRegion-0 : 1 3.555 Bitmap::Constructor : 28 0.000 0.000000 Bitmap::Destructor : 4 0.000 0.000003 Bitmap::Destroy : 9 0.000 0.000002 Bitmap::Init : 5 0.000 0.000007 Bitmap::Create : 6 0.000 0.000006 Bitmap::Create2 : 1 0.000 Bitmap::OpenForWrite : 1 0.000 Bitmap::Write : 1 0.000 Bitmap::Close : 10 0.000 0.000000 Bitmap::Set : 51 0.000 0.000000 Bitmap::Clear : 2 0.000 0.000014 Bitmap::GetPrevSet : 1 0.000 Bitmap::GetSetCount3 : 2 0.000 0.000001 Bitmap::GetClearCount3 : 1 0.000 Bitmap::Operator= : 4 0.000 0.000009 Init Volume VM916682BFRegion-0-1 : 1 0.066 VolumeSP \\?\Volume{b119523d-7deb-476a-8b19-6727574ed480}:Read: 33 0.112 0.003399 SB User Read : 68 0.081 0.001190 SB Cache Init : 84 0.000 0.000000 SB Cache Read : 33 0.112 0.003399 FSFactory::Create(1) BasicDiskVolume-M916682BFRegion-0-1 : 1 0.034 DG::GenerateMetaData BasicDiskVolume-M916682BFRegion-0-1 : 1 0.000 SB User Read : 11 0.003 0.000281 SB Cache Init : 19 0.000 0.000001 SB Cache Read : 10 0.014 0.001362 Init Volume VM916682BFRegion-0-2 : 1 0.016 FSFactory::Create(1) BasicDiskVolume-M916682BFRegion-0-2 : 1 0.005 DG::GenerateMetaData BasicDiskVolume-M916682BFRegion-0-2 : 1 0.000 Init Volume VM916682BFRegion-0-3 : 1 3.392 VolumeSP \\?\Volume{dea00cc3-4fc6-4202-9040-915f8058be84}:Read: 5 3.392 0.678423 SB Cache Init : 6 0.000 0.000001 SB Cache Read : 5 3.392 0.678423 FSFactory::Create(1) BasicDiskVolume-M916682BFRegion-0-3 : 1 0.000 DG::GenerateMetaData BasicDiskVolume-M916682BFRegion-0-3 : 1 0.000 Init Volume VM916682BFRegion-0-4 : 1 0.080 VolumeSP \\?\Volume{5004b27d-206f-4c88-b0c4-61b38d7e39df}:Read: 17 0.112 0.006617 SB User Read : 23 0.054 0.002341 SB Cache Init : 29 0.000 0.000001 SB Cache Read : 17 0.113 0.006618 FSFactory::Create(1) BasicDiskVolume-M916682BFRegion-0-4 : 1 0.021 DG::GenerateMetaData BasicDiskVolume-M916682BFRegion-0-4 : 1 0.000 Enumerate Snapshot Devices : 1 0.022 Init InstalledSoftwares : 1 0.183 File Open: fstab : 1 0.000 sme init : 1 0.005 * 2020-08-14T21:57:46.2254539Z Main Thread(1680) Context: SME : INFO Partition Info: Computer: Brian-PC DiskGroup: SME~Computer~BgM916682BFRegion-0 (Basic): 932 GB DL A L FileSys Label Clust FS Size FS Used DN StartSector EndSector PT Layout Rep FS Serial Number Segment Name Volume Name === = = ======= ==================== ===== ======= ======= == ============= ============= == ======== === ==================== ========================= ========================= P 1007 KB 0 34 2048 SM916682BFRegion-0-5 - P FAT32 ESP 4096 650 MB 37.9 MB 0 2048 1333248 00 Simple 1257394777 SM916682BFRegion-0-1 VM916682BFRegion-0-1 - P NONE 128 MB 0 1333248 1595392 00 Simple SM916682BFRegion-0-2 VM916682BFRegion-0-2 C: P NTFS OS 4096 930 GB 55.8 GB 0 1595392 1951471616 00 Simple 1144944838 SM916682BFRegion-0-3 VM916682BFRegion-0-3 - P NTFS WINRETOOLS 4096 990 MB 462 MB 0 1951471616 1953499136 00 Simple 5383651791027221189 SM916682BFRegion-0-4 VM916682BFRegion-0-4 P 12.7 MB 0 1953499136 1953525135 SM916682BFRegion-0-6 Installed Software: Installed OS : Microsoft Windows 10 Client: SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-3~Fs1/Windows/ Boot Manager : EFI Boot Manager : NVRAM-VM916682BFRegion-0-1 Recovery Environment : Windows Recovery Environment: \\?\Volume{5004b27d-206f-4c88-b0c4-61b38d7e39df}/recovery/WindowsRE/boot.sdi Known Threads: Main Thread(1680) CollectQueryData(PhyDrv_Total)(10520) ThrottleRunner(10548) DumpDebug(11832) VdsLoader(11980) CollectQueryData(PhyDrv0)(11992) * 2020-08-14T21:57:46.2250193Z Main Thread(1680) Context: SME : INFO SmeCommon.cpp(178) Function: DumpSystem ================================ Object Mappings - ObjectId/Generic ================================ Computer: /Computer#0 SME~Computer Device: /Computer#0/Device#0 SME~Computer~Sg916682BF Media: /Computer#0/Device#0/Media#0 SME~Computer~Sg916682BF~M916682BF Region (GPT): /Computer#0/Device#0/Media#0/Region#0 SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0 Partition: /Computer#0/Device#0/Media#0/Region#0/Partition#0 SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0~P2048 Partition: /Computer#0/Device#0/Media#0/Region#0/Partition#1 SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0~P1333248 Partition: /Computer#0/Device#0/Media#0/Region#0/Partition#2 SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0~P1595392 Partition: /Computer#0/Device#0/Media#0/Region#0/Partition#3 SME~Computer~Sg916682BF~M916682BF~M916682BFRegion-0~P1951471616 Disk Group (Basic): /Computer#0/Disk Group#0 SME~Computer~BgM916682BFRegion-0 Segment: /Computer#0/Disk Group#0/Segment#0 SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-5 Segment: /Computer#0/Disk Group#0/Segment#1 SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-1 Segment: /Computer#0/Disk Group#0/Segment#2 SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-2 Segment: /Computer#0/Disk Group#0/Segment#3 SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-3 Segment: /Computer#0/Disk Group#0/Segment#4 SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-4 Segment: /Computer#0/Disk Group#0/Segment#5 SME~Computer~BgM916682BFRegion-0~SM916682BFRegion-0-6 Volume: /Computer#0/Disk Group#0/Volume#0 SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-1 Volume Replicant: /Computer#0/Disk Group#0/Volume#0/Volume Replicant#0 SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-1~R1 File System (FAT32): /Computer#0/Disk Group#0/Volume#0/File System#0 SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-1~Fs1 Volume: /Computer#0/Disk Group#0/Volume#1 SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-2 Volume Replicant: /Computer#0/Disk Group#0/Volume#1/Volume Replicant#0 SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-2~R1 Volume: /Computer#0/Disk Group#0/Volume#2 SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-3 Volume Replicant: /Computer#0/Disk Group#0/Volume#2/Volume Replicant#0 SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-3~R1 File System (NTFS): /Computer#0/Disk Group#0/Volume#2/File System#0 SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-3~Fs1 Volume: /Computer#0/Disk Group#0/Volume#3 SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-4 Volume Replicant: /Computer#0/Disk Group#0/Volume#3/Volume Replicant#0 SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-4~R1 File System (NTFS): /Computer#0/Disk Group#0/Volume#3/File System#0 SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-4~Fs1 Installed Software (Installed OS): /Computer#0/Installed Software#0 SME~Computer~IsInstalledOS-MicrosoftWindows10Client-SME~Computer~BgM916682BFRegion-0~VM916682BFRegion-0-3~Fs1/Windows/ Installed Software (Boot Manager): /Computer#0/Installed Software#1 SME~Computer~IsBootManager-EFIBootManager-NVRAM-VM916682BFRegion-0-1 Installed Software (Recovery Environment): /Computer#0/Installed Software#2 SME~Computer~IsRecoveryEnvironment-WindowsRecoveryEnvironment-\\?\Volume{5004b27d-206f-4c88-b0c4-61b38d7e39df}/recovery/WindowsRE/boot.sdi * 2020-08-14T21:57:46.2256311Z Main Thread(1680) Context: SME : INFO SmeCommon.cpp(543) Function: SmeCommon::Initialize !--------------------------------- Finished Engine Initialization ---------------------------------- * 2020-08-14T21:57:46.2348686Z Main Thread(1680) Context: PROCESS : THREAD Thread.cpp(812) Function: BaseProcess::WaitForThread Waiting for thread "VdsLoader(11980)" to exit * 2020-08-14T21:57:46.2349126Z VdsLoader(11980) Context: PROCESS : THREAD Thread is exiting with code 0 * 2020-08-14T21:57:46.2351417Z Main Thread(1680) Context: PROCESS : THREAD Thread.cpp(759) Function: BaseProcess::WaitForThread Waiting for thread "DumpDebug(11832)" to exit with timeout 1000 * 2020-08-14T21:57:46.2351921Z DumpDebug(11832) Context: PROCESS : THREAD Thread is exiting with code 0 * 2020-08-14T21:57:46.2353555Z Main Thread(1680) Context: SECTOR_BUFFER : INFO WindowsVolumeHandle.cpp(334) Function: WindowsVolumeHandle::ClosePlatformHandle WindowsVolumeHandle::CloseWin32Handle(0000000000000680) succeeded * 2020-08-14T21:57:46.2353799Z Main Thread(1680) Context: SME : INFO WindowsVolumeHandle.cpp(114) Function: WindowsVolumeHandle::~WindowsVolumeHandle WindowsVolumeHandle: \\?\Volume{dea00cc3-4fc6-4202-9040-915f8058be84} closed * 2020-08-14T21:57:46.2354094Z Main Thread(1680) Context: SECTOR_BUFFER : INFO WindowsVolumeHandle.cpp(334) Function: WindowsVolumeHandle::ClosePlatformHandle WindowsVolumeHandle::CloseWin32Handle(0000000000000684) succeeded * 2020-08-14T21:57:46.2354243Z Main Thread(1680) Context: SME : INFO WindowsVolumeHandle.cpp(114) Function: WindowsVolumeHandle::~WindowsVolumeHandle WindowsVolumeHandle: \\?\Volume{5004b27d-206f-4c88-b0c4-61b38d7e39df} closed * 2020-08-14T21:57:46.2354498Z Main Thread(1680) Context: SECTOR_BUFFER : INFO WindowsVolumeHandle.cpp(334) Function: WindowsVolumeHandle::ClosePlatformHandle WindowsVolumeHandle::CloseWin32Handle(0000000000000634) succeeded * 2020-08-14T21:57:46.2354656Z Main Thread(1680) Context: SME : INFO WindowsVolumeHandle.cpp(114) Function: WindowsVolumeHandle::~WindowsVolumeHandle WindowsVolumeHandle: \\?\Volume{b119523d-7deb-476a-8b19-6727574ed480} closed * 2020-08-14T21:57:46.2354897Z Main Thread(1680) Bitmap Memory Usage (BasicDiskVolume-M916682BFRegion-0-4): Volume Bitmap: 2610 MFT Bitmap: 0 All Bitmaps: 2610 * 2020-08-14T21:57:46.2359043Z Main Thread(1680) Device destructor: unique id: Sg916682BF name: \\.\PhysicalDrive0 * 2020-08-14T21:57:46.2359936Z Main Thread(1680) Context: PROCESS : THREAD Thread.cpp(721) Function: BaseProcess::WaitForThread Waiting for thread "CollectQueryData(PhyDrv0)(11992)" to exit * 2020-08-14T21:57:46.2360293Z CollectQueryData(PhyDrv0)(11992) Context: PROCESS : THREAD Thread is exiting with code 0 * 2020-08-14T21:57:46.2361363Z Main Thread(1680) Context: PROCESS : THREAD Thread.cpp(721) Function: BaseProcess::WaitForThread Waiting for thread "CollectQueryData(PhyDrv_Total)(10520)" to exit * 2020-08-14T21:57:46.2361602Z CollectQueryData(PhyDrv_Total)(10520) Context: PROCESS : THREAD Thread is exiting with code 0 * 2020-08-14T21:57:46.2362594Z Main Thread(1680) Context: PROCESS : THREAD Thread.cpp(721) Function: BaseProcess::WaitForThread Waiting for thread "ThrottleRunner(10548)" to exit * 2020-08-14T21:57:46.2395468Z ThrottleRunner(10548) Context: PROCESS : THREAD Thread is exiting with code 0