********************************************************* Initialize plugin manager Create log manager ... Create memory manager ... Load well-known plugins ... ********************************************************* FDisk version 3.2 + Base + LDM + SCO + GPT + APT + LVM2 (Apr 21 2017, 22:23:50) ============== PhysicalDrive 0 , 40.00 Gb ============== Model : "VMware, VMware Virtual S SCSI Disk Dev" Media type : Fixed hard disk Cylinders : 5221, 0x1465 TracksPerCylinder : 255, 0xff SectorsPerTrack : 63, 0x3f BytesPerSector : 512, 0x200 Total sectors : 83886080, 0x5000000 C*H*S : 83875365, 0x4ffd625 delta : 10715, 0x29db, 5.23 MB ========================================================== ============== Layout of PhysicalDrive 0 (Mbr partition style) =========== Signature 0x4303e3d3 PartitionCount 4 PartEntry# StartingOffSet PartitionLength HidSect PartNumber PT BI Recgnz ---------- -------------- --------------- ------- ---------- -- -- ------ 0 800 FA000 800 1 07 01 1 1 FA800 4F05000 FA800 2 07 00 1 2 0 0 0 0 00 00 0 3 0 0 0 0 00 00 0 ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0xfa000 x 0x200, , ro SectorsPerVolume : 0xf9fff x 0x200 SectorsPerCluster : 0x8 MFT : 0xa6aa MFTMirr : 0x2 Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 0.49 Gb Loading $Volume... $Volume: 3.1, 80, "Зарезервировано системой" Loading $LogFile... $LogFile: 420000 bytes Loading $MFT... MFT: used=100,total=100 52545352 at 0 52545352 at 1000 ====== Restart page at offset 0 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 2.0 CurrentLsn : 4050d1 LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 2c RestartLength : e0 ClientOffset : 40 FileSize : 420000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : b95ebef9 === Used clients: === OldestLsn : 405074 RestartLsn : 4050d1 SeqNumber : 0 $LogFile version 2.0 seq: df81f37d [8 - 8) sz=2100, blhdr=2000, jhdr=1 JnlNtfs: use 420 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Loading $MFT... MFT: used=100,total=100 Loading $MFT::Bitmap... Bitmap: Bits 100, frames 1 x 1000, free 5a Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Bitmap: Bits 1f3ff, frames 4 x 1000, free ba34 MftZone: [a6ea,e540) - 3e56 clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 30 entries. NextId 11e Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (02B57378) 54AD-BD7F is initiated as NTFS 3.1 (dirty), caseinsensitive, label: "Зарезервировано системой" MFT : free 5a from 100 Clusters: free ba34 from 1f3ff Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = ba34, State = dirty ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => f9fff ioctl:OnQueryNtfsShrink => 13dcb200 bytes, 13dcb clusters, 9ee59 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = ba34, State = dirty CloseRoot: Fs 02B57378, root 02B34B30 ~CFileSystemNtfs: this 02B57378, Dirs 0, Files 0, Enums 0 Ntfs 02B57378 is closed ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0x4f05000 x 0x200, , ro SectorsPerVolume : 0x4f04fff x 0x200 SectorsPerCluster : 0x8 MFT : 0xc0000 MFTMirr : 0x2 Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 39.51 Gb Loading $Volume... $Volume: 3.1, 0, "" Loading $LogFile... $LogFile: 3614000 bytes Loading $MFT... MFT: used=16a00,total=16a00 52545352 at 0 52545352 at 1000 ====== Restart page at offset 0 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 2.0 CurrentLsn : 7dff357 LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 29 RestartLength : e0 ClientOffset : 40 FileSize : 3614000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : b8323c90 === Used clients: === OldestLsn : 7b54bb3 RestartLsn : 7dff357 SeqNumber : 0 $LogFile version 2.0 seq: df81f37d [8 - 8) sz=1b0a0, blhdr=2000, jhdr=1 JnlNtfs: use 3614 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Loading $MFT... MFT: used=16a00,total=16a00 Loading $MFT::Bitmap... Bitmap: Bits 16a00, frames 3 x 1000, free 6f Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Optimizing large bitmap reading Bitmap: Bits 9e09ff, frames 13d x 1000, free 7c8f03 MftZone: [2467d8,2667d8) - 20000 clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 1585 entries. NextId 731 Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (02B87200) 22D1-0528 is initiated as NTFS 3.1 (dirty), caseinsensitive, label: "" MFT : free 6f from 16a00 Clusters: free 7c8f03 from 9e09ff Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 7c8f03, State = dirty ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => 4f04fff ioctl:OnQueryNtfsShrink => 21bdf1200 bytes, 21bdf1 clusters, 10def89 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 7c8f03, State = dirty CloseRoot: Fs 02B87200, root 02B34C70 ~CFileSystemNtfs: this 02B87200, Dirs 0, Files 0, Enums 0 Ntfs 02B87200 is closed ********************************************************* Destroy plugin manager Peak usage 0 Kb (0 bytes), leak 0 bytes MaxRequest 0 Kb (0 bytes) Malloc: 0 Free: 0 ********************************************************* ********************************************************* Initialize plugin manager Create log manager ... Create memory manager ... Load well-known plugins ... ********************************************************* FDisk version 3.2 + Base + LDM + SCO + GPT + APT + LVM2 (Apr 21 2017, 22:23:50) ============== PhysicalDrive 0 , 40.00 Gb ============== Model : "VMware, VMware Virtual S SCSI Disk Dev" Media type : Fixed hard disk Cylinders : 5221, 0x1465 TracksPerCylinder : 255, 0xff SectorsPerTrack : 63, 0x3f BytesPerSector : 512, 0x200 Total sectors : 83886080, 0x5000000 C*H*S : 83875365, 0x4ffd625 delta : 10715, 0x29db, 5.23 MB ========================================================== ============== Layout of PhysicalDrive 0 (Mbr partition style) =========== Signature 0x4303e3d3 PartitionCount 4 PartEntry# StartingOffSet PartitionLength HidSect PartNumber PT BI Recgnz ---------- -------------- --------------- ------- ---------- -- -- ------ 0 800 FA000 800 1 07 01 1 1 FA800 4F05000 FA800 2 07 00 1 2 0 0 0 0 00 00 0 3 0 0 0 0 00 00 0 ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0xfa000 x 0x200, , ro SectorsPerVolume : 0xf9fff x 0x200 SectorsPerCluster : 0x8 MFT : 0xa6aa MFTMirr : 0x2 Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 0.49 Gb Loading $Volume... $Volume: 3.1, 80, "Зарезервировано системой" Loading $LogFile... $LogFile: 420000 bytes Loading $MFT... MFT: used=100,total=100 52545352 at 0 52545352 at 1000 ====== Restart page at offset 0 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 2.0 CurrentLsn : 6048a0 LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 2c RestartLength : e0 ClientOffset : 40 FileSize : 420000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : 8d98129a === Used clients: === OldestLsn : 604844 RestartLsn : 6048a0 SeqNumber : 0 $LogFile version 2.0 seq: fbc74bce [8 - 8) sz=2100, blhdr=2000, jhdr=1 JnlNtfs: use 420 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Loading $MFT... MFT: used=100,total=100 Loading $MFT::Bitmap... Bitmap: Bits 100, frames 1 x 1000, free 5a Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Bitmap: Bits 1f3ff, frames 4 x 1000, free ba34 MftZone: [a6ea,e540) - 3e56 clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 30 entries. NextId 11e Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (0276EDF8) 54AD-BD7F is initiated as NTFS 3.1 (dirty), caseinsensitive, label: "Зарезервировано системой" MFT : free 5a from 100 Clusters: free ba34 from 1f3ff Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = ba34, State = dirty ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => f9fff ioctl:OnQueryNtfsShrink => 13dcb200 bytes, 13dcb clusters, 9ee59 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = ba34, State = dirty CloseRoot: Fs 0276EDF8, root 02B529E8 ~CFileSystemNtfs: this 0276EDF8, Dirs 0, Files 0, Enums 0 Ntfs 0276EDF8 is closed ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0x4f05000 x 0x200, , ro SectorsPerVolume : 0x4f04fff x 0x200 SectorsPerCluster : 0x8 MFT : 0xc0000 MFTMirr : 0x2 Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 39.51 Gb Loading $Volume... $Volume: 3.1, 0, "" Loading $LogFile... $LogFile: 3614000 bytes Loading $MFT... MFT: used=18700,total=18700 52545352 at 0 52545352 at 1000 ====== Restart page at offset 1000 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 2.0 CurrentLsn : 946d25c LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 29 RestartLength : e0 ClientOffset : 40 FileSize : 3614000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : 8beb20bf === Used clients: === OldestLsn : 92c514e RestartLsn : 946d25c SeqNumber : 0 $LogFile version 2.0 seq: fbc74bce [8 - 8) sz=1b0a0, blhdr=2000, jhdr=1 JnlNtfs: use 3614 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Loading $MFT... MFT: used=18700,total=18700 Loading $MFT::Bitmap... Bitmap: Bits 18700, frames 4 x 1000, free 708 Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Optimizing large bitmap reading Bitmap: Bits 9e09ff, frames 13d x 1000, free 75373b MftZone: [246f18,252ba0) - bc88 clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 1670 entries. NextId 786 Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (0276EDF8) 22D1-0528 is initiated as NTFS 3.1 (dirty), caseinsensitive, label: "" MFT : free 708 from 18700 Clusters: free 75373b from 9e09ff Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 75373b, State = dirty ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => 4f04fff ioctl:OnQueryNtfsShrink => 292469200 bytes, 292469 clusters, 1492349 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 75373b, State = dirty CloseRoot: Fs 0276EDF8, root 02B52A38 ~CFileSystemNtfs: this 0276EDF8, Dirs 0, Files 0, Enums 0 Ntfs 0276EDF8 is closed ********************************************************* Destroy plugin manager Peak usage 0 Kb (0 bytes), leak 0 bytes MaxRequest 0 Kb (0 bytes) Malloc: 0 Free: 0 ********************************************************* ********************************************************* Initialize plugin manager Create log manager ... Create memory manager ... Load well-known plugins ... ********************************************************* FDisk version 3.2 + Base + LDM + SCO + GPT + APT + LVM2 (Apr 21 2017, 22:23:50) ============== PhysicalDrive 0 , 40.00 Gb ============== Model : "VMware, VMware Virtual S SCSI Disk Dev" Media type : Fixed hard disk Cylinders : 5221, 0x1465 TracksPerCylinder : 255, 0xff SectorsPerTrack : 63, 0x3f BytesPerSector : 512, 0x200 Total sectors : 83886080, 0x5000000 C*H*S : 83875365, 0x4ffd625 delta : 10715, 0x29db, 5.23 MB ========================================================== ============== Layout of PhysicalDrive 0 (Mbr partition style) =========== Signature 0x4303e3d3 PartitionCount 4 PartEntry# StartingOffSet PartitionLength HidSect PartNumber PT BI Recgnz ---------- -------------- --------------- ------- ---------- -- -- ------ 0 800 FA000 800 1 07 01 1 1 FA800 4F05000 FA800 2 07 00 1 2 0 0 0 0 00 00 0 3 0 0 0 0 00 00 0 ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0xfa000 x 0x200, , ro SectorsPerVolume : 0xf9fff x 0x200 SectorsPerCluster : 0x8 MFT : 0xa6aa MFTMirr : 0x2 Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 0.49 Gb Loading $Volume... $Volume: 3.1, 80, "Зарезервировано системой" Loading $LogFile... $LogFile: 420000 bytes Loading $MFT... MFT: used=100,total=100 52545352 at 0 52545352 at 1000 ====== Restart page at offset 0 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 2.0 CurrentLsn : 6048a0 LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 2c RestartLength : e0 ClientOffset : 40 FileSize : 420000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : 8d98129a === Used clients: === OldestLsn : 604844 RestartLsn : 6048a0 SeqNumber : 0 $LogFile version 2.0 seq: fcdd5a0e [8 - 8) sz=2100, blhdr=2000, jhdr=1 JnlNtfs: use 420 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Loading $MFT... MFT: used=100,total=100 Loading $MFT::Bitmap... Bitmap: Bits 100, frames 1 x 1000, free 5a Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Bitmap: Bits 1f3ff, frames 4 x 1000, free ba34 MftZone: [a6ea,e540) - 3e56 clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 30 entries. NextId 11e Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (023EED30) 54AD-BD7F is initiated as NTFS 3.1 (dirty), caseinsensitive, label: "Зарезервировано системой" MFT : free 5a from 100 Clusters: free ba34 from 1f3ff Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = ba34, State = dirty ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => f9fff ioctl:OnQueryNtfsShrink => 13dcb200 bytes, 13dcb clusters, 9ee59 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = ba34, State = dirty CloseRoot: Fs 023EED30, root 02673E30 ~CFileSystemNtfs: this 023EED30, Dirs 0, Files 0, Enums 0 Ntfs 023EED30 is closed ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0x4f05000 x 0x200, , ro SectorsPerVolume : 0x4f04fff x 0x200 SectorsPerCluster : 0x8 MFT : 0xc0000 MFTMirr : 0x2 Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 39.51 Gb Loading $Volume... $Volume: 3.1, 0, "" Loading $LogFile... $LogFile: 3614000 bytes Loading $MFT... MFT: used=1d700,total=1d700 52545352 at 0 52545352 at 1000 ====== Restart page at offset 0 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 2.0 CurrentLsn : c9e2bb7 LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 29 RestartLength : e0 ClientOffset : 40 FileSize : 3614000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : 8beb20bf === Used clients: === OldestLsn : c9e14a9 RestartLsn : c9e2bb7 SeqNumber : 0 $LogFile version 2.0 seq: fcdd5a0e [8 - 8) sz=1b0a0, blhdr=2000, jhdr=1 JnlNtfs: use 3614 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Loading $MFT... MFT: used=1d700,total=1d700 Loading $MFT::Bitmap... Bitmap: Bits 1d700, frames 4 x 1000, free 139 Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Optimizing large bitmap reading Bitmap: Bits 9e09ff, frames 13d x 1000, free 61d631 MftZone: [248318,252ba0) - a888 clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 1736 entries. NextId 7c8 Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (023EED30) 22D1-0528 is initiated as NTFS 3.1 (dirty), caseinsensitive, label: "" MFT : free 139 from 1d700 Clusters: free 61d631 from 9e09ff Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 61d631, State = dirty ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => 4f04fff ioctl:OnQueryNtfsShrink => 3cac35200 bytes, 3cac35 clusters, 1e561a9 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 61d631, State = dirty CloseRoot: Fs 023EED30, root 026745B0 ~CFileSystemNtfs: this 023EED30, Dirs 0, Files 0, Enums 0 Ntfs 023EED30 is closed ********************************************************* Destroy plugin manager Peak usage 0 Kb (0 bytes), leak 0 bytes MaxRequest 0 Kb (0 bytes) Malloc: 0 Free: 0 ********************************************************* ********************************************************* Initialize plugin manager Create log manager ... Create memory manager ... Load well-known plugins ... ********************************************************* FDisk version 3.2 + Base + LDM + SCO + GPT + APT + LVM2 (Apr 21 2017, 22:23:50) ============== PhysicalDrive 0 , 111.79 Gb ============== Model : "WDC WDS120G2G0A-00JH30" SerialNumber : "174545806793" Media type : Fixed hard disk Cylinders : 14594, 0x3902 TracksPerCylinder : 255, 0xff SectorsPerTrack : 63, 0x3f BytesPerSector : 512, 0x200 Total sectors : 234455040, 0xdf98000 C*H*S : 234452610, 0xdf97682 delta : 2430, 0x97e, 1.18 MB ========================================================== ============== Layout of PhysicalDrive 0 (Mbr partition style) =========== Signature 0xa9c4a7de PartitionCount 4 PartEntry# StartingOffSet PartitionLength HidSect PartNumber PT BI Recgnz ---------- -------------- --------------- ------- ---------- -- -- ------ 0 3F DF96FC0 3F 1 07 01 1 1 0 0 0 0 00 00 0 2 0 0 0 0 00 00 0 3 0 0 0 0 00 00 0 ============== PhysicalDrive 1 , 698.63 Gb ============== Model : "STM3750528AS" SerialNumber : "5VP2X1WP" Media type : Fixed hard disk Cylinders : 91201, 0x16441 TracksPerCylinder : 255, 0xff SectorsPerTrack : 63, 0x3f BytesPerSector : 512, 0x200 Total sectors : 1465149168, 0x575466f0 C*H*S : 1465144065, 0x57545301 delta : 5103, 0x13ef, 2.49 MB ========================================================== ============== Layout of PhysicalDrive 1 (Mbr partition style) =========== Signature 0x41e58fd6 PartitionCount 4 PartEntry# StartingOffSet PartitionLength HidSect PartNumber PT BI Recgnz ---------- -------------- --------------- ------- ---------- -- -- ------ 0 800 57545000 800 1 07 00 1 1 0 0 0 0 00 00 0 2 0 0 0 0 00 00 0 3 0 0 0 0 00 00 0 ============== PhysicalDrive 2 , 3726.02 Gb ============== Model : "ST4000DM004-2CV104" SerialNumber : "ZFN0ABYR" Media type : Fixed hard disk Cylinders : 486401, 0x76c01 TracksPerCylinder : 255, 0xff SectorsPerTrack : 63, 0x3f BytesPerSector : 512, 0x200 Total sectors : 7814037168, 0x1d1c0beb0 C*H*S : 7814032065, 0x1d1c0aac1 delta : 5103, 0x13ef, 2.49 MB ========================================================== ====== GptTable at 0x1 ====== Signature : EFI PART Revision : 1.0 HeaderSize : 0x5c HeaderCRC32 : 0x55113f07 Lba : 0x1 AlternateLba : 0x1d1c0beaf FirstUsableLba : 0x22 LastUsableLba : 0x1d1c0be8e DiskGuid : {7ec9d5ff-f92f-448c-9f49-ceacc3d942b5} PartitionEntryLba : 0x2 Entries : 0x80 SizeOfEntry : 0x80 =================================== ====== GptTable at 0x1d1c0beaf ====== Signature : EFI PART Revision : 1.0 HeaderSize : 0x5c HeaderCRC32 : 0xdf3cab2c Lba : 0x1d1c0beaf AlternateLba : 0x1 FirstUsableLba : 0x22 LastUsableLba : 0x1d1c0be8e DiskGuid : {7ec9d5ff-f92f-448c-9f49-ceacc3d942b5} PartitionEntryLba : 0x1d1c0be8f Entries : 0x80 SizeOfEntry : 0x80 =================================== ============== Layout of PhysicalDrive 2 (Gpt partition style) =========== DiskId : {7ec9d5ff-f92f-448c-9f49-ceacc3d942b5} PartitionCount : 1 StartingUsableOffset : 0x22 sec UsableLength : 0x1d1c0be6d sec MaxPartitionCount : 0x80 # StartingOffSet PartitionLength PartNum Type Id Attributes Name --- -------------- --------------- ------ ------------------------------------ ------------------------------------ ---------------- ------------------- 0 800 1D1C0A6B0 1 {ebd0a0a2-b9e5-4433-87c0-68b6b72699c7} {b7976b82-ab1c-45f6-838a-da4c10a1743e} 0 Basic data partition ============== PhysicalDrive 3 , 1863.01 Gb ============== Model : "ST2000DM001-1ER164" SerialNumber : "Z4Z2XTNY" Media type : Fixed hard disk Cylinders : 243201, 0x3b601 TracksPerCylinder : 255, 0xff SectorsPerTrack : 63, 0x3f BytesPerSector : 512, 0x200 Total sectors : 3907029168, 0xe8e088b0 C*H*S : 3907024065, 0xe8e074c1 delta : 5103, 0x13ef, 2.49 MB ========================================================== ============== Layout of PhysicalDrive 3 (Mbr partition style) =========== Signature 0x1787f79a PartitionCount 4 PartEntry# StartingOffSet PartitionLength HidSect PartNumber PT BI Recgnz ---------- -------------- --------------- ------- ---------- -- -- ------ 0 800 E8E07800 800 1 07 00 1 1 0 0 0 0 00 00 0 2 0 0 0 0 00 00 0 3 0 0 0 0 00 00 0 ============== PhysicalDrive 4 , 57.69 Gb ============== Model : "USB DISK 3.0 USB Device" Media type : Removable media other than floppy Cylinders : 7531, 0x1d6b TracksPerCylinder : 255, 0xff SectorsPerTrack : 63, 0x3f BytesPerSector : 512, 0x200 Total sectors : 120999936, 0x7365000 C*H*S : 120985515, 0x73617ab delta : 14421, 0x3855, 7.04 MB ========================================================== ============== Layout of PhysicalDrive 4 (Mbr partition style) =========== Signature 0x2f1b PartitionCount 4 PartEntry# StartingOffSet PartitionLength HidSect PartNumber PT BI Recgnz ---------- -------------- --------------- ------- ---------- -- -- ------ 0 800 73647FF 800 1 07 01 1 1 0 0 0 0 00 00 0 2 0 0 0 0 00 00 0 3 0 0 0 0 00 00 0 ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0xdf96fc0 x 0x200, , ro SectorsPerVolume : 0xdf96fbf x 0x200 SectorsPerCluster : 0x8 MFT : 0x22cb MFTMirr : 0xeb1db Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 111.79 Gb Loading $Volume... $Volume: 3.1, 0, "System_C" Loading $LogFile... $LogFile: 4000000 bytes Loading $MFT... MFT: used=94100,total=94100 52545352 at 0 52545352 at 1000 ====== Restart page at offset 0 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 1.1 CurrentLsn : ef3d4cb2 LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 28 RestartLength : e0 ClientOffset : 40 FileSize : 4000000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : 96d335c0 === Used clients: === OldestLsn : ef3d4bf5 RestartLsn : ef3d4cb2 SeqNumber : 0 Journal has tails seq: 337aa5bd [8 - 8) sz=20000, blhdr=2000, jhdr=1 JnlNtfs: use 4000 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Native journal is not empty! Loading $MFT... MFT: used=94100,total=94100 Loading $MFT::Bitmap... Bitmap: Bits 94100, frames 13 x 1000, free 5f832 Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Optimizing large bitmap reading Bitmap: Bits 1bf2df7, frames 37f x 1000, free a793fd MftZone: [62d430,62e768) - 1338 clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 2405 entries. NextId 878d Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (027ECCC0) D51F-4E00 is initiated as NTFS 3.1 , caseinsensitive, label: "System_C" MFT : free 5f832 from 94100 Clusters: free a793fd from 1bf2df7 Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = a793fd, State = clean ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => df96fbf ioctl:OnQueryNtfsShrink => 119c92d200 bytes, 119c92d clusters, 8ce4969 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = a793fd, State = clean CloseRoot: Fs 027ECCC0, root 027C65D0 ~CFileSystemNtfs: this 027ECCC0, Dirs 0, Files 0, Enums 0 Ntfs 027ECCC0 is closed ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0x57545000 x 0x200, , ro SectorsPerVolume : 0x57544fff x 0x200 SectorsPerCluster : 0x8 MFT : 0xc0000 MFTMirr : 0x2 Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 698.63 Gb Loading $Volume... $Volume: 3.1, 0, "Docs_D" Loading $LogFile... $LogFile: 4000000 bytes Loading $MFT... MFT: used=a6900,total=a6900 52545352 at 0 52545352 at 1000 ====== Restart page at offset 0 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 1.1 CurrentLsn : 23d16a284 LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 28 RestartLength : e0 ClientOffset : 40 FileSize : 4000000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : 98169460 === Used clients: === OldestLsn : 23d16a1c9 RestartLsn : 23d16a284 SeqNumber : 0 Journal has tails seq: 337acbe2 [8 - 8) sz=20000, blhdr=2000, jhdr=1 JnlNtfs: use 4000 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Native journal is not empty! Loading $MFT... MFT: used=a6900,total=a6900 Loading $MFT::Bitmap... Bitmap: Bits a6900, frames 15 x 1000, free 65bc4 Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Optimizing large bitmap reading Bitmap: Bits aea89ff, frames 15d6 x 1000, free 4dbb402 MftZone: [8e1dbda,8e3dbda) - 20000 clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 1845 entries. NextId 2b2a Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (027ECCC0) 2C42-E245 is initiated as NTFS 3.1 , caseinsensitive, label: "Docs_D" MFT : free 65bc4 from a6900 Clusters: free 4dbb402 from aea89ff Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 4dbb402, State = clean ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => 57544fff ioctl:OnQueryNtfsShrink => 61af3a8200 bytes, 61af3a8 clusters, 30d79d41 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 4dbb402, State = clean CloseRoot: Fs 027ECCC0, root 027C62B0 ~CFileSystemNtfs: this 027ECCC0, Dirs 0, Files 0, Enums 0 Ntfs 027ECCC0 is closed ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0x1d1c0a6b0 x 0x200, , ro SectorsPerVolume : 0x1d1c0a6af x 0x200 SectorsPerCluster : 0x8 MFT : 0xc0000 MFTMirr : 0x2 Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 3726.02 Gb Loading $Volume... $Volume: 3.1, 0, "Docs_E" Loading $LogFile... $LogFile: 4000000 bytes Loading $MFT... MFT: used=16f600,total=16f600 52545352 at 0 52545352 at 1000 ====== Restart page at offset 0 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 1.1 CurrentLsn : bf263c3c LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 28 RestartLength : e0 ClientOffset : 40 FileSize : 4000000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : 96dcbf31 === Used clients: === OldestLsn : bf263b8b RestartLsn : bf263c3c SeqNumber : 0 Journal has tails seq: 337af208 [8 - 8) sz=20000, blhdr=2000, jhdr=1 JnlNtfs: use 4000 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Native journal is not empty! Loading $MFT... MFT: used=16f600,total=16f600 Loading $MFT::Bitmap... Bitmap: Bits 16f600, frames 2e x 1000, free 1456 Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Optimizing large bitmap reading Bitmap: Bits 3a3814d5, frames 7471 x 1000, free 14b42037 MftZone: [25b8dcc1,25b99926) - bc65 clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 428 entries. NextId 2e6 Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (027ECCC0) D234-23C6 is initiated as NTFS 3.1 , caseinsensitive, label: "Docs_E" MFT : free 1456 from 16f600 Clusters: free 14b42037 from 3a3814d5 Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 14b42037, State = clean ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => 1d1c0a6af ioctl:OnQueryNtfsShrink => 25cefc87200 bytes, 25cefc87 clusters, 12e77e439 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 14b42037, State = clean CloseRoot: Fs 027ECCC0, root 027C63F0 ~CFileSystemNtfs: this 027ECCC0, Dirs 0, Files 0, Enums 0 Ntfs 027ECCC0 is closed ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0xe8e07800 x 0x200, , ro SectorsPerVolume : 0xe8e077f8 x 0x200 SectorsPerCluster : 0x8 MFT : 0x4 MFTMirr : 0x51248bb Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 1863.01 Gb Loading $Volume... $Volume: 3.1, 0, "Docs_F" Loading $LogFile... $LogFile: 4000000 bytes Loading $MFT... MFT: used=151300,total=151300 52545352 at 0 52545352 at 1000 ====== Restart page at offset 1000 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 1.1 CurrentLsn : 1f100c080 LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 28 RestartLength : e0 ClientOffset : 40 FileSize : 4000000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : 989e7ae2 === Used clients: === OldestLsn : 1f100bfc5 RestartLsn : 1f100c080 SeqNumber : 0 Journal has tails seq: 337b3e53 [8 - 8) sz=20000, blhdr=2000, jhdr=1 JnlNtfs: use 4000 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Native journal is not empty! Loading $MFT... MFT: used=151300,total=151300 Loading $MFT::Bitmap... Bitmap: Bits 151300, frames 2b x 1000, free c0704 Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Optimizing large bitmap reading Bitmap: Bits 1d1c0eff, frames 3a39 x 1000, free 4533c94 MftZone: [133dc1e9,133e8a00) - c817 clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 1894 entries. NextId 1718 Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (027ECCC0) F570-2300 is initiated as NTFS 3.1 , caseinsensitive, label: "Docs_F" MFT : free c0704 from 151300 Clusters: free 4533c94 from 1d1c0eff Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 4533c94, State = clean ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => e8e077f8 ioctl:OnQueryNtfsShrink => 18fa640f200 bytes, 18fa640f clusters, c7d32079 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 4533c94, State = clean CloseRoot: Fs 027ECCC0, root 027C6620 ~CFileSystemNtfs: this 027ECCC0, Dirs 0, Files 0, Enums 0 Ntfs 027ECCC0 is closed ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0x73647ff x 0x200, , ro SectorsPerVolume : 0x73647fe x 0x200 SectorsPerCluster : 0x8 MFT : 0x4244 MFTMirr : 0x2 Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 57.70 Gb Loading $Volume... $Volume: 3.1, 0, "Win10PE" Loading $LogFile... $LogFile: 4000000 bytes Loading $MFT... MFT: used=3e00,total=3e00 52545352 at 0 52545352 at 1000 ====== Restart page at offset 0 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 1.1 CurrentLsn : 1401c893 LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 28 RestartLength : e0 ClientOffset : 40 FileSize : 4000000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : 5a888e91 === Used clients: === OldestLsn : 14017c23 RestartLsn : 1401c893 SeqNumber : 0 Journal has tails seq: 337b6479 [8 - 8) sz=20000, blhdr=2000, jhdr=1 JnlNtfs: use 4000 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Native journal is not empty! Loading $MFT... MFT: used=3e00,total=3e00 Loading $MFT::Bitmap... Bitmap: Bits 3e00, frames 1 x 1000, free fd3 Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Optimizing large bitmap reading Bitmap: Bits e6c8ff, frames 1ce x 1000, free c04153 MftZone: [5cb28,74745) - 17c1d clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 53 entries. NextId 13d Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (027ECCC0) 5E17-3EF3 is initiated as NTFS 3.1 , caseinsensitive, label: "Win10PE" MFT : free fd3 from 3e00 Clusters: free c04153 from e6c8ff Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = c04153, State = clean ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => 73647fe ioctl:OnQueryNtfsShrink => 26d4bb200 bytes, 26d4bb clusters, 136a5d9 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = c04153, State = clean CloseRoot: Fs 027ECCC0, root 027C6A80 ~CFileSystemNtfs: this 027ECCC0, Dirs 0, Files 0, Enums 0 Ntfs 027ECCC0 is closed FDisk version 3.2 + Base + LDM + SCO + GPT + APT + LVM2 (Apr 21 2017, 22:23:50) ============== PhysicalDrive 0 , 111.79 Gb ============== Model : "WDC WDS120G2G0A-00JH30" SerialNumber : "174545806793" Media type : Fixed hard disk Cylinders : 14594, 0x3902 TracksPerCylinder : 255, 0xff SectorsPerTrack : 63, 0x3f BytesPerSector : 512, 0x200 Total sectors : 234455040, 0xdf98000 C*H*S : 234452610, 0xdf97682 delta : 2430, 0x97e, 1.18 MB ========================================================== ============== Layout of PhysicalDrive 0 (Mbr partition style) =========== Signature 0xa9c4a7de PartitionCount 4 PartEntry# StartingOffSet PartitionLength HidSect PartNumber PT BI Recgnz ---------- -------------- --------------- ------- ---------- -- -- ------ 0 3F DF96FC0 3F 1 07 01 1 1 0 0 0 0 00 00 0 2 0 0 0 0 00 00 0 3 0 0 0 0 00 00 0 ============== PhysicalDrive 1 , 698.63 Gb ============== Model : "STM3750528AS" SerialNumber : "5VP2X1WP" Media type : Fixed hard disk Cylinders : 91201, 0x16441 TracksPerCylinder : 255, 0xff SectorsPerTrack : 63, 0x3f BytesPerSector : 512, 0x200 Total sectors : 1465149168, 0x575466f0 C*H*S : 1465144065, 0x57545301 delta : 5103, 0x13ef, 2.49 MB ========================================================== ============== Layout of PhysicalDrive 1 (Mbr partition style) =========== Signature 0x41e58fd6 PartitionCount 4 PartEntry# StartingOffSet PartitionLength HidSect PartNumber PT BI Recgnz ---------- -------------- --------------- ------- ---------- -- -- ------ 0 800 57545000 800 1 07 00 1 1 0 0 0 0 00 00 0 2 0 0 0 0 00 00 0 3 0 0 0 0 00 00 0 ============== PhysicalDrive 2 , 3726.02 Gb ============== Model : "ST4000DM004-2CV104" SerialNumber : "ZFN0ABYR" Media type : Fixed hard disk Cylinders : 486401, 0x76c01 TracksPerCylinder : 255, 0xff SectorsPerTrack : 63, 0x3f BytesPerSector : 512, 0x200 Total sectors : 7814037168, 0x1d1c0beb0 C*H*S : 7814032065, 0x1d1c0aac1 delta : 5103, 0x13ef, 2.49 MB ========================================================== ====== GptTable at 0x1 ====== Signature : EFI PART Revision : 1.0 HeaderSize : 0x5c HeaderCRC32 : 0x55113f07 Lba : 0x1 AlternateLba : 0x1d1c0beaf FirstUsableLba : 0x22 LastUsableLba : 0x1d1c0be8e DiskGuid : {7ec9d5ff-f92f-448c-9f49-ceacc3d942b5} PartitionEntryLba : 0x2 Entries : 0x80 SizeOfEntry : 0x80 =================================== ====== GptTable at 0x1d1c0beaf ====== Signature : EFI PART Revision : 1.0 HeaderSize : 0x5c HeaderCRC32 : 0xdf3cab2c Lba : 0x1d1c0beaf AlternateLba : 0x1 FirstUsableLba : 0x22 LastUsableLba : 0x1d1c0be8e DiskGuid : {7ec9d5ff-f92f-448c-9f49-ceacc3d942b5} PartitionEntryLba : 0x1d1c0be8f Entries : 0x80 SizeOfEntry : 0x80 =================================== ============== Layout of PhysicalDrive 2 (Gpt partition style) =========== DiskId : {7ec9d5ff-f92f-448c-9f49-ceacc3d942b5} PartitionCount : 1 StartingUsableOffset : 0x22 sec UsableLength : 0x1d1c0be6d sec MaxPartitionCount : 0x80 # StartingOffSet PartitionLength PartNum Type Id Attributes Name --- -------------- --------------- ------ ------------------------------------ ------------------------------------ ---------------- ------------------- 0 800 1D1C0A6B0 1 {ebd0a0a2-b9e5-4433-87c0-68b6b72699c7} {b7976b82-ab1c-45f6-838a-da4c10a1743e} 0 Basic data partition ============== PhysicalDrive 3 , 1863.01 Gb ============== Model : "ST2000DM001-1ER164" SerialNumber : "Z4Z2XTNY" Media type : Fixed hard disk Cylinders : 243201, 0x3b601 TracksPerCylinder : 255, 0xff SectorsPerTrack : 63, 0x3f BytesPerSector : 512, 0x200 Total sectors : 3907029168, 0xe8e088b0 C*H*S : 3907024065, 0xe8e074c1 delta : 5103, 0x13ef, 2.49 MB ========================================================== ============== Layout of PhysicalDrive 3 (Mbr partition style) =========== Signature 0x1787f79a PartitionCount 4 PartEntry# StartingOffSet PartitionLength HidSect PartNumber PT BI Recgnz ---------- -------------- --------------- ------- ---------- -- -- ------ 0 800 E8E07800 800 1 07 00 1 1 0 0 0 0 00 00 0 2 0 0 0 0 00 00 0 3 0 0 0 0 00 00 0 ============== PhysicalDrive 4 , 57.69 Gb ============== Model : "USB DISK 3.0 USB Device" Media type : Removable media other than floppy Cylinders : 7531, 0x1d6b TracksPerCylinder : 255, 0xff SectorsPerTrack : 63, 0x3f BytesPerSector : 512, 0x200 Total sectors : 120999936, 0x7365000 C*H*S : 120985515, 0x73617ab delta : 14421, 0x3855, 7.04 MB ========================================================== ============== Layout of PhysicalDrive 4 (Mbr partition style) =========== Signature 0x2f1b PartitionCount 4 PartEntry# StartingOffSet PartitionLength HidSect PartNumber PT BI Recgnz ---------- -------------- --------------- ------- ---------- -- -- ------ 0 800 73647FF 800 1 07 01 1 1 0 0 0 0 00 00 0 2 0 0 0 0 00 00 0 3 0 0 0 0 00 00 0 ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0xdf96fc0 x 0x200, , ro SectorsPerVolume : 0xdf96fbf x 0x200 SectorsPerCluster : 0x8 MFT : 0x22cb MFTMirr : 0xeb1db Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 111.79 Gb Loading $Volume... $Volume: 3.1, 0, "System_C" Loading $LogFile... $LogFile: 4000000 bytes Loading $MFT... MFT: used=94100,total=94100 52545352 at 0 52545352 at 1000 ====== Restart page at offset 0 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 1.1 CurrentLsn : ef3d4cb2 LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 28 RestartLength : e0 ClientOffset : 40 FileSize : 4000000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : 96d335c0 === Used clients: === OldestLsn : ef3d4bf5 RestartLsn : ef3d4cb2 SeqNumber : 0 Journal has tails seq: 3384a196 [8 - 8) sz=20000, blhdr=2000, jhdr=1 JnlNtfs: use 4000 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Native journal is not empty! Loading $MFT... MFT: used=94100,total=94100 Loading $MFT::Bitmap... Bitmap: Bits 94100, frames 13 x 1000, free 5f832 Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Optimizing large bitmap reading Bitmap: Bits 1bf2df7, frames 37f x 1000, free a793fd MftZone: [62d430,62e768) - 1338 clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 2405 entries. NextId 878d Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (03A1ACA0) D51F-4E00 is initiated as NTFS 3.1 , caseinsensitive, label: "System_C" MFT : free 5f832 from 94100 Clusters: free a793fd from 1bf2df7 Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = a793fd, State = clean ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => df96fbf ioctl:OnQueryNtfsShrink => 119c92d200 bytes, 119c92d clusters, 8ce4969 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = a793fd, State = clean CloseRoot: Fs 03A1ACA0, root 0403C5E0 ~CFileSystemNtfs: this 03A1ACA0, Dirs 0, Files 0, Enums 0 Ntfs 03A1ACA0 is closed ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0x57545000 x 0x200, , ro SectorsPerVolume : 0x57544fff x 0x200 SectorsPerCluster : 0x8 MFT : 0xc0000 MFTMirr : 0x2 Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 698.63 Gb Loading $Volume... $Volume: 3.1, 0, "Docs_D" Loading $LogFile... $LogFile: 4000000 bytes Loading $MFT... MFT: used=a6900,total=a6900 52545352 at 0 52545352 at 1000 ====== Restart page at offset 0 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 1.1 CurrentLsn : 23d16a284 LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 28 RestartLength : e0 ClientOffset : 40 FileSize : 4000000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : 98169460 === Used clients: === OldestLsn : 23d16a1c9 RestartLsn : 23d16a284 SeqNumber : 0 Journal has tails seq: 3384a196 [8 - 8) sz=20000, blhdr=2000, jhdr=1 JnlNtfs: use 4000 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Native journal is not empty! Loading $MFT... MFT: used=a6900,total=a6900 Loading $MFT::Bitmap... Bitmap: Bits a6900, frames 15 x 1000, free 65bc4 Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Optimizing large bitmap reading Bitmap: Bits aea89ff, frames 15d6 x 1000, free 4dbb402 MftZone: [8e1dbda,8e3dbda) - 20000 clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 1845 entries. NextId 2b2a Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (03DEE6C0) 2C42-E245 is initiated as NTFS 3.1 , caseinsensitive, label: "Docs_D" MFT : free 65bc4 from a6900 Clusters: free 4dbb402 from aea89ff Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 4dbb402, State = clean ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => 57544fff ioctl:OnQueryNtfsShrink => 61af3a8200 bytes, 61af3a8 clusters, 30d79d41 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 4dbb402, State = clean CloseRoot: Fs 03DEE6C0, root 0403C360 ~CFileSystemNtfs: this 03DEE6C0, Dirs 0, Files 0, Enums 0 Ntfs 03DEE6C0 is closed ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0x1d1c0a6b0 x 0x200, , ro SectorsPerVolume : 0x1d1c0a6af x 0x200 SectorsPerCluster : 0x8 MFT : 0xc0000 MFTMirr : 0x2 Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 3726.02 Gb Loading $Volume... $Volume: 3.1, 0, "Docs_E" Loading $LogFile... $LogFile: 4000000 bytes Loading $MFT... MFT: used=16f600,total=16f600 52545352 at 0 52545352 at 1000 ====== Restart page at offset 0 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 1.1 CurrentLsn : bf263c3c LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 28 RestartLength : e0 ClientOffset : 40 FileSize : 4000000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : 96dcbf31 === Used clients: === OldestLsn : bf263b8b RestartLsn : bf263c3c SeqNumber : 0 Journal has tails seq: 3384c7bb [8 - 8) sz=20000, blhdr=2000, jhdr=1 JnlNtfs: use 4000 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Native journal is not empty! Loading $MFT... MFT: used=16f600,total=16f600 Loading $MFT::Bitmap... Bitmap: Bits 16f600, frames 2e x 1000, free 1456 Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Optimizing large bitmap reading Bitmap: Bits 3a3814d5, frames 7471 x 1000, free 14b42037 MftZone: [25b8dcc1,25b99926) - bc65 clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 428 entries. NextId 2e6 Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (03DEE6C0) D234-23C6 is initiated as NTFS 3.1 , caseinsensitive, label: "Docs_E" MFT : free 1456 from 16f600 Clusters: free 14b42037 from 3a3814d5 Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 14b42037, State = clean ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => 1d1c0a6af ioctl:OnQueryNtfsShrink => 25cefc87200 bytes, 25cefc87 clusters, 12e77e439 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 14b42037, State = clean CloseRoot: Fs 03DEE6C0, root 0403C360 ~CFileSystemNtfs: this 03DEE6C0, Dirs 0, Files 0, Enums 0 Ntfs 03DEE6C0 is closed ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0xe8e07800 x 0x200, , ro SectorsPerVolume : 0xe8e077f8 x 0x200 SectorsPerCluster : 0x8 MFT : 0x4 MFTMirr : 0x51248bb Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 1863.01 Gb Loading $Volume... $Volume: 3.1, 0, "Docs_F" Loading $LogFile... $LogFile: 4000000 bytes Loading $MFT... MFT: used=151300,total=151300 52545352 at 0 52545352 at 1000 ====== Restart page at offset 1000 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 1.1 CurrentLsn : 1f100c080 LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 28 RestartLength : e0 ClientOffset : 40 FileSize : 4000000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : 989e7ae2 === Used clients: === OldestLsn : 1f100bfc5 RestartLsn : 1f100c080 SeqNumber : 0 Journal has tails seq: 3384ede1 [8 - 8) sz=20000, blhdr=2000, jhdr=1 JnlNtfs: use 4000 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Native journal is not empty! Loading $MFT... MFT: used=151300,total=151300 Loading $MFT::Bitmap... Bitmap: Bits 151300, frames 2b x 1000, free c0704 Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Optimizing large bitmap reading Bitmap: Bits 1d1c0eff, frames 3a39 x 1000, free 4533c94 MftZone: [133dc1e9,133e8a00) - c817 clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 1894 entries. NextId 1718 Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (03DEEE60) F570-2300 is initiated as NTFS 3.1 , caseinsensitive, label: "Docs_F" MFT : free c0704 from 151300 Clusters: free 4533c94 from 1d1c0eff Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 4533c94, State = clean ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => e8e077f8 ioctl:OnQueryNtfsShrink => 18fa640f200 bytes, 18fa640f clusters, c7d32079 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 4533c94, State = clean CloseRoot: Fs 03DEEE60, root 0403BFF0 ~CFileSystemNtfs: this 03DEEE60, Dirs 0, Files 0, Enums 0 Ntfs 03DEEE60 is closed ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0x73647ff x 0x200, , ro SectorsPerVolume : 0x73647fe x 0x200 SectorsPerCluster : 0x8 MFT : 0x4244 MFTMirr : 0x2 Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 57.70 Gb Loading $Volume... $Volume: 3.1, 0, "Win10PE" Loading $LogFile... $LogFile: 4000000 bytes Loading $MFT... MFT: used=3e00,total=3e00 52545352 at 0 52545352 at 1000 ====== Restart page at offset 1000 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 1.1 CurrentLsn : 1402f453 LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 28 RestartLength : e0 ClientOffset : 40 FileSize : 4000000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : 5a888e91 === Used clients: === OldestLsn : 1402f3ea RestartLsn : 1402f453 SeqNumber : 0 Journal has tails seq: 33851407 [8 - 8) sz=20000, blhdr=2000, jhdr=1 JnlNtfs: use 4000 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Native journal is not empty! Loading $MFT... MFT: used=3e00,total=3e00 Loading $MFT::Bitmap... Bitmap: Bits 3e00, frames 1 x 1000, free fd3 Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Optimizing large bitmap reading Bitmap: Bits e6c8ff, frames 1ce x 1000, free c0414d MftZone: [5cb28,74745) - 17c1d clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 53 entries. NextId 13d Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (03DEE4D8) 5E17-3EF3 is initiated as NTFS 3.1 , caseinsensitive, label: "Win10PE" MFT : free fd3 from 3e00 Clusters: free c0414d from e6c8ff Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = c0414d, State = clean ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => 73647fe ioctl:OnQueryNtfsShrink => 26d4c1200 bytes, 26d4c1 clusters, 136a609 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = c0414d, State = clean CloseRoot: Fs 03DEE4D8, root 0403C4F0 ~CFileSystemNtfs: this 03DEE4D8, Dirs 0, Files 0, Enums 0 Ntfs 03DEE4D8 is closed ********************************************************* Destroy plugin manager Peak usage 0 Kb (0 bytes), leak 0 bytes MaxRequest 0 Kb (0 bytes) Malloc: 0 Free: 0 ********************************************************* ********************************************************* Initialize plugin manager Create log manager ... Create memory manager ... Load well-known plugins ... ********************************************************* FDisk version 3.2 + Base + LDM + SCO + GPT + APT + LVM2 (Apr 21 2017, 22:23:50) ============== PhysicalDrive 0 , 111.79 Gb ============== Model : "WDC WDS120G2G0A-00JH30" SerialNumber : "174545806793" Media type : Fixed hard disk Cylinders : 14594, 0x3902 TracksPerCylinder : 255, 0xff SectorsPerTrack : 63, 0x3f BytesPerSector : 512, 0x200 Total sectors : 234455040, 0xdf98000 C*H*S : 234452610, 0xdf97682 delta : 2430, 0x97e, 1.18 MB ========================================================== ============== Layout of PhysicalDrive 0 (Mbr partition style) =========== Signature 0xa9c4a7de PartitionCount 4 PartEntry# StartingOffSet PartitionLength HidSect PartNumber PT BI Recgnz ---------- -------------- --------------- ------- ---------- -- -- ------ 0 3F DF96FC0 3F 1 07 01 1 1 0 0 0 0 00 00 0 2 0 0 0 0 00 00 0 3 0 0 0 0 00 00 0 ============== PhysicalDrive 1 , 698.63 Gb ============== Model : "STM3750528AS" SerialNumber : "5VP2X1WP" Media type : Fixed hard disk Cylinders : 91201, 0x16441 TracksPerCylinder : 255, 0xff SectorsPerTrack : 63, 0x3f BytesPerSector : 512, 0x200 Total sectors : 1465149168, 0x575466f0 C*H*S : 1465144065, 0x57545301 delta : 5103, 0x13ef, 2.49 MB ========================================================== ============== Layout of PhysicalDrive 1 (Mbr partition style) =========== Signature 0x41e58fd6 PartitionCount 4 PartEntry# StartingOffSet PartitionLength HidSect PartNumber PT BI Recgnz ---------- -------------- --------------- ------- ---------- -- -- ------ 0 800 57545000 800 1 07 00 1 1 0 0 0 0 00 00 0 2 0 0 0 0 00 00 0 3 0 0 0 0 00 00 0 ============== PhysicalDrive 2 , 3726.02 Gb ============== Model : "ST4000DM004-2CV104" SerialNumber : "ZFN0ABYR" Media type : Fixed hard disk Cylinders : 486401, 0x76c01 TracksPerCylinder : 255, 0xff SectorsPerTrack : 63, 0x3f BytesPerSector : 512, 0x200 Total sectors : 7814037168, 0x1d1c0beb0 C*H*S : 7814032065, 0x1d1c0aac1 delta : 5103, 0x13ef, 2.49 MB ========================================================== ====== GptTable at 0x1 ====== Signature : EFI PART Revision : 1.0 HeaderSize : 0x5c HeaderCRC32 : 0x55113f07 Lba : 0x1 AlternateLba : 0x1d1c0beaf FirstUsableLba : 0x22 LastUsableLba : 0x1d1c0be8e DiskGuid : {7ec9d5ff-f92f-448c-9f49-ceacc3d942b5} PartitionEntryLba : 0x2 Entries : 0x80 SizeOfEntry : 0x80 =================================== ====== GptTable at 0x1d1c0beaf ====== Signature : EFI PART Revision : 1.0 HeaderSize : 0x5c HeaderCRC32 : 0xdf3cab2c Lba : 0x1d1c0beaf AlternateLba : 0x1 FirstUsableLba : 0x22 LastUsableLba : 0x1d1c0be8e DiskGuid : {7ec9d5ff-f92f-448c-9f49-ceacc3d942b5} PartitionEntryLba : 0x1d1c0be8f Entries : 0x80 SizeOfEntry : 0x80 =================================== ============== Layout of PhysicalDrive 2 (Gpt partition style) =========== DiskId : {7ec9d5ff-f92f-448c-9f49-ceacc3d942b5} PartitionCount : 1 StartingUsableOffset : 0x22 sec UsableLength : 0x1d1c0be6d sec MaxPartitionCount : 0x80 # StartingOffSet PartitionLength PartNum Type Id Attributes Name --- -------------- --------------- ------ ------------------------------------ ------------------------------------ ---------------- ------------------- 0 800 1D1C0A6B0 1 {ebd0a0a2-b9e5-4433-87c0-68b6b72699c7} {b7976b82-ab1c-45f6-838a-da4c10a1743e} 0 Basic data partition ============== PhysicalDrive 3 , 1863.01 Gb ============== Model : "ST2000DM001-1ER164" SerialNumber : "Z4Z2XTNY" Media type : Fixed hard disk Cylinders : 243201, 0x3b601 TracksPerCylinder : 255, 0xff SectorsPerTrack : 63, 0x3f BytesPerSector : 512, 0x200 Total sectors : 3907029168, 0xe8e088b0 C*H*S : 3907024065, 0xe8e074c1 delta : 5103, 0x13ef, 2.49 MB ========================================================== ============== Layout of PhysicalDrive 3 (Mbr partition style) =========== Signature 0x1787f79a PartitionCount 4 PartEntry# StartingOffSet PartitionLength HidSect PartNumber PT BI Recgnz ---------- -------------- --------------- ------- ---------- -- -- ------ 0 800 E8E07800 800 1 07 00 1 1 0 0 0 0 00 00 0 2 0 0 0 0 00 00 0 3 0 0 0 0 00 00 0 ============== PhysicalDrive 4 , 57.69 Gb ============== Model : "USB DISK 3.0 USB Device" Media type : Removable media other than floppy Cylinders : 7531, 0x1d6b TracksPerCylinder : 255, 0xff SectorsPerTrack : 63, 0x3f BytesPerSector : 512, 0x200 Total sectors : 120999936, 0x7365000 C*H*S : 120985515, 0x73617ab delta : 14421, 0x3855, 7.04 MB ========================================================== ============== Layout of PhysicalDrive 4 (Mbr partition style) =========== Signature 0x2f1b PartitionCount 4 PartEntry# StartingOffSet PartitionLength HidSect PartNumber PT BI Recgnz ---------- -------------- --------------- ------- ---------- -- -- ------ 0 800 73647FF 800 1 07 01 1 1 0 0 0 0 00 00 0 2 0 0 0 0 00 00 0 3 0 0 0 0 00 00 0 ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0xdf96fc0 x 0x200, , ro SectorsPerVolume : 0xdf96fbf x 0x200 SectorsPerCluster : 0x8 MFT : 0x22cb MFTMirr : 0xeb1db Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 111.79 Gb Loading $Volume... $Volume: 3.1, 0, "System_C" Loading $LogFile... $LogFile: 4000000 bytes Loading $MFT... MFT: used=94100,total=94100 52545352 at 0 52545352 at 1000 ====== Restart page at offset 0 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 1.1 CurrentLsn : ef3d4cb2 LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 28 RestartLength : e0 ClientOffset : 40 FileSize : 4000000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : 96d335c0 === Used clients: === OldestLsn : ef3d4bf5 RestartLsn : ef3d4cb2 SeqNumber : 0 Journal has tails seq: 3387e8d1 [8 - 8) sz=20000, blhdr=2000, jhdr=1 JnlNtfs: use 4000 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Native journal is not empty! Loading $MFT... MFT: used=94100,total=94100 Loading $MFT::Bitmap... Bitmap: Bits 94100, frames 13 x 1000, free 5f832 Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Optimizing large bitmap reading Bitmap: Bits 1bf2df7, frames 37f x 1000, free a793fd MftZone: [62d430,62e768) - 1338 clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 2405 entries. NextId 878d Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (02969408) D51F-4E00 is initiated as NTFS 3.1 , caseinsensitive, label: "System_C" MFT : free 5f832 from 94100 Clusters: free a793fd from 1bf2df7 Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = a793fd, State = clean ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => df96fbf ioctl:OnQueryNtfsShrink => 119c92d200 bytes, 119c92d clusters, 8ce4969 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = a793fd, State = clean CloseRoot: Fs 02969408, root 02947AA8 ~CFileSystemNtfs: this 02969408, Dirs 0, Files 0, Enums 0 Ntfs 02969408 is closed ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0x57545000 x 0x200, , ro SectorsPerVolume : 0x57544fff x 0x200 SectorsPerCluster : 0x8 MFT : 0xc0000 MFTMirr : 0x2 Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 698.63 Gb Loading $Volume... $Volume: 3.1, 0, "Docs_D" Loading $LogFile... $LogFile: 4000000 bytes Loading $MFT... MFT: used=a6900,total=a6900 52545352 at 0 52545352 at 1000 ====== Restart page at offset 0 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 1.1 CurrentLsn : 23d16a284 LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 28 RestartLength : e0 ClientOffset : 40 FileSize : 4000000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : 98169460 === Used clients: === OldestLsn : 23d16a1c9 RestartLsn : 23d16a284 SeqNumber : 0 Journal has tails seq: 33880ef7 [8 - 8) sz=20000, blhdr=2000, jhdr=1 JnlNtfs: use 4000 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Native journal is not empty! Loading $MFT... MFT: used=a6900,total=a6900 Loading $MFT::Bitmap... Bitmap: Bits a6900, frames 15 x 1000, free 65bc4 Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Optimizing large bitmap reading Bitmap: Bits aea89ff, frames 15d6 x 1000, free 4dbb402 MftZone: [8e1dbda,8e3dbda) - 20000 clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 1845 entries. NextId 2b2a Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (02969408) 2C42-E245 is initiated as NTFS 3.1 , caseinsensitive, label: "Docs_D" MFT : free 65bc4 from a6900 Clusters: free 4dbb402 from aea89ff Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 4dbb402, State = clean ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => 57544fff ioctl:OnQueryNtfsShrink => 61af3a8200 bytes, 61af3a8 clusters, 30d79d41 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 4dbb402, State = clean CloseRoot: Fs 02969408, root 02947D78 ~CFileSystemNtfs: this 02969408, Dirs 0, Files 0, Enums 0 Ntfs 02969408 is closed ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0x1d1c0a6b0 x 0x200, , ro SectorsPerVolume : 0x1d1c0a6af x 0x200 SectorsPerCluster : 0x8 MFT : 0xc0000 MFTMirr : 0x2 Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 3726.02 Gb Loading $Volume... $Volume: 3.1, 0, "Docs_E" Loading $LogFile... $LogFile: 4000000 bytes Loading $MFT... MFT: used=16f600,total=16f600 52545352 at 0 52545352 at 1000 ====== Restart page at offset 0 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 1.1 CurrentLsn : bf263c3c LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 28 RestartLength : e0 ClientOffset : 40 FileSize : 4000000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : 96dcbf31 === Used clients: === OldestLsn : bf263b8b RestartLsn : bf263c3c SeqNumber : 0 Journal has tails seq: 3388351d [8 - 8) sz=20000, blhdr=2000, jhdr=1 JnlNtfs: use 4000 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Native journal is not empty! Loading $MFT... MFT: used=16f600,total=16f600 Loading $MFT::Bitmap... Bitmap: Bits 16f600, frames 2e x 1000, free 1456 Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Optimizing large bitmap reading Bitmap: Bits 3a3814d5, frames 7471 x 1000, free 14b42037 MftZone: [25b8dcc1,25b99926) - bc65 clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 428 entries. NextId 2e6 Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (03A62C90) D234-23C6 is initiated as NTFS 3.1 , caseinsensitive, label: "Docs_E" MFT : free 1456 from 16f600 Clusters: free 14b42037 from 3a3814d5 Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 14b42037, State = clean ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => 1d1c0a6af ioctl:OnQueryNtfsShrink => 25cefc87200 bytes, 25cefc87 clusters, 12e77e439 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 14b42037, State = clean CloseRoot: Fs 03A62C90, root 02948228 ~CFileSystemNtfs: this 03A62C90, Dirs 0, Files 0, Enums 0 Ntfs 03A62C90 is closed ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0xe8e07800 x 0x200, , ro SectorsPerVolume : 0xe8e077f8 x 0x200 SectorsPerCluster : 0x8 MFT : 0x4 MFTMirr : 0x51248bb Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 1863.01 Gb Loading $Volume... $Volume: 3.1, 0, "Docs_F" Loading $LogFile... $LogFile: 4000000 bytes Loading $MFT... MFT: used=151300,total=151300 52545352 at 0 52545352 at 1000 ====== Restart page at offset 1000 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 1.1 CurrentLsn : 1f100c080 LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 28 RestartLength : e0 ClientOffset : 40 FileSize : 4000000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : 989e7ae2 === Used clients: === OldestLsn : 1f100bfc5 RestartLsn : 1f100c080 SeqNumber : 0 Journal has tails seq: 33888168 [8 - 8) sz=20000, blhdr=2000, jhdr=1 JnlNtfs: use 4000 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Native journal is not empty! Loading $MFT... MFT: used=151300,total=151300 Loading $MFT::Bitmap... Bitmap: Bits 151300, frames 2b x 1000, free c0704 Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Optimizing large bitmap reading Bitmap: Bits 1d1c0eff, frames 3a39 x 1000, free 4533c94 MftZone: [133dc1e9,133e8a00) - c817 clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 1894 entries. NextId 1718 Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (03A62C90) F570-2300 is initiated as NTFS 3.1 , caseinsensitive, label: "Docs_F" MFT : free c0704 from 151300 Clusters: free 4533c94 from 1d1c0eff Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 4533c94, State = clean ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => e8e077f8 ioctl:OnQueryNtfsShrink => 18fa640f200 bytes, 18fa640f clusters, c7d32079 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 4533c94, State = clean CloseRoot: Fs 03A62C90, root 029483B8 ~CFileSystemNtfs: this 03A62C90, Dirs 0, Files 0, Enums 0 Ntfs 03A62C90 is closed ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0x73647ff x 0x200, , ro SectorsPerVolume : 0x73647fe x 0x200 SectorsPerCluster : 0x8 MFT : 0x4244 MFTMirr : 0x2 Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 57.70 Gb Loading $Volume... $Volume: 3.1, 0, "Win10PE" Loading $LogFile... $LogFile: 4000000 bytes Loading $MFT... MFT: used=3e00,total=3e00 52545352 at 0 52545352 at 1000 ====== Restart page at offset 0 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 1.1 CurrentLsn : 140418e8 LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 28 RestartLength : e0 ClientOffset : 40 FileSize : 4000000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : 5a888e91 === Used clients: === OldestLsn : 14033083 RestartLsn : 140418e8 SeqNumber : 0 Journal has tails seq: 33888168 [8 - 8) sz=20000, blhdr=2000, jhdr=1 JnlNtfs: use 4000 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Native journal is not empty! Loading $MFT... MFT: used=3e00,total=3e00 Loading $MFT::Bitmap... Bitmap: Bits 3e00, frames 1 x 1000, free fd2 Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Optimizing large bitmap reading Bitmap: Bits e6c8ff, frames 1ce x 1000, free c0413f MftZone: [5cb28,74745) - 17c1d clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 54 entries. NextId 13e Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (03A6B8D8) 5E17-3EF3 is initiated as NTFS 3.1 , caseinsensitive, label: "Win10PE" MFT : free fd2 from 3e00 Clusters: free c0413f from e6c8ff Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = c0413f, State = clean ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => 73647fe ioctl:OnQueryNtfsShrink => 26d4cf200 bytes, 26d4cf clusters, 136a679 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = c0413f, State = clean CloseRoot: Fs 03A6B8D8, root 02947FA8 ~CFileSystemNtfs: this 03A6B8D8, Dirs 0, Files 0, Enums 0 Ntfs 03A6B8D8 is closed ********************************************************* Destroy plugin manager Peak usage 0 Kb (0 bytes), leak 0 bytes MaxRequest 0 Kb (0 bytes) Malloc: 0 Free: 0 ********************************************************* ********************************************************* Initialize plugin manager Create log manager ... Create memory manager ... Load well-known plugins ... ********************************************************* FDisk version 3.2 + Base + LDM + SCO + GPT + APT + LVM2 (Apr 21 2017, 22:23:50) ============== PhysicalDrive 0 , 1.99 Gb ============== Model : "VMware Virtual IDE Hard Drive ATA Devi" SerialNumber : "0100000000000000000" Media type : Fixed hard disk Cylinders : 261, 0x105 TracksPerCylinder : 255, 0xff SectorsPerTrack : 63, 0x3f BytesPerSector : 512, 0x200 Total sectors : 4194288, 0x3ffff0 C*H*S : 4192965, 0x3ffac5 delta : 1323, 0x52b, 0.64 MB ========================================================== ============== Layout of PhysicalDrive 0 (Mbr partition style) =========== Signature 0x349ae52b PartitionCount 4 PartEntry# StartingOffSet PartitionLength HidSect PartNumber PT BI Recgnz ---------- -------------- --------------- ------- ---------- -- -- ------ 0 80 3FE800 80 1 07 00 1 1 0 0 0 0 00 00 0 2 0 0 0 0 00 00 0 3 0 0 0 0 00 00 0 ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0x3fe800 x 0x200, , ro SectorsPerVolume : 0x3fe7ff x 0x200 SectorsPerCluster : 0x8 MFT : 0x2a9aa MFTMirr : 0x2 Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 1.99 Gb Loading $Volume... $Volume: 3.1, 80, "VMHDD" Loading $LogFile... $LogFile: 610000 bytes Loading $MFT... MFT: used=a00,total=a00 52545352 at 0 52545352 at 1000 ====== Restart page at offset 0 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 1.1 CurrentLsn : 521d30 LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 2c RestartLength : e0 ClientOffset : 40 FileSize : 610000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : 7352ba80 === Used clients: === OldestLsn : 521c6e RestartLsn : 521d30 SeqNumber : 0 Journal has tails seq: 5761b381 [8 - 8) sz=3080, blhdr=2000, jhdr=1 JnlNtfs: use 610 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Native journal is not empty! Loading $MFT... MFT: used=a00,total=a00 Loading $MFT::Bitmap... Bitmap: Bits a00, frames 1 x 1000, free 56 Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Bitmap: Bits 7fcff, frames 10 x 1000, free 70a27 MftZone: [2ac2a,3abc9) - ff9f clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 18 entries. NextId 112 Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (02F0A7C0) FC47-8D0A is initiated as NTFS 3.1 , caseinsensitive, label: "VMHDD" MFT : free 56 from a00 Clusters: free 70a27 from 7fcff Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 70a27, State = clean ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => 3fe7ff ioctl:OnQueryNtfsShrink => f6d8200 bytes, f6d8 clusters, 7b6c1 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 70a27, State = clean CloseRoot: Fs 02F0A7C0, root 02EE36A0 ~CFileSystemNtfs: this 02F0A7C0, Dirs 0, Files 0, Enums 0 Ntfs 02F0A7C0 is closed ********************************************************* Destroy plugin manager Peak usage 0 Kb (0 bytes), leak 0 bytes MaxRequest 0 Kb (0 bytes) Malloc: 0 Free: 0 ********************************************************* ********************************************************* Initialize plugin manager Create log manager ... Create memory manager ... Load well-known plugins ... ********************************************************* FDisk version 3.2 + Base + LDM + SCO + GPT + APT + LVM2 (Apr 21 2017, 22:23:50) ============== PhysicalDrive 0 , 1.99 Gb ============== Model : "VMware Virtual IDE Hard Drive ATA Devi" SerialNumber : "0100000000000000000" Media type : Fixed hard disk Cylinders : 261, 0x105 TracksPerCylinder : 255, 0xff SectorsPerTrack : 63, 0x3f BytesPerSector : 512, 0x200 Total sectors : 4194288, 0x3ffff0 C*H*S : 4192965, 0x3ffac5 delta : 1323, 0x52b, 0.64 MB ========================================================== ============== Layout of PhysicalDrive 0 (Mbr partition style) =========== Signature 0x349ae52b PartitionCount 4 PartEntry# StartingOffSet PartitionLength HidSect PartNumber PT BI Recgnz ---------- -------------- --------------- ------- ---------- -- -- ------ 0 80 3FE800 80 1 07 00 1 1 0 0 0 0 00 00 0 2 0 0 0 0 00 00 0 3 0 0 0 0 00 00 0 ======NTFSBoot->le(0)====== Signature : NTFS RWBlocks : 0x3fe800 x 0x200, , ro SectorsPerVolume : 0x3fe7ff x 0x200 SectorsPerCluster : 0x8 MFT : 0x2a9aa MFTMirr : 0x2 Record size : -10 Index size : 1 Magic : 0x55aa =========================== Boot is accepted as NTFS of size 1.99 Gb Loading $Volume... $Volume: 3.1, 80, "VMHDD" Loading $LogFile... $LogFile: 610000 bytes Loading $MFT... MFT: used=a00,total=a00 52545352 at 0 52545352 at 1000 ====== Restart page at offset 0 ===== Signature : RSTR Lsn : 0 SystemPage : 1000 LogPage : 1000 RestartOff : 30 Version : 1.1 CurrentLsn : 5240a3 LogClient : 1 FreeList : ffff UseList : 0 Flags : 0 SeqNumberBits : 2c RestartLength : e0 ClientOffset : 40 FileSize : 610000 LastLsnDataLen: 70 RecordHdrLen : 30 LogPageDataOff: 40 OpenLogCount : 7352ba80 === Used clients: === OldestLsn : 5237cc RestartLsn : 5240a3 SeqNumber : 0 Journal has tails seq: 57637d45 [8 - 8) sz=3080, blhdr=2000, jhdr=1 JnlNtfs: use 610 blocks of 1000 bytes Paragon journal is deactivated JnlNtfs: 0 free blocks of 1000 bytes Journal statistic: Written 0x0 sectors. Flush 0 Native journal is not empty! Loading $MFT... MFT: used=a00,total=a00 Loading $MFT::Bitmap... Bitmap: Bits a00, frames 1 x 1000, free 57 Loading $MFTMirr... $MFTMirr contains 4 records Loading $Bad... Loading $Bitmap... Bitmap: Bits 7fcff, frames 10 x 1000, free 70a26 MftZone: [2ac2a,3abc9) - ff9f clusters Loading $AttrDef... $AttrDef contains f entries Loading $UpCase... $UpCase file is formatted for use in Windows7 (2976 bytes) Loading $Secure... $Secure contains 18 entries. NextId 112 Loading $Extend... $ObjId=19, $Quota=18, $Reparse=1a Loading $Reparse... Loading $ObjId... sizeof(CFileSystemNtfs) = 480 Volume (0241A7C0) FC47-8D0A is initiated as NTFS 3.1 , caseinsensitive, label: "VMHDD" MFT : free 57 from a00 Clusters: free 70a26 from 7fcff Root is noncompressed ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 70a26, State = clean ioctl:OnGetFsVersion => 3.01 ioctl:OnGetSectorsPerVolume => 3fe7ff ioctl:OnQueryNtfsShrink => f6d9200 bytes, f6d9 clusters, 7b6c9 sectors ioctl:OnGetFsType => NTFS GetVolumeInfo: Free = 70a26, State = clean CloseRoot: Fs 0241A7C0, root 023F2980 ~CFileSystemNtfs: this 0241A7C0, Dirs 0, Files 0, Enums 0 Ntfs 0241A7C0 is closed ********************************************************* Destroy plugin manager Peak usage 0 Kb (0 bytes), leak 0 bytes MaxRequest 0 Kb (0 bytes) Malloc: 0 Free: 0 *********************************************************