Thank you very much for your help.
Sorry, I must have missed the request for a volume list, here it is copied directly from Diskpart:
I do not have any paging files set:
1280 12368
msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\142.0.3595.94\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=SearchHost.exe --webview-exe-version=2125.30600.0.0 --user-data-dir="C:\Users\Paul\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView" --noerrdialogs --disable-features=msSmartScreenProtection --edge-webview-enable-mojo-ipcz --enable-features=msEdgeFluentOverlayScrollbar --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7462) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 142.0.3595.94)" --lang=en-GB --mojo-named-platform-channel-pipe=1488.12928.14640054916787920238 /pfhostedapp:fe2352a20d6da32bcf3219cfdb6c99635e0a05dc 1488 12960
msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\142.0.3595.94\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Paul\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView /prefetch:4 /pfhostedapp:fe2352a20d6da32bcf3219cfdb6c99635e0a05dc --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Paul\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=142.0.7444.176 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\142.0.3595.94\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=142.0.3595.94 --initial-client-data=0x17c,0x180,0x184,0x158,0x18c,0x7ff8abd9db58,0x7ff8abd9db64,0x7ff8abd9db70 12960 13212
msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\142.0.3595.94\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7462) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 142.0.3595.94)" --user-data-dir="C:\Users\Paul\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView" --webview-exe-name=SearchHost.exe --webview-exe-version=2125.30600.0.0 --embedded-browser-webview=1 --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1752,i,10338434684917993847,12243378066038621584,262144 --field-trial-handle=1876,i,11568154196164164767,6432049143535943835,262144 --enable-features=ForceSWDCompWhenDCompFallbackRequired,LocalNetworkAccessForFencedFrameNavigationsWarningOnly,LocalNetworkAccessForNavigationsWarningOnly,LocalNetworkAccessForSubframeNavigationsWarningOnly,LocalNetworkAccessForWorkersWarningOnly,msAggressiveCacheTrimming,msCustomDataPartition,msEdgeFluentOverlayScrollbar,msWebView2NoTabForScreenShare,msWebViewAppLifeCycleWorkaround --disable-features=BackForwardCache,BackgroundTabLoadingFromPerformanceManager,CloseOmniboxPopupOnInactiveAreaClick,CollectAVProductsInfo,CollectCodeIntegrityInfo,DeferSpeculativeRFHCreation,EnableHangWatcher,FilterAdsOnAbusiveSites,GetWifiProtocol,LoginDetection,MediaFoundationCameraUsageMonitoring,PreconnectToSearch,PreloadingEagerHeuristics,SafetyHub,SegmentationPlatform,ServiceWorkerAutoPreload,SpareRendererForSitePerProcess,Ukm,WebPayments,msAITrackerClassification,msAbydosForWindowlessWV2,msAffirmVirtualCard,msAllowChromeWebstore,msAllowMSAPrtSSOForNonMSAProfile,msApplicationGuard,msAskBeforeClosingMultipleTabs,msAutoToggleAADPrtSSOForNonAADProfile,msAutofillEdgeServiceRequest,msAutofillEnableEdgeSuggestions,msAutomaticTabFreeze,msBrowserSettingsSupported,msCoarseGeolocationService,msDataProtection,msDesktopMode,msDesktopRewards,msDisableVariationsSeedFetchThrottling,msEEProactiveHistory,msETFOffstoreExtensionFileDataCollection,msETFPasswordTheftDNRActionSignals,msEdgeAdPlatformUI,msEdgeAddWebCapturetoCollections,msEdgeAutofillShowDeployedPassword,msEdgeCaptureSelectionInPDF,msEdgeCloudConfigService,msEdgeCloudConfigServiceV2,msEdgeCohorts,msEdgeCollectionsPrismExperiment1,msEdgeCollectionsPrismOverallMigration,msEdgeComposeNext,msEdgeEnableNurturingFramework,msEdgeEnclavePrefsBasic,msEdgeEnclavePrefsNotification,msEdgeFaviconService,msEdgeHJTelemetry,msEdgeHubAppSkype,msEdgeImageEditorUI,msEdgeLinkDoctor,msEdgeMouseGestureDefaultEnabled,msEdgeMouseGestureSupported,msEdgeNewDeviceFre,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgePDFCMHighlightUX,msEdgePasswordIris,msEdgePasswordIrisSaveBubble,msEdgePasswordStrengthCheck,msEdgePinpointFramework,msEdgeProngPersonalization,msEdgeReadingView,msEdgeRose,msEdgeScreenshotUI,msEdgeSendTabToSelf,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingPersistentStorage,msEdgeShoppingUI,msEdgeSmartFind,msEdgeSuperDragDefaultEnabled,msEdgeSuperDragDropSupported,msEdgeTranslate,msEdgeUpdatesMoreMenuPill,msEdgeWebCapture,msEdgeWebCaptureUniformExperience,msEdgeWebContentFilteringFeedback,msEdgeWorkSearchBanner,msEnableCustomJobMemoryLimitsOnXbox,msEnableMIPForPDF,msEnablePdfUpsell,msEnableThirdPartyScanning,msEnableWebSignInCta,msEnableWebToBrowserSignIn,msEndpointDlp,msEntityExtraction,msExtensionTelemetryFramework,msExternalTaskManager,msFileSystemAccessDirectoryIterationBlocklistCheck,msForceBrowserSignIn,msForeignSessionsPage,msGeolocationAccessService,msGeolocationOSLocationPermissionFallback,msGeolocationSQMService,msGeolocationService,msGrowthInfraLaunchSourceLogging,msGuidedSwitchAllowed,msHubPinPersist,msImplicitSignin,msIrm,msIrmv2,msKlarnaVirtualCard,msLlmConsumerDlpPurview,msLoadStatistics,msLogIsEdgePinnedToTaskbarOnLaunch,msMIPCrossTenantPdfViewSupport,msMdatpWebSiteDlp,msNotificationPermissionForPWA,msNumberOfSitesToPin,msNurturingGlobalSitePinningOnCloseModal,msNurturingSitePinningCITopSites,msNurturingSitePinningWithWindowsConsent,msOnHoverSearchInSidebar,msOpenOfficeDocumentsInWebViewer,msPageInteractionRestrictionRevoke,msPasswordBreachDetection,msPdfAnnotationsVisibility,msPdfDataRecovery,msPdfDigitalSignatureRead,msPdfFreeText,msPdfFreeTextForCJK,msPdfHighlightMode,msPdfInking,msPdfKeyphraseSupport,msPdfOOUI,msPdfPopupMarkerRenderer,msPdfShare,msPdfSharedLibrary,msPdfTextNote,msPdfTextNoteMoreMenu,msPdfThumbnailCache,msPdfUnderside,msPdfViewRestore,msPersonalizationUMA,msPriceComparison,msPrintInWebView2,msPromptDefaultHandlerForPDF,msReactiveSearch,msReadAloud,msReadAloudPdf,msRedirectToShoreline,msRevokeExtensions,msSaasDlp,msShoppingTrigger,msShorelineSearch,msShorelineSearchFindOnPageWebUI,msShowOfflineGameEntrance,msShowReadAloudIconInAddressBar,msShowUXForAADPrtSSOForNonAADProfile,msSitePinningWithoutUi,msSmartScreenProtection,msSuspendMessageForNewSessionWhenHavingPendingNavigation,msSyncEdgeCollections,msTabResourceStats,msTokenizationAutofillInlineEnabled,msTouchMode,msTriggeringSignalGenerator,msUserUnderstanding,msVideoSuperResolutionUI,msWalletBuyNow,msWalletCheckout,msWalletDiagnosticDataLogger,msWalletHubEntry,msWalletHubIntlP3,msWalletPartialCard,msWalletPasswordCategorization,msWalletPasswordCategorizationPlatformExpansion,msWalletTokenizationCardMetadata,msWalletTokenizedAutofill,msWebAssist,msWebAssistHistorySearchService,msWebOOUI,msWindowsTaskManager,msWindowsUserActivities,msZipPayVirtualCard --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1864 /prefetch:2 /pfhostedapp:fe2352a20d6da32bcf3219cfdb6c99635e0a05dc 12960 9916
msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\142.0.3595.94\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7462) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 142.0.3595.94)" --user-data-dir="C:\Users\Paul\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView" --webview-exe-name=SearchHost.exe --webview-exe-version=2125.30600.0.0 --embedded-browser-webview=1 --always-read-main-dll --metrics-shmem-handle=2196,i,18013052769490469198,8758600456365779639,524288 --field-trial-handle=1876,i,11568154196164164767,6432049143535943835,262144 --enable-features=ForceSWDCompWhenDCompFallbackRequired,LocalNetworkAccessForFencedFrameNavigationsWarningOnly,LocalNetworkAccessForNavigationsWarningOnly,LocalNetworkAccessForSubframeNavigationsWarningOnly,LocalNetworkAccessForWorkersWarningOnly,msAggressiveCacheTrimming,msCustomDataPartition,msEdgeFluentOverlayScrollbar,msWebView2NoTabForScreenShare,msWebViewAppLifeCycleWorkaround --disable-features=BackForwardCache,BackgroundTabLoadingFromPerformanceManager,CloseOmniboxPopupOnInactiveAreaClick,CollectAVProductsInfo,CollectCodeIntegrityInfo,DeferSpeculativeRFHCreation,EnableHangWatcher,FilterAdsOnAbusiveSites,GetWifiProtocol,LoginDetection,MediaFoundationCameraUsageMonitoring,PreconnectToSearch,PreloadingEagerHeuristics,SafetyHub,SegmentationPlatform,ServiceWorkerAutoPreload,SpareRendererForSitePerProcess,Ukm,WebPayments,msAITrackerClassification,msAbydosForWindowlessWV2,msAffirmVirtualCard,msAllowChromeWebstore,msAllowMSAPrtSSOForNonMSAProfile,msApplicationGuard,msAskBeforeClosingMultipleTabs,msAutoToggleAADPrtSSOForNonAADProfile,msAutofillEdgeServiceRequest,msAutofillEnableEdgeSuggestions,msAutomaticTabFreeze,msBrowserSettingsSupported,msCoarseGeolocationService,msDataProtection,msDesktopMode,msDesktopRewards,msDisableVariationsSeedFetchThrottling,msEEProactiveHistory,msETFOffstoreExtensionFileDataCollection,msETFPasswordTheftDNRActionSignals,msEdgeAdPlatformUI,msEdgeAddWebCapturetoCollections,msEdgeAutofillShowDeployedPassword,msEdgeCaptureSelectionInPDF,msEdgeCloudConfigService,msEdgeCloudConfigServiceV2,msEdgeCohorts,msEdgeCollectionsPrismExperiment1,msEdgeCollectionsPrismOverallMigration,msEdgeComposeNext,msEdgeEnableNurturingFramework,msEdgeEnclavePrefsBasic,msEdgeEnclavePrefsNotification,msEdgeFaviconService,msEdgeHJTelemetry,msEdgeHubAppSkype,msEdgeImageEditorUI,msEdgeLinkDoctor,msEdgeMouseGestureDefaultEnabled,msEdgeMouseGestureSupported,msEdgeNewDeviceFre,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgePDFCMHighlightUX,msEdgePasswordIris,msEdgePasswordIrisSaveBubble,msEdgePasswordStrengthCheck,msEdgePinpointFramework,msEdgeProngPersonalization,msEdgeReadingView,msEdgeRose,msEdgeScreenshotUI,msEdgeSendTabToSelf,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingPersistentStorage,msEdgeShoppingUI,msEdgeSmartFind,msEdgeSuperDragDefaultEnabled,msEdgeSuperDragDropSupported,msEdgeTranslate,msEdgeUpdatesMoreMenuPill,msEdgeWebCapture,msEdgeWebCaptureUniformExperience,msEdgeWebContentFilteringFeedback,msEdgeWorkSearchBanner,msEnableCustomJobMemoryLimitsOnXbox,msEnableMIPForPDF,msEnablePdfUpsell,msEnableThirdPartyScanning,msEnableWebSignInCta,msEnableWebToBrowserSignIn,msEndpointDlp,msEntityExtraction,msExtensionTelemetryFramework,msExternalTaskManager,msFileSystemAccessDirectoryIterationBlocklistCheck,msForceBrowserSignIn,msForeignSessionsPage,msGeolocationAccessService,msGeolocationOSLocationPermissionFallback,msGeolocationSQMService,msGeolocationService,msGrowthInfraLaunchSourceLogging,msGuidedSwitchAllowed,msHubPinPersist,msImplicitSignin,msIrm,msIrmv2,msKlarnaVirtualCard,msLlmConsumerDlpPurview,msLoadStatistics,msLogIsEdgePinnedToTaskbarOnLaunch,msMIPCrossTenantPdfViewSupport,msMdatpWebSiteDlp,msNotificationPermissionForPWA,msNumberOfSitesToPin,msNurturingGlobalSitePinningOnCloseModal,msNurturingSitePinningCITopSites,msNurturingSitePinningWithWindowsConsent,msOnHoverSearchInSidebar,msOpenOfficeDocumentsInWebViewer,msPageInteractionRestrictionRevoke,msPasswordBreachDetection,msPdfAnnotationsVisibility,msPdfDataRecovery,msPdfDigitalSignatureRead,msPdfFreeText,msPdfFreeTextForCJK,msPdfHighlightMode,msPdfInking,msPdfKeyphraseSupport,msPdfOOUI,msPdfPopupMarkerRenderer,msPdfShare,msPdfSharedLibrary,msPdfTextNote,msPdfTextNoteMoreMenu,msPdfThumbnailCache,msPdfUnderside,msPdfViewRestore,msPersonalizationUMA,msPriceComparison,msPrintInWebView2,msPromptDefaultHandlerForPDF,msReactiveSearch,msReadAloud,msReadAloudPdf,msRedirectToShoreline,msRevokeExtensions,msSaasDlp,msShoppingTrigger,msShorelineSearch,msShorelineSearchFindOnPageWebUI,msShowOfflineGameEntrance,msShowReadAloudIconInAddressBar,msShowUXForAADPrtSSOForNonAADProfile,msSitePinningWithoutUi,msSmartScreenProtection,msSuspendMessageForNewSessionWhenHavingPendingNavigation,msSyncEdgeCollections,msTabResourceStats,msTokenizationAutofillInlineEnabled,msTouchMode,msTriggeringSignalGenerator,msUserUnderstanding,msVideoSuperResolutionUI,msWalletBuyNow,msWalletCheckout,msWalletDiagnosticDataLogger,msWalletHubEntry,msWalletHubIntlP3,msWalletPartialCard,msWalletPasswordCategorization,msWalletPasswordCategorizationPlatformExpansion,msWalletTokenizationCardMetadata,msWalletTokenizedAutofill,msWebAssist,msWebAssistHistorySearchService,msWebOOUI,msWindowsTaskManager,msWindowsUserActivities,msZipPayVirtualCard --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2204 /prefetch:11 /pfhostedapp:fe2352a20d6da32bcf3219cfdb6c99635e0a05dc 12960 12456
msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\142.0.3595.94\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7462) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 142.0.3595.94)" --user-data-dir="C:\Users\Paul\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView" --webview-exe-name=SearchHost.exe --webview-exe-version=2125.30600.0.0 --embedded-browser-webview=1 --always-read-main-dll --metrics-shmem-handle=2460,i,4394144813443888813,10353284804681463500,524288 --field-trial-handle=1876,i,11568154196164164767,6432049143535943835,262144 --enable-features=ForceSWDCompWhenDCompFallbackRequired,LocalNetworkAccessForFencedFrameNavigationsWarningOnly,LocalNetworkAccessForNavigationsWarningOnly,LocalNetworkAccessForSubframeNavigationsWarningOnly,LocalNetworkAccessForWorkersWarningOnly,msAggressiveCacheTrimming,msCustomDataPartition,msEdgeFluentOverlayScrollbar,msWebView2NoTabForScreenShare,msWebViewAppLifeCycleWorkaround --disable-features=BackForwardCache,BackgroundTabLoadingFromPerformanceManager,CloseOmniboxPopupOnInactiveAreaClick,CollectAVProductsInfo,CollectCodeIntegrityInfo,DeferSpeculativeRFHCreation,EnableHangWatcher,FilterAdsOnAbusiveSites,GetWifiProtocol,LoginDetection,MediaFoundationCameraUsageMonitoring,PreconnectToSearch,PreloadingEagerHeuristics,SafetyHub,SegmentationPlatform,ServiceWorkerAutoPreload,SpareRendererForSitePerProcess,Ukm,WebPayments,msAITrackerClassification,msAbydosForWindowlessWV2,msAffirmVirtualCard,msAllowChromeWebstore,msAllowMSAPrtSSOForNonMSAProfile,msApplicationGuard,msAskBeforeClosingMultipleTabs,msAutoToggleAADPrtSSOForNonAADProfile,msAutofillEdgeServiceRequest,msAutofillEnableEdgeSuggestions,msAutomaticTabFreeze,msBrowserSettingsSupported,msCoarseGeolocationService,msDataProtection,msDesktopMode,msDesktopRewards,msDisableVariationsSeedFetchThrottling,msEEProactiveHistory,msETFOffstoreExtensionFileDataCollection,msETFPasswordTheftDNRActionSignals,msEdgeAdPlatformUI,msEdgeAddWebCapturetoCollections,msEdgeAutofillShowDeployedPassword,msEdgeCaptureSelectionInPDF,msEdgeCloudConfigService,msEdgeCloudConfigServiceV2,msEdgeCohorts,msEdgeCollectionsPrismExperiment1,msEdgeCollectionsPrismOverallMigration,msEdgeComposeNext,msEdgeEnableNurturingFramework,msEdgeEnclavePrefsBasic,msEdgeEnclavePrefsNotification,msEdgeFaviconService,msEdgeHJTelemetry,msEdgeHubAppSkype,msEdgeImageEditorUI,msEdgeLinkDoctor,msEdgeMouseGestureDefaultEnabled,msEdgeMouseGestureSupported,msEdgeNewDeviceFre,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgePDFCMHighlightUX,msEdgePasswordIris,msEdgePasswordIrisSaveBubble,msEdgePasswordStrengthCheck,msEdgePinpointFramework,msEdgeProngPersonalization,msEdgeReadingView,msEdgeRose,msEdgeScreenshotUI,msEdgeSendTabToSelf,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingPersistentStorage,msEdgeShoppingUI,msEdgeSmartFind,msEdgeSuperDragDefaultEnabled,msEdgeSuperDragDropSupported,msEdgeTranslate,msEdgeUpdatesMoreMenuPill,msEdgeWebCapture,msEdgeWebCaptureUniformExperience,msEdgeWebContentFilteringFeedback,msEdgeWorkSearchBanner,msEnableCustomJobMemoryLimitsOnXbox,msEnableMIPForPDF,msEnablePdfUpsell,msEnableThirdPartyScanning,msEnableWebSignInCta,msEnableWebToBrowserSignIn,msEndpointDlp,msEntityExtraction,msExtensionTelemetryFramework,msExternalTaskManager,msFileSystemAccessDirectoryIterationBlocklistCheck,msForceBrowserSignIn,msForeignSessionsPage,msGeolocationAccessService,msGeolocationOSLocationPermissionFallback,msGeolocationSQMService,msGeolocationService,msGrowthInfraLaunchSourceLogging,msGuidedSwitchAllowed,msHubPinPersist,msImplicitSignin,msIrm,msIrmv2,msKlarnaVirtualCard,msLlmConsumerDlpPurview,msLoadStatistics,msLogIsEdgePinnedToTaskbarOnLaunch,msMIPCrossTenantPdfViewSupport,msMdatpWebSiteDlp,msNotificationPermissionForPWA,msNumberOfSitesToPin,msNurturingGlobalSitePinningOnCloseModal,msNurturingSitePinningCITopSites,msNurturingSitePinningWithWindowsConsent,msOnHoverSearchInSidebar,msOpenOfficeDocumentsInWebViewer,msPageInteractionRestrictionRevoke,msPasswordBreachDetection,msPdfAnnotationsVisibility,msPdfDataRecovery,msPdfDigitalSignatureRead,msPdfFreeText,msPdfFreeTextForCJK,msPdfHighlightMode,msPdfInking,msPdfKeyphraseSupport,msPdfOOUI,msPdfPopupMarkerRenderer,msPdfShare,msPdfSharedLibrary,msPdfTextNote,msPdfTextNoteMoreMenu,msPdfThumbnailCache,msPdfUnderside,msPdfViewRestore,msPersonalizationUMA,msPriceComparison,msPrintInWebView2,msPromptDefaultHandlerForPDF,msReactiveSearch,msReadAloud,msReadAloudPdf,msRedirectToShoreline,msRevokeExtensions,msSaasDlp,msShoppingTrigger,msShorelineSearch,msShorelineSearchFindOnPageWebUI,msShowOfflineGameEntrance,msShowReadAloudIconInAddressBar,msShowUXForAADPrtSSOForNonAADProfile,msSitePinningWithoutUi,msSmartScreenProtection,msSuspendMessageForNewSessionWhenHavingPendingNavigation,msSyncEdgeCollections,msTabResourceStats,msTokenizationAutofillInlineEnabled,msTouchMode,msTriggeringSignalGenerator,msUserUnderstanding,msVideoSuperResolutionUI,msWalletBuyNow,msWalletCheckout,msWalletDiagnosticDataLogger,msWalletHubEntry,msWalletHubIntlP3,msWalletPartialCard,msWalletPasswordCategorization,msWalletPasswordCategorizationPlatformExpansion,msWalletTokenizationCardMetadata,msWalletTokenizedAutofill,msWebAssist,msWebAssistHistorySearchService,msWebOOUI,msWindowsTaskManager,msWindowsUserActivities,msZipPayVirtualCard --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2480 /prefetch:13 /pfhostedapp:fe2352a20d6da32bcf3219cfdb6c99635e0a05dc 12960 13028
msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\142.0.3595.94\msedgewebview2.exe" --type=renderer --noerrdialogs --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.18.9.23723; 10.0.0.0.26200.7462) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.26200 IsWebView2/True (WebView2Version 142.0.3595.94)" --user-data-dir="C:\Users\Paul\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\EBWebView" --webview-exe-name=SearchHost.exe --webview-exe-version=2125.30600.0.0 --embedded-browser-webview=1 --dma-cps-flags=0 --video-capture-use-gpu-memory-buffer --lang=en-GB --device-scale-factor=1.5 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--expose-gc --ms-user-locale=" --time-ticks-at-unix-epoch=-1765466855998267 --launch-time-ticks=26090736 --always-read-main-dll --metrics-shmem-handle=3496,i,5877697771545304304,11602474552494160293,2097152 --field-trial-handle=1876,i,11568154196164164767,6432049143535943835,262144 --enable-features=ForceSWDCompWhenDCompFallbackRequired,LocalNetworkAccessForFencedFrameNavigationsWarningOnly,LocalNetworkAccessForNavigationsWarningOnly,LocalNetworkAccessForSubframeNavigationsWarningOnly,LocalNetworkAccessForWorkersWarningOnly,msAggressiveCacheTrimming,msCustomDataPartition,msEdgeFluentOverlayScrollbar,msWebView2NoTabForScreenShare,msWebViewAppLifeCycleWorkaround --disable-features=BackForwardCache,BackgroundTabLoadingFromPerformanceManager,CloseOmniboxPopupOnInactiveAreaClick,CollectAVProductsInfo,CollectCodeIntegrityInfo,DeferSpeculativeRFHCreation,EnableHangWatcher,FilterAdsOnAbusiveSites,GetWifiProtocol,LoginDetection,MediaFoundationCameraUsageMonitoring,PreconnectToSearch,PreloadingEagerHeuristics,SafetyHub,SegmentationPlatform,ServiceWorkerAutoPreload,SpareRendererForSitePerProcess,Ukm,WebPayments,msAITrackerClassification,msAbydosForWindowlessWV2,msAffirmVirtualCard,msAllowChromeWebstore,msAllowMSAPrtSSOForNonMSAProfile,msApplicationGuard,msAskBeforeClosingMultipleTabs,msAutoToggleAADPrtSSOForNonAADProfile,msAutofillEdgeServiceRequest,msAutofillEnableEdgeSuggestions,msAutomaticTabFreeze,msBrowserSettingsSupported,msCoarseGeolocationService,msDataProtection,msDesktopMode,msDesktopRewards,msDisableVariationsSeedFetchThrottling,msEEProactiveHistory,msETFOffstoreExtensionFileDataCollection,msETFPasswordTheftDNRActionSignals,msEdgeAdPlatformUI,msEdgeAddWebCapturetoCollections,msEdgeAutofillShowDeployedPassword,msEdgeCaptureSelectionInPDF,msEdgeCloudConfigService,msEdgeCloudConfigServiceV2,msEdgeCohorts,msEdgeCollectionsPrismExperiment1,msEdgeCollectionsPrismOverallMigration,msEdgeComposeNext,msEdgeEnableNurturingFramework,msEdgeEnclavePrefsBasic,msEdgeEnclavePrefsNotification,msEdgeFaviconService,msEdgeHJTelemetry,msEdgeHubAppSkype,msEdgeImageEditorUI,msEdgeLinkDoctor,msEdgeMouseGestureDefaultEnabled,msEdgeMouseGestureSupported,msEdgeNewDeviceFre,msEdgeOnRampFRE,msEdgeOnRampImport,msEdgePDFCMHighlightUX,msEdgePasswordIris,msEdgePasswordIrisSaveBubble,msEdgePasswordStrengthCheck,msEdgePinpointFramework,msEdgeProngPersonalization,msEdgeReadingView,msEdgeRose,msEdgeScreenshotUI,msEdgeSendTabToSelf,msEdgeSettingsImport,msEdgeSettingsImportV2,msEdgeShoppingPersistentStorage,msEdgeShoppingUI,msEdgeSmartFind,msEdgeSuperDragDefaultEnabled,msEdgeSuperDragDropSupported,msEdgeTranslate,msEdgeUpdatesMoreMenuPill,msEdgeWebCapture,msEdgeWebCaptureUniformExperience,msEdgeWebContentFilteringFeedback,msEdgeWorkSearchBanner,msEnableCustomJobMemoryLimitsOnXbox,msEnableMIPForPDF,msEnablePdfUpsell,msEnableThirdPartyScanning,msEnableWebSignInCta,msEnableWebToBrowserSignIn,msEndpointDlp,msEntityExtraction,msExtensionTelemetryFramework,msExternalTaskManager,msFileSystemAccessDirectoryIterationBlocklistCheck,msForceBrowserSignIn,msForeignSessionsPage,msGeolocationAccessService,msGeolocationOSLocationPermissionFallback,msGeolocationSQMService,msGeolocationService,msGrowthInfraLaunchSourceLogging,msGuidedSwitchAllowed,msHubPinPersist,msImplicitSignin,msIrm,msIrmv2,msKlarnaVirtualCard,msLlmConsumerDlpPurview,msLoadStatistics,msLogIsEdgePinnedToTaskbarOnLaunch,msMIPCrossTenantPdfViewSupport,msMdatpWebSiteDlp,msNotificationPermissionForPWA,msNumberOfSitesToPin,msNurturingGlobalSitePinningOnCloseModal,msNurturingSitePinningCITopSites,msNurturingSitePinningWithWindowsConsent,msOnHoverSearchInSidebar,msOpenOfficeDocumentsInWebViewer,msPageInteractionRestrictionRevoke,msPasswordBreachDetection,msPdfAnnotationsVisibility,msPdfDataRecovery,msPdfDigitalSignatureRead,msPdfFreeText,msPdfFreeTextForCJK,msPdfHighlightMode,msPdfInking,msPdfKeyphraseSupport,msPdfOOUI,msPdfPopupMarkerRenderer,msPdfShare,msPdfSharedLibrary,msPdfTextNote,msPdfTextNoteMoreMenu,msPdfThumbnailCache,msPdfUnderside,msPdfViewRestore,msPersonalizationUMA,msPriceComparison,msPrintInWebView2,msPromptDefaultHandlerForPDF,msReactiveSearch,msReadAloud,msReadAloudPdf,msRedirectToShoreline,msRevokeExtensions,msSaasDlp,msShoppingTrigger,msShorelineSearch,msShorelineSearchFindOnPageWebUI,msShowOfflineGameEntrance,msShowReadAloudIconInAddressBar,msShowUXForAADPrtSSOForNonAADProfile,msSitePinningWithoutUi,msSmartScreenProtection,msSuspendMessageForNewSessionWhenHavingPendingNavigation,msSyncEdgeCollections,msTabResourceStats,msTokenizationAutofillInlineEnabled,msTouchMode,msTriggeringSignalGenerator,msUserUnderstanding,msVideoSuperResolutionUI,msWalletBuyNow,msWalletCheckout,msWalletDiagnosticDataLogger,msWalletHubEntry,msWalletHubIntlP3,msWalletPartialCard,msWalletPasswordCategorization,msWalletPasswordCategorizationPlatformExpansion,msWalletTokenizationCardMetadata,msWalletTokenizedAutofill,msWebAssist,msWebAssistHistorySearchService,msWebOOUI,msWindowsTaskManager,msWindowsUserActivities,msZipPayVirtualCard --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3556 /pfhostedapp:fe2352a20d6da32bcf3219cfdb6c99635e0a05dc /prefetch:1 12960 13192
TextInputHost.exe "C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca 1512 13380
ctfmon.exe /QuitInfo:0000000000000254;0000000000000250; 2980 13396
MsMpEngCP.exe 4304 13792
SecurityHealthSystray.exe "C:\Windows\System32\SecurityHealthSystray.exe" 9844 9372
SecurityHealthService.exe 1280 14232
svchost.exe C:\WINDOWS\system32\svchost.exe -k WebThreatDefense -p -s webthreatdefsvc 1280 13556
SetPoint.exe "C:\Program Files\Logitech\SetPointP\SetPoint.exe" /launchGaming 9844 12644
KHALMNPR.exe KHALMNPR.EXE /API 12644 8204
svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s PcaSvc 1280 11220
svchost.exe C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted -p -s WdiSystemHost 1280 14076
NisSrv.exe 1280 14516
OneDrive.exe "C:\Program Files\Microsoft OneDrive\OneDrive.exe" /background 9844 14692
FileSyncHelper.exe "C:\Program Files\Microsoft OneDrive\25.216.1104.0002\FileSyncHelper.exe" 1280 15244
pcss-systray.exe "D:\PowerChute Serial Shutdown\agent\bin\pcss-systray.exe" 9844 1388
svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs -p -s BDESVC 1280 2928
firefox.exe "D:\Mozilla Firefox\firefox.exe" 2864 11392
crashhelper.exe "D:\Mozilla Firefox\crashhelper.exe" "11392" "\\.\pipe\gecko-crash-server-pipe.11392" "C:\Users\Paul\AppData\Local\Temp\\" "996" "1004" 11392 5208
firefox.exe "D:\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20251205151434 -prefsHandle 2120:44961 -prefMapHandle 2124:307126 -ipcHandle 2152 -initialChannelId {67a16e9f-e61b-4cc3-9e6e-220a39f6885e} -parentPid 11392 -crashReporter "\\.\pipe\gecko-crash-server-pipe.11392" -crashHelper 2172 -appDir "D:\Mozilla Firefox\browser" - 1 gpu 11392 8088
firefox.exe "D:\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20251205151434 -prefsHandle 2392:44961 -prefMapHandle 2396:307126 -ipcHandle 2132 -initialChannelId {bb4cefec-87fb-4a14-b0e9-2158e3add4ec} -parentPid 11392 -crashReporter "\\.\pipe\gecko-crash-server-pipe.11392" -crashHelper 2408 -win32kLockedDown -appDir "D:\Mozilla Firefox\browser" - 2 socket 11392 6196
RuntimeBroker.exe C:\Windows\System32\RuntimeBroker.exe -Embedding 1512 2940
firefox.exe "D:\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3724:45038 -prefMapHandle 3728:307126 -jsInitHandle 3732:223356 -parentBuildID 20251205151434 -ipcHandle 3704 -initialChannelId {e546b6fa-8dad-46ba-be8e-d5e8a21ea708} -parentPid 11392 -crashReporter "\\.\pipe\gecko-crash-server-pipe.11392" -crashHelper 3748 -win32kLockedDown -appDir "D:\Mozilla Firefox\browser" - 3 tab 11392 3364
firefox.exe "D:\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20251205151434 -prefsHandle 3912:45038 -prefMapHandle 3916:307126 -ipcHandle 3924 -initialChannelId {ca22aa52-fe25-4826-b0b5-93a56404eb31} -parentPid 11392 -crashReporter "\\.\pipe\gecko-crash-server-pipe.11392" -crashHelper 3940 -appDir "D:\Mozilla Firefox\browser" - 4 rdd 11392 3644
firefox.exe "D:\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4592:40012 -prefMapHandle 4596:307126 -jsInitHandle 4600:223356 -parentBuildID 20251205151434 -ipcHandle 4492 -initialChannelId {ccca4302-dc1f-4885-8b46-a61761e373b7} -parentPid 11392 -crashReporter "\\.\pipe\gecko-crash-server-pipe.11392" -crashHelper 4612 -win32kLockedDown -appDir "D:\Mozilla Firefox\browser" - 5 tab 11392 12716
firefox.exe "D:\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4800:40012 -prefMapHandle 4804:307126 -jsInitHandle 4808:223356 -parentBuildID 20251205151434 -ipcHandle 4816 -initialChannelId {029549e6-ddcd-4174-9660-5f4bad88a12f} -parentPid 11392 -crashReporter "\\.\pipe\gecko-crash-server-pipe.11392" -crashHelper 4832 -win32kLockedDown -appDir "D:\Mozilla Firefox\browser" - 6 tab 11392 10016
firefox.exe "D:\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4620:40012 -prefMapHandle 4608:307126 -jsInitHandle 4808:223356 -parentBuildID 20251205151434 -ipcHandle 4800 -initialChannelId {1f755d69-2345-488f-bf13-50b4b70f7b69} -parentPid 11392 -crashReporter "\\.\pipe\gecko-crash-server-pipe.11392" -crashHelper 5040 -win32kLockedDown -appDir "D:\Mozilla Firefox\browser" - 7 tab 11392 9196
firefox.exe "D:\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5296:54541 -prefMapHandle 5292:307126 -jsInitHandle 5288:223356 -parentBuildID 20251205151434 -ipcHandle 5280 -initialChannelId {f58e470b-4d1c-4710-a3e0-686087ab43e9} -parentPid 11392 -crashReporter "\\.\pipe\gecko-crash-server-pipe.11392" -crashHelper 1760 -win32kLockedDown -appDir "D:\Mozilla Firefox\browser" - 8 tab 11392 15836
firefox.exe "D:\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20251205151434 -sandboxingKind 0 -prefsHandle 5544:54621 -prefMapHandle 5552:307126 -ipcHandle 5564 -initialChannelId {1b8b14f5-c3a0-4528-a122-d2c6e6640701} -parentPid 11392 -crashReporter "\\.\pipe\gecko-crash-server-pipe.11392" -crashHelper 5604 -win32kLockedDown -appDir "D:\Mozilla Firefox\browser" - 9 utility 11392 16140
firefox.exe "D:\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 8624:49661 -prefMapHandle 8628:307126 -jsInitHandle 8632:223356 -parentBuildID 20251205151434 -ipcHandle 8640 -initialChannelId {4021fdda-1341-490b-8129-1ac239c82902} -parentPid 11392 -crashReporter "\\.\pipe\gecko-crash-server-pipe.11392" -crashHelper 8644 -win32kLockedDown -appDir "D:\Mozilla Firefox\browser" - 14 tab 11392 16016
svchost.exe C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup 1280 16640
svchost.exe C:\WINDOWS\system32\svchost.exe -k InvSvcGroup -p -s InventorySvc 1280 13892
svchost.exe C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s UsoSvc 1280 16728
svchost.exe C:\WINDOWS\system32\svchost.exe -k LocalService -s W32Time 1280 12232
svchost.exe C:\WINDOWS\system32\svchost.exe -k whesvc -p -s whesvc 1280 10172
svchost.exe 1280 15996
svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs -p 1280 15552
firefox.exe "D:\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5820:49661 -prefMapHandle 10156:307126 -jsInitHandle 7096:223356 -parentBuildID 20251205151434 -ipcHandle 6680 -initialChannelId {33f916ab-d615-434c-9ce1-0ef916b361d7} -parentPid 11392 -crashReporter "\\.\pipe\gecko-crash-server-pipe.11392" -crashHelper 10180 -win32kLockedDown -appDir "D:\Mozilla Firefox\browser" - 17 tab 11392 2012
firefox.exe "D:\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20251205151434 -sandboxingKind 1 -prefsHandle 9944:54916 -prefMapHandle 8964:307126 -ipcHandle 7448 -initialChannelId {4a67154d-d613-4b97-b549-7304fee83969} -parentPid 11392 -crashReporter "\\.\pipe\gecko-crash-server-pipe.11392" -crashHelper 9464 -win32kLockedDown -appDir "D:\Mozilla Firefox\browser" - 18 utility 11392 15124
FileCoAuth.exe "C:\Program Files\Microsoft OneDrive\25.216.1104.0002\FileCoAuth.exe" -Embedding 1512 1996
svchost.exe C:\WINDOWS\System32\svchost.exe -k LocalService -p -s LicenseManager 1280 14852
svchost.exe C:\WINDOWS\system32\svchost.exe -k netsvcsRedirectionGuard -p -s lfsvc 1280 16004
svchost.exe C:\WINDOWS\system32\svchost.exe -k GPSvcGroup 1280 16656
svchost.exe C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s wuauserv 1280 14224
firefox.exe "D:\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7688:49661 -prefMapHandle 6364:307126 -jsInitHandle 6132:223356 -parentBuildID 20251205151434 -ipcHandle 9328 -initialChannelId {41dcf3d7-8517-42bc-8bd2-4ca967867c63} -parentPid 11392 -crashReporter "\\.\pipe\gecko-crash-server-pipe.11392" -crashHelper 6292 -win32kLockedDown -appDir "D:\Mozilla Firefox\browser" - 25 tab 11392 16516
audiodg.exe C:\WINDOWS\system32\AUDIODG.EXE 0x0000000000000414 2780 16272
firefox.exe "D:\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3496:49661 -prefMapHandle 5992:307126 -jsInitHandle 6044:223356 -parentBuildID 20251205151434 -ipcHandle 10180 -initialChannelId {414d8d10-65ac-4138-a853-042889cc2470} -parentPid 11392 -crashReporter "\\.\pipe\gecko-crash-server-pipe.11392" -crashHelper 5744 -win32kLockedDown -appDir "D:\Mozilla Firefox\browser" - 32 tab 11392 3160
firefox.exe "D:\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5980:49755 -prefMapHandle 6304:307126 -jsInitHandle 3068:223356 -parentBuildID 20251205151434 -ipcHandle 9996 -initialChannelId {eabda09a-cb2e-452b-b100-e78aae8ac9b5} -parentPid 11392 -crashReporter "\\.\pipe\gecko-crash-server-pipe.11392" -crashHelper 8416 -win32kLockedDown -appDir "D:\Mozilla Firefox\browser" - 33 tab 11392 8460
firefox.exe "D:\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 9964:49755 -prefMapHandle 9968:307126 -jsInitHandle 9276:223356 -parentBuildID 20251205151434 -ipcHandle 9212 -initialChannelId {cec9149c-ac52-4b40-be64-081bb354022f} -parentPid 11392 -crashReporter "\\.\pipe\gecko-crash-server-pipe.11392" -crashHelper 3652 -win32kLockedDown -appDir "D:\Mozilla Firefox\browser" - 34 tab 11392 16296
smartscreen.exe C:\Windows\System32\smartscreen.exe -Embedding 1512 17012
cmd.exe "C:\WINDOWS\system32\cmd.exe" 9844 11012
conhost.exe \??\C:\WINDOWS\system32\conhost.exe 0x4 11012 16416
WMIC.exe wmic 11012 16192
firefox.exe "D:\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6400:49755 -prefMapHandle 9340:307126 -jsInitHandle 5796:223356 -parentBuildID 20251205151434 -ipcHandle 7140 -initialChannelId {83d2809d-3d3a-4c28-8f1e-805fee0b7b5c} -parentPid 11392 -crashReporter "\\.\pipe\gecko-crash-server-pipe.11392" -crashHelper 7740 -win32kLockedDown -appDir "D:\Mozilla Firefox\browser" - 35 tab 11392 16552
WmiPrvSE.exe C:\WINDOWS\system32\wbem\wmiprvse.exe 1512 3672
wmic:root\cli> Microsoft Windows 11 Pro Version 25H2 (OS Build 26200.7462)
==================================================================
Started on 11/12/2025 at 16:55:17.38
[SFC /ScanNow]
Beginning system scan. This process will take some time.
Results:
Windows Resource Protection did not find any integrity violations.
==================================================================
Started on 11/12/2025 at 16:57:40.25
[DISM /online /cleanup-image /ScanHealth]
Deployment Image Servicing and Management tool
Version: 10.0.26100.5074
Image Version: 10.0.26200.7462
No component store corruption detected.
The operation completed successfully.
==================================================================
Started on 11/12/2025 at 17:00:28.10
[DISM /online /cleanup-image /RestoreHealth]
Deployment Image Servicing and Management tool
Version: 10.0.26100.5074
Image Version: 10.0.26200.7462
The restore operation completed successfully.
The operation completed successfully.
==================================================================
The second "SFC /ScanNow" was skipped, as the first output the following:
Windows Resource Protection did not find any integrity violations.
==================================================================
Started on 11/12/2025 at 17:02:02.45
[ChkDsk /Scan]
The type of the file system is NTFS.
Volume label is Main Disk.
Stage 1: Examining basic file system structure ...
1109760 file records processed.
File verification completed.
Phase duration (File record verification): 8.89 seconds.
55572 large file records processed.
Phase duration (Orphan file record recovery): 28.51 milliseconds.
0 bad file records processed.
Phase duration (Bad file record checking): 0.06 milliseconds.
Stage 2: Examining file name linkage ...
293 reparse records processed.
1396272 index entries processed.
Index verification completed.
Phase duration (Index verification): 14.34 seconds.
0 unindexed files scanned.
Phase duration (Orphan reconnection): 2.71 seconds.
0 unindexed files recovered to lost and found.
Phase duration (Orphan recovery to lost and found): 0.12 milliseconds.
293 reparse records processed.
Phase duration (Reparse point and Object ID verification): 3.81 milliseconds.
Stage 3: Examining security descriptors ...
Security descriptor verification completed.
Phase duration (Security descriptor verification): 153.10 milliseconds.
143257 data files processed.
Phase duration (Data attribute verification): 0.07 milliseconds.
CHKDSK is verifying Usn Journal...
273273504 USN bytes processed.
Usn Journal verification completed.
Phase duration (USN journal verification): 824.78 milliseconds.
Windows has scanned the file system and found no problems.
No further action is required.
233581243 KB total disk space.
97400744 KB in 272765 files.
297136 KB in 143258 indexes.
0 KB in bad sectors.
1492303 KB in use by the system.
65536 KB occupied by the log file.
134391060 KB available on disk.
4096 bytes in each allocation unit.
58395310 total allocation units on disk.
33597765 allocation units available on disk.
Total duration: 26.96 seconds (26962 ms).
==================================================================
Started on 11/12/2025 at 17:02:41.92
AutoReboot
TRUE
==================================================================
[Set AutoReboot = False]
Updating property(s) of '\\DESKTOP\ROOT\CIMV2:Win32_OSRecoveryConfiguration.Name="Microsoft Windows 11 Pro|C:\\WINDOWS|\\Device\\Harddisk1\\Partition1"'
Property(s) update successful.
==================================================================
AutoReboot
FALSE
==================================================================
DebugInfoType
3
==================================================================
[Set DebugInfoType = 7]
Updating property(s) of '\\DESKTOP\ROOT\CIMV2:Win32_OSRecoveryConfiguration.Name="Microsoft Windows 11 Pro|C:\\WINDOWS|\\Device\\Harddisk1\\Partition1"'
Property(s) update successful.
==================================================================
DebugInfoType
7
==================================================================
[WMIC PageFile list]
==================================================================
AutomaticManagedPagefile
FALSE
==================================================================
[Set AutomaticManagedPagefile = True]
Updating property(s) of '\\DESKTOP\ROOT\CIMV2:Win32_ComputerSystem.Name="DESKTOP"'
Property(s) update successful.
==================================================================
AutomaticManagedPagefile
TRUE
==================================================================
[BcdEdit /enum {badmemory}]
RAM Defects
-----------
identifier {badmemory}
==================================================================
Finished on 11/12/2025 at 17:02:43.93
It took 7 minutes and 26 seconds to complete the operations.Firmware Application (101fffff)
-------------------------------
identifier {a576cc2a-d45d-11f0-bec7-806e6f6e6963}
description UEFI:CD/DVD Drive
Firmware Application (101fffff)
-------------------------------
identifier {a576cc2b-d45d-11f0-bec7-806e6f6e6963}
description UEFI:Removable Device
Firmware Application (101fffff)
-------------------------------
identifier {a576cc2c-d45d-11f0-bec7-806e6f6e6963}
description UEFI:Network Device
Disk 0 : SSD. It has 1 partition(s). Model: KINGSTON SHSS37A240G
Disk 1 : SSD. It has 3 partition(s). Model: KINGSTON SHSS37A240G
Disk 2 : SSD. It has 1 partition(s). Model: Samsung SSD 850 EVO 500GB
Disk 3 : SSD. It has 2 partition(s). Model: Samsung SSD 870 EVO 4TB
Disk 4 : SSD. It has 1 partition(s). Model: KINGSTON SUV400S37960G
Disk 5 : SSD. It has 1 partition(s). Model: CT2000BX500SSD1
The script has found the above 6 storage device(s) in total.
=======================================================================
Microsoft DiskPart version 10.0.26100.1150
Copyright (C) Microsoft Corporation.
On computer: DESKTOP
Disk ### Status Size Free Dyn Gpt
-------- ------------- ------- ------- --- ---
Disk 0 Online 223 GB 1024 KB *
Disk 1 Online 223 GB 2048 KB *
Disk 2 Online 465 GB 0 B *
Disk 3 Online 3726 GB 0 B *
Disk 4 Online 894 GB 1024 KB *
Disk 5 Online 1863 GB 0 B *
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
Volume 0 D Program Dis NTFS Partition 223 GB Healthy
Volume 1 C Main Disk NTFS Partition 222 GB Healthy Boot
Volume 2 NTFS Partition 726 MB Healthy Hidden
Volume 3 FAT32 Partition 100 MB Healthy System
Volume 4 G BackUp NTFS Partition 465 GB Healthy
Volume 5 E DocsMedia NTFS Partition 1676 GB Healthy
Volume 6 H DiskBackUps NTFS Partition 2049 GB Healthy Pagefile
Volume 7 F Downloads NTFS Partition 894 GB Healthy Pagefile
Volume 8 I Media Dwnld NTFS Partition 1863 GB Healthy
Disk 0 is now the selected disk.
KINGSTON SHSS37A240G
Disk ID: {0EAE0B96-5858-9090-8081-828310111213}
Type : SATA
Status : Online
Path : 0
Target : 0
LUN ID : 0
Location Path : PCIROOT(0)#PCI(0103)#PCI(0001)#ATA(C00T00L00)
Current Read-only State : No
Read-only : No
Boot Disk : No
Pagefile Disk : No
Hibernation File Disk : No
Crashdump Disk : No
Clustered Disk : No
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
Volume 0 D Program Dis NTFS Partition 223 GB Healthy
Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 223 GB 1024 KB
Partition 1 is now the selected partition.
Partition 1
Type : ebd0a0a2-b9e5-4433-87c0-68b6b72699c7
Hidden : No
Required: No
Attrib : 0000000000000000
Offset in Bytes: 1048576
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 0 D Program Dis NTFS Partition 223 GB Healthy
Disk 1 is now the selected disk.
KINGSTON SHSS37A240G
Disk ID: {2646A4D0-4605-11E8-8811-88D7F67A53A0}
Type : SATA
Status : Online
Path : 1
Target : 0
LUN ID : 0
Location Path : PCIROOT(0)#PCI(0103)#PCI(0001)#ATA(C01T00L00)
Current Read-only State : No
Read-only : No
Boot Disk : Yes
Pagefile Disk : Yes
Hibernation File Disk : No
Crashdump Disk : No
Clustered Disk : No
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
Volume 1 C Main Disk NTFS Partition 222 GB Healthy Boot
Volume 2 NTFS Partition 726 MB Healthy Hidden
Volume 3 FAT32 Partition 100 MB Healthy System
Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 222 GB 1024 KB
Partition 2 Recovery 726 MB 222 GB
Partition 3 System 100 MB 223 GB
Partition 1 is now the selected partition.
Partition 1
Type : ebd0a0a2-b9e5-4433-87c0-68b6b72699c7
Hidden : No
Required: No
Attrib : 0000000000000000
Offset in Bytes: 1048576
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 1 C Main Disk NTFS Partition 222 GB Healthy Boot
Partition 2 is now the selected partition.
Partition 2
Type : de94bba4-06d1-4d40-a16a-bfd50179d6ac
Hidden : Yes
Required: Yes
Attrib : 0X8000000000000001
Offset in Bytes: 239188574208
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 2 NTFS Partition 726 MB Healthy Hidden
Partition 3 is now the selected partition.
Partition 3
Type : c12a7328-f81f-11d2-ba4b-00a0c93ec93b
Hidden : Yes
Required: No
Attrib : 0X8000000000000000
Offset in Bytes: 239950888960
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 3 FAT32 Partition 100 MB Healthy System
Disk 2 is now the selected disk.
Samsung SSD 850 EVO 500GB
Disk ID: {0E960937-5858-9090-8081-828310111213}
Type : SATA
Status : Online
Path : 4
Target : 0
LUN ID : 0
Location Path : PCIROOT(0)#PCI(0103)#PCI(0001)#ATA(C04T00L00)
Current Read-only State : No
Read-only : No
Boot Disk : No
Pagefile Disk : No
Hibernation File Disk : No
Crashdump Disk : No
Clustered Disk : No
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
Volume 4 G BackUp NTFS Partition 465 GB Healthy
Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 465 GB 1024 KB
Partition 1 is now the selected partition.
Partition 1
Type : ebd0a0a2-b9e5-4433-87c0-68b6b72699c7
Hidden : No
Required: No
Attrib : 0000000000000000
Offset in Bytes: 1048576
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 4 G BackUp NTFS Partition 465 GB Healthy
Disk 3 is now the selected disk.
Samsung SSD 870 EVO 4TB
Disk ID: {218362A0-9877-03B3-A8D8-60C81DE6EC00}
Type : SATA
Status : Online
Path : 5
Target : 0
LUN ID : 0
Location Path : PCIROOT(0)#PCI(0103)#PCI(0001)#ATA(C05T00L00)
Current Read-only State : No
Read-only : No
Boot Disk : No
Pagefile Disk : Yes
Hibernation File Disk : No
Crashdump Disk : No
Clustered Disk : No
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
Volume 5 E DocsMedia NTFS Partition 1676 GB Healthy
Volume 6 H DiskBackUps NTFS Partition 2049 GB Healthy Pagefile
Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 1676 GB 1024 KB
Partition 2 Primary 2049 GB 1676 GB
Partition 1 is now the selected partition.
Partition 1
Type : ebd0a0a2-b9e5-4433-87c0-68b6b72699c7
Hidden : No
Required: No
Attrib : 0000000000000000
Offset in Bytes: 1048576
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 5 E DocsMedia NTFS Partition 1676 GB Healthy
Partition 2 is now the selected partition.
Partition 2
Type : ebd0a0a2-b9e5-4433-87c0-68b6b72699c7
Hidden : No
Required: No
Attrib : 0000000000000000
Offset in Bytes: 1800610512896
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 6 H DiskBackUps NTFS Partition 2049 GB Healthy Pagefile
Disk 4 is now the selected disk.
KINGSTON SUV400S37960G
Disk ID: {0EAE0B6D-5858-9090-8081-828310111213}
Type : SATA
Status : Online
Path : 2
Target : 0
LUN ID : 0
Location Path : PCIROOT(0)#PCI(0801)#PCI(0002)#ATA(C02T00L00)
Current Read-only State : No
Read-only : No
Boot Disk : No
Pagefile Disk : Yes
Hibernation File Disk : No
Crashdump Disk : Yes
Clustered Disk : No
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
Volume 7 F Downloads NTFS Partition 894 GB Healthy Pagefile
Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 894 GB 1024 KB
Partition 1 is now the selected partition.
Partition 1
Type : ebd0a0a2-b9e5-4433-87c0-68b6b72699c7
Hidden : No
Required: No
Attrib : 0000000000000000
Offset in Bytes: 1048576
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 7 F Downloads NTFS Partition 894 GB Healthy Pagefile
Disk 5 is now the selected disk.
CT2000BX500SSD1
Disk ID: {0E9A0859-5858-9090-8081-828310111213}
Type : SATA
Status : Online
Path : 3
Target : 0
LUN ID : 0
Location Path : PCIROOT(0)#PCI(0801)#PCI(0002)#ATA(C03T00L00)
Current Read-only State : No
Read-only : No
Boot Disk : No
Pagefile Disk : No
Hibernation File Disk : No
Crashdump Disk : No
Clustered Disk : No
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
Volume 8 I Media Dwnld NTFS Partition 1863 GB Healthy
Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 1863 GB 1088 KB
Partition 1 is now the selected partition.
Partition 1
Type : ebd0a0a2-b9e5-4433-87c0-68b6b72699c7
Hidden : No
Required: No
Attrib : 0000000000000000
Offset in Bytes: 1114112
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 8 I Media Dwnld NTFS Partition 1863 GB Healthy
===============================================================================
Windows Recovery Environment (Windows RE) and system reset configuration
Information:
Windows RE status: Enabled
Windows RE location: \\?\GLOBALROOT\device\harddisk1\partition2\Recovery\WindowsRE
Boot Configuration Data (BCD) identifier: f9c9990e-d2b2-11ef-be32-ddeec9ab32ac
Recovery image location:
Recovery image index: 0
Custom image location:
Custom image index: 0
REAGENTC.EXE: Operation Successful.
===============================================================================
Firmware Boot Manager
---------------------
identifier {fwbootmgr}
displayorder {bootmgr}
{157174e1-8de7-11e8-a90f-be3349a94716}
{ad4beaab-d5da-11f0-8173-806e6f6e6963}
{facf5d55-d5e8-11f0-8174-806e6f6e6963}
{facf5d56-d5e8-11f0-8174-806e6f6e6963}
{facf5d57-d5e8-11f0-8174-806e6f6e6963}
timeout 1
Windows Boot Manager
--------------------
identifier {bootmgr}
device partition=\Device\HarddiskVolume4
path \EFI\MICROSOFT\BOOT\BOOTMGFW.EFI
description Windows Boot Manager
locale en-GB
inherit {globalsettings}
default {current}
resumeobject {5f843e59-c757-11ef-be05-ff817ff0517c}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Firmware Application (101fffff)
-------------------------------
identifier {157174e1-8de7-11e8-a90f-be3349a94716}
description Hard Drive
badmemoryaccess Yes
Firmware Application (101fffff)
-------------------------------
identifier {ad4beaab-d5da-11f0-8173-806e6f6e6963}
description USB
Firmware Application (101fffff)
-------------------------------
identifier {facf5d55-d5e8-11f0-8174-806e6f6e6963}
description UEFI:CD/DVD Drive
Firmware Application (101fffff)
-------------------------------
identifier {facf5d56-d5e8-11f0-8174-806e6f6e6963}
description UEFI:Removable Device
Firmware Application (101fffff)
-------------------------------
identifier {facf5d57-d5e8-11f0-8174-806e6f6e6963}
description UEFI:Network Device
Windows Boot Loader
-------------------
identifier {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 11
locale en-GB
inherit {bootloadersettings}
recoverysequence {f9c9990e-d2b2-11ef-be32-ddeec9ab32ac}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {5f843e59-c757-11ef-be05-ff817ff0517c}
nx OptIn
bootmenupolicy Standard
Windows Boot Loader
-------------------
identifier {9f896522-505e-4285-9b99-7d4215c6bb08}
device ramdisk=[C:]\Aomei\AomeiBoot.wim,{3e256511-e99b-4aab-85b6-72295751147b}
description Aomei PE
osdevice ramdisk=[C:]\Aomei\AomeiBoot.wim,{3e256511-e99b-4aab-85b6-72295751147b}
systemroot \Windows
nx OptIn
detecthal Yes
winpe Yes
Windows Boot Loader
-------------------
identifier {f9c9990e-d2b2-11ef-be32-ddeec9ab32ac}
device ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{f9c9990f-d2b2-11ef-be32-ddeec9ab32ac}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale en-GB
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{f9c9990f-d2b2-11ef-be32-ddeec9ab32ac}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Resume from Hibernate
---------------------
identifier {5f843e59-c757-11ef-be05-ff817ff0517c}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale en-GB
inherit {resumeloadersettings}
recoverysequence {f9c9990e-d2b2-11ef-be32-ddeec9ab32ac}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
custom:21000026 partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Windows Memory Tester
---------------------
identifier {memdiag}
device partition=\Device\HarddiskVolume4
path \EFI\Microsoft\Boot\memtest.efi
description Windows Memory Diagnostic
locale en-GB
inherit {globalsettings}
badmemoryaccess Yes
EMS Settings
------------
identifier {emssettings}
bootems No
Debugger Settings
-----------------
identifier {dbgsettings}
debugtype Local
RAM Defects
-----------
identifier {badmemory}
Global Settings
---------------
identifier {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
Boot Loader Settings
--------------------
identifier {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
Hypervisor Settings
-------------------
identifier {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
Resume Loader Settings
----------------------
identifier {resumeloadersettings}
inherit {globalsettings}
Device options
--------------
identifier {3e256511-e99b-4aab-85b6-72295751147b}
ramdisksdidevice partition=C:
ramdisksdipath \Aomei\AomeiBoot.sdi
Device options
--------------
identifier {f9c9990f-d2b2-11ef-be32-ddeec9ab32ac}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume3
ramdisksdipath \Recovery\WindowsRE\boot.sdi
------------------------
Disk & DVD/CD-ROM Drives
------------------------
Drive: C:
Free Space: 133.0 GB
Total Space: 228.1 GB
File System: NTFS
Model: KINGSTON SHSS37A240G
Drive: D:
Free Space: 171.6 GB
Total Space: 228.9 GB
File System: NTFS
Model: KINGSTON SHSS37A240G
Drive: E:
Free Space: 1164.6 GB
Total Space: 1717.2 GB
File System: NTFS
Model: Samsung SSD 870 EVO 4TB
Drive: F:
Free Space: 717.6 GB
Total Space: 915.7 GB
File System: NTFS
Model: KINGSTON SUV400S37960G
Drive: G:
Free Space: 458.1 GB
Total Space: 476.9 GB
File System: NTFS
Model: Samsung SSD 850 EVO 500GB
Drive: H:
Free Space: 405.2 GB
Total Space: 2098.2 GB
File System: NTFS
Model: Samsung SSD 870 EVO 4TB
Drive: I:
Free Space: 334.6 GB
Total Space: 1907.7 GB
File System: NTFS
Model: CT2000BX500SSD1
