When examining a hard disk without a write-blocker, you should not start windows because Windows will write data to the:

{} [+]