-----------------------------------------------

Escalation Type: complete

runexe_0_windir_system32_wevtutil_exe
-----------------------------------------------
Executable exited with error code: 0
Action succeeded
Duration (Ticks, ms): 78
Duration (UBI, ms): 77
-----------------------------------------------
file_1_T0FolderPath
-----------------------------------------------
Created directory: \\?\C:\Users\USER\AppData\Local\Packages\
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\LocalState\DiagOutputDir\{d97914ca-6e02-
4e65-8602-8714baed0669}
Copied file: \\?\C:\Users\USER\AppData\Local\Packages\
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\LocalState\DiagOutputDir\{d97914ca-6e02-
4e65-8602-8714baed0669}\UIF_FeedbackItem.json
Copied file: \\?\C:\Users\USER\AppData\Local\Packages\
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\LocalState\DiagOutputDir\{d97914ca-6e02-
4e65-8602-8714baed0669}\UIF_SubmissionId.txt
Files Copied: 2
GetFileAction succeeded
Action succeeded
Duration (Ticks, ms): 16
Duration (UBI, ms): 9
-----------------------------------------------
file_2_windir_panther__
-----------------------------------------------
Created directory: \\?\C:\Windows\panther\actionqueue
Copied file: \\?\C:\Windows\panther\actionqueue\oobeSystem.uaq
Copied file: \\?\C:\Windows\panther\cbs.log
Copied file: \\?\C:\Windows\panther\Contents0.dir
Copied file: \\?\C:\Windows\panther\Contents1.dir
Copied file: \\?\C:\Windows\panther\DDACLSys.log
Copied file: \\?\C:\Windows\panther\diagerr.xml
Copied file: \\?\C:\Windows\panther\diagwrn.xml
Created directory: \\?\C:\Windows\panther\FastCleanup
Copied file: \\?\C:\Windows\panther\MainQueueOnline0.que
Copied file: \\?\C:\Windows\panther\MainQueueOnline1.que
Created directory: \\?\C:\Windows\panther\NewOs
Created directory: \\?\C:\Windows\panther\NewOs\Panther
Copied file: \\?\C:\Windows\panther\NewOs\Panther\AltData.cab
Copied file: \\?\C:\Windows\panther\NewOs\Panther\appraiser.sdb
Copied file: \\?\C:\Windows\panther\NewOs\Panther\Appraiser_Data.ini
Copied file: \\?\C:\Windows\panther\NewOs\Panther\Appraiser_InboxAlternateData.cab
Copied file: \\?\C:\Windows\panther\NewOs\Panther\Appraiser_TelemetryRunList.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\
CompatData_2025_06_29_08_44_34_3_00000021.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\
CompatData_2025_06_29_08_44_37_3_00000021.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\
CompatData_2025_06_29_08_44_38_3_01000000.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\
CompatData_2025_06_29_08_45_17_3_01000000.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\
CompatData_2025_06_29_08_55_59_3_01000000.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\
CompatData_2025_06_29_08_56_39_3_01000000.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\
CompatData_2025_06_29_08_56_42_3_00000140.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\
CompatData_2025_06_29_08_56_51_3_006f0018.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\
CompatData_2025_06_29_08_57_21_3_006f0018.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\compatscancache.dat
Copied file: \\?\C:\Windows\panther\NewOs\Panther\diagerr.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\diagwrn.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\DlTel.etl
Copied file: \\?\C:\Windows\panther\NewOs\Panther\DlTel.Merge.00001.etl
Copied file: \\?\C:\Windows\panther\NewOs\Panther\GenuineTicket.xml
Created directory: \\?\C:\Windows\panther\NewOs\Panther\img
Copied file: \\?\C:\Windows\panther\NewOs\Panther\img\classicon_{4d36e97b-e325-
11ce-bfc1-08002be10318}.png
Created directory: \\?\C:\Windows\panther\NewOs\Panther\InboxAlternateData
Copied file: \\?\C:\Windows\panther\NewOs\Panther\InboxAlternateData\appraiser.sdb
Copied file: \\?\C:\Windows\panther\NewOs\Panther\InboxAlternateData\
Appraiser_Data.ini
Copied file: \\?\C:\Windows\panther\NewOs\Panther\InboxAlternateData\
Appraiser_TelemetryRunList.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\InboxAlternateData\backup.sdb
Copied file: \\?\C:\Windows\panther\NewOs\Panther\LatentAcquisitionActionList.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigLog.xml
Created directory: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims
Created directory: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim1
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim1\State
Created directory: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim2
Created directory: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim3
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim3\State
Created directory: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim4
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim4\State
Created directory: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\State
Created directory: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\
System32
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
msvcp110.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
msvcp120.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
msvcp140.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
msvcr110.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
msvcr120.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
vcamp110.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
vcamp120.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
vcamp140.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
vccorlib110.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
vccorlib120.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
vccorlib140.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
vcomp110.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
vcomp120.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
vcomp140.dll
Created directory: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\
SysWOW64
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
msvcp110.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
msvcp120.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
msvcp140.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
msvcr110.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
msvcr120.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
vcamp110.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
vcamp120.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
vcamp140.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
vccorlib110.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
vccorlib120.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
vccorlib140.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
vcomp110.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
vcomp120.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
vcomp140.dll
Created directory: \\?\C:\Windows\panther\NewOs\Panther\Resources
Copied file: \\?\C:\Windows\panther\NewOs\Panther\ScanResult.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\setupact.log
Copied file: \\?\C:\Windows\panther\NewOs\Panther\setuperr.log
Copied file: \\?\C:\Windows\panther\NewOs\Panther\windlp.state-old.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\windlp.state.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\WinSetupMon.log
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.1.5.4.3.4.0.0_APPRAISER_EverythingSys.bin
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.1.5.4.3.4.0.0_APPRAISER_HumanReadable.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.1.5.4.3.4.0.0_APPRAISER_SetupOutput.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.1.5.4.3.4.0.0_APPRAISER_SetupOutputHw.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.1.5.4.3.6.0.0_APPRAISER_EverythingGated.bin
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.1.5.4.3.6.0.0_APPRAISER_HumanReadable.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.1.5.4.3.6.0.0_APPRAISER_SetupOutput.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.4.0.0_APPRAISER_EverythingGated.bin
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.4.0.0_APPRAISER_HumanReadable.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.4.0.0_APPRAISER_SetupOutput.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.8.0.0_APPRAISER_EverythingAppInteresting.bin
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.8.0.0_APPRAISER_EverythingAppUninteresting.bin
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.8.0.0_APPRAISER_EverythingDevInteresting.bin
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.8.0.0_APPRAISER_EverythingDevUninteresting.bin
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.8.0.0_APPRAISER_HumanReadable.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.8.0.0_APPRAISER_Migration.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.8.0.0_APPRAISER_SetupOutput.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.8.0.0_APPRAISER_SetupOutputDrv.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\_s_7EAE.tmp
Created directory: \\?\C:\Windows\panther\NewOs\Rollback
Copied file: \\?\C:\Windows\panther\NewOs\Rollback\checkpoint.info
Copied file: \\?\C:\Windows\panther\NewOs\Rollback\rollbackinfo.ini
Created directory: \\?\C:\Windows\panther\NewOs\Rollback\WinPE
Created directory: \\?\C:\Windows\panther\NewOs\Rollback\WinPE\setupapi
Copied file: \\?\C:\Windows\panther\NewOs\Rollback\WinPE\setupapi\
setupapi.offline.log
Copied file: \\?\C:\Windows\panther\NewOs\Rollback\WinSetupMon.DAT
Copied file: \\?\C:\Windows\panther\setup.etl
Created directory: \\?\C:\Windows\panther\setup.exe
Copied file: \\?\C:\Windows\panther\setupinfo
Copied file: \\?\C:\Windows\panther\unattend.xml
Created directory: \\?\C:\Windows\panther\UnattendGC
Copied file: \\?\C:\Windows\panther\UnattendGC\diagerr.xml
Copied file: \\?\C:\Windows\panther\UnattendGC\diagwrn.xml
Copied file: \\?\C:\Windows\panther\UnattendGC\setupact.log
Copied file: \\?\C:\Windows\panther\UnattendGC\setuperr.log
Files Copied: 104
GetFileAction succeeded
Action succeeded
Duration (Ticks, ms): 1765
Duration (UBI, ms): 1763
-----------------------------------------------
file_3_windir_inf_setupapi_log
-----------------------------------------------
Copied file: \\?\C:\Windows\inf\setupapi.app.log
Copied file: \\?\C:\Windows\inf\setupapi.dev.20250506_203813.log
Copied file: \\?\C:\Windows\inf\setupapi.dev.20250528_124500.log
Copied file: \\?\C:\Windows\inf\setupapi.dev.20250611_231755.log
Copied file: \\?\C:\Windows\inf\setupapi.dev.log
Copied file: \\?\C:\Windows\inf\setupapi.offline.20191207_091437.log
Copied file: \\?\C:\Windows\inf\setupapi.setup.log
Files Copied: 7
GetFileAction succeeded
Action succeeded
Duration (Ticks, ms): 32
Duration (UBI, ms): 29
-----------------------------------------------

Total Wall-Clock Duration (ms): 1891