0% found this document useful (0 votes)
17 views5 pages

Summary

Uploaded by

md.qwe204
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
17 views5 pages

Summary

Uploaded by

md.qwe204
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 5

-----------------------------------------------

Escalation Type: complete


-----------------------------------------------

runexe_0_windir_system32_wevtutil_exe
-----------------------------------------------
Executable exited with error code: 0
Action succeeded
Duration (Ticks, ms): 78
Duration (UBI, ms): 77
-----------------------------------------------
file_1_T0FolderPath
-----------------------------------------------
Created directory: \\?\C:\Users\USER\AppData\Local\Packages\
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\LocalState\DiagOutputDir\{d97914ca-6e02-
4e65-8602-8714baed0669}
Copied file: \\?\C:\Users\USER\AppData\Local\Packages\
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\LocalState\DiagOutputDir\{d97914ca-6e02-
4e65-8602-8714baed0669}\UIF_FeedbackItem.json
Copied file: \\?\C:\Users\USER\AppData\Local\Packages\
Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe\LocalState\DiagOutputDir\{d97914ca-6e02-
4e65-8602-8714baed0669}\UIF_SubmissionId.txt
Files Copied: 2
GetFileAction succeeded
Action succeeded
Duration (Ticks, ms): 16
Duration (UBI, ms): 9
-----------------------------------------------
file_2_windir_panther__
-----------------------------------------------
Created directory: \\?\C:\Windows\panther\actionqueue
Copied file: \\?\C:\Windows\panther\actionqueue\oobeSystem.uaq
Copied file: \\?\C:\Windows\panther\cbs.log
Copied file: \\?\C:\Windows\panther\Contents0.dir
Copied file: \\?\C:\Windows\panther\Contents1.dir
Copied file: \\?\C:\Windows\panther\DDACLSys.log
Copied file: \\?\C:\Windows\panther\diagerr.xml
Copied file: \\?\C:\Windows\panther\diagwrn.xml
Created directory: \\?\C:\Windows\panther\FastCleanup
Copied file: \\?\C:\Windows\panther\MainQueueOnline0.que
Copied file: \\?\C:\Windows\panther\MainQueueOnline1.que
Created directory: \\?\C:\Windows\panther\NewOs
Created directory: \\?\C:\Windows\panther\NewOs\Panther
Copied file: \\?\C:\Windows\panther\NewOs\Panther\AltData.cab
Copied file: \\?\C:\Windows\panther\NewOs\Panther\appraiser.sdb
Copied file: \\?\C:\Windows\panther\NewOs\Panther\Appraiser_Data.ini
Copied file: \\?\C:\Windows\panther\NewOs\Panther\Appraiser_InboxAlternateData.cab
Copied file: \\?\C:\Windows\panther\NewOs\Panther\Appraiser_TelemetryRunList.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\
CompatData_2025_06_29_08_44_34_3_00000021.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\
CompatData_2025_06_29_08_44_37_3_00000021.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\
CompatData_2025_06_29_08_44_38_3_01000000.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\
CompatData_2025_06_29_08_45_17_3_01000000.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\
CompatData_2025_06_29_08_55_59_3_01000000.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\
CompatData_2025_06_29_08_56_39_3_01000000.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\
CompatData_2025_06_29_08_56_42_3_00000140.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\
CompatData_2025_06_29_08_56_51_3_006f0018.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\
CompatData_2025_06_29_08_57_21_3_006f0018.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\compatscancache.dat
Copied file: \\?\C:\Windows\panther\NewOs\Panther\diagerr.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\diagwrn.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\DlTel.etl
Copied file: \\?\C:\Windows\panther\NewOs\Panther\DlTel.Merge.00001.etl
Copied file: \\?\C:\Windows\panther\NewOs\Panther\GenuineTicket.xml
Created directory: \\?\C:\Windows\panther\NewOs\Panther\img
Copied file: \\?\C:\Windows\panther\NewOs\Panther\img\classicon_{4d36e97b-e325-
11ce-bfc1-08002be10318}.png
Created directory: \\?\C:\Windows\panther\NewOs\Panther\InboxAlternateData
Copied file: \\?\C:\Windows\panther\NewOs\Panther\InboxAlternateData\appraiser.sdb
Copied file: \\?\C:\Windows\panther\NewOs\Panther\InboxAlternateData\
Appraiser_Data.ini
Copied file: \\?\C:\Windows\panther\NewOs\Panther\InboxAlternateData\
Appraiser_TelemetryRunList.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\InboxAlternateData\backup.sdb
Copied file: \\?\C:\Windows\panther\NewOs\Panther\LatentAcquisitionActionList.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigLog.xml
Created directory: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims
Created directory: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim1
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim1\State
Created directory: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim2
Created directory: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim3
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim3\State
Created directory: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim4
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim4\State
Created directory: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\State
Created directory: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\
System32
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
msvcp110.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
msvcp120.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
msvcp140.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
msvcr110.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
msvcr120.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
vcamp110.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
vcamp120.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
vcamp140.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
vccorlib110.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
vccorlib120.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
vccorlib140.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
vcomp110.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
vcomp120.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\System32\
vcomp140.dll
Created directory: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\
SysWOW64
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
msvcp110.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
msvcp120.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
msvcp140.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
msvcr110.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
msvcr120.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
vcamp110.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
vcamp120.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
vcamp140.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
vccorlib110.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
vccorlib120.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
vccorlib140.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
vcomp110.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
vcomp120.dll
Copied file: \\?\C:\Windows\panther\NewOs\Panther\MigrationShims\MigShim5\SysWOW64\
vcomp140.dll
Created directory: \\?\C:\Windows\panther\NewOs\Panther\Resources
Copied file: \\?\C:\Windows\panther\NewOs\Panther\ScanResult.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\setupact.log
Copied file: \\?\C:\Windows\panther\NewOs\Panther\setuperr.log
Copied file: \\?\C:\Windows\panther\NewOs\Panther\windlp.state-old.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\windlp.state.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\WinSetupMon.log
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.1.5.4.3.4.0.0_APPRAISER_EverythingSys.bin
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.1.5.4.3.4.0.0_APPRAISER_HumanReadable.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.1.5.4.3.4.0.0_APPRAISER_SetupOutput.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.1.5.4.3.4.0.0_APPRAISER_SetupOutputHw.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.1.5.4.3.6.0.0_APPRAISER_EverythingGated.bin
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.1.5.4.3.6.0.0_APPRAISER_HumanReadable.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.1.5.4.3.6.0.0_APPRAISER_SetupOutput.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.4.0.0_APPRAISER_EverythingGated.bin
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.4.0.0_APPRAISER_HumanReadable.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.4.0.0_APPRAISER_SetupOutput.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.8.0.0_APPRAISER_EverythingAppInteresting.bin
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.8.0.0_APPRAISER_EverythingAppUninteresting.bin
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.8.0.0_APPRAISER_EverythingDevInteresting.bin
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.8.0.0_APPRAISER_EverythingDevUninteresting.bin
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.8.0.0_APPRAISER_HumanReadable.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.8.0.0_APPRAISER_Migration.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.8.0.0_APPRAISER_SetupOutput.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\XfuWaRObM0e-
hpfj.8.2.2.3.6.8.0.0_APPRAISER_SetupOutputDrv.xml
Copied file: \\?\C:\Windows\panther\NewOs\Panther\_s_7EAE.tmp
Created directory: \\?\C:\Windows\panther\NewOs\Rollback
Copied file: \\?\C:\Windows\panther\NewOs\Rollback\checkpoint.info
Copied file: \\?\C:\Windows\panther\NewOs\Rollback\rollbackinfo.ini
Created directory: \\?\C:\Windows\panther\NewOs\Rollback\WinPE
Created directory: \\?\C:\Windows\panther\NewOs\Rollback\WinPE\setupapi
Copied file: \\?\C:\Windows\panther\NewOs\Rollback\WinPE\setupapi\
setupapi.offline.log
Copied file: \\?\C:\Windows\panther\NewOs\Rollback\WinSetupMon.DAT
Copied file: \\?\C:\Windows\panther\setup.etl
Created directory: \\?\C:\Windows\panther\setup.exe
Copied file: \\?\C:\Windows\panther\setupinfo
Copied file: \\?\C:\Windows\panther\unattend.xml
Created directory: \\?\C:\Windows\panther\UnattendGC
Copied file: \\?\C:\Windows\panther\UnattendGC\diagerr.xml
Copied file: \\?\C:\Windows\panther\UnattendGC\diagwrn.xml
Copied file: \\?\C:\Windows\panther\UnattendGC\setupact.log
Copied file: \\?\C:\Windows\panther\UnattendGC\setuperr.log
Files Copied: 104
GetFileAction succeeded
Action succeeded
Duration (Ticks, ms): 1765
Duration (UBI, ms): 1763
-----------------------------------------------
file_3_windir_inf_setupapi_log
-----------------------------------------------
Copied file: \\?\C:\Windows\inf\setupapi.app.log
Copied file: \\?\C:\Windows\inf\setupapi.dev.20250506_203813.log
Copied file: \\?\C:\Windows\inf\setupapi.dev.20250528_124500.log
Copied file: \\?\C:\Windows\inf\setupapi.dev.20250611_231755.log
Copied file: \\?\C:\Windows\inf\setupapi.dev.log
Copied file: \\?\C:\Windows\inf\setupapi.offline.20191207_091437.log
Copied file: \\?\C:\Windows\inf\setupapi.setup.log
Files Copied: 7
GetFileAction succeeded
Action succeeded
Duration (Ticks, ms): 32
Duration (UBI, ms): 29
-----------------------------------------------

Total Wall-Clock Duration (ms): 1891


Total UBI Duration (ms): 1890

You might also like