[2024-11-23 15.37.20.0192959 | INF] KAPE directory: C:\Users\Odin\Downloads\kape\KAPE
[2024-11-23 15.37.20.0505932 | INF] Command line:   --tsource C: --tdest C:\%m --target RegistryHives --zip investigationpackage --gui 
[2024-11-23 15.37.20.0583622 | INF] System info: Machine name: VALHALLA-PC, 64-bit: true, User: chri8 OS: "Windows10" (10.0.26100)
[2024-11-23 15.37.22.1709618 | INF] Using Target operations
[2024-11-23 15.37.22.1836277 | WRN]   Expanded --tdest to C:\VALHALLA-PC
[2024-11-23 15.37.22.1938197 | WRN]   Creating target destination directory C:\VALHALLA-PC
[2024-11-23 15.37.22.2067709 | INF] Found 2 targets. Expanding targets to file list...
[2024-11-23 15.37.23.2393093 | INF] Found 54 files in 0.998 seconds. Beginning copy...
[2024-11-23 15.37.24.7152979 | INF]   Deferring C:\Windows\System32\config\SAM.LOG1 due to IOException...
[2024-11-23 15.37.24.7226085 | INF]   Deferring C:\Windows\System32\config\SAM.LOG2 due to IOException...
[2024-11-23 15.37.24.7303644 | INF]   Deferring C:\Windows\System32\config\SECURITY.LOG1 due to IOException...
[2024-11-23 15.37.24.7433092 | INF]   Deferring C:\Windows\System32\config\SECURITY.LOG2 due to IOException...
[2024-11-23 15.37.24.7536513 | INF]   Deferring C:\Windows\System32\config\SOFTWARE.LOG1 due to IOException...
[2024-11-23 15.37.24.7613876 | INF]   Deferring C:\Windows\System32\config\SOFTWARE.LOG2 due to IOException...
[2024-11-23 15.37.24.7740560 | INF]   Deferring C:\Windows\System32\config\SYSTEM.LOG1 due to IOException...
[2024-11-23 15.37.24.8014562 | INF]   Deferring C:\Windows\System32\config\SYSTEM.LOG2 due to IOException...
[2024-11-23 15.37.24.8117443 | INF]   Deferring C:\Windows\System32\config\SAM due to IOException...
[2024-11-23 15.37.24.8247173 | INF]   Deferring C:\Windows\System32\config\SECURITY due to IOException...
[2024-11-23 15.37.24.8453436 | INF]   Deferring C:\Windows\System32\config\SOFTWARE due to IOException...
[2024-11-23 15.37.24.8548970 | INF]   Deferring C:\Windows\System32\config\SYSTEM due to IOException...
[2024-11-23 15.37.24.8741018 | INF]   Deferring C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT due to IOException...
[2024-11-23 15.37.24.8869371 | INF]   Deferring C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG1 due to IOException...
[2024-11-23 15.37.24.9000202 | INF]   Deferring C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG2 due to IOException...
[2024-11-23 15.37.24.9127244 | INF]   Deferring C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT due to IOException...
[2024-11-23 15.37.24.9203051 | INF]   Deferring C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG1 due to IOException...
[2024-11-23 15.37.24.9352654 | INF]   Deferring C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG2 due to IOException...
[2024-11-23 15.37.24.9545384 | INF]   Deferring C:\Users\chri8\NTUSER.DAT due to IOException...
[2024-11-23 15.37.25.2653649 | INF]   Deferring C:\Users\Odin\NTUSER.DAT due to IOException...
[2024-11-23 15.37.25.3262948 | INF]   Deferring C:\Users\chri8\ntuser.dat.LOG1 due to IOException...
[2024-11-23 15.37.25.3348062 | INF]   Deferring C:\Users\chri8\ntuser.dat.LOG2 due to IOException...
[2024-11-23 15.37.25.4499899 | INF]   Deferring C:\Users\Odin\ntuser.dat.LOG1 due to IOException...
[2024-11-23 15.37.25.4600009 | INF]   Deferring C:\Users\Odin\ntuser.dat.LOG2 due to IOException...
[2024-11-23 15.37.25.5113797 | INF]   Deferring C:\Windows\System32\config\DEFAULT due to IOException...
[2024-11-23 15.37.25.5187294 | INF]   Deferring C:\Windows\System32\config\DEFAULT.LOG1 due to IOException...
[2024-11-23 15.37.25.5280070 | INF]   Deferring C:\Windows\System32\config\DEFAULT.LOG2 due to IOException...
[2024-11-23 15.37.25.5416608 | INF]   Deferring C:\Users\chri8\AppData\Local\Microsoft\Windows\UsrClass.dat due to IOException...
[2024-11-23 15.37.25.7075146 | INF]   Deferring C:\Users\Odin\AppData\Local\Microsoft\Windows\UsrClass.dat due to IOException...
[2024-11-23 15.37.25.7691806 | INF]   Deferring C:\Users\chri8\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1 due to IOException...
[2024-11-23 15.37.25.7817170 | INF]   Deferring C:\Users\chri8\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2 due to IOException...
[2024-11-23 15.37.25.8396867 | INF]   Deferring C:\Users\Odin\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1 due to IOException...
[2024-11-23 15.37.25.8528242 | INF]   Deferring C:\Users\Odin\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2 due to IOException...
[2024-11-23 15.37.25.8707370 | INF] Deferred file count: 33. Copying locked files...
[2024-11-23 15.37.25.9197301 | INF]   Copied deferred file C:\Windows\System32\config\SAM.LOG1 to C:\VALHALLA-PC\C\Windows\System32\config\SAM.LOG1. Hashing source file...
[2024-11-23 15.37.25.9574066 | INF]   Copied deferred file C:\Windows\System32\config\SAM.LOG2 to C:\VALHALLA-PC\C\Windows\System32\config\SAM.LOG2. Hashing source file...
[2024-11-23 15.37.26.0011046 | INF]   Copied deferred file C:\Windows\System32\config\SECURITY.LOG1 to C:\VALHALLA-PC\C\Windows\System32\config\SECURITY.LOG1. Hashing source file...
[2024-11-23 15.37.26.0317885 | INF]   Copied deferred file C:\Windows\System32\config\SECURITY.LOG2 to C:\VALHALLA-PC\C\Windows\System32\config\SECURITY.LOG2. Hashing source file...
[2024-11-23 15.37.30.0853761 | INF]   Copied deferred file C:\Windows\System32\config\SOFTWARE.LOG1 to C:\VALHALLA-PC\C\Windows\System32\config\SOFTWARE.LOG1. Hashing source file...
[2024-11-23 15.37.36.2769767 | INF]   Copied deferred file C:\Windows\System32\config\SOFTWARE.LOG2 to C:\VALHALLA-PC\C\Windows\System32\config\SOFTWARE.LOG2. Hashing source file...
[2024-11-23 15.37.36.6493490 | INF]   Copied deferred file C:\Windows\System32\config\SYSTEM.LOG1 to C:\VALHALLA-PC\C\Windows\System32\config\SYSTEM.LOG1. Hashing source file...
[2024-11-23 15.37.37.7448861 | INF]   Copied deferred file C:\Windows\System32\config\SYSTEM.LOG2 to C:\VALHALLA-PC\C\Windows\System32\config\SYSTEM.LOG2. Hashing source file...
[2024-11-23 15.37.37.7954789 | INF]   Copied deferred file C:\Windows\System32\config\SAM to C:\VALHALLA-PC\C\Windows\System32\config\SAM. Hashing source file...
[2024-11-23 15.37.37.8298748 | INF]   Copied deferred file C:\Windows\System32\config\SECURITY to C:\VALHALLA-PC\C\Windows\System32\config\SECURITY. Hashing source file...
[2024-11-23 15.38.00.6027940 | INF]   Copied deferred file C:\Windows\System32\config\SOFTWARE to C:\VALHALLA-PC\C\Windows\System32\config\SOFTWARE. Hashing source file...
[2024-11-23 15.38.04.3423478 | INF]   Copied deferred file C:\Windows\System32\config\SYSTEM to C:\VALHALLA-PC\C\Windows\System32\config\SYSTEM. Hashing source file...
[2024-11-23 15.38.04.4385850 | INF]   Copied deferred file C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT to C:\VALHALLA-PC\C\Windows\ServiceProfiles\LocalService\NTUSER.DAT. Hashing source file...
[2024-11-23 15.38.04.4796356 | INF]   Copied deferred file C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG1 to C:\VALHALLA-PC\C\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG1. Hashing source file...
[2024-11-23 15.38.04.5205193 | INF]   Copied deferred file C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG2 to C:\VALHALLA-PC\C\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG2. Hashing source file...
[2024-11-23 15.38.04.6116618 | INF]   Copied deferred file C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT to C:\VALHALLA-PC\C\Windows\ServiceProfiles\NetworkService\NTUSER.DAT. Hashing source file...
[2024-11-23 15.38.04.6598266 | INF]   Copied deferred file C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG1 to C:\VALHALLA-PC\C\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG1. Hashing source file...
[2024-11-23 15.38.04.6964906 | INF]   Copied deferred file C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG2 to C:\VALHALLA-PC\C\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG2. Hashing source file...
[2024-11-23 15.38.05.2579475 | INF]   Copied deferred file C:\Users\chri8\NTUSER.DAT to C:\VALHALLA-PC\C\Users\chri8\NTUSER.DAT. Hashing source file...
[2024-11-23 15.38.05.7088329 | INF]   Copied deferred file C:\Users\Odin\NTUSER.DAT to C:\VALHALLA-PC\C\Users\Odin\NTUSER.DAT. Hashing source file...
[2024-11-23 15.38.05.9023067 | INF]   Copied deferred file C:\Users\chri8\ntuser.dat.LOG1 to C:\VALHALLA-PC\C\Users\chri8\ntuser.dat.LOG1. Hashing source file...
[2024-11-23 15.38.06.0248596 | INF]   Copied deferred file C:\Users\chri8\ntuser.dat.LOG2 to C:\VALHALLA-PC\C\Users\chri8\ntuser.dat.LOG2. Hashing source file...
[2024-11-23 15.38.06.1903970 | INF]   Copied deferred file C:\Users\Odin\ntuser.dat.LOG1 to C:\VALHALLA-PC\C\Users\Odin\ntuser.dat.LOG1. Hashing source file...
[2024-11-23 15.38.06.3374518 | INF]   Copied deferred file C:\Users\Odin\ntuser.dat.LOG2 to C:\VALHALLA-PC\C\Users\Odin\ntuser.dat.LOG2. Hashing source file...
[2024-11-23 15.38.06.4987549 | INF]   Copied deferred file C:\Windows\System32\config\DEFAULT to C:\VALHALLA-PC\C\Windows\System32\config\DEFAULT. Hashing source file...
[2024-11-23 15.38.06.5692164 | INF]   Copied deferred file C:\Windows\System32\config\DEFAULT.LOG1 to C:\VALHALLA-PC\C\Windows\System32\config\DEFAULT.LOG1. Hashing source file...
[2024-11-23 15.38.06.6431489 | INF]   Copied deferred file C:\Windows\System32\config\DEFAULT.LOG2 to C:\VALHALLA-PC\C\Windows\System32\config\DEFAULT.LOG2. Hashing source file...
[2024-11-23 15.38.07.2301932 | INF]   Copied deferred file C:\Users\chri8\AppData\Local\Microsoft\Windows\UsrClass.dat to C:\VALHALLA-PC\C\Users\chri8\AppData\Local\Microsoft\Windows\UsrClass.dat. Hashing source file...
[2024-11-23 15.38.07.7220111 | INF]   Copied deferred file C:\Users\Odin\AppData\Local\Microsoft\Windows\UsrClass.dat to C:\VALHALLA-PC\C\Users\Odin\AppData\Local\Microsoft\Windows\UsrClass.dat. Hashing source file...
[2024-11-23 15.38.07.8978020 | INF]   Copied deferred file C:\Users\chri8\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1 to C:\VALHALLA-PC\C\Users\chri8\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1. Hashing source file...
[2024-11-23 15.38.08.0716916 | INF]   Copied deferred file C:\Users\chri8\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2 to C:\VALHALLA-PC\C\Users\chri8\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2. Hashing source file...
[2024-11-23 15.38.08.1897394 | INF]   Copied deferred file C:\Users\Odin\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1 to C:\VALHALLA-PC\C\Users\Odin\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1. Hashing source file...
[2024-11-23 15.38.08.2105511 | INF] Copied 45 (Deduplicated: 9) out of 54 files in 46.0517 seconds. See 2024-11-23T14_37_19_1299006_CopyLog.csv in the VHD(X)/Zip located in C:\VALHALLA-PC for copy details
[2024-11-23 15.38.08.2630472 | WRN] Compressing files to C:\VALHALLA-PC\2024-11-23T14.37.19_investigationpackage.zip...
[2024-11-23 15.38.21.2628754 | INF] Cleaning up files in C:\VALHALLA-PC...
[2024-11-23 15.38.21.3891564 | INF] Total execution time: 59.2309 seconds
