One Hat Cyber Team
Your IP :
172.16.0.254
Server IP :
58.26.163.33
Server :
Windows NT DGPENSV2LPKMN 10.0 build 14393 (Windows Server 2016) AMD64
Server Software :
Apache/2.4.46 (Win64) OpenSSL/1.1.1h PHP/7.3.25
PHP Version :
7.3.25
Buat File
|
Buat Folder
Eksekusi
Dir :
C:
/
Windows
/
System32
/
Sysprep
/
ActionFiles
/
View File Name :
Cleanup.xml
<sysprepInformation><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-SQMApi" version="10.0.14393.0" publicKeyToken="31bf3856ad364e35" processorArchitecture="amd64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x0300"></sysprepOrder><sysprepModule methodName="SqmSysprepCleanup" moduleName="sqmapi.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-Cryptography" version="10.0.14393.0" publicKeyToken="31bf3856ad364e35" processorArchitecture="wow64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x0F00"></sysprepOrder><sysprepModule methodName="CryptoSysPrep_Clean" moduleName="$(runtime.windows)\system32\capisp.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-Sysprep-SpNet" version="10.0.14393.0" publicKeyToken="31bf3856ad364e35" processorArchitecture="x86" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x0D00"></sysprepOrder><sysprepModule methodName="Sysprep_Clean_Net" moduleName="$(runtime.system32)\spnet.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-COM-DTC-Runtime" version="10.0.14393.0" publicKeyToken="31bf3856ad364e35" processorArchitecture="wow64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x1100"></sysprepOrder><sysprepModule methodName="SysPrepDtcCleanup" moduleName="$(runtime.windows)\system32\msdtcprx.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-SQMApi" version="10.0.14393.0" publicKeyToken="31bf3856ad364e35" processorArchitecture="x86" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x0300"></sysprepOrder><sysprepModule methodName="SqmSysprepCleanup" moduleName="sqmapi.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-Sysprep-SpNet" version="10.0.14393.0" publicKeyToken="31bf3856ad364e35" processorArchitecture="amd64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x0D00"></sysprepOrder><sysprepModule methodName="Sysprep_Clean_Net" moduleName="$(runtime.system32)\spnet.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-Cryptography" version="10.0.14393.0" publicKeyToken="31bf3856ad364e35" processorArchitecture="amd64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x0F00"></sysprepOrder><sysprepModule methodName="CryptoSysPrep_Clean" moduleName="$(runtime.windows)\system32\capisp.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-COM-DTC-Runtime" version="10.0.14393.0" publicKeyToken="31bf3856ad364e35" processorArchitecture="amd64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x1100"></sysprepOrder><sysprepModule methodName="SysPrepDtcCleanup" moduleName="$(runtime.windows)\system32\msdtcprx.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-IE-Sysprep" version="11.0.14393.2273" publicKeyToken="31bf3856ad364e35" processorArchitecture="wow64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x0C00"></sysprepOrder><sysprepModule methodName="Sysprep_Cleanup_IE" moduleName="$(runtime.system32)\iesysprep.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-IE-Sysprep" version="11.0.14393.2273" publicKeyToken="31bf3856ad364e35" processorArchitecture="amd64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x0C00"></sysprepOrder><sysprepModule methodName="Sysprep_Cleanup_IE" moduleName="$(runtime.system32)\iesysprep.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-UAL-Task" version="10.0.14393.2999" publicKeyToken="31bf3856ad364e35" processorArchitecture="amd64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x1400"></sysprepOrder><sysprepModule methodName="SumSysprepCleanup" moduleName="$(runtime.system32)\ualsvc.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-TapiSetup" version="10.0.14393.4169" publicKeyToken="31bf3856ad364e35" processorArchitecture="wow64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x1200"></sysprepOrder><sysprepModule methodName="TapiSysPrepClean" moduleName="$(runtime.system32)\tapisysprep"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-LpkSetup" version="10.0.14393.4169" publicKeyToken="31bf3856ad364e35" processorArchitecture="amd64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x0500"></sysprepOrder><sysprepModule methodName="Sysprep_Generalize_MUILangCleanup" moduleName="$(runtime.system32)\LangCleanupSysprepAction.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-SystemMaintenanceService-Core" version="10.0.14393.4169" publicKeyToken="31bf3856ad364e35" processorArchitecture="amd64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x0600"></sysprepOrder><sysprepModule methodName="PfSvSysprepCleanup" moduleName="$(runtime.system32)\sysmain.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-Shell-Setup" version="10.0.14393.4169" publicKeyToken="31bf3856ad364e35" processorArchitecture="amd64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x0900"></sysprepOrder><sysprepModule methodName="Sysprep_Cleanup_Shell" moduleName="$(runtime.system32)\shsetup.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-TapiSetup" version="10.0.14393.4169" publicKeyToken="31bf3856ad364e35" processorArchitecture="amd64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x1200"></sysprepOrder><sysprepModule methodName="TapiSysPrepClean" moduleName="$(runtime.system32)\tapisysprep"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-Shell-Setup" version="10.0.14393.4169" publicKeyToken="31bf3856ad364e35" processorArchitecture="x86" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x0900"></sysprepOrder><sysprepModule methodName="Sysprep_Cleanup_Shell" moduleName="$(runtime.system32)\shsetup.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-Sysprep-SpOpk" version="10.0.14393.5717" publicKeyToken="31bf3856ad364e35" processorArchitecture="amd64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x0100"></sysprepOrder><sysprepValidate methodName="Sysprep_Clean_Validate_Opk" moduleName="$(runtime.system32)\spopk.dll"></sysprepValidate><sysprepModule methodName="Sysprep_Clean_Opk" moduleName="$(runtime.system32)\spopk.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-TaskScheduler-Service" version="10.0.14393.5648" publicKeyToken="31bf3856ad364e35" processorArchitecture="wow64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x0E00"></sysprepOrder><registryActions> <deleteValue name="HashingCompleted" path="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule"></deleteValue> <deleteValue name="MigrationCleanupCompleted" path="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule"></deleteValue> <deleteValue name="DomainJoinDetected" path="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule"></deleteValue> </registryActions></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-Sysprep-SpOpk" version="10.0.14393.5717" publicKeyToken="31bf3856ad364e35" processorArchitecture="x86" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x0100"></sysprepOrder><sysprepValidate methodName="Sysprep_Clean_Validate_Opk" moduleName="$(runtime.system32)\spopk.dll"></sysprepValidate><sysprepModule methodName="Sysprep_Clean_Opk" moduleName="$(runtime.system32)\spopk.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-TaskScheduler-Service" version="10.0.14393.5648" publicKeyToken="31bf3856ad364e35" processorArchitecture="amd64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x0E00"></sysprepOrder><registryActions> <deleteValue name="HashingCompleted" path="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule"></deleteValue> <deleteValue name="MigrationCleanupCompleted" path="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule"></deleteValue> <deleteValue name="DomainJoinDetected" path="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule"></deleteValue> </registryActions></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-UXInit" version="10.0.14393.7070" publicKeyToken="31bf3856ad364e35" processorArchitecture="wow64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x1000"></sysprepOrder><fileActions> <deleteFile path="$(runtime.windows)\Resources\Themes\aero\VSCache\*"></deleteFile> </fileActions></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-TabletPC-InputPersonalization" version="10.0.14393.6451" publicKeyToken="31bf3856ad364e35" processorArchitecture="amd64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x1300"></sysprepOrder><sysprepModule methodName="Sysprep_Cleanup_IPS" moduleName="$(runtime.commonFiles)\Microsoft Shared\Ink\IpsMigrationPlugin.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-EventLog" version="10.0.14393.6343" publicKeyToken="31bf3856ad364e35" processorArchitecture="amd64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x0400"></sysprepOrder><sysprepModule methodName="EvtIntSysprepCleanup" moduleName="$(runtime.system32)\wevtapi.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-Compat-GeneralTel" version="10.0.14393.7259" publicKeyToken="31bf3856ad364e35" processorArchitecture="amd64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x1500"></sysprepOrder><sysprepModule methodName="SysprepCleanupEnableCustomTrigger" moduleName="$(runtime.system32)\generaltel.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-ErrorReportingCore" version="10.0.14393.7254" publicKeyToken="31bf3856ad364e35" processorArchitecture="amd64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x0A00"></sysprepOrder><sysprepModule methodName="WerSysprepCleanup" moduleName="wer.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="WindowsSearchEngine" version="7.0.14393.7254" publicKeyToken="31bf3856ad364e35" processorArchitecture="amd64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x0B00"></sysprepOrder><sysprepModule methodName="MSSrch_SysPrep_Cleanup" moduleName="$(runtime.system32)\mssrch.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-UXInit" version="10.0.14393.7070" publicKeyToken="31bf3856ad364e35" processorArchitecture="amd64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x1000"></sysprepOrder><fileActions> <deleteFile path="$(runtime.windows)\Resources\Themes\aero\VSCache\*"></deleteFile> </fileActions></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-ErrorReportingCore" version="10.0.14393.7254" publicKeyToken="31bf3856ad364e35" processorArchitecture="wow64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x0A00"></sysprepOrder><sysprepModule methodName="WerSysprepCleanup" moduleName="wer.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="Microsoft-Windows-DeviceCensus-Schedule-ClientServer" version="10.0.14393.7259" publicKeyToken="31bf3856ad364e35" processorArchitecture="amd64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x1600"></sysprepOrder><sysprepModule methodName="SysprepCleanupEnableCustomTrigger" moduleName="$(runtime.system32)\dcntel.dll"></sysprepModule></imaging><imaging exclude=""><assemblyIdentity name="WindowsSearchEngine" version="7.0.14393.7254" publicKeyToken="31bf3856ad364e35" processorArchitecture="wow64" versionScope="NonSxS"></assemblyIdentity><sysprepOrder order="0x0B00"></sysprepOrder><sysprepModule methodName="MSSrch_SysPrep_Cleanup" moduleName="$(runtime.system32)\mssrch.dll"></sysprepModule></imaging></sysprepInformation>