One Hat Cyber Team
Your IP :
172.16.0.254
Server IP :
58.26.163.33
Server :
Windows NT DGPENSV2LPKMN 10.0 build 14393 (Windows Server 2016) AMD64
Server Software :
Apache/2.4.46 (Win64) OpenSSL/1.1.1h PHP/7.3.25
PHP Version :
7.3.25
Buat File
|
Buat Folder
Eksekusi
Dir :
C:
/
Windows
/
Panther
/
View File Name :
diagwrn.xml
<xml xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:z="#RowsetSchema"> <s:Schema id="RowsetSchema"> <s:ElementType name="row" content="eltOnly" rs:updatable="true"> <s:AttributeType name="Cls" rs:number="0"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="Sev" rs:number="1"> <s:datatype dt:type="int"/> </s:AttributeType> <s:AttributeType name="Maj" rs:number="2"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="Min" rs:number="3"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="LN" rs:number="4"> <s:datatype dt:type="int"/> </s:AttributeType> <s:AttributeType name="Fil" rs:number="5"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="Fun" rs:number="6"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="Uid" rs:number="7"> <s:datatype dt:type="int"/> </s:AttributeType> <s:AttributeType name="Msg" rs:number="8"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="PID" rs:number="9"> <s:datatype dt:type="int"/> </s:AttributeType> <s:AttributeType name="TID" rs:number="10"> <s:datatype dt:type="int"/> </s:AttributeType> <s:AttributeType name="Con" rs:number="11"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="Exe" rs:number="12"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="Mod" rs:number="13"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="Err" rs:number="14"> <s:datatype dt:type="int"/> </s:AttributeType> <s:AttributeType name="MD" rs:number="15"> <s:datatype dt:type="hexBinary"/> </s:AttributeType> <s:AttributeType name="DT" rs:number="16"> <s:datatype dt:type="dateTime"/> </s:AttributeType> </s:ElementType> </s:Schema> <rs:data> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="2263" Fil="" Fun="LogCallback" Uid="50726604" Msg="GetDiskSMARTStatus: Disk does not support SMART failure detection." PID="900" TID="940" Con="" Exe="X:\Sources\setup.exe" Mod="WinSetup.dll" Err="1" MD="" DT="2019-04-03T17:04:36"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="470" Fil="" Fun="UnattendLogWV" Uid="50331648" Msg="[setup.exe] UnattendSearchSetupSourceDrive: Unable to convert ARC path [MULTI(0)DISK(0)CDROM(0)] to NT path; status = 0x80070002." PID="900" TID="904" Con="" Exe="X:\Sources\setup.exe" Mod="UNATTEND.DLL" Err="0" MD="" DT="2019-04-03T17:04:37"/> <z:row Cls="D" Sev="50331648" Maj="diagnostic" Min="Def" LN="94" Fil="" Fun="CAccessWMI::LogErrorMessage" Uid="50790541" Msg="Win32_Processor : CoInitializeEx returned RPC_E_CHANGED_MODE. Continue. Error code = 0x80010106" PID="900" TID="1160" Con="" Exe="X:\Sources\setup.exe" Mod="diagnostic.dll" Err="1168" MD="" DT="2019-04-03T17:04:37"/> <z:row Cls="D" Sev="50331648" Maj="diagnostic" Min="Def" LN="94" Fil="" Fun="CAccessWMI::LogErrorMessage" Uid="50790438" Msg="Win32_Processor : Unable to retrieve Stepping, vtType = 8. Error code = 0x0" PID="900" TID="1160" Con="" Exe="X:\Sources\setup.exe" Mod="diagnostic.dll" Err="0" MD="" DT="2019-04-03T17:04:39"/> <z:row Cls="D" Sev="50331648" Maj="diagnostic" Min="Def" LN="94" Fil="" Fun="CAccessWMI::LogErrorMessage" Uid="50790438" Msg="Win32_Processor : Unable to retrieve Stepping, vtType = 8. Error code = 0x0" PID="900" TID="1160" Con="" Exe="X:\Sources\setup.exe" Mod="diagnostic.dll" Err="0" MD="" DT="2019-04-04T08:35:06"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="1232" Fil="" Fun="CallbackAppCompatProgress" Uid="50987008" Msg="[APPCOMPAT UI] Got CallbackAppCompatProgress without compat progress page active" PID="900" TID="1160" Con="" Exe="X:\Sources\setup.exe" Mod="win32ui.dll" Err="0" MD="" DT="2019-04-04T08:35:07"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="2263" Fil="" Fun="LogCallback" Uid="50726604" Msg="GetDiskSMARTStatus: Disk does not support SMART failure detection." PID="900" TID="1828" Con="" Exe="X:\Sources\setup.exe" Mod="WinSetup.dll" Err="1" MD="" DT="2019-04-04T08:35:12"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="2263" Fil="" Fun="LogCallback" Uid="50726604" Msg="GetDiskSMARTStatus: Disk does not support SMART failure detection." PID="900" TID="1864" Con="" Exe="X:\Sources\setup.exe" Mod="WinSetup.dll" Err="1" MD="" DT="2019-04-04T08:35:24"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="2263" Fil="" Fun="LogCallback" Uid="50726604" Msg="GetDiskSMARTStatus: Disk does not support SMART failure detection." PID="900" TID="1892" Con="" Exe="X:\Sources\setup.exe" Mod="WinSetup.dll" Err="1" MD="" DT="2019-04-04T08:35:25"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="2263" Fil="" Fun="LogCallback" Uid="50726604" Msg="GetDiskSMARTStatus: Disk does not support SMART failure detection." PID="900" TID="1868" Con="" Exe="X:\Sources\setup.exe" Mod="WinSetup.dll" Err="1" MD="" DT="2019-04-04T08:35:25"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="2263" Fil="" Fun="LogCallback" Uid="50726604" Msg="GetDiskSMARTStatus: Disk does not support SMART failure detection." PID="900" TID="1908" Con="" Exe="X:\Sources\setup.exe" Mod="WinSetup.dll" Err="1" MD="" DT="2019-04-04T08:35:25"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="2263" Fil="" Fun="LogCallback" Uid="50726604" Msg="GetDiskSMARTStatus: Disk does not support SMART failure detection." PID="900" TID="1880" Con="" Exe="X:\Sources\setup.exe" Mod="WinSetup.dll" Err="1" MD="" DT="2019-04-04T08:35:25"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="2263" Fil="" Fun="LogCallback" Uid="50726604" Msg="GetDiskSMARTStatus: Disk does not support SMART failure detection." PID="900" TID="1948" Con="" Exe="X:\Sources\setup.exe" Mod="WinSetup.dll" Err="1" MD="" DT="2019-04-04T08:35:28"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="2263" Fil="" Fun="LogCallback" Uid="50726604" Msg="GetDiskSMARTStatus: Disk does not support SMART failure detection." PID="900" TID="1944" Con="" Exe="X:\Sources\setup.exe" Mod="WinSetup.dll" Err="1" MD="" DT="2019-04-04T08:35:28"/> </rs:data> </xml> <xml xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:z="#RowsetSchema"> <s:Schema id="RowsetSchema"> <s:ElementType name="row" content="eltOnly" rs:updatable="true"> <s:AttributeType name="Cls" rs:number="0"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="Sev" rs:number="1"> <s:datatype dt:type="int"/> </s:AttributeType> <s:AttributeType name="Maj" rs:number="2"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="Min" rs:number="3"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="LN" rs:number="4"> <s:datatype dt:type="int"/> </s:AttributeType> <s:AttributeType name="Fil" rs:number="5"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="Fun" rs:number="6"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="Uid" rs:number="7"> <s:datatype dt:type="int"/> </s:AttributeType> <s:AttributeType name="Msg" rs:number="8"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="PID" rs:number="9"> <s:datatype dt:type="int"/> </s:AttributeType> <s:AttributeType name="TID" rs:number="10"> <s:datatype dt:type="int"/> </s:AttributeType> <s:AttributeType name="Con" rs:number="11"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="Exe" rs:number="12"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="Mod" rs:number="13"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="Err" rs:number="14"> <s:datatype dt:type="int"/> </s:AttributeType> <s:AttributeType name="MD" rs:number="15"> <s:datatype dt:type="hexBinary"/> </s:AttributeType> <s:AttributeType name="DT" rs:number="16"> <s:datatype dt:type="dateTime"/> </s:AttributeType> </s:ElementType> </s:Schema> <rs:data> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="2263" Fil="" Fun="LogCallback" Uid="50726604" Msg="DeleteFileEx: Unable to clear out attributes on [E:\$WINDOWS.~BT\Sources\Rollback\bootsec.dat]; GLE = 0x2" PID="900" TID="904" Con="" Exe="X:\Sources\setup.exe" Mod="WinSetup.dll" Err="2" MD="" DT="2019-04-04T08:35:28"/> </rs:data> </xml> <xml xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:z="#RowsetSchema"> <s:Schema id="RowsetSchema"> <s:ElementType name="row" content="eltOnly" rs:updatable="true"> <s:AttributeType name="Cls" rs:number="0"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="Sev" rs:number="1"> <s:datatype dt:type="int"/> </s:AttributeType> <s:AttributeType name="Maj" rs:number="2"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="Min" rs:number="3"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="LN" rs:number="4"> <s:datatype dt:type="int"/> </s:AttributeType> <s:AttributeType name="Fil" rs:number="5"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="Fun" rs:number="6"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="Uid" rs:number="7"> <s:datatype dt:type="int"/> </s:AttributeType> <s:AttributeType name="Msg" rs:number="8"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="PID" rs:number="9"> <s:datatype dt:type="int"/> </s:AttributeType> <s:AttributeType name="TID" rs:number="10"> <s:datatype dt:type="int"/> </s:AttributeType> <s:AttributeType name="Con" rs:number="11"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="Exe" rs:number="12"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="Mod" rs:number="13"> <s:datatype dt:type="string"/> </s:AttributeType> <s:AttributeType name="Err" rs:number="14"> <s:datatype dt:type="int"/> </s:AttributeType> <s:AttributeType name="MD" rs:number="15"> <s:datatype dt:type="hexBinary"/> </s:AttributeType> <s:AttributeType name="DT" rs:number="16"> <s:datatype dt:type="dateTime"/> </s:AttributeType> </s:ElementType> </s:Schema> <rs:data> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="127" Fil="" Fun="RewriteBlackboardPaths" Uid="50741248" Msg="RewriteBlackboardPaths:Corresponding path not found. Key name [\LangPacks\LanguageList\en-US] Value name [SrcLocation]. Path name X:\Langpacks\en-US." PID="264" TID="96" Con="" Exe="C:\Windows\system32\oobe\setup.exe" Mod="WinSetup.dll" Err="87" MD="" DT="2019-04-04T08:38:41"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="127" Fil="" Fun="RewriteBlackboardPaths" Uid="50741248" Msg="RewriteBlackboardPaths:Corresponding path not found. Key name [\InstallSource] Value name [InstallSourcesPath]. Path name D:\Sources." PID="264" TID="96" Con="" Exe="C:\Windows\system32\oobe\setup.exe" Mod="WinSetup.dll" Err="87" MD="" DT="2019-04-04T08:38:41"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="127" Fil="" Fun="RewriteBlackboardPaths" Uid="50741248" Msg="RewriteBlackboardPaths:Corresponding path not found. Key name [\ImageInfo\OSImage] Value name [FilePath]. Path name D:\Sources\install.wim." PID="264" TID="96" Con="" Exe="C:\Windows\system32\oobe\setup.exe" Mod="WinSetup.dll" Err="87" MD="" DT="2019-04-04T08:38:41"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="1205" Fil="" Fun="ActionPlatform::GetValue" Uid="51314688" Msg="ActionPlatform::GetValue: Error from RegQueryValueEx on value SysprepMode under key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Setup\Sysprep; dwRet = 0x2" PID="264" TID="96" Con="" Exe="C:\Windows\system32\oobe\setup.exe" Mod="WinSetup.dll" Err="0" MD="" DT="2019-04-04T08:38:41"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="829" Fil="" Fun="ActionPlatform::DeleteValue" Uid="51314688" Msg="ActionPlatform::DeleteValue: Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WOF, whose value is to be deleted, does not exist" PID="264" TID="96" Con="" Exe="C:\Windows\system32\oobe\setup.exe" Mod="WinSetup.dll" Err="0" MD="" DT="2019-04-04T08:38:41"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="829" Fil="" Fun="ActionPlatform::DeleteValue" Uid="51314688" Msg="ActionPlatform::DeleteValue: Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WOF, whose value is to be deleted, does not exist" PID="264" TID="96" Con="" Exe="C:\Windows\system32\oobe\setup.exe" Mod="WinSetup.dll" Err="0" MD="" DT="2019-04-04T08:38:41"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="262" Fil="" Fun="EnsureStagedKeyReflectsWindowsAppsFolder" Uid="51314688" Msg="Ignoring folder Deleted because could not convert to family name " PID="264" TID="96" Con="" Exe="C:\Windows\system32\oobe\setup.exe" Mod="AppxSysprep.dll" Err="18" MD="" DT="2019-04-03T17:38:47"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="1623" Fil="" Fun="SpecializeBcdStore" Uid="51249152" Msg="SpecializeBcdStore: The /detecthal switch could not be removed because it was not found." PID="264" TID="96" Con="" Exe="C:\Windows\system32\oobe\setup.exe" Mod="spbcd.dll" Err="0" MD="" DT="2019-04-03T17:38:50"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="470" Fil="" Fun="UnattendLogWV" Uid="50331648" Msg="[setup.exe] read xml file (\Recovery\ReAgentOld.xml) failed: 0x3" PID="264" TID="96" Con="" Exe="C:\Windows\system32\oobe\setup.exe" Mod="reagent.dll" Err="0" MD="" DT="2019-04-03T17:38:51"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="470" Fil="" Fun="UnattendLogWV" Uid="50331648" Msg="[setup.exe] ReAgentXMLParser::ParseConfigFile failed to read config xml file (0x3) in file base\diagnosis\srt\reagent2\reinfo\parser_2.0.cpp line 764" PID="264" TID="96" Con="" Exe="C:\Windows\system32\oobe\setup.exe" Mod="reagent.dll" Err="0" MD="" DT="2019-04-03T17:38:51"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="470" Fil="" Fun="UnattendLogWV" Uid="50331648" Msg="[setup.exe] ReAgentXMLParser::ParseConfigFile (xml file: \Recovery\ReAgentOld.xml) returning 0x3" PID="264" TID="96" Con="" Exe="C:\Windows\system32\oobe\setup.exe" Mod="reagent.dll" Err="0" MD="" DT="2019-04-03T17:38:51"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="470" Fil="" Fun="UnattendLogWV" Uid="50331648" Msg="[setup.exe] ReAgentConfig::ParseConfigFile returned with 0x3 " PID="264" TID="96" Con="" Exe="C:\Windows\system32\oobe\setup.exe" Mod="reagent.dll" Err="0" MD="" DT="2019-04-03T17:38:51"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="470" Fil="" Fun="UnattendLogWV" Uid="50331648" Msg="[setup.exe] ReAgentConfig::Init failed to init reagent xml parser (0x3) in file base\diagnosis\srt\reagent2\reinfo\parser_2.0.cpp line 1869" PID="264" TID="96" Con="" Exe="C:\Windows\system32\oobe\setup.exe" Mod="reagent.dll" Err="0" MD="" DT="2019-04-03T17:38:51"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="470" Fil="" Fun="UnattendLogWV" Uid="50331648" Msg="[setup.exe] Recovery file not found at C:\Windows\system32\Recovery\ReCustomization.xml" PID="264" TID="96" Con="" Exe="C:\Windows\system32\oobe\setup.exe" Mod="reagent.dll" Err="0" MD="" DT="2019-04-03T17:38:54"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="470" Fil="" Fun="UnattendLogWV" Uid="50331648" Msg="[setup.exe] winreBackupRecoveryFile (C:\Windows\system32\Recovery\ReCustomization.xml, ReCustomization.xml) failed, Err: 2" PID="264" TID="96" Con="" Exe="C:\Windows\system32\oobe\setup.exe" Mod="reagent.dll" Err="0" MD="" DT="2019-04-03T17:38:54"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="797" Fil="" Fun="ActionPlatform::DeleteValue" Uid="51314688" Msg="ActionPlatform::DeleteValue: Registry value DecompressOverride to be deleted does not exist under key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide" PID="264" TID="96" Con="" Exe="C:\Windows\system32\oobe\setup.exe" Mod="WinSetup.dll" Err="0" MD="" DT="2019-04-03T17:38:54"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="797" Fil="" Fun="ActionPlatform::DeleteValue" Uid="51314688" Msg="ActionPlatform::DeleteValue: Registry value SysprepMode to be deleted does not exist under key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Setup\Sysprep" PID="264" TID="96" Con="" Exe="C:\Windows\system32\oobe\setup.exe" Mod="WinSetup.dll" Err="0" MD="" DT="2019-04-03T17:38:54"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="638" Fil="" Fun="RunRegistryDlls" Uid="51314831" Msg="RunRegistryDlls:Registry key is either empty or malformed: SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\SysPrepExternal\Specialize" PID="264" TID="96" Con="" Exe="C:\Windows\system32\oobe\setup.exe" Mod="WinSetup.dll" Err="0" MD="" DT="2019-04-03T17:38:54"/> <z:row Cls="D" Sev="50331648" Maj="Def" Min="Def" LN="154" Fil="" Fun="Callback_SystemRestore" Uid="50725740" Msg="Callback_SystemRestore: Failed to set System Restore state. GLE is [126]" PID="264" TID="96" Con="" Exe="C:\Windows\system32\oobe\setup.exe" Mod="WinSetup.dll" Err="126" MD="" DT="2019-04-03T17:38:57"/> </rs:data> </xml>