|
2024-01-25 06:06:39,376 1204 [DEBUG] - XmlConfiguration is now operational
|
|
2024-01-25 06:06:39,688 1204 [DEBUG] - Adding new type 'CygwinService' for type 'IAlternativeSourceRunner' from assembly 'choco'
|
|
2024-01-25 06:06:39,688 1204 [DEBUG] - Adding new type 'CygwinService' for type 'IInstallSourceRunner' from assembly 'choco'
|
|
2024-01-25 06:06:39,703 1204 [DEBUG] - Adding new type 'PythonService' for type 'IAlternativeSourceRunner' from assembly 'choco'
|
|
2024-01-25 06:06:39,719 1204 [DEBUG] - Adding new type 'PythonService' for type 'IListSourceRunner' from assembly 'choco'
|
|
2024-01-25 06:06:39,719 1204 [DEBUG] - Adding new type 'PythonService' for type 'IInstallSourceRunner' from assembly 'choco'
|
|
2024-01-25 06:06:39,765 1204 [DEBUG] - Adding new type 'PythonService' for type 'IUninstallSourceRunner' from assembly 'choco'
|
|
2024-01-25 06:06:39,765 1204 [DEBUG] - Adding new type 'RubyGemsService' for type 'IAlternativeSourceRunner' from assembly 'choco'
|
|
2024-01-25 06:06:39,783 1204 [DEBUG] - Adding new type 'RubyGemsService' for type 'IListSourceRunner' from assembly 'choco'
|
|
2024-01-25 06:06:39,783 1204 [DEBUG] - Adding new type 'RubyGemsService' for type 'IInstallSourceRunner' from assembly 'choco'
|
|
2024-01-25 06:06:39,798 1204 [DEBUG] - Adding new type 'SystemStateValidation' for type 'IValidation' from assembly 'choco'
|
|
2024-01-25 06:06:39,812 1204 [DEBUG] - Adding new type 'CacheFolderLockdownValidation' for type 'IValidation' from assembly 'choco'
|
|
2024-01-25 06:06:41,673 1204 [DEBUG] - Adding new type 'EmptyOrInvalidUrlMetadataRule' for type 'IMetadataRule' from assembly 'choco'
|
|
2024-01-25 06:06:41,691 1204 [DEBUG] - Adding new type 'FrameWorkReferencesMetadataRule' for type 'IMetadataRule' from assembly 'choco'
|
|
2024-01-25 06:06:41,703 1204 [DEBUG] - Adding new type 'IconMetadataRule' for type 'IMetadataRule' from assembly 'choco'
|
|
2024-01-25 06:06:41,703 1204 [DEBUG] - Adding new type 'LicenseMetadataRule' for type 'IMetadataRule' from assembly 'choco'
|
|
2024-01-25 06:06:41,718 1204 [DEBUG] - Adding new type 'PackageTypesMetadataRule' for type 'IMetadataRule' from assembly 'choco'
|
|
2024-01-25 06:06:41,718 1204 [DEBUG] - Adding new type 'ReadmeMetadataRule' for type 'IMetadataRule' from assembly 'choco'
|
|
2024-01-25 06:06:41,734 1204 [DEBUG] - Adding new type 'RepositoryMetadataRule' for type 'IMetadataRule' from assembly 'choco'
|
|
2024-01-25 06:06:41,734 1204 [DEBUG] - Adding new type 'RequireLicenseAcceptanceMetadataRule' for type 'IMetadataRule' from assembly 'choco'
|
|
2024-01-25 06:06:41,751 1204 [DEBUG] - Adding new type 'ServicableMetadataRule' for type 'IMetadataRule' from assembly 'choco'
|
|
2024-01-25 06:06:41,751 1204 [DEBUG] - Adding new type 'VersionMetadataRule' for type 'IMetadataRule' from assembly 'choco'
|
|
2024-01-25 06:06:41,814 1204 [DEBUG] - Registering new command 'cache' in assembly 'choco'
|
|
2024-01-25 06:06:41,829 1204 [DEBUG] - Registering new command 'list' in assembly 'choco'
|
|
2024-01-25 06:06:41,829 1204 [DEBUG] - Registering new command 'template' in assembly 'choco'
|
|
2024-01-25 06:06:41,844 1204 [DEBUG] - Registering new command 'export' in assembly 'choco'
|
|
2024-01-25 06:06:41,844 1204 [DEBUG] - Registering new command 'info' in assembly 'choco'
|
|
2024-01-25 06:06:41,859 1204 [DEBUG] - Registering new command 'help' in assembly 'choco'
|
|
2024-01-25 06:06:41,859 1204 [DEBUG] - Registering new command 'config' in assembly 'choco'
|
|
2024-01-25 06:06:41,875 1204 [DEBUG] - Registering new command 'feature' in assembly 'choco'
|
|
2024-01-25 06:06:41,875 1204 [DEBUG] - Registering new command 'new' in assembly 'choco'
|
|
2024-01-25 06:06:41,892 1204 [DEBUG] - Registering new command 'outdated' in assembly 'choco'
|
|
2024-01-25 06:06:41,907 1204 [DEBUG] - Registering new command 'pack' in assembly 'choco'
|
|
2024-01-25 06:06:41,907 1204 [DEBUG] - Registering new command 'pin' in assembly 'choco'
|
|
2024-01-25 06:06:41,922 1204 [DEBUG] - Registering new command 'push' in assembly 'choco'
|
|
2024-01-25 06:06:41,922 1204 [DEBUG] - Registering new command 'apikey' in assembly 'choco'
|
|
2024-01-25 06:06:41,939 1204 [DEBUG] - Registering new command 'source' in assembly 'choco'
|
|
2024-01-25 06:06:41,939 1204 [DEBUG] - Registering new command 'uninstall' in assembly 'choco'
|
|
2024-01-25 06:06:41,953 1204 [DEBUG] - Registering new command 'upgrade' in assembly 'choco'
|
|
2024-01-25 06:06:42,032 1204 [DEBUG] - Registering new command 'search' in assembly 'choco'
|
|
2024-01-25 06:06:42,046 1204 [DEBUG] - Registering new command 'unpackself' in assembly 'choco'
|
|
2024-01-25 06:06:42,046 1204 [DEBUG] - Registering new command 'install' in assembly 'choco'
|
|
2024-01-25 06:06:42,579 1204 [INFO ] - ============================================================
|
|
2024-01-25 06:06:43,094 1204 [INFO ] - Chocolatey v2.2.2
|
|
2024-01-25 06:06:43,141 1204 [DEBUG] - Chocolatey is running on Windows v 10.0.17763.0
|
|
2024-01-25 06:06:43,156 1204 [DEBUG] - Attempting to delete file "C:/ProgramData/chocolatey/choco.exe.old".
|
|
2024-01-25 06:06:43,172 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\choco.exe.old".
|
|
2024-01-25 06:06:43,236 1204 [DEBUG] - Command line: "C:\ProgramData\chocolatey\choco.exe" uninstall osquery --version 5.11.0 -dvy --execution-timeout=2700
|
|
2024-01-25 06:06:43,249 1204 [DEBUG] - Received arguments: uninstall osquery --version 5.11.0 -dvy --execution-timeout=2700
|
|
2024-01-25 06:06:43,719 1204 [DEBUG] - RemovePendingPackagesTask is now ready and waiting for PreRunMessage.
|
|
2024-01-25 06:06:43,782 1204 [DEBUG] - Sending message 'PreRunMessage' out if there are subscribers...
|
|
2024-01-25 06:06:43,829 1204 [DEBUG] - [Pending] Removing all pending packages that should not be considered installed...
|
|
2024-01-25 06:06:44,157 1204 [DEBUG] - Performing validation checks.
|
|
2024-01-25 06:06:44,188 1204 [DEBUG] - Global Configuration Validation Checks:
|
|
2024-01-25 06:06:44,203 1204 [DEBUG] - - Package Exit Code / Exit On Reboot = Checked
|
|
2024-01-25 06:06:44,219 1204 [DEBUG] - System State Validation Checks:
|
|
2024-01-25 06:06:44,235 1204 [DEBUG] - Reboot Requirement Checks:
|
|
2024-01-25 06:06:44,266 1204 [DEBUG] - - Pending Computer Rename = Checked
|
|
2024-01-25 06:06:44,281 1204 [DEBUG] - - Pending Component Based Servicing = Checked
|
|
2024-01-25 06:06:44,297 1204 [DEBUG] - - Pending Windows Auto Update = Checked
|
|
2024-01-25 06:06:44,312 1204 [DEBUG] - - Pending File Rename Operations = Ignored
|
|
2024-01-25 06:06:44,328 1204 [DEBUG] - - Pending Windows Package Installer = Checked
|
|
2024-01-25 06:06:44,328 1204 [DEBUG] - - Pending Windows Package Installer SysWow64 = Checked
|
|
2024-01-25 06:06:44,359 1204 [DEBUG] - Cache Folder Lockdown Checks:
|
|
2024-01-25 06:06:44,375 1204 [DEBUG] - - Elevated State = Checked
|
|
2024-01-25 06:06:44,375 1204 [DEBUG] - - Folder Exists = Checked
|
|
2024-01-25 06:06:44,421 1204 [DEBUG] - - Folder lockdown = Checked
|
|
2024-01-25 06:06:44,453 1204 [INFO ] - 3 validations performed. 3 success(es), 0 warning(s), and 0 error(s).
|
|
2024-01-25 06:06:44,548 1204 [DEBUG] - The source 'c:\cached-packages;https://community.chocolatey.org/api/v2/' evaluated to a 'normal' source type
|
|
2024-01-25 06:06:44,578 1204 [DEBUG] -
|
|
NOTE: Hiding sensitive configuration data! Please double and triple
|
|
check to be sure no sensitive data is shown, especially if copying
|
|
output to a gist for review.
|
|
2024-01-25 06:06:44,750 1204 [DEBUG] - Configuration: CommandName='uninstall'|
|
|
CacheLocation='C:\Users\vagrant\AppData\Local\Temp\chocolatey'|
|
|
CommandExecutionTimeoutSeconds='2700'|WebRequestTimeoutSeconds='30'|
|
|
Sources='c:\cached-packages;https://community.chocolatey.org/api/v2/'|
|
|
SourceType='normal'|ShowOnlineHelp='False'|Debug='True'|Verbose='True'|
|
|
Trace='False'|Force='False'|Noop='False'|HelpRequested='False'|
|
|
UnsuccessfulParsing='False'|RegularOutput='True'|QuietOutput='False'|
|
|
PromptForConfirmation='False'|DisableCompatibilityChecks='False'|
|
|
AcceptLicense='True'|AllowUnofficialBuild='False'|Input='osquery'|
|
|
Version='5.11.0'|AllVersions='False'|
|
|
SkipPackageInstallProvider='False'|
|
|
SkipHookScripts='False'|PackageNames='osquery'|Prerelease='False'|
|
|
ForceX86='False'|OverrideArguments='False'|NotSilent='False'|
|
|
ApplyPackageParametersToDependencies='False'|
|
|
ApplyInstallArgumentsToDependencies='False'|IgnoreDependencies='False'|
|
|
CacheExpirationInMinutes='30'|AllowDowngrade='False'|
|
|
ForceDependencies='False'|PinPackage='False'|
|
|
Information.PlatformType='Windows'|
|
|
Information.PlatformVersion='10.0.17763.0'|
|
|
Information.PlatformName='Windows Server 2016'|
|
|
Information.ChocolateyVersion='2.2.2.0'|
|
|
Information.ChocolateyProductVersion='2.2.2'|
|
|
Information.FullName='choco, Version=2.2.2.0, Culture=neutral, PublicKeyToken=79d02ea9cad655eb'|
|
|
|
|
Information.Is64BitOperatingSystem='True'|
|
|
Information.Is64BitProcess='True'|Information.IsInteractive='False'|
|
|
Information.UserName='vagrant'|
|
|
Information.UserDomainName='WIN-LAQOCN24NUI'|
|
|
Information.IsUserAdministrator='True'|
|
|
Information.IsUserSystemAccount='False'|
|
|
Information.IsUserRemoteDesktop='False'|
|
|
Information.IsUserRemote='True'|
|
|
Information.IsProcessElevated='True'|
|
|
Information.IsLicensedVersion='False'|
|
|
Information.IsLicensedAssemblyLoaded='False'|
|
|
Information.LicenseType='Foss'|
|
|
Information.CurrentDirectory='C:\Users\vagrant'|
|
|
Features.AutoUninstaller='True'|Features.ChecksumFiles='True'|
|
|
Features.AllowEmptyChecksums='False'|
|
|
Features.AllowEmptyChecksumsSecure='True'|
|
|
Features.FailOnAutoUninstaller='False'|
|
|
Features.FailOnStandardError='False'|Features.UsePowerShellHost='True'|
|
|
Features.LogEnvironmentValues='True'|Features.LogWithoutColor='False'|
|
|
Features.VirusCheck='False'|
|
|
Features.FailOnInvalidOrMissingLicense='False'|
|
|
Features.IgnoreInvalidOptionsSwitches='True'|
|
|
Features.UsePackageExitCodes='True'|
|
|
Features.UseEnhancedExitCodes='False'|
|
|
Features.UseFipsCompliantChecksums='False'|
|
|
Features.ShowNonElevatedWarnings='True'|
|
|
Features.ShowDownloadProgress='False'|
|
|
Features.StopOnFirstPackageFailure='False'|
|
|
Features.UseRememberedArgumentsForUpgrades='False'|
|
|
Features.IgnoreUnfoundPackagesOnUpgradeOutdated='False'|
|
|
Features.SkipPackageUpgradesWhenNotInstalled='False'|
|
|
Features.RemovePackageInformationOnUninstall='False'|
|
|
Features.ExitOnRebootDetected='False'|
|
|
Features.LogValidationResultsOnWarnings='True'|
|
|
Features.UsePackageRepositoryOptimizations='True'|
|
|
ListCommand.LocalOnly='False'|ListCommand.IdOnly='False'|
|
|
ListCommand.IncludeRegistryPrograms='False'|ListCommand.PageSize='25'|
|
|
ListCommand.Exact='False'|ListCommand.ByIdOnly='False'|
|
|
ListCommand.ByTagOnly='False'|ListCommand.IdStartsWith='False'|
|
|
ListCommand.OrderByPopularity='False'|ListCommand.ApprovedOnly='False'|
|
|
ListCommand.DownloadCacheAvailable='False'|
|
|
ListCommand.NotBroken='False'|
|
|
ListCommand.IncludeVersionOverrides='False'|
|
|
ListCommand.ExplicitPageSize='False'|
|
|
ListCommand.ExplicitSource='False'|
|
|
UpgradeCommand.FailOnUnfound='False'|
|
|
UpgradeCommand.FailOnNotInstalled='False'|
|
|
UpgradeCommand.NotifyOnlyAvailableUpgrades='False'|
|
|
UpgradeCommand.ExcludePrerelease='False'|
|
|
NewCommand.AutomaticPackage='False'|
|
|
NewCommand.UseOriginalTemplate='False'|SourceCommand.Command='unknown'|
|
|
SourceCommand.Priority='0'|SourceCommand.BypassProxy='False'|
|
|
SourceCommand.AllowSelfService='False'|
|
|
SourceCommand.VisibleToAdminsOnly='False'|
|
|
FeatureCommand.Command='unknown'|ConfigCommand.Command='Unknown'|
|
|
ApiKeyCommand.Command='Unknown'|PinCommand.Command='Unknown'|
|
|
OutdatedCommand.IgnorePinned='False'|
|
|
ExportCommand.IncludeVersionNumbers='False'|Proxy.BypassOnLocal='True'|
|
|
TemplateCommand.Command='unknown'|CacheCommand.Command='Unknown'|
|
|
CacheCommand.RemoveExpiredItemsOnly='False'|
|
|
2024-01-25 06:06:44,769 1204 [DEBUG] - _ Chocolatey:ChocolateyUninstallCommand - Normal Run Mode _
|
|
2024-01-25 06:06:44,798 1204 [INFO ] - Uninstalling the following packages:
|
|
2024-01-25 06:06:44,844 1204 [INFO ] - osquery
|
|
2024-01-25 06:06:44,890 1204 [DEBUG] - Current environment values (may contain sensitive data):
|
|
2024-01-25 06:06:44,890 1204 [DEBUG] - * 'Path'='C:\Users\vagrant\AppData\Local\Microsoft\WindowsApps;' ('User')
|
|
2024-01-25 06:06:44,906 1204 [DEBUG] - * 'TEMP'='C:\Users\vagrant\AppData\Local\Temp' ('User')
|
|
2024-01-25 06:06:44,921 1204 [DEBUG] - * 'TMP'='C:\Users\vagrant\AppData\Local\Temp' ('User')
|
|
2024-01-25 06:06:44,921 1204 [DEBUG] - * 'ChocolateyLastPathUpdate'='133506363729852403' ('User')
|
|
2024-01-25 06:06:44,938 1204 [DEBUG] - * 'ComSpec'='C:\Windows\system32\cmd.exe' ('Machine')
|
|
2024-01-25 06:06:44,953 1204 [DEBUG] - * 'DriverData'='C:\Windows\System32\Drivers\DriverData' ('Machine')
|
|
2024-01-25 06:06:44,953 1204 [DEBUG] - * 'OS'='Windows_NT' ('Machine')
|
|
2024-01-25 06:06:44,970 1204 [DEBUG] - * 'Path'='C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\ProgramData\chocolatey\bin;C:\Program Files\osquery;' ('Machine')
|
|
2024-01-25 06:06:44,985 1204 [DEBUG] - * 'PATHEXT'='.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC' ('Machine')
|
|
2024-01-25 06:06:44,985 1204 [DEBUG] - * 'PROCESSOR_ARCHITECTURE'='AMD64' ('Machine')
|
|
2024-01-25 06:06:45,001 1204 [DEBUG] - * 'PSModulePath'='C:\Program Files\WindowsPowerShell\Modules;C:\Windows\system32\WindowsPowerShell\v1.0\Modules' ('Machine')
|
|
2024-01-25 06:06:45,001 1204 [DEBUG] - * 'TEMP'='C:\Windows\TEMP' ('Machine')
|
|
2024-01-25 06:06:45,017 1204 [DEBUG] - * 'TMP'='C:\Windows\TEMP' ('Machine')
|
|
2024-01-25 06:06:45,032 1204 [DEBUG] - * 'USERNAME'='SYSTEM' ('Machine')
|
|
2024-01-25 06:06:45,032 1204 [DEBUG] - * 'windir'='C:\Windows' ('Machine')
|
|
2024-01-25 06:06:45,048 1204 [DEBUG] - * 'NUMBER_OF_PROCESSORS'='10' ('Machine')
|
|
2024-01-25 06:06:45,063 1204 [DEBUG] - * 'PROCESSOR_LEVEL'='6' ('Machine')
|
|
2024-01-25 06:06:45,080 1204 [DEBUG] - * 'PROCESSOR_IDENTIFIER'='Intel64 Family 6 Model 85 Stepping 7, GenuineIntel' ('Machine')
|
|
2024-01-25 06:06:45,094 1204 [DEBUG] - * 'PROCESSOR_REVISION'='5507' ('Machine')
|
|
2024-01-25 06:06:45,094 1204 [DEBUG] - * 'ChocolateyInstall'='C:\ProgramData\chocolatey' ('Machine')
|
|
2024-01-25 06:06:45,579 1204 [DEBUG] - Running list with the following filter = ''
|
|
2024-01-25 06:06:45,594 1204 [DEBUG] - --- Start of List ---
|
|
2024-01-25 06:06:46,031 1204 [DEBUG] - Resolving resource PackageSearchResource for source C:\ProgramData\chocolatey\lib
|
|
2024-01-25 06:06:46,750 1204 [DEBUG] - chocolatey 2.2.2
|
|
2024-01-25 06:06:46,781 1204 [DEBUG] - chocolatey-windowsupdate.extension 1.0.5
|
|
2024-01-25 06:06:46,798 1204 [DEBUG] - KB2919355 1.0.20160915
|
|
2024-01-25 06:06:46,812 1204 [DEBUG] - KB2919442 1.0.20160915
|
|
2024-01-25 06:06:46,844 1204 [DEBUG] - KB2999226 1.0.20181019
|
|
2024-01-25 06:06:46,860 1204 [DEBUG] - KB3035131 1.0.3
|
|
2024-01-25 06:06:46,878 1204 [DEBUG] - KB3118401 1.0.5
|
|
2024-01-25 06:06:47,000 1204 [DEBUG] - osquery 5.11.0
|
|
2024-01-25 06:06:47,015 1204 [DEBUG] - virtualbox-guest-additions-guest.install 7.0.14
|
|
2024-01-25 06:06:47,031 1204 [DEBUG] - --- End of List ---
|
|
2024-01-25 06:06:47,046 1204 [DEBUG] - Running list with the following filter = ''
|
|
2024-01-25 06:06:47,063 1204 [DEBUG] - --- Start of List ---
|
|
2024-01-25 06:06:47,094 1204 [DEBUG] - chocolatey 2.2.2
|
|
2024-01-25 06:06:47,125 1204 [DEBUG] - chocolatey-windowsupdate.extension 1.0.5
|
|
2024-01-25 06:06:47,125 1204 [DEBUG] - KB2919355 1.0.20160915
|
|
2024-01-25 06:06:47,141 1204 [DEBUG] - KB2919442 1.0.20160915
|
|
2024-01-25 06:06:47,156 1204 [DEBUG] - KB2999226 1.0.20181019
|
|
2024-01-25 06:06:47,172 1204 [DEBUG] - KB3035131 1.0.3
|
|
2024-01-25 06:06:47,187 1204 [DEBUG] - KB3118401 1.0.5
|
|
2024-01-25 06:06:47,234 1204 [DEBUG] - osquery 5.11.0
|
|
2024-01-25 06:06:47,250 1204 [DEBUG] - virtualbox-guest-additions-guest.install 7.0.14
|
|
2024-01-25 06:06:47,283 1204 [DEBUG] - --- End of List ---
|
|
2024-01-25 06:06:47,453 1204 [DEBUG] - Running list with the following filter = ''
|
|
2024-01-25 06:06:47,469 1204 [DEBUG] - --- Start of List ---
|
|
2024-01-25 06:06:47,501 1204 [DEBUG] - chocolatey 2.2.2
|
|
2024-01-25 06:06:47,516 1204 [DEBUG] - chocolatey-windowsupdate.extension 1.0.5
|
|
2024-01-25 06:06:47,546 1204 [DEBUG] - KB2919355 1.0.20160915
|
|
2024-01-25 06:06:47,563 1204 [DEBUG] - KB2919442 1.0.20160915
|
|
2024-01-25 06:06:47,579 1204 [DEBUG] - KB2999226 1.0.20181019
|
|
2024-01-25 06:06:47,594 1204 [DEBUG] - KB3035131 1.0.3
|
|
2024-01-25 06:06:47,656 1204 [DEBUG] - KB3118401 1.0.5
|
|
2024-01-25 06:06:47,703 1204 [DEBUG] - osquery 5.11.0
|
|
2024-01-25 06:06:47,719 1204 [DEBUG] - virtualbox-guest-additions-guest.install 7.0.14
|
|
2024-01-25 06:06:47,734 1204 [DEBUG] - --- End of List ---
|
|
2024-01-25 06:06:47,860 1204 [INFO ] -
|
|
osquery v5.11.0
|
|
2024-01-25 06:06:47,922 1204 [DEBUG] - Running beforeModify step for 'osquery'
|
|
2024-01-25 06:06:48,017 1204 [DEBUG] - Setting installer args for osquery
|
|
2024-01-25 06:06:48,032 1204 [DEBUG] - Setting package parameters for osquery
|
|
2024-01-25 06:06:48,047 1204 [DEBUG] - Contents of 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1':
|
|
2024-01-25 06:06:48,097 1204 [DEBUG] - # Copyright (c) 2014-present, The osquery authors |
|
# |
|
# This source code is licensed as defined by the LICENSE file found in the |
|
# root directory of this source tree. |
|
# |
|
# SPDX-License-Identifier: (Apache-2.0 OR GPL-2.0-only) |
|
|
|
# This library file contains constant definitions and helper functions |
|
|
|
#Requires -Version 3.0 |
|
|
|
. (Join-Path "$PSScriptRoot" "osquery_utils.ps1") |
|
|
|
# Ensure the service is stopped and processes are not running if exists. |
|
if ((Get-Service $serviceName -ErrorAction SilentlyContinue) -and ` |
|
(Get-Service $serviceName).Status -eq 'Running') { |
|
Stop-Service $serviceName |
|
# If we find zombie processes, ensure they're termintated |
|
$proc = Get-Process | Where-Object { $_.ProcessName -eq 'osqueryd' } |
|
if ($null -ne $proc) { |
|
Stop-Process -Force $proc -ErrorAction SilentlyContinue |
|
} |
|
} |
|
|
|
# Lastly, ensure that the Deny Write ACLs have been removed before modifying |
|
if (Test-Path $daemonFolder) { |
|
Set-DenyWriteAcl $daemonFolder 'Remove' |
|
} |
|
if (Test-Path $extensionsFolder) { |
|
Set-DenyWriteAcl $extensionsFolder 'Remove' |
|
} |
|
|
|
2024-01-25 06:06:48,142 1204 [DEBUG] - Calling built-in PowerShell host with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = '';[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::SystemDefault; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1' -installArguments '' -packageParameters '' -preRunHookScripts $null -postRunHookScripts $null']
|
|
2024-01-25 06:06:48,157 1204 [DEBUG] - Redirecting System.Management.Automation.resources, Version=3.0.0.0, Culture=en-US, PublicKeyToken=31bf3856ad364e35, requested by ''
|
|
2024-01-25 06:06:49,093 1204 [DEBUG] - Host version is 5.1.17763.1, PowerShell Version is '5.1.17763.3770' and CLR Version is '4.0.30319.42000'.
|
|
2024-01-25 06:06:49,814 1204 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
|
|
2024-01-25 06:06:49,823 1204 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
|
|
2024-01-25 06:06:49,834 1204 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyConfigValue'.
|
|
2024-01-25 06:06:49,843 1204 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyPath'.
|
|
2024-01-25 06:06:49,843 1204 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
|
|
2024-01-25 06:06:49,860 1204 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
|
|
2024-01-25 06:06:49,878 1204 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
|
|
2024-01-25 06:06:49,878 1204 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
|
|
2024-01-25 06:06:49,891 1204 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
|
|
2024-01-25 06:06:49,891 1204 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
|
|
2024-01-25 06:06:49,906 1204 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
|
|
2024-01-25 06:06:49,921 1204 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
|
|
2024-01-25 06:06:49,921 1204 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
|
|
2024-01-25 06:06:49,937 1204 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
|
|
2024-01-25 06:06:49,937 1204 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
|
|
2024-01-25 06:06:49,955 1204 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
|
|
2024-01-25 06:06:49,955 1204 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
|
|
2024-01-25 06:06:49,969 1204 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
|
|
2024-01-25 06:06:49,969 1204 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
|
|
2024-01-25 06:06:49,984 1204 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
|
|
2024-01-25 06:06:49,984 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
|
|
2024-01-25 06:06:50,000 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
|
|
2024-01-25 06:06:50,000 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
|
|
2024-01-25 06:06:50,017 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
|
|
2024-01-25 06:06:50,017 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
|
|
2024-01-25 06:06:50,032 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
|
|
2024-01-25 06:06:50,048 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
|
|
2024-01-25 06:06:50,048 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
|
|
2024-01-25 06:06:50,064 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
|
|
2024-01-25 06:06:50,081 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
|
|
2024-01-25 06:06:50,081 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
|
|
2024-01-25 06:06:50,094 1204 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
|
|
2024-01-25 06:06:50,094 1204 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
|
|
2024-01-25 06:06:50,110 1204 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
|
|
2024-01-25 06:06:50,110 1204 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
|
|
2024-01-25 06:06:50,125 1204 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
|
|
2024-01-25 06:06:50,125 1204 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
|
|
2024-01-25 06:06:50,142 1204 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
|
|
2024-01-25 06:06:50,157 1204 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
|
|
2024-01-25 06:06:50,157 1204 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
|
|
2024-01-25 06:06:50,157 1204 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
|
|
2024-01-25 06:06:50,219 1204 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
|
|
2024-01-25 06:06:50,234 1204 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
|
|
2024-01-25 06:06:50,234 1204 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
|
|
2024-01-25 06:06:50,251 1204 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
|
|
2024-01-25 06:06:50,251 1204 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
|
|
2024-01-25 06:06:50,265 1204 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
|
|
2024-01-25 06:06:50,265 1204 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
|
|
2024-01-25 06:06:50,282 1204 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
|
|
2024-01-25 06:06:50,282 1204 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
|
|
2024-01-25 06:06:50,296 1204 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
|
|
2024-01-25 06:06:50,343 1204 [DEBUG] - Loading community extensions
|
|
2024-01-25 06:06:50,421 1204 [DEBUG] - Importing 'C:\ProgramData\chocolatey\extensions\chocolatey-windowsupdate\chocolatey-windowsupdate.psm1'
|
|
2024-01-25 06:06:50,421 1204 [INFO ] - VERBOSE: Loading module from path 'C:\ProgramData\chocolatey\extensions\chocolatey-windowsupdate\chocolatey-windowsupdate.psm1'.
|
|
2024-01-25 06:06:50,593 1204 [INFO ] - VERBOSE: Exporting function 'Install-WindowsUpdate'.
|
|
2024-01-25 06:06:50,593 1204 [INFO ] - VERBOSE: Exporting function 'Test-WindowsUpdate'.
|
|
2024-01-25 06:06:50,610 1204 [INFO ] - VERBOSE: Importing function 'Install-WindowsUpdate'.
|
|
2024-01-25 06:06:50,624 1204 [INFO ] - VERBOSE: Importing function 'Test-WindowsUpdate'.
|
|
2024-01-25 06:06:50,624 1204 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
|
|
2024-01-25 06:06:50,640 1204 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
|
|
2024-01-25 06:06:50,640 1204 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyConfigValue'.
|
|
2024-01-25 06:06:50,656 1204 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyPath'.
|
|
2024-01-25 06:06:50,673 1204 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
|
|
2024-01-25 06:06:50,673 1204 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
|
|
2024-01-25 06:06:50,688 1204 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
|
|
2024-01-25 06:06:50,688 1204 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
|
|
2024-01-25 06:06:50,703 1204 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
|
|
2024-01-25 06:06:50,718 1204 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
|
|
2024-01-25 06:06:50,718 1204 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
|
|
2024-01-25 06:06:50,736 1204 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
|
|
2024-01-25 06:06:50,736 1204 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
|
|
2024-01-25 06:06:50,751 1204 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
|
|
2024-01-25 06:06:50,751 1204 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
|
|
2024-01-25 06:06:50,765 1204 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
|
|
2024-01-25 06:06:50,765 1204 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
|
|
2024-01-25 06:06:50,782 1204 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
|
|
2024-01-25 06:06:50,782 1204 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
|
|
2024-01-25 06:06:50,796 1204 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
|
|
2024-01-25 06:06:50,796 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
|
|
2024-01-25 06:06:50,796 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
|
|
2024-01-25 06:06:50,812 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
|
|
2024-01-25 06:06:50,812 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
|
|
2024-01-25 06:06:50,829 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
|
|
2024-01-25 06:06:50,829 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
|
|
2024-01-25 06:06:50,844 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
|
|
2024-01-25 06:06:50,844 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
|
|
2024-01-25 06:06:50,859 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
|
|
2024-01-25 06:06:50,859 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
|
|
2024-01-25 06:06:50,877 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
|
|
2024-01-25 06:06:50,877 1204 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
|
|
2024-01-25 06:06:50,890 1204 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
|
|
2024-01-25 06:06:50,890 1204 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
|
|
2024-01-25 06:06:50,907 1204 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
|
|
2024-01-25 06:06:50,907 1204 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
|
|
2024-01-25 06:06:50,921 1204 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
|
|
2024-01-25 06:06:50,921 1204 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
|
|
2024-01-25 06:06:50,921 1204 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
|
|
2024-01-25 06:06:50,937 1204 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
|
|
2024-01-25 06:06:50,937 1204 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
|
|
2024-01-25 06:06:50,954 1204 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
|
|
2024-01-25 06:06:50,954 1204 [INFO ] - VERBOSE: Exporting function 'Install-WindowsUpdate'.
|
|
2024-01-25 06:06:50,970 1204 [INFO ] - VERBOSE: Exporting function 'Test-WindowsUpdate'.
|
|
2024-01-25 06:06:50,970 1204 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
|
|
2024-01-25 06:06:50,984 1204 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
|
|
2024-01-25 06:06:50,984 1204 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
|
|
2024-01-25 06:06:50,984 1204 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
|
|
2024-01-25 06:06:51,001 1204 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
|
|
2024-01-25 06:06:51,015 1204 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
|
|
2024-01-25 06:06:51,015 1204 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
|
|
2024-01-25 06:06:51,015 1204 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
|
|
2024-01-25 06:06:51,033 1204 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
|
|
2024-01-25 06:06:51,047 1204 [INFO ] - VERBOSE: Importing function 'Format-FileSize'.
|
|
2024-01-25 06:06:51,047 1204 [INFO ] - VERBOSE: Importing function 'Get-ChecksumValid'.
|
|
2024-01-25 06:06:51,063 1204 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyConfigValue'.
|
|
2024-01-25 06:06:51,063 1204 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyPath'.
|
|
2024-01-25 06:06:51,080 1204 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyUnzip'.
|
|
2024-01-25 06:06:51,094 1204 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyWebFile'.
|
|
2024-01-25 06:06:51,094 1204 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariable'.
|
|
2024-01-25 06:06:51,110 1204 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariableNames'.
|
|
2024-01-25 06:06:51,110 1204 [INFO ] - VERBOSE: Importing function 'Get-FtpFile'.
|
|
2024-01-25 06:06:51,126 1204 [INFO ] - VERBOSE: Importing function 'Get-OSArchitectureWidth'.
|
|
2024-01-25 06:06:51,126 1204 [INFO ] - VERBOSE: Importing function 'Get-PackageParameters'.
|
|
2024-01-25 06:06:51,142 1204 [INFO ] - VERBOSE: Importing function 'Get-PackageParametersBuiltIn'.
|
|
2024-01-25 06:06:51,142 1204 [INFO ] - VERBOSE: Importing function 'Get-ToolsLocation'.
|
|
2024-01-25 06:06:51,157 1204 [INFO ] - VERBOSE: Importing function 'Get-UACEnabled'.
|
|
2024-01-25 06:06:51,157 1204 [INFO ] - VERBOSE: Importing function 'Get-UninstallRegistryKey'.
|
|
2024-01-25 06:06:51,175 1204 [INFO ] - VERBOSE: Importing function 'Get-VirusCheckValid'.
|
|
2024-01-25 06:06:51,175 1204 [INFO ] - VERBOSE: Importing function 'Get-WebFile'.
|
|
2024-01-25 06:06:51,187 1204 [INFO ] - VERBOSE: Importing function 'Get-WebFileName'.
|
|
2024-01-25 06:06:51,187 1204 [INFO ] - VERBOSE: Importing function 'Get-WebHeaders'.
|
|
2024-01-25 06:06:51,203 1204 [INFO ] - VERBOSE: Importing function 'Install-BinFile'.
|
|
2024-01-25 06:06:51,203 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyEnvironmentVariable'.
|
|
2024-01-25 06:06:51,219 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyExplorerMenuItem'.
|
|
2024-01-25 06:06:51,219 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyFileAssociation'.
|
|
2024-01-25 06:06:51,235 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyInstallPackage'.
|
|
2024-01-25 06:06:51,235 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPackage'.
|
|
2024-01-25 06:06:51,250 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPath'.
|
|
2024-01-25 06:06:51,250 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPinnedTaskBarItem'.
|
|
2024-01-25 06:06:51,266 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPowershellCommand'.
|
|
2024-01-25 06:06:51,266 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyShortcut'.
|
|
2024-01-25 06:06:51,281 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyVsixPackage'.
|
|
2024-01-25 06:06:51,281 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyZipPackage'.
|
|
2024-01-25 06:06:51,297 1204 [INFO ] - VERBOSE: Importing function 'Install-Vsix'.
|
|
2024-01-25 06:06:51,297 1204 [INFO ] - VERBOSE: Importing function 'Install-WindowsUpdate'.
|
|
2024-01-25 06:06:51,297 1204 [INFO ] - VERBOSE: Importing function 'Set-EnvironmentVariable'.
|
|
2024-01-25 06:06:51,313 1204 [INFO ] - VERBOSE: Importing function 'Set-PowerShellExitCode'.
|
|
2024-01-25 06:06:51,328 1204 [INFO ] - VERBOSE: Importing function 'Start-ChocolateyProcessAsAdmin'.
|
|
2024-01-25 06:06:51,328 1204 [INFO ] - VERBOSE: Importing function 'Test-ProcessAdminRights'.
|
|
2024-01-25 06:06:51,343 1204 [INFO ] - VERBOSE: Importing function 'Test-WindowsUpdate'.
|
|
2024-01-25 06:06:51,343 1204 [INFO ] - VERBOSE: Importing function 'Uninstall-BinFile'.
|
|
2024-01-25 06:06:51,343 1204 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyEnvironmentVariable'.
|
|
2024-01-25 06:06:51,360 1204 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyPackage'.
|
|
2024-01-25 06:06:51,378 1204 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyZipPackage'.
|
|
2024-01-25 06:06:51,378 1204 [INFO ] - VERBOSE: Importing function 'Update-SessionEnvironment'.
|
|
2024-01-25 06:06:51,392 1204 [INFO ] - VERBOSE: Importing function 'Write-FunctionCallLogMessage'.
|
|
2024-01-25 06:06:51,406 1204 [INFO ] - VERBOSE: Importing alias 'Add-BinFile'.
|
|
2024-01-25 06:06:51,406 1204 [INFO ] - VERBOSE: Importing alias 'Generate-BinFile'.
|
|
2024-01-25 06:06:51,406 1204 [INFO ] - VERBOSE: Importing alias 'Get-InstallRegistryKey'.
|
|
2024-01-25 06:06:51,422 1204 [INFO ] - VERBOSE: Importing alias 'Get-OSBitness'.
|
|
2024-01-25 06:06:51,422 1204 [INFO ] - VERBOSE: Importing alias 'Get-ProcessorBits'.
|
|
2024-01-25 06:06:51,437 1204 [INFO ] - VERBOSE: Importing alias 'Invoke-ChocolateyProcess'.
|
|
2024-01-25 06:06:51,437 1204 [INFO ] - VERBOSE: Importing alias 'refreshenv'.
|
|
2024-01-25 06:06:51,453 1204 [INFO ] - VERBOSE: Importing alias 'Remove-BinFile'.
|
|
2024-01-25 06:06:51,453 1204 [INFO ] - VERBOSE: Importing alias 'Start-ChocolateyProcess'.
|
|
2024-01-25 06:06:51,609 1204 [DEBUG] - ---------------------------Script Execution---------------------------
|
|
2024-01-25 06:06:51,656 1204 [DEBUG] - Running 'ChocolateyScriptRunner' for osquery v5.11.0 with packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1', packageFolder:'C:\ProgramData\chocolatey\lib\osquery', installArguments: '', packageParameters: '', preRunHookScripts: '', postRunHookScripts: '',
|
|
2024-01-25 06:06:51,750 1204 [DEBUG] - Running package script 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1'
|
|
2024-01-25 06:06:52,141 1204 [INFO ] - True
|
|
2024-01-25 06:06:52,171 1204 [INFO ] - True
|
|
2024-01-25 06:06:52,219 1204 [DEBUG] - ----------------------------------------------------------------------
|
|
2024-01-25 06:06:52,250 1204 [DEBUG] - Built-in PowerShell host called with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = '';[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::SystemDefault; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1' -installArguments '' -packageParameters '' -preRunHookScripts $null -postRunHookScripts $null'] exited with '0'.
|
|
2024-01-25 06:06:52,250 1204 [WARN ] - SecurityProtocol was set to Tls12, resetting to SystemDefault.
|
|
2024-01-25 06:06:52,282 1204 [DEBUG] - Backing up package files for 'osquery'
|
|
2024-01-25 06:06:52,656 1204 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib-bkp\osquery".
|
|
2024-01-25 06:06:52,672 1204 [DEBUG] - Moving C:\ProgramData\chocolatey\lib\osquery to C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0
|
|
2024-01-25 06:06:52,688 1204 [DEBUG] - Moving 'C:\ProgramData\chocolatey\lib\osquery'
|
|
to 'C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0'
|
|
2024-01-25 06:06:54,703 1204 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib\osquery".
|
|
2024-01-25 06:06:54,719 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\LICENSE.txt"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\LICENSE.txt".
|
|
2024-01-25 06:06:54,736 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\manage-osqueryd.ps1"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\manage-osqueryd.ps1".
|
|
2024-01-25 06:06:54,751 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\osquery.conf"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\osquery.conf".
|
|
2024-01-25 06:06:54,766 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\osquery.flags"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\osquery.flags".
|
|
2024-01-25 06:06:54,781 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\osquery.man"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\osquery.man".
|
|
2024-01-25 06:06:54,781 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\osquery.nupkg"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg".
|
|
2024-01-25 06:06:54,859 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\osquery.nuspec"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec".
|
|
2024-01-25 06:06:54,881 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\osquery.png"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\osquery.png".
|
|
2024-01-25 06:06:54,881 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\osqueryi.exe"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\osqueryi.exe".
|
|
2024-01-25 06:06:54,953 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\osquery_utils.ps1"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\osquery_utils.ps1".
|
|
2024-01-25 06:06:54,969 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\VERIFICATION.txt"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\VERIFICATION.txt".
|
|
2024-01-25 06:06:54,985 1204 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib\osquery\certs".
|
|
2024-01-25 06:06:54,985 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\certs\certs.pem"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\certs\certs.pem".
|
|
2024-01-25 06:06:55,001 1204 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib\osquery\osqueryd".
|
|
2024-01-25 06:06:55,016 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\osqueryd\osqueryd.exe"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\osqueryd\osqueryd.exe".
|
|
2024-01-25 06:06:55,079 1204 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib\osquery\packs".
|
|
2024-01-25 06:06:55,094 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\packs\hardware-monitoring.conf"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\packs\hardware-monitoring.conf".
|
|
2024-01-25 06:06:55,109 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\packs\incident-response.conf"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\packs\incident-response.conf".
|
|
2024-01-25 06:06:55,125 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\packs\it-compliance.conf"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\packs\it-compliance.conf".
|
|
2024-01-25 06:06:55,141 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\packs\osquery-monitoring.conf"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\packs\osquery-monitoring.conf".
|
|
2024-01-25 06:06:55,157 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\packs\ossec-rootkit.conf"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\packs\ossec-rootkit.conf".
|
|
2024-01-25 06:06:55,172 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\packs\osx-attacks.conf"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\packs\osx-attacks.conf".
|
|
2024-01-25 06:06:55,187 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\packs\unwanted-chrome-extensions.conf"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\packs\unwanted-chrome-extensions.conf".
|
|
2024-01-25 06:06:55,203 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\packs\vuln-management.conf"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\packs\vuln-management.conf".
|
|
2024-01-25 06:06:55,219 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\packs\windows-attacks.conf"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\packs\windows-attacks.conf".
|
|
2024-01-25 06:06:55,235 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\packs\windows-hardening.conf"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\packs\windows-hardening.conf".
|
|
2024-01-25 06:06:55,251 1204 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib\osquery\tools".
|
|
2024-01-25 06:06:55,267 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\tools\chocolateyBeforeModify.ps1"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1".
|
|
2024-01-25 06:06:55,296 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\tools\chocolateyinstall.ps1"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1".
|
|
2024-01-25 06:06:55,296 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\tools\chocolateyuninstall.ps1"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1".
|
|
2024-01-25 06:06:55,313 1204 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.11.0\tools\osquery_utils.ps1"
|
|
to "C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1".
|
|
2024-01-25 06:06:56,860 1204 [DEBUG] - Capturing package files in 'C:\ProgramData\chocolatey\lib\osquery'
|
|
2024-01-25 06:06:56,874 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\LICENSE.txt'
|
|
with checksum '0820FFE048483183320E2DAD339898F6'
|
|
2024-01-25 06:06:56,874 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\manage-osqueryd.ps1'
|
|
with checksum '3CCB09B60C319C2B6A43DF64360BD14F'
|
|
2024-01-25 06:06:56,891 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.conf'
|
|
with checksum '9027F1A3AF205ED3D209BE5F9AEA1842'
|
|
2024-01-25 06:06:56,891 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.flags'
|
|
with checksum 'D41D8CD98F00B204E9800998ECF8427E'
|
|
2024-01-25 06:06:56,908 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.man'
|
|
with checksum 'A4C03558EDB1FF1F5DC4B2194CF3A500'
|
|
2024-01-25 06:06:57,032 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg'
|
|
with checksum '926CF1149BB46B8E0D9C25D56A6722D3'
|
|
2024-01-25 06:06:57,047 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec'
|
|
with checksum 'FB5DD43C06E3225D002FD2DB9E898027'
|
|
2024-01-25 06:06:57,062 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.png'
|
|
with checksum '34A5C156791B25AB5D130BD97AECA98C'
|
|
2024-01-25 06:06:57,281 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osqueryi.exe'
|
|
with checksum '4CC9A835420F2C4AAB4F892CF79D07E5'
|
|
2024-01-25 06:06:57,297 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery_utils.ps1'
|
|
with checksum 'E851BB94C0F783653E3BFF527503A850'
|
|
2024-01-25 06:06:57,312 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\VERIFICATION.txt'
|
|
with checksum '77039304249AC12CA156465857B19382'
|
|
2024-01-25 06:06:57,328 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\certs\certs.pem'
|
|
with checksum '6C8779E5755D9DDDF677BF7A52D035CE'
|
|
2024-01-25 06:06:57,532 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osqueryd\osqueryd.exe'
|
|
with checksum '8FA3431CDD8590C04C7D9197231C4C50'
|
|
2024-01-25 06:06:57,672 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\hardware-monitoring.conf'
|
|
with checksum '3501087ED8C14DC4CB417D6F749ACAD4'
|
|
2024-01-25 06:06:57,687 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\incident-response.conf'
|
|
with checksum '9FAF35B5ED735847D0162E4EAA5EF128'
|
|
2024-01-25 06:06:57,705 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\it-compliance.conf'
|
|
with checksum 'C90DCD8897F172B41770C2A658D4426A'
|
|
2024-01-25 06:06:57,719 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\osquery-monitoring.conf'
|
|
with checksum '50B79815090F908C57B6317DD2F552BF'
|
|
2024-01-25 06:06:57,734 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\ossec-rootkit.conf'
|
|
with checksum '788318DBABB9FDBC545315C4CA88FC40'
|
|
2024-01-25 06:06:57,750 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\osx-attacks.conf'
|
|
with checksum 'EE9CDBF8F06E672092B14DE993117569'
|
|
2024-01-25 06:06:57,767 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\unwanted-chrome-extensions.conf'
|
|
with checksum 'CF972DFC934DD8E09A628C6B0A3814DD'
|
|
2024-01-25 06:06:57,782 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\vuln-management.conf'
|
|
with checksum 'F1C82E2A9E05DE6AD9DFD47E16461FA8'
|
|
2024-01-25 06:06:57,796 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\windows-attacks.conf'
|
|
with checksum '5C705090F10185E33F87AC8A79C445FB'
|
|
2024-01-25 06:06:57,796 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\windows-hardening.conf'
|
|
with checksum 'EBFB94E06E2914770A4EAEA4E5F83248'
|
|
2024-01-25 06:06:57,814 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1'
|
|
with checksum '289840CCC12B230068E229CDD37E3703'
|
|
2024-01-25 06:06:57,830 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1'
|
|
with checksum '780C83D965D277E7A132A4E7208FD339'
|
|
2024-01-25 06:06:57,860 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1'
|
|
with checksum '3C79361CA6117F7D02C1FEDDF82F07C6'
|
|
2024-01-25 06:06:57,877 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1'
|
|
with checksum 'E851BB94C0F783653E3BFF527503A850'
|
|
2024-01-25 06:06:57,909 1204 [DEBUG] - Removing shim for osqueryi.exe at 'C:\ProgramData\chocolatey\bin\osqueryi.exe
|
|
2024-01-25 06:06:57,922 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\bin\osqueryi.exe".
|
|
2024-01-25 06:06:57,937 1204 [DEBUG] - Removing shim for osqueryd.exe at 'C:\ProgramData\chocolatey\bin\osqueryd.exe
|
|
2024-01-25 06:06:57,937 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\bin\osqueryd.exe".
|
|
2024-01-25 06:06:57,952 1204 [DEBUG] - Setting installer args for osquery
|
|
2024-01-25 06:06:57,969 1204 [DEBUG] - Setting package parameters for osquery
|
|
2024-01-25 06:06:57,986 1204 [DEBUG] - Contents of 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1':
|
|
2024-01-25 06:06:58,000 1204 [DEBUG] - # Copyright (c) 2014-present, The osquery authors |
|
# |
|
# This source code is licensed as defined by the LICENSE file found in the |
|
# root directory of this source tree. |
|
# |
|
# SPDX-License-Identifier: (Apache-2.0 OR GPL-2.0-only) |
|
|
|
# This library file contains constant definitions and helper functions |
|
|
|
#Requires -Version 3.0 |
|
|
|
. (Join-Path "$PSScriptRoot" "osquery_utils.ps1") |
|
|
|
# Remove the osquery path from the System PATH variable. Note: Here |
|
# we don't make use of our local vars, as Regex requires escaping the '\' |
|
$oldPath = [System.Environment]::GetEnvironmentVariable('Path', 'Machine') |
|
if ($oldPath -imatch [regex]::escape($targetFolder)) { |
|
$newPath = $oldPath -replace [regex]::escape($targetFolder), $NULL |
|
[System.Environment]::SetEnvironmentVariable('Path', $newPath, 'Machine') |
|
} |
|
|
|
if ((Get-Service $serviceName -ErrorAction SilentlyContinue)) { |
|
Stop-Service $serviceName |
|
|
|
# If we find zombie processes, ensure they're termintated |
|
$proc = Get-Process | Where-Object { $_.ProcessName -eq 'osqueryd' } |
|
if ($null -ne $proc) { |
|
Stop-Process -Force $proc -ErrorAction SilentlyContinue |
|
} |
|
|
|
Set-Service $serviceName -startuptype 'manual' |
|
Get-CimInstance -ClassName Win32_Service -Filter "Name='osqueryd'" | Invoke-CimMethod -methodName Delete |
|
} |
|
|
|
if (Test-Path $targetFolder) { |
|
Remove-Item -Force -Recurse $targetFolder |
|
} else { |
|
Write-Debug 'osquery was not found on the system. Nothing to do.' |
|
} |
|
|
|
2024-01-25 06:06:58,015 1204 [DEBUG] - Calling built-in PowerShell host with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = '';[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::SystemDefault; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1' -installArguments '' -packageParameters '' -preRunHookScripts $null -postRunHookScripts $null']
|
|
2024-01-25 06:06:58,063 1204 [DEBUG] - Redirecting Microsoft.WSMan.Management.resources, Version=3.0.0.0, Culture=en-US, PublicKeyToken=31bf3856ad364e35, requested by ''
|
|
2024-01-25 06:06:58,156 1204 [DEBUG] - Host version is 5.1.17763.1, PowerShell Version is '5.1.17763.3770' and CLR Version is '4.0.30319.42000'.
|
|
2024-01-25 06:06:58,376 1204 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
|
|
2024-01-25 06:06:58,376 1204 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
|
|
2024-01-25 06:06:58,391 1204 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyConfigValue'.
|
|
2024-01-25 06:06:58,391 1204 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyPath'.
|
|
2024-01-25 06:06:58,408 1204 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
|
|
2024-01-25 06:06:58,408 1204 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
|
|
2024-01-25 06:06:58,423 1204 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
|
|
2024-01-25 06:06:58,423 1204 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
|
|
2024-01-25 06:06:58,438 1204 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
|
|
2024-01-25 06:06:58,438 1204 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
|
|
2024-01-25 06:06:58,454 1204 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
|
|
2024-01-25 06:06:58,454 1204 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
|
|
2024-01-25 06:06:58,469 1204 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
|
|
2024-01-25 06:06:58,485 1204 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
|
|
2024-01-25 06:06:58,485 1204 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
|
|
2024-01-25 06:06:58,485 1204 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
|
|
2024-01-25 06:06:58,501 1204 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
|
|
2024-01-25 06:06:58,501 1204 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
|
|
2024-01-25 06:06:58,515 1204 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
|
|
2024-01-25 06:06:58,515 1204 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
|
|
2024-01-25 06:06:58,531 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
|
|
2024-01-25 06:06:58,531 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
|
|
2024-01-25 06:06:58,531 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
|
|
2024-01-25 06:06:58,547 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
|
|
2024-01-25 06:06:58,562 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
|
|
2024-01-25 06:06:58,578 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
|
|
2024-01-25 06:06:58,578 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
|
|
2024-01-25 06:06:58,610 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
|
|
2024-01-25 06:06:58,610 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
|
|
2024-01-25 06:06:58,626 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
|
|
2024-01-25 06:06:58,641 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
|
|
2024-01-25 06:06:58,641 1204 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
|
|
2024-01-25 06:06:58,657 1204 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
|
|
2024-01-25 06:06:58,672 1204 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
|
|
2024-01-25 06:06:58,672 1204 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
|
|
2024-01-25 06:06:58,692 1204 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
|
|
2024-01-25 06:06:58,703 1204 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
|
|
2024-01-25 06:06:58,703 1204 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
|
|
2024-01-25 06:06:58,720 1204 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
|
|
2024-01-25 06:06:58,720 1204 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
|
|
2024-01-25 06:06:58,735 1204 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
|
|
2024-01-25 06:06:58,749 1204 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
|
|
2024-01-25 06:06:58,749 1204 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
|
|
2024-01-25 06:06:58,766 1204 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
|
|
2024-01-25 06:06:58,766 1204 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
|
|
2024-01-25 06:06:58,781 1204 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
|
|
2024-01-25 06:06:58,781 1204 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
|
|
2024-01-25 06:06:58,798 1204 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
|
|
2024-01-25 06:06:58,814 1204 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
|
|
2024-01-25 06:06:58,829 1204 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
|
|
2024-01-25 06:06:58,829 1204 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
|
|
2024-01-25 06:06:58,860 1204 [DEBUG] - Loading community extensions
|
|
2024-01-25 06:06:58,877 1204 [DEBUG] - Importing 'C:\ProgramData\chocolatey\extensions\chocolatey-windowsupdate\chocolatey-windowsupdate.psm1'
|
|
2024-01-25 06:06:58,890 1204 [INFO ] - VERBOSE: Loading module from path 'C:\ProgramData\chocolatey\extensions\chocolatey-windowsupdate\chocolatey-windowsupdate.psm1'.
|
|
2024-01-25 06:06:58,968 1204 [INFO ] - VERBOSE: Exporting function 'Install-WindowsUpdate'.
|
|
2024-01-25 06:06:58,984 1204 [INFO ] - VERBOSE: Exporting function 'Test-WindowsUpdate'.
|
|
2024-01-25 06:06:58,984 1204 [INFO ] - VERBOSE: Importing function 'Install-WindowsUpdate'.
|
|
2024-01-25 06:06:59,001 1204 [INFO ] - VERBOSE: Importing function 'Test-WindowsUpdate'.
|
|
2024-01-25 06:06:59,001 1204 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
|
|
2024-01-25 06:06:59,017 1204 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
|
|
2024-01-25 06:06:59,031 1204 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyConfigValue'.
|
|
2024-01-25 06:06:59,031 1204 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyPath'.
|
|
2024-01-25 06:06:59,031 1204 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
|
|
2024-01-25 06:06:59,047 1204 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
|
|
2024-01-25 06:06:59,047 1204 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
|
|
2024-01-25 06:06:59,062 1204 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
|
|
2024-01-25 06:06:59,062 1204 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
|
|
2024-01-25 06:06:59,078 1204 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
|
|
2024-01-25 06:06:59,078 1204 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
|
|
2024-01-25 06:06:59,078 1204 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
|
|
2024-01-25 06:06:59,097 1204 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
|
|
2024-01-25 06:06:59,097 1204 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
|
|
2024-01-25 06:06:59,111 1204 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
|
|
2024-01-25 06:06:59,124 1204 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
|
|
2024-01-25 06:06:59,124 1204 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
|
|
2024-01-25 06:06:59,141 1204 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
|
|
2024-01-25 06:06:59,141 1204 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
|
|
2024-01-25 06:06:59,156 1204 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
|
|
2024-01-25 06:06:59,156 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
|
|
2024-01-25 06:06:59,172 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
|
|
2024-01-25 06:06:59,172 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
|
|
2024-01-25 06:06:59,188 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
|
|
2024-01-25 06:06:59,188 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
|
|
2024-01-25 06:06:59,203 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
|
|
2024-01-25 06:06:59,203 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
|
|
2024-01-25 06:06:59,220 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
|
|
2024-01-25 06:06:59,220 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
|
|
2024-01-25 06:06:59,234 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
|
|
2024-01-25 06:06:59,234 1204 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
|
|
2024-01-25 06:06:59,249 1204 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
|
|
2024-01-25 06:06:59,249 1204 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
|
|
2024-01-25 06:06:59,249 1204 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
|
|
2024-01-25 06:06:59,267 1204 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
|
|
2024-01-25 06:06:59,267 1204 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
|
|
2024-01-25 06:06:59,282 1204 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
|
|
2024-01-25 06:06:59,282 1204 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
|
|
2024-01-25 06:06:59,296 1204 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
|
|
2024-01-25 06:06:59,296 1204 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
|
|
2024-01-25 06:06:59,312 1204 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
|
|
2024-01-25 06:06:59,312 1204 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
|
|
2024-01-25 06:06:59,328 1204 [INFO ] - VERBOSE: Exporting function 'Install-WindowsUpdate'.
|
|
2024-01-25 06:06:59,328 1204 [INFO ] - VERBOSE: Exporting function 'Test-WindowsUpdate'.
|
|
2024-01-25 06:06:59,343 1204 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
|
|
2024-01-25 06:06:59,343 1204 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
|
|
2024-01-25 06:06:59,343 1204 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
|
|
2024-01-25 06:06:59,360 1204 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
|
|
2024-01-25 06:06:59,360 1204 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
|
|
2024-01-25 06:06:59,375 1204 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
|
|
2024-01-25 06:06:59,375 1204 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
|
|
2024-01-25 06:06:59,391 1204 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
|
|
2024-01-25 06:06:59,391 1204 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
|
|
2024-01-25 06:06:59,407 1204 [INFO ] - VERBOSE: Importing function 'Format-FileSize'.
|
|
2024-01-25 06:06:59,423 1204 [INFO ] - VERBOSE: Importing function 'Get-ChecksumValid'.
|
|
2024-01-25 06:06:59,423 1204 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyConfigValue'.
|
|
2024-01-25 06:06:59,438 1204 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyPath'.
|
|
2024-01-25 06:06:59,438 1204 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyUnzip'.
|
|
2024-01-25 06:06:59,455 1204 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyWebFile'.
|
|
2024-01-25 06:06:59,455 1204 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariable'.
|
|
2024-01-25 06:06:59,470 1204 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariableNames'.
|
|
2024-01-25 06:06:59,486 1204 [INFO ] - VERBOSE: Importing function 'Get-FtpFile'.
|
|
2024-01-25 06:06:59,486 1204 [INFO ] - VERBOSE: Importing function 'Get-OSArchitectureWidth'.
|
|
2024-01-25 06:06:59,501 1204 [INFO ] - VERBOSE: Importing function 'Get-PackageParameters'.
|
|
2024-01-25 06:06:59,501 1204 [INFO ] - VERBOSE: Importing function 'Get-PackageParametersBuiltIn'.
|
|
2024-01-25 06:06:59,516 1204 [INFO ] - VERBOSE: Importing function 'Get-ToolsLocation'.
|
|
2024-01-25 06:06:59,516 1204 [INFO ] - VERBOSE: Importing function 'Get-UACEnabled'.
|
|
2024-01-25 06:06:59,533 1204 [INFO ] - VERBOSE: Importing function 'Get-UninstallRegistryKey'.
|
|
2024-01-25 06:06:59,533 1204 [INFO ] - VERBOSE: Importing function 'Get-VirusCheckValid'.
|
|
2024-01-25 06:06:59,533 1204 [INFO ] - VERBOSE: Importing function 'Get-WebFile'.
|
|
2024-01-25 06:06:59,547 1204 [INFO ] - VERBOSE: Importing function 'Get-WebFileName'.
|
|
2024-01-25 06:06:59,547 1204 [INFO ] - VERBOSE: Importing function 'Get-WebHeaders'.
|
|
2024-01-25 06:06:59,563 1204 [INFO ] - VERBOSE: Importing function 'Install-BinFile'.
|
|
2024-01-25 06:06:59,563 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyEnvironmentVariable'.
|
|
2024-01-25 06:06:59,580 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyExplorerMenuItem'.
|
|
2024-01-25 06:06:59,580 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyFileAssociation'.
|
|
2024-01-25 06:06:59,595 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyInstallPackage'.
|
|
2024-01-25 06:06:59,595 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPackage'.
|
|
2024-01-25 06:06:59,610 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPath'.
|
|
2024-01-25 06:06:59,610 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPinnedTaskBarItem'.
|
|
2024-01-25 06:06:59,625 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPowershellCommand'.
|
|
2024-01-25 06:06:59,625 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyShortcut'.
|
|
2024-01-25 06:06:59,625 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyVsixPackage'.
|
|
2024-01-25 06:06:59,641 1204 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyZipPackage'.
|
|
2024-01-25 06:06:59,641 1204 [INFO ] - VERBOSE: Importing function 'Install-Vsix'.
|
|
2024-01-25 06:06:59,657 1204 [INFO ] - VERBOSE: Importing function 'Install-WindowsUpdate'.
|
|
2024-01-25 06:06:59,657 1204 [INFO ] - VERBOSE: Importing function 'Set-EnvironmentVariable'.
|
|
2024-01-25 06:06:59,673 1204 [INFO ] - VERBOSE: Importing function 'Set-PowerShellExitCode'.
|
|
2024-01-25 06:06:59,673 1204 [INFO ] - VERBOSE: Importing function 'Start-ChocolateyProcessAsAdmin'.
|
|
2024-01-25 06:06:59,673 1204 [INFO ] - VERBOSE: Importing function 'Test-ProcessAdminRights'.
|
|
2024-01-25 06:06:59,688 1204 [INFO ] - VERBOSE: Importing function 'Test-WindowsUpdate'.
|
|
2024-01-25 06:06:59,688 1204 [INFO ] - VERBOSE: Importing function 'Uninstall-BinFile'.
|
|
2024-01-25 06:06:59,703 1204 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyEnvironmentVariable'.
|
|
2024-01-25 06:06:59,703 1204 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyPackage'.
|
|
2024-01-25 06:06:59,720 1204 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyZipPackage'.
|
|
2024-01-25 06:06:59,720 1204 [INFO ] - VERBOSE: Importing function 'Update-SessionEnvironment'.
|
|
2024-01-25 06:06:59,735 1204 [INFO ] - VERBOSE: Importing function 'Write-FunctionCallLogMessage'.
|
|
2024-01-25 06:06:59,735 1204 [INFO ] - VERBOSE: Importing alias 'Add-BinFile'.
|
|
2024-01-25 06:06:59,749 1204 [INFO ] - VERBOSE: Importing alias 'Generate-BinFile'.
|
|
2024-01-25 06:06:59,749 1204 [INFO ] - VERBOSE: Importing alias 'Get-InstallRegistryKey'.
|
|
2024-01-25 06:06:59,766 1204 [INFO ] - VERBOSE: Importing alias 'Get-OSBitness'.
|
|
2024-01-25 06:06:59,766 1204 [INFO ] - VERBOSE: Importing alias 'Get-ProcessorBits'.
|
|
2024-01-25 06:06:59,783 1204 [INFO ] - VERBOSE: Importing alias 'Invoke-ChocolateyProcess'.
|
|
2024-01-25 06:06:59,797 1204 [INFO ] - VERBOSE: Importing alias 'refreshenv'.
|
|
2024-01-25 06:06:59,797 1204 [INFO ] - VERBOSE: Importing alias 'Remove-BinFile'.
|
|
2024-01-25 06:06:59,797 1204 [INFO ] - VERBOSE: Importing alias 'Start-ChocolateyProcess'.
|
|
2024-01-25 06:06:59,813 1204 [DEBUG] - ---------------------------Script Execution---------------------------
|
|
2024-01-25 06:06:59,827 1204 [DEBUG] - Running 'ChocolateyScriptRunner' for osquery v5.11.0 with packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1', packageFolder:'C:\ProgramData\chocolatey\lib\osquery', installArguments: '', packageParameters: '', preRunHookScripts: '', postRunHookScripts: '',
|
|
2024-01-25 06:06:59,827 1204 [DEBUG] - Running package script 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1'
|
|
2024-01-25 06:06:59,969 1204 [DEBUG] - ----------------------------------------------------------------------
|
|
2024-01-25 06:06:59,984 1204 [DEBUG] - Built-in PowerShell host called with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = '';[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::SystemDefault; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1' -installArguments '' -packageParameters '' -preRunHookScripts $null -postRunHookScripts $null'] exited with '0'.
|
|
2024-01-25 06:06:59,984 1204 [WARN ] - SecurityProtocol was set to Tls12, resetting to SystemDefault.
|
|
2024-01-25 06:07:00,062 1204 [INFO ] - Skipping auto uninstaller - No registry snapshot.
|
|
2024-01-25 06:07:00,080 1204 [DEBUG] - Calling command ['"C:\Windows\System32\shutdown.exe" /a']
|
|
2024-01-25 06:07:00,234 1204 [DEBUG] - Command ['"C:\Windows\System32\shutdown.exe" /a'] exited with '1116'
|
|
2024-01-25 06:07:00,281 1204 [DEBUG] - Attempting to delete directory "C:\ProgramData\chocolatey\lib-bkp\osquery".
|
|
2024-01-25 06:07:00,375 1204 [DEBUG] - Ensuring removal of installation files.
|
|
2024-01-25 06:07:00,407 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\LICENSE.txt'
|
|
with checksum '0820FFE048483183320E2DAD339898F6'
|
|
2024-01-25 06:07:00,422 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\LICENSE.txt".
|
|
2024-01-25 06:07:00,437 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\manage-osqueryd.ps1'
|
|
with checksum '3CCB09B60C319C2B6A43DF64360BD14F'
|
|
2024-01-25 06:07:00,437 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\manage-osqueryd.ps1".
|
|
2024-01-25 06:07:00,454 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.conf'
|
|
with checksum '9027F1A3AF205ED3D209BE5F9AEA1842'
|
|
2024-01-25 06:07:00,468 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\osquery.conf".
|
|
2024-01-25 06:07:00,485 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.flags'
|
|
with checksum 'D41D8CD98F00B204E9800998ECF8427E'
|
|
2024-01-25 06:07:00,500 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\osquery.flags".
|
|
2024-01-25 06:07:00,500 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.man'
|
|
with checksum 'A4C03558EDB1FF1F5DC4B2194CF3A500'
|
|
2024-01-25 06:07:00,517 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\osquery.man".
|
|
2024-01-25 06:07:00,625 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg'
|
|
with checksum '926CF1149BB46B8E0D9C25D56A6722D3'
|
|
2024-01-25 06:07:00,625 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg".
|
|
2024-01-25 06:07:00,641 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec'
|
|
with checksum 'FB5DD43C06E3225D002FD2DB9E898027'
|
|
2024-01-25 06:07:00,657 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec".
|
|
2024-01-25 06:07:00,672 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.png'
|
|
with checksum '34A5C156791B25AB5D130BD97AECA98C'
|
|
2024-01-25 06:07:00,687 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\osquery.png".
|
|
2024-01-25 06:07:00,875 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osqueryi.exe'
|
|
with checksum '4CC9A835420F2C4AAB4F892CF79D07E5'
|
|
2024-01-25 06:07:00,894 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\osqueryi.exe".
|
|
2024-01-25 06:07:00,906 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery_utils.ps1'
|
|
with checksum 'E851BB94C0F783653E3BFF527503A850'
|
|
2024-01-25 06:07:00,922 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\osquery_utils.ps1".
|
|
2024-01-25 06:07:00,937 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\VERIFICATION.txt'
|
|
with checksum '77039304249AC12CA156465857B19382'
|
|
2024-01-25 06:07:00,937 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\VERIFICATION.txt".
|
|
2024-01-25 06:07:00,954 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\certs\certs.pem'
|
|
with checksum '6C8779E5755D9DDDF677BF7A52D035CE'
|
|
2024-01-25 06:07:00,954 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\certs\certs.pem".
|
|
2024-01-25 06:07:01,078 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osqueryd\osqueryd.exe'
|
|
with checksum '8FA3431CDD8590C04C7D9197231C4C50'
|
|
2024-01-25 06:07:01,078 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\osqueryd\osqueryd.exe".
|
|
2024-01-25 06:07:01,095 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\hardware-monitoring.conf'
|
|
with checksum '3501087ED8C14DC4CB417D6F749ACAD4'
|
|
2024-01-25 06:07:01,110 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\packs\hardware-monitoring.conf".
|
|
2024-01-25 06:07:01,125 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\incident-response.conf'
|
|
with checksum '9FAF35B5ED735847D0162E4EAA5EF128'
|
|
2024-01-25 06:07:01,125 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\packs\incident-response.conf".
|
|
2024-01-25 06:07:01,142 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\it-compliance.conf'
|
|
with checksum 'C90DCD8897F172B41770C2A658D4426A'
|
|
2024-01-25 06:07:01,156 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\packs\it-compliance.conf".
|
|
2024-01-25 06:07:01,172 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\osquery-monitoring.conf'
|
|
with checksum '50B79815090F908C57B6317DD2F552BF'
|
|
2024-01-25 06:07:01,172 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\packs\osquery-monitoring.conf".
|
|
2024-01-25 06:07:01,189 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\ossec-rootkit.conf'
|
|
with checksum '788318DBABB9FDBC545315C4CA88FC40'
|
|
2024-01-25 06:07:01,204 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\packs\ossec-rootkit.conf".
|
|
2024-01-25 06:07:01,219 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\osx-attacks.conf'
|
|
with checksum 'EE9CDBF8F06E672092B14DE993117569'
|
|
2024-01-25 06:07:01,219 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\packs\osx-attacks.conf".
|
|
2024-01-25 06:07:01,235 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\unwanted-chrome-extensions.conf'
|
|
with checksum 'CF972DFC934DD8E09A628C6B0A3814DD'
|
|
2024-01-25 06:07:01,250 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\packs\unwanted-chrome-extensions.conf".
|
|
2024-01-25 06:07:01,266 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\vuln-management.conf'
|
|
with checksum 'F1C82E2A9E05DE6AD9DFD47E16461FA8'
|
|
2024-01-25 06:07:01,283 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\packs\vuln-management.conf".
|
|
2024-01-25 06:07:01,299 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\windows-attacks.conf'
|
|
with checksum '5C705090F10185E33F87AC8A79C445FB'
|
|
2024-01-25 06:07:01,312 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\packs\windows-attacks.conf".
|
|
2024-01-25 06:07:01,329 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\windows-hardening.conf'
|
|
with checksum 'EBFB94E06E2914770A4EAEA4E5F83248'
|
|
2024-01-25 06:07:01,329 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\packs\windows-hardening.conf".
|
|
2024-01-25 06:07:01,345 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1'
|
|
with checksum '289840CCC12B230068E229CDD37E3703'
|
|
2024-01-25 06:07:01,359 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1".
|
|
2024-01-25 06:07:01,375 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1'
|
|
with checksum '780C83D965D277E7A132A4E7208FD339'
|
|
2024-01-25 06:07:01,375 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1".
|
|
2024-01-25 06:07:01,390 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1'
|
|
with checksum '3C79361CA6117F7D02C1FEDDF82F07C6'
|
|
2024-01-25 06:07:01,470 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1".
|
|
2024-01-25 06:07:01,485 1204 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1'
|
|
with checksum 'E851BB94C0F783653E3BFF527503A850'
|
|
2024-01-25 06:07:01,500 1204 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1".
|
|
2024-01-25 06:07:01,517 1204 [DEBUG] - Attempting to delete directory "C:\ProgramData\chocolatey\lib\osquery".
|
|
2024-01-25 06:07:01,532 1204 [INFO ] - osquery has been successfully uninstalled.
|
|
2024-01-25 06:07:01,532 1204 [DEBUG] - Removing nupkg if it still exists.
|
|
2024-01-25 06:07:01,564 1204 [DEBUG] - Ensuring removal of installation files.
|
|
2024-01-25 06:07:01,640 1204 [WARN ] - Environment Vars (like PATH) have changed. Close/reopen your shell to
|
|
see the changes (or in powershell/cmd.exe just type `refreshenv`).
|
|
2024-01-25 06:07:01,640 1204 [DEBUG] - The following values have been added/changed (may contain sensitive data):
|
|
2024-01-25 06:07:01,657 1204 [DEBUG] - * Path='C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\ProgramData\chocolatey\bin;;' (Machine)
|
|
2024-01-25 06:07:01,814 1204 [WARN ] -
|
|
Chocolatey uninstalled 1/1 packages.
|
|
See the log for details (C:\ProgramData\chocolatey\logs\chocolatey.log).
|
|
2024-01-25 06:07:01,844 1204 [DEBUG] - Sending message 'PostRunMessage' out if there are subscribers...
|
|
2024-01-25 06:07:01,984 1204 [DEBUG] - Exiting with 0
|