choco-bot/FilesSnapshot.xml

## _Summary.md

      
          Raw
        
        
              _Summary.md
            
          
    osquery v3.3.2 - Passed - Package Test Results

https://chocolatey.org/packages/osquery/3.3.2
Tested 30 Apr 2019 10:56:33 +00:00
Tested against win2012r2x64 (Windows Server 2012 R2 x64)
Tested with the latest version of choco, possibly a beta version.
Tested with chocolatey-package-verifier service v0.4.0-38-g3187e94
Install was successful.
Uninstall was successful.


## FilesSnapshot.xml
<?xml version="1.0" encoding="utf-8"?>
<fileSnapshot xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
  <files>
    <file path="C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg" checksum="EEA9FD683FF0F22630AACDA3365B3AD1" />
    <file path="C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec" checksum="6E661F76337EFC95773CD04A45477D7E" />
    <file path="C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1" checksum="B65E565A0853CAA681D2DA2FA2639982" />
    <file path="C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1" checksum="FE6F0A9BBED778BF0F3533F7616D16B2" />
    <file path="C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1" checksum="4D7ABD81FEBDB1BE4849F86D38174BA5" />
    <file path="C:\ProgramData\chocolatey\lib\osquery\tools\LICENSE.txt" checksum="DD399CA08A28F2D449C22B56D76CC606" />
    <file path="C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1" checksum="5B79066DE95F16C1F0D0463F8EB14A4D" />
    <file path="C:\ProgramData\chocolatey\lib\osquery\tools\VERIFICATION.txt" checksum="2CD0E01D7F4FA91C2ED57BF13CAA27D2" />
    <file path="C:\ProgramData\chocolatey\lib\osquery\tools\bin\osquery.zip" checksum="AD85346830126625EBA6CB536EA9C30F" />
  </files>
</fileSnapshot>

## Install.txt
2019-04-30 10:55:17,363 1668 [DEBUG] - XmlConfiguration is now operational
2019-04-30 10:55:17,582 1668 [INFO ] - ============================================================
2019-04-30 10:55:18,379 1668 [INFO ] - Chocolatey v0.10.14-beta-7-gb30427d
2019-04-30 10:55:18,410 1668 [DEBUG] - Chocolatey is running on Windows v 6.3.9600.0
2019-04-30 10:55:18,426 1668 [DEBUG] - Attempting to delete file "C:/ProgramData/chocolatey/choco.exe.old".
2019-04-30 10:55:18,426 1668 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\choco.exe.old".
2019-04-30 10:55:18,457 1668 [DEBUG] - Command line: "C:\ProgramData\chocolatey\choco.exe" install osquery --version 3.3.2 -fdvy --execution-timeout=2700 --allow-downgrade
2019-04-30 10:55:18,457 1668 [DEBUG] - Received arguments: install osquery --version 3.3.2 -fdvy --execution-timeout=2700 --allow-downgrade
2019-04-30 10:55:18,645 1668 [DEBUG] - RemovePendingPackagesTask is now ready and waiting for PreRunMessage.
2019-04-30 10:55:18,660 1668 [DEBUG] - Sending message 'PreRunMessage' out if there are subscribers...
2019-04-30 10:55:18,693 1668 [DEBUG] - [Pending] Removing all pending packages that should not be considered installed...
2019-04-30 10:55:18,896 1668 [DEBUG] - Performing validation checks.
2019-04-30 10:55:18,926 1668 [DEBUG] - Global Configuration Validation Checks:
2019-04-30 10:55:18,926 1668 [DEBUG] -  - Package Exit Code / Exit On Reboot = Checked
2019-04-30 10:55:18,942 1668 [DEBUG] - System State Validation Checks:
2019-04-30 10:55:18,942 1668 [DEBUG] -  Reboot Requirement Checks:
2019-04-30 10:55:18,957 1668 [DEBUG] -  - Pending Computer Rename = Checked
2019-04-30 10:55:18,973 1668 [DEBUG] -  - Pending Component Based Servicing = Checked
2019-04-30 10:55:18,973 1668 [DEBUG] -  - Pending Windows Auto Update = Checked
2019-04-30 10:55:18,973 1668 [DEBUG] -  - Pending File Rename Operations = Checked
2019-04-30 10:55:18,989 1668 [DEBUG] -  - Pending Windows Package Installer = Checked
2019-04-30 10:55:18,989 1668 [DEBUG] -  - Pending Windows Package Installer SysWow64 = Checked
2019-04-30 10:55:19,004 1668 [INFO ] - 2 validations performed. 2 success(es), 0 warning(s), and 0 error(s).
2019-04-30 10:55:19,020 1668 [DEBUG] - The source 'https://chocolatey.org/api/v2/' evaluated to a 'normal' source type
2019-04-30 10:55:19,035 1668 [DEBUG] -
NOTE: Hiding sensitive configuration data! Please double and triple
 check to be sure no sensitive data is shown, especially if copying
 output to a gist for review.
2019-04-30 10:55:19,098 1668 [DEBUG] - Configuration: CommandName='install'|
CacheLocation='C:\Users\Administrator\AppData\Local\Temp\chocolatey'|
ContainsLegacyPackageInstalls='True'|
CommandExecutionTimeoutSeconds='2700'|WebRequestTimeoutSeconds='30'|
Sources='https://chocolatey.org/api/v2/'|SourceType='normal'|
Debug='True'|Verbose='True'|Trace='False'|Force='True'|Noop='False'|
HelpRequested='False'|UnsuccessfulParsing='False'|RegularOutput='True'|
QuietOutput='False'|PromptForConfirmation='False'|AcceptLicense='True'|
AllowUnofficialBuild='False'|Input='osquery'|Version='3.3.2'|
AllVersions='False'|SkipPackageInstallProvider='False'|
PackageNames='osquery'|Prerelease='False'|ForceX86='False'|
OverrideArguments='False'|NotSilent='False'|
ApplyPackageParametersToDependencies='False'|
ApplyInstallArgumentsToDependencies='False'|IgnoreDependencies='False'|
AllowMultipleVersions='False'|AllowDowngrade='True'|
ForceDependencies='False'|Information.PlatformType='Windows'|
Information.PlatformVersion='6.3.9600.0'|
Information.PlatformName='Windows Server 2012 R2'|
Information.ChocolateyVersion='0.10.14.0'|
Information.ChocolateyProductVersion='0.10.14-beta-7-gb30427d'|
Information.FullName='choco, Version=0.10.14.0, Culture=neutral, PublicKeyToken=79d02ea9cad655eb'|

Information.Is64BitOperatingSystem='True'|
Information.Is64BitProcess='True'|Information.IsInteractive='True'|
Information.UserName='vagrant'|
Information.UserDomainName='WIN-E5K8TM30719'|
Information.IsUserAdministrator='True'|
Information.IsUserSystemAccount='False'|
Information.IsUserRemoteDesktop='False'|
Information.IsUserRemote='True'|
Information.IsProcessElevated='True'|
Information.IsLicensedVersion='False'|Information.LicenseType='Foss'|
Features.AutoUninstaller='True'|Features.ChecksumFiles='True'|
Features.AllowEmptyChecksums='False'|
Features.AllowEmptyChecksumsSecure='True'|
Features.FailOnAutoUninstaller='False'|
Features.FailOnStandardError='False'|Features.UsePowerShellHost='True'|
Features.LogEnvironmentValues='True'|Features.LogWithoutColor='False'|
Features.VirusCheck='False'|
Features.FailOnInvalidOrMissingLicense='False'|
Features.IgnoreInvalidOptionsSwitches='True'|
Features.UsePackageExitCodes='True'|
Features.UseEnhancedExitCodes='False'|
Features.UseFipsCompliantChecksums='False'|
Features.ShowNonElevatedWarnings='True'|
Features.ShowDownloadProgress='False'|
Features.StopOnFirstPackageFailure='False'|
Features.UseRememberedArgumentsForUpgrades='False'|
Features.IgnoreUnfoundPackagesOnUpgradeOutdated='False'|
Features.SkipPackageUpgradesWhenNotInstalled='False'|
Features.RemovePackageInformationOnUninstall='False'|
Features.ExitOnRebootDetected='False'|
Features.LogValidationResultsOnWarnings='True'|
Features.UsePackageRepositoryOptimizations='True'|
Features.ScriptsCheckLastExitCode='False'|
ListCommand.LocalOnly='False'|
ListCommand.IdOnly='False'|ListCommand.IncludeRegistryPrograms='False'|
ListCommand.PageSize='25'|ListCommand.Exact='False'|
ListCommand.ByIdOnly='False'|ListCommand.ByTagOnly='False'|
ListCommand.IdStartsWith='False'|ListCommand.OrderByPopularity='False'|
ListCommand.ApprovedOnly='False'|
ListCommand.DownloadCacheAvailable='False'|
ListCommand.NotBroken='False'|
ListCommand.IncludeVersionOverrides='False'|
UpgradeCommand.FailOnUnfound='False'|
UpgradeCommand.FailOnNotInstalled='False'|
UpgradeCommand.NotifyOnlyAvailableUpgrades='False'|
UpgradeCommand.ExcludePrerelease='False'|
NewCommand.AutomaticPackage='False'|
NewCommand.UseOriginalTemplate='False'|SourceCommand.Command='unknown'|
SourceCommand.Priority='0'|SourceCommand.BypassProxy='False'|
SourceCommand.AllowSelfService='False'|
SourceCommand.VisibleToAdminsOnly='False'|
FeatureCommand.Command='unknown'|ConfigCommand.Command='unknown'|
ApiKeyCommand.Remove='False'|PinCommand.Command='unknown'|
OutdatedCommand.IgnorePinned='False'|Proxy.BypassOnLocal='True'|
2019-04-30 10:55:19,098 1668 [DEBUG] - _ Chocolatey:ChocolateyInstallCommand - Normal Run Mode _
2019-04-30 10:55:19,129 1668 [INFO ] - Installing the following packages:
2019-04-30 10:55:19,129 1668 [INFO ] - osquery
2019-04-30 10:55:19,129 1668 [INFO ] - By installing you accept licenses for the packages.
2019-04-30 10:55:19,160 1668 [DEBUG] - Current environment values (may contain sensitive data):
2019-04-30 10:55:19,160 1668 [DEBUG] -   * 'TMP'='C:\Users\Administrator\AppData\Local\Temp' ('User')
2019-04-30 10:55:19,160 1668 [DEBUG] -   * 'TEMP'='C:\Users\Administrator\AppData\Local\Temp' ('User')
2019-04-30 10:55:19,176 1668 [DEBUG] -   * 'ChocolateyLastPathUpdate'='132010867882553109' ('User')
2019-04-30 10:55:19,176 1668 [DEBUG] -   * 'FP_NO_HOST_CHECK'='NO' ('Machine')
2019-04-30 10:55:19,176 1668 [DEBUG] -   * 'USERNAME'='SYSTEM' ('Machine')
2019-04-30 10:55:19,176 1668 [DEBUG] -   * 'Path'='C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\Git\bin;C:\ProgramData\chocolatey\bin;' ('Machine')
2019-04-30 10:55:19,176 1668 [DEBUG] -   * 'ComSpec'='C:\Windows\system32\cmd.exe' ('Machine')
2019-04-30 10:55:19,192 1668 [DEBUG] -   * 'TMP'='C:\Windows\TEMP' ('Machine')
2019-04-30 10:55:19,192 1668 [DEBUG] -   * 'OS'='Windows_NT' ('Machine')
2019-04-30 10:55:19,192 1668 [DEBUG] -   * 'windir'='C:\Windows' ('Machine')
2019-04-30 10:55:19,192 1668 [DEBUG] -   * 'PROCESSOR_ARCHITECTURE'='AMD64' ('Machine')
2019-04-30 10:55:19,192 1668 [DEBUG] -   * 'TEMP'='C:\Windows\TEMP' ('Machine')
2019-04-30 10:55:19,207 1668 [DEBUG] -   * 'PATHEXT'='.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC' ('Machine')
2019-04-30 10:55:19,207 1668 [DEBUG] -   * 'PSModulePath'='C:\Windows\system32\WindowsPowerShell\v1.0\Modules\' ('Machine')
2019-04-30 10:55:19,207 1668 [DEBUG] -   * 'NUMBER_OF_PROCESSORS'='4' ('Machine')
2019-04-30 10:55:19,207 1668 [DEBUG] -   * 'PROCESSOR_LEVEL'='6' ('Machine')
2019-04-30 10:55:19,223 1668 [DEBUG] -   * 'PROCESSOR_IDENTIFIER'='Intel64 Family 6 Model 45 Stepping 7, GenuineIntel' ('Machine')
2019-04-30 10:55:19,223 1668 [DEBUG] -   * 'PROCESSOR_REVISION'='2d07' ('Machine')
2019-04-30 10:55:19,223 1668 [DEBUG] -   * 'HOME'='C:\Users\Administrator' ('Machine')
2019-04-30 10:55:19,223 1668 [DEBUG] -   * 'ChocolateyInstall'='C:\ProgramData\chocolatey' ('Machine')
2019-04-30 10:55:27,942 1668 [INFO ] - [NuGet] Installing 'osquery 3.3.2'.
2019-04-30 10:55:28,016 1668 [DEBUG] - [NuGet] Added file 'osquery.zip' to folder 'osquery\tools\bin'.
2019-04-30 10:55:28,020 1668 [DEBUG] - [NuGet] Added file 'chocolateyBeforeModify.ps1' to folder 'osquery\tools'.
2019-04-30 10:55:28,020 1668 [DEBUG] - [NuGet] Added file 'chocolateyinstall.ps1' to folder 'osquery\tools'.
2019-04-30 10:55:28,020 1668 [DEBUG] - [NuGet] Added file 'chocolateyuninstall.ps1' to folder 'osquery\tools'.
2019-04-30 10:55:28,035 1668 [DEBUG] - [NuGet] Added file 'LICENSE.txt' to folder 'osquery\tools'.
2019-04-30 10:55:28,035 1668 [DEBUG] - [NuGet] Added file 'osquery_utils.ps1' to folder 'osquery\tools'.
2019-04-30 10:55:28,035 1668 [DEBUG] - [NuGet] Added file 'VERIFICATION.txt' to folder 'osquery\tools'.
2019-04-30 10:55:28,149 1668 [DEBUG] - [NuGet] Added file 'osquery.nupkg' to folder 'osquery'.
2019-04-30 10:55:30,582 1668 [DEBUG] - [NuGet] Added file 'osquery.nuspec' to folder 'osquery'.
2019-04-30 10:55:30,582 1668 [INFO ] - [NuGet] Successfully installed 'osquery 3.3.2'.
2019-04-30 10:55:30,599 1668 [INFO ] -
osquery v3.3.2 (forced) [Approved]
2019-04-30 10:55:30,660 1668 [INFO ] - osquery package files install completed. Performing other installation steps.
2019-04-30 10:55:30,896 1668 [DEBUG] - Setting installer args for osquery
2019-04-30 10:55:30,910 1668 [DEBUG] - Setting package parameters for osquery
2019-04-30 10:55:30,910 1668 [DEBUG] - Contents of 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1':
2019-04-30 10:55:30,942 1668 [DEBUG] - #  Copyright (c) 2014-present, Facebook, Inc.
#  All rights reserved.
#
#  This source code is licensed under both the Apache 2.0 license (found in the
#  LICENSE file in the root directory of this source tree) and the GPLv2 (found
#  in the COPYING file in the root directory of this source tree).
#  You may select, at your option, one of the above-listed licenses.
. "$(Split-Path -Parent $MyInvocation.MyCommand.Definition)\\osquery_utils.ps1"

$serviceName = 'osqueryd'
$serviceDescription = 'osquery daemon service'
$progData = [System.Environment]::GetEnvironmentVariable('ProgramData')
$targetFolder = Join-Path $progData 'osquery'
$daemonFolder = Join-Path $targetFolder 'osqueryd'
$extensionsFolder = Join-Path $targetFolder 'extensions'
$logFolder = Join-Path $targetFolder 'log'
$targetDaemonBin = Join-Path $targetFolder 'osqueryd.exe'
$destDaemonBin = Join-Path $daemonFolder 'osqueryd.exe'
$packageParameters = $env:chocolateyPackageParameters
$arguments = @{}

# Ensure the service is stopped and processes are not running if exists.
if ((Get-Service $serviceName -ErrorAction SilentlyContinue) -and `
  (Get-Service $serviceName).Status -eq 'Running') {
  Stop-Service $serviceName
  # If we find zombie processes, ensure they're termintated
  $proc = Get-Process | Where-Object { $_.ProcessName -eq 'osqueryd' }
  if ($proc -ne $null) {
    Stop-Process -Force $proc -ErrorAction SilentlyContinue
  }
}

# Lastly, ensure that the Deny Write ACLs have been removed before modifying
if (Test-Path $daemonFolder) {
  Set-DenyWriteAcl $daemonFolder 'Remove'
}
if (Test-Path $extensionsFolder) {
  Set-DenyWriteAcl $extensionsFolder 'Remove'
}

# Now parse the packageParameters using good old regular expression
if ($packageParameters) {
  $match_pattern = "\/(?<option>([a-zA-Z]+)):(?<value>([`"'])?([a-zA-Z0-9- _\\:\.]+)([`"'])?)|\/(?<option>([a-zA-Z]+))"
  $option_name = 'option'
  $value_name = 'value'

  if ($packageParameters -match $match_pattern ) {
    $results = $packageParameters | Select-String $match_pattern -AllMatches
    $results.matches | ForEach-Object {
      $arguments.Add(
        $_.Groups[$option_name].Value.Trim(),
        $_.Groups[$value_name].Value.Trim())
    }
  } else {
    Throw "Package Parameters were found but were invalid (REGEX Failure)"
  }
  if ($arguments.ContainsKey("InstallService")) {
    $installService = $true
  }
} else {
  Write-Debug "No Package Parameters Passed in"
}

New-Item -Force -Type directory -Path $daemonFolder
New-Item -Force -Type directory -Path $logFolder
$packagePath = "$(Split-Path -Parent $MyInvocation.MyCommand.Definition)\\bin\\osquery.zip"
Get-ChocolateyUnzip -FileFullPath $packagePath -Destination $targetFolder

# In order to run osqueryd as a service, we need to have a folder that has a
# Deny Write ACL to everyone.
Move-Item -Force -Path $targetDaemonBin -Destination $destDaemonBin
Set-SafePermissions $daemonFolder

if ($installService) {
  if (-not (Get-Service $serviceName -ErrorAction SilentlyContinue)) {
    Write-Debug 'Installing osquery daemon service.'
    # If the 'install' parameter is passed, we create a Windows service with
    # the flag file in the default location in \ProgramData\osquery\
    New-Service -Name $serviceName -BinaryPathName "$destDaemonBin --flagfile=\ProgramData\osquery\osquery.flags" -DisplayName $serviceName -Description $serviceDescription -StartupType Automatic

    # If the osquery.flags file doesn't exist, we create a blank one.
    if (-not (Test-Path "$targetFolder\osquery.flags")) {
      Add-Content "$targetFolder\osquery.flags" $null
    }
  }
  Start-Service $serviceName
}

# Add osquery binary path to machines path for ease of use.
Add-ToSystemPath $targetFolder

2019-04-30 10:55:31,660 1668 [DEBUG] - Calling built-in PowerShell host with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = ''; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1' -installArguments '' -packageParameters ''']
2019-04-30 10:55:31,676 1668 [DEBUG] - Redirecting System.Management.Automation.resources, Version=3.0.0.0, Culture=en-US, PublicKeyToken=31bf3856ad364e35, requested by ''
2019-04-30 10:55:33,286 1668 [DEBUG] - Host version is 4.0, PowerShell Version is '4.0' and CLR Version is '4.0.30319.33440'.
2019-04-30 10:55:33,676 1668 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2019-04-30 10:55:33,676 1668 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2019-04-30 10:55:33,692 1668 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2019-04-30 10:55:33,692 1668 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2019-04-30 10:55:33,692 1668 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2019-04-30 10:55:33,707 1668 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2019-04-30 10:55:33,707 1668 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2019-04-30 10:55:33,707 1668 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2019-04-30 10:55:33,723 1668 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2019-04-30 10:55:33,723 1668 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2019-04-30 10:55:33,723 1668 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2019-04-30 10:55:33,738 1668 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2019-04-30 10:55:33,738 1668 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2019-04-30 10:55:33,738 1668 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2019-04-30 10:55:33,738 1668 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2019-04-30 10:55:33,754 1668 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2019-04-30 10:55:33,754 1668 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2019-04-30 10:55:33,754 1668 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2019-04-30 10:55:33,770 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyDesktopLink'.
2019-04-30 10:55:33,770 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2019-04-30 10:55:33,770 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2019-04-30 10:55:33,785 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2019-04-30 10:55:33,785 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2019-04-30 10:55:33,785 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2019-04-30 10:55:33,785 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2019-04-30 10:55:33,801 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2019-04-30 10:55:33,801 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2019-04-30 10:55:33,801 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2019-04-30 10:55:33,801 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2019-04-30 10:55:33,817 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2019-04-30 10:55:33,817 1668 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2019-04-30 10:55:33,817 1668 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2019-04-30 10:55:33,832 1668 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2019-04-30 10:55:33,832 1668 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2019-04-30 10:55:33,832 1668 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2019-04-30 10:55:33,832 1668 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2019-04-30 10:55:33,848 1668 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2019-04-30 10:55:33,848 1668 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2019-04-30 10:55:33,848 1668 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2019-04-30 10:55:33,848 1668 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2019-04-30 10:55:33,864 1668 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateyFailure'.
2019-04-30 10:55:33,864 1668 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateySuccess'.
2019-04-30 10:55:33,864 1668 [INFO ] - VERBOSE: Exporting function 'Write-FileUpdateLog'.
2019-04-30 10:55:33,864 1668 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2019-04-30 10:55:33,879 1668 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2019-04-30 10:55:33,879 1668 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2019-04-30 10:55:33,879 1668 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2019-04-30 10:55:33,895 1668 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2019-04-30 10:55:33,895 1668 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2019-04-30 10:55:33,895 1668 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2019-04-30 10:55:33,895 1668 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2019-04-30 10:55:33,910 1668 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2019-04-30 10:55:33,910 1668 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2019-04-30 10:55:33,942 1668 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2019-04-30 10:55:33,957 1668 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2019-04-30 10:55:33,957 1668 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2019-04-30 10:55:33,973 1668 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2019-04-30 10:55:33,973 1668 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2019-04-30 10:55:33,973 1668 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2019-04-30 10:55:33,973 1668 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2019-04-30 10:55:33,988 1668 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2019-04-30 10:55:33,988 1668 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2019-04-30 10:55:33,988 1668 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2019-04-30 10:55:34,004 1668 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2019-04-30 10:55:34,004 1668 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2019-04-30 10:55:34,004 1668 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2019-04-30 10:55:34,004 1668 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2019-04-30 10:55:34,020 1668 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2019-04-30 10:55:34,020 1668 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2019-04-30 10:55:34,020 1668 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2019-04-30 10:55:34,035 1668 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2019-04-30 10:55:34,035 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyDesktopLink'.
2019-04-30 10:55:34,035 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2019-04-30 10:55:34,035 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2019-04-30 10:55:34,051 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2019-04-30 10:55:34,051 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2019-04-30 10:55:34,051 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2019-04-30 10:55:34,051 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2019-04-30 10:55:34,067 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2019-04-30 10:55:34,067 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2019-04-30 10:55:34,067 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2019-04-30 10:55:34,082 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2019-04-30 10:55:34,082 1668 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2019-04-30 10:55:34,082 1668 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2019-04-30 10:55:34,082 1668 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2019-04-30 10:55:34,098 1668 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2019-04-30 10:55:34,098 1668 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2019-04-30 10:55:34,098 1668 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2019-04-30 10:55:34,113 1668 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2019-04-30 10:55:34,113 1668 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2019-04-30 10:55:34,113 1668 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2019-04-30 10:55:34,113 1668 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2019-04-30 10:55:34,129 1668 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2019-04-30 10:55:34,129 1668 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateyFailure'.
2019-04-30 10:55:34,129 1668 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateySuccess'.
2019-04-30 10:55:34,129 1668 [INFO ] - VERBOSE: Exporting function 'Write-FileUpdateLog'.
2019-04-30 10:55:34,145 1668 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2019-04-30 10:55:34,145 1668 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2019-04-30 10:55:34,145 1668 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2019-04-30 10:55:34,160 1668 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2019-04-30 10:55:34,160 1668 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2019-04-30 10:55:34,160 1668 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2019-04-30 10:55:34,160 1668 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2019-04-30 10:55:34,176 1668 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2019-04-30 10:55:34,176 1668 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2019-04-30 10:55:34,176 1668 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2019-04-30 10:55:34,192 1668 [INFO ] - VERBOSE: Importing function 'Format-FileSize'.
2019-04-30 10:55:34,192 1668 [INFO ] - VERBOSE: Importing function 'Get-ChecksumValid'.
2019-04-30 10:55:34,192 1668 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyUnzip'.
2019-04-30 10:55:34,192 1668 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyWebFile'.
2019-04-30 10:55:34,207 1668 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariable'.
2019-04-30 10:55:34,207 1668 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariableNames'.
2019-04-30 10:55:34,207 1668 [INFO ] - VERBOSE: Importing function 'Get-FtpFile'.
2019-04-30 10:55:34,223 1668 [INFO ] - VERBOSE: Importing function 'Get-OSArchitectureWidth'.
2019-04-30 10:55:34,223 1668 [INFO ] - VERBOSE: Importing function 'Get-PackageParameters'.
2019-04-30 10:55:34,223 1668 [INFO ] - VERBOSE: Importing function 'Get-PackageParametersBuiltIn'.
2019-04-30 10:55:34,223 1668 [INFO ] - VERBOSE: Importing function 'Get-ToolsLocation'.
2019-04-30 10:55:34,238 1668 [INFO ] - VERBOSE: Importing function 'Get-UACEnabled'.
2019-04-30 10:55:34,238 1668 [INFO ] - VERBOSE: Importing function 'Get-UninstallRegistryKey'.
2019-04-30 10:55:34,238 1668 [INFO ] - VERBOSE: Importing function 'Get-VirusCheckValid'.
2019-04-30 10:55:34,254 1668 [INFO ] - VERBOSE: Importing function 'Get-WebFile'.
2019-04-30 10:55:34,254 1668 [INFO ] - VERBOSE: Importing function 'Get-WebFileName'.
2019-04-30 10:55:34,254 1668 [INFO ] - VERBOSE: Importing function 'Get-WebHeaders'.
2019-04-30 10:55:34,254 1668 [INFO ] - VERBOSE: Importing function 'Install-BinFile'.
2019-04-30 10:55:34,270 1668 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyDesktopLink'.
2019-04-30 10:55:34,270 1668 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyEnvironmentVariable'.
2019-04-30 10:55:34,270 1668 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyExplorerMenuItem'.
2019-04-30 10:55:34,285 1668 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyFileAssociation'.
2019-04-30 10:55:34,285 1668 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyInstallPackage'.
2019-04-30 10:55:34,285 1668 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPackage'.
2019-04-30 10:55:34,285 1668 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPath'.
2019-04-30 10:55:34,301 1668 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPinnedTaskBarItem'.
2019-04-30 10:55:34,301 1668 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPowershellCommand'.
2019-04-30 10:55:34,301 1668 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyShortcut'.
2019-04-30 10:55:34,317 1668 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyVsixPackage'.
2019-04-30 10:55:34,317 1668 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyZipPackage'.
2019-04-30 10:55:34,317 1668 [INFO ] - VERBOSE: Importing function 'Install-Vsix'.
2019-04-30 10:55:34,317 1668 [INFO ] - VERBOSE: Importing function 'Set-EnvironmentVariable'.
2019-04-30 10:55:34,332 1668 [INFO ] - VERBOSE: Importing function 'Set-PowerShellExitCode'.
2019-04-30 10:55:34,332 1668 [INFO ] - VERBOSE: Importing function 'Start-ChocolateyProcessAsAdmin'.
2019-04-30 10:55:34,332 1668 [INFO ] - VERBOSE: Importing function 'Test-ProcessAdminRights'.
2019-04-30 10:55:34,348 1668 [INFO ] - VERBOSE: Importing function 'Uninstall-BinFile'.
2019-04-30 10:55:34,348 1668 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyEnvironmentVariable'.
2019-04-30 10:55:34,348 1668 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyPackage'.
2019-04-30 10:55:34,412 1668 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyZipPackage'.
2019-04-30 10:55:34,412 1668 [INFO ] - VERBOSE: Importing function 'Update-SessionEnvironment'.
2019-04-30 10:55:34,426 1668 [INFO ] - VERBOSE: Importing function 'Write-ChocolateyFailure'.
2019-04-30 10:55:34,426 1668 [INFO ] - VERBOSE: Importing function 'Write-ChocolateySuccess'.
2019-04-30 10:55:34,426 1668 [INFO ] - VERBOSE: Importing function 'Write-FileUpdateLog'.
2019-04-30 10:55:34,426 1668 [INFO ] - VERBOSE: Importing function 'Write-FunctionCallLogMessage'.
2019-04-30 10:55:34,442 1668 [INFO ] - VERBOSE: Importing alias 'Add-BinFile'.
2019-04-30 10:55:34,442 1668 [INFO ] - VERBOSE: Importing alias 'Generate-BinFile'.
2019-04-30 10:55:34,442 1668 [INFO ] - VERBOSE: Importing alias 'Get-InstallRegistryKey'.
2019-04-30 10:55:34,442 1668 [INFO ] - VERBOSE: Importing alias 'Get-OSBitness'.
2019-04-30 10:55:34,457 1668 [INFO ] - VERBOSE: Importing alias 'Get-ProcessorBits'.
2019-04-30 10:55:34,457 1668 [INFO ] - VERBOSE: Importing alias 'Invoke-ChocolateyProcess'.
2019-04-30 10:55:34,457 1668 [INFO ] - VERBOSE: Importing alias 'refreshenv'.
2019-04-30 10:55:34,457 1668 [INFO ] - VERBOSE: Importing alias 'Remove-BinFile'.
2019-04-30 10:55:34,473 1668 [INFO ] - VERBOSE: Importing alias 'Start-ChocolateyProcess'.
2019-04-30 10:55:34,629 1668 [DEBUG] - Running 'ChocolateyScriptRunner' for osquery v3.3.2 with packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1', packageFolder:'C:\ProgramData\chocolatey\lib\osquery', installArguments: '', packageParameters: '',
2019-04-30 10:55:34,676 1668 [DEBUG] - Running 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1'
2019-04-30 10:55:34,817 1668 [DEBUG] - No Package Parameters Passed in
2019-04-30 10:55:34,832 1668 [INFO ] - C:\ProgramData\osquery\osqueryd
2019-04-30 10:55:34,848 1668 [INFO ] - C:\ProgramData\osquery\log
2019-04-30 10:55:35,035 1668 [DEBUG] - Running Get-ChocolateyUnzip -fileFullPath 'C:\ProgramData\chocolatey\lib\osquery\tools\\bin\\osquery.zip' -destination 'C:\ProgramData\osquery'
2019-04-30 10:55:35,052 1668 [DEBUG] - Running Get-ProcessorBits -compare '32'
2019-04-30 10:55:35,114 1668 [INFO ] - Extracting C:\ProgramData\chocolatey\lib\osquery\tools\\bin\\osquery.zip to C:\ProgramData\osquery...
2019-04-30 10:55:35,129 1668 [INFO ] -
2019-04-30 10:55:35,160 1668 [DEBUG] - 7zip found at 'C:\ProgramData\chocolatey\tools\7z.exe'
2019-04-30 10:55:35,207 1668 [DEBUG] - Executing command ['C:\ProgramData\chocolatey\tools\7z.exe' x -aoa -bd -bb1 -o"C:\ProgramData\osquery" -y "C:\ProgramData\chocolatey\lib\osquery\tools\\bin\\osquery.zip"]
2019-04-30 10:55:36,474 1668 [INFO ] - VERBOSE:
2019-04-30 10:55:36,489 1668 [INFO ] - VERBOSE: 7-Zip 18.06 (x86) : Copyright (c) 1999-2018 Igor Pavlov : 2018-12-30
2019-04-30 10:55:36,489 1668 [INFO ] - VERBOSE:
2019-04-30 10:55:36,504 1668 [INFO ] - VERBOSE: Scanning the drive for archives:
2019-04-30 10:55:36,504 1668 [INFO ] - VERBOSE: 1 file, 9522146 bytes (9299 KiB)
2019-04-30 10:55:36,504 1668 [INFO ] - VERBOSE:
2019-04-30 10:55:36,520 1668 [INFO ] - VERBOSE: Extracting archive: C:\ProgramData\chocolatey\lib\osquery\tools\\bin\\osquery.zip
2019-04-30 10:55:36,520 1668 [INFO ] - VERBOSE: --
2019-04-30 10:55:36,520 1668 [INFO ] - VERBOSE: Path = C:\ProgramData\chocolatey\lib\osquery\tools\\bin\\osquery.zip
2019-04-30 10:55:36,535 1668 [INFO ] - VERBOSE: Type = zip
2019-04-30 10:55:36,535 1668 [INFO ] - VERBOSE: Physical Size = 9522146
2019-04-30 10:55:36,535 1668 [INFO ] - VERBOSE:
2019-04-30 10:55:36,535 1668 [INFO ] - VERBOSE: - certs
2019-04-30 10:55:36,598 1668 [INFO ] - VERBOSE: - certs\certs.pem
2019-04-30 10:55:36,598 1668 [INFO ] - VERBOSE: - LICENSE.txt
2019-04-30 10:55:36,614 1668 [INFO ] - VERBOSE: - manage-osqueryd.ps1
2019-04-30 10:55:36,614 1668 [INFO ] - VERBOSE: - osquery.example.conf
2019-04-30 10:55:36,614 1668 [INFO ] - VERBOSE: - osquery.man
2019-04-30 10:55:36,629 1668 [INFO ] - VERBOSE: - osqueryd.exe
2019-04-30 10:55:36,645 1668 [INFO ] - VERBOSE: - osqueryi.exe
2019-04-30 10:55:36,707 1668 [INFO ] - VERBOSE: - packs
2019-04-30 10:55:36,707 1668 [INFO ] - VERBOSE: - packs\hardware-monitoring.conf
2019-04-30 10:55:36,707 1668 [INFO ] - VERBOSE: - packs\incident-response.conf
2019-04-30 10:55:36,723 1668 [INFO ] - VERBOSE: - packs\it-compliance.conf
2019-04-30 10:55:36,723 1668 [INFO ] - VERBOSE: - packs\osquery-monitoring.conf
2019-04-30 10:55:36,723 1668 [INFO ] - VERBOSE: - packs\ossec-rootkit.conf
2019-04-30 10:55:36,723 1668 [INFO ] - VERBOSE: - packs\osx-attacks.conf
2019-04-30 10:55:36,739 1668 [INFO ] - VERBOSE: - packs\unwanted-chrome-extensions.conf
2019-04-30 10:55:36,739 1668 [INFO ] - VERBOSE: - packs\vuln-management.conf
2019-04-30 10:55:36,739 1668 [INFO ] - VERBOSE: - packs\windows-attacks.conf
2019-04-30 10:55:36,754 1668 [INFO ] - VERBOSE: - packs\windows-hardening.conf
2019-04-30 10:55:36,754 1668 [INFO ] - VERBOSE: - VERIFICATION.txt
2019-04-30 10:55:36,754 1668 [INFO ] - VERBOSE: Everything is Ok
2019-04-30 10:55:36,770 1668 [INFO ] - VERBOSE:
2019-04-30 10:55:36,770 1668 [INFO ] - VERBOSE: Folders: 2
2019-04-30 10:55:36,770 1668 [INFO ] - VERBOSE: Files: 18
2019-04-30 10:55:36,786 1668 [INFO ] - VERBOSE: Size:       25342745
2019-04-30 10:55:39,129 1668 [INFO ] - VERBOSE: Compressed: 9522146
2019-04-30 10:55:39,317 1668 [DEBUG] - $exitCode was passed null
2019-04-30 10:55:39,332 1668 [DEBUG] - Command ['C:\ProgramData\chocolatey\tools\7z.exe' x -aoa -bd -bb1 -o"C:\ProgramData\osquery" -y "C:\ProgramData\chocolatey\lib\osquery\tools\\bin\\osquery.zip"] exited with '0'.
2019-04-30 10:55:39,332 1668 [DEBUG] - 7z exit code: 0
2019-04-30 10:55:39,348 1668 [INFO ] - C:\ProgramData\osquery
2019-04-30 10:55:39,676 1668 [ERROR] - Attempted to perform an unauthorized operation.
2019-04-30 10:55:39,693 1668 [ERROR] - Access to the path 'C:\ProgramData\osquery\osqueryd' is denied.
2019-04-30 10:55:39,707 1668 [INFO ] - True
2019-04-30 10:55:42,864 1668 [DEBUG] - Built-in PowerShell host called with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = ''; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1' -installArguments '' -packageParameters '''] exited with '0'.
2019-04-30 10:55:42,879 1668 [WARN ] - Only an exit code of non-zero will fail the package by default. Set
 `--failonstderr` if you want error messages to also fail a script. See
 `choco -h` for details.
2019-04-30 10:55:42,896 1668 [DEBUG] - Calling command ['"C:\Windows\System32\shutdown.exe" /a']
2019-04-30 10:55:42,926 1668 [DEBUG] - Command ['"C:\Windows\System32\shutdown.exe" /a'] exited with '1116'
2019-04-30 10:55:42,989 1668 [WARN ] - Environment Vars (like PATH) have changed. Close/reopen your shell to
 see the changes (or in powershell/cmd.exe just type `refreshenv`).
2019-04-30 10:55:42,989 1668 [DEBUG] - The following values have been added/changed (may contain sensitive data):
2019-04-30 10:55:42,989 1668 [DEBUG] -   * Path='C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\Git\bin;C:\ProgramData\chocolatey\bin;C:\ProgramData\osquery' (Machine)
2019-04-30 10:55:43,207 1668 [DEBUG] - Capturing package files in 'C:\ProgramData\chocolatey\lib\osquery'
2019-04-30 10:55:43,332 1668 [DEBUG] -  Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg'
  with checksum 'EEA9FD683FF0F22630AACDA3365B3AD1'
2019-04-30 10:55:43,348 1668 [DEBUG] -  Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec'
  with checksum '6E661F76337EFC95773CD04A45477D7E'
2019-04-30 10:55:43,348 1668 [DEBUG] -  Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1'
  with checksum 'B65E565A0853CAA681D2DA2FA2639982'
2019-04-30 10:55:43,348 1668 [DEBUG] -  Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1'
  with checksum 'FE6F0A9BBED778BF0F3533F7616D16B2'
2019-04-30 10:55:43,348 1668 [DEBUG] -  Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1'
  with checksum '4D7ABD81FEBDB1BE4849F86D38174BA5'
2019-04-30 10:55:43,364 1668 [DEBUG] -  Found 'C:\ProgramData\chocolatey\lib\osquery\tools\LICENSE.txt'
  with checksum 'DD399CA08A28F2D449C22B56D76CC606'
2019-04-30 10:55:43,364 1668 [DEBUG] -  Found 'C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1'
  with checksum '5B79066DE95F16C1F0D0463F8EB14A4D'
2019-04-30 10:55:43,364 1668 [DEBUG] -  Found 'C:\ProgramData\chocolatey\lib\osquery\tools\VERIFICATION.txt'
  with checksum '2CD0E01D7F4FA91C2ED57BF13CAA27D2'
2019-04-30 10:55:43,535 1668 [DEBUG] -  Found 'C:\ProgramData\chocolatey\lib\osquery\tools\bin\osquery.zip'
  with checksum 'AD85346830126625EBA6CB536EA9C30F'
2019-04-30 10:55:43,676 1668 [DEBUG] - Adding 'Hidden' attribute(s) to 'C:\ProgramData\chocolatey\.chocolatey'.
2019-04-30 10:55:43,692 1668 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\.chocolatey\osquery.3.3.2".
2019-04-30 10:55:43,739 1668 [DEBUG] - There was no original file at 'C:\ProgramData\chocolatey\.chocolatey\osquery.3.3.2\.files'
2019-04-30 10:55:43,739 1668 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\.chocolatey\osquery.3.3.2\.extra".
2019-04-30 10:55:43,754 1668 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\.chocolatey\osquery.3.3.2\.version".
2019-04-30 10:55:43,754 1668 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\.chocolatey\osquery.3.3.2\.sxs".
2019-04-30 10:55:43,754 1668 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\.chocolatey\osquery.3.3.2\.pin".
2019-04-30 10:55:43,770 1668 [DEBUG] - Sending message 'HandlePackageResultCompletedMessage' out if there are subscribers...
2019-04-30 10:55:43,770 1668 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\.chocolateyPending".
2019-04-30 10:55:43,785 1668 [INFO ] -  The install of osquery was successful.
2019-04-30 10:55:43,801 1668 [INFO ] -   Software installed to 'C:\ProgramData\osquery'
2019-04-30 10:55:43,801 1668 [DEBUG] - Attempting to delete file "C:\Users\Administrator\AppData\Local\NuGet\Cache\osquery.3.3.2.nupkg".
2019-04-30 10:55:43,879 1668 [WARN ] -
Chocolatey installed 1/1 packages.
 See the log for details (C:\ProgramData\chocolatey\logs\chocolatey.log).
2019-04-30 10:55:43,895 1668 [DEBUG] - Sending message 'PostRunMessage' out if there are subscribers...
2019-04-30 10:55:43,957 1668 [DEBUG] - Exiting with 0

## Uninstall.txt
2019-04-30 10:56:16,020 2900 [DEBUG] - XmlConfiguration is now operational
2019-04-30 10:56:16,254 2900 [INFO ] - ============================================================
2019-04-30 10:56:17,067 2900 [INFO ] - Chocolatey v0.10.14-beta-7-gb30427d
2019-04-30 10:56:17,098 2900 [DEBUG] - Chocolatey is running on Windows v 6.3.9600.0
2019-04-30 10:56:17,114 2900 [DEBUG] - Attempting to delete file "C:/ProgramData/chocolatey/choco.exe.old".
2019-04-30 10:56:17,114 2900 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\choco.exe.old".
2019-04-30 10:56:17,145 2900 [DEBUG] - Command line: "C:\ProgramData\chocolatey\choco.exe" uninstall osquery --version 3.3.2 -dvy --execution-timeout=2700
2019-04-30 10:56:17,145 2900 [DEBUG] - Received arguments: uninstall osquery --version 3.3.2 -dvy --execution-timeout=2700
2019-04-30 10:56:17,332 2900 [DEBUG] - RemovePendingPackagesTask is now ready and waiting for PreRunMessage.
2019-04-30 10:56:17,348 2900 [DEBUG] - Sending message 'PreRunMessage' out if there are subscribers...
2019-04-30 10:56:17,379 2900 [DEBUG] - [Pending] Removing all pending packages that should not be considered installed...
2019-04-30 10:56:17,567 2900 [DEBUG] - Performing validation checks.
2019-04-30 10:56:17,582 2900 [DEBUG] - Global Configuration Validation Checks:
2019-04-30 10:56:17,598 2900 [DEBUG] -  - Package Exit Code / Exit On Reboot = Checked
2019-04-30 10:56:17,598 2900 [DEBUG] - System State Validation Checks:
2019-04-30 10:56:17,614 2900 [DEBUG] -  Reboot Requirement Checks:
2019-04-30 10:56:17,629 2900 [DEBUG] -  - Pending Computer Rename = Checked
2019-04-30 10:56:17,645 2900 [DEBUG] -  - Pending Component Based Servicing = Checked
2019-04-30 10:56:17,645 2900 [DEBUG] -  - Pending Windows Auto Update = Checked
2019-04-30 10:56:17,645 2900 [DEBUG] -  - Pending File Rename Operations = Checked
2019-04-30 10:56:17,660 2900 [DEBUG] -  - Pending Windows Package Installer = Checked
2019-04-30 10:56:17,660 2900 [DEBUG] -  - Pending Windows Package Installer SysWow64 = Checked
2019-04-30 10:56:17,677 2900 [INFO ] - 2 validations performed. 2 success(es), 0 warning(s), and 0 error(s).
2019-04-30 10:56:17,692 2900 [DEBUG] - The source 'https://chocolatey.org/api/v2/' evaluated to a 'normal' source type
2019-04-30 10:56:17,707 2900 [DEBUG] -
NOTE: Hiding sensitive configuration data! Please double and triple
 check to be sure no sensitive data is shown, especially if copying
 output to a gist for review.
2019-04-30 10:56:17,771 2900 [DEBUG] - Configuration: CommandName='uninstall'|
CacheLocation='C:\Users\Administrator\AppData\Local\Temp\chocolatey'|
ContainsLegacyPackageInstalls='True'|
CommandExecutionTimeoutSeconds='2700'|WebRequestTimeoutSeconds='30'|
Sources='https://chocolatey.org/api/v2/'|SourceType='normal'|
Debug='True'|Verbose='True'|Trace='False'|Force='False'|Noop='False'|
HelpRequested='False'|UnsuccessfulParsing='False'|RegularOutput='True'|
QuietOutput='False'|PromptForConfirmation='False'|AcceptLicense='True'|
AllowUnofficialBuild='False'|Input='osquery'|Version='3.3.2'|
AllVersions='False'|SkipPackageInstallProvider='False'|
PackageNames='osquery'|Prerelease='False'|ForceX86='False'|
OverrideArguments='False'|NotSilent='False'|
ApplyPackageParametersToDependencies='False'|
ApplyInstallArgumentsToDependencies='False'|IgnoreDependencies='False'|
AllowMultipleVersions='False'|AllowDowngrade='False'|
ForceDependencies='False'|Information.PlatformType='Windows'|
Information.PlatformVersion='6.3.9600.0'|
Information.PlatformName='Windows Server 2012 R2'|
Information.ChocolateyVersion='0.10.14.0'|
Information.ChocolateyProductVersion='0.10.14-beta-7-gb30427d'|
Information.FullName='choco, Version=0.10.14.0, Culture=neutral, PublicKeyToken=79d02ea9cad655eb'|

Information.Is64BitOperatingSystem='True'|
Information.Is64BitProcess='True'|Information.IsInteractive='True'|
Information.UserName='vagrant'|
Information.UserDomainName='WIN-E5K8TM30719'|
Information.IsUserAdministrator='True'|
Information.IsUserSystemAccount='False'|
Information.IsUserRemoteDesktop='False'|
Information.IsUserRemote='True'|
Information.IsProcessElevated='True'|
Information.IsLicensedVersion='False'|Information.LicenseType='Foss'|
Features.AutoUninstaller='True'|Features.ChecksumFiles='True'|
Features.AllowEmptyChecksums='False'|
Features.AllowEmptyChecksumsSecure='True'|
Features.FailOnAutoUninstaller='False'|
Features.FailOnStandardError='False'|Features.UsePowerShellHost='True'|
Features.LogEnvironmentValues='True'|Features.LogWithoutColor='False'|
Features.VirusCheck='False'|
Features.FailOnInvalidOrMissingLicense='False'|
Features.IgnoreInvalidOptionsSwitches='True'|
Features.UsePackageExitCodes='True'|
Features.UseEnhancedExitCodes='False'|
Features.UseFipsCompliantChecksums='False'|
Features.ShowNonElevatedWarnings='True'|
Features.ShowDownloadProgress='False'|
Features.StopOnFirstPackageFailure='False'|
Features.UseRememberedArgumentsForUpgrades='False'|
Features.IgnoreUnfoundPackagesOnUpgradeOutdated='False'|
Features.SkipPackageUpgradesWhenNotInstalled='False'|
Features.RemovePackageInformationOnUninstall='False'|
Features.ExitOnRebootDetected='False'|
Features.LogValidationResultsOnWarnings='True'|
Features.UsePackageRepositoryOptimizations='True'|
Features.ScriptsCheckLastExitCode='False'|
ListCommand.LocalOnly='False'|
ListCommand.IdOnly='False'|ListCommand.IncludeRegistryPrograms='False'|
ListCommand.PageSize='25'|ListCommand.Exact='False'|
ListCommand.ByIdOnly='False'|ListCommand.ByTagOnly='False'|
ListCommand.IdStartsWith='False'|ListCommand.OrderByPopularity='False'|
ListCommand.ApprovedOnly='False'|
ListCommand.DownloadCacheAvailable='False'|
ListCommand.NotBroken='False'|
ListCommand.IncludeVersionOverrides='False'|
UpgradeCommand.FailOnUnfound='False'|
UpgradeCommand.FailOnNotInstalled='False'|
UpgradeCommand.NotifyOnlyAvailableUpgrades='False'|
UpgradeCommand.ExcludePrerelease='False'|
NewCommand.AutomaticPackage='False'|
NewCommand.UseOriginalTemplate='False'|SourceCommand.Command='unknown'|
SourceCommand.Priority='0'|SourceCommand.BypassProxy='False'|
SourceCommand.AllowSelfService='False'|
SourceCommand.VisibleToAdminsOnly='False'|
FeatureCommand.Command='unknown'|ConfigCommand.Command='unknown'|
ApiKeyCommand.Remove='False'|PinCommand.Command='unknown'|
OutdatedCommand.IgnorePinned='False'|Proxy.BypassOnLocal='True'|
2019-04-30 10:56:17,771 2900 [DEBUG] - _ Chocolatey:ChocolateyUninstallCommand - Normal Run Mode _
2019-04-30 10:56:17,785 2900 [INFO ] - Uninstalling the following packages:
2019-04-30 10:56:17,801 2900 [INFO ] - osquery
2019-04-30 10:56:17,817 2900 [DEBUG] - Current environment values (may contain sensitive data):
2019-04-30 10:56:17,817 2900 [DEBUG] -   * 'TMP'='C:\Users\Administrator\AppData\Local\Temp' ('User')
2019-04-30 10:56:17,832 2900 [DEBUG] -   * 'TEMP'='C:\Users\Administrator\AppData\Local\Temp' ('User')
2019-04-30 10:56:17,832 2900 [DEBUG] -   * 'ChocolateyLastPathUpdate'='132010867882553109' ('User')
2019-04-30 10:56:17,832 2900 [DEBUG] -   * 'FP_NO_HOST_CHECK'='NO' ('Machine')
2019-04-30 10:56:17,832 2900 [DEBUG] -   * 'USERNAME'='SYSTEM' ('Machine')
2019-04-30 10:56:17,848 2900 [DEBUG] -   * 'Path'='C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\Git\bin;C:\ProgramData\chocolatey\bin;C:\ProgramData\osquery' ('Machine')
2019-04-30 10:56:17,848 2900 [DEBUG] -   * 'ComSpec'='C:\Windows\system32\cmd.exe' ('Machine')
2019-04-30 10:56:17,848 2900 [DEBUG] -   * 'TMP'='C:\Windows\TEMP' ('Machine')
2019-04-30 10:56:17,848 2900 [DEBUG] -   * 'OS'='Windows_NT' ('Machine')
2019-04-30 10:56:17,864 2900 [DEBUG] -   * 'windir'='C:\Windows' ('Machine')
2019-04-30 10:56:17,864 2900 [DEBUG] -   * 'PROCESSOR_ARCHITECTURE'='AMD64' ('Machine')
2019-04-30 10:56:17,864 2900 [DEBUG] -   * 'TEMP'='C:\Windows\TEMP' ('Machine')
2019-04-30 10:56:17,864 2900 [DEBUG] -   * 'PATHEXT'='.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC' ('Machine')
2019-04-30 10:56:17,864 2900 [DEBUG] -   * 'PSModulePath'='C:\Windows\system32\WindowsPowerShell\v1.0\Modules\' ('Machine')
2019-04-30 10:56:17,879 2900 [DEBUG] -   * 'NUMBER_OF_PROCESSORS'='4' ('Machine')
2019-04-30 10:56:17,879 2900 [DEBUG] -   * 'PROCESSOR_LEVEL'='6' ('Machine')
2019-04-30 10:56:17,879 2900 [DEBUG] -   * 'PROCESSOR_IDENTIFIER'='Intel64 Family 6 Model 45 Stepping 7, GenuineIntel' ('Machine')
2019-04-30 10:56:17,879 2900 [DEBUG] -   * 'PROCESSOR_REVISION'='2d07' ('Machine')
2019-04-30 10:56:17,895 2900 [DEBUG] -   * 'HOME'='C:\Users\Administrator' ('Machine')
2019-04-30 10:56:17,895 2900 [DEBUG] -   * 'ChocolateyInstall'='C:\ProgramData\chocolatey' ('Machine')
2019-04-30 10:56:18,145 2900 [DEBUG] - Running list with the following filter = ''
2019-04-30 10:56:18,145 2900 [DEBUG] - --- Start of List ---
2019-04-30 10:56:18,567 2900 [DEBUG] - osquery 3.3.2
2019-04-30 10:56:18,598 2900 [DEBUG] - --- End of List ---
2019-04-30 10:56:18,754 2900 [DEBUG] - Setting installer args for osquery
2019-04-30 10:56:18,770 2900 [DEBUG] - Setting package parameters for osquery
2019-04-30 10:56:18,770 2900 [DEBUG] - Contents of 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1':
2019-04-30 10:56:18,801 2900 [DEBUG] - #  Copyright (c) 2014-present, Facebook, Inc.
#  All rights reserved.
#
#  This source code is licensed under both the Apache 2.0 license (found in the
#  LICENSE file in the root directory of this source tree) and the GPLv2 (found
#  in the COPYING file in the root directory of this source tree).
#  You may select, at your option, one of the above-listed licenses.
. "$(Split-Path -Parent $MyInvocation.MyCommand.Definition)\\osquery_utils.ps1"

$serviceName = 'osqueryd'
$progData = [System.Environment]::GetEnvironmentVariable('ProgramData')
$targetFolder = Join-Path $progData "osquery"
$daemonFolder = Join-Path $targetFolder $serviceName
$extensionsFolder = Join-Path $targetFolder 'extensions'

# Ensure the service is stopped and processes are not running if exists.
if ((Get-Service $serviceName -ErrorAction SilentlyContinue) -and `
  (Get-Service $serviceName).Status -eq 'Running') {
  Stop-Service $serviceName
  # If we find zombie processes, ensure they're termintated
  $proc = Get-Process | Where-Object { $_.ProcessName -eq 'osqueryd' }
  if ($proc -ne $null) {
    Stop-Process -Force $proc -ErrorAction SilentlyContinue
  }
}

# Lastly, ensure that the Deny Write ACLs have been removed before modifying
if (Test-Path $daemonFolder) {
  Set-DenyWriteAcl $daemonFolder 'Remove'
}
if (Test-Path $extensionsFolder) {
  Set-DenyWriteAcl $extensionsFolder 'Remove'
}

2019-04-30 10:56:18,864 2900 [DEBUG] - Calling built-in PowerShell host with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = ''; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1' -installArguments '' -packageParameters ''']
2019-04-30 10:56:18,879 2900 [DEBUG] - Redirecting System.Management.Automation.resources, Version=3.0.0.0, Culture=en-US, PublicKeyToken=31bf3856ad364e35, requested by ''
2019-04-30 10:56:19,520 2900 [DEBUG] - Host version is 4.0, PowerShell Version is '4.0' and CLR Version is '4.0.30319.33440'.
2019-04-30 10:56:19,910 2900 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2019-04-30 10:56:19,910 2900 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2019-04-30 10:56:19,910 2900 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2019-04-30 10:56:19,926 2900 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2019-04-30 10:56:19,926 2900 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2019-04-30 10:56:19,926 2900 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2019-04-30 10:56:19,942 2900 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2019-04-30 10:56:19,942 2900 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2019-04-30 10:56:19,942 2900 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2019-04-30 10:56:19,957 2900 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2019-04-30 10:56:19,957 2900 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2019-04-30 10:56:19,957 2900 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2019-04-30 10:56:19,957 2900 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2019-04-30 10:56:19,973 2900 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2019-04-30 10:56:19,973 2900 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2019-04-30 10:56:19,973 2900 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2019-04-30 10:56:19,973 2900 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2019-04-30 10:56:19,989 2900 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2019-04-30 10:56:19,989 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyDesktopLink'.
2019-04-30 10:56:19,989 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2019-04-30 10:56:19,989 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2019-04-30 10:56:20,004 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2019-04-30 10:56:20,004 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2019-04-30 10:56:20,004 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2019-04-30 10:56:20,004 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2019-04-30 10:56:20,020 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2019-04-30 10:56:20,020 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2019-04-30 10:56:20,020 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2019-04-30 10:56:20,035 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2019-04-30 10:56:20,035 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2019-04-30 10:56:20,035 2900 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2019-04-30 10:56:20,035 2900 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2019-04-30 10:56:20,051 2900 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2019-04-30 10:56:20,051 2900 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2019-04-30 10:56:20,051 2900 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2019-04-30 10:56:20,051 2900 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2019-04-30 10:56:20,067 2900 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2019-04-30 10:56:20,067 2900 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2019-04-30 10:56:20,067 2900 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2019-04-30 10:56:20,082 2900 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2019-04-30 10:56:20,082 2900 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateyFailure'.
2019-04-30 10:56:20,082 2900 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateySuccess'.
2019-04-30 10:56:20,082 2900 [INFO ] - VERBOSE: Exporting function 'Write-FileUpdateLog'.
2019-04-30 10:56:20,098 2900 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2019-04-30 10:56:20,098 2900 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2019-04-30 10:56:20,098 2900 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2019-04-30 10:56:20,114 2900 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2019-04-30 10:56:20,114 2900 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2019-04-30 10:56:20,114 2900 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2019-04-30 10:56:20,114 2900 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2019-04-30 10:56:20,129 2900 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2019-04-30 10:56:20,129 2900 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2019-04-30 10:56:20,129 2900 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2019-04-30 10:56:20,176 2900 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2019-04-30 10:56:20,176 2900 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2019-04-30 10:56:20,176 2900 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2019-04-30 10:56:20,176 2900 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2019-04-30 10:56:20,192 2900 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2019-04-30 10:56:20,192 2900 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2019-04-30 10:56:20,192 2900 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2019-04-30 10:56:20,207 2900 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2019-04-30 10:56:20,207 2900 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2019-04-30 10:56:20,207 2900 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2019-04-30 10:56:20,207 2900 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2019-04-30 10:56:20,223 2900 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2019-04-30 10:56:20,223 2900 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2019-04-30 10:56:20,223 2900 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2019-04-30 10:56:20,239 2900 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2019-04-30 10:56:20,239 2900 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2019-04-30 10:56:20,239 2900 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2019-04-30 10:56:20,239 2900 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2019-04-30 10:56:20,254 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyDesktopLink'.
2019-04-30 10:56:20,254 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2019-04-30 10:56:20,254 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2019-04-30 10:56:20,270 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2019-04-30 10:56:20,270 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2019-04-30 10:56:20,270 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2019-04-30 10:56:20,270 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2019-04-30 10:56:20,285 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2019-04-30 10:56:20,285 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2019-04-30 10:56:20,285 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2019-04-30 10:56:20,301 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2019-04-30 10:56:20,301 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2019-04-30 10:56:20,301 2900 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2019-04-30 10:56:20,301 2900 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2019-04-30 10:56:20,317 2900 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2019-04-30 10:56:20,317 2900 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2019-04-30 10:56:20,317 2900 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2019-04-30 10:56:20,332 2900 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2019-04-30 10:56:20,332 2900 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2019-04-30 10:56:20,332 2900 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2019-04-30 10:56:20,332 2900 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2019-04-30 10:56:20,348 2900 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2019-04-30 10:56:20,348 2900 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateyFailure'.
2019-04-30 10:56:20,348 2900 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateySuccess'.
2019-04-30 10:56:20,348 2900 [INFO ] - VERBOSE: Exporting function 'Write-FileUpdateLog'.
2019-04-30 10:56:20,364 2900 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2019-04-30 10:56:20,364 2900 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2019-04-30 10:56:20,364 2900 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2019-04-30 10:56:20,379 2900 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2019-04-30 10:56:20,379 2900 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2019-04-30 10:56:20,379 2900 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2019-04-30 10:56:20,379 2900 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2019-04-30 10:56:20,395 2900 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2019-04-30 10:56:20,395 2900 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2019-04-30 10:56:20,395 2900 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2019-04-30 10:56:20,410 2900 [INFO ] - VERBOSE: Importing function 'Format-FileSize'.
2019-04-30 10:56:20,410 2900 [INFO ] - VERBOSE: Importing function 'Get-ChecksumValid'.
2019-04-30 10:56:20,410 2900 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyUnzip'.
2019-04-30 10:56:20,410 2900 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyWebFile'.
2019-04-30 10:56:20,426 2900 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariable'.
2019-04-30 10:56:20,426 2900 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariableNames'.
2019-04-30 10:56:20,426 2900 [INFO ] - VERBOSE: Importing function 'Get-FtpFile'.
2019-04-30 10:56:20,426 2900 [INFO ] - VERBOSE: Importing function 'Get-OSArchitectureWidth'.
2019-04-30 10:56:20,442 2900 [INFO ] - VERBOSE: Importing function 'Get-PackageParameters'.
2019-04-30 10:56:20,442 2900 [INFO ] - VERBOSE: Importing function 'Get-PackageParametersBuiltIn'.
2019-04-30 10:56:20,442 2900 [INFO ] - VERBOSE: Importing function 'Get-ToolsLocation'.
2019-04-30 10:56:20,457 2900 [INFO ] - VERBOSE: Importing function 'Get-UACEnabled'.
2019-04-30 10:56:20,457 2900 [INFO ] - VERBOSE: Importing function 'Get-UninstallRegistryKey'.
2019-04-30 10:56:20,457 2900 [INFO ] - VERBOSE: Importing function 'Get-VirusCheckValid'.
2019-04-30 10:56:20,457 2900 [INFO ] - VERBOSE: Importing function 'Get-WebFile'.
2019-04-30 10:56:20,473 2900 [INFO ] - VERBOSE: Importing function 'Get-WebFileName'.
2019-04-30 10:56:20,473 2900 [INFO ] - VERBOSE: Importing function 'Get-WebHeaders'.
2019-04-30 10:56:20,473 2900 [INFO ] - VERBOSE: Importing function 'Install-BinFile'.
2019-04-30 10:56:20,473 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyDesktopLink'.
2019-04-30 10:56:20,488 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyEnvironmentVariable'.
2019-04-30 10:56:20,488 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyExplorerMenuItem'.
2019-04-30 10:56:20,488 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyFileAssociation'.
2019-04-30 10:56:20,488 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyInstallPackage'.
2019-04-30 10:56:20,504 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPackage'.
2019-04-30 10:56:20,504 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPath'.
2019-04-30 10:56:20,504 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPinnedTaskBarItem'.
2019-04-30 10:56:20,520 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPowershellCommand'.
2019-04-30 10:56:20,520 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyShortcut'.
2019-04-30 10:56:20,520 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyVsixPackage'.
2019-04-30 10:56:20,520 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyZipPackage'.
2019-04-30 10:56:20,535 2900 [INFO ] - VERBOSE: Importing function 'Install-Vsix'.
2019-04-30 10:56:20,535 2900 [INFO ] - VERBOSE: Importing function 'Set-EnvironmentVariable'.
2019-04-30 10:56:20,535 2900 [INFO ] - VERBOSE: Importing function 'Set-PowerShellExitCode'.
2019-04-30 10:56:20,535 2900 [INFO ] - VERBOSE: Importing function 'Start-ChocolateyProcessAsAdmin'.
2019-04-30 10:56:20,551 2900 [INFO ] - VERBOSE: Importing function 'Test-ProcessAdminRights'.
2019-04-30 10:56:20,551 2900 [INFO ] - VERBOSE: Importing function 'Uninstall-BinFile'.
2019-04-30 10:56:20,551 2900 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyEnvironmentVariable'.
2019-04-30 10:56:20,567 2900 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyPackage'.
2019-04-30 10:56:20,567 2900 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyZipPackage'.
2019-04-30 10:56:20,567 2900 [INFO ] - VERBOSE: Importing function 'Update-SessionEnvironment'.
2019-04-30 10:56:20,567 2900 [INFO ] - VERBOSE: Importing function 'Write-ChocolateyFailure'.
2019-04-30 10:56:20,582 2900 [INFO ] - VERBOSE: Importing function 'Write-ChocolateySuccess'.
2019-04-30 10:56:20,582 2900 [INFO ] - VERBOSE: Importing function 'Write-FileUpdateLog'.
2019-04-30 10:56:20,582 2900 [INFO ] - VERBOSE: Importing function 'Write-FunctionCallLogMessage'.
2019-04-30 10:56:20,582 2900 [INFO ] - VERBOSE: Importing alias 'Add-BinFile'.
2019-04-30 10:56:20,598 2900 [INFO ] - VERBOSE: Importing alias 'Generate-BinFile'.
2019-04-30 10:56:20,598 2900 [INFO ] - VERBOSE: Importing alias 'Get-InstallRegistryKey'.
2019-04-30 10:56:20,598 2900 [INFO ] - VERBOSE: Importing alias 'Get-OSBitness'.
2019-04-30 10:56:20,614 2900 [INFO ] - VERBOSE: Importing alias 'Get-ProcessorBits'.
2019-04-30 10:56:20,614 2900 [INFO ] - VERBOSE: Importing alias 'Invoke-ChocolateyProcess'.
2019-04-30 10:56:20,614 2900 [INFO ] - VERBOSE: Importing alias 'refreshenv'.
2019-04-30 10:56:20,614 2900 [INFO ] - VERBOSE: Importing alias 'Remove-BinFile'.
2019-04-30 10:56:20,629 2900 [INFO ] - VERBOSE: Importing alias 'Start-ChocolateyProcess'.
2019-04-30 10:56:20,754 2900 [DEBUG] - Running 'ChocolateyScriptRunner' for osquery v3.3.2 with packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1', packageFolder:'C:\ProgramData\chocolatey\lib\osquery', installArguments: '', packageParameters: '',
2019-04-30 10:56:20,801 2900 [DEBUG] - Running 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1'
2019-04-30 10:56:21,035 2900 [INFO ] - True
2019-04-30 10:56:21,051 2900 [ERROR] - Attempted to perform an unauthorized operation.
2019-04-30 10:56:21,051 2900 [INFO ] - True
2019-04-30 10:56:21,098 2900 [DEBUG] - Built-in PowerShell host called with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = ''; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1' -installArguments '' -packageParameters '''] exited with '0'.
2019-04-30 10:56:21,114 2900 [WARN ] - Only an exit code of non-zero will fail the package by default. Set
 `--failonstderr` if you want error messages to also fail a script. See
 `choco -h` for details.
2019-04-30 10:56:21,332 2900 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib-bkp".
2019-04-30 10:56:21,332 2900 [DEBUG] - Backing up existing osquery prior to operation.
2019-04-30 10:56:21,348 2900 [DEBUG] - Moving 'C:\ProgramData\chocolatey\lib\osquery'
 to 'C:\ProgramData\chocolatey\lib-bkp\osquery'
2019-04-30 10:56:23,410 2900 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib\osquery".
2019-04-30 10:56:23,410 2900 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\osquery.nupkg"
 to "C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg".
2019-04-30 10:56:23,442 2900 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\osquery.nuspec"
 to "C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec".
2019-04-30 10:56:23,442 2900 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib\osquery\tools".
2019-04-30 10:56:23,442 2900 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\tools\chocolateyBeforeModify.ps1"
 to "C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1".
2019-04-30 10:56:23,457 2900 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\tools\chocolateyinstall.ps1"
 to "C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1".
2019-04-30 10:56:23,457 2900 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\tools\chocolateyuninstall.ps1"
 to "C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1".
2019-04-30 10:56:23,457 2900 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\tools\LICENSE.txt"
 to "C:\ProgramData\chocolatey\lib\osquery\tools\LICENSE.txt".
2019-04-30 10:56:23,473 2900 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\tools\osquery_utils.ps1"
 to "C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1".
2019-04-30 10:56:23,473 2900 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\tools\VERIFICATION.txt"
 to "C:\ProgramData\chocolatey\lib\osquery\tools\VERIFICATION.txt".
2019-04-30 10:56:23,473 2900 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib\osquery\tools\bin".
2019-04-30 10:56:23,473 2900 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\tools\bin\osquery.zip"
 to "C:\ProgramData\chocolatey\lib\osquery\tools\bin\osquery.zip".
2019-04-30 10:56:25,035 2900 [DEBUG] - Capturing package files in 'C:\ProgramData\chocolatey\lib\osquery'
2019-04-30 10:56:25,411 2900 [DEBUG] -  Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg'
  with checksum 'EEA9FD683FF0F22630AACDA3365B3AD1'
2019-04-30 10:56:25,411 2900 [DEBUG] -  Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec'
  with checksum '6E661F76337EFC95773CD04A45477D7E'
2019-04-30 10:56:25,426 2900 [DEBUG] -  Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1'
  with checksum 'B65E565A0853CAA681D2DA2FA2639982'
2019-04-30 10:56:25,426 2900 [DEBUG] -  Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1'
  with checksum 'FE6F0A9BBED778BF0F3533F7616D16B2'
2019-04-30 10:56:25,426 2900 [DEBUG] -  Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1'
  with checksum '4D7ABD81FEBDB1BE4849F86D38174BA5'
2019-04-30 10:56:25,442 2900 [DEBUG] -  Found 'C:\ProgramData\chocolatey\lib\osquery\tools\LICENSE.txt'
  with checksum 'DD399CA08A28F2D449C22B56D76CC606'
2019-04-30 10:56:25,442 2900 [DEBUG] -  Found 'C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1'
  with checksum '5B79066DE95F16C1F0D0463F8EB14A4D'
2019-04-30 10:56:25,442 2900 [DEBUG] -  Found 'C:\ProgramData\chocolatey\lib\osquery\tools\VERIFICATION.txt'
  with checksum '2CD0E01D7F4FA91C2ED57BF13CAA27D2'
2019-04-30 10:56:25,926 2900 [DEBUG] -  Found 'C:\ProgramData\chocolatey\lib\osquery\tools\bin\osquery.zip'
  with checksum 'AD85346830126625EBA6CB536EA9C30F'
2019-04-30 10:56:26,817 2900 [INFO ] - [NuGet] Uninstalling 'osquery 3.3.2'.
2019-04-30 10:56:26,832 2900 [INFO ] -
osquery v3.3.2
2019-04-30 10:56:26,879 2900 [DEBUG] - Setting installer args for osquery
2019-04-30 10:56:26,895 2900 [DEBUG] - Setting package parameters for osquery
2019-04-30 10:56:26,895 2900 [DEBUG] - Contents of 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1':
2019-04-30 10:56:26,895 2900 [DEBUG] - #  Copyright (c) 2014-present, Facebook, Inc.
#  All rights reserved.
#
#  This source code is licensed under both the Apache 2.0 license (found in the
#  LICENSE file in the root directory of this source tree) and the GPLv2 (found
#  in the COPYING file in the root directory of this source tree).
#  You may select, at your option, one of the above-listed licenses.
$progData = [System.Environment]::GetEnvironmentVariable('ProgramData')
$targetFolder = Join-Path $progData "osquery"
$serviceName = 'osqueryd'

# Remove the osquery path from the System PATH variable. Note: Here
# we don't make use of our local vars, as Regex requires escaping the '\'
$oldPath = [System.Environment]::GetEnvironmentVariable('Path', 'Machine')
if ($oldPath -imatch [regex]::escape($targetFolder)) {
  $newPath = $oldPath -replace [regex]::escape($targetFolder), $NULL
  [System.Environment]::SetEnvironmentVariable('Path', $newPath, 'Machine')
}

if ((Get-Service $serviceName -ErrorAction SilentlyContinue)) {
  Stop-Service $serviceName

  # If we find zombie processes, ensure they're termintated
  $proc = Get-Process | Where-Object { $_.ProcessName -eq 'osqueryd' }
  if ($proc -ne $null) {
    Stop-Process -Force $proc -ErrorAction SilentlyContinue
  }

  Set-Service $serviceName -startuptype 'manual'
  Get-CimInstance -ClassName Win32_Service -Filter "Name='osqueryd'" | Invoke-CimMethod -methodName Delete
}

if (Test-Path $targetFolder) {
  Remove-Item -Force -Recurse $targetFolder
} else {
  Write-Debug 'osquery was not found on the system. Nothing to do.'
}

2019-04-30 10:56:26,910 2900 [DEBUG] - Calling built-in PowerShell host with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = ''; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1' -installArguments '' -packageParameters ''']
2019-04-30 10:56:26,910 2900 [DEBUG] - Redirecting Microsoft.PowerShell.Security, requested by ''
2019-04-30 10:56:26,942 2900 [DEBUG] - Attempting to load assembly Microsoft.PowerShell.Security failed:
 Could not load file or assembly 'Microsoft.PowerShell.Security, Version=5.0.0.0' or one of its dependencies. The system cannot find the file specified.
2019-04-30 10:56:26,957 2900 [DEBUG] - Attempting to load assembly Microsoft.PowerShell.Security failed:
 Could not load file or assembly 'Microsoft.PowerShell.Security, Version=4.0.0.0' or one of its dependencies. The system cannot find the file specified.
2019-04-30 10:56:26,957 2900 [DEBUG] - Attempting to load assembly Microsoft.PowerShell.Security failed:
 Could not load file or assembly 'Microsoft.PowerShell.Security, Version=3.0.0.0' or one of its dependencies. The system cannot find the file specified.
2019-04-30 10:56:26,957 2900 [DEBUG] - Attempting to load assembly Microsoft.PowerShell.Security failed:
 Could not load file or assembly 'Microsoft.PowerShell.Security, Version=1.0.0.0' or one of its dependencies. The system cannot find the file specified.
2019-04-30 10:56:27,285 2900 [DEBUG] - Host version is 4.0, PowerShell Version is '4.0' and CLR Version is '4.0.30319.33440'.
2019-04-30 10:56:27,410 2900 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2019-04-30 10:56:27,426 2900 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2019-04-30 10:56:27,426 2900 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2019-04-30 10:56:27,426 2900 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2019-04-30 10:56:27,426 2900 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2019-04-30 10:56:27,442 2900 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2019-04-30 10:56:27,442 2900 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2019-04-30 10:56:27,442 2900 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2019-04-30 10:56:27,457 2900 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2019-04-30 10:56:27,457 2900 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2019-04-30 10:56:27,457 2900 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2019-04-30 10:56:27,457 2900 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2019-04-30 10:56:27,473 2900 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2019-04-30 10:56:27,473 2900 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2019-04-30 10:56:27,473 2900 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2019-04-30 10:56:27,473 2900 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2019-04-30 10:56:27,489 2900 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2019-04-30 10:56:27,489 2900 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2019-04-30 10:56:27,489 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyDesktopLink'.
2019-04-30 10:56:27,489 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2019-04-30 10:56:27,504 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2019-04-30 10:56:27,504 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2019-04-30 10:56:27,504 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2019-04-30 10:56:27,520 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2019-04-30 10:56:27,535 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2019-04-30 10:56:27,551 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2019-04-30 10:56:27,551 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2019-04-30 10:56:27,567 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2019-04-30 10:56:27,567 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2019-04-30 10:56:27,582 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2019-04-30 10:56:27,582 2900 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2019-04-30 10:56:27,582 2900 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2019-04-30 10:56:27,582 2900 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2019-04-30 10:56:27,598 2900 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2019-04-30 10:56:27,598 2900 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2019-04-30 10:56:27,598 2900 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2019-04-30 10:56:27,598 2900 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2019-04-30 10:56:27,613 2900 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2019-04-30 10:56:27,613 2900 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2019-04-30 10:56:27,613 2900 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2019-04-30 10:56:27,629 2900 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateyFailure'.
2019-04-30 10:56:27,629 2900 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateySuccess'.
2019-04-30 10:56:27,629 2900 [INFO ] - VERBOSE: Exporting function 'Write-FileUpdateLog'.
2019-04-30 10:56:27,629 2900 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2019-04-30 10:56:27,645 2900 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2019-04-30 10:56:27,645 2900 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2019-04-30 10:56:27,645 2900 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2019-04-30 10:56:27,660 2900 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2019-04-30 10:56:27,660 2900 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2019-04-30 10:56:27,660 2900 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2019-04-30 10:56:27,660 2900 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2019-04-30 10:56:27,676 2900 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2019-04-30 10:56:27,676 2900 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2019-04-30 10:56:27,676 2900 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2019-04-30 10:56:27,692 2900 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2019-04-30 10:56:27,692 2900 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2019-04-30 10:56:27,692 2900 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2019-04-30 10:56:27,692 2900 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2019-04-30 10:56:27,707 2900 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2019-04-30 10:56:27,707 2900 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2019-04-30 10:56:27,707 2900 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2019-04-30 10:56:27,723 2900 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2019-04-30 10:56:27,723 2900 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2019-04-30 10:56:27,723 2900 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2019-04-30 10:56:27,723 2900 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2019-04-30 10:56:27,739 2900 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2019-04-30 10:56:27,739 2900 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2019-04-30 10:56:27,739 2900 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2019-04-30 10:56:27,754 2900 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2019-04-30 10:56:27,754 2900 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2019-04-30 10:56:27,754 2900 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2019-04-30 10:56:27,754 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyDesktopLink'.
2019-04-30 10:56:27,770 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2019-04-30 10:56:27,770 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2019-04-30 10:56:27,770 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2019-04-30 10:56:27,785 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2019-04-30 10:56:27,785 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2019-04-30 10:56:27,785 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2019-04-30 10:56:27,785 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2019-04-30 10:56:27,801 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2019-04-30 10:56:27,801 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2019-04-30 10:56:27,801 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2019-04-30 10:56:27,817 2900 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2019-04-30 10:56:27,817 2900 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2019-04-30 10:56:27,817 2900 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2019-04-30 10:56:27,817 2900 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2019-04-30 10:56:27,832 2900 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2019-04-30 10:56:27,832 2900 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2019-04-30 10:56:27,832 2900 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2019-04-30 10:56:27,848 2900 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2019-04-30 10:56:27,848 2900 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2019-04-30 10:56:27,848 2900 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2019-04-30 10:56:27,848 2900 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2019-04-30 10:56:27,864 2900 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateyFailure'.
2019-04-30 10:56:27,864 2900 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateySuccess'.
2019-04-30 10:56:27,864 2900 [INFO ] - VERBOSE: Exporting function 'Write-FileUpdateLog'.
2019-04-30 10:56:27,864 2900 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2019-04-30 10:56:27,879 2900 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2019-04-30 10:56:27,879 2900 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2019-04-30 10:56:27,879 2900 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2019-04-30 10:56:27,895 2900 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2019-04-30 10:56:27,895 2900 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2019-04-30 10:56:27,895 2900 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2019-04-30 10:56:27,910 2900 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2019-04-30 10:56:27,910 2900 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2019-04-30 10:56:27,910 2900 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2019-04-30 10:56:27,910 2900 [INFO ] - VERBOSE: Importing function 'Format-FileSize'.
2019-04-30 10:56:27,926 2900 [INFO ] - VERBOSE: Importing function 'Get-ChecksumValid'.
2019-04-30 10:56:27,926 2900 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyUnzip'.
2019-04-30 10:56:27,926 2900 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyWebFile'.
2019-04-30 10:56:27,942 2900 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariable'.
2019-04-30 10:56:27,942 2900 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariableNames'.
2019-04-30 10:56:27,942 2900 [INFO ] - VERBOSE: Importing function 'Get-FtpFile'.
2019-04-30 10:56:27,957 2900 [INFO ] - VERBOSE: Importing function 'Get-OSArchitectureWidth'.
2019-04-30 10:56:27,957 2900 [INFO ] - VERBOSE: Importing function 'Get-PackageParameters'.
2019-04-30 10:56:27,957 2900 [INFO ] - VERBOSE: Importing function 'Get-PackageParametersBuiltIn'.
2019-04-30 10:56:27,957 2900 [INFO ] - VERBOSE: Importing function 'Get-ToolsLocation'.
2019-04-30 10:56:27,973 2900 [INFO ] - VERBOSE: Importing function 'Get-UACEnabled'.
2019-04-30 10:56:27,973 2900 [INFO ] - VERBOSE: Importing function 'Get-UninstallRegistryKey'.
2019-04-30 10:56:27,973 2900 [INFO ] - VERBOSE: Importing function 'Get-VirusCheckValid'.
2019-04-30 10:56:27,988 2900 [INFO ] - VERBOSE: Importing function 'Get-WebFile'.
2019-04-30 10:56:27,988 2900 [INFO ] - VERBOSE: Importing function 'Get-WebFileName'.
2019-04-30 10:56:27,988 2900 [INFO ] - VERBOSE: Importing function 'Get-WebHeaders'.
2019-04-30 10:56:27,988 2900 [INFO ] - VERBOSE: Importing function 'Install-BinFile'.
2019-04-30 10:56:28,004 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyDesktopLink'.
2019-04-30 10:56:28,004 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyEnvironmentVariable'.
2019-04-30 10:56:28,004 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyExplorerMenuItem'.
2019-04-30 10:56:28,020 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyFileAssociation'.
2019-04-30 10:56:28,020 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyInstallPackage'.
2019-04-30 10:56:28,020 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPackage'.
2019-04-30 10:56:28,035 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPath'.
2019-04-30 10:56:28,035 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPinnedTaskBarItem'.
2019-04-30 10:56:28,035 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPowershellCommand'.
2019-04-30 10:56:28,051 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyShortcut'.
2019-04-30 10:56:28,051 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyVsixPackage'.
2019-04-30 10:56:28,051 2900 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyZipPackage'.
2019-04-30 10:56:28,067 2900 [INFO ] - VERBOSE: Importing function 'Install-Vsix'.
2019-04-30 10:56:28,067 2900 [INFO ] - VERBOSE: Importing function 'Set-EnvironmentVariable'.
2019-04-30 10:56:28,067 2900 [INFO ] - VERBOSE: Importing function 'Set-PowerShellExitCode'.
2019-04-30 10:56:28,082 2900 [INFO ] - VERBOSE: Importing function 'Start-ChocolateyProcessAsAdmin'.
2019-04-30 10:56:28,082 2900 [INFO ] - VERBOSE: Importing function 'Test-ProcessAdminRights'.
2019-04-30 10:56:28,082 2900 [INFO ] - VERBOSE: Importing function 'Uninstall-BinFile'.
2019-04-30 10:56:28,082 2900 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyEnvironmentVariable'.
2019-04-30 10:56:28,098 2900 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyPackage'.
2019-04-30 10:56:28,098 2900 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyZipPackage'.
2019-04-30 10:56:28,098 2900 [INFO ] - VERBOSE: Importing function 'Update-SessionEnvironment'.
2019-04-30 10:56:28,114 2900 [INFO ] - VERBOSE: Importing function 'Write-ChocolateyFailure'.
2019-04-30 10:56:28,114 2900 [INFO ] - VERBOSE: Importing function 'Write-ChocolateySuccess'.
2019-04-30 10:56:28,114 2900 [INFO ] - VERBOSE: Importing function 'Write-FileUpdateLog'.
2019-04-30 10:56:28,129 2900 [INFO ] - VERBOSE: Importing function 'Write-FunctionCallLogMessage'.
2019-04-30 10:56:28,129 2900 [INFO ] - VERBOSE: Importing alias 'Add-BinFile'.
2019-04-30 10:56:28,129 2900 [INFO ] - VERBOSE: Importing alias 'Generate-BinFile'.
2019-04-30 10:56:28,129 2900 [INFO ] - VERBOSE: Importing alias 'Get-InstallRegistryKey'.
2019-04-30 10:56:28,145 2900 [INFO ] - VERBOSE: Importing alias 'Get-OSBitness'.
2019-04-30 10:56:28,145 2900 [INFO ] - VERBOSE: Importing alias 'Get-ProcessorBits'.
2019-04-30 10:56:28,145 2900 [INFO ] - VERBOSE: Importing alias 'Invoke-ChocolateyProcess'.
2019-04-30 10:56:28,160 2900 [INFO ] - VERBOSE: Importing alias 'refreshenv'.
2019-04-30 10:56:28,160 2900 [INFO ] - VERBOSE: Importing alias 'Remove-BinFile'.
2019-04-30 10:56:28,160 2900 [INFO ] - VERBOSE: Importing alias 'Start-ChocolateyProcess'.
2019-04-30 10:56:28,176 2900 [DEBUG] - Running 'ChocolateyScriptRunner' for osquery v3.3.2 with packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1', packageFolder:'C:\ProgramData\chocolatey\lib\osquery', installArguments: '', packageParameters: '',
2019-04-30 10:56:28,192 2900 [DEBUG] - Running 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1'
2019-04-30 10:56:31,332 2900 [ERROR] - Access to the path 'C:\ProgramData\osquery\osqueryd' is denied.
2019-04-30 10:56:31,348 2900 [DEBUG] - Built-in PowerShell host called with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = ''; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1' -installArguments '' -packageParameters '''] exited with '0'.
2019-04-30 10:56:31,348 2900 [WARN ] - Only an exit code of non-zero will fail the package by default. Set
 `--failonstderr` if you want error messages to also fail a script. See
 `choco -h` for details.
2019-04-30 10:56:31,379 2900 [INFO ] -  Skipping auto uninstaller - No registry snapshot.
2019-04-30 10:56:31,395 2900 [DEBUG] - Calling command ['"C:\Windows\System32\shutdown.exe" /a']
2019-04-30 10:56:31,442 2900 [DEBUG] - Command ['"C:\Windows\System32\shutdown.exe" /a'] exited with '1116'
2019-04-30 10:56:31,473 2900 [DEBUG] - Attempting to delete directory "C:\ProgramData\chocolatey\lib-bkp\osquery".
2019-04-30 10:56:31,598 2900 [DEBUG] - [NuGet] Removed file 'osquery.zip' to folder 'C:\ProgramData\chocolatey\lib\osquery\tools\bin'.
2019-04-30 10:56:31,614 2900 [DEBUG] - [NuGet] Removed folder 'C:\ProgramData\chocolatey\lib\osquery\tools\bin'.
2019-04-30 10:56:31,614 2900 [DEBUG] - [NuGet] Removed file 'chocolateyBeforeModify.ps1' to folder 'C:\ProgramData\chocolatey\lib\osquery\tools'.
2019-04-30 10:56:31,629 2900 [DEBUG] - [NuGet] Removed file 'chocolateyinstall.ps1' to folder 'C:\ProgramData\chocolatey\lib\osquery\tools'.
2019-04-30 10:56:31,629 2900 [DEBUG] - [NuGet] Removed file 'chocolateyuninstall.ps1' to folder 'C:\ProgramData\chocolatey\lib\osquery\tools'.
2019-04-30 10:56:31,629 2900 [DEBUG] - [NuGet] Removed file 'LICENSE.txt' to folder 'C:\ProgramData\chocolatey\lib\osquery\tools'.
2019-04-30 10:56:31,645 2900 [DEBUG] - [NuGet] Removed file 'osquery_utils.ps1' to folder 'C:\ProgramData\chocolatey\lib\osquery\tools'.
2019-04-30 10:56:31,660 2900 [DEBUG] - [NuGet] Removed file 'VERIFICATION.txt' to folder 'C:\ProgramData\chocolatey\lib\osquery\tools'.
2019-04-30 10:56:31,660 2900 [DEBUG] - [NuGet] Removed folder 'C:\ProgramData\chocolatey\lib\osquery\tools'.
2019-04-30 10:56:31,660 2900 [DEBUG] - [NuGet] Removed file 'osquery.nuspec' to folder 'C:\ProgramData\chocolatey\lib\osquery'.
2019-04-30 10:56:31,676 2900 [DEBUG] - [NuGet] Removed file 'osquery.nupkg' to folder 'C:\ProgramData\chocolatey\lib\osquery'.
2019-04-30 10:56:31,676 2900 [DEBUG] - [NuGet] Removed folder 'C:\ProgramData\chocolatey\lib\osquery'.
2019-04-30 10:56:31,676 2900 [INFO ] - [NuGet] Successfully uninstalled 'osquery 3.3.2'.
2019-04-30 10:56:31,707 2900 [INFO ] -  osquery has been successfully uninstalled.
2019-04-30 10:56:31,707 2900 [DEBUG] - Removing nupkg if it still exists.
2019-04-30 10:56:31,723 2900 [DEBUG] - Ensuring removal of installation files.
2019-04-30 10:56:31,739 2900 [DEBUG] - Ensuring removal of package cache files.
2019-04-30 10:56:31,770 2900 [WARN ] - Environment Vars (like PATH) have changed. Close/reopen your shell to
 see the changes (or in powershell/cmd.exe just type `refreshenv`).
2019-04-30 10:56:31,770 2900 [DEBUG] - The following values have been added/changed (may contain sensitive data):
2019-04-30 10:56:31,770 2900 [DEBUG] -   * Path='C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\Git\bin;C:\ProgramData\chocolatey\bin;' (Machine)
2019-04-30 10:56:31,817 2900 [WARN ] -
Chocolatey uninstalled 1/1 packages.
 See the log for details (C:\ProgramData\chocolatey\logs\chocolatey.log).
2019-04-30 10:56:31,832 2900 [DEBUG] - Sending message 'PostRunMessage' out if there are subscribers...
2019-04-30 10:56:31,879 2900 [DEBUG] - Exiting with 0
	<?xml version="1.0" encoding="utf-8"?>
	<fileSnapshot xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
	<files>
	<file path="C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg" checksum="EEA9FD683FF0F22630AACDA3365B3AD1" />
	<file path="C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec" checksum="6E661F76337EFC95773CD04A45477D7E" />
	<file path="C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1" checksum="B65E565A0853CAA681D2DA2FA2639982" />
	<file path="C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1" checksum="FE6F0A9BBED778BF0F3533F7616D16B2" />
	<file path="C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1" checksum="4D7ABD81FEBDB1BE4849F86D38174BA5" />
	<file path="C:\ProgramData\chocolatey\lib\osquery\tools\LICENSE.txt" checksum="DD399CA08A28F2D449C22B56D76CC606" />
	<file path="C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1" checksum="5B79066DE95F16C1F0D0463F8EB14A4D" />
	<file path="C:\ProgramData\chocolatey\lib\osquery\tools\VERIFICATION.txt" checksum="2CD0E01D7F4FA91C2ED57BF13CAA27D2" />
	<file path="C:\ProgramData\chocolatey\lib\osquery\tools\bin\osquery.zip" checksum="AD85346830126625EBA6CB536EA9C30F" />
	</files>
	</fileSnapshot>