Skip to content

Instantly share code, notes, and snippets.

@choco-bot

choco-bot/FilesSnapshot.xml

Created January 25, 2024 04:39
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save choco-bot/8f1aa0ca3207d9127dd73b17384f22ef to your computer and use it in GitHub Desktop.
Save choco-bot/8f1aa0ca3207d9127dd73b17384f22ef to your computer and use it in GitHub Desktop.
Download ZIP
osquery v5.10.2 - Passed - Package Tests Results
Raw
_Summary.md

osquery v5.10.2 - Passed - Package Test Results

  • https://community.chocolatey.org/packages/osquery/5.10.2
  • Tested 25 Jan 2024 04:39:24 +00:00
  • Tested against win2012r2x64 (Windows Server 2012 R2 x64)
  • Tested with the latest version of choco, possibly a beta version.
  • Tested with chocolatey-package-verifier service v1.0.1
  • Install was successful.
  • Uninstall was successful.
Raw
FilesSnapshot.xml
<?xml version="1.0" encoding="utf-8"?>
<fileSnapshot xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<files>
<file path="C:\ProgramData\chocolatey\lib\osquery\LICENSE.txt" checksum="0820FFE048483183320E2DAD339898F6" />
<file path="C:\ProgramData\chocolatey\lib\osquery\manage-osqueryd.ps1" checksum="3CCB09B60C319C2B6A43DF64360BD14F" />
<file path="C:\ProgramData\chocolatey\lib\osquery\osquery.conf" checksum="9027F1A3AF205ED3D209BE5F9AEA1842" />
<file path="C:\ProgramData\chocolatey\lib\osquery\osquery.flags" checksum="D41D8CD98F00B204E9800998ECF8427E" />
<file path="C:\ProgramData\chocolatey\lib\osquery\osquery.man" checksum="A4C03558EDB1FF1F5DC4B2194CF3A500" />
<file path="C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg" checksum="7AC30B7B4FAD119B05F138774017A842" />
<file path="C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec" checksum="EC5AE84BE1DC9922567A0AE485754939" />
<file path="C:\ProgramData\chocolatey\lib\osquery\osquery.png" checksum="34A5C156791B25AB5D130BD97AECA98C" />
<file path="C:\ProgramData\chocolatey\lib\osquery\osqueryi.exe" checksum="6234BB56D3B2B967EE59D7058491F550" />
<file path="C:\ProgramData\chocolatey\lib\osquery\osquery_utils.ps1" checksum="E851BB94C0F783653E3BFF527503A850" />
<file path="C:\ProgramData\chocolatey\lib\osquery\VERIFICATION.txt" checksum="77039304249AC12CA156465857B19382" />
<file path="C:\ProgramData\chocolatey\lib\osquery\certs\certs.pem" checksum="6C8779E5755D9DDDF677BF7A52D035CE" />
<file path="C:\ProgramData\chocolatey\lib\osquery\osqueryd\osqueryd.exe" checksum="9AAEE1555A1B50E2A153E6F6256F8AC6" />
<file path="C:\ProgramData\chocolatey\lib\osquery\packs\hardware-monitoring.conf" checksum="3501087ED8C14DC4CB417D6F749ACAD4" />
<file path="C:\ProgramData\chocolatey\lib\osquery\packs\incident-response.conf" checksum="9FAF35B5ED735847D0162E4EAA5EF128" />
<file path="C:\ProgramData\chocolatey\lib\osquery\packs\it-compliance.conf" checksum="C90DCD8897F172B41770C2A658D4426A" />
<file path="C:\ProgramData\chocolatey\lib\osquery\packs\osquery-monitoring.conf" checksum="50B79815090F908C57B6317DD2F552BF" />
<file path="C:\ProgramData\chocolatey\lib\osquery\packs\ossec-rootkit.conf" checksum="788318DBABB9FDBC545315C4CA88FC40" />
<file path="C:\ProgramData\chocolatey\lib\osquery\packs\osx-attacks.conf" checksum="EE9CDBF8F06E672092B14DE993117569" />
<file path="C:\ProgramData\chocolatey\lib\osquery\packs\unwanted-chrome-extensions.conf" checksum="CF972DFC934DD8E09A628C6B0A3814DD" />
<file path="C:\ProgramData\chocolatey\lib\osquery\packs\vuln-management.conf" checksum="F1C82E2A9E05DE6AD9DFD47E16461FA8" />
<file path="C:\ProgramData\chocolatey\lib\osquery\packs\windows-attacks.conf" checksum="5C705090F10185E33F87AC8A79C445FB" />
<file path="C:\ProgramData\chocolatey\lib\osquery\packs\windows-hardening.conf" checksum="EBFB94E06E2914770A4EAEA4E5F83248" />
<file path="C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1" checksum="289840CCC12B230068E229CDD37E3703" />
<file path="C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1" checksum="780C83D965D277E7A132A4E7208FD339" />
<file path="C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1" checksum="3C79361CA6117F7D02C1FEDDF82F07C6" />
<file path="C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1" checksum="E851BB94C0F783653E3BFF527503A850" />
</files>
</fileSnapshot>
Raw
Install.txt
2024-01-25 04:38:06,802 3952 [DEBUG] - XmlConfiguration is now operational
2024-01-25 04:38:06,987 3952 [DEBUG] - Adding new type 'CygwinService' for type 'IAlternativeSourceRunner' from assembly 'choco'
2024-01-25 04:38:07,004 3952 [DEBUG] - Adding new type 'CygwinService' for type 'IInstallSourceRunner' from assembly 'choco'
2024-01-25 04:38:07,021 3952 [DEBUG] - Adding new type 'PythonService' for type 'IAlternativeSourceRunner' from assembly 'choco'
2024-01-25 04:38:07,021 3952 [DEBUG] - Adding new type 'PythonService' for type 'IListSourceRunner' from assembly 'choco'
2024-01-25 04:38:07,038 3952 [DEBUG] - Adding new type 'PythonService' for type 'IInstallSourceRunner' from assembly 'choco'
2024-01-25 04:38:07,038 3952 [DEBUG] - Adding new type 'PythonService' for type 'IUninstallSourceRunner' from assembly 'choco'
2024-01-25 04:38:07,051 3952 [DEBUG] - Adding new type 'RubyGemsService' for type 'IAlternativeSourceRunner' from assembly 'choco'
2024-01-25 04:38:07,051 3952 [DEBUG] - Adding new type 'RubyGemsService' for type 'IListSourceRunner' from assembly 'choco'
2024-01-25 04:38:07,051 3952 [DEBUG] - Adding new type 'RubyGemsService' for type 'IInstallSourceRunner' from assembly 'choco'
2024-01-25 04:38:07,067 3952 [DEBUG] - Adding new type 'SystemStateValidation' for type 'IValidation' from assembly 'choco'
2024-01-25 04:38:07,067 3952 [DEBUG] - Adding new type 'CacheFolderLockdownValidation' for type 'IValidation' from assembly 'choco'
2024-01-25 04:38:08,020 3952 [DEBUG] - Adding new type 'EmptyOrInvalidUrlMetadataRule' for type 'IMetadataRule' from assembly 'choco'
2024-01-25 04:38:08,035 3952 [DEBUG] - Adding new type 'FrameWorkReferencesMetadataRule' for type 'IMetadataRule' from assembly 'choco'
2024-01-25 04:38:08,035 3952 [DEBUG] - Adding new type 'IconMetadataRule' for type 'IMetadataRule' from assembly 'choco'
2024-01-25 04:38:08,051 3952 [DEBUG] - Adding new type 'LicenseMetadataRule' for type 'IMetadataRule' from assembly 'choco'
2024-01-25 04:38:08,051 3952 [DEBUG] - Adding new type 'PackageTypesMetadataRule' for type 'IMetadataRule' from assembly 'choco'
2024-01-25 04:38:08,051 3952 [DEBUG] - Adding new type 'ReadmeMetadataRule' for type 'IMetadataRule' from assembly 'choco'
2024-01-25 04:38:08,066 3952 [DEBUG] - Adding new type 'RepositoryMetadataRule' for type 'IMetadataRule' from assembly 'choco'
2024-01-25 04:38:08,066 3952 [DEBUG] - Adding new type 'RequireLicenseAcceptanceMetadataRule' for type 'IMetadataRule' from assembly 'choco'
2024-01-25 04:38:08,066 3952 [DEBUG] - Adding new type 'ServicableMetadataRule' for type 'IMetadataRule' from assembly 'choco'
2024-01-25 04:38:08,082 3952 [DEBUG] - Adding new type 'VersionMetadataRule' for type 'IMetadataRule' from assembly 'choco'
2024-01-25 04:38:08,131 3952 [DEBUG] - Registering new command 'cache' in assembly 'choco'
2024-01-25 04:38:08,131 3952 [DEBUG] - Registering new command 'list' in assembly 'choco'
2024-01-25 04:38:08,144 3952 [DEBUG] - Registering new command 'template' in assembly 'choco'
2024-01-25 04:38:08,144 3952 [DEBUG] - Registering new command 'export' in assembly 'choco'
2024-01-25 04:38:08,144 3952 [DEBUG] - Registering new command 'info' in assembly 'choco'
2024-01-25 04:38:08,159 3952 [DEBUG] - Registering new command 'help' in assembly 'choco'
2024-01-25 04:38:08,159 3952 [DEBUG] - Registering new command 'config' in assembly 'choco'
2024-01-25 04:38:08,159 3952 [DEBUG] - Registering new command 'feature' in assembly 'choco'
2024-01-25 04:38:08,175 3952 [DEBUG] - Registering new command 'new' in assembly 'choco'
2024-01-25 04:38:08,175 3952 [DEBUG] - Registering new command 'outdated' in assembly 'choco'
2024-01-25 04:38:08,175 3952 [DEBUG] - Registering new command 'pack' in assembly 'choco'
2024-01-25 04:38:08,191 3952 [DEBUG] - Registering new command 'pin' in assembly 'choco'
2024-01-25 04:38:08,191 3952 [DEBUG] - Registering new command 'push' in assembly 'choco'
2024-01-25 04:38:08,207 3952 [DEBUG] - Registering new command 'apikey' in assembly 'choco'
2024-01-25 04:38:08,207 3952 [DEBUG] - Registering new command 'source' in assembly 'choco'
2024-01-25 04:38:08,207 3952 [DEBUG] - Registering new command 'uninstall' in assembly 'choco'
2024-01-25 04:38:08,222 3952 [DEBUG] - Registering new command 'upgrade' in assembly 'choco'
2024-01-25 04:38:08,222 3952 [DEBUG] - Registering new command 'search' in assembly 'choco'
2024-01-25 04:38:08,222 3952 [DEBUG] - Registering new command 'unpackself' in assembly 'choco'
2024-01-25 04:38:08,238 3952 [DEBUG] - Registering new command 'install' in assembly 'choco'
2024-01-25 04:38:08,598 3952 [INFO ] - ============================================================
2024-01-25 04:38:09,097 3952 [INFO ] - Chocolatey v2.2.2
2024-01-25 04:38:09,144 3952 [DEBUG] - Chocolatey is running on Windows v 10.0.17763.0
2024-01-25 04:38:09,160 3952 [DEBUG] - Attempting to delete file "C:/ProgramData/chocolatey/choco.exe.old".
2024-01-25 04:38:09,160 3952 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\choco.exe.old".
2024-01-25 04:38:09,191 3952 [DEBUG] - Command line: "C:\ProgramData\chocolatey\choco.exe" install osquery --version 5.10.2 -fdvy --execution-timeout=2700 --allow-downgrade
2024-01-25 04:38:09,207 3952 [DEBUG] - Received arguments: install osquery --version 5.10.2 -fdvy --execution-timeout=2700 --allow-downgrade
2024-01-25 04:38:09,394 3952 [DEBUG] - RemovePendingPackagesTask is now ready and waiting for PreRunMessage.
2024-01-25 04:38:09,442 3952 [DEBUG] - Sending message 'PreRunMessage' out if there are subscribers...
2024-01-25 04:38:09,457 3952 [DEBUG] - [Pending] Removing all pending packages that should not be considered installed...
2024-01-25 04:38:09,723 3952 [DEBUG] - Performing validation checks.
2024-01-25 04:38:09,739 3952 [DEBUG] - Global Configuration Validation Checks:
2024-01-25 04:38:09,739 3952 [DEBUG] - - Package Exit Code / Exit On Reboot = Checked
2024-01-25 04:38:09,801 3952 [DEBUG] - System State Validation Checks:
2024-01-25 04:38:09,817 3952 [DEBUG] - Reboot Requirement Checks:
2024-01-25 04:38:09,832 3952 [DEBUG] - - Pending Computer Rename = Checked
2024-01-25 04:38:09,832 3952 [DEBUG] - - Pending Component Based Servicing = Checked
2024-01-25 04:38:09,847 3952 [DEBUG] - - Pending Windows Auto Update = Checked
2024-01-25 04:38:09,847 3952 [DEBUG] - - Pending File Rename Operations = Ignored
2024-01-25 04:38:09,864 3952 [DEBUG] - - Pending Windows Package Installer = Checked
2024-01-25 04:38:09,864 3952 [DEBUG] - - Pending Windows Package Installer SysWow64 = Checked
2024-01-25 04:38:09,879 3952 [DEBUG] - Cache Folder Lockdown Checks:
2024-01-25 04:38:09,895 3952 [DEBUG] - - Elevated State = Checked
2024-01-25 04:38:09,895 3952 [DEBUG] - - Folder Exists = Checked
2024-01-25 04:38:09,910 3952 [DEBUG] - - Folder lockdown = Checked
2024-01-25 04:38:09,926 3952 [INFO ] - 3 validations performed. 3 success(es), 0 warning(s), and 0 error(s).
2024-01-25 04:38:09,989 3952 [DEBUG] - The source 'c:\cached-packages;https://community.chocolatey.org/api/v2/' evaluated to a 'normal' source type
2024-01-25 04:38:10,004 3952 [DEBUG] -
NOTE: Hiding sensitive configuration data! Please double and triple
check to be sure no sensitive data is shown, especially if copying
output to a gist for review.
2024-01-25 04:38:10,083 3952 [DEBUG] - Configuration: CommandName='install'|
CacheLocation='C:\Users\vagrant\AppData\Local\Temp\chocolatey'|
CommandExecutionTimeoutSeconds='2700'|WebRequestTimeoutSeconds='30'|
Sources='c:\cached-packages;https://community.chocolatey.org/api/v2/'|
SourceType='normal'|ShowOnlineHelp='False'|Debug='True'|Verbose='True'|
Trace='False'|Force='True'|Noop='False'|HelpRequested='False'|
UnsuccessfulParsing='False'|RegularOutput='True'|QuietOutput='False'|
PromptForConfirmation='False'|DisableCompatibilityChecks='False'|
AcceptLicense='True'|AllowUnofficialBuild='False'|Input='osquery'|
Version='5.10.2'|AllVersions='False'|
SkipPackageInstallProvider='False'|
SkipHookScripts='False'|PackageNames='osquery'|Prerelease='False'|
ForceX86='False'|OverrideArguments='False'|NotSilent='False'|
ApplyPackageParametersToDependencies='False'|
ApplyInstallArgumentsToDependencies='False'|IgnoreDependencies='False'|
CacheExpirationInMinutes='30'|AllowDowngrade='True'|
ForceDependencies='False'|PinPackage='False'|
Information.PlatformType='Windows'|
Information.PlatformVersion='10.0.17763.0'|
Information.PlatformName='Windows Server 2016'|
Information.ChocolateyVersion='2.2.2.0'|
Information.ChocolateyProductVersion='2.2.2'|
Information.FullName='choco, Version=2.2.2.0, Culture=neutral, PublicKeyToken=79d02ea9cad655eb'|
Information.Is64BitOperatingSystem='True'|
Information.Is64BitProcess='True'|Information.IsInteractive='False'|
Information.UserName='vagrant'|
Information.UserDomainName='WIN-LAQOCN24NUI'|
Information.IsUserAdministrator='True'|
Information.IsUserSystemAccount='False'|
Information.IsUserRemoteDesktop='False'|
Information.IsUserRemote='True'|
Information.IsProcessElevated='True'|
Information.IsLicensedVersion='False'|
Information.IsLicensedAssemblyLoaded='False'|
Information.LicenseType='Foss'|
Information.CurrentDirectory='C:\Users\vagrant'|
Features.AutoUninstaller='True'|Features.ChecksumFiles='True'|
Features.AllowEmptyChecksums='False'|
Features.AllowEmptyChecksumsSecure='True'|
Features.FailOnAutoUninstaller='False'|
Features.FailOnStandardError='False'|Features.UsePowerShellHost='True'|
Features.LogEnvironmentValues='True'|Features.LogWithoutColor='False'|
Features.VirusCheck='False'|
Features.FailOnInvalidOrMissingLicense='False'|
Features.IgnoreInvalidOptionsSwitches='True'|
Features.UsePackageExitCodes='True'|
Features.UseEnhancedExitCodes='False'|
Features.UseFipsCompliantChecksums='False'|
Features.ShowNonElevatedWarnings='True'|
Features.ShowDownloadProgress='False'|
Features.StopOnFirstPackageFailure='False'|
Features.UseRememberedArgumentsForUpgrades='False'|
Features.IgnoreUnfoundPackagesOnUpgradeOutdated='False'|
Features.SkipPackageUpgradesWhenNotInstalled='False'|
Features.RemovePackageInformationOnUninstall='False'|
Features.ExitOnRebootDetected='False'|
Features.LogValidationResultsOnWarnings='True'|
Features.UsePackageRepositoryOptimizations='True'|
ListCommand.LocalOnly='False'|ListCommand.IdOnly='False'|
ListCommand.IncludeRegistryPrograms='False'|ListCommand.PageSize='25'|
ListCommand.Exact='False'|ListCommand.ByIdOnly='False'|
ListCommand.ByTagOnly='False'|ListCommand.IdStartsWith='False'|
ListCommand.OrderByPopularity='False'|ListCommand.ApprovedOnly='False'|
ListCommand.DownloadCacheAvailable='False'|
ListCommand.NotBroken='False'|
ListCommand.IncludeVersionOverrides='False'|
ListCommand.ExplicitPageSize='False'|
ListCommand.ExplicitSource='False'|
UpgradeCommand.FailOnUnfound='False'|
UpgradeCommand.FailOnNotInstalled='False'|
UpgradeCommand.NotifyOnlyAvailableUpgrades='False'|
UpgradeCommand.ExcludePrerelease='False'|
NewCommand.AutomaticPackage='False'|
NewCommand.UseOriginalTemplate='False'|SourceCommand.Command='unknown'|
SourceCommand.Priority='0'|SourceCommand.BypassProxy='False'|
SourceCommand.AllowSelfService='False'|
SourceCommand.VisibleToAdminsOnly='False'|
FeatureCommand.Command='unknown'|ConfigCommand.Command='Unknown'|
ApiKeyCommand.Command='Unknown'|PinCommand.Command='Unknown'|
OutdatedCommand.IgnorePinned='False'|
ExportCommand.IncludeVersionNumbers='False'|Proxy.BypassOnLocal='True'|
TemplateCommand.Command='unknown'|CacheCommand.Command='Unknown'|
CacheCommand.RemoveExpiredItemsOnly='False'|
2024-01-25 04:38:10,083 3952 [DEBUG] - _ Chocolatey:ChocolateyInstallCommand - Normal Run Mode _
2024-01-25 04:38:10,097 3952 [INFO ] - Installing the following packages:
2024-01-25 04:38:10,113 3952 [INFO ] - osquery
2024-01-25 04:38:10,129 3952 [INFO ] - By installing, you accept licenses for the packages.
2024-01-25 04:38:10,146 3952 [DEBUG] - Current environment values (may contain sensitive data):
2024-01-25 04:38:10,146 3952 [DEBUG] - * 'Path'='C:\Users\vagrant\AppData\Local\Microsoft\WindowsApps;' ('User')
2024-01-25 04:38:10,161 3952 [DEBUG] - * 'TEMP'='C:\Users\vagrant\AppData\Local\Temp' ('User')
2024-01-25 04:38:10,161 3952 [DEBUG] - * 'TMP'='C:\Users\vagrant\AppData\Local\Temp' ('User')
2024-01-25 04:38:10,177 3952 [DEBUG] - * 'ChocolateyLastPathUpdate'='133505719184506291' ('User')
2024-01-25 04:38:10,192 3952 [DEBUG] - * 'ComSpec'='C:\Windows\system32\cmd.exe' ('Machine')
2024-01-25 04:38:10,192 3952 [DEBUG] - * 'DriverData'='C:\Windows\System32\Drivers\DriverData' ('Machine')
2024-01-25 04:38:10,192 3952 [DEBUG] - * 'OS'='Windows_NT' ('Machine')
2024-01-25 04:38:10,207 3952 [DEBUG] - * 'Path'='C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\ProgramData\chocolatey\bin;' ('Machine')
2024-01-25 04:38:10,207 3952 [DEBUG] - * 'PATHEXT'='.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC' ('Machine')
2024-01-25 04:38:10,222 3952 [DEBUG] - * 'PROCESSOR_ARCHITECTURE'='AMD64' ('Machine')
2024-01-25 04:38:10,222 3952 [DEBUG] - * 'PSModulePath'='C:\Program Files\WindowsPowerShell\Modules;C:\Windows\system32\WindowsPowerShell\v1.0\Modules' ('Machine')
2024-01-25 04:38:10,222 3952 [DEBUG] - * 'TEMP'='C:\Windows\TEMP' ('Machine')
2024-01-25 04:38:10,239 3952 [DEBUG] - * 'TMP'='C:\Windows\TEMP' ('Machine')
2024-01-25 04:38:10,239 3952 [DEBUG] - * 'USERNAME'='SYSTEM' ('Machine')
2024-01-25 04:38:10,254 3952 [DEBUG] - * 'windir'='C:\Windows' ('Machine')
2024-01-25 04:38:10,254 3952 [DEBUG] - * 'NUMBER_OF_PROCESSORS'='10' ('Machine')
2024-01-25 04:38:10,269 3952 [DEBUG] - * 'PROCESSOR_LEVEL'='6' ('Machine')
2024-01-25 04:38:10,269 3952 [DEBUG] - * 'PROCESSOR_IDENTIFIER'='Intel64 Family 6 Model 85 Stepping 7, GenuineIntel' ('Machine')
2024-01-25 04:38:10,269 3952 [DEBUG] - * 'PROCESSOR_REVISION'='5507' ('Machine')
2024-01-25 04:38:10,285 3952 [DEBUG] - * 'ChocolateyInstall'='C:\ProgramData\chocolatey' ('Machine')
2024-01-25 04:38:11,004 3952 [DEBUG] - Running list with the following filter = ''
2024-01-25 04:38:11,004 3952 [DEBUG] - --- Start of List ---
2024-01-25 04:38:11,083 3952 [DEBUG] - Resolving resource PackageSearchResource for source C:\ProgramData\chocolatey\lib
2024-01-25 04:38:11,754 3952 [DEBUG] - chocolatey 2.2.2
2024-01-25 04:38:11,770 3952 [DEBUG] - chocolatey-windowsupdate.extension 1.0.5
2024-01-25 04:38:11,786 3952 [DEBUG] - KB2919355 1.0.20160915
2024-01-25 04:38:11,801 3952 [DEBUG] - KB2919442 1.0.20160915
2024-01-25 04:38:11,801 3952 [DEBUG] - KB2999226 1.0.20181019
2024-01-25 04:38:11,818 3952 [DEBUG] - KB3035131 1.0.3
2024-01-25 04:38:11,863 3952 [DEBUG] - KB3118401 1.0.5
2024-01-25 04:38:11,863 3952 [DEBUG] - virtualbox-guest-additions-guest.install 7.0.14
2024-01-25 04:38:11,880 3952 [DEBUG] - --- End of List ---
2024-01-25 04:38:11,895 3952 [DEBUG] - Resolving resource PackageMetadataResource for source c:\cached-packages
2024-01-25 04:38:12,581 3952 [DEBUG] - Resolving resource PackageMetadataResource for source https://community.chocolatey.org/api/v2/
2024-01-25 04:38:13,458 3952 [INFO ] - [NuGet] GET https://community.chocolatey.org/api/v2/Packages(Id='osquery',Version='5.10.2')
2024-01-25 04:38:13,567 3952 [INFO ] - [NuGet] OK https://community.chocolatey.org/api/v2/Packages(Id='osquery',Version='5.10.2') 99ms
2024-01-25 04:38:13,817 3952 [DEBUG] - Resolving resource DependencyInfoResource for source c:\cached-packages
2024-01-25 04:38:14,536 3952 [DEBUG] - Resolving resource DependencyInfoResource for source https://community.chocolatey.org/api/v2/
2024-01-25 04:38:14,568 3952 [INFO ] - [NuGet] CACHE https://community.chocolatey.org/api/v2/Packages(Id='osquery',Version='5.10.2')
2024-01-25 04:38:14,927 3952 [INFO ] - [NuGet] Resolving dependency information took 0 ms
2024-01-25 04:38:14,958 3952 [DEBUG] - Resolving resource DownloadResource for source https://community.chocolatey.org/api/v2/
2024-01-25 04:38:15,051 3952 [DEBUG] - Attempting to delete file "".
2024-01-25 04:38:15,130 3952 [INFO ] - [NuGet] GET https://community.chocolatey.org/api/v2/package/osquery/5.10.2
2024-01-25 04:38:15,816 3952 [INFO ] - [NuGet] OK https://community.chocolatey.org/api/v2/package/osquery/5.10.2 677ms
2024-01-25 04:38:15,880 3952 [INFO ] - [NuGet] Acquiring lock for the installation of osquery 5.10.2
2024-01-25 04:38:15,988 3952 [INFO ] - [NuGet] Acquired lock for the installation of osquery 5.10.2
2024-01-25 04:38:20,769 3952 [INFO ] - [NuGet] Installed osquery 5.10.2 from https://community.chocolatey.org/api/v2/ with content hash AYiRvgcAP5rFybG2fq7IiLGv4LIAiIR77hEvYwrGAdlIuOVqH+C9GsEqrU3MNjO1Fm7nkdvPxxFLIAkBlPiwHw==.
2024-01-25 04:38:20,848 3952 [INFO ] - [NuGet] Adding package 'osquery.5.10.2' to folder 'C:\ProgramData\chocolatey\lib'
2024-01-25 04:38:21,145 3952 [INFO ] - [NuGet] Added package 'osquery.5.10.2' to folder 'C:\ProgramData\chocolatey\lib'
2024-01-25 04:38:21,160 3952 [DEBUG] - Attempting to delete file "C:\Users\vagrant\AppData\Local\Temp\chocolatey\ChocolateyScratch\osquery/5.10.2\osquery.5.10.2.nupkg".
2024-01-25 04:38:21,176 3952 [DEBUG] - Attempting to delete file "C:\Users\vagrant\AppData\Local\Temp\chocolatey\ChocolateyScratch\osquery/5.10.2\.nupkg.metadata".
2024-01-25 04:38:21,176 3952 [DEBUG] - Attempting to delete file "C:\Users\vagrant\AppData\Local\Temp\chocolatey\ChocolateyScratch\osquery/5.10.2\osquery.5.10.2.nupkg.sha512".
2024-01-25 04:38:21,191 3952 [INFO ] -
osquery v5.10.2 (forced)
2024-01-25 04:38:21,317 3952 [INFO ] - osquery package files install completed. Performing other installation steps.
2024-01-25 04:38:21,410 3952 [DEBUG] - Setting installer args for osquery
2024-01-25 04:38:21,410 3952 [DEBUG] - Setting package parameters for osquery
2024-01-25 04:38:21,426 3952 [DEBUG] - Contents of 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1':
2024-01-25 04:38:21,442 3952 [DEBUG] - # Copyright (c) 2014-present, The osquery authors
#
# This source code is licensed as defined by the LICENSE file found in the
# root directory of this source tree.
#
# SPDX-License-Identifier: (Apache-2.0 OR GPL-2.0-only)
# This library file contains constant definitions and helper functions
#Requires -Version 3.0
$ErrorActionPreference = "Stop"
. (Join-Path "$PSScriptRoot" "osquery_utils.ps1")
$packageParameters = $env:chocolateyPackageParameters
$arguments = @{}
# Ensure the service is stopped and processes are not running if exists.
$svc = Get-WmiObject -ClassName Win32_Service -Filter "Name='osqueryd'"
if ($svc -and $svc.State -eq 'Running') {
Stop-Service $serviceName
# If we find zombie processes, ensure they're termintated
$proc = Get-Process | Where-Object { $_.ProcessName -eq 'osqueryd' }
if ($null -ne $proc) {
Stop-Process -Force $proc -ErrorAction SilentlyContinue
}
# If the service was installed using the legacy path in ProgramData, remove
# it and allow the service creation below to fix it up.
if ([regex]::escape($svc.PathName) -like [regex]::escape("${legacyInstall}*")) {
Get-CimInstance -ClassName Win32_Service -Filter "Name='osqueryd'" |
Invoke-CimMethod -MethodName Delete
}
}
# Lastly, ensure that the Deny Write ACLs have been removed before modifying
if (Test-Path $daemonFolder) {
Set-DenyWriteAcl $daemonFolder 'Remove'
}
if (Test-Path $extensionsFolder) {
Set-DenyWriteAcl $extensionsFolder 'Remove'
}
# Now parse the packageParameters using good old regular expression
if ($packageParameters) {
$match_pattern = "\/(?<option>([a-zA-Z]+)):(?<value>([`"'])?([a-zA-Z0-9- _\\:\.]+)([`"'])?)|\/(?<option>([a-zA-Z]+))"
$option_name = 'option'
$value_name = 'value'
if ($packageParameters -match $match_pattern ) {
$results = $packageParameters | Select-String $match_pattern -AllMatches
$results.matches | ForEach-Object {
$arguments.Add(
$_.Groups[$option_name].Value.Trim(),
$_.Groups[$value_name].Value.Trim())
}
} else {
Throw "Package Parameters were found but were invalid (REGEX Failure)"
}
if ($arguments.ContainsKey("InstallService")) {
$installService = $true
}
} else {
Write-Debug "No Package Parameters Passed in"
}
# Install the package
# Create a log directory in case one doesn't already exist
New-Item -Force -Type directory -Path $logFolder
# Grab the primary folders
$packageRoot = (Join-Path "$PSScriptRoot" "..")
Copy-Item -Force -Recurse (Join-Path "$packageRoot" "certs") $targetFolder
Copy-Item -Force -Recurse (Join-Path "$packageRoot" "osqueryd") $targetFolder
# Grab the individual files
Copy-Item -Force (Join-Path "$packageRoot" "manage-osqueryd.ps1") $targetFolder
Copy-Item -Force (Join-Path "$packageRoot" "osquery.man") $targetFolder
Copy-Item -Force (Join-Path "$PSScriptRoot" "osquery_utils.ps1") $targetFolder
Copy-Item -Force (Join-Path "$packageRoot" "osqueryi.exe") $targetFolder
# We intentionally do not replace configuration and flags files from previous
# installations, as these often dictate the osquery configuration and may not
# change through upgrades.
$currConf = (Join-Path "$targetFolder" "osquery.conf")
if (-not (Test-Path $currConf)) {
Copy-Item -Force (Join-Path "$packageRoot" "osquery.conf") $targetFolder
}
$currFlags = (Join-Path "$targetFolder" "osquery.flags")
if (-not (Test-Path $currFlags)) {
Copy-Item -Force (Join-Path "$packageRoot" "osquery.flags") $targetFolder
}
# The osquery daemon requires no low privileged users have write access to run
Set-SafePermissions $daemonFolder
if ($installService) {
if (-not (Get-Service $serviceName -ErrorAction SilentlyContinue)) {
Write-Debug 'Installing osquery daemon service.'
# If the 'install' parameter is passed, we create a Windows service with
# the flag file in the default location, 'C:\Program Files\osquery'
$cmd = '"{0}" --flagfile="{1}\osquery.flags"' -f $destDaemonBin, $targetFolder
$svcArgs = @{
Name = $serviceName
BinaryPathName = $cmd
DisplayName = $serviceName
Description = $serviceDescription
StartupType = "Automatic"
}
New-Service @svcArgs
# If the osquery.flags file doesn't exist, we create a blank one.
if (-not (Test-Path "$targetFolder\osquery.flags")) {
Add-Content "$targetFolder\osquery.flags" $null
}
}
Start-Service $serviceName
}
# Add osquery binary path to machines path for ease of use.
Install-ChocolateyPath $targetFolder -PathType 'Machine'
2024-01-25 04:38:21,488 3952 [DEBUG] - Calling built-in PowerShell host with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = '';[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::SystemDefault; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1' -installArguments '' -packageParameters '' -preRunHookScripts $null -postRunHookScripts $null']
2024-01-25 04:38:21,504 3952 [DEBUG] - Redirecting System.Management.Automation.resources, Version=3.0.0.0, Culture=en-US, PublicKeyToken=31bf3856ad364e35, requested by ''
2024-01-25 04:38:23,160 3952 [DEBUG] - Host version is 5.1.17763.1, PowerShell Version is '5.1.17763.3770' and CLR Version is '4.0.30319.42000'.
2024-01-25 04:38:24,036 3952 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2024-01-25 04:38:24,052 3952 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2024-01-25 04:38:24,066 3952 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyConfigValue'.
2024-01-25 04:38:24,066 3952 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyPath'.
2024-01-25 04:38:24,084 3952 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2024-01-25 04:38:24,084 3952 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2024-01-25 04:38:24,098 3952 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2024-01-25 04:38:24,114 3952 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2024-01-25 04:38:24,114 3952 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2024-01-25 04:38:24,131 3952 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2024-01-25 04:38:24,144 3952 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2024-01-25 04:38:24,144 3952 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2024-01-25 04:38:24,144 3952 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2024-01-25 04:38:24,161 3952 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2024-01-25 04:38:24,176 3952 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2024-01-25 04:38:24,176 3952 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2024-01-25 04:38:24,192 3952 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2024-01-25 04:38:24,192 3952 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2024-01-25 04:38:24,212 3952 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2024-01-25 04:38:24,223 3952 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2024-01-25 04:38:24,223 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2024-01-25 04:38:24,239 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2024-01-25 04:38:24,239 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2024-01-25 04:38:24,254 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2024-01-25 04:38:24,254 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2024-01-25 04:38:24,270 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2024-01-25 04:38:24,270 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2024-01-25 04:38:24,286 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2024-01-25 04:38:24,286 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2024-01-25 04:38:24,301 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2024-01-25 04:38:24,301 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2024-01-25 04:38:24,316 3952 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2024-01-25 04:38:24,333 3952 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2024-01-25 04:38:24,333 3952 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2024-01-25 04:38:24,333 3952 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2024-01-25 04:38:24,348 3952 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2024-01-25 04:38:24,364 3952 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2024-01-25 04:38:24,364 3952 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2024-01-25 04:38:24,379 3952 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2024-01-25 04:38:24,379 3952 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2024-01-25 04:38:24,395 3952 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2024-01-25 04:38:24,411 3952 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2024-01-25 04:38:24,428 3952 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2024-01-25 04:38:24,428 3952 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2024-01-25 04:38:24,442 3952 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2024-01-25 04:38:24,442 3952 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2024-01-25 04:38:24,457 3952 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2024-01-25 04:38:24,473 3952 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2024-01-25 04:38:24,473 3952 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2024-01-25 04:38:24,488 3952 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2024-01-25 04:38:24,488 3952 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2024-01-25 04:38:24,566 3952 [DEBUG] - Loading community extensions
2024-01-25 04:38:24,613 3952 [DEBUG] - Importing 'C:\ProgramData\chocolatey\extensions\chocolatey-windowsupdate\chocolatey-windowsupdate.psm1'
2024-01-25 04:38:24,631 3952 [INFO ] - VERBOSE: Loading module from path 'C:\ProgramData\chocolatey\extensions\chocolatey-windowsupdate\chocolatey-windowsupdate.psm1'.
2024-01-25 04:38:24,802 3952 [INFO ] - VERBOSE: Exporting function 'Install-WindowsUpdate'.
2024-01-25 04:38:24,816 3952 [INFO ] - VERBOSE: Exporting function 'Test-WindowsUpdate'.
2024-01-25 04:38:24,816 3952 [INFO ] - VERBOSE: Importing function 'Install-WindowsUpdate'.
2024-01-25 04:38:24,832 3952 [INFO ] - VERBOSE: Importing function 'Test-WindowsUpdate'.
2024-01-25 04:38:24,832 3952 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2024-01-25 04:38:24,850 3952 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2024-01-25 04:38:24,850 3952 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyConfigValue'.
2024-01-25 04:38:24,864 3952 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyPath'.
2024-01-25 04:38:24,864 3952 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2024-01-25 04:38:24,880 3952 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2024-01-25 04:38:24,880 3952 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2024-01-25 04:38:24,894 3952 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2024-01-25 04:38:24,894 3952 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2024-01-25 04:38:24,910 3952 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2024-01-25 04:38:24,927 3952 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2024-01-25 04:38:24,927 3952 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2024-01-25 04:38:24,941 3952 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2024-01-25 04:38:24,941 3952 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2024-01-25 04:38:24,957 3952 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2024-01-25 04:38:24,957 3952 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2024-01-25 04:38:24,957 3952 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2024-01-25 04:38:24,973 3952 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2024-01-25 04:38:24,973 3952 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2024-01-25 04:38:24,989 3952 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2024-01-25 04:38:24,989 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2024-01-25 04:38:25,003 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2024-01-25 04:38:25,003 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2024-01-25 04:38:25,020 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2024-01-25 04:38:25,020 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2024-01-25 04:38:25,035 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2024-01-25 04:38:25,067 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2024-01-25 04:38:25,082 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2024-01-25 04:38:25,082 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2024-01-25 04:38:25,100 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2024-01-25 04:38:25,100 3952 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2024-01-25 04:38:25,114 3952 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2024-01-25 04:38:25,114 3952 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2024-01-25 04:38:25,129 3952 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2024-01-25 04:38:25,129 3952 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2024-01-25 04:38:25,146 3952 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2024-01-25 04:38:25,146 3952 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2024-01-25 04:38:25,161 3952 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2024-01-25 04:38:25,161 3952 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2024-01-25 04:38:25,176 3952 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2024-01-25 04:38:25,176 3952 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2024-01-25 04:38:25,193 3952 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2024-01-25 04:38:25,207 3952 [INFO ] - VERBOSE: Exporting function 'Install-WindowsUpdate'.
2024-01-25 04:38:25,207 3952 [INFO ] - VERBOSE: Exporting function 'Test-WindowsUpdate'.
2024-01-25 04:38:25,223 3952 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2024-01-25 04:38:25,240 3952 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2024-01-25 04:38:25,240 3952 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2024-01-25 04:38:25,255 3952 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2024-01-25 04:38:25,255 3952 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2024-01-25 04:38:25,270 3952 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2024-01-25 04:38:25,286 3952 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2024-01-25 04:38:25,286 3952 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2024-01-25 04:38:25,302 3952 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2024-01-25 04:38:25,318 3952 [INFO ] - VERBOSE: Importing function 'Format-FileSize'.
2024-01-25 04:38:25,347 3952 [INFO ] - VERBOSE: Importing function 'Get-ChecksumValid'.
2024-01-25 04:38:25,363 3952 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyConfigValue'.
2024-01-25 04:38:25,379 3952 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyPath'.
2024-01-25 04:38:25,379 3952 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyUnzip'.
2024-01-25 04:38:25,397 3952 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyWebFile'.
2024-01-25 04:38:25,411 3952 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariable'.
2024-01-25 04:38:25,426 3952 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariableNames'.
2024-01-25 04:38:25,426 3952 [INFO ] - VERBOSE: Importing function 'Get-FtpFile'.
2024-01-25 04:38:25,443 3952 [INFO ] - VERBOSE: Importing function 'Get-OSArchitectureWidth'.
2024-01-25 04:38:25,457 3952 [INFO ] - VERBOSE: Importing function 'Get-PackageParameters'.
2024-01-25 04:38:25,457 3952 [INFO ] - VERBOSE: Importing function 'Get-PackageParametersBuiltIn'.
2024-01-25 04:38:25,473 3952 [INFO ] - VERBOSE: Importing function 'Get-ToolsLocation'.
2024-01-25 04:38:25,473 3952 [INFO ] - VERBOSE: Importing function 'Get-UACEnabled'.
2024-01-25 04:38:25,490 3952 [INFO ] - VERBOSE: Importing function 'Get-UninstallRegistryKey'.
2024-01-25 04:38:25,504 3952 [INFO ] - VERBOSE: Importing function 'Get-VirusCheckValid'.
2024-01-25 04:38:25,504 3952 [INFO ] - VERBOSE: Importing function 'Get-WebFile'.
2024-01-25 04:38:25,523 3952 [INFO ] - VERBOSE: Importing function 'Get-WebFileName'.
2024-01-25 04:38:25,523 3952 [INFO ] - VERBOSE: Importing function 'Get-WebHeaders'.
2024-01-25 04:38:25,538 3952 [INFO ] - VERBOSE: Importing function 'Install-BinFile'.
2024-01-25 04:38:25,552 3952 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyEnvironmentVariable'.
2024-01-25 04:38:25,552 3952 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyExplorerMenuItem'.
2024-01-25 04:38:25,566 3952 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyFileAssociation'.
2024-01-25 04:38:25,566 3952 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyInstallPackage'.
2024-01-25 04:38:25,566 3952 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPackage'.
2024-01-25 04:38:25,582 3952 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPath'.
2024-01-25 04:38:25,582 3952 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPinnedTaskBarItem'.
2024-01-25 04:38:25,598 3952 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPowershellCommand'.
2024-01-25 04:38:25,598 3952 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyShortcut'.
2024-01-25 04:38:25,614 3952 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyVsixPackage'.
2024-01-25 04:38:25,614 3952 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyZipPackage'.
2024-01-25 04:38:25,629 3952 [INFO ] - VERBOSE: Importing function 'Install-Vsix'.
2024-01-25 04:38:25,629 3952 [INFO ] - VERBOSE: Importing function 'Install-WindowsUpdate'.
2024-01-25 04:38:25,645 3952 [INFO ] - VERBOSE: Importing function 'Set-EnvironmentVariable'.
2024-01-25 04:38:25,645 3952 [INFO ] - VERBOSE: Importing function 'Set-PowerShellExitCode'.
2024-01-25 04:38:25,660 3952 [INFO ] - VERBOSE: Importing function 'Start-ChocolateyProcessAsAdmin'.
2024-01-25 04:38:25,662 3952 [INFO ] - VERBOSE: Importing function 'Test-ProcessAdminRights'.
2024-01-25 04:38:25,662 3952 [INFO ] - VERBOSE: Importing function 'Test-WindowsUpdate'.
2024-01-25 04:38:25,677 3952 [INFO ] - VERBOSE: Importing function 'Uninstall-BinFile'.
2024-01-25 04:38:25,692 3952 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyEnvironmentVariable'.
2024-01-25 04:38:25,692 3952 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyPackage'.
2024-01-25 04:38:25,707 3952 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyZipPackage'.
2024-01-25 04:38:25,707 3952 [INFO ] - VERBOSE: Importing function 'Update-SessionEnvironment'.
2024-01-25 04:38:25,724 3952 [INFO ] - VERBOSE: Importing function 'Write-FunctionCallLogMessage'.
2024-01-25 04:38:25,724 3952 [INFO ] - VERBOSE: Importing alias 'Add-BinFile'.
2024-01-25 04:38:25,741 3952 [INFO ] - VERBOSE: Importing alias 'Generate-BinFile'.
2024-01-25 04:38:25,741 3952 [INFO ] - VERBOSE: Importing alias 'Get-InstallRegistryKey'.
2024-01-25 04:38:25,755 3952 [INFO ] - VERBOSE: Importing alias 'Get-OSBitness'.
2024-01-25 04:38:25,755 3952 [INFO ] - VERBOSE: Importing alias 'Get-ProcessorBits'.
2024-01-25 04:38:25,770 3952 [INFO ] - VERBOSE: Importing alias 'Invoke-ChocolateyProcess'.
2024-01-25 04:38:25,770 3952 [INFO ] - VERBOSE: Importing alias 'refreshenv'.
2024-01-25 04:38:25,785 3952 [INFO ] - VERBOSE: Importing alias 'Remove-BinFile'.
2024-01-25 04:38:25,785 3952 [INFO ] - VERBOSE: Importing alias 'Start-ChocolateyProcess'.
2024-01-25 04:38:25,927 3952 [DEBUG] - ---------------------------Script Execution---------------------------
2024-01-25 04:38:25,972 3952 [DEBUG] - Running 'ChocolateyScriptRunner' for osquery v5.10.2 with packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1', packageFolder:'C:\ProgramData\chocolatey\lib\osquery', installArguments: '', packageParameters: '', preRunHookScripts: '', postRunHookScripts: '',
2024-01-25 04:38:26,051 3952 [DEBUG] - Running package script 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1'
2024-01-25 04:38:35,707 3952 [DEBUG] - No Package Parameters Passed in
2024-01-25 04:38:35,739 3952 [INFO ] - C:\Program Files\osquery\log
2024-01-25 04:38:36,631 3952 [INFO ] - True
2024-01-25 04:38:36,958 3952 [DEBUG] - Running Install-ChocolateyPath -pathType 'Machine' -pathToInstall 'C:\Program Files\osquery'
2024-01-25 04:38:37,004 3952 [DEBUG] - Running Update-SessionEnvironment
2024-01-25 04:38:37,036 3952 [INFO ] - VERBOSE: Refreshing environment variables from the registry.
2024-01-25 04:38:38,144 3952 [INFO ] - PATH environment variable does not have C:\Program Files\osquery in it. Adding...
2024-01-25 04:38:38,144 3952 [INFO ] - VERBOSE: Choosing not to expand environment names
2024-01-25 04:38:38,300 3952 [DEBUG] - Test-ProcessAdminRights: returning True
2024-01-25 04:38:38,379 3952 [DEBUG] - Running Set-EnvironmentVariable -Name 'Path' -Value '%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\ProgramData\chocolatey\bin;C:\Program Files\osquery;' -Scope 'Machine'
2024-01-25 04:38:38,488 3952 [DEBUG] - Registry type for Path is/will be ExpandString
2024-01-25 04:38:38,551 3952 [DEBUG] -
using System;
using System.Runtime.InteropServices;
namespace Win32
{
public class NativeMethods
{
[DllImport("user32.dll", SetLastError = true, CharSet = CharSet.Auto)]
public static extern IntPtr SendMessageTimeout(
IntPtr hWnd, uint Msg, UIntPtr wParam, string lParam,
uint fuFlags, uint uTimeout, out UIntPtr lpdwResult);
}
}
2024-01-25 04:38:39,098 3952 [DEBUG] - Running Update-SessionEnvironment
2024-01-25 04:38:39,098 3952 [INFO ] - VERBOSE: Refreshing environment variables from the registry.
2024-01-25 04:38:40,102 3952 [DEBUG] - ----------------------------------------------------------------------
2024-01-25 04:38:40,144 3952 [DEBUG] - Built-in PowerShell host called with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = '';[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::SystemDefault; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1' -installArguments '' -packageParameters '' -preRunHookScripts $null -postRunHookScripts $null'] exited with '0'.
2024-01-25 04:38:40,161 3952 [WARN ] - SecurityProtocol was set to Tls12, resetting to SystemDefault.
2024-01-25 04:38:40,176 3952 [DEBUG] - Calling command ['"C:\Windows\System32\shutdown.exe" /a']
2024-01-25 04:38:40,520 3952 [DEBUG] - Command ['"C:\Windows\System32\shutdown.exe" /a'] exited with '1116'
2024-01-25 04:38:40,598 3952 [WARN ] - Environment Vars (like PATH) have changed. Close/reopen your shell to
see the changes (or in powershell/cmd.exe just type `refreshenv`).
2024-01-25 04:38:40,618 3952 [DEBUG] - The following values have been added/changed (may contain sensitive data):
2024-01-25 04:38:40,631 3952 [DEBUG] - * ChocolateyLastPathUpdate='133506311189733917' (User)
2024-01-25 04:38:40,645 3952 [DEBUG] - * Path='C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\ProgramData\chocolatey\bin;C:\Program Files\osquery;' (Machine)
2024-01-25 04:38:41,022 3952 [DEBUG] - Capturing package files in 'C:\ProgramData\chocolatey\lib\osquery'
2024-01-25 04:38:41,035 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\LICENSE.txt'
with checksum '0820FFE048483183320E2DAD339898F6'
2024-01-25 04:38:41,052 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\manage-osqueryd.ps1'
with checksum '3CCB09B60C319C2B6A43DF64360BD14F'
2024-01-25 04:38:41,083 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.conf'
with checksum '9027F1A3AF205ED3D209BE5F9AEA1842'
2024-01-25 04:38:41,098 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.flags'
with checksum 'D41D8CD98F00B204E9800998ECF8427E'
2024-01-25 04:38:41,114 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.man'
with checksum 'A4C03558EDB1FF1F5DC4B2194CF3A500'
2024-01-25 04:38:41,209 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg'
with checksum '7AC30B7B4FAD119B05F138774017A842'
2024-01-25 04:38:41,224 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec'
with checksum 'EC5AE84BE1DC9922567A0AE485754939'
2024-01-25 04:38:41,303 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.png'
with checksum '34A5C156791B25AB5D130BD97AECA98C'
2024-01-25 04:38:41,457 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osqueryi.exe'
with checksum '6234BB56D3B2B967EE59D7058491F550'
2024-01-25 04:38:41,522 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery_utils.ps1'
with checksum 'E851BB94C0F783653E3BFF527503A850'
2024-01-25 04:38:41,536 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\VERIFICATION.txt'
with checksum '77039304249AC12CA156465857B19382'
2024-01-25 04:38:41,553 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\certs\certs.pem'
with checksum '6C8779E5755D9DDDF677BF7A52D035CE'
2024-01-25 04:38:41,677 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osqueryd\osqueryd.exe'
with checksum '9AAEE1555A1B50E2A153E6F6256F8AC6'
2024-01-25 04:38:41,693 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\hardware-monitoring.conf'
with checksum '3501087ED8C14DC4CB417D6F749ACAD4'
2024-01-25 04:38:41,693 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\incident-response.conf'
with checksum '9FAF35B5ED735847D0162E4EAA5EF128'
2024-01-25 04:38:41,709 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\it-compliance.conf'
with checksum 'C90DCD8897F172B41770C2A658D4426A'
2024-01-25 04:38:41,723 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\osquery-monitoring.conf'
with checksum '50B79815090F908C57B6317DD2F552BF'
2024-01-25 04:38:41,755 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\ossec-rootkit.conf'
with checksum '788318DBABB9FDBC545315C4CA88FC40'
2024-01-25 04:38:41,771 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\osx-attacks.conf'
with checksum 'EE9CDBF8F06E672092B14DE993117569'
2024-01-25 04:38:41,771 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\unwanted-chrome-extensions.conf'
with checksum 'CF972DFC934DD8E09A628C6B0A3814DD'
2024-01-25 04:38:41,785 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\vuln-management.conf'
with checksum 'F1C82E2A9E05DE6AD9DFD47E16461FA8'
2024-01-25 04:38:41,804 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\windows-attacks.conf'
with checksum '5C705090F10185E33F87AC8A79C445FB'
2024-01-25 04:38:41,804 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\windows-hardening.conf'
with checksum 'EBFB94E06E2914770A4EAEA4E5F83248'
2024-01-25 04:38:41,817 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1'
with checksum '289840CCC12B230068E229CDD37E3703'
2024-01-25 04:38:41,834 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1'
with checksum '780C83D965D277E7A132A4E7208FD339'
2024-01-25 04:38:41,848 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1'
with checksum '3C79361CA6117F7D02C1FEDDF82F07C6'
2024-01-25 04:38:41,848 3952 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1'
with checksum 'E851BB94C0F783653E3BFF527503A850'
2024-01-25 04:38:41,973 3952 [DEBUG] - Calling command ['"C:\ProgramData\chocolatey\tools\shimgen.exe" --path="..\\lib\osquery\osqueryi.exe" --output="C:\ProgramData\chocolatey\bin\osqueryi.exe" --iconpath="C:\ProgramData\chocolatey\lib\osquery\osqueryi.exe"']
2024-01-25 04:38:43,223 3952 [DEBUG] - [ShimGen] [WARN ] Could not extract icon from associated program. Using default. Error:
2024-01-25 04:38:43,223 3952 [DEBUG] - [ShimGen] Selected Icon is invalid
2024-01-25 04:38:44,349 3952 [DEBUG] - [ShimGen] Microsoft (R) Visual C# Compiler version 4.8.3761.0
2024-01-25 04:38:44,401 3952 [DEBUG] - [ShimGen] for C# 5
2024-01-25 04:38:44,441 3952 [DEBUG] - [ShimGen] Copyright (C) Microsoft Corporation. All rights reserved.
2024-01-25 04:38:44,441 3952 [DEBUG] - [ShimGen] This compiler is provided as part of the Microsoft (R) .NET Framework, but only supports language versions up to C# 5, which is no longer the latest version. For compilers that support newer versions of the C# programming language, see http://go.microsoft.com/fwlink/?LinkID=533240
2024-01-25 04:38:44,473 3952 [DEBUG] - [ShimGen] ShimGen has successfully created 'C:\ProgramData\chocolatey\bin\osqueryi.exe'
2024-01-25 04:38:44,473 3952 [DEBUG] - Command ['"C:\ProgramData\chocolatey\tools\shimgen.exe" --path="..\\lib\osquery\osqueryi.exe" --output="C:\ProgramData\chocolatey\bin\osqueryi.exe" --iconpath="C:\ProgramData\chocolatey\lib\osquery\osqueryi.exe"'] exited with '0'
2024-01-25 04:38:44,493 3952 [INFO ] - ShimGen has successfully created a shim for osqueryi.exe
2024-01-25 04:38:44,507 3952 [DEBUG] - Created: C:\ProgramData\chocolatey\bin\osqueryi.exe
Targeting: C:\ProgramData\chocolatey\lib\osquery\osqueryi.exe
IsGui:False
2024-01-25 04:38:44,551 3952 [DEBUG] - Calling command ['"C:\ProgramData\chocolatey\tools\shimgen.exe" --path="..\\lib\osquery\osqueryd\osqueryd.exe" --output="C:\ProgramData\chocolatey\bin\osqueryd.exe" --iconpath="C:\ProgramData\chocolatey\lib\osquery\osqueryd\osqueryd.exe"']
2024-01-25 04:38:45,456 3952 [DEBUG] - [ShimGen] [WARN ] Could not extract icon from associated program. Using default. Error:
2024-01-25 04:38:45,472 3952 [DEBUG] - [ShimGen] Selected Icon is invalid
2024-01-25 04:38:45,834 3952 [DEBUG] - [ShimGen] Microsoft (R) Visual C# Compiler version 4.8.3761.0
2024-01-25 04:38:45,848 3952 [DEBUG] - [ShimGen] for C# 5
2024-01-25 04:38:45,864 3952 [DEBUG] - [ShimGen] Copyright (C) Microsoft Corporation. All rights reserved.
2024-01-25 04:38:45,864 3952 [DEBUG] - [ShimGen] This compiler is provided as part of the Microsoft (R) .NET Framework, but only supports language versions up to C# 5, which is no longer the latest version. For compilers that support newer versions of the C# programming language, see http://go.microsoft.com/fwlink/?LinkID=533240
2024-01-25 04:38:45,879 3952 [DEBUG] - Command ['"C:\ProgramData\chocolatey\tools\shimgen.exe" --path="..\\lib\osquery\osqueryd\osqueryd.exe" --output="C:\ProgramData\chocolatey\bin\osqueryd.exe" --iconpath="C:\ProgramData\chocolatey\lib\osquery\osqueryd\osqueryd.exe"'] exited with '0'
2024-01-25 04:38:45,879 3952 [DEBUG] - [ShimGen] ShimGen has successfully created 'C:\ProgramData\chocolatey\bin\osqueryd.exe'
2024-01-25 04:38:45,879 3952 [INFO ] - ShimGen has successfully created a shim for osqueryd.exe
2024-01-25 04:38:45,895 3952 [DEBUG] - Created: C:\ProgramData\chocolatey\bin\osqueryd.exe
Targeting: C:\ProgramData\chocolatey\lib\osquery\osqueryd\osqueryd.exe
IsGui:False
2024-01-25 04:38:45,957 3952 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\.chocolatey\osquery.5.10.2".
2024-01-25 04:38:46,003 3952 [DEBUG] - There was no original file at 'C:\ProgramData\chocolatey\.chocolatey\osquery.5.10.2\.files'
2024-01-25 04:38:46,019 3952 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\.chocolatey\osquery.5.10.2\.extra".
2024-01-25 04:38:46,035 3952 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\.chocolatey\osquery.5.10.2\.version".
2024-01-25 04:38:46,035 3952 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\.chocolatey\osquery.5.10.2\.sxs".
2024-01-25 04:38:46,051 3952 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\.chocolatey\osquery.5.10.2\.pin".
2024-01-25 04:38:46,067 3952 [DEBUG] - Sending message 'HandlePackageResultCompletedMessage' out if there are subscribers...
2024-01-25 04:38:46,067 3952 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\.chocolateyPending".
2024-01-25 04:38:46,082 3952 [INFO ] - The install of osquery was successful.
2024-01-25 04:38:46,098 3952 [INFO ] - Software install location not explicitly set, it could be in package or
default install location of installer.
2024-01-25 04:38:46,146 3952 [WARN ] -
Chocolatey installed 1/1 packages.
See the log for details (C:\ProgramData\chocolatey\logs\chocolatey.log).
2024-01-25 04:38:46,146 3952 [WARN ] -
Enjoy using Chocolatey? Explore more amazing features to take your
experience to the next level at
https://chocolatey.org/compare
2024-01-25 04:38:46,161 3952 [DEBUG] - Sending message 'PostRunMessage' out if there are subscribers...
2024-01-25 04:38:46,176 3952 [DEBUG] - Exiting with 0
Raw
Uninstall.txt
2024-01-25 04:39:05,504 2448 [DEBUG] - XmlConfiguration is now operational
2024-01-25 04:39:05,754 2448 [DEBUG] - Adding new type 'CygwinService' for type 'IAlternativeSourceRunner' from assembly 'choco'
2024-01-25 04:39:05,770 2448 [DEBUG] - Adding new type 'CygwinService' for type 'IInstallSourceRunner' from assembly 'choco'
2024-01-25 04:39:05,785 2448 [DEBUG] - Adding new type 'PythonService' for type 'IAlternativeSourceRunner' from assembly 'choco'
2024-01-25 04:39:05,785 2448 [DEBUG] - Adding new type 'PythonService' for type 'IListSourceRunner' from assembly 'choco'
2024-01-25 04:39:05,802 2448 [DEBUG] - Adding new type 'PythonService' for type 'IInstallSourceRunner' from assembly 'choco'
2024-01-25 04:39:05,816 2448 [DEBUG] - Adding new type 'PythonService' for type 'IUninstallSourceRunner' from assembly 'choco'
2024-01-25 04:39:05,816 2448 [DEBUG] - Adding new type 'RubyGemsService' for type 'IAlternativeSourceRunner' from assembly 'choco'
2024-01-25 04:39:05,832 2448 [DEBUG] - Adding new type 'RubyGemsService' for type 'IListSourceRunner' from assembly 'choco'
2024-01-25 04:39:05,849 2448 [DEBUG] - Adding new type 'RubyGemsService' for type 'IInstallSourceRunner' from assembly 'choco'
2024-01-25 04:39:05,864 2448 [DEBUG] - Adding new type 'SystemStateValidation' for type 'IValidation' from assembly 'choco'
2024-01-25 04:39:05,864 2448 [DEBUG] - Adding new type 'CacheFolderLockdownValidation' for type 'IValidation' from assembly 'choco'
2024-01-25 04:39:06,848 2448 [DEBUG] - Adding new type 'EmptyOrInvalidUrlMetadataRule' for type 'IMetadataRule' from assembly 'choco'
2024-01-25 04:39:06,848 2448 [DEBUG] - Adding new type 'FrameWorkReferencesMetadataRule' for type 'IMetadataRule' from assembly 'choco'
2024-01-25 04:39:06,864 2448 [DEBUG] - Adding new type 'IconMetadataRule' for type 'IMetadataRule' from assembly 'choco'
2024-01-25 04:39:06,864 2448 [DEBUG] - Adding new type 'LicenseMetadataRule' for type 'IMetadataRule' from assembly 'choco'
2024-01-25 04:39:06,864 2448 [DEBUG] - Adding new type 'PackageTypesMetadataRule' for type 'IMetadataRule' from assembly 'choco'
2024-01-25 04:39:06,879 2448 [DEBUG] - Adding new type 'ReadmeMetadataRule' for type 'IMetadataRule' from assembly 'choco'
2024-01-25 04:39:06,879 2448 [DEBUG] - Adding new type 'RepositoryMetadataRule' for type 'IMetadataRule' from assembly 'choco'
2024-01-25 04:39:06,879 2448 [DEBUG] - Adding new type 'RequireLicenseAcceptanceMetadataRule' for type 'IMetadataRule' from assembly 'choco'
2024-01-25 04:39:06,894 2448 [DEBUG] - Adding new type 'ServicableMetadataRule' for type 'IMetadataRule' from assembly 'choco'
2024-01-25 04:39:06,894 2448 [DEBUG] - Adding new type 'VersionMetadataRule' for type 'IMetadataRule' from assembly 'choco'
2024-01-25 04:39:06,925 2448 [DEBUG] - Registering new command 'cache' in assembly 'choco'
2024-01-25 04:39:06,941 2448 [DEBUG] - Registering new command 'list' in assembly 'choco'
2024-01-25 04:39:06,941 2448 [DEBUG] - Registering new command 'template' in assembly 'choco'
2024-01-25 04:39:06,957 2448 [DEBUG] - Registering new command 'export' in assembly 'choco'
2024-01-25 04:39:06,957 2448 [DEBUG] - Registering new command 'info' in assembly 'choco'
2024-01-25 04:39:06,957 2448 [DEBUG] - Registering new command 'help' in assembly 'choco'
2024-01-25 04:39:06,973 2448 [DEBUG] - Registering new command 'config' in assembly 'choco'
2024-01-25 04:39:06,973 2448 [DEBUG] - Registering new command 'feature' in assembly 'choco'
2024-01-25 04:39:06,988 2448 [DEBUG] - Registering new command 'new' in assembly 'choco'
2024-01-25 04:39:06,988 2448 [DEBUG] - Registering new command 'outdated' in assembly 'choco'
2024-01-25 04:39:07,004 2448 [DEBUG] - Registering new command 'pack' in assembly 'choco'
2024-01-25 04:39:07,004 2448 [DEBUG] - Registering new command 'pin' in assembly 'choco'
2024-01-25 04:39:07,004 2448 [DEBUG] - Registering new command 'push' in assembly 'choco'
2024-01-25 04:39:07,019 2448 [DEBUG] - Registering new command 'apikey' in assembly 'choco'
2024-01-25 04:39:07,019 2448 [DEBUG] - Registering new command 'source' in assembly 'choco'
2024-01-25 04:39:07,035 2448 [DEBUG] - Registering new command 'uninstall' in assembly 'choco'
2024-01-25 04:39:07,035 2448 [DEBUG] - Registering new command 'upgrade' in assembly 'choco'
2024-01-25 04:39:07,054 2448 [DEBUG] - Registering new command 'search' in assembly 'choco'
2024-01-25 04:39:07,054 2448 [DEBUG] - Registering new command 'unpackself' in assembly 'choco'
2024-01-25 04:39:07,066 2448 [DEBUG] - Registering new command 'install' in assembly 'choco'
2024-01-25 04:39:07,394 2448 [INFO ] - ============================================================
2024-01-25 04:39:07,894 2448 [INFO ] - Chocolatey v2.2.2
2024-01-25 04:39:07,925 2448 [DEBUG] - Chocolatey is running on Windows v 10.0.17763.0
2024-01-25 04:39:07,941 2448 [DEBUG] - Attempting to delete file "C:/ProgramData/chocolatey/choco.exe.old".
2024-01-25 04:39:07,957 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\choco.exe.old".
2024-01-25 04:39:07,972 2448 [DEBUG] - Command line: "C:\ProgramData\chocolatey\choco.exe" uninstall osquery --version 5.10.2 -dvy --execution-timeout=2700
2024-01-25 04:39:07,988 2448 [DEBUG] - Received arguments: uninstall osquery --version 5.10.2 -dvy --execution-timeout=2700
2024-01-25 04:39:08,206 2448 [DEBUG] - RemovePendingPackagesTask is now ready and waiting for PreRunMessage.
2024-01-25 04:39:08,253 2448 [DEBUG] - Sending message 'PreRunMessage' out if there are subscribers...
2024-01-25 04:39:08,285 2448 [DEBUG] - [Pending] Removing all pending packages that should not be considered installed...
2024-01-25 04:39:08,456 2448 [DEBUG] - Performing validation checks.
2024-01-25 04:39:08,472 2448 [DEBUG] - Global Configuration Validation Checks:
2024-01-25 04:39:08,472 2448 [DEBUG] - - Package Exit Code / Exit On Reboot = Checked
2024-01-25 04:39:08,488 2448 [DEBUG] - System State Validation Checks:
2024-01-25 04:39:08,504 2448 [DEBUG] - Reboot Requirement Checks:
2024-01-25 04:39:08,519 2448 [DEBUG] - - Pending Computer Rename = Checked
2024-01-25 04:39:08,536 2448 [DEBUG] - - Pending Component Based Servicing = Checked
2024-01-25 04:39:08,536 2448 [DEBUG] - - Pending Windows Auto Update = Checked
2024-01-25 04:39:08,551 2448 [DEBUG] - - Pending File Rename Operations = Ignored
2024-01-25 04:39:08,566 2448 [DEBUG] - - Pending Windows Package Installer = Checked
2024-01-25 04:39:08,566 2448 [DEBUG] - - Pending Windows Package Installer SysWow64 = Checked
2024-01-25 04:39:08,582 2448 [DEBUG] - Cache Folder Lockdown Checks:
2024-01-25 04:39:08,582 2448 [DEBUG] - - Elevated State = Checked
2024-01-25 04:39:08,598 2448 [DEBUG] - - Folder Exists = Checked
2024-01-25 04:39:08,613 2448 [DEBUG] - - Folder lockdown = Checked
2024-01-25 04:39:08,646 2448 [INFO ] - 3 validations performed. 3 success(es), 0 warning(s), and 0 error(s).
2024-01-25 04:39:08,707 2448 [DEBUG] - The source 'c:\cached-packages;https://community.chocolatey.org/api/v2/' evaluated to a 'normal' source type
2024-01-25 04:39:08,707 2448 [DEBUG] -
NOTE: Hiding sensitive configuration data! Please double and triple
check to be sure no sensitive data is shown, especially if copying
output to a gist for review.
2024-01-25 04:39:08,832 2448 [DEBUG] - Configuration: CommandName='uninstall'|
CacheLocation='C:\Users\vagrant\AppData\Local\Temp\chocolatey'|
CommandExecutionTimeoutSeconds='2700'|WebRequestTimeoutSeconds='30'|
Sources='c:\cached-packages;https://community.chocolatey.org/api/v2/'|
SourceType='normal'|ShowOnlineHelp='False'|Debug='True'|Verbose='True'|
Trace='False'|Force='False'|Noop='False'|HelpRequested='False'|
UnsuccessfulParsing='False'|RegularOutput='True'|QuietOutput='False'|
PromptForConfirmation='False'|DisableCompatibilityChecks='False'|
AcceptLicense='True'|AllowUnofficialBuild='False'|Input='osquery'|
Version='5.10.2'|AllVersions='False'|
SkipPackageInstallProvider='False'|
SkipHookScripts='False'|PackageNames='osquery'|Prerelease='False'|
ForceX86='False'|OverrideArguments='False'|NotSilent='False'|
ApplyPackageParametersToDependencies='False'|
ApplyInstallArgumentsToDependencies='False'|IgnoreDependencies='False'|
CacheExpirationInMinutes='30'|AllowDowngrade='False'|
ForceDependencies='False'|PinPackage='False'|
Information.PlatformType='Windows'|
Information.PlatformVersion='10.0.17763.0'|
Information.PlatformName='Windows Server 2016'|
Information.ChocolateyVersion='2.2.2.0'|
Information.ChocolateyProductVersion='2.2.2'|
Information.FullName='choco, Version=2.2.2.0, Culture=neutral, PublicKeyToken=79d02ea9cad655eb'|
Information.Is64BitOperatingSystem='True'|
Information.Is64BitProcess='True'|Information.IsInteractive='False'|
Information.UserName='vagrant'|
Information.UserDomainName='WIN-LAQOCN24NUI'|
Information.IsUserAdministrator='True'|
Information.IsUserSystemAccount='False'|
Information.IsUserRemoteDesktop='False'|
Information.IsUserRemote='True'|
Information.IsProcessElevated='True'|
Information.IsLicensedVersion='False'|
Information.IsLicensedAssemblyLoaded='False'|
Information.LicenseType='Foss'|
Information.CurrentDirectory='C:\Users\vagrant'|
Features.AutoUninstaller='True'|Features.ChecksumFiles='True'|
Features.AllowEmptyChecksums='False'|
Features.AllowEmptyChecksumsSecure='True'|
Features.FailOnAutoUninstaller='False'|
Features.FailOnStandardError='False'|Features.UsePowerShellHost='True'|
Features.LogEnvironmentValues='True'|Features.LogWithoutColor='False'|
Features.VirusCheck='False'|
Features.FailOnInvalidOrMissingLicense='False'|
Features.IgnoreInvalidOptionsSwitches='True'|
Features.UsePackageExitCodes='True'|
Features.UseEnhancedExitCodes='False'|
Features.UseFipsCompliantChecksums='False'|
Features.ShowNonElevatedWarnings='True'|
Features.ShowDownloadProgress='False'|
Features.StopOnFirstPackageFailure='False'|
Features.UseRememberedArgumentsForUpgrades='False'|
Features.IgnoreUnfoundPackagesOnUpgradeOutdated='False'|
Features.SkipPackageUpgradesWhenNotInstalled='False'|
Features.RemovePackageInformationOnUninstall='False'|
Features.ExitOnRebootDetected='False'|
Features.LogValidationResultsOnWarnings='True'|
Features.UsePackageRepositoryOptimizations='True'|
ListCommand.LocalOnly='False'|ListCommand.IdOnly='False'|
ListCommand.IncludeRegistryPrograms='False'|ListCommand.PageSize='25'|
ListCommand.Exact='False'|ListCommand.ByIdOnly='False'|
ListCommand.ByTagOnly='False'|ListCommand.IdStartsWith='False'|
ListCommand.OrderByPopularity='False'|ListCommand.ApprovedOnly='False'|
ListCommand.DownloadCacheAvailable='False'|
ListCommand.NotBroken='False'|
ListCommand.IncludeVersionOverrides='False'|
ListCommand.ExplicitPageSize='False'|
ListCommand.ExplicitSource='False'|
UpgradeCommand.FailOnUnfound='False'|
UpgradeCommand.FailOnNotInstalled='False'|
UpgradeCommand.NotifyOnlyAvailableUpgrades='False'|
UpgradeCommand.ExcludePrerelease='False'|
NewCommand.AutomaticPackage='False'|
NewCommand.UseOriginalTemplate='False'|SourceCommand.Command='unknown'|
SourceCommand.Priority='0'|SourceCommand.BypassProxy='False'|
SourceCommand.AllowSelfService='False'|
SourceCommand.VisibleToAdminsOnly='False'|
FeatureCommand.Command='unknown'|ConfigCommand.Command='Unknown'|
ApiKeyCommand.Command='Unknown'|PinCommand.Command='Unknown'|
OutdatedCommand.IgnorePinned='False'|
ExportCommand.IncludeVersionNumbers='False'|Proxy.BypassOnLocal='True'|
TemplateCommand.Command='unknown'|CacheCommand.Command='Unknown'|
CacheCommand.RemoveExpiredItemsOnly='False'|
2024-01-25 04:39:08,849 2448 [DEBUG] - _ Chocolatey:ChocolateyUninstallCommand - Normal Run Mode _
2024-01-25 04:39:08,864 2448 [INFO ] - Uninstalling the following packages:
2024-01-25 04:39:08,882 2448 [INFO ] - osquery
2024-01-25 04:39:08,894 2448 [DEBUG] - Current environment values (may contain sensitive data):
2024-01-25 04:39:08,910 2448 [DEBUG] - * 'Path'='C:\Users\vagrant\AppData\Local\Microsoft\WindowsApps;' ('User')
2024-01-25 04:39:08,910 2448 [DEBUG] - * 'TEMP'='C:\Users\vagrant\AppData\Local\Temp' ('User')
2024-01-25 04:39:08,910 2448 [DEBUG] - * 'TMP'='C:\Users\vagrant\AppData\Local\Temp' ('User')
2024-01-25 04:39:08,926 2448 [DEBUG] - * 'ChocolateyLastPathUpdate'='133506311189733917' ('User')
2024-01-25 04:39:08,926 2448 [DEBUG] - * 'ComSpec'='C:\Windows\system32\cmd.exe' ('Machine')
2024-01-25 04:39:08,942 2448 [DEBUG] - * 'DriverData'='C:\Windows\System32\Drivers\DriverData' ('Machine')
2024-01-25 04:39:08,942 2448 [DEBUG] - * 'OS'='Windows_NT' ('Machine')
2024-01-25 04:39:08,958 2448 [DEBUG] - * 'Path'='C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\ProgramData\chocolatey\bin;C:\Program Files\osquery;' ('Machine')
2024-01-25 04:39:08,958 2448 [DEBUG] - * 'PATHEXT'='.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC' ('Machine')
2024-01-25 04:39:08,972 2448 [DEBUG] - * 'PROCESSOR_ARCHITECTURE'='AMD64' ('Machine')
2024-01-25 04:39:08,972 2448 [DEBUG] - * 'PSModulePath'='C:\Program Files\WindowsPowerShell\Modules;C:\Windows\system32\WindowsPowerShell\v1.0\Modules' ('Machine')
2024-01-25 04:39:08,988 2448 [DEBUG] - * 'TEMP'='C:\Windows\TEMP' ('Machine')
2024-01-25 04:39:08,988 2448 [DEBUG] - * 'TMP'='C:\Windows\TEMP' ('Machine')
2024-01-25 04:39:09,004 2448 [DEBUG] - * 'USERNAME'='SYSTEM' ('Machine')
2024-01-25 04:39:09,004 2448 [DEBUG] - * 'windir'='C:\Windows' ('Machine')
2024-01-25 04:39:09,004 2448 [DEBUG] - * 'NUMBER_OF_PROCESSORS'='10' ('Machine')
2024-01-25 04:39:09,020 2448 [DEBUG] - * 'PROCESSOR_LEVEL'='6' ('Machine')
2024-01-25 04:39:09,020 2448 [DEBUG] - * 'PROCESSOR_IDENTIFIER'='Intel64 Family 6 Model 85 Stepping 7, GenuineIntel' ('Machine')
2024-01-25 04:39:09,020 2448 [DEBUG] - * 'PROCESSOR_REVISION'='5507' ('Machine')
2024-01-25 04:39:09,036 2448 [DEBUG] - * 'ChocolateyInstall'='C:\ProgramData\chocolatey' ('Machine')
2024-01-25 04:39:09,317 2448 [DEBUG] - Running list with the following filter = ''
2024-01-25 04:39:09,333 2448 [DEBUG] - --- Start of List ---
2024-01-25 04:39:09,660 2448 [DEBUG] - Resolving resource PackageSearchResource for source C:\ProgramData\chocolatey\lib
2024-01-25 04:39:10,332 2448 [DEBUG] - chocolatey 2.2.2
2024-01-25 04:39:10,348 2448 [DEBUG] - chocolatey-windowsupdate.extension 1.0.5
2024-01-25 04:39:10,364 2448 [DEBUG] - KB2919355 1.0.20160915
2024-01-25 04:39:10,378 2448 [DEBUG] - KB2919442 1.0.20160915
2024-01-25 04:39:10,395 2448 [DEBUG] - KB2999226 1.0.20181019
2024-01-25 04:39:10,395 2448 [DEBUG] - KB3035131 1.0.3
2024-01-25 04:39:10,410 2448 [DEBUG] - KB3118401 1.0.5
2024-01-25 04:39:10,473 2448 [DEBUG] - osquery 5.10.2
2024-01-25 04:39:10,489 2448 [DEBUG] - virtualbox-guest-additions-guest.install 7.0.14
2024-01-25 04:39:10,489 2448 [DEBUG] - --- End of List ---
2024-01-25 04:39:10,504 2448 [DEBUG] - Running list with the following filter = ''
2024-01-25 04:39:10,504 2448 [DEBUG] - --- Start of List ---
2024-01-25 04:39:10,555 2448 [DEBUG] - chocolatey 2.2.2
2024-01-25 04:39:10,567 2448 [DEBUG] - chocolatey-windowsupdate.extension 1.0.5
2024-01-25 04:39:10,582 2448 [DEBUG] - KB2919355 1.0.20160915
2024-01-25 04:39:10,582 2448 [DEBUG] - KB2919442 1.0.20160915
2024-01-25 04:39:10,598 2448 [DEBUG] - KB2999226 1.0.20181019
2024-01-25 04:39:10,598 2448 [DEBUG] - KB3035131 1.0.3
2024-01-25 04:39:10,615 2448 [DEBUG] - KB3118401 1.0.5
2024-01-25 04:39:10,644 2448 [DEBUG] - osquery 5.10.2
2024-01-25 04:39:10,661 2448 [DEBUG] - virtualbox-guest-additions-guest.install 7.0.14
2024-01-25 04:39:10,661 2448 [DEBUG] - --- End of List ---
2024-01-25 04:39:10,753 2448 [DEBUG] - Running list with the following filter = ''
2024-01-25 04:39:10,771 2448 [DEBUG] - --- Start of List ---
2024-01-25 04:39:10,786 2448 [DEBUG] - chocolatey 2.2.2
2024-01-25 04:39:10,847 2448 [DEBUG] - chocolatey-windowsupdate.extension 1.0.5
2024-01-25 04:39:10,864 2448 [DEBUG] - KB2919355 1.0.20160915
2024-01-25 04:39:10,878 2448 [DEBUG] - KB2919442 1.0.20160915
2024-01-25 04:39:10,878 2448 [DEBUG] - KB2999226 1.0.20181019
2024-01-25 04:39:10,894 2448 [DEBUG] - KB3035131 1.0.3
2024-01-25 04:39:10,911 2448 [DEBUG] - KB3118401 1.0.5
2024-01-25 04:39:10,944 2448 [DEBUG] - osquery 5.10.2
2024-01-25 04:39:10,944 2448 [DEBUG] - virtualbox-guest-additions-guest.install 7.0.14
2024-01-25 04:39:10,957 2448 [DEBUG] - --- End of List ---
2024-01-25 04:39:11,019 2448 [INFO ] -
osquery v5.10.2
2024-01-25 04:39:11,053 2448 [DEBUG] - Running beforeModify step for 'osquery'
2024-01-25 04:39:11,113 2448 [DEBUG] - Setting installer args for osquery
2024-01-25 04:39:11,113 2448 [DEBUG] - Setting package parameters for osquery
2024-01-25 04:39:11,128 2448 [DEBUG] - Contents of 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1':
2024-01-25 04:39:11,146 2448 [DEBUG] - # Copyright (c) 2014-present, The osquery authors
#
# This source code is licensed as defined by the LICENSE file found in the
# root directory of this source tree.
#
# SPDX-License-Identifier: (Apache-2.0 OR GPL-2.0-only)
# This library file contains constant definitions and helper functions
#Requires -Version 3.0
. (Join-Path "$PSScriptRoot" "osquery_utils.ps1")
# Ensure the service is stopped and processes are not running if exists.
if ((Get-Service $serviceName -ErrorAction SilentlyContinue) -and `
(Get-Service $serviceName).Status -eq 'Running') {
Stop-Service $serviceName
# If we find zombie processes, ensure they're termintated
$proc = Get-Process | Where-Object { $_.ProcessName -eq 'osqueryd' }
if ($null -ne $proc) {
Stop-Process -Force $proc -ErrorAction SilentlyContinue
}
}
# Lastly, ensure that the Deny Write ACLs have been removed before modifying
if (Test-Path $daemonFolder) {
Set-DenyWriteAcl $daemonFolder 'Remove'
}
if (Test-Path $extensionsFolder) {
Set-DenyWriteAcl $extensionsFolder 'Remove'
}
2024-01-25 04:39:11,208 2448 [DEBUG] - Calling built-in PowerShell host with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = '';[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::SystemDefault; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1' -installArguments '' -packageParameters '' -preRunHookScripts $null -postRunHookScripts $null']
2024-01-25 04:39:11,223 2448 [DEBUG] - Redirecting System.Management.Automation.resources, Version=3.0.0.0, Culture=en-US, PublicKeyToken=31bf3856ad364e35, requested by ''
2024-01-25 04:39:12,129 2448 [DEBUG] - Host version is 5.1.17763.1, PowerShell Version is '5.1.17763.3770' and CLR Version is '4.0.30319.42000'.
2024-01-25 04:39:12,738 2448 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2024-01-25 04:39:12,754 2448 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2024-01-25 04:39:12,754 2448 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyConfigValue'.
2024-01-25 04:39:12,770 2448 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyPath'.
2024-01-25 04:39:12,770 2448 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2024-01-25 04:39:12,785 2448 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2024-01-25 04:39:12,785 2448 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2024-01-25 04:39:12,801 2448 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2024-01-25 04:39:12,801 2448 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2024-01-25 04:39:12,817 2448 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2024-01-25 04:39:12,817 2448 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2024-01-25 04:39:12,832 2448 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2024-01-25 04:39:12,849 2448 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2024-01-25 04:39:12,849 2448 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2024-01-25 04:39:12,863 2448 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2024-01-25 04:39:12,863 2448 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2024-01-25 04:39:12,879 2448 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2024-01-25 04:39:12,879 2448 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2024-01-25 04:39:12,896 2448 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2024-01-25 04:39:12,896 2448 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2024-01-25 04:39:12,911 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2024-01-25 04:39:12,911 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2024-01-25 04:39:12,925 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2024-01-25 04:39:12,925 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2024-01-25 04:39:12,942 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2024-01-25 04:39:12,942 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2024-01-25 04:39:12,956 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2024-01-25 04:39:12,956 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2024-01-25 04:39:12,972 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2024-01-25 04:39:12,972 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2024-01-25 04:39:12,989 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2024-01-25 04:39:12,989 2448 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2024-01-25 04:39:13,004 2448 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2024-01-25 04:39:13,020 2448 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2024-01-25 04:39:13,020 2448 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2024-01-25 04:39:13,035 2448 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2024-01-25 04:39:13,035 2448 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2024-01-25 04:39:13,050 2448 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2024-01-25 04:39:13,050 2448 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2024-01-25 04:39:13,066 2448 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2024-01-25 04:39:13,066 2448 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2024-01-25 04:39:13,082 2448 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2024-01-25 04:39:13,082 2448 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2024-01-25 04:39:13,098 2448 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2024-01-25 04:39:13,098 2448 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2024-01-25 04:39:13,114 2448 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2024-01-25 04:39:13,114 2448 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2024-01-25 04:39:13,129 2448 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2024-01-25 04:39:13,146 2448 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2024-01-25 04:39:13,146 2448 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2024-01-25 04:39:13,162 2448 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2024-01-25 04:39:13,207 2448 [DEBUG] - Loading community extensions
2024-01-25 04:39:13,253 2448 [DEBUG] - Importing 'C:\ProgramData\chocolatey\extensions\chocolatey-windowsupdate\chocolatey-windowsupdate.psm1'
2024-01-25 04:39:13,253 2448 [INFO ] - VERBOSE: Loading module from path 'C:\ProgramData\chocolatey\extensions\chocolatey-windowsupdate\chocolatey-windowsupdate.psm1'.
2024-01-25 04:39:13,394 2448 [INFO ] - VERBOSE: Exporting function 'Install-WindowsUpdate'.
2024-01-25 04:39:13,410 2448 [INFO ] - VERBOSE: Exporting function 'Test-WindowsUpdate'.
2024-01-25 04:39:13,410 2448 [INFO ] - VERBOSE: Importing function 'Install-WindowsUpdate'.
2024-01-25 04:39:13,426 2448 [INFO ] - VERBOSE: Importing function 'Test-WindowsUpdate'.
2024-01-25 04:39:13,426 2448 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2024-01-25 04:39:13,441 2448 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2024-01-25 04:39:13,441 2448 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyConfigValue'.
2024-01-25 04:39:13,456 2448 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyPath'.
2024-01-25 04:39:13,456 2448 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2024-01-25 04:39:13,456 2448 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2024-01-25 04:39:13,473 2448 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2024-01-25 04:39:13,473 2448 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2024-01-25 04:39:13,490 2448 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2024-01-25 04:39:13,505 2448 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2024-01-25 04:39:13,520 2448 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2024-01-25 04:39:13,520 2448 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2024-01-25 04:39:13,535 2448 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2024-01-25 04:39:13,535 2448 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2024-01-25 04:39:13,552 2448 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2024-01-25 04:39:13,552 2448 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2024-01-25 04:39:13,566 2448 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2024-01-25 04:39:13,566 2448 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2024-01-25 04:39:13,582 2448 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2024-01-25 04:39:13,582 2448 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2024-01-25 04:39:13,582 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2024-01-25 04:39:13,598 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2024-01-25 04:39:13,598 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2024-01-25 04:39:13,612 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2024-01-25 04:39:13,676 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2024-01-25 04:39:13,676 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2024-01-25 04:39:13,691 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2024-01-25 04:39:13,691 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2024-01-25 04:39:13,691 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2024-01-25 04:39:13,707 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2024-01-25 04:39:13,707 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2024-01-25 04:39:13,722 2448 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2024-01-25 04:39:13,722 2448 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2024-01-25 04:39:13,740 2448 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2024-01-25 04:39:13,740 2448 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2024-01-25 04:39:13,754 2448 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2024-01-25 04:39:13,754 2448 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2024-01-25 04:39:13,769 2448 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2024-01-25 04:39:13,769 2448 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2024-01-25 04:39:13,785 2448 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2024-01-25 04:39:13,785 2448 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2024-01-25 04:39:13,801 2448 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2024-01-25 04:39:13,801 2448 [INFO ] - VERBOSE: Exporting function 'Install-WindowsUpdate'.
2024-01-25 04:39:13,817 2448 [INFO ] - VERBOSE: Exporting function 'Test-WindowsUpdate'.
2024-01-25 04:39:13,817 2448 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2024-01-25 04:39:13,833 2448 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2024-01-25 04:39:13,848 2448 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2024-01-25 04:39:13,848 2448 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2024-01-25 04:39:13,848 2448 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2024-01-25 04:39:13,865 2448 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2024-01-25 04:39:13,865 2448 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2024-01-25 04:39:13,882 2448 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2024-01-25 04:39:13,882 2448 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2024-01-25 04:39:13,894 2448 [INFO ] - VERBOSE: Importing function 'Format-FileSize'.
2024-01-25 04:39:13,894 2448 [INFO ] - VERBOSE: Importing function 'Get-ChecksumValid'.
2024-01-25 04:39:13,909 2448 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyConfigValue'.
2024-01-25 04:39:13,909 2448 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyPath'.
2024-01-25 04:39:13,926 2448 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyUnzip'.
2024-01-25 04:39:13,926 2448 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyWebFile'.
2024-01-25 04:39:13,942 2448 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariable'.
2024-01-25 04:39:13,942 2448 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariableNames'.
2024-01-25 04:39:13,957 2448 [INFO ] - VERBOSE: Importing function 'Get-FtpFile'.
2024-01-25 04:39:13,957 2448 [INFO ] - VERBOSE: Importing function 'Get-OSArchitectureWidth'.
2024-01-25 04:39:13,973 2448 [INFO ] - VERBOSE: Importing function 'Get-PackageParameters'.
2024-01-25 04:39:13,973 2448 [INFO ] - VERBOSE: Importing function 'Get-PackageParametersBuiltIn'.
2024-01-25 04:39:13,989 2448 [INFO ] - VERBOSE: Importing function 'Get-ToolsLocation'.
2024-01-25 04:39:13,989 2448 [INFO ] - VERBOSE: Importing function 'Get-UACEnabled'.
2024-01-25 04:39:14,004 2448 [INFO ] - VERBOSE: Importing function 'Get-UninstallRegistryKey'.
2024-01-25 04:39:14,004 2448 [INFO ] - VERBOSE: Importing function 'Get-VirusCheckValid'.
2024-01-25 04:39:14,004 2448 [INFO ] - VERBOSE: Importing function 'Get-WebFile'.
2024-01-25 04:39:14,022 2448 [INFO ] - VERBOSE: Importing function 'Get-WebFileName'.
2024-01-25 04:39:14,036 2448 [INFO ] - VERBOSE: Importing function 'Get-WebHeaders'.
2024-01-25 04:39:14,036 2448 [INFO ] - VERBOSE: Importing function 'Install-BinFile'.
2024-01-25 04:39:14,051 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyEnvironmentVariable'.
2024-01-25 04:39:14,051 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyExplorerMenuItem'.
2024-01-25 04:39:14,051 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyFileAssociation'.
2024-01-25 04:39:14,069 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyInstallPackage'.
2024-01-25 04:39:14,069 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPackage'.
2024-01-25 04:39:14,083 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPath'.
2024-01-25 04:39:14,083 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPinnedTaskBarItem'.
2024-01-25 04:39:14,099 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPowershellCommand'.
2024-01-25 04:39:14,099 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyShortcut'.
2024-01-25 04:39:14,113 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyVsixPackage'.
2024-01-25 04:39:14,113 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyZipPackage'.
2024-01-25 04:39:14,130 2448 [INFO ] - VERBOSE: Importing function 'Install-Vsix'.
2024-01-25 04:39:14,146 2448 [INFO ] - VERBOSE: Importing function 'Install-WindowsUpdate'.
2024-01-25 04:39:14,146 2448 [INFO ] - VERBOSE: Importing function 'Set-EnvironmentVariable'.
2024-01-25 04:39:14,161 2448 [INFO ] - VERBOSE: Importing function 'Set-PowerShellExitCode'.
2024-01-25 04:39:14,161 2448 [INFO ] - VERBOSE: Importing function 'Start-ChocolateyProcessAsAdmin'.
2024-01-25 04:39:14,176 2448 [INFO ] - VERBOSE: Importing function 'Test-ProcessAdminRights'.
2024-01-25 04:39:14,176 2448 [INFO ] - VERBOSE: Importing function 'Test-WindowsUpdate'.
2024-01-25 04:39:14,191 2448 [INFO ] - VERBOSE: Importing function 'Uninstall-BinFile'.
2024-01-25 04:39:14,191 2448 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyEnvironmentVariable'.
2024-01-25 04:39:14,207 2448 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyPackage'.
2024-01-25 04:39:14,207 2448 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyZipPackage'.
2024-01-25 04:39:14,223 2448 [INFO ] - VERBOSE: Importing function 'Update-SessionEnvironment'.
2024-01-25 04:39:14,223 2448 [INFO ] - VERBOSE: Importing function 'Write-FunctionCallLogMessage'.
2024-01-25 04:39:14,269 2448 [INFO ] - VERBOSE: Importing alias 'Add-BinFile'.
2024-01-25 04:39:14,269 2448 [INFO ] - VERBOSE: Importing alias 'Generate-BinFile'.
2024-01-25 04:39:14,286 2448 [INFO ] - VERBOSE: Importing alias 'Get-InstallRegistryKey'.
2024-01-25 04:39:14,286 2448 [INFO ] - VERBOSE: Importing alias 'Get-OSBitness'.
2024-01-25 04:39:14,301 2448 [INFO ] - VERBOSE: Importing alias 'Get-ProcessorBits'.
2024-01-25 04:39:14,301 2448 [INFO ] - VERBOSE: Importing alias 'Invoke-ChocolateyProcess'.
2024-01-25 04:39:14,317 2448 [INFO ] - VERBOSE: Importing alias 'refreshenv'.
2024-01-25 04:39:14,317 2448 [INFO ] - VERBOSE: Importing alias 'Remove-BinFile'.
2024-01-25 04:39:14,332 2448 [INFO ] - VERBOSE: Importing alias 'Start-ChocolateyProcess'.
2024-01-25 04:39:14,441 2448 [DEBUG] - ---------------------------Script Execution---------------------------
2024-01-25 04:39:14,473 2448 [DEBUG] - Running 'ChocolateyScriptRunner' for osquery v5.10.2 with packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1', packageFolder:'C:\ProgramData\chocolatey\lib\osquery', installArguments: '', packageParameters: '', preRunHookScripts: '', postRunHookScripts: '',
2024-01-25 04:39:14,550 2448 [DEBUG] - Running package script 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1'
2024-01-25 04:39:14,863 2448 [INFO ] - True
2024-01-25 04:39:14,896 2448 [INFO ] - True
2024-01-25 04:39:14,942 2448 [DEBUG] - ----------------------------------------------------------------------
2024-01-25 04:39:14,973 2448 [DEBUG] - Built-in PowerShell host called with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = '';[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::SystemDefault; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1' -installArguments '' -packageParameters '' -preRunHookScripts $null -postRunHookScripts $null'] exited with '0'.
2024-01-25 04:39:14,973 2448 [WARN ] - SecurityProtocol was set to Tls12, resetting to SystemDefault.
2024-01-25 04:39:15,050 2448 [DEBUG] - Backing up package files for 'osquery'
2024-01-25 04:39:15,269 2448 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib-bkp\osquery".
2024-01-25 04:39:15,285 2448 [DEBUG] - Moving C:\ProgramData\chocolatey\lib\osquery to C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2
2024-01-25 04:39:15,302 2448 [DEBUG] - Moving 'C:\ProgramData\chocolatey\lib\osquery'
to 'C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2'
2024-01-25 04:39:17,316 2448 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib\osquery".
2024-01-25 04:39:17,316 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\LICENSE.txt"
to "C:\ProgramData\chocolatey\lib\osquery\LICENSE.txt".
2024-01-25 04:39:17,332 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\manage-osqueryd.ps1"
to "C:\ProgramData\chocolatey\lib\osquery\manage-osqueryd.ps1".
2024-01-25 04:39:17,348 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\osquery.conf"
to "C:\ProgramData\chocolatey\lib\osquery\osquery.conf".
2024-01-25 04:39:17,348 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\osquery.flags"
to "C:\ProgramData\chocolatey\lib\osquery\osquery.flags".
2024-01-25 04:39:17,363 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\osquery.man"
to "C:\ProgramData\chocolatey\lib\osquery\osquery.man".
2024-01-25 04:39:17,363 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\osquery.nupkg"
to "C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg".
2024-01-25 04:39:17,395 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\osquery.nuspec"
to "C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec".
2024-01-25 04:39:17,409 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\osquery.png"
to "C:\ProgramData\chocolatey\lib\osquery\osquery.png".
2024-01-25 04:39:17,409 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\osqueryi.exe"
to "C:\ProgramData\chocolatey\lib\osquery\osqueryi.exe".
2024-01-25 04:39:17,458 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\osquery_utils.ps1"
to "C:\ProgramData\chocolatey\lib\osquery\osquery_utils.ps1".
2024-01-25 04:39:17,458 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\VERIFICATION.txt"
to "C:\ProgramData\chocolatey\lib\osquery\VERIFICATION.txt".
2024-01-25 04:39:17,473 2448 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib\osquery\certs".
2024-01-25 04:39:17,473 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\certs\certs.pem"
to "C:\ProgramData\chocolatey\lib\osquery\certs\certs.pem".
2024-01-25 04:39:17,489 2448 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib\osquery\osqueryd".
2024-01-25 04:39:17,504 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\osqueryd\osqueryd.exe"
to "C:\ProgramData\chocolatey\lib\osquery\osqueryd\osqueryd.exe".
2024-01-25 04:39:17,538 2448 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib\osquery\packs".
2024-01-25 04:39:17,538 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\packs\hardware-monitoring.conf"
to "C:\ProgramData\chocolatey\lib\osquery\packs\hardware-monitoring.conf".
2024-01-25 04:39:17,551 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\packs\incident-response.conf"
to "C:\ProgramData\chocolatey\lib\osquery\packs\incident-response.conf".
2024-01-25 04:39:17,551 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\packs\it-compliance.conf"
to "C:\ProgramData\chocolatey\lib\osquery\packs\it-compliance.conf".
2024-01-25 04:39:17,567 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\packs\osquery-monitoring.conf"
to "C:\ProgramData\chocolatey\lib\osquery\packs\osquery-monitoring.conf".
2024-01-25 04:39:17,582 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\packs\ossec-rootkit.conf"
to "C:\ProgramData\chocolatey\lib\osquery\packs\ossec-rootkit.conf".
2024-01-25 04:39:17,582 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\packs\osx-attacks.conf"
to "C:\ProgramData\chocolatey\lib\osquery\packs\osx-attacks.conf".
2024-01-25 04:39:17,598 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\packs\unwanted-chrome-extensions.conf"
to "C:\ProgramData\chocolatey\lib\osquery\packs\unwanted-chrome-extensions.conf".
2024-01-25 04:39:17,598 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\packs\vuln-management.conf"
to "C:\ProgramData\chocolatey\lib\osquery\packs\vuln-management.conf".
2024-01-25 04:39:17,615 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\packs\windows-attacks.conf"
to "C:\ProgramData\chocolatey\lib\osquery\packs\windows-attacks.conf".
2024-01-25 04:39:17,630 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\packs\windows-hardening.conf"
to "C:\ProgramData\chocolatey\lib\osquery\packs\windows-hardening.conf".
2024-01-25 04:39:17,630 2448 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib\osquery\tools".
2024-01-25 04:39:17,644 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\tools\chocolateyBeforeModify.ps1"
to "C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1".
2024-01-25 04:39:17,644 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\tools\chocolateyinstall.ps1"
to "C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1".
2024-01-25 04:39:17,660 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\tools\chocolateyuninstall.ps1"
to "C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1".
2024-01-25 04:39:17,676 2448 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\5.10.2\tools\osquery_utils.ps1"
to "C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1".
2024-01-25 04:39:19,224 2448 [DEBUG] - Capturing package files in 'C:\ProgramData\chocolatey\lib\osquery'
2024-01-25 04:39:19,224 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\LICENSE.txt'
with checksum '0820FFE048483183320E2DAD339898F6'
2024-01-25 04:39:19,238 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\manage-osqueryd.ps1'
with checksum '3CCB09B60C319C2B6A43DF64360BD14F'
2024-01-25 04:39:19,238 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.conf'
with checksum '9027F1A3AF205ED3D209BE5F9AEA1842'
2024-01-25 04:39:19,255 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.flags'
with checksum 'D41D8CD98F00B204E9800998ECF8427E'
2024-01-25 04:39:19,255 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.man'
with checksum 'A4C03558EDB1FF1F5DC4B2194CF3A500'
2024-01-25 04:39:19,350 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg'
with checksum '7AC30B7B4FAD119B05F138774017A842'
2024-01-25 04:39:19,363 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec'
with checksum 'EC5AE84BE1DC9922567A0AE485754939'
2024-01-25 04:39:19,363 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.png'
with checksum '34A5C156791B25AB5D130BD97AECA98C'
2024-01-25 04:39:19,583 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osqueryi.exe'
with checksum '6234BB56D3B2B967EE59D7058491F550'
2024-01-25 04:39:19,597 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery_utils.ps1'
with checksum 'E851BB94C0F783653E3BFF527503A850'
2024-01-25 04:39:19,597 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\VERIFICATION.txt'
with checksum '77039304249AC12CA156465857B19382'
2024-01-25 04:39:19,614 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\certs\certs.pem'
with checksum '6C8779E5755D9DDDF677BF7A52D035CE'
2024-01-25 04:39:19,707 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osqueryd\osqueryd.exe'
with checksum '9AAEE1555A1B50E2A153E6F6256F8AC6'
2024-01-25 04:39:19,723 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\hardware-monitoring.conf'
with checksum '3501087ED8C14DC4CB417D6F749ACAD4'
2024-01-25 04:39:19,723 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\incident-response.conf'
with checksum '9FAF35B5ED735847D0162E4EAA5EF128'
2024-01-25 04:39:19,738 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\it-compliance.conf'
with checksum 'C90DCD8897F172B41770C2A658D4426A'
2024-01-25 04:39:19,738 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\osquery-monitoring.conf'
with checksum '50B79815090F908C57B6317DD2F552BF'
2024-01-25 04:39:19,753 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\ossec-rootkit.conf'
with checksum '788318DBABB9FDBC545315C4CA88FC40'
2024-01-25 04:39:19,753 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\osx-attacks.conf'
with checksum 'EE9CDBF8F06E672092B14DE993117569'
2024-01-25 04:39:19,769 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\unwanted-chrome-extensions.conf'
with checksum 'CF972DFC934DD8E09A628C6B0A3814DD'
2024-01-25 04:39:19,769 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\vuln-management.conf'
with checksum 'F1C82E2A9E05DE6AD9DFD47E16461FA8'
2024-01-25 04:39:19,769 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\windows-attacks.conf'
with checksum '5C705090F10185E33F87AC8A79C445FB'
2024-01-25 04:39:19,785 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\windows-hardening.conf'
with checksum 'EBFB94E06E2914770A4EAEA4E5F83248'
2024-01-25 04:39:19,801 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1'
with checksum '289840CCC12B230068E229CDD37E3703'
2024-01-25 04:39:19,801 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1'
with checksum '780C83D965D277E7A132A4E7208FD339'
2024-01-25 04:39:19,801 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1'
with checksum '3C79361CA6117F7D02C1FEDDF82F07C6'
2024-01-25 04:39:19,817 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1'
with checksum 'E851BB94C0F783653E3BFF527503A850'
2024-01-25 04:39:19,847 2448 [DEBUG] - Removing shim for osqueryi.exe at 'C:\ProgramData\chocolatey\bin\osqueryi.exe
2024-01-25 04:39:19,847 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\bin\osqueryi.exe".
2024-01-25 04:39:19,864 2448 [DEBUG] - Removing shim for osqueryd.exe at 'C:\ProgramData\chocolatey\bin\osqueryd.exe
2024-01-25 04:39:19,864 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\bin\osqueryd.exe".
2024-01-25 04:39:19,910 2448 [DEBUG] - Setting installer args for osquery
2024-01-25 04:39:19,926 2448 [DEBUG] - Setting package parameters for osquery
2024-01-25 04:39:19,926 2448 [DEBUG] - Contents of 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1':
2024-01-25 04:39:19,926 2448 [DEBUG] - # Copyright (c) 2014-present, The osquery authors
#
# This source code is licensed as defined by the LICENSE file found in the
# root directory of this source tree.
#
# SPDX-License-Identifier: (Apache-2.0 OR GPL-2.0-only)
# This library file contains constant definitions and helper functions
#Requires -Version 3.0
. (Join-Path "$PSScriptRoot" "osquery_utils.ps1")
# Remove the osquery path from the System PATH variable. Note: Here
# we don't make use of our local vars, as Regex requires escaping the '\'
$oldPath = [System.Environment]::GetEnvironmentVariable('Path', 'Machine')
if ($oldPath -imatch [regex]::escape($targetFolder)) {
$newPath = $oldPath -replace [regex]::escape($targetFolder), $NULL
[System.Environment]::SetEnvironmentVariable('Path', $newPath, 'Machine')
}
if ((Get-Service $serviceName -ErrorAction SilentlyContinue)) {
Stop-Service $serviceName
# If we find zombie processes, ensure they're termintated
$proc = Get-Process | Where-Object { $_.ProcessName -eq 'osqueryd' }
if ($null -ne $proc) {
Stop-Process -Force $proc -ErrorAction SilentlyContinue
}
Set-Service $serviceName -startuptype 'manual'
Get-CimInstance -ClassName Win32_Service -Filter "Name='osqueryd'" | Invoke-CimMethod -methodName Delete
}
if (Test-Path $targetFolder) {
Remove-Item -Force -Recurse $targetFolder
} else {
Write-Debug 'osquery was not found on the system. Nothing to do.'
}
2024-01-25 04:39:19,942 2448 [DEBUG] - Calling built-in PowerShell host with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = '';[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::SystemDefault; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1' -installArguments '' -packageParameters '' -preRunHookScripts $null -postRunHookScripts $null']
2024-01-25 04:39:20,004 2448 [DEBUG] - Redirecting Microsoft.WSMan.Management.resources, Version=3.0.0.0, Culture=en-US, PublicKeyToken=31bf3856ad364e35, requested by ''
2024-01-25 04:39:20,099 2448 [DEBUG] - Host version is 5.1.17763.1, PowerShell Version is '5.1.17763.3770' and CLR Version is '4.0.30319.42000'.
2024-01-25 04:39:20,285 2448 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2024-01-25 04:39:20,301 2448 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2024-01-25 04:39:20,316 2448 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyConfigValue'.
2024-01-25 04:39:20,316 2448 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyPath'.
2024-01-25 04:39:20,316 2448 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2024-01-25 04:39:20,333 2448 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2024-01-25 04:39:20,333 2448 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2024-01-25 04:39:20,347 2448 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2024-01-25 04:39:20,347 2448 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2024-01-25 04:39:20,363 2448 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2024-01-25 04:39:20,363 2448 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2024-01-25 04:39:20,380 2448 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2024-01-25 04:39:20,380 2448 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2024-01-25 04:39:20,394 2448 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2024-01-25 04:39:20,394 2448 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2024-01-25 04:39:20,409 2448 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2024-01-25 04:39:20,409 2448 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2024-01-25 04:39:20,426 2448 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2024-01-25 04:39:20,503 2448 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2024-01-25 04:39:20,503 2448 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2024-01-25 04:39:20,520 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2024-01-25 04:39:20,520 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2024-01-25 04:39:20,535 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2024-01-25 04:39:20,551 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2024-01-25 04:39:20,551 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2024-01-25 04:39:20,566 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2024-01-25 04:39:20,566 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2024-01-25 04:39:20,582 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2024-01-25 04:39:20,582 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2024-01-25 04:39:20,597 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2024-01-25 04:39:20,597 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2024-01-25 04:39:20,612 2448 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2024-01-25 04:39:20,612 2448 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2024-01-25 04:39:20,629 2448 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2024-01-25 04:39:20,629 2448 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2024-01-25 04:39:20,645 2448 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2024-01-25 04:39:20,645 2448 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2024-01-25 04:39:20,660 2448 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2024-01-25 04:39:20,660 2448 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2024-01-25 04:39:20,675 2448 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2024-01-25 04:39:20,675 2448 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2024-01-25 04:39:20,691 2448 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2024-01-25 04:39:20,691 2448 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2024-01-25 04:39:20,723 2448 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2024-01-25 04:39:20,739 2448 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2024-01-25 04:39:20,755 2448 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2024-01-25 04:39:20,785 2448 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2024-01-25 04:39:20,801 2448 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2024-01-25 04:39:20,817 2448 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2024-01-25 04:39:20,832 2448 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2024-01-25 04:39:20,863 2448 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2024-01-25 04:39:20,910 2448 [DEBUG] - Loading community extensions
2024-01-25 04:39:20,926 2448 [DEBUG] - Importing 'C:\ProgramData\chocolatey\extensions\chocolatey-windowsupdate\chocolatey-windowsupdate.psm1'
2024-01-25 04:39:20,926 2448 [INFO ] - VERBOSE: Loading module from path 'C:\ProgramData\chocolatey\extensions\chocolatey-windowsupdate\chocolatey-windowsupdate.psm1'.
2024-01-25 04:39:21,036 2448 [INFO ] - VERBOSE: Exporting function 'Install-WindowsUpdate'.
2024-01-25 04:39:21,054 2448 [INFO ] - VERBOSE: Exporting function 'Test-WindowsUpdate'.
2024-01-25 04:39:21,054 2448 [INFO ] - VERBOSE: Importing function 'Install-WindowsUpdate'.
2024-01-25 04:39:21,067 2448 [INFO ] - VERBOSE: Importing function 'Test-WindowsUpdate'.
2024-01-25 04:39:21,067 2448 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2024-01-25 04:39:21,083 2448 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2024-01-25 04:39:21,083 2448 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyConfigValue'.
2024-01-25 04:39:21,098 2448 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyPath'.
2024-01-25 04:39:21,098 2448 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2024-01-25 04:39:21,113 2448 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2024-01-25 04:39:21,113 2448 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2024-01-25 04:39:21,130 2448 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2024-01-25 04:39:21,130 2448 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2024-01-25 04:39:21,146 2448 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2024-01-25 04:39:21,146 2448 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2024-01-25 04:39:21,161 2448 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2024-01-25 04:39:21,175 2448 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2024-01-25 04:39:21,175 2448 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2024-01-25 04:39:21,191 2448 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2024-01-25 04:39:21,191 2448 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2024-01-25 04:39:21,207 2448 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2024-01-25 04:39:21,207 2448 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2024-01-25 04:39:21,223 2448 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2024-01-25 04:39:21,223 2448 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2024-01-25 04:39:21,237 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2024-01-25 04:39:21,237 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2024-01-25 04:39:21,255 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2024-01-25 04:39:21,255 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2024-01-25 04:39:21,269 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2024-01-25 04:39:21,269 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2024-01-25 04:39:21,285 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2024-01-25 04:39:21,285 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2024-01-25 04:39:21,301 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2024-01-25 04:39:21,301 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2024-01-25 04:39:21,317 2448 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2024-01-25 04:39:21,331 2448 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2024-01-25 04:39:21,331 2448 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2024-01-25 04:39:21,348 2448 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2024-01-25 04:39:21,348 2448 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2024-01-25 04:39:21,362 2448 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2024-01-25 04:39:21,362 2448 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2024-01-25 04:39:21,379 2448 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2024-01-25 04:39:21,379 2448 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2024-01-25 04:39:21,394 2448 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2024-01-25 04:39:21,394 2448 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2024-01-25 04:39:21,409 2448 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2024-01-25 04:39:21,409 2448 [INFO ] - VERBOSE: Exporting function 'Install-WindowsUpdate'.
2024-01-25 04:39:21,426 2448 [INFO ] - VERBOSE: Exporting function 'Test-WindowsUpdate'.
2024-01-25 04:39:21,426 2448 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2024-01-25 04:39:21,443 2448 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2024-01-25 04:39:21,456 2448 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2024-01-25 04:39:21,456 2448 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2024-01-25 04:39:21,472 2448 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2024-01-25 04:39:21,472 2448 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2024-01-25 04:39:21,488 2448 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2024-01-25 04:39:21,488 2448 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2024-01-25 04:39:21,504 2448 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2024-01-25 04:39:21,504 2448 [INFO ] - VERBOSE: Importing function 'Format-FileSize'.
2024-01-25 04:39:21,520 2448 [INFO ] - VERBOSE: Importing function 'Get-ChecksumValid'.
2024-01-25 04:39:21,520 2448 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyConfigValue'.
2024-01-25 04:39:21,535 2448 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyPath'.
2024-01-25 04:39:21,551 2448 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyUnzip'.
2024-01-25 04:39:21,551 2448 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyWebFile'.
2024-01-25 04:39:21,566 2448 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariable'.
2024-01-25 04:39:21,566 2448 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariableNames'.
2024-01-25 04:39:21,582 2448 [INFO ] - VERBOSE: Importing function 'Get-FtpFile'.
2024-01-25 04:39:21,582 2448 [INFO ] - VERBOSE: Importing function 'Get-OSArchitectureWidth'.
2024-01-25 04:39:21,598 2448 [INFO ] - VERBOSE: Importing function 'Get-PackageParameters'.
2024-01-25 04:39:21,598 2448 [INFO ] - VERBOSE: Importing function 'Get-PackageParametersBuiltIn'.
2024-01-25 04:39:21,613 2448 [INFO ] - VERBOSE: Importing function 'Get-ToolsLocation'.
2024-01-25 04:39:21,613 2448 [INFO ] - VERBOSE: Importing function 'Get-UACEnabled'.
2024-01-25 04:39:21,628 2448 [INFO ] - VERBOSE: Importing function 'Get-UninstallRegistryKey'.
2024-01-25 04:39:21,645 2448 [INFO ] - VERBOSE: Importing function 'Get-VirusCheckValid'.
2024-01-25 04:39:21,645 2448 [INFO ] - VERBOSE: Importing function 'Get-WebFile'.
2024-01-25 04:39:21,660 2448 [INFO ] - VERBOSE: Importing function 'Get-WebFileName'.
2024-01-25 04:39:21,660 2448 [INFO ] - VERBOSE: Importing function 'Get-WebHeaders'.
2024-01-25 04:39:21,676 2448 [INFO ] - VERBOSE: Importing function 'Install-BinFile'.
2024-01-25 04:39:21,676 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyEnvironmentVariable'.
2024-01-25 04:39:21,692 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyExplorerMenuItem'.
2024-01-25 04:39:21,692 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyFileAssociation'.
2024-01-25 04:39:21,707 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyInstallPackage'.
2024-01-25 04:39:21,707 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPackage'.
2024-01-25 04:39:21,723 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPath'.
2024-01-25 04:39:21,723 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPinnedTaskBarItem'.
2024-01-25 04:39:21,738 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPowershellCommand'.
2024-01-25 04:39:21,738 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyShortcut'.
2024-01-25 04:39:21,754 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyVsixPackage'.
2024-01-25 04:39:21,769 2448 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyZipPackage'.
2024-01-25 04:39:21,769 2448 [INFO ] - VERBOSE: Importing function 'Install-Vsix'.
2024-01-25 04:39:21,785 2448 [INFO ] - VERBOSE: Importing function 'Install-WindowsUpdate'.
2024-01-25 04:39:21,800 2448 [INFO ] - VERBOSE: Importing function 'Set-EnvironmentVariable'.
2024-01-25 04:39:21,800 2448 [INFO ] - VERBOSE: Importing function 'Set-PowerShellExitCode'.
2024-01-25 04:39:21,816 2448 [INFO ] - VERBOSE: Importing function 'Start-ChocolateyProcessAsAdmin'.
2024-01-25 04:39:21,816 2448 [INFO ] - VERBOSE: Importing function 'Test-ProcessAdminRights'.
2024-01-25 04:39:21,832 2448 [INFO ] - VERBOSE: Importing function 'Test-WindowsUpdate'.
2024-01-25 04:39:21,832 2448 [INFO ] - VERBOSE: Importing function 'Uninstall-BinFile'.
2024-01-25 04:39:21,848 2448 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyEnvironmentVariable'.
2024-01-25 04:39:21,848 2448 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyPackage'.
2024-01-25 04:39:21,864 2448 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyZipPackage'.
2024-01-25 04:39:21,864 2448 [INFO ] - VERBOSE: Importing function 'Update-SessionEnvironment'.
2024-01-25 04:39:21,879 2448 [INFO ] - VERBOSE: Importing function 'Write-FunctionCallLogMessage'.
2024-01-25 04:39:21,879 2448 [INFO ] - VERBOSE: Importing alias 'Add-BinFile'.
2024-01-25 04:39:21,894 2448 [INFO ] - VERBOSE: Importing alias 'Generate-BinFile'.
2024-01-25 04:39:21,894 2448 [INFO ] - VERBOSE: Importing alias 'Get-InstallRegistryKey'.
2024-01-25 04:39:21,911 2448 [INFO ] - VERBOSE: Importing alias 'Get-OSBitness'.
2024-01-25 04:39:21,911 2448 [INFO ] - VERBOSE: Importing alias 'Get-ProcessorBits'.
2024-01-25 04:39:21,926 2448 [INFO ] - VERBOSE: Importing alias 'Invoke-ChocolateyProcess'.
2024-01-25 04:39:22,082 2448 [INFO ] - VERBOSE: Importing alias 'refreshenv'.
2024-01-25 04:39:22,082 2448 [INFO ] - VERBOSE: Importing alias 'Remove-BinFile'.
2024-01-25 04:39:22,098 2448 [INFO ] - VERBOSE: Importing alias 'Start-ChocolateyProcess'.
2024-01-25 04:39:22,114 2448 [DEBUG] - ---------------------------Script Execution---------------------------
2024-01-25 04:39:22,114 2448 [DEBUG] - Running 'ChocolateyScriptRunner' for osquery v5.10.2 with packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1', packageFolder:'C:\ProgramData\chocolatey\lib\osquery', installArguments: '', packageParameters: '', preRunHookScripts: '', postRunHookScripts: '',
2024-01-25 04:39:22,129 2448 [DEBUG] - Running package script 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1'
2024-01-25 04:39:22,301 2448 [DEBUG] - ----------------------------------------------------------------------
2024-01-25 04:39:22,316 2448 [DEBUG] - Built-in PowerShell host called with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = '';[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::SystemDefault; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1' -installArguments '' -packageParameters '' -preRunHookScripts $null -postRunHookScripts $null'] exited with '0'.
2024-01-25 04:39:22,316 2448 [WARN ] - SecurityProtocol was set to Tls12, resetting to SystemDefault.
2024-01-25 04:39:22,364 2448 [INFO ] - Skipping auto uninstaller - No registry snapshot.
2024-01-25 04:39:22,379 2448 [DEBUG] - Calling command ['"C:\Windows\System32\shutdown.exe" /a']
2024-01-25 04:39:22,535 2448 [DEBUG] - Command ['"C:\Windows\System32\shutdown.exe" /a'] exited with '1116'
2024-01-25 04:39:22,552 2448 [DEBUG] - Attempting to delete directory "C:\ProgramData\chocolatey\lib-bkp\osquery".
2024-01-25 04:39:22,598 2448 [DEBUG] - Ensuring removal of installation files.
2024-01-25 04:39:22,598 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\LICENSE.txt'
with checksum '0820FFE048483183320E2DAD339898F6'
2024-01-25 04:39:22,613 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\LICENSE.txt".
2024-01-25 04:39:22,613 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\manage-osqueryd.ps1'
with checksum '3CCB09B60C319C2B6A43DF64360BD14F'
2024-01-25 04:39:22,630 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\manage-osqueryd.ps1".
2024-01-25 04:39:22,646 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.conf'
with checksum '9027F1A3AF205ED3D209BE5F9AEA1842'
2024-01-25 04:39:22,646 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\osquery.conf".
2024-01-25 04:39:22,660 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.flags'
with checksum 'D41D8CD98F00B204E9800998ECF8427E'
2024-01-25 04:39:22,660 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\osquery.flags".
2024-01-25 04:39:22,676 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.man'
with checksum 'A4C03558EDB1FF1F5DC4B2194CF3A500'
2024-01-25 04:39:22,676 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\osquery.man".
2024-01-25 04:39:22,770 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg'
with checksum '7AC30B7B4FAD119B05F138774017A842'
2024-01-25 04:39:22,770 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg".
2024-01-25 04:39:22,785 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec'
with checksum 'EC5AE84BE1DC9922567A0AE485754939'
2024-01-25 04:39:22,800 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec".
2024-01-25 04:39:22,800 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.png'
with checksum '34A5C156791B25AB5D130BD97AECA98C'
2024-01-25 04:39:22,800 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\osquery.png".
2024-01-25 04:39:22,925 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osqueryi.exe'
with checksum '6234BB56D3B2B967EE59D7058491F550'
2024-01-25 04:39:22,925 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\osqueryi.exe".
2024-01-25 04:39:22,942 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery_utils.ps1'
with checksum 'E851BB94C0F783653E3BFF527503A850'
2024-01-25 04:39:22,942 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\osquery_utils.ps1".
2024-01-25 04:39:22,957 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\VERIFICATION.txt'
with checksum '77039304249AC12CA156465857B19382'
2024-01-25 04:39:22,972 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\VERIFICATION.txt".
2024-01-25 04:39:22,972 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\certs\certs.pem'
with checksum '6C8779E5755D9DDDF677BF7A52D035CE'
2024-01-25 04:39:22,989 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\certs\certs.pem".
2024-01-25 04:39:23,097 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osqueryd\osqueryd.exe'
with checksum '9AAEE1555A1B50E2A153E6F6256F8AC6'
2024-01-25 04:39:23,113 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\osqueryd\osqueryd.exe".
2024-01-25 04:39:23,113 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\hardware-monitoring.conf'
with checksum '3501087ED8C14DC4CB417D6F749ACAD4'
2024-01-25 04:39:23,129 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\packs\hardware-monitoring.conf".
2024-01-25 04:39:23,144 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\incident-response.conf'
with checksum '9FAF35B5ED735847D0162E4EAA5EF128'
2024-01-25 04:39:23,144 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\packs\incident-response.conf".
2024-01-25 04:39:23,144 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\it-compliance.conf'
with checksum 'C90DCD8897F172B41770C2A658D4426A'
2024-01-25 04:39:23,161 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\packs\it-compliance.conf".
2024-01-25 04:39:23,161 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\osquery-monitoring.conf'
with checksum '50B79815090F908C57B6317DD2F552BF'
2024-01-25 04:39:23,176 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\packs\osquery-monitoring.conf".
2024-01-25 04:39:23,176 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\ossec-rootkit.conf'
with checksum '788318DBABB9FDBC545315C4CA88FC40'
2024-01-25 04:39:23,192 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\packs\ossec-rootkit.conf".
2024-01-25 04:39:23,192 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\osx-attacks.conf'
with checksum 'EE9CDBF8F06E672092B14DE993117569'
2024-01-25 04:39:23,207 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\packs\osx-attacks.conf".
2024-01-25 04:39:23,207 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\unwanted-chrome-extensions.conf'
with checksum 'CF972DFC934DD8E09A628C6B0A3814DD'
2024-01-25 04:39:23,207 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\packs\unwanted-chrome-extensions.conf".
2024-01-25 04:39:23,223 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\vuln-management.conf'
with checksum 'F1C82E2A9E05DE6AD9DFD47E16461FA8'
2024-01-25 04:39:23,223 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\packs\vuln-management.conf".
2024-01-25 04:39:23,238 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\windows-attacks.conf'
with checksum '5C705090F10185E33F87AC8A79C445FB'
2024-01-25 04:39:23,238 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\packs\windows-attacks.conf".
2024-01-25 04:39:23,253 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\windows-hardening.conf'
with checksum 'EBFB94E06E2914770A4EAEA4E5F83248'
2024-01-25 04:39:23,253 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\packs\windows-hardening.conf".
2024-01-25 04:39:23,253 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1'
with checksum '289840CCC12B230068E229CDD37E3703'
2024-01-25 04:39:23,271 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1".
2024-01-25 04:39:23,271 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1'
with checksum '780C83D965D277E7A132A4E7208FD339'
2024-01-25 04:39:23,285 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1".
2024-01-25 04:39:23,285 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1'
with checksum '3C79361CA6117F7D02C1FEDDF82F07C6'
2024-01-25 04:39:23,301 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1".
2024-01-25 04:39:23,301 2448 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1'
with checksum 'E851BB94C0F783653E3BFF527503A850'
2024-01-25 04:39:23,317 2448 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1".
2024-01-25 04:39:23,317 2448 [DEBUG] - Attempting to delete directory "C:\ProgramData\chocolatey\lib\osquery".
2024-01-25 04:39:23,332 2448 [INFO ] - osquery has been successfully uninstalled.
2024-01-25 04:39:23,348 2448 [DEBUG] - Removing nupkg if it still exists.
2024-01-25 04:39:23,348 2448 [DEBUG] - Ensuring removal of installation files.
2024-01-25 04:39:23,379 2448 [WARN ] - Environment Vars (like PATH) have changed. Close/reopen your shell to
see the changes (or in powershell/cmd.exe just type `refreshenv`).
2024-01-25 04:39:23,379 2448 [DEBUG] - The following values have been added/changed (may contain sensitive data):
2024-01-25 04:39:23,394 2448 [DEBUG] - * Path='C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\ProgramData\chocolatey\bin;;' (Machine)
2024-01-25 04:39:23,425 2448 [WARN ] -
Chocolatey uninstalled 1/1 packages.
See the log for details (C:\ProgramData\chocolatey\logs\chocolatey.log).
2024-01-25 04:39:23,442 2448 [DEBUG] - Sending message 'PostRunMessage' out if there are subscribers...
2024-01-25 04:39:23,457 2448 [DEBUG] - Exiting with 0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment