Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
osquery v4.0.1 - Passed - Package Tests Results

osquery v4.0.1 - Passed - Package Test Results

  • https://chocolatey.org/packages/osquery/4.0.1
  • Tested 11 Sep 2019 06:38:30 +00:00
  • Tested against win2012r2x64 (Windows Server 2012 R2 x64)
  • Tested with the latest version of choco, possibly a beta version.
  • Tested with chocolatey-package-verifier service v0.4.0-38-g3187e94
  • Install was successful.
  • Uninstall was successful.
<?xml version="1.0" encoding="utf-8"?>
<fileSnapshot xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<files>
<file path="C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg" checksum="38E8F98DB8F941C819344B16FECFDE45" />
<file path="C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec" checksum="0A66BF13F2C6953A76BD828F48D6991A" />
<file path="C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1" checksum="76A42C245B2F0049FB8F1DAF4B6E6C65" />
<file path="C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1" checksum="7336372EA65242F2639C23553FB94BD6" />
<file path="C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1" checksum="892D485A47E61F78C9CF316F31C4BEE1" />
<file path="C:\ProgramData\chocolatey\lib\osquery\tools\LICENSE.txt" checksum="DD399CA08A28F2D449C22B56D76CC606" />
<file path="C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1" checksum="2835A38236767FD1A9D573CAC66251DA" />
<file path="C:\ProgramData\chocolatey\lib\osquery\tools\VERIFICATION.txt" checksum="47FB3CCB97A1A6666197F49D936AA1BE" />
<file path="C:\ProgramData\chocolatey\lib\osquery\tools\bin\osquery.zip" checksum="D875463CE44AC430901A411B781FA989" />
</files>
</fileSnapshot>
2019-09-11 06:35:24,662 388 [DEBUG] - XmlConfiguration is now operational
2019-09-11 06:35:24,930 388 [INFO ] - ============================================================
2019-09-11 06:35:25,259 388 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\config".
2019-09-11 06:35:26,656 388 [DEBUG] - Attempting to replace "C:\ProgramData\chocolatey\config\chocolatey.config"
with "C:\ProgramData\chocolatey\config\chocolatey.config.388.update".
Backup placed at "C:\ProgramData\chocolatey\config\chocolatey.config.backup".
2019-09-11 06:35:26,673 388 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\config\chocolatey.config.388.update"
to "C:\ProgramData\chocolatey\config\chocolatey.config".
2019-09-11 06:35:26,688 388 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\config\chocolatey.config.388.update".
2019-09-11 06:35:26,703 388 [INFO ] - 0.10.15
2019-09-11 06:35:26,719 388 [DEBUG] - Exiting with 0
2019-09-11 06:35:27,645 2720 [DEBUG] - XmlConfiguration is now operational
2019-09-11 06:35:27,865 2720 [INFO ] - ============================================================
2019-09-11 06:35:28,713 2720 [INFO ] - Chocolatey v0.10.15
2019-09-11 06:35:28,795 2720 [DEBUG] - Chocolatey is running on Windows v 6.3.9600.0
2019-09-11 06:35:28,810 2720 [DEBUG] - Attempting to delete file "C:/ProgramData/chocolatey/choco.exe.old".
2019-09-11 06:35:28,810 2720 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\choco.exe.old".
2019-09-11 06:35:28,845 2720 [DEBUG] - Command line: "C:\ProgramData\chocolatey\choco.exe" feature enable -n autouninstaller
2019-09-11 06:35:28,845 2720 [DEBUG] - Received arguments: feature enable -n autouninstaller
2019-09-11 06:35:29,139 2720 [DEBUG] - RemovePendingPackagesTask is now ready and waiting for PreRunMessage.
2019-09-11 06:35:29,190 2720 [DEBUG] - Sending message 'PreRunMessage' out if there are subscribers...
2019-09-11 06:35:29,225 2720 [DEBUG] - [Pending] Removing all pending packages that should not be considered installed...
2019-09-11 06:35:29,467 2720 [DEBUG] - Performing validation checks.
2019-09-11 06:35:29,484 2720 [DEBUG] - Global Configuration Validation Checks:
2019-09-11 06:35:29,484 2720 [DEBUG] - - Package Exit Code / Exit On Reboot = Checked
2019-09-11 06:35:29,484 2720 [DEBUG] - System State Validation Checks:
2019-09-11 06:35:29,501 2720 [DEBUG] - Reboot Requirement Checks:
2019-09-11 06:35:29,519 2720 [DEBUG] - - Pending Computer Rename = Checked
2019-09-11 06:35:29,536 2720 [DEBUG] - - Pending Component Based Servicing = Checked
2019-09-11 06:35:29,536 2720 [DEBUG] - - Pending Windows Auto Update = Checked
2019-09-11 06:35:29,536 2720 [DEBUG] - - Pending File Rename Operations = Checked
2019-09-11 06:35:29,553 2720 [DEBUG] - - Pending Windows Package Installer = Checked
2019-09-11 06:35:29,553 2720 [DEBUG] - - Pending Windows Package Installer SysWow64 = Checked
2019-09-11 06:35:29,570 2720 [INFO ] - 2 validations performed. 2 success(es), 0 warning(s), and 0 error(s).
2019-09-11 06:35:29,588 2720 [DEBUG] - The source '' evaluated to a 'normal' source type
2019-09-11 06:35:29,588 2720 [DEBUG] -
NOTE: Hiding sensitive configuration data! Please double and triple
check to be sure no sensitive data is shown, especially if copying
output to a gist for review.
2019-09-11 06:35:29,674 2720 [DEBUG] - Configuration: CommandName='feature'|
CacheLocation='C:\Users\Administrator\AppData\Local\Temp\chocolatey'|
ContainsLegacyPackageInstalls='True'|
CommandExecutionTimeoutSeconds='2700'|WebRequestTimeoutSeconds='30'|
SourceType='normal'|Debug='False'|Verbose='False'|Trace='False'|
Force='False'|Noop='False'|HelpRequested='False'|
UnsuccessfulParsing='False'|RegularOutput='True'|QuietOutput='False'|
PromptForConfirmation='True'|AcceptLicense='False'|
AllowUnofficialBuild='False'|Input='enable'|AllVersions='False'|
SkipPackageInstallProvider='False'|Prerelease='False'|ForceX86='False'|
OverrideArguments='False'|NotSilent='False'|
ApplyPackageParametersToDependencies='False'|
ApplyInstallArgumentsToDependencies='False'|IgnoreDependencies='False'|
AllowMultipleVersions='False'|AllowDowngrade='False'|
ForceDependencies='False'|Information.PlatformType='Windows'|
Information.PlatformVersion='6.3.9600.0'|
Information.PlatformName='Windows Server 2012 R2'|
Information.ChocolateyVersion='0.10.15.0'|
Information.ChocolateyProductVersion='0.10.15'|
Information.FullName='choco, Version=0.10.15.0, Culture=neutral, PublicKeyToken=79d02ea9cad655eb'|
Information.Is64BitOperatingSystem='True'|
Information.Is64BitProcess='True'|Information.IsInteractive='True'|
Information.UserName='vagrant'|
Information.UserDomainName='WIN-E5K8TM30719'|
Information.IsUserAdministrator='True'|
Information.IsUserSystemAccount='False'|
Information.IsUserRemoteDesktop='False'|
Information.IsUserRemote='True'|
Information.IsProcessElevated='True'|
Information.IsLicensedVersion='False'|Information.LicenseType='Foss'|
Information.CurrentDirectory='C:\Windows\system32'|
Features.AutoUninstaller='True'|Features.ChecksumFiles='True'|
Features.AllowEmptyChecksums='False'|
Features.AllowEmptyChecksumsSecure='True'|
Features.FailOnAutoUninstaller='False'|
Features.FailOnStandardError='False'|Features.UsePowerShellHost='True'|
Features.LogEnvironmentValues='False'|Features.LogWithoutColor='False'|
Features.VirusCheck='False'|
Features.FailOnInvalidOrMissingLicense='False'|
Features.IgnoreInvalidOptionsSwitches='True'|
Features.UsePackageExitCodes='True'|
Features.UseEnhancedExitCodes='False'|
Features.UseFipsCompliantChecksums='False'|
Features.ShowNonElevatedWarnings='True'|
Features.ShowDownloadProgress='True'|
Features.StopOnFirstPackageFailure='False'|
Features.UseRememberedArgumentsForUpgrades='False'|
Features.IgnoreUnfoundPackagesOnUpgradeOutdated='False'|
Features.SkipPackageUpgradesWhenNotInstalled='False'|
Features.RemovePackageInformationOnUninstall='False'|
Features.ExitOnRebootDetected='False'|
Features.LogValidationResultsOnWarnings='True'|
Features.UsePackageRepositoryOptimizations='True'|
Features.ScriptsCheckLastExitCode='False'|
ListCommand.LocalOnly='False'|
ListCommand.IdOnly='False'|ListCommand.IncludeRegistryPrograms='False'|
ListCommand.PageSize='25'|ListCommand.Exact='False'|
ListCommand.ByIdOnly='False'|ListCommand.ByTagOnly='False'|
ListCommand.IdStartsWith='False'|ListCommand.OrderByPopularity='False'|
ListCommand.ApprovedOnly='False'|
ListCommand.DownloadCacheAvailable='False'|
ListCommand.NotBroken='False'|
ListCommand.IncludeVersionOverrides='False'|
UpgradeCommand.FailOnUnfound='False'|
UpgradeCommand.FailOnNotInstalled='False'|
UpgradeCommand.NotifyOnlyAvailableUpgrades='False'|
UpgradeCommand.ExcludePrerelease='False'|
NewCommand.AutomaticPackage='False'|
NewCommand.UseOriginalTemplate='False'|SourceCommand.Command='unknown'|
SourceCommand.Priority='0'|SourceCommand.BypassProxy='False'|
SourceCommand.AllowSelfService='False'|
SourceCommand.VisibleToAdminsOnly='False'|
FeatureCommand.Name='autouninstaller'|FeatureCommand.Command='enable'|
ConfigCommand.Command='unknown'|ApiKeyCommand.Remove='False'|
PinCommand.Command='unknown'|OutdatedCommand.IgnorePinned='False'|
Proxy.BypassOnLocal='True'|
2019-09-11 06:35:29,674 2720 [DEBUG] - _ Chocolatey:ChocolateyFeatureCommand - Normal Run Mode _
2019-09-11 06:35:29,691 2720 [INFO ] - autoUninstaller was enabled by default. Explicitly setting value.
2019-09-11 06:35:29,708 2720 [DEBUG] - Attempting to replace "C:\ProgramData\chocolatey\config\chocolatey.config"
with "C:\ProgramData\chocolatey\config\chocolatey.config.2720.update".
Backup placed at "C:\ProgramData\chocolatey\config\chocolatey.config.backup".
2019-09-11 06:35:29,726 2720 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\config\chocolatey.config.backup".
2019-09-11 06:35:29,726 2720 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\config\chocolatey.config.2720.update"
to "C:\ProgramData\chocolatey\config\chocolatey.config".
2019-09-11 06:35:29,743 2720 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\config\chocolatey.config.2720.update".
2019-09-11 06:35:29,743 2720 [WARN ] - Enabled autoUninstaller
2019-09-11 06:35:29,743 2720 [DEBUG] - Sending message 'PostRunMessage' out if there are subscribers...
2019-09-11 06:35:29,779 2720 [DEBUG] - Exiting with 0
2019-09-11 06:35:30,779 2708 [DEBUG] - XmlConfiguration is now operational
2019-09-11 06:35:31,056 2708 [INFO ] - ============================================================
2019-09-11 06:35:31,937 2708 [INFO ] - Chocolatey v0.10.15
2019-09-11 06:35:31,971 2708 [DEBUG] - Chocolatey is running on Windows v 6.3.9600.0
2019-09-11 06:35:31,988 2708 [DEBUG] - Attempting to delete file "C:/ProgramData/chocolatey/choco.exe.old".
2019-09-11 06:35:31,988 2708 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\choco.exe.old".
2019-09-11 06:35:32,023 2708 [DEBUG] - Command line: "C:\ProgramData\chocolatey\choco.exe" feature enable -n allowGlobalConfirmation
2019-09-11 06:35:32,023 2708 [DEBUG] - Received arguments: feature enable -n allowGlobalConfirmation
2019-09-11 06:35:32,213 2708 [DEBUG] - RemovePendingPackagesTask is now ready and waiting for PreRunMessage.
2019-09-11 06:35:32,247 2708 [DEBUG] - Sending message 'PreRunMessage' out if there are subscribers...
2019-09-11 06:35:32,282 2708 [DEBUG] - [Pending] Removing all pending packages that should not be considered installed...
2019-09-11 06:35:32,489 2708 [DEBUG] - Performing validation checks.
2019-09-11 06:35:32,525 2708 [DEBUG] - Global Configuration Validation Checks:
2019-09-11 06:35:32,525 2708 [DEBUG] - - Package Exit Code / Exit On Reboot = Checked
2019-09-11 06:35:32,525 2708 [DEBUG] - System State Validation Checks:
2019-09-11 06:35:32,541 2708 [DEBUG] - Reboot Requirement Checks:
2019-09-11 06:35:32,558 2708 [DEBUG] - - Pending Computer Rename = Checked
2019-09-11 06:35:32,558 2708 [DEBUG] - - Pending Component Based Servicing = Checked
2019-09-11 06:35:32,558 2708 [DEBUG] - - Pending Windows Auto Update = Checked
2019-09-11 06:35:32,576 2708 [DEBUG] - - Pending File Rename Operations = Checked
2019-09-11 06:35:32,576 2708 [DEBUG] - - Pending Windows Package Installer = Checked
2019-09-11 06:35:32,576 2708 [DEBUG] - - Pending Windows Package Installer SysWow64 = Checked
2019-09-11 06:35:32,611 2708 [INFO ] - 2 validations performed. 2 success(es), 0 warning(s), and 0 error(s).
2019-09-11 06:35:32,611 2708 [DEBUG] - The source '' evaluated to a 'normal' source type
2019-09-11 06:35:32,627 2708 [DEBUG] -
NOTE: Hiding sensitive configuration data! Please double and triple
check to be sure no sensitive data is shown, especially if copying
output to a gist for review.
2019-09-11 06:35:32,696 2708 [DEBUG] - Configuration: CommandName='feature'|
CacheLocation='C:\Users\Administrator\AppData\Local\Temp\chocolatey'|
ContainsLegacyPackageInstalls='True'|
CommandExecutionTimeoutSeconds='2700'|WebRequestTimeoutSeconds='30'|
SourceType='normal'|Debug='False'|Verbose='False'|Trace='False'|
Force='False'|Noop='False'|HelpRequested='False'|
UnsuccessfulParsing='False'|RegularOutput='True'|QuietOutput='False'|
PromptForConfirmation='True'|AcceptLicense='False'|
AllowUnofficialBuild='False'|Input='enable'|AllVersions='False'|
SkipPackageInstallProvider='False'|Prerelease='False'|ForceX86='False'|
OverrideArguments='False'|NotSilent='False'|
ApplyPackageParametersToDependencies='False'|
ApplyInstallArgumentsToDependencies='False'|IgnoreDependencies='False'|
AllowMultipleVersions='False'|AllowDowngrade='False'|
ForceDependencies='False'|Information.PlatformType='Windows'|
Information.PlatformVersion='6.3.9600.0'|
Information.PlatformName='Windows Server 2012 R2'|
Information.ChocolateyVersion='0.10.15.0'|
Information.ChocolateyProductVersion='0.10.15'|
Information.FullName='choco, Version=0.10.15.0, Culture=neutral, PublicKeyToken=79d02ea9cad655eb'|
Information.Is64BitOperatingSystem='True'|
Information.Is64BitProcess='True'|Information.IsInteractive='True'|
Information.UserName='vagrant'|
Information.UserDomainName='WIN-E5K8TM30719'|
Information.IsUserAdministrator='True'|
Information.IsUserSystemAccount='False'|
Information.IsUserRemoteDesktop='False'|
Information.IsUserRemote='True'|
Information.IsProcessElevated='True'|
Information.IsLicensedVersion='False'|Information.LicenseType='Foss'|
Information.CurrentDirectory='C:\Windows\system32'|
Features.AutoUninstaller='True'|Features.ChecksumFiles='True'|
Features.AllowEmptyChecksums='False'|
Features.AllowEmptyChecksumsSecure='True'|
Features.FailOnAutoUninstaller='False'|
Features.FailOnStandardError='False'|Features.UsePowerShellHost='True'|
Features.LogEnvironmentValues='False'|Features.LogWithoutColor='False'|
Features.VirusCheck='False'|
Features.FailOnInvalidOrMissingLicense='False'|
Features.IgnoreInvalidOptionsSwitches='True'|
Features.UsePackageExitCodes='True'|
Features.UseEnhancedExitCodes='False'|
Features.UseFipsCompliantChecksums='False'|
Features.ShowNonElevatedWarnings='True'|
Features.ShowDownloadProgress='True'|
Features.StopOnFirstPackageFailure='False'|
Features.UseRememberedArgumentsForUpgrades='False'|
Features.IgnoreUnfoundPackagesOnUpgradeOutdated='False'|
Features.SkipPackageUpgradesWhenNotInstalled='False'|
Features.RemovePackageInformationOnUninstall='False'|
Features.ExitOnRebootDetected='False'|
Features.LogValidationResultsOnWarnings='True'|
Features.UsePackageRepositoryOptimizations='True'|
Features.ScriptsCheckLastExitCode='False'|
ListCommand.LocalOnly='False'|
ListCommand.IdOnly='False'|ListCommand.IncludeRegistryPrograms='False'|
ListCommand.PageSize='25'|ListCommand.Exact='False'|
ListCommand.ByIdOnly='False'|ListCommand.ByTagOnly='False'|
ListCommand.IdStartsWith='False'|ListCommand.OrderByPopularity='False'|
ListCommand.ApprovedOnly='False'|
ListCommand.DownloadCacheAvailable='False'|
ListCommand.NotBroken='False'|
ListCommand.IncludeVersionOverrides='False'|
UpgradeCommand.FailOnUnfound='False'|
UpgradeCommand.FailOnNotInstalled='False'|
UpgradeCommand.NotifyOnlyAvailableUpgrades='False'|
UpgradeCommand.ExcludePrerelease='False'|
NewCommand.AutomaticPackage='False'|
NewCommand.UseOriginalTemplate='False'|SourceCommand.Command='unknown'|
SourceCommand.Priority='0'|SourceCommand.BypassProxy='False'|
SourceCommand.AllowSelfService='False'|
SourceCommand.VisibleToAdminsOnly='False'|
FeatureCommand.Name='allowGlobalConfirmation'|
FeatureCommand.Command='enable'|ConfigCommand.Command='unknown'|
ApiKeyCommand.Remove='False'|PinCommand.Command='unknown'|
OutdatedCommand.IgnorePinned='False'|Proxy.BypassOnLocal='True'|
2019-09-11 06:35:32,714 2708 [DEBUG] - _ Chocolatey:ChocolateyFeatureCommand - Normal Run Mode _
2019-09-11 06:35:32,731 2708 [DEBUG] - Attempting to replace "C:\ProgramData\chocolatey\config\chocolatey.config"
with "C:\ProgramData\chocolatey\config\chocolatey.config.2708.update".
Backup placed at "C:\ProgramData\chocolatey\config\chocolatey.config.backup".
2019-09-11 06:35:32,748 2708 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\config\chocolatey.config.backup".
2019-09-11 06:35:32,748 2708 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\config\chocolatey.config.2708.update"
to "C:\ProgramData\chocolatey\config\chocolatey.config".
2019-09-11 06:35:32,765 2708 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\config\chocolatey.config.2708.update".
2019-09-11 06:35:32,765 2708 [WARN ] - Enabled allowGlobalConfirmation
2019-09-11 06:35:32,765 2708 [DEBUG] - Sending message 'PostRunMessage' out if there are subscribers...
2019-09-11 06:35:32,800 2708 [DEBUG] - Exiting with 0
2019-09-11 06:35:33,785 2404 [DEBUG] - XmlConfiguration is now operational
2019-09-11 06:35:34,026 2404 [INFO ] - ============================================================
2019-09-11 06:35:34,874 2404 [INFO ] - Chocolatey v0.10.15
2019-09-11 06:35:34,908 2404 [DEBUG] - Chocolatey is running on Windows v 6.3.9600.0
2019-09-11 06:35:34,924 2404 [DEBUG] - Attempting to delete file "C:/ProgramData/chocolatey/choco.exe.old".
2019-09-11 06:35:34,924 2404 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\choco.exe.old".
2019-09-11 06:35:34,959 2404 [DEBUG] - Command line: "C:\ProgramData\chocolatey\choco.exe" feature enable -n logEnvironmentValues
2019-09-11 06:35:34,959 2404 [DEBUG] - Received arguments: feature enable -n logEnvironmentValues
2019-09-11 06:35:35,150 2404 [DEBUG] - RemovePendingPackagesTask is now ready and waiting for PreRunMessage.
2019-09-11 06:35:35,184 2404 [DEBUG] - Sending message 'PreRunMessage' out if there are subscribers...
2019-09-11 06:35:35,218 2404 [DEBUG] - [Pending] Removing all pending packages that should not be considered installed...
2019-09-11 06:35:35,426 2404 [DEBUG] - Performing validation checks.
2019-09-11 06:35:35,443 2404 [DEBUG] - Global Configuration Validation Checks:
2019-09-11 06:35:35,460 2404 [DEBUG] - - Package Exit Code / Exit On Reboot = Checked
2019-09-11 06:35:35,460 2404 [DEBUG] - System State Validation Checks:
2019-09-11 06:35:35,478 2404 [DEBUG] - Reboot Requirement Checks:
2019-09-11 06:35:35,495 2404 [DEBUG] - - Pending Computer Rename = Checked
2019-09-11 06:35:35,495 2404 [DEBUG] - - Pending Component Based Servicing = Checked
2019-09-11 06:35:35,495 2404 [DEBUG] - - Pending Windows Auto Update = Checked
2019-09-11 06:35:35,512 2404 [DEBUG] - - Pending File Rename Operations = Checked
2019-09-11 06:35:35,512 2404 [DEBUG] - - Pending Windows Package Installer = Checked
2019-09-11 06:35:35,512 2404 [DEBUG] - - Pending Windows Package Installer SysWow64 = Checked
2019-09-11 06:35:35,546 2404 [INFO ] - 2 validations performed. 2 success(es), 0 warning(s), and 0 error(s).
2019-09-11 06:35:35,546 2404 [DEBUG] - The source '' evaluated to a 'normal' source type
2019-09-11 06:35:35,563 2404 [DEBUG] -
NOTE: Hiding sensitive configuration data! Please double and triple
check to be sure no sensitive data is shown, especially if copying
output to a gist for review.
2019-09-11 06:35:35,633 2404 [DEBUG] - Configuration: CommandName='feature'|
CacheLocation='C:\Users\Administrator\AppData\Local\Temp\chocolatey'|
ContainsLegacyPackageInstalls='True'|
CommandExecutionTimeoutSeconds='2700'|WebRequestTimeoutSeconds='30'|
SourceType='normal'|Debug='False'|Verbose='False'|Trace='False'|
Force='False'|Noop='False'|HelpRequested='False'|
UnsuccessfulParsing='False'|RegularOutput='True'|QuietOutput='False'|
PromptForConfirmation='False'|AcceptLicense='False'|
AllowUnofficialBuild='False'|Input='enable'|AllVersions='False'|
SkipPackageInstallProvider='False'|Prerelease='False'|ForceX86='False'|
OverrideArguments='False'|NotSilent='False'|
ApplyPackageParametersToDependencies='False'|
ApplyInstallArgumentsToDependencies='False'|IgnoreDependencies='False'|
AllowMultipleVersions='False'|AllowDowngrade='False'|
ForceDependencies='False'|Information.PlatformType='Windows'|
Information.PlatformVersion='6.3.9600.0'|
Information.PlatformName='Windows Server 2012 R2'|
Information.ChocolateyVersion='0.10.15.0'|
Information.ChocolateyProductVersion='0.10.15'|
Information.FullName='choco, Version=0.10.15.0, Culture=neutral, PublicKeyToken=79d02ea9cad655eb'|
Information.Is64BitOperatingSystem='True'|
Information.Is64BitProcess='True'|Information.IsInteractive='True'|
Information.UserName='vagrant'|
Information.UserDomainName='WIN-E5K8TM30719'|
Information.IsUserAdministrator='True'|
Information.IsUserSystemAccount='False'|
Information.IsUserRemoteDesktop='False'|
Information.IsUserRemote='True'|
Information.IsProcessElevated='True'|
Information.IsLicensedVersion='False'|Information.LicenseType='Foss'|
Information.CurrentDirectory='C:\Windows\system32'|
Features.AutoUninstaller='True'|Features.ChecksumFiles='True'|
Features.AllowEmptyChecksums='False'|
Features.AllowEmptyChecksumsSecure='True'|
Features.FailOnAutoUninstaller='False'|
Features.FailOnStandardError='False'|Features.UsePowerShellHost='True'|
Features.LogEnvironmentValues='False'|Features.LogWithoutColor='False'|
Features.VirusCheck='False'|
Features.FailOnInvalidOrMissingLicense='False'|
Features.IgnoreInvalidOptionsSwitches='True'|
Features.UsePackageExitCodes='True'|
Features.UseEnhancedExitCodes='False'|
Features.UseFipsCompliantChecksums='False'|
Features.ShowNonElevatedWarnings='True'|
Features.ShowDownloadProgress='True'|
Features.StopOnFirstPackageFailure='False'|
Features.UseRememberedArgumentsForUpgrades='False'|
Features.IgnoreUnfoundPackagesOnUpgradeOutdated='False'|
Features.SkipPackageUpgradesWhenNotInstalled='False'|
Features.RemovePackageInformationOnUninstall='False'|
Features.ExitOnRebootDetected='False'|
Features.LogValidationResultsOnWarnings='True'|
Features.UsePackageRepositoryOptimizations='True'|
Features.ScriptsCheckLastExitCode='False'|
ListCommand.LocalOnly='False'|
ListCommand.IdOnly='False'|ListCommand.IncludeRegistryPrograms='False'|
ListCommand.PageSize='25'|ListCommand.Exact='False'|
ListCommand.ByIdOnly='False'|ListCommand.ByTagOnly='False'|
ListCommand.IdStartsWith='False'|ListCommand.OrderByPopularity='False'|
ListCommand.ApprovedOnly='False'|
ListCommand.DownloadCacheAvailable='False'|
ListCommand.NotBroken='False'|
ListCommand.IncludeVersionOverrides='False'|
UpgradeCommand.FailOnUnfound='False'|
UpgradeCommand.FailOnNotInstalled='False'|
UpgradeCommand.NotifyOnlyAvailableUpgrades='False'|
UpgradeCommand.ExcludePrerelease='False'|
NewCommand.AutomaticPackage='False'|
NewCommand.UseOriginalTemplate='False'|SourceCommand.Command='unknown'|
SourceCommand.Priority='0'|SourceCommand.BypassProxy='False'|
SourceCommand.AllowSelfService='False'|
SourceCommand.VisibleToAdminsOnly='False'|
FeatureCommand.Name='logEnvironmentValues'|
FeatureCommand.Command='enable'|ConfigCommand.Command='unknown'|
ApiKeyCommand.Remove='False'|PinCommand.Command='unknown'|
OutdatedCommand.IgnorePinned='False'|Proxy.BypassOnLocal='True'|
2019-09-11 06:35:35,650 2404 [DEBUG] - _ Chocolatey:ChocolateyFeatureCommand - Normal Run Mode _
2019-09-11 06:35:35,668 2404 [DEBUG] - Attempting to replace "C:\ProgramData\chocolatey\config\chocolatey.config"
with "C:\ProgramData\chocolatey\config\chocolatey.config.2404.update".
Backup placed at "C:\ProgramData\chocolatey\config\chocolatey.config.backup".
2019-09-11 06:35:35,684 2404 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\config\chocolatey.config.backup".
2019-09-11 06:35:35,703 2404 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\config\chocolatey.config.2404.update"
to "C:\ProgramData\chocolatey\config\chocolatey.config".
2019-09-11 06:35:35,703 2404 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\config\chocolatey.config.2404.update".
2019-09-11 06:35:35,703 2404 [WARN ] - Enabled logEnvironmentValues
2019-09-11 06:35:35,719 2404 [DEBUG] - Sending message 'PostRunMessage' out if there are subscribers...
2019-09-11 06:35:35,737 2404 [DEBUG] - Exiting with 0
2019-09-11 06:35:36,686 2432 [DEBUG] - XmlConfiguration is now operational
2019-09-11 06:35:36,963 2432 [INFO ] - ============================================================
2019-09-11 06:35:37,826 2432 [INFO ] - Chocolatey v0.10.15
2019-09-11 06:35:37,862 2432 [DEBUG] - Chocolatey is running on Windows v 6.3.9600.0
2019-09-11 06:35:37,878 2432 [DEBUG] - Attempting to delete file "C:/ProgramData/chocolatey/choco.exe.old".
2019-09-11 06:35:37,878 2432 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\choco.exe.old".
2019-09-11 06:35:37,912 2432 [DEBUG] - Command line: "C:\ProgramData\chocolatey\choco.exe" feature disable -n showDownloadProgress
2019-09-11 06:35:37,912 2432 [DEBUG] - Received arguments: feature disable -n showDownloadProgress
2019-09-11 06:35:38,103 2432 [DEBUG] - RemovePendingPackagesTask is now ready and waiting for PreRunMessage.
2019-09-11 06:35:38,137 2432 [DEBUG] - Sending message 'PreRunMessage' out if there are subscribers...
2019-09-11 06:35:38,171 2432 [DEBUG] - [Pending] Removing all pending packages that should not be considered installed...
2019-09-11 06:35:38,380 2432 [DEBUG] - Performing validation checks.
2019-09-11 06:35:38,396 2432 [DEBUG] - Global Configuration Validation Checks:
2019-09-11 06:35:38,396 2432 [DEBUG] - - Package Exit Code / Exit On Reboot = Checked
2019-09-11 06:35:38,414 2432 [DEBUG] - System State Validation Checks:
2019-09-11 06:35:38,414 2432 [DEBUG] - Reboot Requirement Checks:
2019-09-11 06:35:38,430 2432 [DEBUG] - - Pending Computer Rename = Checked
2019-09-11 06:35:38,430 2432 [DEBUG] - - Pending Component Based Servicing = Checked
2019-09-11 06:35:38,430 2432 [DEBUG] - - Pending Windows Auto Update = Checked
2019-09-11 06:35:38,448 2432 [DEBUG] - - Pending File Rename Operations = Checked
2019-09-11 06:35:38,448 2432 [DEBUG] - - Pending Windows Package Installer = Checked
2019-09-11 06:35:38,448 2432 [DEBUG] - - Pending Windows Package Installer SysWow64 = Checked
2019-09-11 06:35:38,466 2432 [INFO ] - 2 validations performed. 2 success(es), 0 warning(s), and 0 error(s).
2019-09-11 06:35:38,482 2432 [DEBUG] - The source '' evaluated to a 'normal' source type
2019-09-11 06:35:38,482 2432 [DEBUG] -
NOTE: Hiding sensitive configuration data! Please double and triple
check to be sure no sensitive data is shown, especially if copying
output to a gist for review.
2019-09-11 06:35:38,569 2432 [DEBUG] - Configuration: CommandName='feature'|
CacheLocation='C:\Users\Administrator\AppData\Local\Temp\chocolatey'|
ContainsLegacyPackageInstalls='True'|
CommandExecutionTimeoutSeconds='2700'|WebRequestTimeoutSeconds='30'|
SourceType='normal'|Debug='False'|Verbose='False'|Trace='False'|
Force='False'|Noop='False'|HelpRequested='False'|
UnsuccessfulParsing='False'|RegularOutput='True'|QuietOutput='False'|
PromptForConfirmation='False'|AcceptLicense='False'|
AllowUnofficialBuild='False'|Input='disable'|AllVersions='False'|
SkipPackageInstallProvider='False'|Prerelease='False'|ForceX86='False'|
OverrideArguments='False'|NotSilent='False'|
ApplyPackageParametersToDependencies='False'|
ApplyInstallArgumentsToDependencies='False'|IgnoreDependencies='False'|
AllowMultipleVersions='False'|AllowDowngrade='False'|
ForceDependencies='False'|Information.PlatformType='Windows'|
Information.PlatformVersion='6.3.9600.0'|
Information.PlatformName='Windows Server 2012 R2'|
Information.ChocolateyVersion='0.10.15.0'|
Information.ChocolateyProductVersion='0.10.15'|
Information.FullName='choco, Version=0.10.15.0, Culture=neutral, PublicKeyToken=79d02ea9cad655eb'|
Information.Is64BitOperatingSystem='True'|
Information.Is64BitProcess='True'|Information.IsInteractive='True'|
Information.UserName='vagrant'|
Information.UserDomainName='WIN-E5K8TM30719'|
Information.IsUserAdministrator='True'|
Information.IsUserSystemAccount='False'|
Information.IsUserRemoteDesktop='False'|
Information.IsUserRemote='True'|
Information.IsProcessElevated='True'|
Information.IsLicensedVersion='False'|Information.LicenseType='Foss'|
Information.CurrentDirectory='C:\Windows\system32'|
Features.AutoUninstaller='True'|Features.ChecksumFiles='True'|
Features.AllowEmptyChecksums='False'|
Features.AllowEmptyChecksumsSecure='True'|
Features.FailOnAutoUninstaller='False'|
Features.FailOnStandardError='False'|Features.UsePowerShellHost='True'|
Features.LogEnvironmentValues='True'|Features.LogWithoutColor='False'|
Features.VirusCheck='False'|
Features.FailOnInvalidOrMissingLicense='False'|
Features.IgnoreInvalidOptionsSwitches='True'|
Features.UsePackageExitCodes='True'|
Features.UseEnhancedExitCodes='False'|
Features.UseFipsCompliantChecksums='False'|
Features.ShowNonElevatedWarnings='True'|
Features.ShowDownloadProgress='True'|
Features.StopOnFirstPackageFailure='False'|
Features.UseRememberedArgumentsForUpgrades='False'|
Features.IgnoreUnfoundPackagesOnUpgradeOutdated='False'|
Features.SkipPackageUpgradesWhenNotInstalled='False'|
Features.RemovePackageInformationOnUninstall='False'|
Features.ExitOnRebootDetected='False'|
Features.LogValidationResultsOnWarnings='True'|
Features.UsePackageRepositoryOptimizations='True'|
Features.ScriptsCheckLastExitCode='False'|
ListCommand.LocalOnly='False'|
ListCommand.IdOnly='False'|ListCommand.IncludeRegistryPrograms='False'|
ListCommand.PageSize='25'|ListCommand.Exact='False'|
ListCommand.ByIdOnly='False'|ListCommand.ByTagOnly='False'|
ListCommand.IdStartsWith='False'|ListCommand.OrderByPopularity='False'|
ListCommand.ApprovedOnly='False'|
ListCommand.DownloadCacheAvailable='False'|
ListCommand.NotBroken='False'|
ListCommand.IncludeVersionOverrides='False'|
UpgradeCommand.FailOnUnfound='False'|
UpgradeCommand.FailOnNotInstalled='False'|
UpgradeCommand.NotifyOnlyAvailableUpgrades='False'|
UpgradeCommand.ExcludePrerelease='False'|
NewCommand.AutomaticPackage='False'|
NewCommand.UseOriginalTemplate='False'|SourceCommand.Command='unknown'|
SourceCommand.Priority='0'|SourceCommand.BypassProxy='False'|
SourceCommand.AllowSelfService='False'|
SourceCommand.VisibleToAdminsOnly='False'|
FeatureCommand.Name='showDownloadProgress'|
FeatureCommand.Command='disable'|ConfigCommand.Command='unknown'|
ApiKeyCommand.Remove='False'|PinCommand.Command='unknown'|
OutdatedCommand.IgnorePinned='False'|Proxy.BypassOnLocal='True'|
2019-09-11 06:35:38,569 2432 [DEBUG] - _ Chocolatey:ChocolateyFeatureCommand - Normal Run Mode _
2019-09-11 06:35:38,603 2432 [DEBUG] - Attempting to replace "C:\ProgramData\chocolatey\config\chocolatey.config"
with "C:\ProgramData\chocolatey\config\chocolatey.config.2432.update".
Backup placed at "C:\ProgramData\chocolatey\config\chocolatey.config.backup".
2019-09-11 06:35:38,603 2432 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\config\chocolatey.config.backup".
2019-09-11 06:35:38,620 2432 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\config\chocolatey.config.2432.update"
to "C:\ProgramData\chocolatey\config\chocolatey.config".
2019-09-11 06:35:38,620 2432 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\config\chocolatey.config.2432.update".
2019-09-11 06:35:38,638 2432 [WARN ] - Disabled showDownloadProgress
2019-09-11 06:35:38,638 2432 [DEBUG] - Sending message 'PostRunMessage' out if there are subscribers...
2019-09-11 06:35:38,655 2432 [DEBUG] - Exiting with 0
2019-09-11 06:37:12,194 2880 [DEBUG] - XmlConfiguration is now operational
2019-09-11 06:37:12,429 2880 [INFO ] - ============================================================
2019-09-11 06:37:13,243 2880 [INFO ] - Chocolatey v0.10.15
2019-09-11 06:37:13,288 2880 [DEBUG] - Chocolatey is running on Windows v 6.3.9600.0
2019-09-11 06:37:13,288 2880 [DEBUG] - Attempting to delete file "C:/ProgramData/chocolatey/choco.exe.old".
2019-09-11 06:37:13,304 2880 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\choco.exe.old".
2019-09-11 06:37:13,335 2880 [DEBUG] - Command line: "C:\ProgramData\chocolatey\choco.exe" install osquery --version 4.0.1 -fdvy --execution-timeout=2700 --allow-downgrade
2019-09-11 06:37:13,335 2880 [DEBUG] - Received arguments: install osquery --version 4.0.1 -fdvy --execution-timeout=2700 --allow-downgrade
2019-09-11 06:37:13,507 2880 [DEBUG] - RemovePendingPackagesTask is now ready and waiting for PreRunMessage.
2019-09-11 06:37:13,538 2880 [DEBUG] - Sending message 'PreRunMessage' out if there are subscribers...
2019-09-11 06:37:13,570 2880 [DEBUG] - [Pending] Removing all pending packages that should not be considered installed...
2019-09-11 06:37:13,757 2880 [DEBUG] - Performing validation checks.
2019-09-11 06:37:13,788 2880 [DEBUG] - Global Configuration Validation Checks:
2019-09-11 06:37:13,788 2880 [DEBUG] - - Package Exit Code / Exit On Reboot = Checked
2019-09-11 06:37:13,804 2880 [DEBUG] - System State Validation Checks:
2019-09-11 06:37:13,819 2880 [DEBUG] - Reboot Requirement Checks:
2019-09-11 06:37:13,819 2880 [DEBUG] - - Pending Computer Rename = Checked
2019-09-11 06:37:13,835 2880 [DEBUG] - - Pending Component Based Servicing = Checked
2019-09-11 06:37:13,835 2880 [DEBUG] - - Pending Windows Auto Update = Checked
2019-09-11 06:37:13,851 2880 [DEBUG] - - Pending File Rename Operations = Checked
2019-09-11 06:37:13,851 2880 [DEBUG] - - Pending Windows Package Installer = Checked
2019-09-11 06:37:13,866 2880 [DEBUG] - - Pending Windows Package Installer SysWow64 = Checked
2019-09-11 06:37:13,882 2880 [INFO ] - 2 validations performed. 2 success(es), 0 warning(s), and 0 error(s).
2019-09-11 06:37:13,898 2880 [DEBUG] - The source 'https://chocolatey.org/api/v2/' evaluated to a 'normal' source type
2019-09-11 06:37:13,913 2880 [DEBUG] -
NOTE: Hiding sensitive configuration data! Please double and triple
check to be sure no sensitive data is shown, especially if copying
output to a gist for review.
2019-09-11 06:37:13,976 2880 [DEBUG] - Configuration: CommandName='install'|
CacheLocation='C:\Users\Administrator\AppData\Local\Temp\chocolatey'|
ContainsLegacyPackageInstalls='True'|
CommandExecutionTimeoutSeconds='2700'|WebRequestTimeoutSeconds='30'|
Sources='https://chocolatey.org/api/v2/'|SourceType='normal'|
Debug='True'|Verbose='True'|Trace='False'|Force='True'|Noop='False'|
HelpRequested='False'|UnsuccessfulParsing='False'|RegularOutput='True'|
QuietOutput='False'|PromptForConfirmation='False'|AcceptLicense='True'|
AllowUnofficialBuild='False'|Input='osquery'|Version='4.0.1'|
AllVersions='False'|SkipPackageInstallProvider='False'|
PackageNames='osquery'|Prerelease='False'|ForceX86='False'|
OverrideArguments='False'|NotSilent='False'|
ApplyPackageParametersToDependencies='False'|
ApplyInstallArgumentsToDependencies='False'|IgnoreDependencies='False'|
AllowMultipleVersions='False'|AllowDowngrade='True'|
ForceDependencies='False'|Information.PlatformType='Windows'|
Information.PlatformVersion='6.3.9600.0'|
Information.PlatformName='Windows Server 2012 R2'|
Information.ChocolateyVersion='0.10.15.0'|
Information.ChocolateyProductVersion='0.10.15'|
Information.FullName='choco, Version=0.10.15.0, Culture=neutral, PublicKeyToken=79d02ea9cad655eb'|
Information.Is64BitOperatingSystem='True'|
Information.Is64BitProcess='True'|Information.IsInteractive='True'|
Information.UserName='vagrant'|
Information.UserDomainName='WIN-E5K8TM30719'|
Information.IsUserAdministrator='True'|
Information.IsUserSystemAccount='False'|
Information.IsUserRemoteDesktop='False'|
Information.IsUserRemote='True'|
Information.IsProcessElevated='True'|
Information.IsLicensedVersion='False'|Information.LicenseType='Foss'|
Information.CurrentDirectory='C:\Windows\system32'|
Features.AutoUninstaller='True'|Features.ChecksumFiles='True'|
Features.AllowEmptyChecksums='False'|
Features.AllowEmptyChecksumsSecure='True'|
Features.FailOnAutoUninstaller='False'|
Features.FailOnStandardError='False'|Features.UsePowerShellHost='True'|
Features.LogEnvironmentValues='True'|Features.LogWithoutColor='False'|
Features.VirusCheck='False'|
Features.FailOnInvalidOrMissingLicense='False'|
Features.IgnoreInvalidOptionsSwitches='True'|
Features.UsePackageExitCodes='True'|
Features.UseEnhancedExitCodes='False'|
Features.UseFipsCompliantChecksums='False'|
Features.ShowNonElevatedWarnings='True'|
Features.ShowDownloadProgress='False'|
Features.StopOnFirstPackageFailure='False'|
Features.UseRememberedArgumentsForUpgrades='False'|
Features.IgnoreUnfoundPackagesOnUpgradeOutdated='False'|
Features.SkipPackageUpgradesWhenNotInstalled='False'|
Features.RemovePackageInformationOnUninstall='False'|
Features.ExitOnRebootDetected='False'|
Features.LogValidationResultsOnWarnings='True'|
Features.UsePackageRepositoryOptimizations='True'|
Features.ScriptsCheckLastExitCode='False'|
ListCommand.LocalOnly='False'|
ListCommand.IdOnly='False'|ListCommand.IncludeRegistryPrograms='False'|
ListCommand.PageSize='25'|ListCommand.Exact='False'|
ListCommand.ByIdOnly='False'|ListCommand.ByTagOnly='False'|
ListCommand.IdStartsWith='False'|ListCommand.OrderByPopularity='False'|
ListCommand.ApprovedOnly='False'|
ListCommand.DownloadCacheAvailable='False'|
ListCommand.NotBroken='False'|
ListCommand.IncludeVersionOverrides='False'|
UpgradeCommand.FailOnUnfound='False'|
UpgradeCommand.FailOnNotInstalled='False'|
UpgradeCommand.NotifyOnlyAvailableUpgrades='False'|
UpgradeCommand.ExcludePrerelease='False'|
NewCommand.AutomaticPackage='False'|
NewCommand.UseOriginalTemplate='False'|SourceCommand.Command='unknown'|
SourceCommand.Priority='0'|SourceCommand.BypassProxy='False'|
SourceCommand.AllowSelfService='False'|
SourceCommand.VisibleToAdminsOnly='False'|
FeatureCommand.Command='unknown'|ConfigCommand.Command='unknown'|
ApiKeyCommand.Remove='False'|PinCommand.Command='unknown'|
OutdatedCommand.IgnorePinned='False'|Proxy.BypassOnLocal='True'|
2019-09-11 06:37:13,976 2880 [DEBUG] - _ Chocolatey:ChocolateyInstallCommand - Normal Run Mode _
2019-09-11 06:37:14,007 2880 [INFO ] - Installing the following packages:
2019-09-11 06:37:14,007 2880 [INFO ] - osquery
2019-09-11 06:37:14,007 2880 [INFO ] - By installing you accept licenses for the packages.
2019-09-11 06:37:14,038 2880 [DEBUG] - Current environment values (may contain sensitive data):
2019-09-11 06:37:14,038 2880 [DEBUG] - * 'TMP'='C:\Users\Administrator\AppData\Local\Temp' ('User')
2019-09-11 06:37:14,038 2880 [DEBUG] - * 'TEMP'='C:\Users\Administrator\AppData\Local\Temp' ('User')
2019-09-11 06:37:14,054 2880 [DEBUG] - * 'ChocolateyLastPathUpdate'='132126573091086488' ('User')
2019-09-11 06:37:14,054 2880 [DEBUG] - * 'FP_NO_HOST_CHECK'='NO' ('Machine')
2019-09-11 06:37:14,054 2880 [DEBUG] - * 'USERNAME'='SYSTEM' ('Machine')
2019-09-11 06:37:14,054 2880 [DEBUG] - * 'Path'='C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\Git\bin;C:\ProgramData\chocolatey\bin;' ('Machine')
2019-09-11 06:37:14,069 2880 [DEBUG] - * 'ComSpec'='C:\Windows\system32\cmd.exe' ('Machine')
2019-09-11 06:37:14,069 2880 [DEBUG] - * 'TMP'='C:\Windows\TEMP' ('Machine')
2019-09-11 06:37:14,069 2880 [DEBUG] - * 'OS'='Windows_NT' ('Machine')
2019-09-11 06:37:14,085 2880 [DEBUG] - * 'windir'='C:\Windows' ('Machine')
2019-09-11 06:37:14,085 2880 [DEBUG] - * 'PROCESSOR_ARCHITECTURE'='AMD64' ('Machine')
2019-09-11 06:37:14,085 2880 [DEBUG] - * 'TEMP'='C:\Windows\TEMP' ('Machine')
2019-09-11 06:37:14,085 2880 [DEBUG] - * 'PATHEXT'='.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC' ('Machine')
2019-09-11 06:37:14,101 2880 [DEBUG] - * 'PSModulePath'='C:\Windows\system32\WindowsPowerShell\v1.0\Modules\' ('Machine')
2019-09-11 06:37:14,101 2880 [DEBUG] - * 'NUMBER_OF_PROCESSORS'='4' ('Machine')
2019-09-11 06:37:14,101 2880 [DEBUG] - * 'PROCESSOR_LEVEL'='6' ('Machine')
2019-09-11 06:37:14,101 2880 [DEBUG] - * 'PROCESSOR_IDENTIFIER'='Intel64 Family 6 Model 45 Stepping 7, GenuineIntel' ('Machine')
2019-09-11 06:37:14,116 2880 [DEBUG] - * 'PROCESSOR_REVISION'='2d07' ('Machine')
2019-09-11 06:37:14,116 2880 [DEBUG] - * 'HOME'='C:\Users\Administrator' ('Machine')
2019-09-11 06:37:14,116 2880 [DEBUG] - * 'ChocolateyInstall'='C:\ProgramData\chocolatey' ('Machine')
2019-09-11 06:37:21,960 2880 [INFO ] - [NuGet] Installing 'osquery 4.0.1'.
2019-09-11 06:37:22,007 2880 [DEBUG] - [NuGet] Added file 'osquery.zip' to folder 'osquery\tools\bin'.
2019-09-11 06:37:22,007 2880 [DEBUG] - [NuGet] Added file 'chocolateyBeforeModify.ps1' to folder 'osquery\tools'.
2019-09-11 06:37:22,007 2880 [DEBUG] - [NuGet] Added file 'chocolateyinstall.ps1' to folder 'osquery\tools'.
2019-09-11 06:37:22,023 2880 [DEBUG] - [NuGet] Added file 'chocolateyuninstall.ps1' to folder 'osquery\tools'.
2019-09-11 06:37:22,023 2880 [DEBUG] - [NuGet] Added file 'LICENSE.txt' to folder 'osquery\tools'.
2019-09-11 06:37:22,038 2880 [DEBUG] - [NuGet] Added file 'osquery_utils.ps1' to folder 'osquery\tools'.
2019-09-11 06:37:22,038 2880 [DEBUG] - [NuGet] Added file 'VERIFICATION.txt' to folder 'osquery\tools'.
2019-09-11 06:37:23,101 2880 [DEBUG] - [NuGet] Added file 'osquery.nupkg' to folder 'osquery'.
2019-09-11 06:37:24,601 2880 [DEBUG] - [NuGet] Added file 'osquery.nuspec' to folder 'osquery'.
2019-09-11 06:37:24,616 2880 [INFO ] - [NuGet] Successfully installed 'osquery 4.0.1'.
2019-09-11 06:37:24,616 2880 [INFO ] -
osquery v4.0.1 (forced)
2019-09-11 06:37:24,773 2880 [INFO ] - osquery package files install completed. Performing other installation steps.
2019-09-11 06:37:25,038 2880 [DEBUG] - Setting installer args for osquery
2019-09-11 06:37:25,117 2880 [DEBUG] - Setting package parameters for osquery
2019-09-11 06:37:25,117 2880 [DEBUG] - Contents of 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1':
2019-09-11 06:37:25,148 2880 [DEBUG] - # Copyright (c) 2014-present, Facebook, Inc.
# All rights reserved.
#
# This source code is licensed in accordance with the terms specified in
# the LICENSE file found in the root directory of this source tree.
# This library file contains constant definitions and helper functions
#Requires -Version 3.0
. "$PSScriptRoot\\osquery_utils.ps1"
$packageParameters = $env:chocolateyPackageParameters
$arguments = @{}
# Ensure the service is stopped and processes are not running if exists.
if ((Get-Service $serviceName -ErrorAction SilentlyContinue) -and `
(Get-Service $serviceName).Status -eq 'Running') {
Stop-Service $serviceName
# If we find zombie processes, ensure they're termintated
$proc = Get-Process | Where-Object { $_.ProcessName -eq 'osqueryd' }
if ($null -ne $proc) {
Stop-Process -Force $proc -ErrorAction SilentlyContinue
}
}
# Lastly, ensure that the Deny Write ACLs have been removed before modifying
if (Test-Path $daemonFolder) {
Set-DenyWriteAcl $daemonFolder 'Remove'
}
if (Test-Path $extensionsFolder) {
Set-DenyWriteAcl $extensionsFolder 'Remove'
}
# Now parse the packageParameters using good old regular expression
if ($packageParameters) {
$match_pattern = "\/(?<option>([a-zA-Z]+)):(?<value>([`"'])?([a-zA-Z0-9- _\\:\.]+)([`"'])?)|\/(?<option>([a-zA-Z]+))"
$option_name = 'option'
$value_name = 'value'
if ($packageParameters -match $match_pattern ) {
$results = $packageParameters | Select-String $match_pattern -AllMatches
$results.matches | ForEach-Object {
$arguments.Add(
$_.Groups[$option_name].Value.Trim(),
$_.Groups[$value_name].Value.Trim())
}
} else {
Throw "Package Parameters were found but were invalid (REGEX Failure)"
}
if ($arguments.ContainsKey("InstallService")) {
$installService = $true
}
} else {
Write-Debug "No Package Parameters Passed in"
}
New-Item -Force -Type directory -Path $daemonFolder
New-Item -Force -Type directory -Path $logFolder
$packagePath = "$(Split-Path -Parent $MyInvocation.MyCommand.Definition)\\bin\\osquery.zip"
Get-ChocolateyUnzip -FileFullPath $packagePath -Destination $targetFolder
# In order to run osqueryd as a service, we need to have a folder that has a
# Deny Write ACL to everyone.
Move-Item -Force -Path $targetDaemonBin -Destination $destDaemonBin
Set-SafePermissions $daemonFolder
if ($installService) {
if (-not (Get-Service $serviceName -ErrorAction SilentlyContinue)) {
Write-Debug 'Installing osquery daemon service.'
# If the 'install' parameter is passed, we create a Windows service with
# the flag file in the default location in \Program Files\osquery\
# the flag file in the default location in Program Files
$cmd = '"{0}" --flagfile="C:\Program Files\osquery\osquery.flags"' -f $destDaemonBin
$svcArgs = @{
Name = $serviceName
BinaryPathName = $cmd
DisplayName = $serviceName
Description = $serviceDescription
StartupType = "Automatic"
}
New-Service @svcArgs
# If the osquery.flags file doesn't exist, we create a blank one.
if (-not (Test-Path "$targetFolder\osquery.flags")) {
Add-Content "$targetFolder\osquery.flags" $null
}
}
Start-Service $serviceName
}
# Add osquery binary path to machines path for ease of use.
Add-ToSystemPath $targetFolder
2019-09-11 06:37:25,960 2880 [DEBUG] - Calling built-in PowerShell host with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = ''; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1' -installArguments '' -packageParameters ''']
2019-09-11 06:37:25,960 2880 [DEBUG] - Redirecting System.Management.Automation.resources, Version=3.0.0.0, Culture=en-US, PublicKeyToken=31bf3856ad364e35, requested by ''
2019-09-11 06:37:27,554 2880 [DEBUG] - Host version is 4.0, PowerShell Version is '4.0' and CLR Version is '4.0.30319.33440'.
2019-09-11 06:37:28,132 2880 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2019-09-11 06:37:28,148 2880 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2019-09-11 06:37:28,148 2880 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2019-09-11 06:37:28,148 2880 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2019-09-11 06:37:28,163 2880 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2019-09-11 06:37:28,163 2880 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2019-09-11 06:37:28,163 2880 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2019-09-11 06:37:28,163 2880 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2019-09-11 06:37:28,179 2880 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2019-09-11 06:37:28,179 2880 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2019-09-11 06:37:28,179 2880 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2019-09-11 06:37:28,179 2880 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2019-09-11 06:37:28,194 2880 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2019-09-11 06:37:28,194 2880 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2019-09-11 06:37:28,194 2880 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2019-09-11 06:37:28,210 2880 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2019-09-11 06:37:28,210 2880 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2019-09-11 06:37:28,210 2880 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2019-09-11 06:37:28,210 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyDesktopLink'.
2019-09-11 06:37:28,226 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2019-09-11 06:37:28,226 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2019-09-11 06:37:28,226 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2019-09-11 06:37:28,226 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2019-09-11 06:37:28,241 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2019-09-11 06:37:28,241 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2019-09-11 06:37:28,241 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2019-09-11 06:37:28,257 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2019-09-11 06:37:28,257 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2019-09-11 06:37:28,273 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2019-09-11 06:37:28,273 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2019-09-11 06:37:28,273 2880 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2019-09-11 06:37:28,288 2880 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2019-09-11 06:37:28,288 2880 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2019-09-11 06:37:28,288 2880 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2019-09-11 06:37:28,288 2880 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2019-09-11 06:37:28,304 2880 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2019-09-11 06:37:28,304 2880 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2019-09-11 06:37:28,304 2880 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2019-09-11 06:37:28,319 2880 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2019-09-11 06:37:28,319 2880 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2019-09-11 06:37:28,319 2880 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateyFailure'.
2019-09-11 06:37:28,319 2880 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateySuccess'.
2019-09-11 06:37:28,335 2880 [INFO ] - VERBOSE: Exporting function 'Write-FileUpdateLog'.
2019-09-11 06:37:28,335 2880 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2019-09-11 06:37:28,335 2880 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2019-09-11 06:37:28,351 2880 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2019-09-11 06:37:28,351 2880 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2019-09-11 06:37:28,351 2880 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2019-09-11 06:37:28,351 2880 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2019-09-11 06:37:28,366 2880 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2019-09-11 06:37:28,366 2880 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2019-09-11 06:37:28,366 2880 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2019-09-11 06:37:28,382 2880 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2019-09-11 06:37:28,413 2880 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2019-09-11 06:37:28,413 2880 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2019-09-11 06:37:28,429 2880 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2019-09-11 06:37:28,429 2880 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2019-09-11 06:37:28,429 2880 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2019-09-11 06:37:28,444 2880 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2019-09-11 06:37:28,444 2880 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2019-09-11 06:37:28,444 2880 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2019-09-11 06:37:28,460 2880 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2019-09-11 06:37:28,460 2880 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2019-09-11 06:37:28,460 2880 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2019-09-11 06:37:28,460 2880 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2019-09-11 06:37:28,476 2880 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2019-09-11 06:37:28,476 2880 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2019-09-11 06:37:28,476 2880 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2019-09-11 06:37:28,491 2880 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2019-09-11 06:37:28,491 2880 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2019-09-11 06:37:28,491 2880 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2019-09-11 06:37:28,491 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyDesktopLink'.
2019-09-11 06:37:28,507 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2019-09-11 06:37:28,507 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2019-09-11 06:37:28,507 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2019-09-11 06:37:28,523 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2019-09-11 06:37:28,523 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2019-09-11 06:37:28,523 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2019-09-11 06:37:28,523 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2019-09-11 06:37:28,538 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2019-09-11 06:37:28,538 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2019-09-11 06:37:28,538 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2019-09-11 06:37:28,554 2880 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2019-09-11 06:37:28,554 2880 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2019-09-11 06:37:28,554 2880 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2019-09-11 06:37:28,554 2880 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2019-09-11 06:37:28,569 2880 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2019-09-11 06:37:28,569 2880 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2019-09-11 06:37:28,569 2880 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2019-09-11 06:37:28,585 2880 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2019-09-11 06:37:28,585 2880 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2019-09-11 06:37:28,585 2880 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2019-09-11 06:37:28,585 2880 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2019-09-11 06:37:28,601 2880 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateyFailure'.
2019-09-11 06:37:28,601 2880 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateySuccess'.
2019-09-11 06:37:28,601 2880 [INFO ] - VERBOSE: Exporting function 'Write-FileUpdateLog'.
2019-09-11 06:37:28,616 2880 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2019-09-11 06:37:28,616 2880 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2019-09-11 06:37:28,616 2880 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2019-09-11 06:37:28,616 2880 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2019-09-11 06:37:28,632 2880 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2019-09-11 06:37:28,632 2880 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2019-09-11 06:37:28,632 2880 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2019-09-11 06:37:28,648 2880 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2019-09-11 06:37:28,648 2880 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2019-09-11 06:37:28,648 2880 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2019-09-11 06:37:28,648 2880 [INFO ] - VERBOSE: Importing function 'Format-FileSize'.
2019-09-11 06:37:28,663 2880 [INFO ] - VERBOSE: Importing function 'Get-ChecksumValid'.
2019-09-11 06:37:28,663 2880 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyUnzip'.
2019-09-11 06:37:28,663 2880 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyWebFile'.
2019-09-11 06:37:28,679 2880 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariable'.
2019-09-11 06:37:28,679 2880 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariableNames'.
2019-09-11 06:37:28,679 2880 [INFO ] - VERBOSE: Importing function 'Get-FtpFile'.
2019-09-11 06:37:28,694 2880 [INFO ] - VERBOSE: Importing function 'Get-OSArchitectureWidth'.
2019-09-11 06:37:28,694 2880 [INFO ] - VERBOSE: Importing function 'Get-PackageParameters'.
2019-09-11 06:37:28,694 2880 [INFO ] - VERBOSE: Importing function 'Get-PackageParametersBuiltIn'.
2019-09-11 06:37:28,694 2880 [INFO ] - VERBOSE: Importing function 'Get-ToolsLocation'.
2019-09-11 06:37:28,710 2880 [INFO ] - VERBOSE: Importing function 'Get-UACEnabled'.
2019-09-11 06:37:28,710 2880 [INFO ] - VERBOSE: Importing function 'Get-UninstallRegistryKey'.
2019-09-11 06:37:28,710 2880 [INFO ] - VERBOSE: Importing function 'Get-VirusCheckValid'.
2019-09-11 06:37:28,710 2880 [INFO ] - VERBOSE: Importing function 'Get-WebFile'.
2019-09-11 06:37:28,726 2880 [INFO ] - VERBOSE: Importing function 'Get-WebFileName'.
2019-09-11 06:37:28,726 2880 [INFO ] - VERBOSE: Importing function 'Get-WebHeaders'.
2019-09-11 06:37:28,726 2880 [INFO ] - VERBOSE: Importing function 'Install-BinFile'.
2019-09-11 06:37:28,741 2880 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyDesktopLink'.
2019-09-11 06:37:28,741 2880 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyEnvironmentVariable'.
2019-09-11 06:37:28,741 2880 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyExplorerMenuItem'.
2019-09-11 06:37:28,741 2880 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyFileAssociation'.
2019-09-11 06:37:28,757 2880 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyInstallPackage'.
2019-09-11 06:37:28,757 2880 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPackage'.
2019-09-11 06:37:28,757 2880 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPath'.
2019-09-11 06:37:28,757 2880 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPinnedTaskBarItem'.
2019-09-11 06:37:28,773 2880 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPowershellCommand'.
2019-09-11 06:37:28,773 2880 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyShortcut'.
2019-09-11 06:37:28,773 2880 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyVsixPackage'.
2019-09-11 06:37:28,788 2880 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyZipPackage'.
2019-09-11 06:37:28,788 2880 [INFO ] - VERBOSE: Importing function 'Install-Vsix'.
2019-09-11 06:37:28,788 2880 [INFO ] - VERBOSE: Importing function 'Set-EnvironmentVariable'.
2019-09-11 06:37:28,788 2880 [INFO ] - VERBOSE: Importing function 'Set-PowerShellExitCode'.
2019-09-11 06:37:28,804 2880 [INFO ] - VERBOSE: Importing function 'Start-ChocolateyProcessAsAdmin'.
2019-09-11 06:37:28,804 2880 [INFO ] - VERBOSE: Importing function 'Test-ProcessAdminRights'.
2019-09-11 06:37:28,804 2880 [INFO ] - VERBOSE: Importing function 'Uninstall-BinFile'.
2019-09-11 06:37:28,804 2880 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyEnvironmentVariable'.
2019-09-11 06:37:28,819 2880 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyPackage'.
2019-09-11 06:37:28,819 2880 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyZipPackage'.
2019-09-11 06:37:28,819 2880 [INFO ] - VERBOSE: Importing function 'Update-SessionEnvironment'.
2019-09-11 06:37:28,835 2880 [INFO ] - VERBOSE: Importing function 'Write-ChocolateyFailure'.
2019-09-11 06:37:28,835 2880 [INFO ] - VERBOSE: Importing function 'Write-ChocolateySuccess'.
2019-09-11 06:37:28,835 2880 [INFO ] - VERBOSE: Importing function 'Write-FileUpdateLog'.
2019-09-11 06:37:28,835 2880 [INFO ] - VERBOSE: Importing function 'Write-FunctionCallLogMessage'.
2019-09-11 06:37:28,851 2880 [INFO ] - VERBOSE: Importing alias 'Add-BinFile'.
2019-09-11 06:37:28,851 2880 [INFO ] - VERBOSE: Importing alias 'Generate-BinFile'.
2019-09-11 06:37:28,851 2880 [INFO ] - VERBOSE: Importing alias 'Get-InstallRegistryKey'.
2019-09-11 06:37:28,866 2880 [INFO ] - VERBOSE: Importing alias 'Get-OSBitness'.
2019-09-11 06:37:28,866 2880 [INFO ] - VERBOSE: Importing alias 'Get-ProcessorBits'.
2019-09-11 06:37:28,866 2880 [INFO ] - VERBOSE: Importing alias 'Invoke-ChocolateyProcess'.
2019-09-11 06:37:28,866 2880 [INFO ] - VERBOSE: Importing alias 'refreshenv'.
2019-09-11 06:37:28,882 2880 [INFO ] - VERBOSE: Importing alias 'Remove-BinFile'.
2019-09-11 06:37:28,882 2880 [INFO ] - VERBOSE: Importing alias 'Start-ChocolateyProcess'.
2019-09-11 06:37:29,132 2880 [DEBUG] - ---------------------------Script Execution---------------------------
2019-09-11 06:37:29,148 2880 [DEBUG] - Running 'ChocolateyScriptRunner' for osquery v4.0.1 with packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1', packageFolder:'C:\ProgramData\chocolatey\lib\osquery', installArguments: '', packageParameters: '',
2019-09-11 06:37:29,195 2880 [DEBUG] - Running 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1'
2019-09-11 06:37:29,710 2880 [DEBUG] - No Package Parameters Passed in
2019-09-11 06:37:29,742 2880 [INFO ] - C:\Program Files\osquery\osqueryd
2019-09-11 06:37:29,742 2880 [INFO ] - C:\Program Files\osquery\log
2019-09-11 06:37:30,023 2880 [DEBUG] - Running Get-ChocolateyUnzip -fileFullPath 'C:\ProgramData\chocolatey\lib\osquery\tools\\bin\\osquery.zip' -destination 'C:\Program Files\osquery'
2019-09-11 06:37:30,023 2880 [DEBUG] - Running Get-ProcessorBits -compare '32'
2019-09-11 06:37:30,101 2880 [INFO ] - Extracting C:\ProgramData\chocolatey\lib\osquery\tools\\bin\\osquery.zip to C:\Program Files\osquery...
2019-09-11 06:37:30,116 2880 [INFO ] -
2019-09-11 06:37:30,148 2880 [DEBUG] - 7zip found at 'C:\ProgramData\chocolatey\tools\7z.exe'
2019-09-11 06:37:30,257 2880 [DEBUG] - Executing command ['C:\ProgramData\chocolatey\tools\7z.exe' x -aoa -bd -bb1 -o"C:\Program Files\osquery" -y "C:\ProgramData\chocolatey\lib\osquery\tools\\bin\\osquery.zip"]
2019-09-11 06:37:33,101 2880 [INFO ] - VERBOSE:
2019-09-11 06:37:33,116 2880 [INFO ] - VERBOSE: 7-Zip 18.06 (x86) : Copyright (c) 1999-2018 Igor Pavlov : 2018-12-30
2019-09-11 06:37:33,132 2880 [INFO ] - VERBOSE:
2019-09-11 06:37:33,132 2880 [INFO ] - VERBOSE: Scanning the drive for archives:
2019-09-11 06:37:33,132 2880 [INFO ] - VERBOSE: 1 file, 9455234 bytes (9234 KiB)
2019-09-11 06:37:33,150 2880 [INFO ] - VERBOSE:
2019-09-11 06:37:33,150 2880 [INFO ] - VERBOSE: Extracting archive: C:\ProgramData\chocolatey\lib\osquery\tools\\bin\\osquery.zip
2019-09-11 06:37:33,150 2880 [INFO ] - VERBOSE: --
2019-09-11 06:37:33,163 2880 [INFO ] - VERBOSE: Path = C:\ProgramData\chocolatey\lib\osquery\tools\\bin\\osquery.zip
2019-09-11 06:37:33,163 2880 [INFO ] - VERBOSE: Type = zip
2019-09-11 06:37:33,163 2880 [INFO ] - VERBOSE: Physical Size = 9455234
2019-09-11 06:37:33,179 2880 [INFO ] - VERBOSE:
2019-09-11 06:37:33,179 2880 [INFO ] - VERBOSE: - certs
2019-09-11 06:37:33,226 2880 [INFO ] - VERBOSE: - certs\certs.pem
2019-09-11 06:37:33,226 2880 [INFO ] - VERBOSE: - LICENSE.txt
2019-09-11 06:37:33,226 2880 [INFO ] - VERBOSE: - manage-osqueryd.ps1
2019-09-11 06:37:33,241 2880 [INFO ] - VERBOSE: - osquery.example.conf
2019-09-11 06:37:33,241 2880 [INFO ] - VERBOSE: - osquery.man
2019-09-11 06:37:33,241 2880 [INFO ] - VERBOSE: - osqueryd.exe
2019-09-11 06:37:33,257 2880 [INFO ] - VERBOSE: - osqueryi.exe
2019-09-11 06:37:33,257 2880 [INFO ] - VERBOSE: - packs
2019-09-11 06:37:33,257 2880 [INFO ] - VERBOSE: - packs\hardware-monitoring.conf
2019-09-11 06:37:33,273 2880 [INFO ] - VERBOSE: - packs\incident-response.conf
2019-09-11 06:37:33,273 2880 [INFO ] - VERBOSE: - packs\it-compliance.conf
2019-09-11 06:37:33,273 2880 [INFO ] - VERBOSE: - packs\osquery-monitoring.conf
2019-09-11 06:37:33,288 2880 [INFO ] - VERBOSE: - packs\ossec-rootkit.conf
2019-09-11 06:37:33,288 2880 [INFO ] - VERBOSE: - packs\osx-attacks.conf
2019-09-11 06:37:33,288 2880 [INFO ] - VERBOSE: - packs\unwanted-chrome-extensions.conf
2019-09-11 06:37:33,304 2880 [INFO ] - VERBOSE: - packs\vuln-management.conf
2019-09-11 06:37:33,304 2880 [INFO ] - VERBOSE: - packs\windows-attacks.conf
2019-09-11 06:37:33,304 2880 [INFO ] - VERBOSE: - packs\windows-hardening.conf
2019-09-11 06:37:33,319 2880 [INFO ] - VERBOSE: - VERIFICATION.txt
2019-09-11 06:37:33,319 2880 [INFO ] - VERBOSE: Everything is Ok
2019-09-11 06:37:33,319 2880 [INFO ] - VERBOSE:
2019-09-11 06:37:33,319 2880 [INFO ] - VERBOSE: Folders: 2
2019-09-11 06:37:33,351 2880 [INFO ] - VERBOSE: Files: 18
2019-09-11 06:37:33,351 2880 [INFO ] - VERBOSE: Size: 24098521
2019-09-11 06:37:33,366 2880 [INFO ] - VERBOSE: Compressed: 9455234
2019-09-11 06:37:35,507 2880 [DEBUG] - $exitCode was passed null
2019-09-11 06:37:35,507 2880 [DEBUG] - Command ['C:\ProgramData\chocolatey\tools\7z.exe' x -aoa -bd -bb1 -o"C:\Program Files\osquery" -y "C:\ProgramData\chocolatey\lib\osquery\tools\\bin\\osquery.zip"] exited with '0'.
2019-09-11 06:37:35,523 2880 [DEBUG] - 7z exit code: 0
2019-09-11 06:37:35,538 2880 [INFO ] - C:\Program Files\osquery
2019-09-11 06:37:36,007 2880 [ERROR] - Attempted to perform an unauthorized operation.
2019-09-11 06:37:36,038 2880 [ERROR] - Access to the path 'C:\Program Files\osquery\osqueryd' is denied.
2019-09-11 06:37:36,054 2880 [INFO ] - True
2019-09-11 06:37:39,179 2880 [DEBUG] - ----------------------------------------------------------------------
2019-09-11 06:37:39,210 2880 [DEBUG] - Built-in PowerShell host called with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = ''; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1' -installArguments '' -packageParameters '''] exited with '0'.
2019-09-11 06:37:39,210 2880 [WARN ] - Only an exit code of non-zero will fail the package by default. Set
`--failonstderr` if you want error messages to also fail a script. See
`choco -h` for details.
2019-09-11 06:37:39,226 2880 [DEBUG] - Calling command ['"C:\Windows\System32\shutdown.exe" /a']
2019-09-11 06:37:39,340 2880 [DEBUG] - Command ['"C:\Windows\System32\shutdown.exe" /a'] exited with '1116'
2019-09-11 06:37:39,445 2880 [WARN ] - Environment Vars (like PATH) have changed. Close/reopen your shell to
see the changes (or in powershell/cmd.exe just type `refreshenv`).
2019-09-11 06:37:39,445 2880 [DEBUG] - The following values have been added/changed (may contain sensitive data):
2019-09-11 06:37:39,460 2880 [DEBUG] - * Path='C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\Git\bin;C:\ProgramData\chocolatey\bin;C:\Program Files\osquery' (Machine)
2019-09-11 06:37:39,679 2880 [DEBUG] - Capturing package files in 'C:\ProgramData\chocolatey\lib\osquery'
2019-09-11 06:37:39,946 2880 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg'
with checksum '38E8F98DB8F941C819344B16FECFDE45'
2019-09-11 06:37:39,946 2880 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec'
with checksum '0A66BF13F2C6953A76BD828F48D6991A'
2019-09-11 06:37:39,960 2880 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1'
with checksum '76A42C245B2F0049FB8F1DAF4B6E6C65'
2019-09-11 06:37:39,960 2880 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1'
with checksum '7336372EA65242F2639C23553FB94BD6'
2019-09-11 06:37:39,960 2880 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1'
with checksum '892D485A47E61F78C9CF316F31C4BEE1'
2019-09-11 06:37:39,960 2880 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\LICENSE.txt'
with checksum 'DD399CA08A28F2D449C22B56D76CC606'
2019-09-11 06:37:39,976 2880 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1'
with checksum '2835A38236767FD1A9D573CAC66251DA'
2019-09-11 06:37:39,976 2880 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\VERIFICATION.txt'
with checksum '47FB3CCB97A1A6666197F49D936AA1BE'
2019-09-11 06:37:40,335 2880 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\bin\osquery.zip'
with checksum 'D875463CE44AC430901A411B781FA989'
2019-09-11 06:37:40,523 2880 [DEBUG] - Adding 'Hidden' attribute(s) to 'C:\ProgramData\chocolatey\.chocolatey'.
2019-09-11 06:37:40,538 2880 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\.chocolatey\osquery.4.0.1".
2019-09-11 06:37:40,585 2880 [DEBUG] - There was no original file at 'C:\ProgramData\chocolatey\.chocolatey\osquery.4.0.1\.files'
2019-09-11 06:37:40,602 2880 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\.chocolatey\osquery.4.0.1\.extra".
2019-09-11 06:37:40,602 2880 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\.chocolatey\osquery.4.0.1\.version".
2019-09-11 06:37:40,602 2880 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\.chocolatey\osquery.4.0.1\.sxs".
2019-09-11 06:37:40,616 2880 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\.chocolatey\osquery.4.0.1\.pin".
2019-09-11 06:37:40,616 2880 [DEBUG] - Sending message 'HandlePackageResultCompletedMessage' out if there are subscribers...
2019-09-11 06:37:40,632 2880 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\.chocolateyPending".
2019-09-11 06:37:40,648 2880 [INFO ] - The install of osquery was successful.
2019-09-11 06:37:40,648 2880 [INFO ] - Software installed to 'C:\Program Files\osquery'
2019-09-11 06:37:40,663 2880 [DEBUG] - Attempting to delete file "C:\Users\Administrator\AppData\Local\NuGet\Cache\osquery.4.0.1.nupkg".
2019-09-11 06:37:40,710 2880 [WARN ] -
Chocolatey installed 1/1 packages.
See the log for details (C:\ProgramData\chocolatey\logs\chocolatey.log).
2019-09-11 06:37:40,726 2880 [DEBUG] - Sending message 'PostRunMessage' out if there are subscribers...
2019-09-11 06:37:40,789 2880 [DEBUG] - Exiting with 0
2019-09-11 06:38:12,822 2620 [DEBUG] - XmlConfiguration is now operational
2019-09-11 06:38:13,023 2620 [INFO ] - ============================================================
2019-09-11 06:38:13,804 2620 [INFO ] - Chocolatey v0.10.15
2019-09-11 06:38:13,835 2620 [DEBUG] - Chocolatey is running on Windows v 6.3.9600.0
2019-09-11 06:38:13,851 2620 [DEBUG] - Attempting to delete file "C:/ProgramData/chocolatey/choco.exe.old".
2019-09-11 06:38:13,851 2620 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\choco.exe.old".
2019-09-11 06:38:13,882 2620 [DEBUG] - Command line: "C:\ProgramData\chocolatey\choco.exe" uninstall osquery --version 4.0.1 -dvy --execution-timeout=2700
2019-09-11 06:38:13,882 2620 [DEBUG] - Received arguments: uninstall osquery --version 4.0.1 -dvy --execution-timeout=2700
2019-09-11 06:38:14,055 2620 [DEBUG] - RemovePendingPackagesTask is now ready and waiting for PreRunMessage.
2019-09-11 06:38:14,069 2620 [DEBUG] - Sending message 'PreRunMessage' out if there are subscribers...
2019-09-11 06:38:14,101 2620 [DEBUG] - [Pending] Removing all pending packages that should not be considered installed...
2019-09-11 06:38:14,273 2620 [DEBUG] - Performing validation checks.
2019-09-11 06:38:14,289 2620 [DEBUG] - Global Configuration Validation Checks:
2019-09-11 06:38:14,304 2620 [DEBUG] - - Package Exit Code / Exit On Reboot = Checked
2019-09-11 06:38:14,319 2620 [DEBUG] - System State Validation Checks:
2019-09-11 06:38:14,319 2620 [DEBUG] - Reboot Requirement Checks:
2019-09-11 06:38:14,335 2620 [DEBUG] - - Pending Computer Rename = Checked
2019-09-11 06:38:14,351 2620 [DEBUG] - - Pending Component Based Servicing = Checked
2019-09-11 06:38:14,351 2620 [DEBUG] - - Pending Windows Auto Update = Checked
2019-09-11 06:38:14,351 2620 [DEBUG] - - Pending File Rename Operations = Checked
2019-09-11 06:38:14,366 2620 [DEBUG] - - Pending Windows Package Installer = Checked
2019-09-11 06:38:14,366 2620 [DEBUG] - - Pending Windows Package Installer SysWow64 = Checked
2019-09-11 06:38:14,382 2620 [INFO ] - 2 validations performed. 2 success(es), 0 warning(s), and 0 error(s).
2019-09-11 06:38:14,398 2620 [DEBUG] - The source 'https://chocolatey.org/api/v2/' evaluated to a 'normal' source type
2019-09-11 06:38:14,398 2620 [DEBUG] -
NOTE: Hiding sensitive configuration data! Please double and triple
check to be sure no sensitive data is shown, especially if copying
output to a gist for review.
2019-09-11 06:38:14,476 2620 [DEBUG] - Configuration: CommandName='uninstall'|
CacheLocation='C:\Users\Administrator\AppData\Local\Temp\chocolatey'|
ContainsLegacyPackageInstalls='True'|
CommandExecutionTimeoutSeconds='2700'|WebRequestTimeoutSeconds='30'|
Sources='https://chocolatey.org/api/v2/'|SourceType='normal'|
Debug='True'|Verbose='True'|Trace='False'|Force='False'|Noop='False'|
HelpRequested='False'|UnsuccessfulParsing='False'|RegularOutput='True'|
QuietOutput='False'|PromptForConfirmation='False'|AcceptLicense='True'|
AllowUnofficialBuild='False'|Input='osquery'|Version='4.0.1'|
AllVersions='False'|SkipPackageInstallProvider='False'|
PackageNames='osquery'|Prerelease='False'|ForceX86='False'|
OverrideArguments='False'|NotSilent='False'|
ApplyPackageParametersToDependencies='False'|
ApplyInstallArgumentsToDependencies='False'|IgnoreDependencies='False'|
AllowMultipleVersions='False'|AllowDowngrade='False'|
ForceDependencies='False'|Information.PlatformType='Windows'|
Information.PlatformVersion='6.3.9600.0'|
Information.PlatformName='Windows Server 2012 R2'|
Information.ChocolateyVersion='0.10.15.0'|
Information.ChocolateyProductVersion='0.10.15'|
Information.FullName='choco, Version=0.10.15.0, Culture=neutral, PublicKeyToken=79d02ea9cad655eb'|
Information.Is64BitOperatingSystem='True'|
Information.Is64BitProcess='True'|Information.IsInteractive='True'|
Information.UserName='vagrant'|
Information.UserDomainName='WIN-E5K8TM30719'|
Information.IsUserAdministrator='True'|
Information.IsUserSystemAccount='False'|
Information.IsUserRemoteDesktop='False'|
Information.IsUserRemote='True'|
Information.IsProcessElevated='True'|
Information.IsLicensedVersion='False'|Information.LicenseType='Foss'|
Information.CurrentDirectory='C:\Windows\system32'|
Features.AutoUninstaller='True'|Features.ChecksumFiles='True'|
Features.AllowEmptyChecksums='False'|
Features.AllowEmptyChecksumsSecure='True'|
Features.FailOnAutoUninstaller='False'|
Features.FailOnStandardError='False'|Features.UsePowerShellHost='True'|
Features.LogEnvironmentValues='True'|Features.LogWithoutColor='False'|
Features.VirusCheck='False'|
Features.FailOnInvalidOrMissingLicense='False'|
Features.IgnoreInvalidOptionsSwitches='True'|
Features.UsePackageExitCodes='True'|
Features.UseEnhancedExitCodes='False'|
Features.UseFipsCompliantChecksums='False'|
Features.ShowNonElevatedWarnings='True'|
Features.ShowDownloadProgress='False'|
Features.StopOnFirstPackageFailure='False'|
Features.UseRememberedArgumentsForUpgrades='False'|
Features.IgnoreUnfoundPackagesOnUpgradeOutdated='False'|
Features.SkipPackageUpgradesWhenNotInstalled='False'|
Features.RemovePackageInformationOnUninstall='False'|
Features.ExitOnRebootDetected='False'|
Features.LogValidationResultsOnWarnings='True'|
Features.UsePackageRepositoryOptimizations='True'|
Features.ScriptsCheckLastExitCode='False'|
ListCommand.LocalOnly='False'|
ListCommand.IdOnly='False'|ListCommand.IncludeRegistryPrograms='False'|
ListCommand.PageSize='25'|ListCommand.Exact='False'|
ListCommand.ByIdOnly='False'|ListCommand.ByTagOnly='False'|
ListCommand.IdStartsWith='False'|ListCommand.OrderByPopularity='False'|
ListCommand.ApprovedOnly='False'|
ListCommand.DownloadCacheAvailable='False'|
ListCommand.NotBroken='False'|
ListCommand.IncludeVersionOverrides='False'|
UpgradeCommand.FailOnUnfound='False'|
UpgradeCommand.FailOnNotInstalled='False'|
UpgradeCommand.NotifyOnlyAvailableUpgrades='False'|
UpgradeCommand.ExcludePrerelease='False'|
NewCommand.AutomaticPackage='False'|
NewCommand.UseOriginalTemplate='False'|SourceCommand.Command='unknown'|
SourceCommand.Priority='0'|SourceCommand.BypassProxy='False'|
SourceCommand.AllowSelfService='False'|
SourceCommand.VisibleToAdminsOnly='False'|
FeatureCommand.Command='unknown'|ConfigCommand.Command='unknown'|
ApiKeyCommand.Remove='False'|PinCommand.Command='unknown'|
OutdatedCommand.IgnorePinned='False'|Proxy.BypassOnLocal='True'|
2019-09-11 06:38:14,476 2620 [DEBUG] - _ Chocolatey:ChocolateyUninstallCommand - Normal Run Mode _
2019-09-11 06:38:14,491 2620 [INFO ] - Uninstalling the following packages:
2019-09-11 06:38:14,507 2620 [INFO ] - osquery
2019-09-11 06:38:14,523 2620 [DEBUG] - Current environment values (may contain sensitive data):
2019-09-11 06:38:14,523 2620 [DEBUG] - * 'TMP'='C:\Users\Administrator\AppData\Local\Temp' ('User')
2019-09-11 06:38:14,538 2620 [DEBUG] - * 'TEMP'='C:\Users\Administrator\AppData\Local\Temp' ('User')
2019-09-11 06:38:14,538 2620 [DEBUG] - * 'ChocolateyLastPathUpdate'='132126573091086488' ('User')
2019-09-11 06:38:14,538 2620 [DEBUG] - * 'FP_NO_HOST_CHECK'='NO' ('Machine')
2019-09-11 06:38:14,538 2620 [DEBUG] - * 'USERNAME'='SYSTEM' ('Machine')
2019-09-11 06:38:14,538 2620 [DEBUG] - * 'Path'='C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\Git\bin;C:\ProgramData\chocolatey\bin;C:\Program Files\osquery' ('Machine')
2019-09-11 06:38:14,554 2620 [DEBUG] - * 'ComSpec'='C:\Windows\system32\cmd.exe' ('Machine')
2019-09-11 06:38:14,554 2620 [DEBUG] - * 'TMP'='C:\Windows\TEMP' ('Machine')
2019-09-11 06:38:14,554 2620 [DEBUG] - * 'OS'='Windows_NT' ('Machine')
2019-09-11 06:38:14,569 2620 [DEBUG] - * 'windir'='C:\Windows' ('Machine')
2019-09-11 06:38:14,569 2620 [DEBUG] - * 'PROCESSOR_ARCHITECTURE'='AMD64' ('Machine')
2019-09-11 06:38:14,569 2620 [DEBUG] - * 'TEMP'='C:\Windows\TEMP' ('Machine')
2019-09-11 06:38:14,569 2620 [DEBUG] - * 'PATHEXT'='.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC' ('Machine')
2019-09-11 06:38:14,569 2620 [DEBUG] - * 'PSModulePath'='C:\Windows\system32\WindowsPowerShell\v1.0\Modules\' ('Machine')
2019-09-11 06:38:14,585 2620 [DEBUG] - * 'NUMBER_OF_PROCESSORS'='4' ('Machine')
2019-09-11 06:38:14,585 2620 [DEBUG] - * 'PROCESSOR_LEVEL'='6' ('Machine')
2019-09-11 06:38:14,585 2620 [DEBUG] - * 'PROCESSOR_IDENTIFIER'='Intel64 Family 6 Model 45 Stepping 7, GenuineIntel' ('Machine')
2019-09-11 06:38:14,585 2620 [DEBUG] - * 'PROCESSOR_REVISION'='2d07' ('Machine')
2019-09-11 06:38:14,601 2620 [DEBUG] - * 'HOME'='C:\Users\Administrator' ('Machine')
2019-09-11 06:38:14,601 2620 [DEBUG] - * 'ChocolateyInstall'='C:\ProgramData\chocolatey' ('Machine')
2019-09-11 06:38:14,835 2620 [DEBUG] - Running list with the following filter = ''
2019-09-11 06:38:14,835 2620 [DEBUG] - --- Start of List ---
2019-09-11 06:38:15,288 2620 [DEBUG] - osquery 4.0.1
2019-09-11 06:38:15,319 2620 [DEBUG] - --- End of List ---
2019-09-11 06:38:15,476 2620 [DEBUG] - Setting installer args for osquery
2019-09-11 06:38:15,476 2620 [DEBUG] - Setting package parameters for osquery
2019-09-11 06:38:15,476 2620 [DEBUG] - Contents of 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1':
2019-09-11 06:38:15,523 2620 [DEBUG] - # Copyright (c) 2014-present, Facebook, Inc.
# All rights reserved.
#
# This source code is licensed in accordance with the terms specified in
# the LICENSE file found in the root directory of this source tree.
# This library file contains constant definitions and helper functions
#Requires -Version 3.0
. "$PSScriptRoot\\osquery_utils.ps1"
# Ensure the service is stopped and processes are not running if exists.
if ((Get-Service $serviceName -ErrorAction SilentlyContinue) -and `
(Get-Service $serviceName).Status -eq 'Running') {
Stop-Service $serviceName
# If we find zombie processes, ensure they're termintated
$proc = Get-Process | Where-Object { $_.ProcessName -eq 'osqueryd' }
if ($null -ne $proc) {
Stop-Process -Force $proc -ErrorAction SilentlyContinue
}
}
# Lastly, ensure that the Deny Write ACLs have been removed before modifying
if (Test-Path $daemonFolder) {
Set-DenyWriteAcl $daemonFolder 'Remove'
}
if (Test-Path $extensionsFolder) {
Set-DenyWriteAcl $extensionsFolder 'Remove'
}
2019-09-11 06:38:15,585 2620 [DEBUG] - Calling built-in PowerShell host with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = ''; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1' -installArguments '' -packageParameters ''']
2019-09-11 06:38:15,601 2620 [DEBUG] - Redirecting System.Management.Automation.resources, Version=3.0.0.0, Culture=en-US, PublicKeyToken=31bf3856ad364e35, requested by ''
2019-09-11 06:38:16,194 2620 [DEBUG] - Host version is 4.0, PowerShell Version is '4.0' and CLR Version is '4.0.30319.33440'.
2019-09-11 06:38:16,585 2620 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2019-09-11 06:38:16,585 2620 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2019-09-11 06:38:16,601 2620 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2019-09-11 06:38:16,601 2620 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2019-09-11 06:38:16,601 2620 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2019-09-11 06:38:16,616 2620 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2019-09-11 06:38:16,616 2620 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2019-09-11 06:38:16,616 2620 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2019-09-11 06:38:16,616 2620 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2019-09-11 06:38:16,632 2620 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2019-09-11 06:38:16,632 2620 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2019-09-11 06:38:16,632 2620 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2019-09-11 06:38:16,632 2620 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2019-09-11 06:38:16,648 2620 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2019-09-11 06:38:16,648 2620 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2019-09-11 06:38:16,648 2620 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2019-09-11 06:38:16,663 2620 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2019-09-11 06:38:16,663 2620 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2019-09-11 06:38:16,663 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyDesktopLink'.
2019-09-11 06:38:16,679 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2019-09-11 06:38:16,679 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2019-09-11 06:38:16,679 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2019-09-11 06:38:16,679 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2019-09-11 06:38:16,694 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2019-09-11 06:38:16,694 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2019-09-11 06:38:16,710 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2019-09-11 06:38:16,710 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2019-09-11 06:38:16,710 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2019-09-11 06:38:16,726 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2019-09-11 06:38:16,726 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2019-09-11 06:38:16,742 2620 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2019-09-11 06:38:16,742 2620 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2019-09-11 06:38:16,742 2620 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2019-09-11 06:38:16,757 2620 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2019-09-11 06:38:16,757 2620 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2019-09-11 06:38:16,757 2620 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2019-09-11 06:38:16,773 2620 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2019-09-11 06:38:16,773 2620 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2019-09-11 06:38:16,773 2620 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2019-09-11 06:38:16,773 2620 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2019-09-11 06:38:16,788 2620 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateyFailure'.
2019-09-11 06:38:16,788 2620 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateySuccess'.
2019-09-11 06:38:16,788 2620 [INFO ] - VERBOSE: Exporting function 'Write-FileUpdateLog'.
2019-09-11 06:38:16,804 2620 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2019-09-11 06:38:16,804 2620 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2019-09-11 06:38:16,804 2620 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2019-09-11 06:38:16,819 2620 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2019-09-11 06:38:16,819 2620 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2019-09-11 06:38:16,819 2620 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2019-09-11 06:38:16,835 2620 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2019-09-11 06:38:16,835 2620 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2019-09-11 06:38:16,835 2620 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2019-09-11 06:38:16,851 2620 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2019-09-11 06:38:16,882 2620 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2019-09-11 06:38:16,882 2620 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2019-09-11 06:38:16,898 2620 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2019-09-11 06:38:16,898 2620 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2019-09-11 06:38:16,898 2620 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2019-09-11 06:38:16,913 2620 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2019-09-11 06:38:16,913 2620 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2019-09-11 06:38:16,913 2620 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2019-09-11 06:38:16,929 2620 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2019-09-11 06:38:16,929 2620 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2019-09-11 06:38:16,929 2620 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2019-09-11 06:38:16,929 2620 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2019-09-11 06:38:16,945 2620 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2019-09-11 06:38:16,945 2620 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2019-09-11 06:38:16,945 2620 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2019-09-11 06:38:16,945 2620 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2019-09-11 06:38:16,960 2620 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2019-09-11 06:38:16,960 2620 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2019-09-11 06:38:16,960 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyDesktopLink'.
2019-09-11 06:38:16,976 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2019-09-11 06:38:16,976 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2019-09-11 06:38:16,976 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2019-09-11 06:38:16,976 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2019-09-11 06:38:16,991 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2019-09-11 06:38:16,991 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2019-09-11 06:38:16,991 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2019-09-11 06:38:16,991 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2019-09-11 06:38:17,007 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2019-09-11 06:38:17,007 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2019-09-11 06:38:17,007 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2019-09-11 06:38:17,023 2620 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2019-09-11 06:38:17,023 2620 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2019-09-11 06:38:17,023 2620 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2019-09-11 06:38:17,023 2620 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2019-09-11 06:38:17,038 2620 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2019-09-11 06:38:17,038 2620 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2019-09-11 06:38:17,038 2620 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2019-09-11 06:38:17,038 2620 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2019-09-11 06:38:17,054 2620 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2019-09-11 06:38:17,054 2620 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2019-09-11 06:38:17,054 2620 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateyFailure'.
2019-09-11 06:38:17,070 2620 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateySuccess'.
2019-09-11 06:38:17,070 2620 [INFO ] - VERBOSE: Exporting function 'Write-FileUpdateLog'.
2019-09-11 06:38:17,070 2620 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2019-09-11 06:38:17,085 2620 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2019-09-11 06:38:17,085 2620 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2019-09-11 06:38:17,085 2620 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2019-09-11 06:38:17,085 2620 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2019-09-11 06:38:17,101 2620 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2019-09-11 06:38:17,101 2620 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2019-09-11 06:38:17,101 2620 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2019-09-11 06:38:17,101 2620 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2019-09-11 06:38:17,116 2620 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2019-09-11 06:38:17,116 2620 [INFO ] - VERBOSE: Importing function 'Format-FileSize'.
2019-09-11 06:38:17,116 2620 [INFO ] - VERBOSE: Importing function 'Get-ChecksumValid'.
2019-09-11 06:38:17,132 2620 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyUnzip'.
2019-09-11 06:38:17,132 2620 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyWebFile'.
2019-09-11 06:38:17,132 2620 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariable'.
2019-09-11 06:38:17,148 2620 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariableNames'.
2019-09-11 06:38:17,148 2620 [INFO ] - VERBOSE: Importing function 'Get-FtpFile'.
2019-09-11 06:38:17,148 2620 [INFO ] - VERBOSE: Importing function 'Get-OSArchitectureWidth'.
2019-09-11 06:38:17,148 2620 [INFO ] - VERBOSE: Importing function 'Get-PackageParameters'.
2019-09-11 06:38:17,163 2620 [INFO ] - VERBOSE: Importing function 'Get-PackageParametersBuiltIn'.
2019-09-11 06:38:17,163 2620 [INFO ] - VERBOSE: Importing function 'Get-ToolsLocation'.
2019-09-11 06:38:17,163 2620 [INFO ] - VERBOSE: Importing function 'Get-UACEnabled'.
2019-09-11 06:38:17,179 2620 [INFO ] - VERBOSE: Importing function 'Get-UninstallRegistryKey'.
2019-09-11 06:38:17,179 2620 [INFO ] - VERBOSE: Importing function 'Get-VirusCheckValid'.
2019-09-11 06:38:17,179 2620 [INFO ] - VERBOSE: Importing function 'Get-WebFile'.
2019-09-11 06:38:17,179 2620 [INFO ] - VERBOSE: Importing function 'Get-WebFileName'.
2019-09-11 06:38:17,194 2620 [INFO ] - VERBOSE: Importing function 'Get-WebHeaders'.
2019-09-11 06:38:17,194 2620 [INFO ] - VERBOSE: Importing function 'Install-BinFile'.
2019-09-11 06:38:17,194 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyDesktopLink'.
2019-09-11 06:38:17,210 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyEnvironmentVariable'.
2019-09-11 06:38:17,210 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyExplorerMenuItem'.
2019-09-11 06:38:17,210 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyFileAssociation'.
2019-09-11 06:38:17,210 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyInstallPackage'.
2019-09-11 06:38:17,226 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPackage'.
2019-09-11 06:38:17,226 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPath'.
2019-09-11 06:38:17,226 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPinnedTaskBarItem'.
2019-09-11 06:38:17,241 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPowershellCommand'.
2019-09-11 06:38:17,241 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyShortcut'.
2019-09-11 06:38:17,241 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyVsixPackage'.
2019-09-11 06:38:17,241 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyZipPackage'.
2019-09-11 06:38:17,257 2620 [INFO ] - VERBOSE: Importing function 'Install-Vsix'.
2019-09-11 06:38:17,257 2620 [INFO ] - VERBOSE: Importing function 'Set-EnvironmentVariable'.
2019-09-11 06:38:17,257 2620 [INFO ] - VERBOSE: Importing function 'Set-PowerShellExitCode'.
2019-09-11 06:38:17,273 2620 [INFO ] - VERBOSE: Importing function 'Start-ChocolateyProcessAsAdmin'.
2019-09-11 06:38:17,273 2620 [INFO ] - VERBOSE: Importing function 'Test-ProcessAdminRights'.
2019-09-11 06:38:17,273 2620 [INFO ] - VERBOSE: Importing function 'Uninstall-BinFile'.
2019-09-11 06:38:17,273 2620 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyEnvironmentVariable'.
2019-09-11 06:38:17,288 2620 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyPackage'.
2019-09-11 06:38:17,288 2620 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyZipPackage'.
2019-09-11 06:38:17,288 2620 [INFO ] - VERBOSE: Importing function 'Update-SessionEnvironment'.
2019-09-11 06:38:17,304 2620 [INFO ] - VERBOSE: Importing function 'Write-ChocolateyFailure'.
2019-09-11 06:38:17,304 2620 [INFO ] - VERBOSE: Importing function 'Write-ChocolateySuccess'.
2019-09-11 06:38:17,304 2620 [INFO ] - VERBOSE: Importing function 'Write-FileUpdateLog'.
2019-09-11 06:38:17,304 2620 [INFO ] - VERBOSE: Importing function 'Write-FunctionCallLogMessage'.
2019-09-11 06:38:17,320 2620 [INFO ] - VERBOSE: Importing alias 'Add-BinFile'.
2019-09-11 06:38:17,320 2620 [INFO ] - VERBOSE: Importing alias 'Generate-BinFile'.
2019-09-11 06:38:17,320 2620 [INFO ] - VERBOSE: Importing alias 'Get-InstallRegistryKey'.
2019-09-11 06:38:17,335 2620 [INFO ] - VERBOSE: Importing alias 'Get-OSBitness'.
2019-09-11 06:38:17,335 2620 [INFO ] - VERBOSE: Importing alias 'Get-ProcessorBits'.
2019-09-11 06:38:17,335 2620 [INFO ] - VERBOSE: Importing alias 'Invoke-ChocolateyProcess'.
2019-09-11 06:38:17,335 2620 [INFO ] - VERBOSE: Importing alias 'refreshenv'.
2019-09-11 06:38:17,351 2620 [INFO ] - VERBOSE: Importing alias 'Remove-BinFile'.
2019-09-11 06:38:17,351 2620 [INFO ] - VERBOSE: Importing alias 'Start-ChocolateyProcess'.
2019-09-11 06:38:17,476 2620 [DEBUG] - ---------------------------Script Execution---------------------------
2019-09-11 06:38:17,491 2620 [DEBUG] - Running 'ChocolateyScriptRunner' for osquery v4.0.1 with packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1', packageFolder:'C:\ProgramData\chocolatey\lib\osquery', installArguments: '', packageParameters: '',
2019-09-11 06:38:17,538 2620 [DEBUG] - Running 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1'
2019-09-11 06:38:17,789 2620 [INFO ] - True
2019-09-11 06:38:17,820 2620 [ERROR] - Attempted to perform an unauthorized operation.
2019-09-11 06:38:17,820 2620 [INFO ] - True
2019-09-11 06:38:17,866 2620 [DEBUG] - ----------------------------------------------------------------------
2019-09-11 06:38:17,866 2620 [DEBUG] - Built-in PowerShell host called with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = ''; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1' -installArguments '' -packageParameters '''] exited with '0'.
2019-09-11 06:38:17,882 2620 [WARN ] - Only an exit code of non-zero will fail the package by default. Set
`--failonstderr` if you want error messages to also fail a script. See
`choco -h` for details.
2019-09-11 06:38:18,101 2620 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib-bkp".
2019-09-11 06:38:18,116 2620 [DEBUG] - Backing up existing osquery prior to operation.
2019-09-11 06:38:18,132 2620 [DEBUG] - Moving 'C:\ProgramData\chocolatey\lib\osquery'
to 'C:\ProgramData\chocolatey\lib-bkp\osquery'
2019-09-11 06:38:20,148 2620 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib\osquery".
2019-09-11 06:38:20,148 2620 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\osquery.nupkg"
to "C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg".
2019-09-11 06:38:20,179 2620 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\osquery.nuspec"
to "C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec".
2019-09-11 06:38:20,179 2620 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib\osquery\tools".
2019-09-11 06:38:20,179 2620 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\tools\chocolateyBeforeModify.ps1"
to "C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1".
2019-09-11 06:38:20,194 2620 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\tools\chocolateyinstall.ps1"
to "C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1".
2019-09-11 06:38:20,194 2620 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\tools\chocolateyuninstall.ps1"
to "C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1".
2019-09-11 06:38:20,194 2620 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\tools\LICENSE.txt"
to "C:\ProgramData\chocolatey\lib\osquery\tools\LICENSE.txt".
2019-09-11 06:38:20,210 2620 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\tools\osquery_utils.ps1"
to "C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1".
2019-09-11 06:38:20,210 2620 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\tools\VERIFICATION.txt"
to "C:\ProgramData\chocolatey\lib\osquery\tools\VERIFICATION.txt".
2019-09-11 06:38:20,210 2620 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib\osquery\tools\bin".
2019-09-11 06:38:20,210 2620 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\tools\bin\osquery.zip"
to "C:\ProgramData\chocolatey\lib\osquery\tools\bin\osquery.zip".
2019-09-11 06:38:21,757 2620 [DEBUG] - Capturing package files in 'C:\ProgramData\chocolatey\lib\osquery'
2019-09-11 06:38:22,960 2620 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg'
with checksum '38E8F98DB8F941C819344B16FECFDE45'
2019-09-11 06:38:23,336 2620 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec'
with checksum '0A66BF13F2C6953A76BD828F48D6991A'
2019-09-11 06:38:23,351 2620 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1'
with checksum '76A42C245B2F0049FB8F1DAF4B6E6C65'
2019-09-11 06:38:23,351 2620 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1'
with checksum '7336372EA65242F2639C23553FB94BD6'
2019-09-11 06:38:23,351 2620 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1'
with checksum '892D485A47E61F78C9CF316F31C4BEE1'
2019-09-11 06:38:23,351 2620 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\LICENSE.txt'
with checksum 'DD399CA08A28F2D449C22B56D76CC606'
2019-09-11 06:38:23,366 2620 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1'
with checksum '2835A38236767FD1A9D573CAC66251DA'
2019-09-11 06:38:23,366 2620 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\VERIFICATION.txt'
with checksum '47FB3CCB97A1A6666197F49D936AA1BE'
2019-09-11 06:38:23,429 2620 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\bin\osquery.zip'
with checksum 'D875463CE44AC430901A411B781FA989'
2019-09-11 06:38:24,023 2620 [INFO ] - [NuGet] Uninstalling 'osquery 4.0.1'.
2019-09-11 06:38:24,054 2620 [INFO ] -
osquery v4.0.1
2019-09-11 06:38:24,085 2620 [DEBUG] - Setting installer args for osquery
2019-09-11 06:38:24,101 2620 [DEBUG] - Setting package parameters for osquery
2019-09-11 06:38:24,101 2620 [DEBUG] - Contents of 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1':
2019-09-11 06:38:24,116 2620 [DEBUG] - # Copyright (c) 2014-present, Facebook, Inc.
# All rights reserved.
#
# This source code is licensed in accordance with the terms specified in
# the LICENSE file found in the root directory of this source tree.
# This library file contains constant definitions and helper functions
#Requires -Version 3.0
. "$PSScriptRoot\\osquery_utils.ps1"
# Remove the osquery path from the System PATH variable. Note: Here
# we don't make use of our local vars, as Regex requires escaping the '\'
$oldPath = [System.Environment]::GetEnvironmentVariable('Path', 'Machine')
if ($oldPath -imatch [regex]::escape($targetFolder)) {
$newPath = $oldPath -replace [regex]::escape($targetFolder), $NULL
[System.Environment]::SetEnvironmentVariable('Path', $newPath, 'Machine')
}
if ((Get-Service $serviceName -ErrorAction SilentlyContinue)) {
Stop-Service $serviceName
# If we find zombie processes, ensure they're termintated
$proc = Get-Process | Where-Object { $_.ProcessName -eq 'osqueryd' }
if ($null -ne $proc) {
Stop-Process -Force $proc -ErrorAction SilentlyContinue
}
Set-Service $serviceName -startuptype 'manual'
Get-CimInstance -ClassName Win32_Service -Filter "Name='osqueryd'" | Invoke-CimMethod -methodName Delete
}
if (Test-Path $targetFolder) {
Remove-Item -Force -Recurse $targetFolder
} else {
Write-Debug 'osquery was not found on the system. Nothing to do.'
}
2019-09-11 06:38:24,116 2620 [DEBUG] - Calling built-in PowerShell host with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = ''; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1' -installArguments '' -packageParameters ''']
2019-09-11 06:38:24,132 2620 [DEBUG] - Redirecting Microsoft.PowerShell.Security, requested by ''
2019-09-11 06:38:24,163 2620 [DEBUG] - Attempting to load assembly Microsoft.PowerShell.Security failed:
Could not load file or assembly 'Microsoft.PowerShell.Security, Version=5.0.0.0' or one of its dependencies. The system cannot find the file specified.
2019-09-11 06:38:24,163 2620 [DEBUG] - Attempting to load assembly Microsoft.PowerShell.Security failed:
Could not load file or assembly 'Microsoft.PowerShell.Security, Version=4.0.0.0' or one of its dependencies. The system cannot find the file specified.
2019-09-11 06:38:24,179 2620 [DEBUG] - Attempting to load assembly Microsoft.PowerShell.Security failed:
Could not load file or assembly 'Microsoft.PowerShell.Security, Version=3.0.0.0' or one of its dependencies. The system cannot find the file specified.
2019-09-11 06:38:24,179 2620 [DEBUG] - Attempting to load assembly Microsoft.PowerShell.Security failed:
Could not load file or assembly 'Microsoft.PowerShell.Security, Version=1.0.0.0' or one of its dependencies. The system cannot find the file specified.
2019-09-11 06:38:24,695 2620 [DEBUG] - Host version is 4.0, PowerShell Version is '4.0' and CLR Version is '4.0.30319.33440'.
2019-09-11 06:38:24,820 2620 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2019-09-11 06:38:24,820 2620 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2019-09-11 06:38:24,835 2620 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2019-09-11 06:38:24,835 2620 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2019-09-11 06:38:24,835 2620 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2019-09-11 06:38:24,835 2620 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2019-09-11 06:38:24,851 2620 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2019-09-11 06:38:24,851 2620 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2019-09-11 06:38:24,851 2620 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2019-09-11 06:38:24,866 2620 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2019-09-11 06:38:24,866 2620 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2019-09-11 06:38:24,866 2620 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2019-09-11 06:38:24,866 2620 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2019-09-11 06:38:24,882 2620 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2019-09-11 06:38:24,882 2620 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2019-09-11 06:38:24,882 2620 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2019-09-11 06:38:24,882 2620 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2019-09-11 06:38:24,898 2620 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2019-09-11 06:38:24,898 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyDesktopLink'.
2019-09-11 06:38:24,898 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2019-09-11 06:38:24,913 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2019-09-11 06:38:24,913 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2019-09-11 06:38:24,913 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2019-09-11 06:38:24,913 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2019-09-11 06:38:24,929 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2019-09-11 06:38:24,929 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2019-09-11 06:38:24,929 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2019-09-11 06:38:24,944 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2019-09-11 06:38:24,944 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2019-09-11 06:38:24,944 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2019-09-11 06:38:24,944 2620 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2019-09-11 06:38:24,960 2620 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2019-09-11 06:38:24,960 2620 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2019-09-11 06:38:24,960 2620 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2019-09-11 06:38:24,960 2620 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2019-09-11 06:38:24,976 2620 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2019-09-11 06:38:24,976 2620 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2019-09-11 06:38:24,976 2620 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2019-09-11 06:38:24,991 2620 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2019-09-11 06:38:24,991 2620 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2019-09-11 06:38:24,991 2620 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateyFailure'.
2019-09-11 06:38:24,991 2620 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateySuccess'.
2019-09-11 06:38:25,007 2620 [INFO ] - VERBOSE: Exporting function 'Write-FileUpdateLog'.
2019-09-11 06:38:25,007 2620 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2019-09-11 06:38:25,007 2620 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2019-09-11 06:38:25,023 2620 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2019-09-11 06:38:25,023 2620 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2019-09-11 06:38:25,023 2620 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2019-09-11 06:38:25,023 2620 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2019-09-11 06:38:25,038 2620 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2019-09-11 06:38:25,038 2620 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2019-09-11 06:38:25,038 2620 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2019-09-11 06:38:25,054 2620 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2019-09-11 06:38:25,054 2620 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2019-09-11 06:38:25,054 2620 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2019-09-11 06:38:25,069 2620 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2019-09-11 06:38:25,069 2620 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2019-09-11 06:38:25,069 2620 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2019-09-11 06:38:25,085 2620 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2019-09-11 06:38:25,085 2620 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2019-09-11 06:38:25,085 2620 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2019-09-11 06:38:25,101 2620 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2019-09-11 06:38:25,101 2620 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2019-09-11 06:38:25,116 2620 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2019-09-11 06:38:25,116 2620 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2019-09-11 06:38:25,116 2620 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2019-09-11 06:38:25,116 2620 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2019-09-11 06:38:25,132 2620 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2019-09-11 06:38:25,132 2620 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2019-09-11 06:38:25,132 2620 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2019-09-11 06:38:25,148 2620 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2019-09-11 06:38:25,148 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyDesktopLink'.
2019-09-11 06:38:25,148 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2019-09-11 06:38:25,148 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2019-09-11 06:38:25,163 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2019-09-11 06:38:25,163 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2019-09-11 06:38:25,163 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2019-09-11 06:38:25,179 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2019-09-11 06:38:25,179 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2019-09-11 06:38:25,179 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2019-09-11 06:38:25,179 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2019-09-11 06:38:25,194 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2019-09-11 06:38:25,194 2620 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2019-09-11 06:38:25,194 2620 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2019-09-11 06:38:25,210 2620 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2019-09-11 06:38:25,210 2620 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2019-09-11 06:38:25,210 2620 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2019-09-11 06:38:25,210 2620 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2019-09-11 06:38:25,226 2620 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2019-09-11 06:38:25,226 2620 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2019-09-11 06:38:25,226 2620 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2019-09-11 06:38:25,241 2620 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2019-09-11 06:38:25,241 2620 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2019-09-11 06:38:25,241 2620 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateyFailure'.
2019-09-11 06:38:25,241 2620 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateySuccess'.
2019-09-11 06:38:25,257 2620 [INFO ] - VERBOSE: Exporting function 'Write-FileUpdateLog'.
2019-09-11 06:38:25,257 2620 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2019-09-11 06:38:25,257 2620 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2019-09-11 06:38:25,273 2620 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2019-09-11 06:38:25,273 2620 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2019-09-11 06:38:25,273 2620 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2019-09-11 06:38:25,288 2620 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2019-09-11 06:38:25,288 2620 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2019-09-11 06:38:25,288 2620 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2019-09-11 06:38:25,288 2620 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2019-09-11 06:38:25,304 2620 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2019-09-11 06:38:25,304 2620 [INFO ] - VERBOSE: Importing function 'Format-FileSize'.
2019-09-11 06:38:25,304 2620 [INFO ] - VERBOSE: Importing function 'Get-ChecksumValid'.
2019-09-11 06:38:25,304 2620 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyUnzip'.
2019-09-11 06:38:25,319 2620 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyWebFile'.
2019-09-11 06:38:25,319 2620 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariable'.
2019-09-11 06:38:25,319 2620 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariableNames'.
2019-09-11 06:38:25,319 2620 [INFO ] - VERBOSE: Importing function 'Get-FtpFile'.
2019-09-11 06:38:25,335 2620 [INFO ] - VERBOSE: Importing function 'Get-OSArchitectureWidth'.
2019-09-11 06:38:25,335 2620 [INFO ] - VERBOSE: Importing function 'Get-PackageParameters'.
2019-09-11 06:38:25,335 2620 [INFO ] - VERBOSE: Importing function 'Get-PackageParametersBuiltIn'.
2019-09-11 06:38:25,351 2620 [INFO ] - VERBOSE: Importing function 'Get-ToolsLocation'.
2019-09-11 06:38:25,351 2620 [INFO ] - VERBOSE: Importing function 'Get-UACEnabled'.
2019-09-11 06:38:25,351 2620 [INFO ] - VERBOSE: Importing function 'Get-UninstallRegistryKey'.
2019-09-11 06:38:25,351 2620 [INFO ] - VERBOSE: Importing function 'Get-VirusCheckValid'.
2019-09-11 06:38:25,366 2620 [INFO ] - VERBOSE: Importing function 'Get-WebFile'.
2019-09-11 06:38:25,366 2620 [INFO ] - VERBOSE: Importing function 'Get-WebFileName'.
2019-09-11 06:38:25,366 2620 [INFO ] - VERBOSE: Importing function 'Get-WebHeaders'.
2019-09-11 06:38:25,366 2620 [INFO ] - VERBOSE: Importing function 'Install-BinFile'.
2019-09-11 06:38:25,382 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyDesktopLink'.
2019-09-11 06:38:25,382 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyEnvironmentVariable'.
2019-09-11 06:38:25,382 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyExplorerMenuItem'.
2019-09-11 06:38:25,382 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyFileAssociation'.
2019-09-11 06:38:25,398 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyInstallPackage'.
2019-09-11 06:38:25,398 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPackage'.
2019-09-11 06:38:25,398 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPath'.
2019-09-11 06:38:25,398 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPinnedTaskBarItem'.
2019-09-11 06:38:25,413 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPowershellCommand'.
2019-09-11 06:38:25,413 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyShortcut'.
2019-09-11 06:38:25,413 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyVsixPackage'.
2019-09-11 06:38:25,429 2620 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyZipPackage'.
2019-09-11 06:38:25,429 2620 [INFO ] - VERBOSE: Importing function 'Install-Vsix'.
2019-09-11 06:38:25,429 2620 [INFO ] - VERBOSE: Importing function 'Set-EnvironmentVariable'.
2019-09-11 06:38:25,429 2620 [INFO ] - VERBOSE: Importing function 'Set-PowerShellExitCode'.
2019-09-11 06:38:25,444 2620 [INFO ] - VERBOSE: Importing function 'Start-ChocolateyProcessAsAdmin'.
2019-09-11 06:38:25,444 2620 [INFO ] - VERBOSE: Importing function 'Test-ProcessAdminRights'.
2019-09-11 06:38:25,444 2620 [INFO ] - VERBOSE: Importing function 'Uninstall-BinFile'.
2019-09-11 06:38:25,460 2620 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyEnvironmentVariable'.
2019-09-11 06:38:25,460 2620 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyPackage'.
2019-09-11 06:38:25,460 2620 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyZipPackage'.
2019-09-11 06:38:25,476 2620 [INFO ] - VERBOSE: Importing function 'Update-SessionEnvironment'.
2019-09-11 06:38:25,476 2620 [INFO ] - VERBOSE: Importing function 'Write-ChocolateyFailure'.
2019-09-11 06:38:25,476 2620 [INFO ] - VERBOSE: Importing function 'Write-ChocolateySuccess'.
2019-09-11 06:38:25,476 2620 [INFO ] - VERBOSE: Importing function 'Write-FileUpdateLog'.
2019-09-11 06:38:25,491 2620 [INFO ] - VERBOSE: Importing function 'Write-FunctionCallLogMessage'.
2019-09-11 06:38:25,491 2620 [INFO ] - VERBOSE: Importing alias 'Add-BinFile'.
2019-09-11 06:38:25,491 2620 [INFO ] - VERBOSE: Importing alias 'Generate-BinFile'.
2019-09-11 06:38:25,507 2620 [INFO ] - VERBOSE: Importing alias 'Get-InstallRegistryKey'.
2019-09-11 06:38:25,507 2620 [INFO ] - VERBOSE: Importing alias 'Get-OSBitness'.
2019-09-11 06:38:25,507 2620 [INFO ] - VERBOSE: Importing alias 'Get-ProcessorBits'.
2019-09-11 06:38:25,507 2620 [INFO ] - VERBOSE: Importing alias 'Invoke-ChocolateyProcess'.
2019-09-11 06:38:25,523 2620 [INFO ] - VERBOSE: Importing alias 'refreshenv'.
2019-09-11 06:38:25,523 2620 [INFO ] - VERBOSE: Importing alias 'Remove-BinFile'.
2019-09-11 06:38:25,523 2620 [INFO ] - VERBOSE: Importing alias 'Start-ChocolateyProcess'.
2019-09-11 06:38:25,538 2620 [DEBUG] - ---------------------------Script Execution---------------------------
2019-09-11 06:38:25,538 2620 [DEBUG] - Running 'ChocolateyScriptRunner' for osquery v4.0.1 with packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1', packageFolder:'C:\ProgramData\chocolatey\lib\osquery', installArguments: '', packageParameters: '',
2019-09-11 06:38:25,554 2620 [DEBUG] - Running 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1'
2019-09-11 06:38:28,694 2620 [ERROR] - Access to the path 'C:\Program Files\osquery\osqueryd' is denied.
2019-09-11 06:38:28,694 2620 [DEBUG] - ----------------------------------------------------------------------
2019-09-11 06:38:28,711 2620 [DEBUG] - Built-in PowerShell host called with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = ''; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1' -installArguments '' -packageParameters '''] exited with '0'.
2019-09-11 06:38:28,711 2620 [WARN ] - Only an exit code of non-zero will fail the package by default. Set
`--failonstderr` if you want error messages to also fail a script. See
`choco -h` for details.
2019-09-11 06:38:28,741 2620 [INFO ] - Skipping auto uninstaller - No registry snapshot.
2019-09-11 06:38:28,757 2620 [DEBUG] - Calling command ['"C:\Windows\System32\shutdown.exe" /a']
2019-09-11 06:38:28,788 2620 [DEBUG] - Command ['"C:\Windows\System32\shutdown.exe" /a'] exited with '1116'
2019-09-11 06:38:28,805 2620 [DEBUG] - Attempting to delete directory "C:\ProgramData\chocolatey\lib-bkp\osquery".
2019-09-11 06:38:28,882 2620 [DEBUG] - [NuGet] Removed file 'osquery.zip' to folder 'C:\ProgramData\chocolatey\lib\osquery\tools\bin'.
2019-09-11 06:38:28,898 2620 [DEBUG] - [NuGet] Removed folder 'C:\ProgramData\chocolatey\lib\osquery\tools\bin'.
2019-09-11 06:38:28,913 2620 [DEBUG] - [NuGet] Removed file 'chocolateyBeforeModify.ps1' to folder 'C:\ProgramData\chocolatey\lib\osquery\tools'.
2019-09-11 06:38:28,913 2620 [DEBUG] - [NuGet] Removed file 'chocolateyinstall.ps1' to folder 'C:\ProgramData\chocolatey\lib\osquery\tools'.
2019-09-11 06:38:28,913 2620 [DEBUG] - [NuGet] Removed file 'chocolateyuninstall.ps1' to folder 'C:\ProgramData\chocolatey\lib\osquery\tools'.
2019-09-11 06:38:28,913 2620 [DEBUG] - [NuGet] Removed file 'LICENSE.txt' to folder 'C:\ProgramData\chocolatey\lib\osquery\tools'.
2019-09-11 06:38:28,929 2620 [DEBUG] - [NuGet] Removed file 'osquery_utils.ps1' to folder 'C:\ProgramData\chocolatey\lib\osquery\tools'.
2019-09-11 06:38:28,944 2620 [DEBUG] - [NuGet] Removed file 'VERIFICATION.txt' to folder 'C:\ProgramData\chocolatey\lib\osquery\tools'.
2019-09-11 06:38:28,944 2620 [DEBUG] - [NuGet] Removed folder 'C:\ProgramData\chocolatey\lib\osquery\tools'.
2019-09-11 06:38:28,944 2620 [DEBUG] - [NuGet] Removed file 'osquery.nuspec' to folder 'C:\ProgramData\chocolatey\lib\osquery'.
2019-09-11 06:38:28,961 2620 [DEBUG] - [NuGet] Removed file 'osquery.nupkg' to folder 'C:\ProgramData\chocolatey\lib\osquery'.
2019-09-11 06:38:28,961 2620 [DEBUG] - [NuGet] Removed folder 'C:\ProgramData\chocolatey\lib\osquery'.
2019-09-11 06:38:28,976 2620 [INFO ] - [NuGet] Successfully uninstalled 'osquery 4.0.1'.
2019-09-11 06:38:28,991 2620 [INFO ] - osquery has been successfully uninstalled.
2019-09-11 06:38:28,991 2620 [DEBUG] - Removing nupkg if it still exists.
2019-09-11 06:38:29,007 2620 [DEBUG] - Ensuring removal of installation files.
2019-09-11 06:38:29,007 2620 [DEBUG] - Ensuring removal of package cache files.
2019-09-11 06:38:29,038 2620 [WARN ] - Environment Vars (like PATH) have changed. Close/reopen your shell to
see the changes (or in powershell/cmd.exe just type `refreshenv`).
2019-09-11 06:38:29,038 2620 [DEBUG] - The following values have been added/changed (may contain sensitive data):
2019-09-11 06:38:29,054 2620 [DEBUG] - * Path='C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\Git\bin;C:\ProgramData\chocolatey\bin;' (Machine)
2019-09-11 06:38:29,085 2620 [WARN ] -
Chocolatey uninstalled 1/1 packages.
See the log for details (C:\ProgramData\chocolatey\logs\chocolatey.log).
2019-09-11 06:38:29,085 2620 [DEBUG] - Sending message 'PostRunMessage' out if there are subscribers...
2019-09-11 06:38:29,132 2620 [DEBUG] - Exiting with 0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment