Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
osquery v4.7.0 - Passed - Package Tests Results

osquery v4.7.0 - Passed - Package Test Results

  • https://community.chocolatey.org/packages/osquery/4.7.0
  • Tested 20 Apr 2021 16:54:45 +00:00
  • Tested against win2012r2x64 (Windows Server 2012 R2 x64)
  • Tested with the latest version of choco, possibly a beta version.
  • Tested with chocolatey-package-verifier service v0.5.0-28-g1188253
  • Install was successful.
  • Uninstall was successful.
<?xml version="1.0" encoding="utf-8"?>
<fileSnapshot xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<files>
<file path="C:\ProgramData\chocolatey\lib\osquery\LICENSE.txt" checksum="0820FFE048483183320E2DAD339898F6" />
<file path="C:\ProgramData\chocolatey\lib\osquery\manage-osqueryd.ps1" checksum="3CCB09B60C319C2B6A43DF64360BD14F" />
<file path="C:\ProgramData\chocolatey\lib\osquery\osquery.conf" checksum="442E3F3E0F9405F2F92F9A0BCFB0B124" />
<file path="C:\ProgramData\chocolatey\lib\osquery\osquery.flags" checksum="D41D8CD98F00B204E9800998ECF8427E" />
<file path="C:\ProgramData\chocolatey\lib\osquery\osquery.man" checksum="A4C03558EDB1FF1F5DC4B2194CF3A500" />
<file path="C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg" checksum="7E3864162CE7D6119340F9283093071F" />
<file path="C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec" checksum="1180D0EF2E8817987BE1B8B92869CA26" />
<file path="C:\ProgramData\chocolatey\lib\osquery\osqueryi.exe" checksum="D426265A2A8E24E668823320D7B74F26" />
<file path="C:\ProgramData\chocolatey\lib\osquery\osquery_utils.ps1" checksum="B46F34FDF6276F636A9F1832E9392893" />
<file path="C:\ProgramData\chocolatey\lib\osquery\VERIFICATION.txt" checksum="77039304249AC12CA156465857B19382" />
<file path="C:\ProgramData\chocolatey\lib\osquery\certs\certs.pem" checksum="6C8779E5755D9DDDF677BF7A52D035CE" />
<file path="C:\ProgramData\chocolatey\lib\osquery\osqueryd\osqueryd.exe" checksum="D426265A2A8E24E668823320D7B74F26" />
<file path="C:\ProgramData\chocolatey\lib\osquery\packs\hardware-monitoring.conf" checksum="3501087ED8C14DC4CB417D6F749ACAD4" />
<file path="C:\ProgramData\chocolatey\lib\osquery\packs\incident-response.conf" checksum="F6F961308CB86373D8462437BC62A1E9" />
<file path="C:\ProgramData\chocolatey\lib\osquery\packs\it-compliance.conf" checksum="C90DCD8897F172B41770C2A658D4426A" />
<file path="C:\ProgramData\chocolatey\lib\osquery\packs\osquery-monitoring.conf" checksum="50B79815090F908C57B6317DD2F552BF" />
<file path="C:\ProgramData\chocolatey\lib\osquery\packs\ossec-rootkit.conf" checksum="62B0102EA8761AC8AD0CB9C0A6247B77" />
<file path="C:\ProgramData\chocolatey\lib\osquery\packs\osx-attacks.conf" checksum="703FA0183E83B19663C62D70DD30B209" />
<file path="C:\ProgramData\chocolatey\lib\osquery\packs\unwanted-chrome-extensions.conf" checksum="F0C411F58C5929CA1D2D6EF4249B1BAD" />
<file path="C:\ProgramData\chocolatey\lib\osquery\packs\vuln-management.conf" checksum="F1C82E2A9E05DE6AD9DFD47E16461FA8" />
<file path="C:\ProgramData\chocolatey\lib\osquery\packs\windows-attacks.conf" checksum="5C705090F10185E33F87AC8A79C445FB" />
<file path="C:\ProgramData\chocolatey\lib\osquery\packs\windows-hardening.conf" checksum="EBFB94E06E2914770A4EAEA4E5F83248" />
<file path="C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1" checksum="289840CCC12B230068E229CDD37E3703" />
<file path="C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1" checksum="730998A613FD4DF3EAB80B87AEEC1308" />
<file path="C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1" checksum="3C79361CA6117F7D02C1FEDDF82F07C6" />
<file path="C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1" checksum="B46F34FDF6276F636A9F1832E9392893" />
</files>
</fileSnapshot>
2021-04-08 12:00:17,288 1712 [DEBUG] - XmlConfiguration is now operational
2021-04-08 12:00:17,369 1712 [INFO ] - ============================================================
2021-04-08 12:00:17,629 1712 [INFO ] - Chocolatey v0.10.16-beta
2021-04-08 12:00:17,649 1712 [DEBUG] - Chocolatey is running on Windows v 6.3.9600.0
2021-04-08 12:00:17,668 1712 [DEBUG] - Attempting to delete file "C:/ProgramData/chocolatey/choco.exe.old".
2021-04-08 12:00:17,668 1712 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\choco.exe.old".
2021-04-08 12:00:17,668 1712 [DEBUG] - Command line: "C:\ProgramData\chocolatey\choco.exe" install osquery --version 4.7.0 -fdvy --execution-timeout=2700 --allow-downgrade
2021-04-08 12:00:17,668 1712 [DEBUG] - Received arguments: install osquery --version 4.7.0 -fdvy --execution-timeout=2700 --allow-downgrade
2021-04-08 12:00:17,728 1712 [DEBUG] - RemovePendingPackagesTask is now ready and waiting for PreRunMessage.
2021-04-08 12:00:17,748 1712 [DEBUG] - Sending message 'PreRunMessage' out if there are subscribers...
2021-04-08 12:00:17,748 1712 [DEBUG] - [Pending] Removing all pending packages that should not be considered installed...
2021-04-08 12:00:17,809 1712 [DEBUG] - Performing validation checks.
2021-04-20 16:53:36,232 1712 [DEBUG] - Global Configuration Validation Checks:
2021-04-20 16:53:36,232 1712 [DEBUG] - - Package Exit Code / Exit On Reboot = Checked
2021-04-20 16:53:36,232 1712 [DEBUG] - System State Validation Checks:
2021-04-20 16:53:36,232 1712 [DEBUG] - Reboot Requirement Checks:
2021-04-20 16:53:36,232 1712 [DEBUG] - - Pending Computer Rename = Checked
2021-04-20 16:53:36,247 1712 [DEBUG] - - Pending Component Based Servicing = Checked
2021-04-20 16:53:36,247 1712 [DEBUG] - - Pending Windows Auto Update = Checked
2021-04-20 16:53:36,247 1712 [DEBUG] - - Pending File Rename Operations = Checked
2021-04-20 16:53:36,247 1712 [DEBUG] - - Pending Windows Package Installer = Checked
2021-04-20 16:53:36,247 1712 [DEBUG] - - Pending Windows Package Installer SysWow64 = Checked
2021-04-20 16:53:36,247 1712 [INFO ] - 2 validations performed. 2 success(es), 0 warning(s), and 0 error(s).
2021-04-20 16:53:36,247 1712 [DEBUG] - The source 'c:\cached-packages;https://chocolatey.org/api/v2/' evaluated to a 'normal' source type
2021-04-20 16:53:36,247 1712 [DEBUG] -
NOTE: Hiding sensitive configuration data! Please double and triple
check to be sure no sensitive data is shown, especially if copying
output to a gist for review.
2021-04-20 16:53:36,263 1712 [DEBUG] - Configuration: CommandName='install'|
CacheLocation='C:\Users\Administrator\AppData\Local\Temp\chocolatey'|
ContainsLegacyPackageInstalls='True'|
CommandExecutionTimeoutSeconds='2700'|WebRequestTimeoutSeconds='30'|
Sources='c:\cached-packages;https://chocolatey.org/api/v2/'|
SourceType='normal'|Debug='True'|Verbose='True'|Trace='False'|
Force='True'|Noop='False'|HelpRequested='False'|
UnsuccessfulParsing='False'|RegularOutput='True'|QuietOutput='False'|
PromptForConfirmation='False'|AcceptLicense='True'|
AllowUnofficialBuild='False'|Input='osquery'|Version='4.7.0'|
AllVersions='False'|SkipPackageInstallProvider='False'|
PackageNames='osquery'|Prerelease='False'|ForceX86='False'|
OverrideArguments='False'|NotSilent='False'|
ApplyPackageParametersToDependencies='False'|
ApplyInstallArgumentsToDependencies='False'|IgnoreDependencies='False'|
AllowMultipleVersions='False'|AllowDowngrade='True'|
ForceDependencies='False'|Information.PlatformType='Windows'|
Information.PlatformVersion='6.3.9600.0'|
Information.PlatformName='Windows Server 2012 R2'|
Information.ChocolateyVersion='0.10.16.0'|
Information.ChocolateyProductVersion='0.10.16-beta'|
Information.FullName='choco, Version=0.10.16.0, Culture=neutral, PublicKeyToken=79d02ea9cad655eb'|
Information.Is64BitOperatingSystem='True'|
Information.Is64BitProcess='True'|Information.IsInteractive='True'|
Information.UserName='vagrant'|
Information.UserDomainName='WIN-E5K8TM30719'|
Information.IsUserAdministrator='True'|
Information.IsUserSystemAccount='False'|
Information.IsUserRemoteDesktop='False'|
Information.IsUserRemote='True'|
Information.IsProcessElevated='True'|
Information.IsLicensedVersion='False'|Information.LicenseType='Foss'|
Information.CurrentDirectory='C:\Windows\system32'|
Features.AutoUninstaller='True'|Features.ChecksumFiles='True'|
Features.AllowEmptyChecksums='False'|
Features.AllowEmptyChecksumsSecure='True'|
Features.FailOnAutoUninstaller='False'|
Features.FailOnStandardError='False'|Features.UsePowerShellHost='True'|
Features.LogEnvironmentValues='True'|Features.LogWithoutColor='False'|
Features.VirusCheck='False'|
Features.FailOnInvalidOrMissingLicense='False'|
Features.IgnoreInvalidOptionsSwitches='True'|
Features.UsePackageExitCodes='True'|
Features.UseEnhancedExitCodes='False'|
Features.UseFipsCompliantChecksums='False'|
Features.ShowNonElevatedWarnings='True'|
Features.ShowDownloadProgress='False'|
Features.StopOnFirstPackageFailure='False'|
Features.UseRememberedArgumentsForUpgrades='False'|
Features.IgnoreUnfoundPackagesOnUpgradeOutdated='False'|
Features.SkipPackageUpgradesWhenNotInstalled='False'|
Features.RemovePackageInformationOnUninstall='False'|
Features.ExitOnRebootDetected='False'|
Features.LogValidationResultsOnWarnings='True'|
Features.UsePackageRepositoryOptimizations='True'|
Features.ScriptsCheckLastExitCode='False'|
ListCommand.LocalOnly='False'|
ListCommand.IdOnly='False'|ListCommand.IncludeRegistryPrograms='False'|
ListCommand.PageSize='25'|ListCommand.Exact='False'|
ListCommand.ByIdOnly='False'|ListCommand.ByTagOnly='False'|
ListCommand.IdStartsWith='False'|ListCommand.OrderByPopularity='False'|
ListCommand.ApprovedOnly='False'|
ListCommand.DownloadCacheAvailable='False'|
ListCommand.NotBroken='False'|
ListCommand.IncludeVersionOverrides='False'|
UpgradeCommand.FailOnUnfound='False'|
UpgradeCommand.FailOnNotInstalled='False'|
UpgradeCommand.NotifyOnlyAvailableUpgrades='False'|
UpgradeCommand.ExcludePrerelease='False'|
NewCommand.AutomaticPackage='False'|
NewCommand.UseOriginalTemplate='False'|SourceCommand.Command='unknown'|
SourceCommand.Priority='0'|SourceCommand.BypassProxy='False'|
SourceCommand.AllowSelfService='False'|
SourceCommand.VisibleToAdminsOnly='False'|
FeatureCommand.Command='unknown'|ConfigCommand.Command='unknown'|
ApiKeyCommand.Remove='False'|PinCommand.Command='unknown'|
OutdatedCommand.IgnorePinned='False'|Proxy.BypassOnLocal='True'|
2021-04-20 16:53:36,263 1712 [DEBUG] - _ Chocolatey:ChocolateyInstallCommand - Normal Run Mode _
2021-04-20 16:53:36,279 1712 [INFO ] - Installing the following packages:
2021-04-20 16:53:36,279 1712 [INFO ] - osquery
2021-04-20 16:53:36,279 1712 [INFO ] - By installing you accept licenses for the packages.
2021-04-20 16:53:36,279 1712 [DEBUG] - Current environment values (may contain sensitive data):
2021-04-20 16:53:36,279 1712 [DEBUG] - * 'TMP'='C:\Users\Administrator\AppData\Local\Temp' ('User')
2021-04-20 16:53:36,279 1712 [DEBUG] - * 'TEMP'='C:\Users\Administrator\AppData\Local\Temp' ('User')
2021-04-20 16:53:36,279 1712 [DEBUG] - * 'ChocolateyLastPathUpdate'='132623567866079681' ('User')
2021-04-20 16:53:36,294 1712 [DEBUG] - * 'FP_NO_HOST_CHECK'='NO' ('Machine')
2021-04-20 16:53:36,294 1712 [DEBUG] - * 'USERNAME'='SYSTEM' ('Machine')
2021-04-20 16:53:36,294 1712 [DEBUG] - * 'Path'='C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\Git\bin;C:\ProgramData\chocolatey\bin;' ('Machine')
2021-04-20 16:53:36,294 1712 [DEBUG] - * 'ComSpec'='C:\Windows\system32\cmd.exe' ('Machine')
2021-04-20 16:53:36,294 1712 [DEBUG] - * 'TMP'='C:\Windows\TEMP' ('Machine')
2021-04-20 16:53:36,294 1712 [DEBUG] - * 'OS'='Windows_NT' ('Machine')
2021-04-20 16:53:36,294 1712 [DEBUG] - * 'windir'='C:\Windows' ('Machine')
2021-04-20 16:53:36,294 1712 [DEBUG] - * 'PROCESSOR_ARCHITECTURE'='AMD64' ('Machine')
2021-04-20 16:53:36,294 1712 [DEBUG] - * 'TEMP'='C:\Windows\TEMP' ('Machine')
2021-04-20 16:53:36,294 1712 [DEBUG] - * 'PATHEXT'='.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC' ('Machine')
2021-04-20 16:53:36,294 1712 [DEBUG] - * 'PSModulePath'='C:\Windows\system32\WindowsPowerShell\v1.0\Modules\' ('Machine')
2021-04-20 16:53:36,294 1712 [DEBUG] - * 'NUMBER_OF_PROCESSORS'='1' ('Machine')
2021-04-20 16:53:36,294 1712 [DEBUG] - * 'PROCESSOR_LEVEL'='6' ('Machine')
2021-04-20 16:53:36,294 1712 [DEBUG] - * 'PROCESSOR_IDENTIFIER'='Intel64 Family 6 Model 60 Stepping 3, GenuineIntel' ('Machine')
2021-04-20 16:53:36,294 1712 [DEBUG] - * 'PROCESSOR_REVISION'='3c03' ('Machine')
2021-04-20 16:53:36,294 1712 [DEBUG] - * 'HOME'='C:\Users\Administrator' ('Machine')
2021-04-20 16:53:36,294 1712 [DEBUG] - * 'ChocolateyInstall'='C:\ProgramData\chocolatey' ('Machine')
2021-04-20 16:53:44,263 1712 [INFO ] - [NuGet] Installing 'osquery 4.7.0'.
2021-04-20 16:53:44,263 1712 [DEBUG] - [NuGet] Added file 'certs.pem' to folder 'osquery\certs'.
2021-04-20 16:53:44,263 1712 [DEBUG] - [NuGet] Added file 'LICENSE.txt' to folder 'osquery'.
2021-04-20 16:53:44,263 1712 [DEBUG] - [NuGet] Added file 'manage-osqueryd.ps1' to folder 'osquery'.
2021-04-20 16:53:44,263 1712 [DEBUG] - [NuGet] Added file 'osquery.conf' to folder 'osquery'.
2021-04-20 16:53:44,263 1712 [DEBUG] - [NuGet] Added file 'osquery.flags' to folder 'osquery'.
2021-04-20 16:53:44,279 1712 [DEBUG] - [NuGet] Added file 'osquery.man' to folder 'osquery'.
2021-04-20 16:53:44,279 1712 [DEBUG] - [NuGet] Added file 'osqueryd.exe' to folder 'osquery\osqueryd'.
2021-04-20 16:53:46,216 1712 [DEBUG] - [NuGet] Added file 'osqueryi.exe' to folder 'osquery'.
2021-04-20 16:53:52,325 1712 [DEBUG] - [NuGet] Added file 'osquery_utils.ps1' to folder 'osquery'.
2021-04-20 16:53:52,325 1712 [DEBUG] - [NuGet] Added file 'hardware-monitoring.conf' to folder 'osquery\packs'.
2021-04-20 16:53:52,325 1712 [DEBUG] - [NuGet] Added file 'incident-response.conf' to folder 'osquery\packs'.
2021-04-20 16:53:52,341 1712 [DEBUG] - [NuGet] Added file 'it-compliance.conf' to folder 'osquery\packs'.
2021-04-20 16:53:52,341 1712 [DEBUG] - [NuGet] Added file 'osquery-monitoring.conf' to folder 'osquery\packs'.
2021-04-20 16:53:52,341 1712 [DEBUG] - [NuGet] Added file 'ossec-rootkit.conf' to folder 'osquery\packs'.
2021-04-20 16:53:52,341 1712 [DEBUG] - [NuGet] Added file 'osx-attacks.conf' to folder 'osquery\packs'.
2021-04-20 16:53:52,372 1712 [DEBUG] - [NuGet] Added file 'unwanted-chrome-extensions.conf' to folder 'osquery\packs'.
2021-04-20 16:53:52,372 1712 [DEBUG] - [NuGet] Added file 'vuln-management.conf' to folder 'osquery\packs'.
2021-04-20 16:53:52,372 1712 [DEBUG] - [NuGet] Added file 'windows-attacks.conf' to folder 'osquery\packs'.
2021-04-20 16:53:52,372 1712 [DEBUG] - [NuGet] Added file 'windows-hardening.conf' to folder 'osquery\packs'.
2021-04-20 16:53:53,341 1712 [DEBUG] - [NuGet] Added file 'chocolateyBeforeModify.ps1' to folder 'osquery\tools'.
2021-04-20 16:53:53,341 1712 [DEBUG] - [NuGet] Added file 'chocolateyinstall.ps1' to folder 'osquery\tools'.
2021-04-20 16:53:53,341 1712 [DEBUG] - [NuGet] Added file 'chocolateyuninstall.ps1' to folder 'osquery\tools'.
2021-04-20 16:53:53,341 1712 [DEBUG] - [NuGet] Added file 'osquery_utils.ps1' to folder 'osquery\tools'.
2021-04-20 16:53:53,341 1712 [DEBUG] - [NuGet] Added file 'VERIFICATION.txt' to folder 'osquery'.
2021-04-20 16:53:53,357 1712 [DEBUG] - [NuGet] Added file 'osquery.nupkg' to folder 'osquery'.
2021-04-20 16:53:53,607 1712 [DEBUG] - [NuGet] Added file 'osquery.nuspec' to folder 'osquery'.
2021-04-20 16:53:53,607 1712 [INFO ] - [NuGet] Successfully installed 'osquery 4.7.0'.
2021-04-20 16:53:53,607 1712 [INFO ] -
osquery v4.7.0 (forced)
2021-04-20 16:53:53,623 1712 [INFO ] - osquery package files install completed. Performing other installation steps.
2021-04-20 16:53:53,685 1712 [DEBUG] - Setting installer args for osquery
2021-04-20 16:53:53,685 1712 [DEBUG] - Setting package parameters for osquery
2021-04-20 16:53:53,685 1712 [DEBUG] - Contents of 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1':
2021-04-20 16:53:53,701 1712 [DEBUG] - # Copyright (c) 2014-present, The osquery authors
#
# This source code is licensed as defined by the LICENSE file found in the
# root directory of this source tree.
#
# SPDX-License-Identifier: (Apache-2.0 OR GPL-2.0-only)
# This library file contains constant definitions and helper functions
#Requires -Version 3.0
. (Join-Path "$PSScriptRoot" "osquery_utils.ps1")
$packageParameters = $env:chocolateyPackageParameters
$arguments = @{}
# Ensure the service is stopped and processes are not running if exists.
$svc = Get-WmiObject -ClassName Win32_Service -Filter "Name='osqueryd'"
if ($svc -and $svc.State -eq 'Running') {
Stop-Service $serviceName
# If we find zombie processes, ensure they're termintated
$proc = Get-Process | Where-Object { $_.ProcessName -eq 'osqueryd' }
if ($null -ne $proc) {
Stop-Process -Force $proc -ErrorAction SilentlyContinue
}
# If the service was installed using the legacy path in ProgramData, remove
# it and allow the service creation below to fix it up.
if ([regex]::escape($svc.PathName) -like [regex]::escape("${legacyInstall}*")) {
Get-CimInstance -ClassName Win32_Service -Filter "Name='osqueryd'" |
Invoke-CimMethod -MethodName Delete
}
}
# Lastly, ensure that the Deny Write ACLs have been removed before modifying
if (Test-Path $daemonFolder) {
Set-DenyWriteAcl $daemonFolder 'Remove'
}
if (Test-Path $extensionsFolder) {
Set-DenyWriteAcl $extensionsFolder 'Remove'
}
# Now parse the packageParameters using good old regular expression
if ($packageParameters) {
$match_pattern = "\/(?<option>([a-zA-Z]+)):(?<value>([`"'])?([a-zA-Z0-9- _\\:\.]+)([`"'])?)|\/(?<option>([a-zA-Z]+))"
$option_name = 'option'
$value_name = 'value'
if ($packageParameters -match $match_pattern ) {
$results = $packageParameters | Select-String $match_pattern -AllMatches
$results.matches | ForEach-Object {
$arguments.Add(
$_.Groups[$option_name].Value.Trim(),
$_.Groups[$value_name].Value.Trim())
}
} else {
Throw "Package Parameters were found but were invalid (REGEX Failure)"
}
if ($arguments.ContainsKey("InstallService")) {
$installService = $true
}
} else {
Write-Debug "No Package Parameters Passed in"
}
# Install the package
# Create a log directory in case one doesn't already exist
New-Item -Force -Type directory -Path $logFolder
# Grab the primary folders
$packageRoot = (Join-Path "$PSScriptRoot" "..")
Copy-Item -Force -Recurse (Join-Path "$packageRoot" "certs") $targetFolder
Copy-Item -Force -Recurse (Join-Path "$packageRoot" "osqueryd") $targetFolder
Copy-Item -Force -Recurse (Join-Path "$packageRoot" "packs") $targetFolder
# Grab the individual files
Copy-Item -Force (Join-Path "$packageRoot" "manage-osqueryd.ps1") $targetFolder
Copy-Item -Force (Join-Path "$packageRoot" "osquery.man") $targetFolder
Copy-Item -Force (Join-Path "$PSScriptRoot" "osquery_utils.ps1") $targetFolder
Copy-Item -Force (Join-Path "$packageRoot" "osqueryi.exe") $targetFolder
# We intentionally do not replace configuration and flags files from previous
# installations, as these often dictate the osquery configuration and may not
# change through upgrades.
$currConf = (Join-Path "$targetFolder" "osquery.conf")
if (-not (Test-Path $currConf)) {
Copy-Item -Force (Join-Path "$packageRoot" "osquery.conf") $targetFolder
}
$currFlags = (Join-Path "$targetFolder" "osquery.flags")
if (-not (Test-Path $currFlags)) {
Copy-Item -Force (Join-Path "$packageRoot" "osquery.flags") $targetFolder
}
# The osquery daemon requires no low privileged users have write access to run
Set-SafePermissions $daemonFolder
if ($installService) {
if (-not (Get-Service $serviceName -ErrorAction SilentlyContinue)) {
Write-Debug 'Installing osquery daemon service.'
# If the 'install' parameter is passed, we create a Windows service with
# the flag file in the default location, 'C:\Program Files\osquery'
$cmd = '"{0}" --flagfile="{1}\osquery.flags"' -f $destDaemonBin, $targetFolder
$svcArgs = @{
Name = $serviceName
BinaryPathName = $cmd
DisplayName = $serviceName
Description = $serviceDescription
StartupType = "Automatic"
}
New-Service @svcArgs
# If the osquery.flags file doesn't exist, we create a blank one.
if (-not (Test-Path "$targetFolder\osquery.flags")) {
Add-Content "$targetFolder\osquery.flags" $null
}
}
Start-Service $serviceName
}
# Add osquery binary path to machines path for ease of use.
Install-ChocolateyPath $targetFolder -PathType 'Machine'
2021-04-20 16:53:54,951 1712 [DEBUG] - Calling built-in PowerShell host with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = ''; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1' -installArguments '' -packageParameters ''']
2021-04-20 16:53:54,965 1712 [DEBUG] - Redirecting System.Management.Automation.resources, Version=3.0.0.0, Culture=en-US, PublicKeyToken=31bf3856ad364e35, requested by ''
2021-04-20 16:53:56,325 1712 [DEBUG] - Host version is 4.0, PowerShell Version is '4.0' and CLR Version is '4.0.30319.34014'.
2021-04-20 16:53:56,419 1712 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2021-04-20 16:53:56,435 1712 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2021-04-20 16:53:56,435 1712 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2021-04-20 16:53:56,435 1712 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2021-04-20 16:53:56,435 1712 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2021-04-20 16:53:56,435 1712 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2021-04-20 16:53:56,435 1712 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2021-04-20 16:53:56,435 1712 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2021-04-20 16:53:56,435 1712 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2021-04-20 16:53:56,435 1712 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2021-04-20 16:53:56,435 1712 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2021-04-20 16:53:56,435 1712 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2021-04-20 16:53:56,435 1712 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2021-04-20 16:53:56,435 1712 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2021-04-20 16:53:56,435 1712 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2021-04-20 16:53:56,435 1712 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2021-04-20 16:53:56,435 1712 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2021-04-20 16:53:56,435 1712 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2021-04-20 16:53:56,435 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyDesktopLink'.
2021-04-20 16:53:56,435 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2021-04-20 16:53:56,435 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2021-04-20 16:53:56,450 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2021-04-20 16:53:56,450 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2021-04-20 16:53:56,450 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2021-04-20 16:53:56,450 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2021-04-20 16:53:56,450 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2021-04-20 16:53:56,450 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2021-04-20 16:53:56,450 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2021-04-20 16:53:56,450 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2021-04-20 16:53:56,450 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2021-04-20 16:53:56,450 1712 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2021-04-20 16:53:56,450 1712 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2021-04-20 16:53:56,450 1712 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2021-04-20 16:53:56,450 1712 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2021-04-20 16:53:56,450 1712 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2021-04-20 16:53:56,450 1712 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2021-04-20 16:53:56,450 1712 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2021-04-20 16:53:56,450 1712 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2021-04-20 16:53:56,450 1712 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2021-04-20 16:53:56,450 1712 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2021-04-20 16:53:56,450 1712 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateyFailure'.
2021-04-20 16:53:56,450 1712 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateySuccess'.
2021-04-20 16:53:56,466 1712 [INFO ] - VERBOSE: Exporting function 'Write-FileUpdateLog'.
2021-04-20 16:53:56,466 1712 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2021-04-20 16:53:56,466 1712 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2021-04-20 16:53:56,466 1712 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2021-04-20 16:53:56,466 1712 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2021-04-20 16:53:56,466 1712 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2021-04-20 16:53:56,466 1712 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2021-04-20 16:53:56,466 1712 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2021-04-20 16:53:56,466 1712 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2021-04-20 16:53:56,466 1712 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2021-04-20 16:53:56,466 1712 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2021-04-20 16:53:56,466 1712 [DEBUG] - Loading community extensions
2021-04-20 16:53:56,481 1712 [DEBUG] - Importing 'C:\ProgramData\chocolatey\extensions\chocolatey-windowsupdate\chocolatey-windowsupdate.psm1'
2021-04-20 16:53:56,481 1712 [INFO ] - VERBOSE: Loading module from path 'C:\ProgramData\chocolatey\extensions\chocolatey-windowsupdate\chocolatey-windowsupdate.psm1'.
2021-04-20 16:53:56,513 1712 [INFO ] - VERBOSE: Exporting function 'Install-WindowsUpdate'.
2021-04-20 16:53:56,513 1712 [INFO ] - VERBOSE: Exporting function 'Test-WindowsUpdate'.
2021-04-20 16:53:56,513 1712 [INFO ] - VERBOSE: Importing function 'Install-WindowsUpdate'.
2021-04-20 16:53:56,513 1712 [INFO ] - VERBOSE: Importing function 'Test-WindowsUpdate'.
2021-04-20 16:53:56,513 1712 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2021-04-20 16:53:56,513 1712 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2021-04-20 16:53:56,513 1712 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2021-04-20 16:53:56,513 1712 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2021-04-20 16:53:56,513 1712 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2021-04-20 16:53:56,528 1712 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2021-04-20 16:53:56,528 1712 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2021-04-20 16:53:56,528 1712 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2021-04-20 16:53:56,528 1712 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2021-04-20 16:53:56,528 1712 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2021-04-20 16:53:56,528 1712 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2021-04-20 16:53:56,528 1712 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2021-04-20 16:53:56,528 1712 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2021-04-20 16:53:56,528 1712 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2021-04-20 16:53:56,528 1712 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2021-04-20 16:53:56,528 1712 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2021-04-20 16:53:56,528 1712 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2021-04-20 16:53:56,528 1712 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyDesktopLink'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateyFailure'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateySuccess'.
2021-04-20 16:53:56,544 1712 [INFO ] - VERBOSE: Exporting function 'Write-FileUpdateLog'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Exporting function 'Install-WindowsUpdate'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Exporting function 'Test-WindowsUpdate'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Importing function 'Format-FileSize'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Importing function 'Get-ChecksumValid'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyUnzip'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyWebFile'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariable'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariableNames'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Importing function 'Get-FtpFile'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Importing function 'Get-OSArchitectureWidth'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Importing function 'Get-PackageParameters'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Importing function 'Get-PackageParametersBuiltIn'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Importing function 'Get-ToolsLocation'.
2021-04-20 16:53:56,559 1712 [INFO ] - VERBOSE: Importing function 'Get-UACEnabled'.
2021-04-20 16:53:56,575 1712 [INFO ] - VERBOSE: Importing function 'Get-UninstallRegistryKey'.
2021-04-20 16:53:56,575 1712 [INFO ] - VERBOSE: Importing function 'Get-VirusCheckValid'.
2021-04-20 16:53:56,575 1712 [INFO ] - VERBOSE: Importing function 'Get-WebFile'.
2021-04-20 16:53:56,575 1712 [INFO ] - VERBOSE: Importing function 'Get-WebFileName'.
2021-04-20 16:53:56,575 1712 [INFO ] - VERBOSE: Importing function 'Get-WebHeaders'.
2021-04-20 16:53:56,575 1712 [INFO ] - VERBOSE: Importing function 'Install-BinFile'.
2021-04-20 16:53:56,575 1712 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyDesktopLink'.
2021-04-20 16:53:56,575 1712 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyEnvironmentVariable'.
2021-04-20 16:53:56,575 1712 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyExplorerMenuItem'.
2021-04-20 16:53:56,575 1712 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyFileAssociation'.
2021-04-20 16:53:56,575 1712 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyInstallPackage'.
2021-04-20 16:53:56,575 1712 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPackage'.
2021-04-20 16:53:56,575 1712 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPath'.
2021-04-20 16:53:56,575 1712 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPinnedTaskBarItem'.
2021-04-20 16:53:56,575 1712 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPowershellCommand'.
2021-04-20 16:53:56,575 1712 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyShortcut'.
2021-04-20 16:53:56,575 1712 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyVsixPackage'.
2021-04-20 16:53:56,575 1712 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyZipPackage'.
2021-04-20 16:53:56,575 1712 [INFO ] - VERBOSE: Importing function 'Install-Vsix'.
2021-04-20 16:53:57,013 1712 [INFO ] - VERBOSE: Importing function 'Install-WindowsUpdate'.
2021-04-20 16:53:57,013 1712 [INFO ] - VERBOSE: Importing function 'Set-EnvironmentVariable'.
2021-04-20 16:53:57,028 1712 [INFO ] - VERBOSE: Importing function 'Set-PowerShellExitCode'.
2021-04-20 16:53:57,028 1712 [INFO ] - VERBOSE: Importing function 'Start-ChocolateyProcessAsAdmin'.
2021-04-20 16:53:57,028 1712 [INFO ] - VERBOSE: Importing function 'Test-ProcessAdminRights'.
2021-04-20 16:53:57,028 1712 [INFO ] - VERBOSE: Importing function 'Test-WindowsUpdate'.
2021-04-20 16:53:57,028 1712 [INFO ] - VERBOSE: Importing function 'Uninstall-BinFile'.
2021-04-20 16:53:57,028 1712 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyEnvironmentVariable'.
2021-04-20 16:53:57,028 1712 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyPackage'.
2021-04-20 16:53:57,028 1712 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyZipPackage'.
2021-04-20 16:53:57,028 1712 [INFO ] - VERBOSE: Importing function 'Update-SessionEnvironment'.
2021-04-20 16:53:57,028 1712 [INFO ] - VERBOSE: Importing function 'Write-ChocolateyFailure'.
2021-04-20 16:53:57,028 1712 [INFO ] - VERBOSE: Importing function 'Write-ChocolateySuccess'.
2021-04-20 16:53:57,044 1712 [INFO ] - VERBOSE: Importing function 'Write-FileUpdateLog'.
2021-04-20 16:53:57,044 1712 [INFO ] - VERBOSE: Importing function 'Write-FunctionCallLogMessage'.
2021-04-20 16:53:57,044 1712 [INFO ] - VERBOSE: Importing alias 'Add-BinFile'.
2021-04-20 16:53:57,044 1712 [INFO ] - VERBOSE: Importing alias 'Generate-BinFile'.
2021-04-20 16:53:57,044 1712 [INFO ] - VERBOSE: Importing alias 'Get-InstallRegistryKey'.
2021-04-20 16:53:57,044 1712 [INFO ] - VERBOSE: Importing alias 'Get-OSBitness'.
2021-04-20 16:53:57,044 1712 [INFO ] - VERBOSE: Importing alias 'Get-ProcessorBits'.
2021-04-20 16:53:57,044 1712 [INFO ] - VERBOSE: Importing alias 'Invoke-ChocolateyProcess'.
2021-04-20 16:53:57,044 1712 [INFO ] - VERBOSE: Importing alias 'refreshenv'.
2021-04-20 16:53:57,044 1712 [INFO ] - VERBOSE: Importing alias 'Remove-BinFile'.
2021-04-20 16:53:57,044 1712 [INFO ] - VERBOSE: Importing alias 'Start-ChocolateyProcess'.
2021-04-20 16:53:57,091 1712 [DEBUG] - ---------------------------Script Execution---------------------------
2021-04-20 16:53:57,091 1712 [DEBUG] - Running 'ChocolateyScriptRunner' for osquery v4.7.0 with packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1', packageFolder:'C:\ProgramData\chocolatey\lib\osquery', installArguments: '', packageParameters: '',
2021-04-20 16:53:57,091 1712 [DEBUG] - Running 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1'
2021-04-20 16:53:57,809 1712 [DEBUG] - No Package Parameters Passed in
2021-04-20 16:53:57,825 1712 [INFO ] - C:\Program Files\osquery\log
2021-04-20 16:53:59,185 1712 [ERROR] - Attempted to perform an unauthorized operation.
2021-04-20 16:53:59,200 1712 [ERROR] - Access to the path 'C:\Program Files\osquery\osqueryd' is denied.
2021-04-20 16:53:59,200 1712 [INFO ] - True
2021-04-20 16:53:59,247 1712 [DEBUG] - Running Install-ChocolateyPath -pathType 'Machine' -pathToInstall 'C:\Program Files\osquery'
2021-04-20 16:53:59,997 1712 [DEBUG] - Running Update-SessionEnvironment
2021-04-20 16:54:01,232 1712 [INFO ] - VERBOSE: Refreshing environment variables from the registry.
2021-04-20 16:54:01,451 1712 [INFO ] - PATH environment variable does not have C:\Program Files\osquery in it. Adding...
2021-04-20 16:54:01,497 1712 [INFO ] -
2021-04-20 16:54:01,497 1712 [INFO ] - VERBOSE: Choosing not to expand environment names
2021-04-20 16:54:01,529 1712 [DEBUG] - Test-ProcessAdminRights: returning True
2021-04-20 16:54:01,544 1712 [DEBUG] - Running Set-EnvironmentVariable -Name 'Path' -Value '%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\Git\bin;C:\ProgramData\chocolatey\bin;C:\Program Files\osquery;' -Scope 'Machine'
2021-04-20 16:54:01,560 1712 [DEBUG] - Registry type for Path is/will be ExpandString
2021-04-20 16:54:01,576 1712 [DEBUG] -
using System;
using System.Runtime.InteropServices;
namespace Win32
{
public class NativeMethods
{
[DllImport("user32.dll", SetLastError = true, CharSet = CharSet.Auto)]
public static extern IntPtr SendMessageTimeout(
IntPtr hWnd, uint Msg, UIntPtr wParam, string lParam,
uint fuFlags, uint uTimeout, out UIntPtr lpdwResult);
}
}
2021-04-20 16:54:21,732 1712 [DEBUG] - Running Update-SessionEnvironment
2021-04-20 16:54:21,747 1712 [INFO ] - VERBOSE: Refreshing environment variables from the registry.
2021-04-20 16:54:21,810 1712 [DEBUG] - ----------------------------------------------------------------------
2021-04-20 16:54:21,810 1712 [DEBUG] - Built-in PowerShell host called with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = ''; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1' -installArguments '' -packageParameters '''] exited with '0'.
2021-04-20 16:54:21,810 1712 [WARN ] - Only an exit code of non-zero will fail the package by default. Set
`--failonstderr` if you want error messages to also fail a script. See
`choco -h` for details.
2021-04-20 16:54:21,810 1712 [DEBUG] - Calling command ['"C:\Windows\System32\shutdown.exe" /a']
2021-04-20 16:54:21,856 1712 [DEBUG] - Command ['"C:\Windows\System32\shutdown.exe" /a'] exited with '1116'
2021-04-20 16:54:21,873 1712 [WARN ] - Environment Vars (like PATH) have changed. Close/reopen your shell to
see the changes (or in powershell/cmd.exe just type `refreshenv`).
2021-04-20 16:54:21,873 1712 [DEBUG] - The following values have been added/changed (may contain sensitive data):
2021-04-20 16:54:21,873 1712 [DEBUG] - * ChocolateyLastPathUpdate='132634112517010541' (User)
2021-04-20 16:54:21,873 1712 [DEBUG] - * Path='C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\Git\bin;C:\ProgramData\chocolatey\bin;C:\Program Files\osquery;' (Machine)
2021-04-20 16:54:21,935 1712 [DEBUG] - Capturing package files in 'C:\ProgramData\chocolatey\lib\osquery'
2021-04-20 16:54:21,935 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\LICENSE.txt'
with checksum '0820FFE048483183320E2DAD339898F6'
2021-04-20 16:54:21,935 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\manage-osqueryd.ps1'
with checksum '3CCB09B60C319C2B6A43DF64360BD14F'
2021-04-20 16:54:21,935 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.conf'
with checksum '442E3F3E0F9405F2F92F9A0BCFB0B124'
2021-04-20 16:54:21,935 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.flags'
with checksum 'D41D8CD98F00B204E9800998ECF8427E'
2021-04-20 16:54:21,935 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.man'
with checksum 'A4C03558EDB1FF1F5DC4B2194CF3A500'
2021-04-20 16:54:21,982 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg'
with checksum '7E3864162CE7D6119340F9283093071F'
2021-04-20 16:54:21,982 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec'
with checksum '1180D0EF2E8817987BE1B8B92869CA26'
2021-04-20 16:54:22,045 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osqueryi.exe'
with checksum 'D426265A2A8E24E668823320D7B74F26'
2021-04-20 16:54:22,045 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery_utils.ps1'
with checksum 'B46F34FDF6276F636A9F1832E9392893'
2021-04-20 16:54:22,045 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\VERIFICATION.txt'
with checksum '77039304249AC12CA156465857B19382'
2021-04-20 16:54:22,059 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\certs\certs.pem'
with checksum '6C8779E5755D9DDDF677BF7A52D035CE'
2021-04-20 16:54:22,107 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osqueryd\osqueryd.exe'
with checksum 'D426265A2A8E24E668823320D7B74F26'
2021-04-20 16:54:22,107 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\hardware-monitoring.conf'
with checksum '3501087ED8C14DC4CB417D6F749ACAD4'
2021-04-20 16:54:22,107 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\incident-response.conf'
with checksum 'F6F961308CB86373D8462437BC62A1E9'
2021-04-20 16:54:22,107 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\it-compliance.conf'
with checksum 'C90DCD8897F172B41770C2A658D4426A'
2021-04-20 16:54:22,107 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\osquery-monitoring.conf'
with checksum '50B79815090F908C57B6317DD2F552BF'
2021-04-20 16:54:22,122 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\ossec-rootkit.conf'
with checksum '62B0102EA8761AC8AD0CB9C0A6247B77'
2021-04-20 16:54:22,122 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\osx-attacks.conf'
with checksum '703FA0183E83B19663C62D70DD30B209'
2021-04-20 16:54:22,122 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\unwanted-chrome-extensions.conf'
with checksum 'F0C411F58C5929CA1D2D6EF4249B1BAD'
2021-04-20 16:54:22,122 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\vuln-management.conf'
with checksum 'F1C82E2A9E05DE6AD9DFD47E16461FA8'
2021-04-20 16:54:22,122 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\windows-attacks.conf'
with checksum '5C705090F10185E33F87AC8A79C445FB'
2021-04-20 16:54:22,122 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\windows-hardening.conf'
with checksum 'EBFB94E06E2914770A4EAEA4E5F83248'
2021-04-20 16:54:22,122 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1'
with checksum '289840CCC12B230068E229CDD37E3703'
2021-04-20 16:54:22,122 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1'
with checksum '730998A613FD4DF3EAB80B87AEEC1308'
2021-04-20 16:54:22,122 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1'
with checksum '3C79361CA6117F7D02C1FEDDF82F07C6'
2021-04-20 16:54:22,122 1712 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1'
with checksum 'B46F34FDF6276F636A9F1832E9392893'
2021-04-20 16:54:22,138 1712 [DEBUG] - Calling command ['"C:\ProgramData\chocolatey\tools\shimgen.exe" --path="..\\lib\osquery\osqueryi.exe" --output="C:\ProgramData\chocolatey\bin\osqueryi.exe" --iconpath="C:\ProgramData\chocolatey\lib\osquery\osqueryi.exe"']
2021-04-20 16:54:22,529 1712 [DEBUG] - [ShimGen] [WARN ] Could not extract icon from associated program. Using default. Error:
2021-04-20 16:54:22,544 1712 [DEBUG] - [ShimGen] Selected Icon is invalid
2021-04-20 16:54:22,887 1712 [DEBUG] - [ShimGen] Microsoft (R) Visual C# Compiler version 4.0.30319.33440
2021-04-20 16:54:22,887 1712 [DEBUG] - [ShimGen] for Microsoft (R) .NET Framework 4.5
2021-04-20 16:54:22,887 1712 [DEBUG] - [ShimGen] Copyright (C) Microsoft Corporation. All rights reserved.
2021-04-20 16:54:22,887 1712 [DEBUG] - [ShimGen] ShimGen has successfully created 'C:\ProgramData\chocolatey\bin\osqueryi.exe'
2021-04-20 16:54:22,903 1712 [DEBUG] - Command ['"C:\ProgramData\chocolatey\tools\shimgen.exe" --path="..\\lib\osquery\osqueryi.exe" --output="C:\ProgramData\chocolatey\bin\osqueryi.exe" --iconpath="C:\ProgramData\chocolatey\lib\osquery\osqueryi.exe"'] exited with '0'
2021-04-20 16:54:22,903 1712 [INFO ] - ShimGen has successfully created a shim for osqueryi.exe
2021-04-20 16:54:22,903 1712 [DEBUG] - Created: C:\ProgramData\chocolatey\bin\osqueryi.exe
Targeting: C:\ProgramData\chocolatey\lib\osquery\osqueryi.exe
IsGui:False
2021-04-20 16:54:22,903 1712 [DEBUG] - Calling command ['"C:\ProgramData\chocolatey\tools\shimgen.exe" --path="..\\lib\osquery\osqueryd\osqueryd.exe" --output="C:\ProgramData\chocolatey\bin\osqueryd.exe" --iconpath="C:\ProgramData\chocolatey\lib\osquery\osqueryd\osqueryd.exe"']
2021-04-20 16:54:23,044 1712 [DEBUG] - [ShimGen] [WARN ] Could not extract icon from associated program. Using default. Error:
2021-04-20 16:54:23,044 1712 [DEBUG] - [ShimGen] Selected Icon is invalid
2021-04-20 16:54:23,107 1712 [DEBUG] - [ShimGen] Microsoft (R) Visual C# Compiler version 4.0.30319.33440
2021-04-20 16:54:23,107 1712 [DEBUG] - [ShimGen] for Microsoft (R) .NET Framework 4.5
2021-04-20 16:54:23,107 1712 [DEBUG] - [ShimGen] Copyright (C) Microsoft Corporation. All rights reserved.
2021-04-20 16:54:23,107 1712 [DEBUG] - [ShimGen] ShimGen has successfully created 'C:\ProgramData\chocolatey\bin\osqueryd.exe'
2021-04-20 16:54:23,123 1712 [DEBUG] - Command ['"C:\ProgramData\chocolatey\tools\shimgen.exe" --path="..\\lib\osquery\osqueryd\osqueryd.exe" --output="C:\ProgramData\chocolatey\bin\osqueryd.exe" --iconpath="C:\ProgramData\chocolatey\lib\osquery\osqueryd\osqueryd.exe"'] exited with '0'
2021-04-20 16:54:23,123 1712 [INFO ] - ShimGen has successfully created a shim for osqueryd.exe
2021-04-20 16:54:23,123 1712 [DEBUG] - Created: C:\ProgramData\chocolatey\bin\osqueryd.exe
Targeting: C:\ProgramData\chocolatey\lib\osquery\osqueryd\osqueryd.exe
IsGui:False
2021-04-20 16:54:23,138 1712 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\.chocolatey\osquery.4.7.0".
2021-04-20 16:54:23,138 1712 [DEBUG] - There was no original file at 'C:\ProgramData\chocolatey\.chocolatey\osquery.4.7.0\.files'
2021-04-20 16:54:23,169 1712 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\.chocolatey\osquery.4.7.0\.extra".
2021-04-20 16:54:23,169 1712 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\.chocolatey\osquery.4.7.0\.version".
2021-04-20 16:54:23,169 1712 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\.chocolatey\osquery.4.7.0\.sxs".
2021-04-20 16:54:23,169 1712 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\.chocolatey\osquery.4.7.0\.pin".
2021-04-20 16:54:23,169 1712 [DEBUG] - Sending message 'HandlePackageResultCompletedMessage' out if there are subscribers...
2021-04-20 16:54:23,169 1712 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\lib\osquery\.chocolateyPending".
2021-04-20 16:54:23,169 1712 [INFO ] - The install of osquery was successful.
2021-04-20 16:54:23,184 1712 [INFO ] - Software install location not explicitly set, could be in package or
default install location if installer.
2021-04-20 16:54:23,184 1712 [DEBUG] - Attempting to delete file "C:\Users\Administrator\AppData\Local\NuGet\Cache\osquery.4.7.0.nupkg".
2021-04-20 16:54:23,184 1712 [WARN ] -
Chocolatey installed 1/1 packages.
See the log for details (C:\ProgramData\chocolatey\logs\chocolatey.log).
2021-04-20 16:54:23,184 1712 [DEBUG] - Sending message 'PostRunMessage' out if there are subscribers...
2021-04-20 16:54:23,216 1712 [DEBUG] - Exiting with 0
2021-04-20 16:54:32,966 1168 [DEBUG] - XmlConfiguration is now operational
2021-04-20 16:54:33,029 1168 [INFO ] - ============================================================
2021-04-20 16:54:33,247 1168 [INFO ] - Chocolatey v0.10.16-beta
2021-04-20 16:54:33,263 1168 [DEBUG] - Chocolatey is running on Windows v 6.3.9600.0
2021-04-20 16:54:33,263 1168 [DEBUG] - Attempting to delete file "C:/ProgramData/chocolatey/choco.exe.old".
2021-04-20 16:54:33,263 1168 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\choco.exe.old".
2021-04-20 16:54:33,278 1168 [DEBUG] - Command line: "C:\ProgramData\chocolatey\choco.exe" uninstall osquery --version 4.7.0 -dvy --execution-timeout=2700
2021-04-20 16:54:33,278 1168 [DEBUG] - Received arguments: uninstall osquery --version 4.7.0 -dvy --execution-timeout=2700
2021-04-20 16:54:33,326 1168 [DEBUG] - RemovePendingPackagesTask is now ready and waiting for PreRunMessage.
2021-04-20 16:54:33,326 1168 [DEBUG] - Sending message 'PreRunMessage' out if there are subscribers...
2021-04-20 16:54:33,341 1168 [DEBUG] - [Pending] Removing all pending packages that should not be considered installed...
2021-04-20 16:54:33,388 1168 [DEBUG] - Performing validation checks.
2021-04-20 16:54:33,388 1168 [DEBUG] - Global Configuration Validation Checks:
2021-04-20 16:54:33,388 1168 [DEBUG] - - Package Exit Code / Exit On Reboot = Checked
2021-04-20 16:54:33,388 1168 [DEBUG] - System State Validation Checks:
2021-04-20 16:54:33,388 1168 [DEBUG] - Reboot Requirement Checks:
2021-04-20 16:54:33,403 1168 [DEBUG] - - Pending Computer Rename = Checked
2021-04-20 16:54:33,403 1168 [DEBUG] - - Pending Component Based Servicing = Checked
2021-04-20 16:54:33,403 1168 [DEBUG] - - Pending Windows Auto Update = Checked
2021-04-20 16:54:33,403 1168 [DEBUG] - - Pending File Rename Operations = Checked
2021-04-20 16:54:33,403 1168 [DEBUG] - - Pending Windows Package Installer = Checked
2021-04-20 16:54:33,403 1168 [DEBUG] - - Pending Windows Package Installer SysWow64 = Checked
2021-04-20 16:54:33,403 1168 [INFO ] - 2 validations performed. 2 success(es), 0 warning(s), and 0 error(s).
2021-04-20 16:54:33,419 1168 [DEBUG] - The source 'c:\cached-packages;https://chocolatey.org/api/v2/' evaluated to a 'normal' source type
2021-04-20 16:54:33,419 1168 [DEBUG] -
NOTE: Hiding sensitive configuration data! Please double and triple
check to be sure no sensitive data is shown, especially if copying
output to a gist for review.
2021-04-20 16:54:33,435 1168 [DEBUG] - Configuration: CommandName='uninstall'|
CacheLocation='C:\Users\Administrator\AppData\Local\Temp\chocolatey'|
ContainsLegacyPackageInstalls='True'|
CommandExecutionTimeoutSeconds='2700'|WebRequestTimeoutSeconds='30'|
Sources='c:\cached-packages;https://chocolatey.org/api/v2/'|
SourceType='normal'|Debug='True'|Verbose='True'|Trace='False'|
Force='False'|Noop='False'|HelpRequested='False'|
UnsuccessfulParsing='False'|RegularOutput='True'|QuietOutput='False'|
PromptForConfirmation='False'|AcceptLicense='True'|
AllowUnofficialBuild='False'|Input='osquery'|Version='4.7.0'|
AllVersions='False'|SkipPackageInstallProvider='False'|
PackageNames='osquery'|Prerelease='False'|ForceX86='False'|
OverrideArguments='False'|NotSilent='False'|
ApplyPackageParametersToDependencies='False'|
ApplyInstallArgumentsToDependencies='False'|IgnoreDependencies='False'|
AllowMultipleVersions='False'|AllowDowngrade='False'|
ForceDependencies='False'|Information.PlatformType='Windows'|
Information.PlatformVersion='6.3.9600.0'|
Information.PlatformName='Windows Server 2012 R2'|
Information.ChocolateyVersion='0.10.16.0'|
Information.ChocolateyProductVersion='0.10.16-beta'|
Information.FullName='choco, Version=0.10.16.0, Culture=neutral, PublicKeyToken=79d02ea9cad655eb'|
Information.Is64BitOperatingSystem='True'|
Information.Is64BitProcess='True'|Information.IsInteractive='True'|
Information.UserName='vagrant'|
Information.UserDomainName='WIN-E5K8TM30719'|
Information.IsUserAdministrator='True'|
Information.IsUserSystemAccount='False'|
Information.IsUserRemoteDesktop='False'|
Information.IsUserRemote='True'|
Information.IsProcessElevated='True'|
Information.IsLicensedVersion='False'|Information.LicenseType='Foss'|
Information.CurrentDirectory='C:\Windows\system32'|
Features.AutoUninstaller='True'|Features.ChecksumFiles='True'|
Features.AllowEmptyChecksums='False'|
Features.AllowEmptyChecksumsSecure='True'|
Features.FailOnAutoUninstaller='False'|
Features.FailOnStandardError='False'|Features.UsePowerShellHost='True'|
Features.LogEnvironmentValues='True'|Features.LogWithoutColor='False'|
Features.VirusCheck='False'|
Features.FailOnInvalidOrMissingLicense='False'|
Features.IgnoreInvalidOptionsSwitches='True'|
Features.UsePackageExitCodes='True'|
Features.UseEnhancedExitCodes='False'|
Features.UseFipsCompliantChecksums='False'|
Features.ShowNonElevatedWarnings='True'|
Features.ShowDownloadProgress='False'|
Features.StopOnFirstPackageFailure='False'|
Features.UseRememberedArgumentsForUpgrades='False'|
Features.IgnoreUnfoundPackagesOnUpgradeOutdated='False'|
Features.SkipPackageUpgradesWhenNotInstalled='False'|
Features.RemovePackageInformationOnUninstall='False'|
Features.ExitOnRebootDetected='False'|
Features.LogValidationResultsOnWarnings='True'|
Features.UsePackageRepositoryOptimizations='True'|
Features.ScriptsCheckLastExitCode='False'|
ListCommand.LocalOnly='False'|
ListCommand.IdOnly='False'|ListCommand.IncludeRegistryPrograms='False'|
ListCommand.PageSize='25'|ListCommand.Exact='False'|
ListCommand.ByIdOnly='False'|ListCommand.ByTagOnly='False'|
ListCommand.IdStartsWith='False'|ListCommand.OrderByPopularity='False'|
ListCommand.ApprovedOnly='False'|
ListCommand.DownloadCacheAvailable='False'|
ListCommand.NotBroken='False'|
ListCommand.IncludeVersionOverrides='False'|
UpgradeCommand.FailOnUnfound='False'|
UpgradeCommand.FailOnNotInstalled='False'|
UpgradeCommand.NotifyOnlyAvailableUpgrades='False'|
UpgradeCommand.ExcludePrerelease='False'|
NewCommand.AutomaticPackage='False'|
NewCommand.UseOriginalTemplate='False'|SourceCommand.Command='unknown'|
SourceCommand.Priority='0'|SourceCommand.BypassProxy='False'|
SourceCommand.AllowSelfService='False'|
SourceCommand.VisibleToAdminsOnly='False'|
FeatureCommand.Command='unknown'|ConfigCommand.Command='unknown'|
ApiKeyCommand.Remove='False'|PinCommand.Command='unknown'|
OutdatedCommand.IgnorePinned='False'|Proxy.BypassOnLocal='True'|
2021-04-20 16:54:33,435 1168 [DEBUG] - _ Chocolatey:ChocolateyUninstallCommand - Normal Run Mode _
2021-04-20 16:54:33,435 1168 [INFO ] - Uninstalling the following packages:
2021-04-20 16:54:33,435 1168 [INFO ] - osquery
2021-04-20 16:54:33,435 1168 [DEBUG] - Current environment values (may contain sensitive data):
2021-04-20 16:54:33,435 1168 [DEBUG] - * 'TMP'='C:\Users\Administrator\AppData\Local\Temp' ('User')
2021-04-20 16:54:33,435 1168 [DEBUG] - * 'TEMP'='C:\Users\Administrator\AppData\Local\Temp' ('User')
2021-04-20 16:54:33,450 1168 [DEBUG] - * 'ChocolateyLastPathUpdate'='132634112517010541' ('User')
2021-04-20 16:54:33,450 1168 [DEBUG] - * 'FP_NO_HOST_CHECK'='NO' ('Machine')
2021-04-20 16:54:33,450 1168 [DEBUG] - * 'USERNAME'='SYSTEM' ('Machine')
2021-04-20 16:54:33,450 1168 [DEBUG] - * 'Path'='C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\Git\bin;C:\ProgramData\chocolatey\bin;C:\Program Files\osquery;' ('Machine')
2021-04-20 16:54:33,450 1168 [DEBUG] - * 'ComSpec'='C:\Windows\system32\cmd.exe' ('Machine')
2021-04-20 16:54:33,450 1168 [DEBUG] - * 'TMP'='C:\Windows\TEMP' ('Machine')
2021-04-20 16:54:33,450 1168 [DEBUG] - * 'OS'='Windows_NT' ('Machine')
2021-04-20 16:54:33,450 1168 [DEBUG] - * 'windir'='C:\Windows' ('Machine')
2021-04-20 16:54:33,450 1168 [DEBUG] - * 'PROCESSOR_ARCHITECTURE'='AMD64' ('Machine')
2021-04-20 16:54:33,450 1168 [DEBUG] - * 'TEMP'='C:\Windows\TEMP' ('Machine')
2021-04-20 16:54:33,450 1168 [DEBUG] - * 'PATHEXT'='.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC' ('Machine')
2021-04-20 16:54:33,450 1168 [DEBUG] - * 'PSModulePath'='C:\Windows\system32\WindowsPowerShell\v1.0\Modules\' ('Machine')
2021-04-20 16:54:33,450 1168 [DEBUG] - * 'NUMBER_OF_PROCESSORS'='1' ('Machine')
2021-04-20 16:54:33,450 1168 [DEBUG] - * 'PROCESSOR_LEVEL'='6' ('Machine')
2021-04-20 16:54:33,450 1168 [DEBUG] - * 'PROCESSOR_IDENTIFIER'='Intel64 Family 6 Model 60 Stepping 3, GenuineIntel' ('Machine')
2021-04-20 16:54:33,450 1168 [DEBUG] - * 'PROCESSOR_REVISION'='3c03' ('Machine')
2021-04-20 16:54:33,450 1168 [DEBUG] - * 'HOME'='C:\Users\Administrator' ('Machine')
2021-04-20 16:54:33,450 1168 [DEBUG] - * 'ChocolateyInstall'='C:\ProgramData\chocolatey' ('Machine')
2021-04-20 16:54:33,513 1168 [DEBUG] - Running list with the following filter = ''
2021-04-20 16:54:33,513 1168 [DEBUG] - --- Start of List ---
2021-04-20 16:54:33,653 1168 [DEBUG] - osquery 4.7.0
2021-04-20 16:54:33,653 1168 [DEBUG] - --- End of List ---
2021-04-20 16:54:33,700 1168 [DEBUG] - Setting installer args for osquery
2021-04-20 16:54:33,700 1168 [DEBUG] - Setting package parameters for osquery
2021-04-20 16:54:33,700 1168 [DEBUG] - Contents of 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1':
2021-04-20 16:54:33,716 1168 [DEBUG] - # Copyright (c) 2014-present, The osquery authors
#
# This source code is licensed as defined by the LICENSE file found in the
# root directory of this source tree.
#
# SPDX-License-Identifier: (Apache-2.0 OR GPL-2.0-only)
# This library file contains constant definitions and helper functions
#Requires -Version 3.0
. (Join-Path "$PSScriptRoot" "osquery_utils.ps1")
# Ensure the service is stopped and processes are not running if exists.
if ((Get-Service $serviceName -ErrorAction SilentlyContinue) -and `
(Get-Service $serviceName).Status -eq 'Running') {
Stop-Service $serviceName
# If we find zombie processes, ensure they're termintated
$proc = Get-Process | Where-Object { $_.ProcessName -eq 'osqueryd' }
if ($null -ne $proc) {
Stop-Process -Force $proc -ErrorAction SilentlyContinue
}
}
# Lastly, ensure that the Deny Write ACLs have been removed before modifying
if (Test-Path $daemonFolder) {
Set-DenyWriteAcl $daemonFolder 'Remove'
}
if (Test-Path $extensionsFolder) {
Set-DenyWriteAcl $extensionsFolder 'Remove'
}
2021-04-20 16:54:33,810 1168 [DEBUG] - Calling built-in PowerShell host with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = ''; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1' -installArguments '' -packageParameters ''']
2021-04-20 16:54:33,825 1168 [DEBUG] - Redirecting System.Management.Automation.resources, Version=3.0.0.0, Culture=en-US, PublicKeyToken=31bf3856ad364e35, requested by ''
2021-04-20 16:54:33,982 1168 [DEBUG] - Host version is 4.0, PowerShell Version is '4.0' and CLR Version is '4.0.30319.34014'.
2021-04-20 16:54:34,091 1168 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2021-04-20 16:54:34,091 1168 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2021-04-20 16:54:34,091 1168 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2021-04-20 16:54:34,091 1168 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2021-04-20 16:54:34,091 1168 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2021-04-20 16:54:34,091 1168 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2021-04-20 16:54:34,091 1168 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2021-04-20 16:54:34,091 1168 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2021-04-20 16:54:34,091 1168 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyDesktopLink'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2021-04-20 16:54:34,106 1168 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateyFailure'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateySuccess'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting function 'Write-FileUpdateLog'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2021-04-20 16:54:34,122 1168 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2021-04-20 16:54:34,138 1168 [DEBUG] - Loading community extensions
2021-04-20 16:54:34,153 1168 [DEBUG] - Importing 'C:\ProgramData\chocolatey\extensions\chocolatey-windowsupdate\chocolatey-windowsupdate.psm1'
2021-04-20 16:54:34,153 1168 [INFO ] - VERBOSE: Loading module from path 'C:\ProgramData\chocolatey\extensions\chocolatey-windowsupdate\chocolatey-windowsupdate.psm1'.
2021-04-20 16:54:34,169 1168 [INFO ] - VERBOSE: Exporting function 'Install-WindowsUpdate'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Exporting function 'Test-WindowsUpdate'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Importing function 'Install-WindowsUpdate'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Importing function 'Test-WindowsUpdate'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyDesktopLink'.
2021-04-20 16:54:34,185 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2021-04-20 16:54:34,201 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2021-04-20 16:54:34,201 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2021-04-20 16:54:34,201 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2021-04-20 16:54:34,201 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2021-04-20 16:54:34,201 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2021-04-20 16:54:34,201 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2021-04-20 16:54:34,201 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2021-04-20 16:54:34,201 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2021-04-20 16:54:34,201 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2021-04-20 16:54:34,201 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2021-04-20 16:54:34,201 1168 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2021-04-20 16:54:34,201 1168 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2021-04-20 16:54:34,201 1168 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2021-04-20 16:54:34,201 1168 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2021-04-20 16:54:34,201 1168 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2021-04-20 16:54:34,201 1168 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2021-04-20 16:54:34,201 1168 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2021-04-20 16:54:34,201 1168 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2021-04-20 16:54:34,201 1168 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2021-04-20 16:54:34,201 1168 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateyFailure'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateySuccess'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Exporting function 'Write-FileUpdateLog'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Exporting function 'Install-WindowsUpdate'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Exporting function 'Test-WindowsUpdate'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Importing function 'Format-FileSize'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Importing function 'Get-ChecksumValid'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyUnzip'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyWebFile'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariable'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariableNames'.
2021-04-20 16:54:34,216 1168 [INFO ] - VERBOSE: Importing function 'Get-FtpFile'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Get-OSArchitectureWidth'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Get-PackageParameters'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Get-PackageParametersBuiltIn'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Get-ToolsLocation'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Get-UACEnabled'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Get-UninstallRegistryKey'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Get-VirusCheckValid'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Get-WebFile'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Get-WebFileName'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Get-WebHeaders'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Install-BinFile'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyDesktopLink'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyEnvironmentVariable'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyExplorerMenuItem'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyFileAssociation'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyInstallPackage'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPackage'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPath'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPinnedTaskBarItem'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPowershellCommand'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyShortcut'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyVsixPackage'.
2021-04-20 16:54:34,231 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyZipPackage'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing function 'Install-Vsix'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing function 'Install-WindowsUpdate'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing function 'Set-EnvironmentVariable'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing function 'Set-PowerShellExitCode'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing function 'Start-ChocolateyProcessAsAdmin'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing function 'Test-ProcessAdminRights'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing function 'Test-WindowsUpdate'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing function 'Uninstall-BinFile'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyEnvironmentVariable'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyPackage'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyZipPackage'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing function 'Update-SessionEnvironment'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing function 'Write-ChocolateyFailure'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing function 'Write-ChocolateySuccess'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing function 'Write-FileUpdateLog'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing function 'Write-FunctionCallLogMessage'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing alias 'Add-BinFile'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing alias 'Generate-BinFile'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing alias 'Get-InstallRegistryKey'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing alias 'Get-OSBitness'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing alias 'Get-ProcessorBits'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing alias 'Invoke-ChocolateyProcess'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing alias 'refreshenv'.
2021-04-20 16:54:34,247 1168 [INFO ] - VERBOSE: Importing alias 'Remove-BinFile'.
2021-04-20 16:54:34,262 1168 [INFO ] - VERBOSE: Importing alias 'Start-ChocolateyProcess'.
2021-04-20 16:54:34,278 1168 [DEBUG] - ---------------------------Script Execution---------------------------
2021-04-20 16:54:34,294 1168 [DEBUG] - Running 'ChocolateyScriptRunner' for osquery v4.7.0 with packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1', packageFolder:'C:\ProgramData\chocolatey\lib\osquery', installArguments: '', packageParameters: '',
2021-04-20 16:54:34,294 1168 [DEBUG] - Running 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1'
2021-04-20 16:54:34,404 1168 [INFO ] - True
2021-04-20 16:54:34,404 1168 [ERROR] - Attempted to perform an unauthorized operation.
2021-04-20 16:54:34,404 1168 [INFO ] - True
2021-04-20 16:54:34,419 1168 [DEBUG] - ----------------------------------------------------------------------
2021-04-20 16:54:34,419 1168 [DEBUG] - Built-in PowerShell host called with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = ''; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1' -installArguments '' -packageParameters '''] exited with '0'.
2021-04-20 16:54:34,435 1168 [WARN ] - Only an exit code of non-zero will fail the package by default. Set
`--failonstderr` if you want error messages to also fail a script. See
`choco -h` for details.
2021-04-20 16:54:34,481 1168 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib-bkp".
2021-04-20 16:54:34,481 1168 [DEBUG] - Backing up existing osquery prior to operation.
2021-04-20 16:54:34,497 1168 [DEBUG] - Moving 'C:\ProgramData\chocolatey\lib\osquery'
to 'C:\ProgramData\chocolatey\lib-bkp\osquery'
2021-04-20 16:54:36,513 1168 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib\osquery".
2021-04-20 16:54:36,513 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\LICENSE.txt"
to "C:\ProgramData\chocolatey\lib\osquery\LICENSE.txt".
2021-04-20 16:54:36,513 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\manage-osqueryd.ps1"
to "C:\ProgramData\chocolatey\lib\osquery\manage-osqueryd.ps1".
2021-04-20 16:54:36,513 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\osquery.conf"
to "C:\ProgramData\chocolatey\lib\osquery\osquery.conf".
2021-04-20 16:54:36,513 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\osquery.flags"
to "C:\ProgramData\chocolatey\lib\osquery\osquery.flags".
2021-04-20 16:54:36,513 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\osquery.man"
to "C:\ProgramData\chocolatey\lib\osquery\osquery.man".
2021-04-20 16:54:36,513 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\osquery.nupkg"
to "C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg".
2021-04-20 16:54:36,529 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\osquery.nuspec"
to "C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec".
2021-04-20 16:54:36,529 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\osqueryi.exe"
to "C:\ProgramData\chocolatey\lib\osquery\osqueryi.exe".
2021-04-20 16:54:36,544 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\osquery_utils.ps1"
to "C:\ProgramData\chocolatey\lib\osquery\osquery_utils.ps1".
2021-04-20 16:54:36,544 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\VERIFICATION.txt"
to "C:\ProgramData\chocolatey\lib\osquery\VERIFICATION.txt".
2021-04-20 16:54:36,544 1168 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib\osquery\certs".
2021-04-20 16:54:36,544 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\certs\certs.pem"
to "C:\ProgramData\chocolatey\lib\osquery\certs\certs.pem".
2021-04-20 16:54:36,560 1168 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib\osquery\osqueryd".
2021-04-20 16:54:36,560 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\osqueryd\osqueryd.exe"
to "C:\ProgramData\chocolatey\lib\osquery\osqueryd\osqueryd.exe".
2021-04-20 16:54:36,576 1168 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib\osquery\packs".
2021-04-20 16:54:36,576 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\packs\hardware-monitoring.conf"
to "C:\ProgramData\chocolatey\lib\osquery\packs\hardware-monitoring.conf".
2021-04-20 16:54:36,731 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\packs\incident-response.conf"
to "C:\ProgramData\chocolatey\lib\osquery\packs\incident-response.conf".
2021-04-20 16:54:36,747 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\packs\it-compliance.conf"
to "C:\ProgramData\chocolatey\lib\osquery\packs\it-compliance.conf".
2021-04-20 16:54:36,747 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\packs\osquery-monitoring.conf"
to "C:\ProgramData\chocolatey\lib\osquery\packs\osquery-monitoring.conf".
2021-04-20 16:54:36,747 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\packs\ossec-rootkit.conf"
to "C:\ProgramData\chocolatey\lib\osquery\packs\ossec-rootkit.conf".
2021-04-20 16:54:36,825 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\packs\osx-attacks.conf"
to "C:\ProgramData\chocolatey\lib\osquery\packs\osx-attacks.conf".
2021-04-20 16:54:36,841 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\packs\unwanted-chrome-extensions.conf"
to "C:\ProgramData\chocolatey\lib\osquery\packs\unwanted-chrome-extensions.conf".
2021-04-20 16:54:36,841 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\packs\vuln-management.conf"
to "C:\ProgramData\chocolatey\lib\osquery\packs\vuln-management.conf".
2021-04-20 16:54:36,856 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\packs\windows-attacks.conf"
to "C:\ProgramData\chocolatey\lib\osquery\packs\windows-attacks.conf".
2021-04-20 16:54:36,888 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\packs\windows-hardening.conf"
to "C:\ProgramData\chocolatey\lib\osquery\packs\windows-hardening.conf".
2021-04-20 16:54:36,903 1168 [DEBUG] - Attempting to create directory "C:\ProgramData\chocolatey\lib\osquery\tools".
2021-04-20 16:54:36,903 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\tools\chocolateyBeforeModify.ps1"
to "C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1".
2021-04-20 16:54:36,903 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\tools\chocolateyinstall.ps1"
to "C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1".
2021-04-20 16:54:36,903 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\tools\chocolateyuninstall.ps1"
to "C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1".
2021-04-20 16:54:36,903 1168 [DEBUG] - Attempting to copy "C:\ProgramData\chocolatey\lib-bkp\osquery\tools\osquery_utils.ps1"
to "C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1".
2021-04-20 16:54:38,419 1168 [DEBUG] - Capturing package files in 'C:\ProgramData\chocolatey\lib\osquery'
2021-04-20 16:54:38,419 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\LICENSE.txt'
with checksum '0820FFE048483183320E2DAD339898F6'
2021-04-20 16:54:38,419 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\manage-osqueryd.ps1'
with checksum '3CCB09B60C319C2B6A43DF64360BD14F'
2021-04-20 16:54:38,419 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.conf'
with checksum '442E3F3E0F9405F2F92F9A0BCFB0B124'
2021-04-20 16:54:38,419 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.flags'
with checksum 'D41D8CD98F00B204E9800998ECF8427E'
2021-04-20 16:54:38,419 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.man'
with checksum 'A4C03558EDB1FF1F5DC4B2194CF3A500'
2021-04-20 16:54:38,466 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nupkg'
with checksum '7E3864162CE7D6119340F9283093071F'
2021-04-20 16:54:38,466 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery.nuspec'
with checksum '1180D0EF2E8817987BE1B8B92869CA26'
2021-04-20 16:54:38,592 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osqueryi.exe'
with checksum 'D426265A2A8E24E668823320D7B74F26'
2021-04-20 16:54:38,592 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osquery_utils.ps1'
with checksum 'B46F34FDF6276F636A9F1832E9392893'
2021-04-20 16:54:38,592 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\VERIFICATION.txt'
with checksum '77039304249AC12CA156465857B19382'
2021-04-20 16:54:38,606 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\certs\certs.pem'
with checksum '6C8779E5755D9DDDF677BF7A52D035CE'
2021-04-20 16:54:38,653 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\osqueryd\osqueryd.exe'
with checksum 'D426265A2A8E24E668823320D7B74F26'
2021-04-20 16:54:38,653 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\hardware-monitoring.conf'
with checksum '3501087ED8C14DC4CB417D6F749ACAD4'
2021-04-20 16:54:38,653 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\incident-response.conf'
with checksum 'F6F961308CB86373D8462437BC62A1E9'
2021-04-20 16:54:38,653 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\it-compliance.conf'
with checksum 'C90DCD8897F172B41770C2A658D4426A'
2021-04-20 16:54:38,653 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\osquery-monitoring.conf'
with checksum '50B79815090F908C57B6317DD2F552BF'
2021-04-20 16:54:38,653 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\ossec-rootkit.conf'
with checksum '62B0102EA8761AC8AD0CB9C0A6247B77'
2021-04-20 16:54:38,653 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\osx-attacks.conf'
with checksum '703FA0183E83B19663C62D70DD30B209'
2021-04-20 16:54:38,653 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\unwanted-chrome-extensions.conf'
with checksum 'F0C411F58C5929CA1D2D6EF4249B1BAD'
2021-04-20 16:54:38,653 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\vuln-management.conf'
with checksum 'F1C82E2A9E05DE6AD9DFD47E16461FA8'
2021-04-20 16:54:38,653 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\windows-attacks.conf'
with checksum '5C705090F10185E33F87AC8A79C445FB'
2021-04-20 16:54:38,653 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\packs\windows-hardening.conf'
with checksum 'EBFB94E06E2914770A4EAEA4E5F83248'
2021-04-20 16:54:38,669 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyBeforeModify.ps1'
with checksum '289840CCC12B230068E229CDD37E3703'
2021-04-20 16:54:38,669 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyinstall.ps1'
with checksum '730998A613FD4DF3EAB80B87AEEC1308'
2021-04-20 16:54:38,669 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1'
with checksum '3C79361CA6117F7D02C1FEDDF82F07C6'
2021-04-20 16:54:38,669 1168 [DEBUG] - Found 'C:\ProgramData\chocolatey\lib\osquery\tools\osquery_utils.ps1'
with checksum 'B46F34FDF6276F636A9F1832E9392893'
2021-04-20 16:54:43,075 1168 [INFO ] - [NuGet] Uninstalling 'osquery 4.7.0'.
2021-04-20 16:54:43,075 1168 [INFO ] -
osquery v4.7.0
2021-04-20 16:54:43,091 1168 [DEBUG] - Removing shim for osqueryi.exe at 'C:\ProgramData\chocolatey\bin\osqueryi.exe
2021-04-20 16:54:43,091 1168 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\bin\osqueryi.exe".
2021-04-20 16:54:43,091 1168 [DEBUG] - Removing shim for osqueryd.exe at 'C:\ProgramData\chocolatey\bin\osqueryd.exe
2021-04-20 16:54:43,091 1168 [DEBUG] - Attempting to delete file "C:\ProgramData\chocolatey\bin\osqueryd.exe".
2021-04-20 16:54:43,091 1168 [DEBUG] - Setting installer args for osquery
2021-04-20 16:54:43,091 1168 [DEBUG] - Setting package parameters for osquery
2021-04-20 16:54:43,091 1168 [DEBUG] - Contents of 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1':
2021-04-20 16:54:43,091 1168 [DEBUG] - # Copyright (c) 2014-present, The osquery authors
#
# This source code is licensed as defined by the LICENSE file found in the
# root directory of this source tree.
#
# SPDX-License-Identifier: (Apache-2.0 OR GPL-2.0-only)
# This library file contains constant definitions and helper functions
#Requires -Version 3.0
. (Join-Path "$PSScriptRoot" "osquery_utils.ps1")
# Remove the osquery path from the System PATH variable. Note: Here
# we don't make use of our local vars, as Regex requires escaping the '\'
$oldPath = [System.Environment]::GetEnvironmentVariable('Path', 'Machine')
if ($oldPath -imatch [regex]::escape($targetFolder)) {
$newPath = $oldPath -replace [regex]::escape($targetFolder), $NULL
[System.Environment]::SetEnvironmentVariable('Path', $newPath, 'Machine')
}
if ((Get-Service $serviceName -ErrorAction SilentlyContinue)) {
Stop-Service $serviceName
# If we find zombie processes, ensure they're termintated
$proc = Get-Process | Where-Object { $_.ProcessName -eq 'osqueryd' }
if ($null -ne $proc) {
Stop-Process -Force $proc -ErrorAction SilentlyContinue
}
Set-Service $serviceName -startuptype 'manual'
Get-CimInstance -ClassName Win32_Service -Filter "Name='osqueryd'" | Invoke-CimMethod -methodName Delete
}
if (Test-Path $targetFolder) {
Remove-Item -Force -Recurse $targetFolder
} else {
Write-Debug 'osquery was not found on the system. Nothing to do.'
}
2021-04-20 16:54:43,091 1168 [DEBUG] - Calling built-in PowerShell host with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = ''; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1' -installArguments '' -packageParameters ''']
2021-04-20 16:54:43,106 1168 [DEBUG] - Redirecting Microsoft.PowerShell.Security, requested by ''
2021-04-20 16:54:43,294 1168 [DEBUG] - Attempting to load assembly Microsoft.PowerShell.Security failed:
Could not load file or assembly 'Microsoft.PowerShell.Security, Version=5.0.0.0' or one of its dependencies. The system cannot find the file specified.
2021-04-20 16:54:43,294 1168 [DEBUG] - Attempting to load assembly Microsoft.PowerShell.Security failed:
Could not load file or assembly 'Microsoft.PowerShell.Security, Version=4.0.0.0' or one of its dependencies. The system cannot find the file specified.
2021-04-20 16:54:43,294 1168 [DEBUG] - Attempting to load assembly Microsoft.PowerShell.Security failed:
Could not load file or assembly 'Microsoft.PowerShell.Security, Version=3.0.0.0' or one of its dependencies. The system cannot find the file specified.
2021-04-20 16:54:43,294 1168 [DEBUG] - Attempting to load assembly Microsoft.PowerShell.Security failed:
Could not load file or assembly 'Microsoft.PowerShell.Security, Version=1.0.0.0' or one of its dependencies. The system cannot find the file specified.
2021-04-20 16:54:43,450 1168 [DEBUG] - Host version is 4.0, PowerShell Version is '4.0' and CLR Version is '4.0.30319.34014'.
2021-04-20 16:54:43,482 1168 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2021-04-20 16:54:43,482 1168 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2021-04-20 16:54:43,482 1168 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2021-04-20 16:54:43,482 1168 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2021-04-20 16:54:43,482 1168 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2021-04-20 16:54:43,482 1168 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2021-04-20 16:54:43,482 1168 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2021-04-20 16:54:43,482 1168 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2021-04-20 16:54:43,482 1168 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyDesktopLink'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2021-04-20 16:54:43,497 1168 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2021-04-20 16:54:43,512 1168 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2021-04-20 16:54:43,512 1168 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2021-04-20 16:54:43,512 1168 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2021-04-20 16:54:43,512 1168 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2021-04-20 16:54:43,512 1168 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2021-04-20 16:54:43,512 1168 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2021-04-20 16:54:43,512 1168 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2021-04-20 16:54:43,512 1168 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2021-04-20 16:54:43,512 1168 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateyFailure'.
2021-04-20 16:54:43,528 1168 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateySuccess'.
2021-04-20 16:54:43,528 1168 [INFO ] - VERBOSE: Exporting function 'Write-FileUpdateLog'.
2021-04-20 16:54:43,528 1168 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2021-04-20 16:54:43,528 1168 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2021-04-20 16:54:43,528 1168 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2021-04-20 16:54:43,528 1168 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2021-04-20 16:54:43,528 1168 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2021-04-20 16:54:43,528 1168 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2021-04-20 16:54:43,528 1168 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2021-04-20 16:54:43,528 1168 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2021-04-20 16:54:43,528 1168 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2021-04-20 16:54:43,528 1168 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2021-04-20 16:54:43,528 1168 [DEBUG] - Loading community extensions
2021-04-20 16:54:43,528 1168 [DEBUG] - Importing 'C:\ProgramData\chocolatey\extensions\chocolatey-windowsupdate\chocolatey-windowsupdate.psm1'
2021-04-20 16:54:43,528 1168 [INFO ] - VERBOSE: Loading module from path 'C:\ProgramData\chocolatey\extensions\chocolatey-windowsupdate\chocolatey-windowsupdate.psm1'.
2021-04-20 16:54:43,544 1168 [INFO ] - VERBOSE: Exporting function 'Install-WindowsUpdate'.
2021-04-20 16:54:43,544 1168 [INFO ] - VERBOSE: Exporting function 'Test-WindowsUpdate'.
2021-04-20 16:54:43,544 1168 [INFO ] - VERBOSE: Importing function 'Install-WindowsUpdate'.
2021-04-20 16:54:43,544 1168 [INFO ] - VERBOSE: Importing function 'Test-WindowsUpdate'.
2021-04-20 16:54:43,544 1168 [INFO ] - VERBOSE: Exporting function 'Format-FileSize'.
2021-04-20 16:54:43,544 1168 [INFO ] - VERBOSE: Exporting function 'Get-ChecksumValid'.
2021-04-20 16:54:43,560 1168 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyUnzip'.
2021-04-20 16:54:43,560 1168 [INFO ] - VERBOSE: Exporting function 'Get-ChocolateyWebFile'.
2021-04-20 16:54:43,560 1168 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariable'.
2021-04-20 16:54:43,560 1168 [INFO ] - VERBOSE: Exporting function 'Get-EnvironmentVariableNames'.
2021-04-20 16:54:43,560 1168 [INFO ] - VERBOSE: Exporting function 'Get-FtpFile'.
2021-04-20 16:54:43,560 1168 [INFO ] - VERBOSE: Exporting function 'Get-OSArchitectureWidth'.
2021-04-20 16:54:43,575 1168 [INFO ] - VERBOSE: Exporting function 'Get-PackageParameters'.
2021-04-20 16:54:43,575 1168 [INFO ] - VERBOSE: Exporting function 'Get-PackageParametersBuiltIn'.
2021-04-20 16:54:43,575 1168 [INFO ] - VERBOSE: Exporting function 'Get-ToolsLocation'.
2021-04-20 16:54:43,575 1168 [INFO ] - VERBOSE: Exporting function 'Get-UACEnabled'.
2021-04-20 16:54:43,575 1168 [INFO ] - VERBOSE: Exporting function 'Get-UninstallRegistryKey'.
2021-04-20 16:54:43,591 1168 [INFO ] - VERBOSE: Exporting function 'Get-VirusCheckValid'.
2021-04-20 16:54:44,482 1168 [INFO ] - VERBOSE: Exporting function 'Get-WebFile'.
2021-04-20 16:54:44,482 1168 [INFO ] - VERBOSE: Exporting function 'Get-WebFileName'.
2021-04-20 16:54:44,482 1168 [INFO ] - VERBOSE: Exporting function 'Get-WebHeaders'.
2021-04-20 16:54:44,482 1168 [INFO ] - VERBOSE: Exporting function 'Install-BinFile'.
2021-04-20 16:54:44,482 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyDesktopLink'.
2021-04-20 16:54:44,482 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyEnvironmentVariable'.
2021-04-20 16:54:44,482 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyExplorerMenuItem'.
2021-04-20 16:54:44,482 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyFileAssociation'.
2021-04-20 16:54:44,482 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyInstallPackage'.
2021-04-20 16:54:44,482 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPackage'.
2021-04-20 16:54:44,482 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPath'.
2021-04-20 16:54:44,482 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPinnedTaskBarItem'.
2021-04-20 16:54:44,482 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyPowershellCommand'.
2021-04-20 16:54:44,482 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyShortcut'.
2021-04-20 16:54:44,482 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyVsixPackage'.
2021-04-20 16:54:44,482 1168 [INFO ] - VERBOSE: Exporting function 'Install-ChocolateyZipPackage'.
2021-04-20 16:54:44,482 1168 [INFO ] - VERBOSE: Exporting function 'Install-Vsix'.
2021-04-20 16:54:44,482 1168 [INFO ] - VERBOSE: Exporting function 'Set-EnvironmentVariable'.
2021-04-20 16:54:44,497 1168 [INFO ] - VERBOSE: Exporting function 'Set-PowerShellExitCode'.
2021-04-20 16:54:44,497 1168 [INFO ] - VERBOSE: Exporting function 'Start-ChocolateyProcessAsAdmin'.
2021-04-20 16:54:44,497 1168 [INFO ] - VERBOSE: Exporting function 'Test-ProcessAdminRights'.
2021-04-20 16:54:44,497 1168 [INFO ] - VERBOSE: Exporting function 'Uninstall-BinFile'.
2021-04-20 16:54:44,497 1168 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyEnvironmentVariable'.
2021-04-20 16:54:44,497 1168 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyPackage'.
2021-04-20 16:54:44,497 1168 [INFO ] - VERBOSE: Exporting function 'Uninstall-ChocolateyZipPackage'.
2021-04-20 16:54:44,497 1168 [INFO ] - VERBOSE: Exporting function 'Update-SessionEnvironment'.
2021-04-20 16:54:44,497 1168 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateyFailure'.
2021-04-20 16:54:44,497 1168 [INFO ] - VERBOSE: Exporting function 'Write-ChocolateySuccess'.
2021-04-20 16:54:44,497 1168 [INFO ] - VERBOSE: Exporting function 'Write-FileUpdateLog'.
2021-04-20 16:54:44,497 1168 [INFO ] - VERBOSE: Exporting function 'Write-FunctionCallLogMessage'.
2021-04-20 16:54:44,497 1168 [INFO ] - VERBOSE: Exporting function 'Install-WindowsUpdate'.
2021-04-20 16:54:44,497 1168 [INFO ] - VERBOSE: Exporting function 'Test-WindowsUpdate'.
2021-04-20 16:54:44,497 1168 [INFO ] - VERBOSE: Exporting alias 'Get-ProcessorBits'.
2021-04-20 16:54:44,497 1168 [INFO ] - VERBOSE: Exporting alias 'Get-OSBitness'.
2021-04-20 16:54:44,497 1168 [INFO ] - VERBOSE: Exporting alias 'Get-InstallRegistryKey'.
2021-04-20 16:54:44,513 1168 [INFO ] - VERBOSE: Exporting alias 'Generate-BinFile'.
2021-04-20 16:54:44,513 1168 [INFO ] - VERBOSE: Exporting alias 'Add-BinFile'.
2021-04-20 16:54:44,513 1168 [INFO ] - VERBOSE: Exporting alias 'Start-ChocolateyProcess'.
2021-04-20 16:54:44,513 1168 [INFO ] - VERBOSE: Exporting alias 'Invoke-ChocolateyProcess'.
2021-04-20 16:54:44,513 1168 [INFO ] - VERBOSE: Exporting alias 'Remove-BinFile'.
2021-04-20 16:54:44,529 1168 [INFO ] - VERBOSE: Exporting alias 'refreshenv'.
2021-04-20 16:54:44,529 1168 [INFO ] - VERBOSE: Importing function 'Format-FileSize'.
2021-04-20 16:54:44,529 1168 [INFO ] - VERBOSE: Importing function 'Get-ChecksumValid'.
2021-04-20 16:54:44,529 1168 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyUnzip'.
2021-04-20 16:54:44,529 1168 [INFO ] - VERBOSE: Importing function 'Get-ChocolateyWebFile'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariable'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Get-EnvironmentVariableNames'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Get-FtpFile'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Get-OSArchitectureWidth'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Get-PackageParameters'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Get-PackageParametersBuiltIn'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Get-ToolsLocation'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Get-UACEnabled'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Get-UninstallRegistryKey'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Get-VirusCheckValid'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Get-WebFile'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Get-WebFileName'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Get-WebHeaders'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Install-BinFile'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyDesktopLink'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyEnvironmentVariable'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyExplorerMenuItem'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyFileAssociation'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyInstallPackage'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPackage'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPath'.
2021-04-20 16:54:44,544 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPinnedTaskBarItem'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyPowershellCommand'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyShortcut'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyVsixPackage'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing function 'Install-ChocolateyZipPackage'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing function 'Install-Vsix'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing function 'Install-WindowsUpdate'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing function 'Set-EnvironmentVariable'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing function 'Set-PowerShellExitCode'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing function 'Start-ChocolateyProcessAsAdmin'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing function 'Test-ProcessAdminRights'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing function 'Test-WindowsUpdate'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing function 'Uninstall-BinFile'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyEnvironmentVariable'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyPackage'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing function 'Uninstall-ChocolateyZipPackage'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing function 'Update-SessionEnvironment'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing function 'Write-ChocolateyFailure'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing function 'Write-ChocolateySuccess'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing function 'Write-FileUpdateLog'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing function 'Write-FunctionCallLogMessage'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing alias 'Add-BinFile'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing alias 'Generate-BinFile'.
2021-04-20 16:54:44,560 1168 [INFO ] - VERBOSE: Importing alias 'Get-InstallRegistryKey'.
2021-04-20 16:54:44,575 1168 [INFO ] - VERBOSE: Importing alias 'Get-OSBitness'.
2021-04-20 16:54:44,575 1168 [INFO ] - VERBOSE: Importing alias 'Get-ProcessorBits'.
2021-04-20 16:54:44,575 1168 [INFO ] - VERBOSE: Importing alias 'Invoke-ChocolateyProcess'.
2021-04-20 16:54:44,575 1168 [INFO ] - VERBOSE: Importing alias 'refreshenv'.
2021-04-20 16:54:44,575 1168 [INFO ] - VERBOSE: Importing alias 'Remove-BinFile'.
2021-04-20 16:54:44,575 1168 [INFO ] - VERBOSE: Importing alias 'Start-ChocolateyProcess'.
2021-04-20 16:54:44,575 1168 [DEBUG] - ---------------------------Script Execution---------------------------
2021-04-20 16:54:44,575 1168 [DEBUG] - Running 'ChocolateyScriptRunner' for osquery v4.7.0 with packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1', packageFolder:'C:\ProgramData\chocolatey\lib\osquery', installArguments: '', packageParameters: '',
2021-04-20 16:54:44,575 1168 [DEBUG] - Running 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1'
2021-04-20 16:54:44,638 1168 [ERROR] - Access to the path 'C:\Program Files\osquery\osqueryd' is denied.
2021-04-20 16:54:44,654 1168 [DEBUG] - ----------------------------------------------------------------------
2021-04-20 16:54:44,654 1168 [DEBUG] - Built-in PowerShell host called with ['[System.Threading.Thread]::CurrentThread.CurrentCulture = '';[System.Threading.Thread]::CurrentThread.CurrentUICulture = ''; & import-module -name 'C:\ProgramData\chocolatey\helpers\chocolateyInstaller.psm1'; & 'C:\ProgramData\chocolatey\helpers\chocolateyScriptRunner.ps1' -packageScript 'C:\ProgramData\chocolatey\lib\osquery\tools\chocolateyuninstall.ps1' -installArguments '' -packageParameters '''] exited with '0'.
2021-04-20 16:54:44,654 1168 [WARN ] - Only an exit code of non-zero will fail the package by default. Set
`--failonstderr` if you want error messages to also fail a script. See
`choco -h` for details.
2021-04-20 16:54:44,654 1168 [INFO ] - Skipping auto uninstaller - No registry snapshot.
2021-04-20 16:54:44,654 1168 [DEBUG] - Calling command ['"C:\Windows\System32\shutdown.exe" /a']
2021-04-20 16:54:44,685 1168 [DEBUG] - Command ['"C:\Windows\System32\shutdown.exe" /a'] exited with '1116'
2021-04-20 16:54:44,685 1168 [DEBUG] - Attempting to delete directory "C:\ProgramData\chocolatey\lib-bkp\osquery".
2021-04-20 16:54:44,747 1168 [DEBUG] - [NuGet] Removed file 'osqueryd.exe' to folder 'C:\ProgramData\chocolatey\lib\osquery\osqueryd'.
2021-04-20 16:54:44,747 1168 [DEBUG] - [NuGet] Removed folder 'C:\ProgramData\chocolatey\lib\osquery\osqueryd'.
2021-04-20 16:54:44,794 1168 [DEBUG] - [NuGet] Removed file 'certs.pem' to folder 'C:\ProgramData\chocolatey\lib\osquery\certs'.
2021-04-20 16:54:44,794 1168 [DEBUG] - [NuGet] Removed folder 'C:\ProgramData\chocolatey\lib\osquery\certs'.
2021-04-20 16:54:44,794 1168 [DEBUG] - [NuGet] Removed file 'hardware-monitoring.conf' to folder 'C:\ProgramData\chocolatey\lib\osquery\packs'.
2021-04-20 16:54:44,794 1168 [DEBUG] - [NuGet] Removed file 'incident-response.conf' to folder 'C:\ProgramData\chocolatey\lib\osquery\packs'.
2021-04-20 16:54:44,794 1168 [DEBUG] - [NuGet] Removed file 'it-compliance.conf' to folder 'C:\ProgramData\chocolatey\lib\osquery\packs'.
2021-04-20 16:54:44,794 1168 [DEBUG] - [NuGet] Removed file 'osquery-monitoring.conf' to folder 'C:\ProgramData\chocolatey\lib\osquery\packs'.
2021-04-20 16:54:44,794 1168 [DEBUG] - [NuGet] Removed file 'ossec-rootkit.conf' to folder 'C:\ProgramData\chocolatey\lib\osquery\packs'.
2021-04-20 16:54:44,794 1168 [DEBUG] - [NuGet] Removed file 'osx-attacks.conf' to folder 'C:\ProgramData\chocolatey\lib\osquery\packs'.
2021-04-20 16:54:44,794 1168 [DEBUG] - [NuGet] Removed file 'unwanted-chrome-extensions.conf' to folder 'C:\ProgramData\chocolatey\lib\osquery\packs'.
2021-04-20 16:54:44,794 1168 [DEBUG] - [NuGet] Removed file 'vuln-management.conf' to folder 'C:\ProgramData\chocolatey\lib\osquery\packs'.
2021-04-20 16:54:44,794 1168 [DEBUG] - [NuGet] Removed file 'windows-attacks.conf' to folder 'C:\ProgramData\chocolatey\lib\osquery\packs'.
2021-04-20 16:54:44,794 1168 [DEBUG] - [NuGet] Removed file 'windows-hardening.conf' to folder 'C:\ProgramData\chocolatey\lib\osquery\packs'.
2021-04-20 16:54:44,794 1168 [DEBUG] - [NuGet] Removed folder 'C:\ProgramData\chocolatey\lib\osquery\packs'.
2021-04-20 16:54:44,809 1168 [DEBUG] - [NuGet] Removed file 'chocolateyBeforeModify.ps1' to folder 'C:\ProgramData\chocolatey\lib\osquery\tools'.
2021-04-20 16:54:44,809 1168 [DEBUG] - [NuGet] Removed file 'chocolateyinstall.ps1' to folder 'C:\ProgramData\chocolatey\lib\osquery\tools'.
2021-04-20 16:54:44,809 1168 [DEBUG] - [NuGet] Removed file 'chocolateyuninstall.ps1' to folder 'C:\ProgramData\chocolatey\lib\osquery\tools'.
2021-04-20 16:54:44,809 1168 [DEBUG] - [NuGet] Removed file 'osquery_utils.ps1' to folder 'C:\ProgramData\chocolatey\lib\osquery\tools'.
2021-04-20 16:54:44,809 1168 [DEBUG] - [NuGet] Removed folder 'C:\ProgramData\chocolatey\lib\osquery\tools'.
2021-04-20 16:54:44,809 1168 [DEBUG] - [NuGet] Removed file 'LICENSE.txt' to folder 'C:\ProgramData\chocolatey\lib\osquery'.
2021-04-20 16:54:44,809 1168 [DEBUG] - [NuGet] Removed file 'manage-osqueryd.ps1' to folder 'C:\ProgramData\chocolatey\lib\osquery'.
2021-04-20 16:54:44,809 1168 [DEBUG] - [NuGet] Removed file 'osquery.conf' to folder 'C:\ProgramData\chocolatey\lib\osquery'.
2021-04-20 16:54:44,809 1168 [DEBUG] - [NuGet] Removed file 'osquery.flags' to folder 'C:\ProgramData\chocolatey\lib\osquery'.
2021-04-20 16:54:44,809 1168 [DEBUG] - [NuGet] Removed file 'osquery.man' to folder 'C:\ProgramData\chocolatey\lib\osquery'.
2021-04-20 16:54:44,841 1168 [DEBUG] - [NuGet] Removed file 'osqueryi.exe' to folder 'C:\ProgramData\chocolatey\lib\osquery'.
2021-04-20 16:54:44,841 1168 [DEBUG] - [NuGet] Removed file 'osquery_utils.ps1' to folder 'C:\ProgramData\chocolatey\lib\osquery'.
2021-04-20 16:54:44,841 1168 [DEBUG] - [NuGet] Removed file 'VERIFICATION.txt' to folder 'C:\ProgramData\chocolatey\lib\osquery'.
2021-04-20 16:54:44,841 1168 [DEBUG] - [NuGet] Removed file 'osquery.nuspec' to folder 'C:\ProgramData\chocolatey\lib\osquery'.
2021-04-20 16:54:44,841 1168 [DEBUG] - [NuGet] Removed file 'osquery.nupkg' to folder 'C:\ProgramData\chocolatey\lib\osquery'.
2021-04-20 16:54:44,841 1168 [DEBUG] - [NuGet] Removed folder 'C:\ProgramData\chocolatey\lib\osquery'.
2021-04-20 16:54:44,841 1168 [INFO ] - [NuGet] Successfully uninstalled 'osquery 4.7.0'.
2021-04-20 16:54:44,841 1168 [INFO ] - osquery has been successfully uninstalled.
2021-04-20 16:54:44,856 1168 [DEBUG] - Removing nupkg if it still exists.
2021-04-20 16:54:44,856 1168 [DEBUG] - Ensuring removal of installation files.
2021-04-20 16:54:44,856 1168 [DEBUG] - Ensuring removal of package cache files.
2021-04-20 16:54:44,856 1168 [WARN ] - Environment Vars (like PATH) have changed. Close/reopen your shell to
see the changes (or in powershell/cmd.exe just type `refreshenv`).
2021-04-20 16:54:44,856 1168 [DEBUG] - The following values have been added/changed (may contain sensitive data):
2021-04-20 16:54:44,856 1168 [DEBUG] - * Path='C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\Git\bin;C:\ProgramData\chocolatey\bin;;' (Machine)
2021-04-20 16:54:44,873 1168 [WARN ] -
Chocolatey uninstalled 1/1 packages.
See the log for details (C:\ProgramData\chocolatey\logs\chocolatey.log).
2021-04-20 16:54:44,873 1168 [DEBUG] - Sending message 'PostRunMessage' out if there are subscribers...
2021-04-20 16:54:44,888 1168 [DEBUG] - Exiting with 0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment