Defender for Identity sensor install failed. error code 0x80070643

manual npcap install failed as well, install log below:

Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-23 0:01:07
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" does not exist, jumping 219
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-23 0:12:58
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-23 0:53:38
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-23 1:16:45
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-23 1:23:39
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-24 12:09:32
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-24 12:31:00
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-24 17:44:58
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-27 15:21:40
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-27 15:23:23
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-27 15:40:52
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-27 16:01:10
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Call: 1524
File: overwriteflag=0, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\modern-header.bmp"
File: wrote 70976 to "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\modern-header.bmp"
WriteINIStr: wrote [Field 1] State=0 in C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\options.ini
Jump: 770
WriteINIStr: wrote [Field 2] State=0 in C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\options.ini
Jump: 783
WriteINIStr: wrote [Field 3] State=0 in C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\options.ini
Jump: 796
WriteINIStr: wrote [Field 4] State=1 in C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\options.ini
Jump: 813
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\InstallOptions.dll"
File: wrote 23712 to "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\InstallOptions.dll"
Jump: 831
Jump: 841
New install of "Npcap OEM 1.00" to "C:\Program Files\Npcap"
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000001"
Jump: 1245
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\InstallOptions.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\modern-header.bmp")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-27 16:07:53
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Call: 1524
File: overwriteflag=0, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\modern-header.bmp"
File: wrote 70976 to "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\modern-header.bmp"
WriteINIStr: wrote [Field 1] State=0 in C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\options.ini
Jump: 770
WriteINIStr: wrote [Field 2] State=0 in C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\options.ini
Jump: 783
WriteINIStr: wrote [Field 3] State=0 in C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\options.ini
Jump: 796
WriteINIStr: wrote [Field 4] State=1 in C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\options.ini
Jump: 813
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\InstallOptions.dll"
File: wrote 23712 to "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\InstallOptions.dll"
Jump: 831
Jump: 841
New install of "Npcap OEM 1.00" to "C:\Program Files\Npcap"
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000001"
Jump: 1245
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Aborting: ""