Forum Discussion
Defender for Identity sensor install failed. error code 0x80070643
Deploying Defender for Identity Sensors on 3 Domain Controllers, DC1 (server 2012R2) - success, DC2 (server 2019) - success, DC3 (server 2012R2) - failed error code 0x80070643. Any guidance would be...
EliOfek
Microsoft
MicrosoftNpcap failed to install.
Try to install it manually using the npcap installer provided in the zip as well, and collect it's logs to understand why it is failing.
make sure to install it with proper parameters:
npcap-1.00-oem.exe /loopback_support=no /winpcap_mode=yes /admin_only=no /S
Details:
https://aka.ms/mdi/npcap
Try to install it manually using the npcap installer provided in the zip as well, and collect it's logs to understand why it is failing.
make sure to install it with proper parameters:
npcap-1.00-oem.exe /loopback_support=no /winpcap_mode=yes /admin_only=no /S
Details:
https://aka.ms/mdi/npcap
manual npcap install failed as well, install log below:
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-23 0:01:07
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" does not exist, jumping 219
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-23 0:12:58
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-23 0:53:38
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-23 1:16:45
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-23 1:23:39
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-24 12:09:32
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-24 12:31:00
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-24 17:44:58
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-27 15:21:40
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-27 15:23:23
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-27 15:40:52
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-27 16:01:10
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Call: 1524
File: overwriteflag=0, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\modern-header.bmp"
File: wrote 70976 to "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\modern-header.bmp"
WriteINIStr: wrote [Field 1] State=0 in C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\options.ini
Jump: 770
WriteINIStr: wrote [Field 2] State=0 in C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\options.ini
Jump: 783
WriteINIStr: wrote [Field 3] State=0 in C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\options.ini
Jump: 796
WriteINIStr: wrote [Field 4] State=1 in C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\options.ini
Jump: 813
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\InstallOptions.dll"
File: wrote 23712 to "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\InstallOptions.dll"
Jump: 831
Jump: 841
New install of "Npcap OEM 1.00" to "C:\Program Files\Npcap"
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000001"
Jump: 1245
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\InstallOptions.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\modern-header.bmp")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-27 16:07:53
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Call: 1524
File: overwriteflag=0, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\modern-header.bmp"
File: wrote 70976 to "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\modern-header.bmp"
WriteINIStr: wrote [Field 1] State=0 in C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\options.ini
Jump: 770
WriteINIStr: wrote [Field 2] State=0 in C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\options.ini
Jump: 783
WriteINIStr: wrote [Field 3] State=0 in C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\options.ini
Jump: 796
WriteINIStr: wrote [Field 4] State=1 in C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\options.ini
Jump: 813
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\InstallOptions.dll"
File: wrote 23712 to "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\InstallOptions.dll"
Jump: 831
Jump: 841
New install of "Npcap OEM 1.00" to "C:\Program Files\Npcap"
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000001"
Jump: 1245
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Aborting: ""
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-23 0:01:07
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" does not exist, jumping 219
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsz52FD.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-23 0:12:58
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nslCAF1.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-23 0:53:38
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsx794B.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-23 1:16:45
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nshA3B1.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-23 1:23:39
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsmF156.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-24 12:09:32
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nss9AB0.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-24 12:31:00
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nso3FBE.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-24 17:44:58
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsc4A9C.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-27 15:21:40
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsm1C50.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-27 15:23:23
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsoAB5C.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-27 15:40:52
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Jump: 278
Jump: 323
Jump: 364
Jump: 366
Call: 258
Jump: 278
Jump: 323
Jump: 376
Jump: 378
Call: 258
Call: 258
Call: 258
Jump: 278
Jump: 323
Jump: 410
Jump: 412
Jump: 414
Jump: 416
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Jump: 1523
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsoAFF2.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-27 16:01:10
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Call: 1524
File: overwriteflag=0, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\modern-header.bmp"
File: wrote 70976 to "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\modern-header.bmp"
WriteINIStr: wrote [Field 1] State=0 in C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\options.ini
Jump: 770
WriteINIStr: wrote [Field 2] State=0 in C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\options.ini
Jump: 783
WriteINIStr: wrote [Field 3] State=0 in C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\options.ini
Jump: 796
WriteINIStr: wrote [Field 4] State=1 in C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\options.ini
Jump: 813
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\InstallOptions.dll"
File: wrote 23712 to "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\InstallOptions.dll"
Jump: 831
Jump: 841
New install of "Npcap OEM 1.00" to "C:\Program Files\Npcap"
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000001"
Jump: 1245
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\InstallOptions.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\modern-header.bmp")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nsn45A3.tmp\")
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-27 16:07:53
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Call: 1524
File: overwriteflag=0, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\modern-header.bmp"
File: wrote 70976 to "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\modern-header.bmp"
WriteINIStr: wrote [Field 1] State=0 in C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\options.ini
Jump: 770
WriteINIStr: wrote [Field 2] State=0 in C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\options.ini
Jump: 783
WriteINIStr: wrote [Field 3] State=0 in C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\options.ini
Jump: 796
WriteINIStr: wrote [Field 4] State=1 in C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\options.ini
Jump: 813
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\InstallOptions.dll"
File: wrote 23712 to "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\InstallOptions.dll"
Jump: 831
Jump: 841
New install of "Npcap OEM 1.00" to "C:\Program Files\Npcap"
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000001"
Jump: 1245
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nsw695A.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Aborting: ""
- EliOfekTry to reboot the machine and then to install npcap again to see if you get a different result.
I think this error code says the machine has a pending reboot so it cannot install the driver.- sorry there were 2 logs here's the other one
[00000C54] 2023-09-27 17:39:42 --> wmain
[00000C54] 2023-09-27 17:39:42 _tmain: executing, argv[0] = C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\NPFInstall.exe.
[00000C54] 2023-09-27 17:39:42 _tmain: executing, argv[1] = -n.
[00000C54] 2023-09-27 17:39:42 _tmain: executing, argv[2] = -check_dll.
[00000C54] 2023-09-27 17:39:42 --> getInUseProcesses
[00000C54] 2023-09-27 17:39:42 --> enumProcesses
[00000C54] 2023-09-27 17:39:42 --> getNpcapPIDs
[00000C54] 2023-09-27 17:39:42 <-- getNpcapPIDs
[00000C54] 2023-09-27 17:39:42 enumDLLs::OpenProcess: error, errCode = 0x00000005, strProcessName = System, dwProcessID = 4.
[00000C54] 2023-09-27 17:39:42 enumDLLs::OpenProcess: error, errCode = 0x00000005, strProcessName = smss.exe, dwProcessID = 272.
[00000C54] 2023-09-27 17:39:42 enumDLLs::OpenProcess: error, errCode = 0x00000005, strProcessName = csrss.exe, dwProcessID = 380.
[00000C54] 2023-09-27 17:39:42 enumDLLs::OpenProcess: error, errCode = 0x00000005, strProcessName = csrss.exe, dwProcessID = 452.
[00000C54] 2023-09-27 17:39:42 enumDLLs::OpenProcess: error, errCode = 0x00000005, strProcessName = services.exe, dwProcessID = 540.
[00000C54] 2023-09-27 17:39:42 enumDLLs::OpenProcess: error, errCode = 0x00000005, strProcessName = csrss.exe, dwProcessID = 2416.
[00000C54] 2023-09-27 17:39:42 <-- enumProcesses
[00000C54] 2023-09-27 17:39:42 <-- getInUseProcesses
[00000C54] 2023-09-27 17:39:42 _tmain: succeed, nStatus = 0.
[00000C54] 2023-09-27 17:39:42 <-- wmain
[000012F4] 2023-09-27 17:39:43 --> wmain
[000012F4] 2023-09-27 17:39:43 _tmain: executing, argv[0] = C:\Program Files\Npcap\NPFInstall.exe.
[000012F4] 2023-09-27 17:39:43 _tmain: executing, argv[1] = -n.
[000012F4] 2023-09-27 17:39:43 _tmain: executing, argv[2] = -c.
[000012F4] 2023-09-27 17:39:43 --> ClearDriverStore
[000012F4] 2023-09-27 17:39:43 --> executeCommand
[000012F4] 2023-09-27 17:39:43 executeCommand: executing, strCmd = pnputil.exe -e.
[000012F4] 2023-09-27 17:39:43 executeCommand: result = Microsoft PnP Utility
Published name : oem0.inf
Driver package provider : Microsoft
Class : Printers
Driver date and version : 06/21/2006 6.3.9600.16384
Signer name : Microsoft Windows
.
[000012F4] 2023-09-27 17:39:43 <-- executeCommand
[000012F4] 2023-09-27 17:39:43 --> getInfNamesFromPnpUtilOutput
[000012F4] 2023-09-27 17:39:43 <-- getInfNamesFromPnpUtilOutput
[000012F4] 2023-09-27 17:39:43 <-- ClearDriverStore
[000012F4] 2023-09-27 17:39:43 _tmain: succeed, nStatus = 0.
[000012F4] 2023-09-27 17:39:43 <-- wmain
[000011E8] 2023-09-27 17:39:43 --> wmain
[000011E8] 2023-09-27 17:39:43 _tmain: executing, argv[0] = C:\Program Files\Npcap\NPFInstall.exe.
[000011E8] 2023-09-27 17:39:43 _tmain: executing, argv[1] = -n.
[000011E8] 2023-09-27 17:39:43 _tmain: executing, argv[2] = -iw.
[000011E8] 2023-09-27 17:39:43 --> InstallWFPCallout
[000011E8] 2023-09-27 17:39:43 --> GetWFPCalloutInfFilePath
[000011E8] 2023-09-27 17:39:43 lpFilename = C:\Program Files\Npcap\NPCAP_wfp.inf
[000011E8] 2023-09-27 17:39:43 <-- GetWFPCalloutInfFilePath
[000011E8] 2023-09-27 17:39:43 --> isFileExist
[000011E8] 2023-09-27 17:39:43 FindFirstFile: succeed, szFileFullPath = C:\Program Files\Npcap\NPCAP_wfp.inf.
[000011E8] 2023-09-27 17:39:43 <-- isFileExist
[000011E8] 2023-09-27 17:39:43 LaunchINFSectionEx: executing, szCmd = C:\Program Files\Npcap\NPCAP_wfp.inf,DefaultInstall,,36,N.
[000011E8] 2023-09-27 17:39:43 <-- InstallWFPCallout
[000011E8] 2023-09-27 17:39:43 _tmain: succeed, nStatus = 0.
[000011E8] 2023-09-27 17:39:43 <-- wmain
[00001138] 2023-09-27 17:39:43 --> wmain
[00001138] 2023-09-27 17:39:43 _tmain: executing, argv[0] = C:\Program Files\Npcap\NPFInstall.exe.
[00001138] 2023-09-27 17:39:43 _tmain: executing, argv[1] = -n.
[00001138] 2023-09-27 17:39:43 _tmain: executing, argv[2] = -i.
[00001138] 2023-09-27 17:39:43 --> InstallDriver
[00001138] 2023-09-27 17:39:43 --> GetServiceInfFilePath
[00001138] 2023-09-27 17:39:43 lpFilename = C:\Program Files\Npcap\NPCAP.inf
[00001138] 2023-09-27 17:39:43 <-- GetServiceInfFilePath
[00001138] 2023-09-27 17:39:43 --> InstallSpecifiedComponent
[00001138] 2023-09-27 17:39:43 --> HrGetINetCfg
[00001138] 2023-09-27 17:39:43 <-- HrGetINetCfg
[00001138] 2023-09-27 17:39:43 --> HrInstallNetComponent
[00001138] 2023-09-27 17:39:43 bWiFiService = 0.
[00001138] 2023-09-27 17:39:43 HrInstallComponent: executing, szComponentId = INSECURE_NPCAP.
[00001138] 2023-09-27 17:39:43 --> HrInstallComponent
[00001138] 2023-09-27 17:39:44 INetCfgClassSetup::Install: error, szComponentId = INSECURE_NPCAP.
[00001138] 2023-09-27 17:39:44 <-- HrInstallComponent
[00001138] 2023-09-27 17:39:44 HrInstallComponent: error, szComponentId = INSECURE_NPCAP.
[00001138] 2023-09-27 17:39:44 <-- HrInstallNetComponent
[00001138] 2023-09-27 17:39:44 --> HrReleaseINetCfg
[00001138] 2023-09-27 17:39:44 <-- HrReleaseINetCfg
[00001138] 2023-09-27 17:39:44 <-- InstallSpecifiedComponent
[00001138] 2023-09-27 17:39:44 Error 0x4a020: InstallSpecifiedComponent
[00001138] 2023-09-27 17:39:44 <-- InstallDriver
[00001138] 2023-09-27 17:39:44 _tmain: error, nStatus = 303136.
[00001138] 2023-09-27 17:39:44 <-- wmain
[0000132C] 2023-09-27 17:39:52 --> wmain
[0000132C] 2023-09-27 17:39:52 _tmain: executing, argv[0] = C:\Program Files\Npcap\NPFInstall.exe.
[0000132C] 2023-09-27 17:39:52 _tmain: executing, argv[1] = -n.
[0000132C] 2023-09-27 17:39:52 _tmain: executing, argv[2] = -check_dll.
[0000132C] 2023-09-27 17:39:52 --> getInUseProcesses
[0000132C] 2023-09-27 17:39:52 --> enumProcesses
[0000132C] 2023-09-27 17:39:52 --> getNpcapPIDs
[0000132C] 2023-09-27 17:39:52 <-- getNpcapPIDs
[0000132C] 2023-09-27 17:39:52 enumDLLs::OpenProcess: error, errCode = 0x00000005, strProcessName = System, dwProcessID = 4.
[0000132C] 2023-09-27 17:39:52 enumDLLs::OpenProcess: error, errCode = 0x00000005, strProcessName = smss.exe, dwProcessID = 272.
[0000132C] 2023-09-27 17:39:52 enumDLLs::OpenProcess: error, errCode = 0x00000005, strProcessName = csrss.exe, dwProcessID = 380.
[0000132C] 2023-09-27 17:39:52 enumDLLs::OpenProcess: error, errCode = 0x00000005, strProcessName = csrss.exe, dwProcessID = 452.
[0000132C] 2023-09-27 17:39:52 enumDLLs::OpenProcess: error, errCode = 0x00000005, strProcessName = services.exe, dwProcessID = 540.
[0000132C] 2023-09-27 17:39:52 enumDLLs::OpenProcess: error, errCode = 0x00000005, strProcessName = csrss.exe, dwProcessID = 2416.
[0000132C] 2023-09-27 17:39:52 <-- enumProcesses
[0000132C] 2023-09-27 17:39:52 <-- getInUseProcesses
[0000132C] 2023-09-27 17:39:52 _tmain: succeed, nStatus = 0.
[0000132C] 2023-09-27 17:39:52 <-- wmain
[00000ED0] 2023-09-27 17:39:52 --> wmain
[00000ED0] 2023-09-27 17:39:52 _tmain: executing, argv[0] = C:\Program Files\Npcap\NPFInstall.exe.
[00000ED0] 2023-09-27 17:39:52 _tmain: executing, argv[1] = -n.
[00000ED0] 2023-09-27 17:39:52 _tmain: executing, argv[2] = -d.
[00000ED0] 2023-09-27 17:39:52 --> PacketIsServiceStopPending
[00000ED0] 2023-09-27 17:39:52 Service is already stopped.
[00000ED0] 2023-09-27 17:39:52 <-- PacketIsServiceStopPending
[00000ED0] 2023-09-27 17:39:52 _tmain: error, nStatus = -1.
[00000ED0] 2023-09-27 17:39:52 <-- wmain
[000011D0] 2023-09-27 17:39:52 --> wmain
[000011D0] 2023-09-27 17:39:52 _tmain: executing, argv[0] = C:\Program Files\Npcap\NPFInstall.exe.
[000011D0] 2023-09-27 17:39:52 _tmain: executing, argv[1] = -n.
[000011D0] 2023-09-27 17:39:52 _tmain: executing, argv[2] = -u.
[000011D0] 2023-09-27 17:39:52 --> UninstallDriver
[000011D0] 2023-09-27 17:39:52 --> HrGetINetCfg
[000011D0] 2023-09-27 17:39:52 <-- HrGetINetCfg
[000011D0] 2023-09-27 17:39:52 bWiFiService = 0.
[000011D0] 2023-09-27 17:39:52 HrUninstallNetComponent: executing, szComponentId = INSECURE_NPCAP.
[000011D0] 2023-09-27 17:39:52 --> HrUninstallNetComponent
[000011D0] 2023-09-27 17:39:52 <-- HrUninstallNetComponent
[000011D0] 2023-09-27 17:39:52 Error 0x4a020: Couldn't uninstall the network component.
[000011D0] 2023-09-27 17:39:52 --> HrReleaseINetCfg
[000011D0] 2023-09-27 17:39:52 <-- HrReleaseINetCfg
[000011D0] 2023-09-27 17:39:52 <-- UninstallDriver
[000011D0] 2023-09-27 17:39:52 _tmain: error, nStatus = -1.
[000011D0] 2023-09-27 17:39:52 <-- wmain
[00001390] 2023-09-27 17:39:53 --> wmain
[00001390] 2023-09-27 17:39:53 _tmain: executing, argv[0] = C:\Program Files\Npcap\NPFInstall.exe.
[00001390] 2023-09-27 17:39:53 _tmain: executing, argv[1] = -n.
[00001390] 2023-09-27 17:39:53 _tmain: executing, argv[2] = -uw.
[00001390] 2023-09-27 17:39:53 --> UninstallWFPCallout
[00001390] 2023-09-27 17:39:53 --> GetWFPCalloutInfFilePath
[00001390] 2023-09-27 17:39:53 lpFilename = C:\Program Files\Npcap\NPCAP_wfp.inf
[00001390] 2023-09-27 17:39:53 <-- GetWFPCalloutInfFilePath
[00001390] 2023-09-27 17:39:53 --> isFileExist
[00001390] 2023-09-27 17:39:53 FindFirstFile: succeed, szFileFullPath = C:\Program Files\Npcap\NPCAP_wfp.inf.
[00001390] 2023-09-27 17:39:53 <-- isFileExist
[00001390] 2023-09-27 17:39:53 LaunchINFSectionEx: executing, szCmd = C:\Program Files\Npcap\NPCAP_wfp.inf,DefaultUninstall,,36,N.
[00001390] 2023-09-27 17:39:53 <-- UninstallWFPCallout
[00001390] 2023-09-27 17:39:53 _tmain: succeed, nStatus = 0.
[00001390] 2023-09-27 17:39:53 <-- wmain
[000004FC] 2023-09-27 17:39:53 --> wmain
[000004FC] 2023-09-27 17:39:53 _tmain: executing, argv[0] = C:\Program Files\Npcap\NPFInstall.exe.
[000004FC] 2023-09-27 17:39:53 _tmain: executing, argv[1] = -n.
[000004FC] 2023-09-27 17:39:53 _tmain: executing, argv[2] = -c.
[000004FC] 2023-09-27 17:39:53 --> ClearDriverStore
[000004FC] 2023-09-27 17:39:53 --> executeCommand
[000004FC] 2023-09-27 17:39:53 executeCommand: executing, strCmd = pnputil.exe -e.
[000004FC] 2023-09-27 17:39:53 executeCommand: result = Microsoft PnP Utility
Published name : oem1.inf
Driver package provider : Nmap Project
Class : Network Service
Driver date and version : 09/25/2020 10.36.7.512
Signer name : Insecure.Com LLC
Published name : oem0.inf
Driver package provider : Microsoft
Class : Printers
Driver date and version : 06/21/2006 6.3.9600.16384
Signer name : Microsoft Windows
.
[000004FC] 2023-09-27 17:39:53 <-- executeCommand
[000004FC] 2023-09-27 17:39:53 --> getInfNamesFromPnpUtilOutput
[000004FC] 2023-09-27 17:39:53 find: executing, strInfFileName = oem1.inf.
[000004FC] 2023-09-27 17:39:53 <-- getInfNamesFromPnpUtilOutput
[000004FC] 2023-09-27 17:39:53 --> executeCommand
[000004FC] 2023-09-27 17:39:53 executeCommand: executing, strCmd = pnputil.exe -d oem1.inf.
[000004FC] 2023-09-27 17:39:53 executeCommand: result = Microsoft PnP Utility
Driver package deleted successfully.
.
[000004FC] 2023-09-27 17:39:53 <-- executeCommand
[000004FC] 2023-09-27 17:39:53 <-- ClearDriverStore
[000004FC] 2023-09-27 17:39:53 _tmain: succeed, nStatus = 0.
[000004FC] 2023-09-27 17:39:53 <-- wmain- EliOfekAt this stage it's better to contact support, our support team can connect with npcap's support to troubleshoot this.
When opening the ticket, make sure to attach all the above logs as files.
- rebooted server, no change, new install log below:
Call: 474
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\System.dll" (overwriteflag=1)
Jump: 568
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\System.dll" (overwriteflag=1)
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\System.dll" (overwriteflag=1)
Jump: 615
Jump: 644
detailprint: Current date: 2023-09-27 17:39:33
Call: 1060
Jump: 1089
Jump: 1092
Jump: 1095
detailprint: Windows CurrentVersion: 6.3 (Win8.1)
Call: 85
Call: 1277
IfFileExists: file "C:\Windows\system32\Packet.dll" exists, jumping 0
Call: 103
Jump: 126
Jump: 136
Call: 140
Jump: 207
Call: 140
Jump: 196
Call: 220
Jump: 237
Jump: 254
Call: 258
Jump: 348
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 258
Call: 140
Call: 1524
File: overwriteflag=0, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\modern-header.bmp"
File: wrote 70976 to "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\modern-header.bmp"
WriteINIStr: wrote [Field 1] State=0 in C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\options.ini
Jump: 770
WriteINIStr: wrote [Field 2] State=0 in C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\options.ini
Jump: 783
WriteINIStr: wrote [Field 3] State=0 in C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\options.ini
Jump: 796
WriteINIStr: wrote [Field 4] State=1 in C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\options.ini
Jump: 813
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\InstallOptions.dll"
File: wrote 23712 to "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\InstallOptions.dll"
Jump: 831
Jump: 841
New install of "Npcap OEM 1.00" to "C:\Program Files\Npcap"
Section: "WinPcap"
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\NPFInstall.exe"
Call: 863
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\nsExec.dll"
Call: 1095
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11122 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7642 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 842336 to "C:\Program Files\Npcap\Uninstall.exe"
Jump: 1427
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 307544 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1149
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 65880 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10356 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8658 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2403 to "C:\Program Files\Npcap\npcap_wfp.inf"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 1106
CreateDirectory: "C:\Windows\system32" (1)
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1101
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 385368 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175448 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 118616 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 58200 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\System.dll" (overwriteflag=1)
Call: 1138
CreateDirectory: "C:\Windows\system32" (1)
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1133
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 440152 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 212312 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 138072 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65880 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1240
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000001"
Jump: 1245
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1251
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\System.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 861
Call: 1174
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV.cer"
File: wrote 1479 to "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\Insecure-EV.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\Insecure-EV.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\Insecure-EV.cer")
CreateDirectory: "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-EV-sha1.cer"
File: wrote 1459 to "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\Insecure-EV-sha1.cer"
Call: 1165
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\Insecure-EV-sha1.cer"
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\Insecure-EV-sha1.cer")
detailprint: Clearing Npcap entries from driver store
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing WFP callout driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Installing NDIS filter driver
Call: 1524
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\nsExec.dll" (overwriteflag=1)
detailprint: Failed to create the npcap service for Win7, Win8 and Win10: 0x0004a020
MessageBox: 2097152,"Failed to create the npcap service: 0x0004a020. Please try installing Npcap again, or use the latest official Npcap installer from https://nmap.org/npcap/"
Jump: 1502
Call: 897
Call: 1524
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\nsExec.dll"
File: skipped: "C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\Uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
Aborting: ""
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\final.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\InstallOptions.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\modern-header.bmp")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\options.ini")
Delete: DeleteFile("C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\oscar\AppData\Local\Temp\nse7F7A.tmp\")