CreateDirectory: "C:\Program Files\Npcap" created
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 1164 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1064 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 7422 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 235672 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 736
CreateDirectory: "C:\Program Files\Npcap" (1)
Jump: 754
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 62248 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10704 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8494 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2401 to "C:\Program Files\Npcap\npcap_wfp.inf"
Jump: 764
created uninstaller: 27149, "C:\Program Files\Npcap\uninstall.exe"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 674
Jump: 686
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 320664 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 150168 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 97432 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 41624 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1053
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\npinguser\AppData\Local\Temp\nss3FC6.tmp\System.dll"
File: skipped: "C:\Users\npinguser\AppData\Local\Temp\nss3FC6.tmp\System.dll" (overwriteflag=1)
Call: 691
Jump: 703
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 366232 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 174232 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 109720 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 50840 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 792
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000000"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1053
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\npinguser\AppData\Local\Temp\nss3FC6.tmp\System.dll"
File: skipped: "C:\Users\npinguser\AppData\Local\Temp\nss3FC6.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Exec: command=""C:\Program Files\Npcap\NPFInstall.exe" -n -il"
Exec: success (""C:\Program Files\Npcap\NPFInstall.exe" -n -il")
detailprint: Writting service options to registry
Call: 833
Jump: 846
Call: 803
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap" "Start"="0x00000001"
WriteRegStr: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap" "LoopbackAdapter"="\Device\{430C969D-996F-4CFD-B627-4917F49B5ED3}"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap" "LoopbackSupport"="0x00000001"
Jump: 811
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap" "DltNull"="0x00000001"
Jump: 815
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap" "Dot11Support"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap" "VlanSupport"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap" "WinPcapCompatible"="0x00000000"
Call: 803
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi" "Start"="0x00000001"
WriteRegStr: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi" "LoopbackAdapter"="\Device\{430C969D-996F-4CFD-B627-4917F49B5ED3}"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi" "LoopbackSupport"="0x00000001"
Jump: 811
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi" "DltNull"="0x00000001"
Jump: 815
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi" "Dot11Support"="0x00000001"
Jump: 823
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi" "VlanSupport"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi" "WinPcapCompatible"="0x00000000"
Call: 575
Call: 764
CreateDirectory: "C:\Users\npinguser\AppData\Local\Temp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Insecure-SHA1.cer"
File: wrote 1320 to "C:\Users\npinguser\AppData\Local\Temp\Insecure-SHA1.cer"
Exec: command="certutil -addstore "TrustedPublisher" "C:\Users\npinguser\AppData\Local\Temp\Insecure-SHA1.cer""
Exec: success ("certutil -addstore "TrustedPublisher" "C:\Users\npinguser\AppData\Local\Temp\Insecure-SHA1.cer"")
Exec: command=""C:\Program Files\Npcap\NPFInstall.exe" -n -c"
Exec: success (""C:\Program Files\Npcap\NPFInstall.exe" -n -c")
detailprint: The cache in driver store was cleared
Exec: command=""C:\Program Files\Npcap\NPFInstall.exe" -n -iw"
Exec: success (""C:\Program Files\Npcap\NPFInstall.exe" -n -iw")
Exec: command=""C:\Program Files\Npcap\NPFInstall.exe" -n -i"
Exec: success (""C:\Program Files\Npcap\NPFInstall.exe" -n -i")
detailprint: The npcap service for Win7, Win8 and Win10 was successfully created
Jump: 783
Jump: 1028
Call: 906
Jump: 915
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap" "Start"="0x00000001"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi" "Start"="0x00000004"
Call: 852
Jump: 866
detailprint: Starting the npcap driver
Call: 1053
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\npinguser\AppData\Local\Temp\nss3FC6.tmp\nsExec.dll"
File: skipped: "C:\Users\npinguser\AppData\Local\Temp\nss3FC6.tmp\nsExec.dll" (overwriteflag=1)
Jump: 879
Jump: 1033
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayName"="Npcap 0.10 r2"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayVersion"="0.10 r2"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "Publisher"="Nmap Project"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "URLInfoAbout"="http://www.npcap.org"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "URLUpdateInfo"="http://www.npcap.org"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "VersionMajor"="0"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "VersionMinor"="1"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "InstalledBy"="Nmap"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "NoModify"="0x00000001"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "NoRepair"="0x00000001"
DeleteRegKey: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\npcap-nmap"
Jump: 38
Call: 1053
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\npinguser\AppData\Local\Temp\nss3FC6.tmp\InstallOptions.dll"
File: skipped: "C:\Users\npinguser\AppData\Local\Temp\nss3FC6.tmp\InstallOptions.dll" (overwriteflag=1)
Delete: DeleteFile("C:\Users\npinguser\AppData\Local\Temp\nss3FC6.tmp\final.ini")
Delete: DeleteFile("C:\Users\npinguser\AppData\Local\Temp\nss3FC6.tmp\InstallOptions.dll")
Delete: DeleteFile("C:\Users\npinguser\AppData\Local\Temp\nss3FC6.tmp\modern-header.bmp")
Delete: DeleteFile("C:\Users\npinguser\AppData\Local\Temp\nss3FC6.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\npinguser\AppData\Local\Temp\nss3FC6.tmp\options.ini")
Delete: DeleteFile("C:\Users\npinguser\AppData\Local\Temp\nss3FC6.tmp\SysRestore.dll")
Delete: DeleteFile("C:\Users\npinguser\AppData\Local\Temp\nss3FC6.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\npinguser\AppData\Local\Temp\nss3FC6.tmp\")