PUA.Win32.Netcat.B

November 26, 2024

Analysis by: Thea Patrice Tajonera

ALIASES:

N/A

PLATFORM:

Windows

OVERALL RISK RATING:

DAMAGE POTENTIAL:

DISTRIBUTION POTENTIAL:

REPORTED INFECTION:

INFORMATION EXPOSURE:

Threat Type: Potentially Unwanted Application
Destructiveness: No
Encrypted:
In the wild: Yes

OVERVIEW

This Potentially Unwanted Application arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

TECHNICAL DETAILS

File Size: 27,278,840 bytes

File Type: EXE

Memory Resident: No

Initial Samples Received Date: 28 Jul 2021

Arrival Details

This Potentially Unwanted Application arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Installation

This Potentially Unwanted Application drops the following files:

%User Temp%\nsi3ACF.tmp
%User Temp%\nsy3AE0.tmp\shortcuts.ini
%User Temp%\nsy3AE0.tmp\final.ini
%Program Files%\Nmap\CHANGELOG
%Program Files%\Nmap\LICENSE
%Program Files%\Nmap\nmap-mac-prefixes
%Program Files%\Nmap\nmap-os-db
%Program Files%\Nmap\nmap-payloads
%Program Files%\Nmap\nmap-protocols
%Program Files%\Nmap\nmap-rpc
%Program Files%\Nmap\nmap-service-probes
%Program Files%\Nmap\nmap-services
%Program Files%\Nmap\nmap.exe
%Program Files%\Nmap\nse_main.lua
%Program Files%\Nmap\nmap.xsl
%Program Files%\Nmap\nmap_performance.reg
%Program Files%\Nmap\README-WIN32
%Program Files%\Nmap\3rd-party-licenses.txt
%Program Files%\Nmap\licenses\BSD-modified.txt
%Program Files%\Nmap\licenses\BSD-simplified
%Program Files%\Nmap\licenses\LGPL-2
%Program Files%\Nmap\licenses\LGPL-2.1
%Program Files%\Nmap\licenses\LIBLINEAR-license.txt
%Program Files%\Nmap\licenses\Libdnet-license.txt
%Program Files%\Nmap\licenses\Lua-license.txt
%Program Files%\Nmap\licenses\MIT
%Program Files%\Nmap\licenses\MPL-1.1
%Program Files%\Nmap\licenses\OpenSSL-license.txt
%Program Files%\Nmap\licenses\PCRE-license.txt
%Program Files%\Nmap\licenses\WinPcap-license.txt
%Program Files%\Nmap\licenses\zlib-license.txt
%Program Files%\Nmap\libssh2.dll
%Program Files%\Nmap\zlibwapi.dll
%Program Files%\Nmap\libcrypto-1_1.dll
%Program Files%\Nmap\libssl-1_1.dll
%Program Files%\Nmap\scripts\acarsd-info.nse
%Program Files%\Nmap\scripts\address-info.nse
%Program Files%\Nmap\scripts\afp-brute.nse
%Program Files%\Nmap\scripts\afp-ls.nse
%Program Files%\Nmap\scripts\afp-path-vuln.nse
%Program Files%\Nmap\scripts\afp-serverinfo.nse
%Program Files%\Nmap\scripts\afp-showmount.nse
%Program Files%\Nmap\scripts\ajp-auth.nse
%Program Files%\Nmap\scripts\ajp-brute.nse
%Program Files%\Nmap\scripts\ajp-headers.nse
%Program Files%\Nmap\scripts\ajp-methods.nse
%Program Files%\Nmap\scripts\ajp-request.nse
%Program Files%\Nmap\scripts\allseeingeye-info.nse
%Program Files%\Nmap\scripts\amqp-info.nse
%Program Files%\Nmap\scripts\asn-query.nse
%Program Files%\Nmap\scripts\auth-owners.nse
%Program Files%\Nmap\scripts\auth-spoof.nse
%Program Files%\Nmap\scripts\backorifice-brute.nse
%Program Files%\Nmap\scripts\backorifice-info.nse
%Program Files%\Nmap\scripts\bacnet-info.nse
%Program Files%\Nmap\scripts\banner.nse
%Program Files%\Nmap\scripts\bitcoin-getaddr.nse
%Program Files%\Nmap\scripts\bitcoin-info.nse
%Program Files%\Nmap\scripts\bitcoinrpc-info.nse
%Program Files%\Nmap\scripts\bittorrent-discovery.nse
%Program Files%\Nmap\scripts\bjnp-discover.nse
%Program Files%\Nmap\scripts\broadcast-ataoe-discover.nse
%Program Files%\Nmap\scripts\broadcast-avahi-dos.nse
%Program Files%\Nmap\scripts\broadcast-bjnp-discover.nse
%Program Files%\Nmap\scripts\broadcast-db2-discover.nse
%Program Files%\Nmap\scripts\broadcast-dhcp-discover.nse
%Program Files%\Nmap\scripts\broadcast-dhcp6-discover.nse
%Program Files%\Nmap\scripts\broadcast-dns-service-discovery.nse
%Program Files%\Nmap\scripts\broadcast-dropbox-listener.nse
%Program Files%\Nmap\scripts\broadcast-eigrp-discovery.nse
%Program Files%\Nmap\scripts\broadcast-hid-discoveryd.nse
%Program Files%\Nmap\scripts\broadcast-igmp-discovery.nse
%Program Files%\Nmap\scripts\broadcast-jenkins-discover.nse
%Program Files%\Nmap\scripts\broadcast-listener.nse
%Program Files%\Nmap\scripts\broadcast-ms-sql-discover.nse
%Program Files%\Nmap\scripts\broadcast-netbios-master-browser.nse
%Program Files%\Nmap\scripts\broadcast-networker-discover.nse
%Program Files%\Nmap\scripts\broadcast-novell-locate.nse
%Program Files%\Nmap\scripts\broadcast-ospf2-discover.nse
%Program Files%\Nmap\scripts\broadcast-pc-anywhere.nse
%Program Files%\Nmap\scripts\broadcast-pc-duo.nse
%Program Files%\Nmap\scripts\broadcast-pim-discovery.nse
%Program Files%\Nmap\scripts\broadcast-ping.nse
%Program Files%\Nmap\scripts\broadcast-pppoe-discover.nse
%Program Files%\Nmap\scripts\broadcast-rip-discover.nse
%Program Files%\Nmap\scripts\broadcast-ripng-discover.nse
%Program Files%\Nmap\scripts\broadcast-sonicwall-discover.nse
%Program Files%\Nmap\scripts\broadcast-sybase-asa-discover.nse
%Program Files%\Nmap\scripts\broadcast-tellstick-discover.nse
%Program Files%\Nmap\scripts\broadcast-upnp-info.nse
%Program Files%\Nmap\scripts\broadcast-versant-locate.nse
%Program Files%\Nmap\scripts\broadcast-wake-on-lan.nse
%Program Files%\Nmap\scripts\broadcast-wpad-discover.nse
%Program Files%\Nmap\scripts\broadcast-wsdd-discover.nse
%Program Files%\Nmap\scripts\broadcast-xdmcp-discover.nse
%Program Files%\Nmap\scripts\cassandra-brute.nse
%Program Files%\Nmap\scripts\cassandra-info.nse
%Program Files%\Nmap\scripts\cccam-version.nse
%Program Files%\Nmap\scripts\cics-enum.nse
%Program Files%\Nmap\scripts\cics-info.nse
%Program Files%\Nmap\scripts\cics-user-brute.nse
%Program Files%\Nmap\scripts\cics-user-enum.nse
%Program Files%\Nmap\scripts\citrix-brute-xml.nse
%Program Files%\Nmap\scripts\citrix-enum-apps-xml.nse
%Program Files%\Nmap\scripts\citrix-enum-apps.nse
%Program Files%\Nmap\scripts\citrix-enum-servers-xml.nse
%Program Files%\Nmap\scripts\citrix-enum-servers.nse
%Program Files%\Nmap\scripts\clamav-exec.nse
%Program Files%\Nmap\scripts\clock-skew.nse
%Program Files%\Nmap\scripts\coap-resources.nse
%Program Files%\Nmap\scripts\couchdb-databases.nse
%Program Files%\Nmap\scripts\couchdb-stats.nse
%Program Files%\Nmap\scripts\creds-summary.nse
%Program Files%\Nmap\scripts\cups-info.nse
%Program Files%\Nmap\scripts\cups-queue-info.nse
%Program Files%\Nmap\scripts\cvs-brute-repository.nse
%Program Files%\Nmap\scripts\cvs-brute.nse
%Program Files%\Nmap\scripts\daap-get-library.nse
%Program Files%\Nmap\scripts\daytime.nse
%Program Files%\Nmap\scripts\db2-das-info.nse
%Program Files%\Nmap\scripts\deluge-rpc-brute.nse
%Program Files%\Nmap\scripts\dhcp-discover.nse
%Program Files%\Nmap\scripts\dicom-brute.nse
%Program Files%\Nmap\scripts\dicom-ping.nse
%Program Files%\Nmap\scripts\dict-info.nse
%Program Files%\Nmap\scripts\distcc-cve2004-2687.nse
%Program Files%\Nmap\scripts\dns-blacklist.nse
%Program Files%\Nmap\scripts\dns-brute.nse
%Program Files%\Nmap\scripts\dns-cache-snoop.nse
%Program Files%\Nmap\scripts\dns-check-zone.nse
%Program Files%\Nmap\scripts\dns-client-subnet-scan.nse
%Program Files%\Nmap\scripts\dns-fuzz.nse
%Program Files%\Nmap\scripts\dns-ip6-arpa-scan.nse
%Program Files%\Nmap\scripts\dns-nsec-enum.nse
%Program Files%\Nmap\scripts\dns-nsec3-enum.nse
%Program Files%\Nmap\scripts\dns-nsid.nse
%Program Files%\Nmap\scripts\dns-random-srcport.nse
%Program Files%\Nmap\scripts\dns-random-txid.nse
%Program Files%\Nmap\scripts\dns-recursion.nse
%Program Files%\Nmap\scripts\dns-service-discovery.nse
%Program Files%\Nmap\scripts\dns-srv-enum.nse
%Program Files%\Nmap\scripts\dns-update.nse
%Program Files%\Nmap\scripts\dns-zeustracker.nse
%Program Files%\Nmap\scripts\dns-zone-transfer.nse
%Program Files%\Nmap\scripts\docker-version.nse
%Program Files%\Nmap\scripts\domcon-brute.nse
%Program Files%\Nmap\scripts\domcon-cmd.nse
%Program Files%\Nmap\scripts\domino-enum-users.nse
%Program Files%\Nmap\scripts\dpap-brute.nse
%Program Files%\Nmap\scripts\drda-brute.nse
%Program Files%\Nmap\scripts\drda-info.nse
%Program Files%\Nmap\scripts\duplicates.nse
%Program Files%\Nmap\scripts\eap-info.nse
%Program Files%\Nmap\scripts\enip-info.nse
%Program Files%\Nmap\scripts\epmd-info.nse
%Program Files%\Nmap\scripts\eppc-enum-processes.nse
%Program Files%\Nmap\scripts\fcrdns.nse
%Program Files%\Nmap\scripts\finger.nse
%Program Files%\Nmap\scripts\fingerprint-strings.nse
%Program Files%\Nmap\scripts\firewalk.nse
%Program Files%\Nmap\scripts\firewall-bypass.nse
%Program Files%\Nmap\scripts\flume-master-info.nse
%Program Files%\Nmap\scripts\fox-info.nse
%Program Files%\Nmap\scripts\freelancer-info.nse
%Program Files%\Nmap\scripts\ftp-anon.nse
%Program Files%\Nmap\scripts\ftp-bounce.nse
%Program Files%\Nmap\scripts\ftp-brute.nse
%Program Files%\Nmap\scripts\ftp-libopie.nse
%Program Files%\Nmap\scripts\ftp-proftpd-backdoor.nse
%Program Files%\Nmap\scripts\ftp-syst.nse
%Program Files%\Nmap\scripts\ftp-vsftpd-backdoor.nse
%Program Files%\Nmap\scripts\ftp-vuln-cve2010-4221.nse
%Program Files%\Nmap\scripts\ganglia-info.nse
%Program Files%\Nmap\scripts\giop-info.nse
%Program Files%\Nmap\scripts\gkrellm-info.nse
%Program Files%\Nmap\scripts\gopher-ls.nse
%Program Files%\Nmap\scripts\gpsd-info.nse
%Program Files%\Nmap\scripts\hadoop-datanode-info.nse
%Program Files%\Nmap\scripts\hadoop-jobtracker-info.nse
%Program Files%\Nmap\scripts\hadoop-namenode-info.nse
%Program Files%\Nmap\scripts\hadoop-secondary-namenode-info.nse
%Program Files%\Nmap\scripts\hadoop-tasktracker-info.nse
%Program Files%\Nmap\scripts\hbase-master-info.nse
%Program Files%\Nmap\scripts\hbase-region-info.nse
%Program Files%\Nmap\scripts\hddtemp-info.nse
%Program Files%\Nmap\scripts\hnap-info.nse
%Program Files%\Nmap\scripts\hostmap-bfk.nse
%Program Files%\Nmap\scripts\hostmap-crtsh.nse
%Program Files%\Nmap\scripts\hostmap-robtex.nse
%Program Files%\Nmap\scripts\http-adobe-coldfusion-apsa1301.nse
%Program Files%\Nmap\scripts\http-affiliate-id.nse
%Program Files%\Nmap\scripts\http-apache-negotiation.nse
%Program Files%\Nmap\scripts\http-apache-server-status.nse
%Program Files%\Nmap\scripts\http-aspnet-debug.nse
%Program Files%\Nmap\scripts\http-auth-finder.nse
%Program Files%\Nmap\scripts\http-auth.nse
%Program Files%\Nmap\scripts\http-avaya-ipoffice-users.nse
%Program Files%\Nmap\scripts\http-awstatstotals-exec.nse
%Program Files%\Nmap\scripts\http-axis2-dir-traversal.nse
%Program Files%\Nmap\scripts\http-backup-finder.nse
%Program Files%\Nmap\scripts\http-barracuda-dir-traversal.nse
%Program Files%\Nmap\scripts\http-bigip-cookie.nse
%Program Files%\Nmap\scripts\http-brute.nse
%Program Files%\Nmap\scripts\http-cakephp-version.nse
%Program Files%\Nmap\scripts\http-chrono.nse
%Program Files%\Nmap\scripts\http-cisco-anyconnect.nse
%Program Files%\Nmap\scripts\http-coldfusion-subzero.nse
%Program Files%\Nmap\scripts\http-comments-displayer.nse
%Program Files%\Nmap\scripts\http-config-backup.nse
%Program Files%\Nmap\scripts\http-cookie-flags.nse
%Program Files%\Nmap\scripts\http-cors.nse
%Program Files%\Nmap\scripts\http-cross-domain-policy.nse
%Program Files%\Nmap\scripts\http-csrf.nse
%Program Files%\Nmap\scripts\http-date.nse
%Program Files%\Nmap\scripts\http-default-accounts.nse
%Program Files%\Nmap\scripts\http-devframework.nse
%Program Files%\Nmap\scripts\http-dlink-backdoor.nse
%Program Files%\Nmap\scripts\http-dombased-xss.nse
%Program Files%\Nmap\scripts\http-domino-enum-passwords.nse
%Program Files%\Nmap\scripts\http-drupal-enum-users.nse
%Program Files%\Nmap\scripts\http-drupal-enum.nse
%Program Files%\Nmap\scripts\http-enum.nse
%Program Files%\Nmap\scripts\http-errors.nse
%Program Files%\Nmap\scripts\http-exif-spider.nse
%Program Files%\Nmap\scripts\http-favicon.nse
%Program Files%\Nmap\scripts\http-feed.nse
%Program Files%\Nmap\scripts\http-fetch.nse
%Program Files%\Nmap\scripts\http-fileupload-exploiter.nse
%Program Files%\Nmap\scripts\http-form-brute.nse
%Program Files%\Nmap\scripts\http-form-fuzzer.nse
%Program Files%\Nmap\scripts\http-frontpage-login.nse
%Program Files%\Nmap\scripts\http-generator.nse
%Program Files%\Nmap\scripts\http-git.nse
%Program Files%\Nmap\scripts\http-gitweb-projects-enum.nse
%Program Files%\Nmap\scripts\http-google-malware.nse
%Program Files%\Nmap\scripts\http-grep.nse
%Program Files%\Nmap\scripts\http-headers.nse
%Program Files%\Nmap\scripts\http-hp-ilo-info.nse
%Program Files%\Nmap\scripts\http-huawei-hg5xx-vuln.nse
%Program Files%\Nmap\scripts\http-icloud-findmyiphone.nse
%Program Files%\Nmap\scripts\http-icloud-sendmsg.nse
%Program Files%\Nmap\scripts\http-iis-short-name-brute.nse
%Program Files%\Nmap\scripts\http-iis-webdav-vuln.nse
%Program Files%\Nmap\scripts\http-internal-ip-disclosure.nse
%Program Files%\Nmap\scripts\http-joomla-brute.nse
%Program Files%\Nmap\scripts\http-jsonp-detection.nse
%Program Files%\Nmap\scripts\http-litespeed-sourcecode-download.nse
%Program Files%\Nmap\scripts\http-ls.nse
%Program Files%\Nmap\scripts\http-majordomo2-dir-traversal.nse
%Program Files%\Nmap\scripts\http-malware-host.nse
%Program Files%\Nmap\scripts\http-mcmp.nse
%Program Files%\Nmap\scripts\http-method-tamper.nse
%Program Files%\Nmap\scripts\http-methods.nse
%Program Files%\Nmap\scripts\http-mobileversion-checker.nse
%Program Files%\Nmap\scripts\http-ntlm-info.nse
%Program Files%\Nmap\scripts\http-open-proxy.nse
%Program Files%\Nmap\scripts\http-open-redirect.nse
%Program Files%\Nmap\scripts\http-passwd.nse
%Program Files%\Nmap\scripts\http-php-version.nse
%Program Files%\Nmap\scripts\http-phpmyadmin-dir-traversal.nse
%Program Files%\Nmap\scripts\http-phpself-xss.nse
%Program Files%\Nmap\scripts\http-proxy-brute.nse
%Program Files%\Nmap\scripts\http-put.nse
%Program Files%\Nmap\scripts\http-qnap-nas-info.nse
%Program Files%\Nmap\scripts\http-referer-checker.nse
%Program Files%\Nmap\scripts\http-rfi-spider.nse
%Program Files%\Nmap\scripts\http-robots.txt.nse
%Program Files%\Nmap\scripts\http-robtex-reverse-ip.nse
%Program Files%\Nmap\scripts\http-robtex-shared-ns.nse
%Program Files%\Nmap\scripts\http-sap-netweaver-leak.nse
%Program Files%\Nmap\scripts\http-security-headers.nse
%Program Files%\Nmap\scripts\http-server-header.nse
%Program Files%\Nmap\scripts\http-shellshock.nse
%Program Files%\Nmap\scripts\http-sitemap-generator.nse
%Program Files%\Nmap\scripts\http-slowloris-check.nse
%Program Files%\Nmap\scripts\http-slowloris.nse
%Program Files%\Nmap\scripts\http-sql-injection.nse
%Program Files%\Nmap\scripts\http-stored-xss.nse
%Program Files%\Nmap\scripts\http-svn-enum.nse
%Program Files%\Nmap\scripts\http-svn-info.nse
%Program Files%\Nmap\scripts\http-title.nse
%Program Files%\Nmap\scripts\http-tplink-dir-traversal.nse
%Program Files%\Nmap\scripts\http-trace.nse
%Program Files%\Nmap\scripts\http-traceroute.nse
%Program Files%\Nmap\scripts\http-trane-info.nse
%Program Files%\Nmap\scripts\http-unsafe-output-escaping.nse
%Program Files%\Nmap\scripts\http-useragent-tester.nse
%Program Files%\Nmap\scripts\http-userdir-enum.nse
%Program Files%\Nmap\scripts\http-vhosts.nse
%Program Files%\Nmap\scripts\http-virustotal.nse
%Program Files%\Nmap\scripts\http-vlcstreamer-ls.nse
%Program Files%\Nmap\scripts\http-vmware-path-vuln.nse
%Program Files%\Nmap\scripts\http-vuln-cve2006-3392.nse
%Program Files%\Nmap\scripts\http-vuln-cve2009-3960.nse
%Program Files%\Nmap\scripts\http-vuln-cve2010-0738.nse
%Program Files%\Nmap\scripts\http-vuln-cve2010-2861.nse
%Program Files%\Nmap\scripts\http-vuln-cve2011-3192.nse
%Program Files%\Nmap\scripts\http-vuln-cve2011-3368.nse
%Program Files%\Nmap\scripts\http-vuln-cve2012-1823.nse
%Program Files%\Nmap\scripts\http-vuln-cve2013-0156.nse
%Program Files%\Nmap\scripts\http-vuln-cve2013-6786.nse
%Program Files%\Nmap\scripts\http-vuln-cve2013-7091.nse
%Program Files%\Nmap\scripts\http-vuln-cve2014-2126.nse
%Program Files%\Nmap\scripts\http-vuln-cve2014-2127.nse
%Program Files%\Nmap\scripts\http-vuln-cve2014-2128.nse
%Program Files%\Nmap\scripts\http-vuln-cve2014-2129.nse
%Program Files%\Nmap\scripts\http-vuln-cve2014-3704.nse
%Program Files%\Nmap\scripts\http-vuln-cve2014-8877.nse
%Program Files%\Nmap\scripts\http-vuln-cve2015-1427.nse
%Program Files%\Nmap\scripts\http-vuln-cve2015-1635.nse
%Program Files%\Nmap\scripts\http-vuln-cve2017-1001000.nse
%Program Files%\Nmap\scripts\http-vuln-cve2017-5638.nse
%Program Files%\Nmap\scripts\http-vuln-cve2017-5689.nse
%Program Files%\Nmap\scripts\http-vuln-cve2017-8917.nse
%Program Files%\Nmap\scripts\http-vuln-misfortune-cookie.nse
%Program Files%\Nmap\scripts\http-vuln-wnr1000-creds.nse
%Program Files%\Nmap\scripts\http-waf-detect.nse
%Program Files%\Nmap\scripts\http-waf-fingerprint.nse
%Program Files%\Nmap\scripts\http-webdav-scan.nse
%Program Files%\Nmap\scripts\http-wordpress-brute.nse
%Program Files%\Nmap\scripts\http-wordpress-enum.nse
%Program Files%\Nmap\scripts\http-wordpress-users.nse
%Program Files%\Nmap\scripts\http-xssed.nse
%Program Files%\Nmap\scripts\https-redirect.nse
%Program Files%\Nmap\scripts\iax2-brute.nse
%Program Files%\Nmap\scripts\iax2-version.nse
%Program Files%\Nmap\scripts\icap-info.nse
%Program Files%\Nmap\scripts\iec-identify.nse
%Program Files%\Nmap\scripts\ike-version.nse
%Program Files%\Nmap\scripts\imap-brute.nse
%Program Files%\Nmap\scripts\imap-capabilities.nse
%Program Files%\Nmap\scripts\imap-ntlm-info.nse
%Program Files%\Nmap\scripts\impress-remote-discover.nse
%Program Files%\Nmap\scripts\informix-brute.nse
%Program Files%\Nmap\scripts\informix-query.nse
%Program Files%\Nmap\scripts\informix-tables.nse
%Program Files%\Nmap\scripts\ip-forwarding.nse
%Program Files%\Nmap\scripts\ip-geolocation-geoplugin.nse
%Program Files%\Nmap\scripts\ip-geolocation-ipinfodb.nse
%Program Files%\Nmap\scripts\ip-geolocation-map-bing.nse
%Program Files%\Nmap\scripts\ip-geolocation-map-google.nse
%Program Files%\Nmap\scripts\ip-geolocation-map-kml.nse
%Program Files%\Nmap\scripts\ip-geolocation-maxmind.nse
%Program Files%\Nmap\scripts\ip-https-discover.nse
%Program Files%\Nmap\scripts\ipidseq.nse
%Program Files%\Nmap\scripts\ipmi-brute.nse
%Program Files%\Nmap\scripts\ipmi-cipher-zero.nse
%Program Files%\Nmap\scripts\ipmi-version.nse
%Program Files%\Nmap\scripts\ipv6-multicast-mld-list.nse
%Program Files%\Nmap\scripts\ipv6-node-info.nse
%Program Files%\Nmap\scripts\ipv6-ra-flood.nse
%Program Files%\Nmap\scripts\irc-botnet-channels.nse
%Program Files%\Nmap\scripts\irc-brute.nse
%Program Files%\Nmap\scripts\irc-info.nse
%Program Files%\Nmap\scripts\irc-sasl-brute.nse
%Program Files%\Nmap\scripts\irc-unrealircd-backdoor.nse
%Program Files%\Nmap\scripts\iscsi-brute.nse
%Program Files%\Nmap\scripts\iscsi-info.nse
%Program Files%\Nmap\scripts\isns-info.nse
%Program Files%\Nmap\scripts\jdwp-exec.nse
%Program Files%\Nmap\scripts\jdwp-info.nse
%Program Files%\Nmap\scripts\jdwp-inject.nse
%Program Files%\Nmap\scripts\jdwp-version.nse
%Program Files%\Nmap\scripts\knx-gateway-discover.nse
%Program Files%\Nmap\scripts\knx-gateway-info.nse
%Program Files%\Nmap\scripts\krb5-enum-users.nse
%Program Files%\Nmap\scripts\ldap-brute.nse
%Program Files%\Nmap\scripts\ldap-novell-getpass.nse
%Program Files%\Nmap\scripts\ldap-rootdse.nse
%Program Files%\Nmap\scripts\ldap-search.nse
%Program Files%\Nmap\scripts\lexmark-config.nse
%Program Files%\Nmap\scripts\llmnr-resolve.nse
%Program Files%\Nmap\scripts\lltd-discovery.nse
%Program Files%\Nmap\scripts\lu-enum.nse
%Program Files%\Nmap\scripts\maxdb-info.nse
%Program Files%\Nmap\scripts\mcafee-epo-agent.nse
%Program Files%\Nmap\scripts\membase-brute.nse
%Program Files%\Nmap\scripts\membase-http-info.nse
%Program Files%\Nmap\scripts\memcached-info.nse
%Program Files%\Nmap\scripts\metasploit-info.nse
%Program Files%\Nmap\scripts\metasploit-msgrpc-brute.nse
%Program Files%\Nmap\scripts\metasploit-xmlrpc-brute.nse
%Program Files%\Nmap\scripts\mikrotik-routeros-brute.nse
%Program Files%\Nmap\scripts\mmouse-brute.nse
%Program Files%\Nmap\scripts\mmouse-exec.nse
%Program Files%\Nmap\scripts\modbus-discover.nse
%Program Files%\Nmap\scripts\mongodb-brute.nse
%Program Files%\Nmap\scripts\mongodb-databases.nse
%Program Files%\Nmap\scripts\mongodb-info.nse
%Program Files%\Nmap\scripts\mqtt-subscribe.nse
%Program Files%\Nmap\scripts\mrinfo.nse
%Program Files%\Nmap\scripts\ms-sql-brute.nse
%Program Files%\Nmap\scripts\ms-sql-config.nse
%Program Files%\Nmap\scripts\ms-sql-dac.nse
%Program Files%\Nmap\scripts\ms-sql-dump-hashes.nse
%Program Files%\Nmap\scripts\ms-sql-empty-password.nse
%Program Files%\Nmap\scripts\ms-sql-hasdbaccess.nse
%Program Files%\Nmap\scripts\ms-sql-info.nse
%Program Files%\Nmap\scripts\ms-sql-ntlm-info.nse
%Program Files%\Nmap\scripts\ms-sql-query.nse
%Program Files%\Nmap\scripts\ms-sql-tables.nse
%Program Files%\Nmap\scripts\ms-sql-xp-cmdshell.nse
%Program Files%\Nmap\scripts\msrpc-enum.nse
%Program Files%\Nmap\scripts\mtrace.nse
%Program Files%\Nmap\scripts\murmur-version.nse
%Program Files%\Nmap\scripts\mysql-audit.nse
%Program Files%\Nmap\scripts\mysql-brute.nse
%Program Files%\Nmap\scripts\mysql-databases.nse
%Program Files%\Nmap\scripts\mysql-dump-hashes.nse
%Program Files%\Nmap\scripts\mysql-empty-password.nse
%Program Files%\Nmap\scripts\mysql-enum.nse
%Program Files%\Nmap\scripts\mysql-info.nse
%Program Files%\Nmap\scripts\mysql-query.nse
%Program Files%\Nmap\scripts\mysql-users.nse
%Program Files%\Nmap\scripts\mysql-variables.nse
%Program Files%\Nmap\scripts\mysql-vuln-cve2012-2122.nse
%Program Files%\Nmap\scripts\nat-pmp-info.nse
%Program Files%\Nmap\scripts\nat-pmp-mapport.nse
%Program Files%\Nmap\scripts\nbd-info.nse
%Program Files%\Nmap\scripts\nbstat.nse
%Program Files%\Nmap\scripts\ncp-enum-users.nse
%Program Files%\Nmap\scripts\ncp-serverinfo.nse
%Program Files%\Nmap\scripts\ndmp-fs-info.nse
%Program Files%\Nmap\scripts\ndmp-version.nse
%Program Files%\Nmap\scripts\nessus-brute.nse
%Program Files%\Nmap\scripts\nessus-xmlrpc-brute.nse
%Program Files%\Nmap\scripts\netbus-auth-bypass.nse
%Program Files%\Nmap\scripts\netbus-brute.nse
%Program Files%\Nmap\scripts\netbus-info.nse
%Program Files%\Nmap\scripts\netbus-version.nse
%Program Files%\Nmap\scripts\nexpose-brute.nse
%Program Files%\Nmap\scripts\nfs-ls.nse
%Program Files%\Nmap\scripts\nfs-showmount.nse
%Program Files%\Nmap\scripts\nfs-statfs.nse
%Program Files%\Nmap\scripts\nje-node-brute.nse
%Program Files%\Nmap\scripts\nje-pass-brute.nse
%Program Files%\Nmap\scripts\nntp-ntlm-info.nse
%Program Files%\Nmap\scripts\nping-brute.nse
%Program Files%\Nmap\scripts\nrpe-enum.nse
%Program Files%\Nmap\scripts\ntp-info.nse
%Program Files%\Nmap\scripts\ntp-monlist.nse
%Program Files%\Nmap\scripts\omp2-brute.nse
%Program Files%\Nmap\scripts\omp2-enum-targets.nse
%Program Files%\Nmap\scripts\omron-info.nse
%Program Files%\Nmap\scripts\openlookup-info.nse
%Program Files%\Nmap\scripts\openvas-otp-brute.nse
%Program Files%\Nmap\scripts\openwebnet-discovery.nse
%Program Files%\Nmap\scripts\oracle-brute-stealth.nse
%Program Files%\Nmap\scripts\oracle-brute.nse
%Program Files%\Nmap\scripts\oracle-enum-users.nse
%Program Files%\Nmap\scripts\oracle-sid-brute.nse
%Program Files%\Nmap\scripts\oracle-tns-version.nse
%Program Files%\Nmap\scripts\ovs-agent-version.nse
%Program Files%\Nmap\scripts\p2p-conficker.nse
%Program Files%\Nmap\scripts\path-mtu.nse
%Program Files%\Nmap\scripts\pcanywhere-brute.nse
%Program Files%\Nmap\scripts\pcworx-info.nse
%Program Files%\Nmap\scripts\pgsql-brute.nse
%Program Files%\Nmap\scripts\pjl-ready-message.nse
%Program Files%\Nmap\scripts\pop3-brute.nse
%Program Files%\Nmap\scripts\pop3-capabilities.nse
%Program Files%\Nmap\scripts\pop3-ntlm-info.nse
%Program Files%\Nmap\scripts\pptp-version.nse
%Program Files%\Nmap\scripts\puppet-naivesigning.nse
%Program Files%\Nmap\scripts\qconn-exec.nse
%Program Files%\Nmap\scripts\qscan.nse
%Program Files%\Nmap\scripts\quake1-info.nse
%Program Files%\Nmap\scripts\quake3-info.nse
%Program Files%\Nmap\scripts\quake3-master-getservers.nse
%Program Files%\Nmap\scripts\rdp-enum-encryption.nse
%Program Files%\Nmap\scripts\rdp-ntlm-info.nse
%Program Files%\Nmap\scripts\rdp-vuln-ms12-020.nse
%Program Files%\Nmap\scripts\realvnc-auth-bypass.nse
%Program Files%\Nmap\scripts\redis-brute.nse
%Program Files%\Nmap\scripts\redis-info.nse
%Program Files%\Nmap\scripts\resolveall.nse
%Program Files%\Nmap\scripts\reverse-index.nse
%Program Files%\Nmap\scripts\rexec-brute.nse
%Program Files%\Nmap\scripts\rfc868-time.nse
%Program Files%\Nmap\scripts\riak-http-info.nse
%Program Files%\Nmap\scripts\rlogin-brute.nse
%Program Files%\Nmap\scripts\rmi-dumpregistry.nse
%Program Files%\Nmap\scripts\rmi-vuln-classloader.nse
%Program Files%\Nmap\scripts\rpc-grind.nse
%Program Files%\Nmap\scripts\rpcap-brute.nse
%Program Files%\Nmap\scripts\rpcap-info.nse
%Program Files%\Nmap\scripts\rpcinfo.nse
%Program Files%\Nmap\scripts\rsa-vuln-roca.nse
%Program Files%\Nmap\scripts\rsync-brute.nse
%Program Files%\Nmap\scripts\rsync-list-modules.nse
%Program Files%\Nmap\scripts\rtsp-methods.nse
%Program Files%\Nmap\scripts\rtsp-url-brute.nse
%Program Files%\Nmap\scripts\rusers.nse
%Program Files%\Nmap\scripts\s7-info.nse
%Program Files%\Nmap\scripts\samba-vuln-cve-2012-1182.nse
%Program Files%\Nmap\scripts\script.db
%Program Files%\Nmap\scripts\servicetags.nse
%Program Files%\Nmap\scripts\shodan-api.nse
%Program Files%\Nmap\scripts\sip-brute.nse
%Program Files%\Nmap\scripts\sip-call-spoof.nse
%Program Files%\Nmap\scripts\sip-enum-users.nse
%Program Files%\Nmap\scripts\sip-methods.nse
%Program Files%\Nmap\scripts\skypev2-version.nse
%Program Files%\Nmap\scripts\smb-brute.nse
%Program Files%\Nmap\scripts\smb-double-pulsar-backdoor.nse
%Program Files%\Nmap\scripts\smb-enum-domains.nse
%Program Files%\Nmap\scripts\smb-enum-groups.nse
%Program Files%\Nmap\scripts\smb-enum-processes.nse
%Program Files%\Nmap\scripts\smb-enum-services.nse
%Program Files%\Nmap\scripts\smb-enum-sessions.nse
%Program Files%\Nmap\scripts\smb-enum-shares.nse
%Program Files%\Nmap\scripts\smb-enum-users.nse
%Program Files%\Nmap\scripts\smb-flood.nse
%Program Files%\Nmap\scripts\smb-ls.nse
%Program Files%\Nmap\scripts\smb-mbenum.nse
%Program Files%\Nmap\scripts\smb-os-discovery.nse
%Program Files%\Nmap\scripts\smb-print-text.nse
%Program Files%\Nmap\scripts\smb-protocols.nse
%Program Files%\Nmap\scripts\smb-psexec.nse
%Program Files%\Nmap\scripts\smb-security-mode.nse
%Program Files%\Nmap\scripts\smb-server-stats.nse
%Program Files%\Nmap\scripts\smb-system-info.nse
%Program Files%\Nmap\scripts\smb-vuln-conficker.nse
%Program Files%\Nmap\scripts\smb-vuln-cve-2017-7494.nse
%Program Files%\Nmap\scripts\smb-vuln-cve2009-3103.nse
%Program Files%\Nmap\scripts\smb-vuln-ms06-025.nse
%Program Files%\Nmap\scripts\smb-vuln-ms07-029.nse
%Program Files%\Nmap\scripts\smb-vuln-ms08-067.nse
%Program Files%\Nmap\scripts\smb-vuln-ms10-054.nse
%Program Files%\Nmap\scripts\smb-vuln-ms10-061.nse
%Program Files%\Nmap\scripts\smb-vuln-ms17-010.nse
%Program Files%\Nmap\scripts\smb-vuln-regsvc-dos.nse
%Program Files%\Nmap\scripts\smb-vuln-webexec.nse
%Program Files%\Nmap\scripts\smb-webexec-exploit.nse
%Program Files%\Nmap\scripts\smb2-capabilities.nse
%Program Files%\Nmap\scripts\smb2-security-mode.nse
%Program Files%\Nmap\scripts\smb2-time.nse
%Program Files%\Nmap\scripts\smb2-vuln-uptime.nse
%Program Files%\Nmap\scripts\smtp-brute.nse
%Program Files%\Nmap\scripts\smtp-commands.nse
%Program Files%\Nmap\scripts\smtp-enum-users.nse
%Program Files%\Nmap\scripts\smtp-ntlm-info.nse
%Program Files%\Nmap\scripts\smtp-open-relay.nse
%Program Files%\Nmap\scripts\smtp-strangeport.nse
%Program Files%\Nmap\scripts\smtp-vuln-cve2010-4344.nse
%Program Files%\Nmap\scripts\smtp-vuln-cve2011-1720.nse
%Program Files%\Nmap\scripts\smtp-vuln-cve2011-1764.nse
%Program Files%\Nmap\scripts\sniffer-detect.nse
%Program Files%\Nmap\scripts\snmp-brute.nse
%Program Files%\Nmap\scripts\snmp-hh3c-logins.nse
%Program Files%\Nmap\scripts\snmp-info.nse
%Program Files%\Nmap\scripts\snmp-interfaces.nse
%Program Files%\Nmap\scripts\snmp-ios-config.nse
%Program Files%\Nmap\scripts\snmp-netstat.nse
%Program Files%\Nmap\scripts\snmp-processes.nse
%Program Files%\Nmap\scripts\snmp-sysdescr.nse
%Program Files%\Nmap\scripts\snmp-win32-services.nse
%Program Files%\Nmap\scripts\snmp-win32-shares.nse
%Program Files%\Nmap\scripts\snmp-win32-software.nse
%Program Files%\Nmap\scripts\snmp-win32-users.nse
%Program Files%\Nmap\scripts\socks-auth-info.nse
%Program Files%\Nmap\scripts\socks-brute.nse
%Program Files%\Nmap\scripts\socks-open-proxy.nse
%Program Files%\Nmap\scripts\ssh-auth-methods.nse
%Program Files%\Nmap\scripts\ssh-brute.nse
%Program Files%\Nmap\scripts\ssh-hostkey.nse
%Program Files%\Nmap\scripts\ssh-publickey-acceptance.nse
%Program Files%\Nmap\scripts\ssh-run.nse
%Program Files%\Nmap\scripts\ssh2-enum-algos.nse
%Program Files%\Nmap\scripts\sshv1.nse
%Program Files%\Nmap\scripts\ssl-ccs-injection.nse
%Program Files%\Nmap\scripts\ssl-cert-intaddr.nse
%Program Files%\Nmap\scripts\ssl-cert.nse
%Program Files%\Nmap\scripts\ssl-date.nse
%Program Files%\Nmap\scripts\ssl-dh-params.nse
%Program Files%\Nmap\scripts\ssl-enum-ciphers.nse
%Program Files%\Nmap\scripts\ssl-heartbleed.nse
%Program Files%\Nmap\scripts\ssl-known-key.nse
%Program Files%\Nmap\scripts\ssl-poodle.nse
%Program Files%\Nmap\scripts\sslv2-drown.nse
%Program Files%\Nmap\scripts\sslv2.nse
%Program Files%\Nmap\scripts\sstp-discover.nse
%Program Files%\Nmap\scripts\stun-info.nse
%Program Files%\Nmap\scripts\stun-version.nse
%Program Files%\Nmap\scripts\stuxnet-detect.nse
%Program Files%\Nmap\scripts\supermicro-ipmi-conf.nse
%Program Files%\Nmap\scripts\svn-brute.nse
%Program Files%\Nmap\scripts\targets-asn.nse
%Program Files%\Nmap\scripts\targets-ipv6-map4to6.nse
%Program Files%\Nmap\scripts\targets-ipv6-multicast-echo.nse
%Program Files%\Nmap\scripts\targets-ipv6-multicast-invalid-dst.nse
%Program Files%\Nmap\scripts\targets-ipv6-multicast-mld.nse
%Program Files%\Nmap\scripts\targets-ipv6-multicast-slaac.nse
%Program Files%\Nmap\scripts\targets-ipv6-wordlist.nse
%Program Files%\Nmap\scripts\targets-sniffer.nse
%Program Files%\Nmap\scripts\targets-traceroute.nse
%Program Files%\Nmap\scripts\targets-xml.nse
%Program Files%\Nmap\scripts\teamspeak2-version.nse
%Program Files%\Nmap\scripts\telnet-brute.nse
%Program Files%\Nmap\scripts\telnet-encryption.nse
%Program Files%\Nmap\scripts\telnet-ntlm-info.nse
%Program Files%\Nmap\scripts\tftp-enum.nse
%Program Files%\Nmap\scripts\tls-alpn.nse
%Program Files%\Nmap\scripts\tls-nextprotoneg.nse
%Program Files%\Nmap\scripts\tls-ticketbleed.nse
%Program Files%\Nmap\scripts\tn3270-screen.nse
%Program Files%\Nmap\scripts\tor-consensus-checker.nse
%Program Files%\Nmap\scripts\traceroute-geolocation.nse
%Program Files%\Nmap\scripts\tso-brute.nse
%Program Files%\Nmap\scripts\tso-enum.nse
%Program Files%\Nmap\scripts\ubiquiti-discovery.nse
%Program Files%\Nmap\scripts\unittest.nse
%Program Files%\Nmap\scripts\unusual-port.nse
%Program Files%\Nmap\scripts\upnp-info.nse
%Program Files%\Nmap\scripts\uptime-agent-info.nse
%Program Files%\Nmap\scripts\url-snarf.nse
%Program Files%\Nmap\scripts\ventrilo-info.nse
%Program Files%\Nmap\scripts\versant-info.nse
%Program Files%\Nmap\scripts\vmauthd-brute.nse
%Program Files%\Nmap\scripts\vmware-version.nse
%Program Files%\Nmap\scripts\vnc-brute.nse
%Program Files%\Nmap\scripts\vnc-info.nse
%Program Files%\Nmap\scripts\vnc-title.nse
%Program Files%\Nmap\scripts\voldemort-info.nse
%Program Files%\Nmap\scripts\vtam-enum.nse
%Program Files%\Nmap\scripts\vulners.nse
%Program Files%\Nmap\scripts\vuze-dht-info.nse
%Program Files%\Nmap\scripts\wdb-version.nse
%Program Files%\Nmap\scripts\weblogic-t3-info.nse
%Program Files%\Nmap\scripts\whois-domain.nse
%Program Files%\Nmap\scripts\whois-ip.nse
%Program Files%\Nmap\scripts\wsdd-discover.nse
%Program Files%\Nmap\scripts\x11-access.nse
%Program Files%\Nmap\scripts\xdmcp-discover.nse
%Program Files%\Nmap\scripts\xmlrpc-methods.nse
%Program Files%\Nmap\scripts\xmpp-brute.nse
%Program Files%\Nmap\scripts\xmpp-info.nse
%Program Files%\Nmap\nselib\afp.lua
%Program Files%\Nmap\nselib\ajp.lua
%Program Files%\Nmap\nselib\amqp.lua
%Program Files%\Nmap\nselib\anyconnect.lua
%Program Files%\Nmap\nselib\asn1.lua
%Program Files%\Nmap\nselib\base32.lua
%Program Files%\Nmap\nselib\base64.lua
%Program Files%\Nmap\nselib\bin.lua
%Program Files%\Nmap\nselib\bitcoin.lua
%Program Files%\Nmap\nselib\bits.lua
%Program Files%\Nmap\nselib\bittorrent.lua
%Program Files%\Nmap\nselib\bjnp.lua
%Program Files%\Nmap\nselib\brute.lua
%Program Files%\Nmap\nselib\cassandra.lua
%Program Files%\Nmap\nselib\citrixxml.lua
%Program Files%\Nmap\nselib\coap.lua
%Program Files%\Nmap\nselib\comm.lua
%Program Files%\Nmap\nselib\creds.lua
%Program Files%\Nmap\nselib\cvs.lua
%Program Files%\Nmap\nselib\datafiles.lua
%Program Files%\Nmap\nselib\datetime.lua
%Program Files%\Nmap\nselib\dhcp.lua
%Program Files%\Nmap\nselib\dhcp6.lua
%Program Files%\Nmap\nselib\dicom.lua
%Program Files%\Nmap\nselib\dns.lua
%Program Files%\Nmap\nselib\dnsbl.lua
%Program Files%\Nmap\nselib\dnssd.lua
%Program Files%\Nmap\nselib\drda.lua
%Program Files%\Nmap\nselib\eap.lua
%Program Files%\Nmap\nselib\eigrp.lua
%Program Files%\Nmap\nselib\formulas.lua
%Program Files%\Nmap\nselib\ftp.lua
%Program Files%\Nmap\nselib\geoip.lua
%Program Files%\Nmap\nselib\giop.lua
%Program Files%\Nmap\nselib\gps.lua
%Program Files%\Nmap\nselib\http.lua
%Program Files%\Nmap\nselib\httpspider.lua
%Program Files%\Nmap\nselib\iax2.lua
%Program Files%\Nmap\nselib\idna.lua
%Program Files%\Nmap\nselib\ike.lua
%Program Files%\Nmap\nselib\imap.lua
%Program Files%\Nmap\nselib\informix.lua
%Program Files%\Nmap\nselib\ipOps.lua
%Program Files%\Nmap\nselib\ipmi.lua
%Program Files%\Nmap\nselib\ipp.lua
%Program Files%\Nmap\nselib\irc.lua
%Program Files%\Nmap\nselib\iscsi.lua
%Program Files%\Nmap\nselib\isns.lua
%Program Files%\Nmap\nselib\jdwp.lua
%Program Files%\Nmap\nselib\json.lua
%Program Files%\Nmap\nselib\knx.lua
%Program Files%\Nmap\nselib\ldap.lua
%Program Files%\Nmap\nselib\lfs.luadoc
%Program Files%\Nmap\nselib\libssh2-utility.lua
%Program Files%\Nmap\nselib\libssh2.luadoc
%Program Files%\Nmap\nselib\listop.lua
%Program Files%\Nmap\nselib\lpeg-utility.lua
%Program Files%\Nmap\nselib\lpeg.luadoc
%Program Files%\Nmap\nselib\ls.lua
%Program Files%\Nmap\nselib\match.lua
%Program Files%\Nmap\nselib\membase.lua
%Program Files%\Nmap\nselib\mobileme.lua
%Program Files%\Nmap\nselib\mongodb.lua
%Program Files%\Nmap\nselib\mqtt.lua
%Program Files%\Nmap\nselib\msrpc.lua
%Program Files%\Nmap\nselib\msrpcperformance.lua
%Program Files%\Nmap\nselib\msrpctypes.lua
%Program Files%\Nmap\nselib\mssql.lua
%Program Files%\Nmap\nselib\multicast.lua
%Program Files%\Nmap\nselib\mysql.lua
%Program Files%\Nmap\nselib\natpmp.lua
%Program Files%\Nmap\nselib\nbd.lua
%Program Files%\Nmap\nselib\ncp.lua
%Program Files%\Nmap\nselib\ndmp.lua
%Program Files%\Nmap\nselib\netbios.lua
%Program Files%\Nmap\nselib\nmap.luadoc
%Program Files%\Nmap\nselib\nrpc.lua
%Program Files%\Nmap\nselib\nsedebug.lua
%Program Files%\Nmap\nselib\omp2.lua
%Program Files%\Nmap\nselib\oops.lua
%Program Files%\Nmap\nselib\openssl.luadoc
%Program Files%\Nmap\nselib\ospf.lua
%Program Files%\Nmap\nselib\outlib.lua
%Program Files%\Nmap\nselib\packet.lua
%Program Files%\Nmap\nselib\pcre.luadoc
%Program Files%\Nmap\nselib\pgsql.lua
%Program Files%\Nmap\nselib\pop3.lua
%Program Files%\Nmap\nselib\pppoe.lua
%Program Files%\Nmap\nselib\proxy.lua
%Program Files%\Nmap\nselib\punycode.lua
%Program Files%\Nmap\nselib\rand.lua
%Program Files%\Nmap\nselib\rdp.lua
%Program Files%\Nmap\nselib\re.lua
%Program Files%\Nmap\nselib\redis.lua
%Program Files%\Nmap\nselib\rmi.lua
%Program Files%\Nmap\nselib\rpc.lua
%Program Files%\Nmap\nselib\rpcap.lua
%Program Files%\Nmap\nselib\rsync.lua
%Program Files%\Nmap\nselib\rtsp.lua
%Program Files%\Nmap\nselib\sasl.lua
%Program Files%\Nmap\nselib\shortport.lua
%Program Files%\Nmap\nselib\sip.lua
%Program Files%\Nmap\nselib\slaxml.lua
%Program Files%\Nmap\nselib\smb.lua
%Program Files%\Nmap\nselib\smb2.lua
%Program Files%\Nmap\nselib\smbauth.lua
%Program Files%\Nmap\nselib\smtp.lua
%Program Files%\Nmap\nselib\snmp.lua
%Program Files%\Nmap\nselib\socks.lua
%Program Files%\Nmap\nselib\srvloc.lua
%Program Files%\Nmap\nselib\ssh1.lua
%Program Files%\Nmap\nselib\ssh2.lua
%Program Files%\Nmap\nselib\sslcert.lua
%Program Files%\Nmap\nselib\sslv2.lua
%Program Files%\Nmap\nselib\stdnse.lua
%Program Files%\Nmap\nselib\strbuf.lua
%Program Files%\Nmap\nselib\strict.lua
%Program Files%\Nmap\nselib\stringaux.lua
%Program Files%\Nmap\nselib\stun.lua
%Program Files%\Nmap\nselib\tab.lua
%Program Files%\Nmap\nselib\tableaux.lua
%Program Files%\Nmap\nselib\target.lua
%Program Files%\Nmap\nselib\tftp.lua
%Program Files%\Nmap\nselib\tls.lua
%Program Files%\Nmap\nselib\tn3270.lua
%Program Files%\Nmap\nselib\tns.lua
%Program Files%\Nmap\nselib\unicode.lua
%Program Files%\Nmap\nselib\unittest.lua
%Program Files%\Nmap\nselib\unpwdb.lua
%Program Files%\Nmap\nselib\upnp.lua
%Program Files%\Nmap\nselib\url.lua
%Program Files%\Nmap\nselib\versant.lua
%Program Files%\Nmap\nselib\vnc.lua
%Program Files%\Nmap\nselib\vulns.lua
%Program Files%\Nmap\nselib\vuzedht.lua
%Program Files%\Nmap\nselib\wsdd.lua
%Program Files%\Nmap\nselib\xdmcp.lua
%Program Files%\Nmap\nselib\xmpp.lua
%Program Files%\Nmap\nselib\zlib.luadoc
%Program Files%\Nmap\nselib\data\dns-srv-names
%Program Files%\Nmap\nselib\data\drupal-modules.lst
%Program Files%\Nmap\nselib\data\drupal-themes.lst
%Program Files%\Nmap\nselib\data\enterprise_numbers.txt
%Program Files%\Nmap\nselib\data\favicon-db
%Program Files%\Nmap\nselib\data\http-default-accounts-fingerprints.lua
%Program Files%\Nmap\nselib\data\http-devframework-fingerprints.lua
%Program Files%\Nmap\nselib\data\http-fingerprints.lua
%Program Files%\Nmap\nselib\data\http-folders.txt
%Program Files%\Nmap\nselib\data\http-sql-errors.lst
%Program Files%\Nmap\nselib\data\http-web-files-extensions.lst
%Program Files%\Nmap\nselib\data\idnaMappings.lua
%Program Files%\Nmap\nselib\data\ike-fingerprints.lua
%Program Files%\Nmap\nselib\data\mgroupnames.db
%Program Files%\Nmap\nselib\data\mysql-cis.audit
%Program Files%\Nmap\nselib\data\oracle-default-accounts.lst
%Program Files%\Nmap\nselib\data\oracle-sids
%Program Files%\Nmap\nselib\data\packetdecoders.lua
%Program Files%\Nmap\nselib\data\passwords.lst
%Program Files%\Nmap\nselib\data\pixel.gif
%Program Files%\Nmap\nselib\data\publickeydb
%Program Files%\Nmap\nselib\data\rtsp-urls.txt
%Program Files%\Nmap\nselib\data\snmpcommunities.lst
%Program Files%\Nmap\nselib\data\ssl-fingerprints
%Program Files%\Nmap\nselib\data\targets-ipv6-wordlist
%Program Files%\Nmap\nselib\data\tftplist.txt
%Program Files%\Nmap\nselib\data\usernames.lst
%Program Files%\Nmap\nselib\data\vhosts-default.lst
%Program Files%\Nmap\nselib\data\vhosts-full.lst
%Program Files%\Nmap\nselib\data\wp-plugins.lst
%Program Files%\Nmap\nselib\data\wp-themes.lst
%Program Files%\Nmap\nselib\data\jdwp-class\JDWPExecCmd.class
%Program Files%\Nmap\nselib\data\jdwp-class\JDWPExecCmd.java
%Program Files%\Nmap\nselib\data\jdwp-class\JDWPSystemInfo.class
%Program Files%\Nmap\nselib\data\jdwp-class\JDWPSystemInfo.java
%Program Files%\Nmap\nselib\data\jdwp-class\README.txt
%Program Files%\Nmap\nselib\data\psexec\README
%Program Files%\Nmap\nselib\data\psexec\backdoor.lua
%Program Files%\Nmap\nselib\data\psexec\default.lua
%Program Files%\Nmap\nselib\data\psexec\drives.lua
%Program Files%\Nmap\nselib\data\psexec\examples.lua
%Program Files%\Nmap\nselib\data\psexec\experimental.lua
%Program Files%\Nmap\nselib\data\psexec\network.lua
%Program Files%\Nmap\nselib\data\psexec\nmap_service.c
%Program Files%\Nmap\nselib\data\psexec\nmap_service.vcproj
%Program Files%\Nmap\nselib\data\psexec\pwdump.lua
%Program Files%\Nmap\icon1.ico
%User Temp%\nsy3AE0.tmp\vcredist_x86.exe
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\.ba1\wixstdba.dll
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\.ba1\thm.xml
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\.ba1\thm.wxl
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\.ba1\logo.png
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\.ba1\license.rtf
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\.ba1\BootstrapperApplicationData.xml
%User Temp%\dd_vcredist_x86_20210805142421.log
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\.be\vcredist_x86.exe
%System Root%\System Volume Information\SPP\snapshot-2
%System Root%\System Volume Information\SPP\OnlineMetadataCache\{8aa9ec51-7b51-4c31-a6ff-92d3d12684e4}_OnDiskSnapshotProp
%System Root%\System Volume Information\SPP\metadata-2
%ProgramData%\Package Cache\{ce085a78-074e-4823-8dc1-8a721b94b76d}\vcredist_x86.exe
%ProgramData%\Package Cache\{ce085a78-074e-4823-8dc1-8a721b94b76d}\state.rsm
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\vcRuntimeMinimum_x86
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\vcRuntimeAdditional_x86
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\cab54A5CABBE7274D8A22EB58060AAB7623
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\cabB3E1576D1FEFBB979E13B1A5379E0B16
%AppDataLocalLow%\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD
%AppDataLocalLow%\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD
%User Temp%\CabFFA3.tmp
%User Temp%\TarFFA4.tmp
%AppDataLocalLow%\Microsoft\CryptnetUrlCache\MetaData\F90F18257CBB4D84216AC1E1F3BB2C76
%AppDataLocalLow%\Microsoft\CryptnetUrlCache\Content\F90F18257CBB4D84216AC1E1F3BB2C76
%User Temp%\dd_vcredist_x86_20210805142421_0_vcRuntimeMinimum_x86.log
%User Temp%\dd_vcredist_x86_20210805142421_1_vcRuntimeAdditional_x86.log
%ProgramData%\Package Cache\{ce085a78-074e-4823-8dc1-8a721b94b76d}\state.rsm
%Program Files%\Nmap\Uninstall.exe
%User Temp%\nsy3AE0.tmp\npcap-1.00.exe
%User Temp%\nsjBD4.tmp
%User Temp%\nsjBD5.tmp\options.ini
%User Temp%\nsjBD5.tmp\final.ini
%User Temp%\nsjBD5.tmp\System.dll
%Program Files%\Npcap\install.log
%User Temp%\nsjBD5.tmp\modern-header.bmp
%User Temp%\nsjBD5.tmp\InstallOptions.dll
%User Temp%\nsjBD5.tmp\NPFInstall.exe
%User Temp%\nsjBD5.tmp\nsExec.dll
%User Temp%\nsjBD5.tmp\ns91B7.tmp
%Program Files%\Npcap\NPFInstall.log
%User Temp%\nsjBD5.tmp\nsA364.tmp
%User Temp%\nsjBD5.tmp\nsA96D.tmp
%User Temp%\nstAA34.tmp\UserInfo.dll
%User Temp%\nstAA34.tmp\ioSpecial.ini
%User Temp%\nstAA34.tmp\modern-wizard.bmp
%User Temp%\nstAA34.tmp\modern-header.bmp
%User Temp%\nsjBD5.tmp\nsB273.tmp
%Program Files%\Npcap\LICENSE
%Program Files%\Npcap\DiagReport.bat
%Program Files%\Npcap\DiagReport.ps1
%Program Files%\Npcap\FixInstall.bat
%Program Files%\Npcap\Uninstall.exe
%Program Files%\Npcap\NPFInstall.exe
%Program Files%\Npcap\npcap.sys
%Program Files%\Npcap\npcap.cat
%Program Files%\Npcap\npcap.inf
%Program Files%\Npcap\npcap_wfp.inf
%System%\wpcap.dll
%System%\Packet.dll
%System%\NpcapHelper.exe
%System%\WlanHelper.exe
%System%\Npcap\wpcap.dll
%System%\Npcap\Packet.dll
%System%\Npcap\NpcapHelper.exe
%System%\Npcap\WlanHelper.exe
%User Temp%\nsjBD5.tmp\Insecure-EV.cer
%User Temp%\nsjBD5.tmp\nsB60D.tmp
%User Temp%\nsjBD5.tmp\Insecure-EV-sha1.cer
%User Temp%\nsjBD5.tmp\nsB7E2.tmp
%User Temp%\nsjBD5.tmp\nsB8CD.tmp
%User Temp%\nsjBD5.tmp\nsBCC4.tmp
%User Temp%\nsjBD5.tmp\nsBDCE.tmp
%User Temp%\{7da11ba6-ed86-0809-41e4-5b6c8e96247d}\SETE169.tmp
%User Temp%\{7da11ba6-ed86-0809-41e4-5b6c8e96247d}\SETE428.tmp
%User Temp%\{7da11ba6-ed86-0809-41e4-5b6c8e96247d}\SETE725.tmp
%User Temp%\Cab6D.tmp
%User Temp%\Tar6E.tmp
%AppDataLocalLow%\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
%AppDataLocalLow%\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357
%User Temp%\Cab243.tmp
%User Temp%\Tar244.tmp
%User Temp%\Cab2B3.tmp
%User Temp%\Tar2B4.tmp
%User Temp%\Cab322.tmp
%User Temp%\Tar323.tmp
%Windows%\inf\oem12.PNF
%System%\drivers\SET54D.tmp
%User Temp%\nsjBD5.tmp\SimpleSC.dll
%Program Files%\Npcap\CheckStatus.bat
%User Temp%\nsjBD5.tmp\ns81C9.tmp
%User Temp%\nsy3AE0.tmp\nmap_performance.reg
%Program Files%\Nmap\nmap_performance.reg
%Program Files%\Nmap\zenmap.exe
%Program Files%\Nmap\ZENMAP_README
%Program Files%\Nmap\COPYING_HIGWIDGETS
%Program Files%\Nmap\python27.dll
%Program Files%\Nmap\py2exe\share\icons\hicolor\index.theme
%Program Files%\Nmap\py2exe\share\themes\Default\gtk-2.0-key\gtkrc
%Program Files%\Nmap\py2exe\share\themes\MS-Windows\gtk-2.0\gtkrc
%Program Files%\Nmap\share\zenmap\config\scan_profile.usp
%Program Files%\Nmap\share\zenmap\config\zenmap.conf
%Program Files%\Nmap\share\zenmap\config\zenmap_version
%Program Files%\Nmap\share\zenmap\docs\help.html
%Program Files%\Nmap\share\zenmap\locale\de\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\es\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\fr\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\hi\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\hr\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\it\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\ja\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\pl\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\pt_BR\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\ru\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\zh\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\misc\profile_editor.xml
%Program Files%\Nmap\share\zenmap\pixmaps\default_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\default_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\freebsd_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\freebsd_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\irix_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\irix_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\linux_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\linux_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\macosx_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\macosx_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\openbsd_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\openbsd_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\redhat_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\redhat_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\solaris_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\solaris_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\throbber.gif
%Program Files%\Nmap\share\zenmap\pixmaps\throbber.png
%Program Files%\Nmap\share\zenmap\pixmaps\ubuntu_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\ubuntu_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\unknown_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\unknown_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_1_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_1_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_2_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_2_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_3_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_3_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_4_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_4_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_5_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_5_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\win_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\win_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\zenmap.png
%Program Files%\Nmap\share\zenmap\pixmaps\radialnet\border.png
%Program Files%\Nmap\share\zenmap\pixmaps\radialnet\firewall.png
%Program Files%\Nmap\share\zenmap\pixmaps\radialnet\logo.png
%Program Files%\Nmap\share\zenmap\pixmaps\radialnet\padlock.png
%Program Files%\Nmap\share\zenmap\pixmaps\radialnet\router.png
%Program Files%\Nmap\share\zenmap\pixmaps\radialnet\switch.png
%Program Files%\Nmap\share\zenmap\pixmaps\radialnet\wireless.png
%Program Files%\Nmap\py2exe\CRYPT32.dll
%Program Files%\Nmap\py2exe\_ctypes.pyd
%Program Files%\Nmap\py2exe\_hashlib.pyd
%Program Files%\Nmap\py2exe\_socket.pyd
%Program Files%\Nmap\py2exe\_sqlite3.pyd
%Program Files%\Nmap\py2exe\_ssl.pyd
%Program Files%\Nmap\py2exe\atk.pyd
%Program Files%\Nmap\py2exe\bz2.pyd
%Program Files%\Nmap\py2exe\cairo._cairo.pyd
%Program Files%\Nmap\py2exe\freetype6.dll
%Program Files%\Nmap\py2exe\gio._gio.pyd
%Program Files%\Nmap\py2exe\glib._glib.pyd
%Program Files%\Nmap\py2exe\gobject._gobject.pyd
%Program Files%\Nmap\py2exe\gtk._gtk.pyd
%Program Files%\Nmap\py2exe\intl.dll
%Program Files%\Nmap\py2exe\libasprintf-0.dll
%Program Files%\Nmap\py2exe\libatk-1.0-0.dll
%Program Files%\Nmap\py2exe\libcairo-2.dll
%Program Files%\Nmap\py2exe\libcairo-gobject-2.dll
%Program Files%\Nmap\py2exe\libcairo-script-interpreter-2.dll
%Program Files%\Nmap\py2exe\libcroco-0.6-3.dll
%Program Files%\Nmap\py2exe\libexpat-1.dll
%Program Files%\Nmap\py2exe\libfontconfig-1.dll
%Program Files%\Nmap\py2exe\libgailutil-18.dll
%Program Files%\Nmap\py2exe\libgcc_s_dw2-1.dll
%Program Files%\Nmap\py2exe\libgdk-win32-2.0-0.dll
%Program Files%\Nmap\py2exe\libgdk_pixbuf-2.0-0.dll
%Program Files%\Nmap\py2exe\libgio-2.0-0.dll
%Program Files%\Nmap\py2exe\libglade-2.0-0.dll
%Program Files%\Nmap\py2exe\libglib-2.0-0.dll
%Program Files%\Nmap\py2exe\libgmodule-2.0-0.dll
%Program Files%\Nmap\py2exe\libgobject-2.0-0.dll
%Program Files%\Nmap\py2exe\libgsf-1-114.dll
%Program Files%\Nmap\py2exe\libgsf-win32-1-114.dll
%Program Files%\Nmap\py2exe\libgthread-2.0-0.dll
%Program Files%\Nmap\py2exe\libgtk-win32-2.0-0.dll
%Program Files%\Nmap\py2exe\libpango-1.0-0.dll
%Program Files%\Nmap\py2exe\libpangocairo-1.0-0.dll
%Program Files%\Nmap\py2exe\libpangoft2-1.0-0.dll
%Program Files%\Nmap\py2exe\libpangowin32-1.0-0.dll
%Program Files%\Nmap\py2exe\libpng14-14.dll
%Program Files%\Nmap\py2exe\library.zip
%Program Files%\Nmap\py2exe\librsvg-2-2.dll
%Program Files%\Nmap\py2exe\libxml2-2.dll
%Program Files%\Nmap\py2exe\pango.pyd
%Program Files%\Nmap\py2exe\pangocairo.pyd
%Program Files%\Nmap\py2exe\pyexpat.pyd
%Program Files%\Nmap\py2exe\select.pyd
%Program Files%\Nmap\py2exe\sqlite3.dll
%Program Files%\Nmap\py2exe\unicodedata.pyd
%Program Files%\Nmap\py2exe\zlib1.dll
%Program Files%\Nmap\py2exe\etc\bash_completion.d\gdbus-bash-completion.sh
%Program Files%\Nmap\py2exe\etc\bash_completion.d\gsettings-bash-completion.sh
%Program Files%\Nmap\py2exe\etc\fonts\fonts.conf
%Program Files%\Nmap\py2exe\etc\fonts\fonts.dtd
%Program Files%\Nmap\py2exe\etc\gtk-2.0\gtk.immodules
%Program Files%\Nmap\py2exe\etc\gtk-2.0\gtkrc
%Program Files%\Nmap\py2exe\etc\gtk-2.0\im-multipress.conf
%Program Files%\Nmap\py2exe\etc\pango\pango.aliases
%Program Files%\Nmap\py2exe\etc\pango\pango.modules
%Program Files%\Nmap\py2exe\lib\gtk-2.0\2.10.0\engines\libpixmap.dll
%Program Files%\Nmap\py2exe\lib\gtk-2.0\2.10.0\engines\libsvg.dll
%Program Files%\Nmap\py2exe\lib\gtk-2.0\2.10.0\engines\libwimp.dll
%Program Files%\Nmap\py2exe\lib\gtk-2.0\include\gdkconfig.h
%Program Files%\Nmap\py2exe\lib\gtk-2.0\modules\libgail.dll
%Program Files%\Nmap\py2exe\share\icons\hicolor\index.theme
%Program Files%\Nmap\py2exe\share\themes\Default\gtk-2.0-key\gtkrc
%Program Files%\Nmap\py2exe\share\themes\MS-Windows\gtk-2.0\gtkrc
%User Temp%\nsy3AE0.tmp\vcredist2008_x86.exe
%System Root%\{Random Characters}\vc_red.cab
%System Root%\{Random Characters}\vc_red.msi
%System Root%\{Random Characters}\install.exe
%System Root%\{Random Characters}\install.res.{Random 4 Characters}.dll
%System Root%\{Random Characters}\eula.{Random 4 Characters}.txt
%System Root%\{Random Characters}\globdata.ini
%System Root%\{Random Characters}\install.ini
%System Root%\{Random Characters}\vcredist.bmp
%System Root%\{Random Characters}\$shtdwn$.req
%User Temp%\dd_vcredistUI7A66.txt
%User Temp%\dd_vcredistMSI7A66.txt
%User Temp%\VWL201D.tmp
%Program Files%\Nmap\ndiff.exe
%Program Files%\Nmap\NDIFF_README
%Program Files%\Nmap\python27.dll
%Program Files%\Nmap\py2exe\CRYPT32.dll
%Program Files%\Nmap\py2exe\_ctypes.pyd
%Program Files%\Nmap\py2exe\_hashlib.pyd
%Program Files%\Nmap\py2exe\_socket.pyd
%Program Files%\Nmap\py2exe\_sqlite3.pyd
%Program Files%\Nmap\py2exe\_ssl.pyd
%Program Files%\Nmap\py2exe\atk.pyd
%Program Files%\Nmap\py2exe\bz2.pyd
%Program Files%\Nmap\py2exe\cairo._cairo.pyd
%Program Files%\Nmap\py2exe\freetype6.dll
%Program Files%\Nmap\py2exe\gio._gio.pyd
%Program Files%\Nmap\py2exe\glib._glib.pyd
%Program Files%\Nmap\py2exe\gobject._gobject.pyd
%Program Files%\Nmap\py2exe\gtk._gtk.pyd
%Program Files%\Nmap\py2exe\intl.dll
%Program Files%\Nmap\py2exe\libasprintf-0.dll
%Program Files%\Nmap\py2exe\libatk-1.0-0.dll
%Program Files%\Nmap\py2exe\libcairo-2.dll
%Program Files%\Nmap\py2exe\libcairo-gobject-2.dll
%Program Files%\Nmap\py2exe\libcairo-script-interpreter-2.dll
%Program Files%\Nmap\py2exe\libcroco-0.6-3.dll
%Program Files%\Nmap\py2exe\libexpat-1.dll
%Program Files%\Nmap\py2exe\libfontconfig-1.dll
%Program Files%\Nmap\py2exe\libgailutil-18.dll
%Program Files%\Nmap\py2exe\libgcc_s_dw2-1.dll
%Program Files%\Nmap\py2exe\libgdk-win32-2.0-0.dll
%Program Files%\Nmap\py2exe\libgdk_pixbuf-2.0-0.dll
%Program Files%\Nmap\py2exe\libgio-2.0-0.dll
%Program Files%\Nmap\py2exe\libglade-2.0-0.dll
%Program Files%\Nmap\py2exe\libglib-2.0-0.dll
%Program Files%\Nmap\py2exe\libgmodule-2.0-0.dll
%Program Files%\Nmap\py2exe\libgobject-2.0-0.dll
%Program Files%\Nmap\py2exe\libgsf-1-114.dll
%Program Files%\Nmap\py2exe\libgsf-win32-1-114.dll
%Program Files%\Nmap\py2exe\libgthread-2.0-0.dll
%Program Files%\Nmap\py2exe\libgtk-win32-2.0-0.dll
%Program Files%\Nmap\py2exe\libpango-1.0-0.dll
%Program Files%\Nmap\py2exe\libpangocairo-1.0-0.dll
%Program Files%\Nmap\py2exe\libpangoft2-1.0-0.dll
%Program Files%\Nmap\py2exe\libpangowin32-1.0-0.dll
%Program Files%\Nmap\py2exe\libpng14-14.dll
%Program Files%\Nmap\py2exe\library.zip
%Program Files%\Nmap\py2exe\librsvg-2-2.dll
%Program Files%\Nmap\py2exe\libxml2-2.dll
%Program Files%\Nmap\py2exe\pango.pyd
%Program Files%\Nmap\py2exe\pangocairo.pyd
%Program Files%\Nmap\py2exe\pyexpat.pyd
%Program Files%\Nmap\py2exe\select.pyd
%Program Files%\Nmap\py2exe\sqlite3.dll
%Program Files%\Nmap\py2exe\unicodedata.pyd
%Program Files%\Nmap\py2exe\zlib1.dll
%Program Files%\Nmap\py2exe\etc\bash_completion.d\gdbus-bash-completion.sh
%Program Files%\Nmap\py2exe\etc\bash_completion.d\gsettings-bash-completion.sh
%Program Files%\Nmap\py2exe\etc\fonts\fonts.conf
%Program Files%\Nmap\py2exe\etc\fonts\fonts.dtd
%Program Files%\Nmap\py2exe\etc\gtk-2.0\gtk.immodules
%Program Files%\Nmap\py2exe\etc\gtk-2.0\gtkrc
%Program Files%\Nmap\py2exe\etc\gtk-2.0\im-multipress.conf
%Program Files%\Nmap\py2exe\etc\pango\pango.aliases
%Program Files%\Nmap\py2exe\etc\pango\pango.modules
%Program Files%\Nmap\py2exe\lib\gtk-2.0\2.10.0\engines\libpixmap.dll
%Program Files%\Nmap\py2exe\lib\gtk-2.0\2.10.0\engines\libsvg.dll
%Program Files%\Nmap\py2exe\lib\gtk-2.0\2.10.0\engines\libwimp.dll
%Program Files%\Nmap\py2exe\lib\gtk-2.0\include\gdkconfig.h
%Program Files%\Nmap\py2exe\lib\gtk-2.0\modules\libgail.dll
%Program Files%\Nmap\py2exe\share\icons\hicolor\index.theme
%Program Files%\Nmap\py2exe\share\themes\Default\gtk-2.0-key\gtkrc
%Program Files%\Nmap\py2exe\share\themes\MS-Windows\gtk-2.0\gtkrc
%Program Files%\Nmap\ncat.exe
%Program Files%\Nmap\ca-bundle.crt
%Program Files%\Nmap\nping.exe
%User Temp%\nsy3AE0.tmp\InstallOptions.dll
%Desktop%\Nmap - Zenmap GUI.lnk
%Programs%\Nmap\Nmap - Zenmap GUI.lnk

(Note: %User Temp% is the current user's Temp folder, which is usually C:\Documents and Settings\{user name}\Local Settings\Temp on Windows 2000(32-bit), XP, and Server 2003(32-bit), or C:\Users\{user name}\AppData\Local\Temp on Windows Vista, 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit).. %Program Files% is the default Program Files folder, usually C:\Program Files in Windows 2000(32-bit), Server 2003(32-bit), XP, Vista(64-bit), 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit) , or C:\Program Files (x86) in Windows XP(64-bit), Vista(64-bit), 7(64-bit), 8(64-bit), 8.1(64-bit), 2008(64-bit), 2012(64-bit) and 10(64-bit).. %System Root% is the Windows root folder, where it usually is C:\ on all Windows operating system versions.. %ProgramData% is a version of the Program Files folder where any user on a multi-user computer can make changes to programs. This contains application data for all users. This is usually C:\ProgramData on Windows Vista, 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit), or C:\Documents and Settings\All Users on Windows Server 2003(32-bit), 2000(32-bit) and XP.. %AppDataLocalLow% is the LocalLow Application Data folder, which is usually C:\Users\{user name}\AppData\LocalLow on Windows Vista, 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit).. %System% is the Windows system folder, where it usually is C:\Windows\System32 on all Windows operating system versions.. %Windows% is the Windows folder, where it usually is C:\Windows on all Windows operating system versions.. %Desktop% is the current user's desktop, which is usually C:\Documents and Settings\{User Name}\Desktop on Windows 2000(32-bit), XP, and Server 2003(32-bit), or C:\Users\{user name}\Desktop on Windows Vista, 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit).. %Programs% is the folder that contains the user’s program groups, which is usually C:\Windows\Start Menu\Programs or C:\Documents and Settings\{User name}\Start Menu\Programs on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs on Windows Vista, 7, and 8.)

It adds the following processes:

"%User Temp%\nsy3AE0.tmp\vcredist_x86.exe" /q
"%User Temp%\nsy3AE0.tmp\vcredist_x86.exe" /q -burn.unelevated BurnPipe.{9BDE4B96-5900-4FC2-B917-A6C54E8557DC} {69877B34-9428-40EB-8A90-E7F0B68912C3} 288
"%User Temp%\nsy3AE0.tmp\npcap-1.00.exe" /loopback_support=no
"%User Temp%\nsjBD5.tmp\ns91B7.tmp" "%User Temp%\nsjBD5.tmp\NPFInstall.exe" -n -check_dll
"%User Temp%\nsjBD5.tmp\NPFInstall.exe" -n -check_dll
"%User Temp%\nsjBD5.tmp\nsA364.tmp" "%User Temp%\nsjBD5.tmp\NPFInstall.exe" -n -kill_proc
"%User Temp%\nsjBD5.tmp\NPFInstall.exe" -n -kill_proc
"%User Temp%\nsjBD5.tmp\nsA96D.tmp" "%Program Files%\WinPcap\uninstall.exe" _?=%Program Files%\WinPcap
"%Program Files%\WinPcap\uninstall.exe" _?=%Program Files%\WinPcap
"%User Temp%\nsjBD5.tmp\nsB273.tmp" "%User Temp%\nsjBD5.tmp\NPFInstall.exe" -n -check_dll
"%User Temp%\nsjBD5.tmp\NPFInstall.exe" -n -check_dll
"%User Temp%\nsjBD5.tmp\nsB60D.tmp" certutil -addstore -f "TrustedPublisher" "%User Temp%\nsjBD5.tmp\Insecure-EV.cer"
certutil -addstore -f "TrustedPublisher" "%User Temp%\nsjBD5.tmp\Insecure-EV.cer"
"%User Temp%\nsjBD5.tmp\nsB7E2.tmp" certutil -addstore -f "TrustedPublisher" "%User Temp%\nsjBD5.tmp\Insecure-EV-sha1.cer"
certutil -addstore -f "TrustedPublisher" "%User Temp%\nsjBD5.tmp\Insecure-EV-sha1.cer"
"%User Temp%\nsjBD5.tmp\nsB8CD.tmp" "%Program Files%\Npcap\NPFInstall.exe" -n -c
"%Program Files%\Npcap\NPFInstall.exe" -n -c
pnputil.exe -e
"%User Temp%\nsjBD5.tmp\nsBCC4.tmp" "%Program Files%\Npcap\NPFInstall.exe" -n -iw
"%Program Files%\Npcap\NPFInstall.exe" -n -iw
"%User Temp%\nsjBD5.tmp\nsBDCE.tmp" "%Program Files%\Npcap\NPFInstall.exe" -n -i
"%Program Files%\Npcap\NPFInstall.exe" -n -i
"%User Temp%\nsjBD5.tmp\ns81C9.tmp" SCHTASKS.EXE /Create /F /RU SYSTEM /SC ONSTART /TN npcapwatchdog /TR "'%Program Files%\Npcap\CheckStatus.bat'" /NP
SCHTASKS.EXE /Create /F /RU SYSTEM /SC ONSTART /TN npcapwatchdog /TR "'%Program Files%\Npcap\CheckStatus.bat'" /NP
regedt32 /S "%User Temp%\nsy3AE0.tmp\nmap_performance.reg"
"%Windows%\regedit.exe" /S "%User Temp%\nsy3AE0.tmp\nmap_performance.reg"
"%User Temp%\nsy3AE0.tmp\vcredist2008_x86.exe" /q
c:\ca80589fc863f8d8b86385\.\install.exe /q

Other System Modifications

This Potentially Unwanted Application adds the following registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Nmap
DisplayName = Nmap 7.91

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\npcap\Parameters
NdisImPlatformBindingOptions = 0

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\npcap\Linkage
Bind = \Device\{E28D896F-9EA8-433A-9C10-66C97C19A921}, \Device\{483C9FF8-503D-414B-B402-E4C1F1F568CB}, \Device\{C0DE3E38-8BA7-479F-8B75-833F294C5AA8}, \Device\{DB2B4279-B5CF-4626-9DBA-32D0ECE44C87}, \Device\{E2F8A220-AF88-446C-9A55-453E58DD3A33}, \Device\{DCB14C61-690D-46F7-8A89-150432FA5C44}, \Device\{0866949C-87EB-46E2-B11B-7CC64005A2FB}, \Device\NdisWanIp, \Device\NdisWanBh, \Device\NdisWanIpv6

HKEY_CURRENT_USER\Software\Nmap
{Default} = %Program Files%\Nmap

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Nmap
DisplayVersion = 7.91

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Nmap
Publisher = Nmap Project

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Nmap
URLInfoAbout = https://nmap.org/

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Nmap
URLUpdateInfo = https://nmap.org/download.html

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Nmap
UninstallString = "%Program Files%\Nmap\uninstall.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Nmap
DisplayIcon = "%Program Files%\Nmap\icon1.ico"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Nmap
NoModify = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Nmap
NoRepair = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Npcap
AdminOnly = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Npcap
WinPcapCompatible = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Npcap
{Default} = %Program Files%\Npcap

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
NpcapInst
UninstallString = "%Program Files%\Npcap\uninstall.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
NpcapInst
QuietUninstallString = "%Program Files%\Npcap\uninstall.exe" /S

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
NpcapInst
DisplayIcon = %Program Files%\Npcap\uninstall.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
NpcapInst
UninstallPath = %Program Files%\Npcap

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\Network\NetCfgLockHolder
{Default} = NPCAP

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\npcap\Linkage
Route = "{E28D896F-9EA8-433A-9C10-66C97C19A921}", "{483C9FF8-503D-414B-B402-E4C1F1F568CB}", "{C0DE3E38-8BA7-479F-8B75-833F294C5AA8}", "{DB2B4279-B5CF-4626-9DBA-32D0ECE44C87}", "{E2F8A220-AF88-446C-9A55-453E58DD3A33}", "{DCB14C61-690D-46F7-8A89-150432FA5C44}", "{0866949C-87EB-46E2-B11B-7CC64005A2FB}", "NdisWanIp", "NdisWanBh", "NdisWanIpv6"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\npcap\Linkage
Export = Device\npcap_{E28D896F-9EA8-433A-9C10-66C97C19A921}, \Device\npcap_{483C9FF8-503D-414B-B402-E4C1F1F568CB}, \Device\npcap_{C0DE3E38-8BA7-479F-8B75-833F294C5AA8}, \Device\npcap_{DB2B4279-B5CF-4626-9DBA-32D0ECE44C87}, \Device\npcap_{E2F8A220-AF88-446C-9A55-453E58DD3A33}, \Device\npcap_{DCB14C61-690D-46F7-8A89-150432FA5C44}, \Device\npcap_{0866949C-87EB-46E2-B11B-7CC64005A2FB}, \Device\npcap_NdisWanIp, \Device\npcap_NdisWanBh, \Device\npcap_NdisWanIpv6

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\npcap
Start = 1

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\npcap\Parameters
LoopbackSupport = 1

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\npcap\Parameters
DltNull = 1

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\npcap\Parameters
Edition = Npcap

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\npcap\Parameters
AdminOnly = 0

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\npcap\Parameters
Dot11Support = 0

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\npcap\Parameters
VlanSupport = 0

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\npcap\Parameters
WinPcapCompatible = 1

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\npcap
Start = 1

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\npcap_wifi
Start = 4

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
NpcapInst
DisplayName = Npcap

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
NpcapInst
DisplayVersion = 1.00

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
NpcapInst
Publisher = Nmap Project

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
NpcapInst
URLInfoAbout = https://www.npcap.org

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
NpcapInst
URLUpdateInfo = https://www.npcap.org

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
NpcapInst
VersionMajor = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
NpcapInst
VersionMinor = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
NpcapInst
NoModify = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
NpcapInst
NoRepair = 1

Other Details

This Potentially Unwanted Application adds the following registry keys:

HKEY_CURRENT_USER\Software\Nmap

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Nmap

HKEY_LOCAL_MACHINE\SOFTWARE\Npcap

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
NpcapInst

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\Network\NetCfgLockHolder

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\npcap\Parameters

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\npcap\Linkage

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\npcap\Parameters\
Adapters

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
services\npcap_wifi

It connects to the following possibly malicious URL:

http://crl.{BLOCKED}oft.com/pki/crl/products/microsoftrootcert.crl
http://crl.{BLOCKED}oft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl
http://crl.{BLOCKED}oft.com/pki/crl/products/MicrosoftTimeStampPCA.crl
http://crl.{BLOCKED}oft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl
http://www.{BLOCKED}oft.com/pki/certs/MicRooCerAut_2010-06-23.crt

It does the following:

It loads the following as a driver:
- %System%\DRIVERS\npcap.sys

(Note: %System% is the Windows system folder, where it usually is C:\Windows\System32 on all Windows operating system versions.)

It adds the following scheduled tasks:

Name: npcapwatchdog
- Trigger: At system startup
- Action: %Program Files%\Npcap\CheckStatus.bat

(Note: %Program Files% is the default Program Files folder, usually C:\Program Files in Windows 2000(32-bit), Server 2003(32-bit), XP, Vista(64-bit), 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit) , or C:\Program Files (x86) in Windows XP(64-bit), Vista(64-bit), 7(64-bit), 8(64-bit), 8.1(64-bit), 2008(64-bit), 2012(64-bit) and 10(64-bit).)

SOLUTION

Minimum Scan Engine: 9.800

SSAPI PATTERN File: 2.427.00

SSAPI PATTERN Date: 22 Jul 2021

Step 1

Before doing any scans, Windows 7, Windows 8, Windows 8.1, and Windows 10 users must disable System Restore to allow full scanning of their computers.

Step 2

Note that not all files, folders, and registry keys and entries are installed on your computer during this malware's/spyware's/grayware's execution. This may be due to incomplete installation or other operating system conditions. If you do not find the same files/folders/registry information, please proceed to the next step.

Step 3

Deleting Scheduled Tasks

The following {Task Name} - {Task to be run} listed should be used in the steps identified below: {npcapwatchdog} - {%Program Files%\Npcap\CheckStatus.bat}

For Windows 2000, Windows XP, and Windows Server 2003:

Open the Windows Scheduled Tasks. Click Start>Programs>Accessories>
System Tools>Scheduled Tasks.
Locate each {Task Name} values listed above in the Name column.
Right-click on the said file(s) with the aforementioned value.
Click on Properties. In the Run field, check for the listed {Task to be run}.
If the strings match the list above, delete the task.

For Windows Vista, Windows 7, Windows Server 2008, Windows 8, Windows 8.1, and Windows Server 2012:

Open the Windows Task Scheduler. To do this:
• On Windows Vista, Windows 7, and Windows Server 2008, click Start, type taskschd.msc in the Search input field, then press Enter.
• On Windows 8, Windows 8.1, and Windows Server 2012, right-click on the lower left corner of the screen, click Run, type taskschd.msc, then press Enter.
In the left panel, click Task Scheduler Library.
In the upper-middle panel, locate each {Task Name} values listed above in the Name column.
In the lower-middle panel, click the Actions tab. In the Details column, check for the {Task to be run} string.
If the said string is found, delete the task.

Step 4

Delete this registry value

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

In HKEY_CURRENT_USER\Software\Nmap
- {Default} = %Program Files%\Nmap
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Nmap
- DisplayName = Nmap 7.91
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Nmap
- DisplayVersion = 7.91
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Nmap
- Publisher = Nmap Project
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Nmap
- URLInfoAbout = https://nmap.org/
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Nmap
- URLUpdateInfo = https://nmap.org/download.html
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Nmap
- UninstallString = "%Program Files%\Nmap\uninstall.exe"
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Nmap
- DisplayIcon = "%Program Files%\Nmap\icon1.ico"
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Nmap
- NoModify = 1
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Nmap
- NoRepair = 1
In HKEY_LOCAL_MACHINE\SOFTWARE\Npcap
- AdminOnly = 0
In HKEY_LOCAL_MACHINE\SOFTWARE\Npcap
- WinPcapCompatible = 1
In HKEY_LOCAL_MACHINE\SOFTWARE\Npcap
- {Default} = %Program Files%\Npcap
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst
- UninstallString = "%Program Files%\Npcap\uninstall.exe"
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst
- QuietUninstallString = "%Program Files%\Npcap\uninstall.exe" /S
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst
- DisplayIcon = %Program Files%\Npcap\uninstall.exe
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst
- UninstallPath = %Program Files%\Npcap
In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Network\NetCfgLockHolder
- {Default} = NPCAP
In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npcap\Parameters
- NdisImPlatformBindingOptions = 0
In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npcap\Linkage
- Bind = \Device\{E28D896F-9EA8-433A-9C10-66C97C19A921}, \Device\{483C9FF8-503D-414B-B402-E4C1F1F568CB}, \Device\{C0DE3E38-8BA7-479F-8B75-833F294C5AA8}, \Device\{DB2B4279-B5CF-4626-9DBA-32D0ECE44C87}, \Device\{E2F8A220-AF88-446C-9A55-453E58DD3A33}, \Device\{DCB14C61-690D-46F7-8A89-150432FA5C44}, \Device\{0866949C-87EB-46E2-B11B-7CC64005A2FB}, \Device\NdisWanIp, \Device\NdisWanBh, \Device\NdisWanIpv6
In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npcap\Linkage
- Route = "{E28D896F-9EA8-433A-9C10-66C97C19A921}", "{483C9FF8-503D-414B-B402-E4C1F1F568CB}", "{C0DE3E38-8BA7-479F-8B75-833F294C5AA8}", "{DB2B4279-B5CF-4626-9DBA-32D0ECE44C87}", "{E2F8A220-AF88-446C-9A55-453E58DD3A33}", "{DCB14C61-690D-46F7-8A89-150432FA5C44}", "{0866949C-87EB-46E2-B11B-7CC64005A2FB}", "NdisWanIp", "NdisWanBh", "NdisWanIpv6"
In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npcap\Linkage
- Export = \Device\npcap_{E28D896F-9EA8-433A-9C10-66C97C19A921}, \Device\npcap_{483C9FF8-503D-414B-B402-E4C1F1F568CB}, \Device\npcap_{C0DE3E38-8BA7-479F-8B75-833F294C5AA8}, \Device\npcap_{DB2B4279-B5CF-4626-9DBA-32D0ECE44C87}, \Device\npcap_{E2F8A220-AF88-446C-9A55-453E58DD3A33}, \Device\npcap_{DCB14C61-690D-46F7-8A89-150432FA5C44}, \Device\npcap_{0866949C-87EB-46E2-B11B-7CC64005A2FB}, \Device\npcap_NdisWanIp, \Device\npcap_NdisWanBh, \Device\npcap_NdisWanIpv6
In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npcap
- Start = 1
In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npcap\Parameters
- LoopbackSupport = 1
In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npcap\Parameters
- DltNull = 1
In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npcap\Parameters
- Edition = Npcap
In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npcap\Parameters
- AdminOnly = 0
In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npcap\Parameters
- Dot11Support = 0
In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npcap\Parameters
- VlanSupport = 0
In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npcap\Parameters
- WinPcapCompatible = 1
In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npcap
- Start = 1
In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npcap_wifi
- Start = 4
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst
- DisplayName = Npcap
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst
- DisplayVersion = 1.00
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst
- Publisher = Nmap Project
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst
- URLInfoAbout = https://www.npcap.org
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst
- URLUpdateInfo = https://www.npcap.org
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst
- VersionMajor = 1
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst
- VersionMinor = 0
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst
- NoModify = 1
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst
- NoRepair = 1

To delete the registry value this malware created:

Open Registry Editor. To do this:
» For Windows 7 and Windows Server 2008 (R2) users, click the Start button, type regedit in the Search input field then press Enter.
» For Windows 8, Windows 8.1, 10, and Windows Server 2012 (R2) users, right-click on the lower left corner of the screen, click Run, type regedit in the text box provided, and then press Enter.
In the left panel of the Registry Editor window, double-click the following:
HKEY_CURRENT_USER>Software>Nmap
In the right panel, locate and delete the entry:
{Default} = %Program Files%\Nmap
In the left panel of the Registry Editor window, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Uninstall>Nmap
In the right panel, locate and delete the entry:
DisplayName = Nmap 7.91
Again In the right panel, locate and delete the entry:
DisplayVersion = 7.91
Again In the right panel, locate and delete the entry:
Publisher = Nmap Project
Again In the right panel, locate and delete the entry:
URLInfoAbout = https://nmap.org/
Again In the right panel, locate and delete the entry:
URLUpdateInfo = https://nmap.org/download.html
Again In the right panel, locate and delete the entry:
UninstallString = "%Program Files%\Nmap\uninstall.exe"
Again In the right panel, locate and delete the entry:
DisplayIcon = "%Program Files%\Nmap\icon1.ico"
Again In the right panel, locate and delete the entry:
NoModify = 1
Again In the right panel, locate and delete the entry:
NoRepair = 1
In the left panel of the Registry Editor window, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Npcap
In the right panel, locate and delete the entry:
AdminOnly = 0
Again In the right panel, locate and delete the entry:
WinPcapCompatible = 1
Again In the right panel, locate and delete the entry:
{Default} = %Program Files%\Npcap
In the left panel of the Registry Editor window, double-click the following:
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Uninstall>NpcapInst
In the right panel, locate and delete the entry:
UninstallString = "%Program Files%\Npcap\uninstall.exe"
Again In the right panel, locate and delete the entry:
QuietUninstallString = "%Program Files%\Npcap\uninstall.exe" /S
Again In the right panel, locate and delete the entry:
DisplayIcon = %Program Files%\Npcap\uninstall.exe
Again In the right panel, locate and delete the entry:
UninstallPath = %Program Files%\Npcap
In the left panel of the Registry Editor window, double-click the following:
HKEY_LOCAL_MACHINE>SYSTEM>ControlSet001>Control>Network>NetCfgLockHolder
In the right panel, locate and delete the entry:
{Default} = NPCAP
In the left panel of the Registry Editor window, double-click the following:
HKEY_LOCAL_MACHINE>SYSTEM>ControlSet001>services>npcap>Parameters
In the right panel, locate and delete the entry:
NdisImPlatformBindingOptions = 0
In the left panel of the Registry Editor window, double-click the following:
HKEY_LOCAL_MACHINE>SYSTEM>ControlSet001>services>npcap>Linkage
In the right panel, locate and delete the entry:
Bind = \Device\{E28D896F-9EA8-433A-9C10-66C97C19A921}, \Device\{483C9FF8-503D-414B-B402-E4C1F1F568CB}, \Device\{C0DE3E38-8BA7-479F-8B75-833F294C5AA8}, \Device\{DB2B4279-B5CF-4626-9DBA-32D0ECE44C87}, \Device\{E2F8A220-AF88-446C-9A55-453E58DD3A33}, \Device\{DCB14C61-690D-46F7-8A89-150432FA5C44}, \Device\{0866949C-87EB-46E2-B11B-7CC64005A2FB}, \Device\NdisWanIp, \Device\NdisWanBh, \Device\NdisWanIpv6
Again In the right panel, locate and delete the entry:
Route = "{E28D896F-9EA8-433A-9C10-66C97C19A921}", "{483C9FF8-503D-414B-B402-E4C1F1F568CB}", "{C0DE3E38-8BA7-479F-8B75-833F294C5AA8}", "{DB2B4279-B5CF-4626-9DBA-32D0ECE44C87}", "{E2F8A220-AF88-446C-9A55-453E58DD3A33}", "{DCB14C61-690D-46F7-8A89-150432FA5C44}", "{0866949C-87EB-46E2-B11B-7CC64005A2FB}", "NdisWanIp", "NdisWanBh", "NdisWanIpv6"
Again In the right panel, locate and delete the entry:
Export = \Device\npcap_{E28D896F-9EA8-433A-9C10-66C97C19A921}, \Device\npcap_{483C9FF8-503D-414B-B402-E4C1F1F568CB}, \Device\npcap_{C0DE3E38-8BA7-479F-8B75-833F294C5AA8}, \Device\npcap_{DB2B4279-B5CF-4626-9DBA-32D0ECE44C87}, \Device\npcap_{E2F8A220-AF88-446C-9A55-453E58DD3A33}, \Device\npcap_{DCB14C61-690D-46F7-8A89-150432FA5C44}, \Device\npcap_{0866949C-87EB-46E2-B11B-7CC64005A2FB}, \Device\npcap_NdisWanIp, \Device\npcap_NdisWanBh, \Device\npcap_NdisWanIpv6
In the left panel of the Registry Editor window, double-click the following:
HKEY_LOCAL_MACHINE>SYSTEM>ControlSet001>services>npcap
In the right panel, locate and delete the entry:
Start = 1
Again In the right panel, locate and delete the entry:
LoopbackSupport = 1
Again In the right panel, locate and delete the entry:
DltNull = 1
Again In the right panel, locate and delete the entry:
Edition = Npcap
Again In the right panel, locate and delete the entry:
AdminOnly = 0
Again In the right panel, locate and delete the entry:
Dot11Support = 0
Again In the right panel, locate and delete the entry:
VlanSupport = 0
Again In the right panel, locate and delete the entry:
WinPcapCompatible = 1
Again In the right panel, locate and delete the entry:
Start = 1
In the left panel of the Registry Editor window, double-click the following:
HKEY_LOCAL_MACHINE>SYSTEM>ControlSet001>services>npcap_wifi
In the right panel, locate and delete the entry:
Start = 4
Again In the right panel, locate and delete the entry:
DisplayName = Npcap
Again In the right panel, locate and delete the entry:
DisplayVersion = 1.00
Again In the right panel, locate and delete the entry:
Publisher = Nmap Project
Again In the right panel, locate and delete the entry:
URLInfoAbout = https://www.npcap.org
Again In the right panel, locate and delete the entry:
URLUpdateInfo = https://www.npcap.org
Again In the right panel, locate and delete the entry:
VersionMajor = 1
Again In the right panel, locate and delete the entry:
VersionMinor = 0
Again In the right panel, locate and delete the entry:
NoModify = 1
Again In the right panel, locate and delete the entry:
NoRepair = 1
Close Registry Editor.

Step 5

Delete this registry key

[ Learn More ]

HKEY_CURRENT_USER\Software\Nmap
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Nmap
HKEY_LOCAL_MACHINE\SOFTWARE\Npcap
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Network\NetCfgLockHolder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npcap\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npcap\Linkage
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npcap\Parameters\Adapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npcap_wifi

Step 6

Search and delete this file

[ Learn More ]

There may be some files that are hidden. Please make sure you check the Search Hidden Files and Folders checkbox in the "More advanced options" option to include all hidden files and folders in the search result.

%User Temp%\nsi3ACF.tmp
%User Temp%\nsy3AE0.tmp\shortcuts.ini
%User Temp%\nsy3AE0.tmp\final.ini
%Program Files%\Nmap\CHANGELOG
%Program Files%\Nmap\LICENSE
%Program Files%\Nmap\nmap-mac-prefixes
%Program Files%\Nmap\nmap-os-db
%Program Files%\Nmap\nmap-payloads
%Program Files%\Nmap\nmap-protocols
%Program Files%\Nmap\nmap-rpc
%Program Files%\Nmap\nmap-service-probes
%Program Files%\Nmap\nmap-services
%Program Files%\Nmap\nmap.exe
%Program Files%\Nmap\nse_main.lua
%Program Files%\Nmap\nmap.xsl
%Program Files%\Nmap\nmap_performance.reg
%Program Files%\Nmap\README-WIN32
%Program Files%\Nmap\3rd-party-licenses.txt
%Program Files%\Nmap\licenses\BSD-modified.txt
%Program Files%\Nmap\licenses\BSD-simplified
%Program Files%\Nmap\licenses\LGPL-2
%Program Files%\Nmap\licenses\LGPL-2.1
%Program Files%\Nmap\licenses\LIBLINEAR-license.txt
%Program Files%\Nmap\licenses\Libdnet-license.txt
%Program Files%\Nmap\licenses\Lua-license.txt
%Program Files%\Nmap\licenses\MIT
%Program Files%\Nmap\licenses\MPL-1.1
%Program Files%\Nmap\licenses\OpenSSL-license.txt
%Program Files%\Nmap\licenses\PCRE-license.txt
%Program Files%\Nmap\licenses\WinPcap-license.txt
%Program Files%\Nmap\licenses\zlib-license.txt
%Program Files%\Nmap\libssh2.dll
%Program Files%\Nmap\zlibwapi.dll
%Program Files%\Nmap\libcrypto-1_1.dll
%Program Files%\Nmap\libssl-1_1.dll
%Program Files%\Nmap\scripts\acarsd-info.nse
%Program Files%\Nmap\scripts\address-info.nse
%Program Files%\Nmap\scripts\afp-brute.nse
%Program Files%\Nmap\scripts\afp-ls.nse
%Program Files%\Nmap\scripts\afp-path-vuln.nse
%Program Files%\Nmap\scripts\afp-serverinfo.nse
%Program Files%\Nmap\scripts\afp-showmount.nse
%Program Files%\Nmap\scripts\ajp-auth.nse
%Program Files%\Nmap\scripts\ajp-brute.nse
%Program Files%\Nmap\scripts\ajp-headers.nse
%Program Files%\Nmap\scripts\ajp-methods.nse
%Program Files%\Nmap\scripts\ajp-request.nse
%Program Files%\Nmap\scripts\allseeingeye-info.nse
%Program Files%\Nmap\scripts\amqp-info.nse
%Program Files%\Nmap\scripts\asn-query.nse
%Program Files%\Nmap\scripts\auth-owners.nse
%Program Files%\Nmap\scripts\auth-spoof.nse
%Program Files%\Nmap\scripts\backorifice-brute.nse
%Program Files%\Nmap\scripts\backorifice-info.nse
%Program Files%\Nmap\scripts\bacnet-info.nse
%Program Files%\Nmap\scripts\banner.nse
%Program Files%\Nmap\scripts\bitcoin-getaddr.nse
%Program Files%\Nmap\scripts\bitcoin-info.nse
%Program Files%\Nmap\scripts\bitcoinrpc-info.nse
%Program Files%\Nmap\scripts\bittorrent-discovery.nse
%Program Files%\Nmap\scripts\bjnp-discover.nse
%Program Files%\Nmap\scripts\broadcast-ataoe-discover.nse
%Program Files%\Nmap\scripts\broadcast-avahi-dos.nse
%Program Files%\Nmap\scripts\broadcast-bjnp-discover.nse
%Program Files%\Nmap\scripts\broadcast-db2-discover.nse
%Program Files%\Nmap\scripts\broadcast-dhcp-discover.nse
%Program Files%\Nmap\scripts\broadcast-dhcp6-discover.nse
%Program Files%\Nmap\scripts\broadcast-dns-service-discovery.nse
%Program Files%\Nmap\scripts\broadcast-dropbox-listener.nse
%Program Files%\Nmap\scripts\broadcast-eigrp-discovery.nse
%Program Files%\Nmap\scripts\broadcast-hid-discoveryd.nse
%Program Files%\Nmap\scripts\broadcast-igmp-discovery.nse
%Program Files%\Nmap\scripts\broadcast-jenkins-discover.nse
%Program Files%\Nmap\scripts\broadcast-listener.nse
%Program Files%\Nmap\scripts\broadcast-ms-sql-discover.nse
%Program Files%\Nmap\scripts\broadcast-netbios-master-browser.nse
%Program Files%\Nmap\scripts\broadcast-networker-discover.nse
%Program Files%\Nmap\scripts\broadcast-novell-locate.nse
%Program Files%\Nmap\scripts\broadcast-ospf2-discover.nse
%Program Files%\Nmap\scripts\broadcast-pc-anywhere.nse
%Program Files%\Nmap\scripts\broadcast-pc-duo.nse
%Program Files%\Nmap\scripts\broadcast-pim-discovery.nse
%Program Files%\Nmap\scripts\broadcast-ping.nse
%Program Files%\Nmap\scripts\broadcast-pppoe-discover.nse
%Program Files%\Nmap\scripts\broadcast-rip-discover.nse
%Program Files%\Nmap\scripts\broadcast-ripng-discover.nse
%Program Files%\Nmap\scripts\broadcast-sonicwall-discover.nse
%Program Files%\Nmap\scripts\broadcast-sybase-asa-discover.nse
%Program Files%\Nmap\scripts\broadcast-tellstick-discover.nse
%Program Files%\Nmap\scripts\broadcast-upnp-info.nse
%Program Files%\Nmap\scripts\broadcast-versant-locate.nse
%Program Files%\Nmap\scripts\broadcast-wake-on-lan.nse
%Program Files%\Nmap\scripts\broadcast-wpad-discover.nse
%Program Files%\Nmap\scripts\broadcast-wsdd-discover.nse
%Program Files%\Nmap\scripts\broadcast-xdmcp-discover.nse
%Program Files%\Nmap\scripts\cassandra-brute.nse
%Program Files%\Nmap\scripts\cassandra-info.nse
%Program Files%\Nmap\scripts\cccam-version.nse
%Program Files%\Nmap\scripts\cics-enum.nse
%Program Files%\Nmap\scripts\cics-info.nse
%Program Files%\Nmap\scripts\cics-user-brute.nse
%Program Files%\Nmap\scripts\cics-user-enum.nse
%Program Files%\Nmap\scripts\citrix-brute-xml.nse
%Program Files%\Nmap\scripts\citrix-enum-apps-xml.nse
%Program Files%\Nmap\scripts\citrix-enum-apps.nse
%Program Files%\Nmap\scripts\citrix-enum-servers-xml.nse
%Program Files%\Nmap\scripts\citrix-enum-servers.nse
%Program Files%\Nmap\scripts\clamav-exec.nse
%Program Files%\Nmap\scripts\clock-skew.nse
%Program Files%\Nmap\scripts\coap-resources.nse
%Program Files%\Nmap\scripts\couchdb-databases.nse
%Program Files%\Nmap\scripts\couchdb-stats.nse
%Program Files%\Nmap\scripts\creds-summary.nse
%Program Files%\Nmap\scripts\cups-info.nse
%Program Files%\Nmap\scripts\cups-queue-info.nse
%Program Files%\Nmap\scripts\cvs-brute-repository.nse
%Program Files%\Nmap\scripts\cvs-brute.nse
%Program Files%\Nmap\scripts\daap-get-library.nse
%Program Files%\Nmap\scripts\daytime.nse
%Program Files%\Nmap\scripts\db2-das-info.nse
%Program Files%\Nmap\scripts\deluge-rpc-brute.nse
%Program Files%\Nmap\scripts\dhcp-discover.nse
%Program Files%\Nmap\scripts\dicom-brute.nse
%Program Files%\Nmap\scripts\dicom-ping.nse
%Program Files%\Nmap\scripts\dict-info.nse
%Program Files%\Nmap\scripts\distcc-cve2004-2687.nse
%Program Files%\Nmap\scripts\dns-blacklist.nse
%Program Files%\Nmap\scripts\dns-brute.nse
%Program Files%\Nmap\scripts\dns-cache-snoop.nse
%Program Files%\Nmap\scripts\dns-check-zone.nse
%Program Files%\Nmap\scripts\dns-client-subnet-scan.nse
%Program Files%\Nmap\scripts\dns-fuzz.nse
%Program Files%\Nmap\scripts\dns-ip6-arpa-scan.nse
%Program Files%\Nmap\scripts\dns-nsec-enum.nse
%Program Files%\Nmap\scripts\dns-nsec3-enum.nse
%Program Files%\Nmap\scripts\dns-nsid.nse
%Program Files%\Nmap\scripts\dns-random-srcport.nse
%Program Files%\Nmap\scripts\dns-random-txid.nse
%Program Files%\Nmap\scripts\dns-recursion.nse
%Program Files%\Nmap\scripts\dns-service-discovery.nse
%Program Files%\Nmap\scripts\dns-srv-enum.nse
%Program Files%\Nmap\scripts\dns-update.nse
%Program Files%\Nmap\scripts\dns-zeustracker.nse
%Program Files%\Nmap\scripts\dns-zone-transfer.nse
%Program Files%\Nmap\scripts\docker-version.nse
%Program Files%\Nmap\scripts\domcon-brute.nse
%Program Files%\Nmap\scripts\domcon-cmd.nse
%Program Files%\Nmap\scripts\domino-enum-users.nse
%Program Files%\Nmap\scripts\dpap-brute.nse
%Program Files%\Nmap\scripts\drda-brute.nse
%Program Files%\Nmap\scripts\drda-info.nse
%Program Files%\Nmap\scripts\duplicates.nse
%Program Files%\Nmap\scripts\eap-info.nse
%Program Files%\Nmap\scripts\enip-info.nse
%Program Files%\Nmap\scripts\epmd-info.nse
%Program Files%\Nmap\scripts\eppc-enum-processes.nse
%Program Files%\Nmap\scripts\fcrdns.nse
%Program Files%\Nmap\scripts\finger.nse
%Program Files%\Nmap\scripts\fingerprint-strings.nse
%Program Files%\Nmap\scripts\firewalk.nse
%Program Files%\Nmap\scripts\firewall-bypass.nse
%Program Files%\Nmap\scripts\flume-master-info.nse
%Program Files%\Nmap\scripts\fox-info.nse
%Program Files%\Nmap\scripts\freelancer-info.nse
%Program Files%\Nmap\scripts\ftp-anon.nse
%Program Files%\Nmap\scripts\ftp-bounce.nse
%Program Files%\Nmap\scripts\ftp-brute.nse
%Program Files%\Nmap\scripts\ftp-libopie.nse
%Program Files%\Nmap\scripts\ftp-proftpd-backdoor.nse
%Program Files%\Nmap\scripts\ftp-syst.nse
%Program Files%\Nmap\scripts\ftp-vsftpd-backdoor.nse
%Program Files%\Nmap\scripts\ftp-vuln-cve2010-4221.nse
%Program Files%\Nmap\scripts\ganglia-info.nse
%Program Files%\Nmap\scripts\giop-info.nse
%Program Files%\Nmap\scripts\gkrellm-info.nse
%Program Files%\Nmap\scripts\gopher-ls.nse
%Program Files%\Nmap\scripts\gpsd-info.nse
%Program Files%\Nmap\scripts\hadoop-datanode-info.nse
%Program Files%\Nmap\scripts\hadoop-jobtracker-info.nse
%Program Files%\Nmap\scripts\hadoop-namenode-info.nse
%Program Files%\Nmap\scripts\hadoop-secondary-namenode-info.nse
%Program Files%\Nmap\scripts\hadoop-tasktracker-info.nse
%Program Files%\Nmap\scripts\hbase-master-info.nse
%Program Files%\Nmap\scripts\hbase-region-info.nse
%Program Files%\Nmap\scripts\hddtemp-info.nse
%Program Files%\Nmap\scripts\hnap-info.nse
%Program Files%\Nmap\scripts\hostmap-bfk.nse
%Program Files%\Nmap\scripts\hostmap-crtsh.nse
%Program Files%\Nmap\scripts\hostmap-robtex.nse
%Program Files%\Nmap\scripts\http-adobe-coldfusion-apsa1301.nse
%Program Files%\Nmap\scripts\http-affiliate-id.nse
%Program Files%\Nmap\scripts\http-apache-negotiation.nse
%Program Files%\Nmap\scripts\http-apache-server-status.nse
%Program Files%\Nmap\scripts\http-aspnet-debug.nse
%Program Files%\Nmap\scripts\http-auth-finder.nse
%Program Files%\Nmap\scripts\http-auth.nse
%Program Files%\Nmap\scripts\http-avaya-ipoffice-users.nse
%Program Files%\Nmap\scripts\http-awstatstotals-exec.nse
%Program Files%\Nmap\scripts\http-axis2-dir-traversal.nse
%Program Files%\Nmap\scripts\http-backup-finder.nse
%Program Files%\Nmap\scripts\http-barracuda-dir-traversal.nse
%Program Files%\Nmap\scripts\http-bigip-cookie.nse
%Program Files%\Nmap\scripts\http-brute.nse
%Program Files%\Nmap\scripts\http-cakephp-version.nse
%Program Files%\Nmap\scripts\http-chrono.nse
%Program Files%\Nmap\scripts\http-cisco-anyconnect.nse
%Program Files%\Nmap\scripts\http-coldfusion-subzero.nse
%Program Files%\Nmap\scripts\http-comments-displayer.nse
%Program Files%\Nmap\scripts\http-config-backup.nse
%Program Files%\Nmap\scripts\http-cookie-flags.nse
%Program Files%\Nmap\scripts\http-cors.nse
%Program Files%\Nmap\scripts\http-cross-domain-policy.nse
%Program Files%\Nmap\scripts\http-csrf.nse
%Program Files%\Nmap\scripts\http-date.nse
%Program Files%\Nmap\scripts\http-default-accounts.nse
%Program Files%\Nmap\scripts\http-devframework.nse
%Program Files%\Nmap\scripts\http-dlink-backdoor.nse
%Program Files%\Nmap\scripts\http-dombased-xss.nse
%Program Files%\Nmap\scripts\http-domino-enum-passwords.nse
%Program Files%\Nmap\scripts\http-drupal-enum-users.nse
%Program Files%\Nmap\scripts\http-drupal-enum.nse
%Program Files%\Nmap\scripts\http-enum.nse
%Program Files%\Nmap\scripts\http-errors.nse
%Program Files%\Nmap\scripts\http-exif-spider.nse
%Program Files%\Nmap\scripts\http-favicon.nse
%Program Files%\Nmap\scripts\http-feed.nse
%Program Files%\Nmap\scripts\http-fetch.nse
%Program Files%\Nmap\scripts\http-fileupload-exploiter.nse
%Program Files%\Nmap\scripts\http-form-brute.nse
%Program Files%\Nmap\scripts\http-form-fuzzer.nse
%Program Files%\Nmap\scripts\http-frontpage-login.nse
%Program Files%\Nmap\scripts\http-generator.nse
%Program Files%\Nmap\scripts\http-git.nse
%Program Files%\Nmap\scripts\http-gitweb-projects-enum.nse
%Program Files%\Nmap\scripts\http-google-malware.nse
%Program Files%\Nmap\scripts\http-grep.nse
%Program Files%\Nmap\scripts\http-headers.nse
%Program Files%\Nmap\scripts\http-hp-ilo-info.nse
%Program Files%\Nmap\scripts\http-huawei-hg5xx-vuln.nse
%Program Files%\Nmap\scripts\http-icloud-findmyiphone.nse
%Program Files%\Nmap\scripts\http-icloud-sendmsg.nse
%Program Files%\Nmap\scripts\http-iis-short-name-brute.nse
%Program Files%\Nmap\scripts\http-iis-webdav-vuln.nse
%Program Files%\Nmap\scripts\http-internal-ip-disclosure.nse
%Program Files%\Nmap\scripts\http-joomla-brute.nse
%Program Files%\Nmap\scripts\http-jsonp-detection.nse
%Program Files%\Nmap\scripts\http-litespeed-sourcecode-download.nse
%Program Files%\Nmap\scripts\http-ls.nse
%Program Files%\Nmap\scripts\http-majordomo2-dir-traversal.nse
%Program Files%\Nmap\scripts\http-malware-host.nse
%Program Files%\Nmap\scripts\http-mcmp.nse
%Program Files%\Nmap\scripts\http-method-tamper.nse
%Program Files%\Nmap\scripts\http-methods.nse
%Program Files%\Nmap\scripts\http-mobileversion-checker.nse
%Program Files%\Nmap\scripts\http-ntlm-info.nse
%Program Files%\Nmap\scripts\http-open-proxy.nse
%Program Files%\Nmap\scripts\http-open-redirect.nse
%Program Files%\Nmap\scripts\http-passwd.nse
%Program Files%\Nmap\scripts\http-php-version.nse
%Program Files%\Nmap\scripts\http-phpmyadmin-dir-traversal.nse
%Program Files%\Nmap\scripts\http-phpself-xss.nse
%Program Files%\Nmap\scripts\http-proxy-brute.nse
%Program Files%\Nmap\scripts\http-put.nse
%Program Files%\Nmap\scripts\http-qnap-nas-info.nse
%Program Files%\Nmap\scripts\http-referer-checker.nse
%Program Files%\Nmap\scripts\http-rfi-spider.nse
%Program Files%\Nmap\scripts\http-robots.txt.nse
%Program Files%\Nmap\scripts\http-robtex-reverse-ip.nse
%Program Files%\Nmap\scripts\http-robtex-shared-ns.nse
%Program Files%\Nmap\scripts\http-sap-netweaver-leak.nse
%Program Files%\Nmap\scripts\http-security-headers.nse
%Program Files%\Nmap\scripts\http-server-header.nse
%Program Files%\Nmap\scripts\http-shellshock.nse
%Program Files%\Nmap\scripts\http-sitemap-generator.nse
%Program Files%\Nmap\scripts\http-slowloris-check.nse
%Program Files%\Nmap\scripts\http-slowloris.nse
%Program Files%\Nmap\scripts\http-sql-injection.nse
%Program Files%\Nmap\scripts\http-stored-xss.nse
%Program Files%\Nmap\scripts\http-svn-enum.nse
%Program Files%\Nmap\scripts\http-svn-info.nse
%Program Files%\Nmap\scripts\http-title.nse
%Program Files%\Nmap\scripts\http-tplink-dir-traversal.nse
%Program Files%\Nmap\scripts\http-trace.nse
%Program Files%\Nmap\scripts\http-traceroute.nse
%Program Files%\Nmap\scripts\http-trane-info.nse
%Program Files%\Nmap\scripts\http-unsafe-output-escaping.nse
%Program Files%\Nmap\scripts\http-useragent-tester.nse
%Program Files%\Nmap\scripts\http-userdir-enum.nse
%Program Files%\Nmap\scripts\http-vhosts.nse
%Program Files%\Nmap\scripts\http-virustotal.nse
%Program Files%\Nmap\scripts\http-vlcstreamer-ls.nse
%Program Files%\Nmap\scripts\http-vmware-path-vuln.nse
%Program Files%\Nmap\scripts\http-vuln-cve2006-3392.nse
%Program Files%\Nmap\scripts\http-vuln-cve2009-3960.nse
%Program Files%\Nmap\scripts\http-vuln-cve2010-0738.nse
%Program Files%\Nmap\scripts\http-vuln-cve2010-2861.nse
%Program Files%\Nmap\scripts\http-vuln-cve2011-3192.nse
%Program Files%\Nmap\scripts\http-vuln-cve2011-3368.nse
%Program Files%\Nmap\scripts\http-vuln-cve2012-1823.nse
%Program Files%\Nmap\scripts\http-vuln-cve2013-0156.nse
%Program Files%\Nmap\scripts\http-vuln-cve2013-6786.nse
%Program Files%\Nmap\scripts\http-vuln-cve2013-7091.nse
%Program Files%\Nmap\scripts\http-vuln-cve2014-2126.nse
%Program Files%\Nmap\scripts\http-vuln-cve2014-2127.nse
%Program Files%\Nmap\scripts\http-vuln-cve2014-2128.nse
%Program Files%\Nmap\scripts\http-vuln-cve2014-2129.nse
%Program Files%\Nmap\scripts\http-vuln-cve2014-3704.nse
%Program Files%\Nmap\scripts\http-vuln-cve2014-8877.nse
%Program Files%\Nmap\scripts\http-vuln-cve2015-1427.nse
%Program Files%\Nmap\scripts\http-vuln-cve2015-1635.nse
%Program Files%\Nmap\scripts\http-vuln-cve2017-1001000.nse
%Program Files%\Nmap\scripts\http-vuln-cve2017-5638.nse
%Program Files%\Nmap\scripts\http-vuln-cve2017-5689.nse
%Program Files%\Nmap\scripts\http-vuln-cve2017-8917.nse
%Program Files%\Nmap\scripts\http-vuln-misfortune-cookie.nse
%Program Files%\Nmap\scripts\http-vuln-wnr1000-creds.nse
%Program Files%\Nmap\scripts\http-waf-detect.nse
%Program Files%\Nmap\scripts\http-waf-fingerprint.nse
%Program Files%\Nmap\scripts\http-webdav-scan.nse
%Program Files%\Nmap\scripts\http-wordpress-brute.nse
%Program Files%\Nmap\scripts\http-wordpress-enum.nse
%Program Files%\Nmap\scripts\http-wordpress-users.nse
%Program Files%\Nmap\scripts\http-xssed.nse
%Program Files%\Nmap\scripts\https-redirect.nse
%Program Files%\Nmap\scripts\iax2-brute.nse
%Program Files%\Nmap\scripts\iax2-version.nse
%Program Files%\Nmap\scripts\icap-info.nse
%Program Files%\Nmap\scripts\iec-identify.nse
%Program Files%\Nmap\scripts\ike-version.nse
%Program Files%\Nmap\scripts\imap-brute.nse
%Program Files%\Nmap\scripts\imap-capabilities.nse
%Program Files%\Nmap\scripts\imap-ntlm-info.nse
%Program Files%\Nmap\scripts\impress-remote-discover.nse
%Program Files%\Nmap\scripts\informix-brute.nse
%Program Files%\Nmap\scripts\informix-query.nse
%Program Files%\Nmap\scripts\informix-tables.nse
%Program Files%\Nmap\scripts\ip-forwarding.nse
%Program Files%\Nmap\scripts\ip-geolocation-geoplugin.nse
%Program Files%\Nmap\scripts\ip-geolocation-ipinfodb.nse
%Program Files%\Nmap\scripts\ip-geolocation-map-bing.nse
%Program Files%\Nmap\scripts\ip-geolocation-map-google.nse
%Program Files%\Nmap\scripts\ip-geolocation-map-kml.nse
%Program Files%\Nmap\scripts\ip-geolocation-maxmind.nse
%Program Files%\Nmap\scripts\ip-https-discover.nse
%Program Files%\Nmap\scripts\ipidseq.nse
%Program Files%\Nmap\scripts\ipmi-brute.nse
%Program Files%\Nmap\scripts\ipmi-cipher-zero.nse
%Program Files%\Nmap\scripts\ipmi-version.nse
%Program Files%\Nmap\scripts\ipv6-multicast-mld-list.nse
%Program Files%\Nmap\scripts\ipv6-node-info.nse
%Program Files%\Nmap\scripts\ipv6-ra-flood.nse
%Program Files%\Nmap\scripts\irc-botnet-channels.nse
%Program Files%\Nmap\scripts\irc-brute.nse
%Program Files%\Nmap\scripts\irc-info.nse
%Program Files%\Nmap\scripts\irc-sasl-brute.nse
%Program Files%\Nmap\scripts\irc-unrealircd-backdoor.nse
%Program Files%\Nmap\scripts\iscsi-brute.nse
%Program Files%\Nmap\scripts\iscsi-info.nse
%Program Files%\Nmap\scripts\isns-info.nse
%Program Files%\Nmap\scripts\jdwp-exec.nse
%Program Files%\Nmap\scripts\jdwp-info.nse
%Program Files%\Nmap\scripts\jdwp-inject.nse
%Program Files%\Nmap\scripts\jdwp-version.nse
%Program Files%\Nmap\scripts\knx-gateway-discover.nse
%Program Files%\Nmap\scripts\knx-gateway-info.nse
%Program Files%\Nmap\scripts\krb5-enum-users.nse
%Program Files%\Nmap\scripts\ldap-brute.nse
%Program Files%\Nmap\scripts\ldap-novell-getpass.nse
%Program Files%\Nmap\scripts\ldap-rootdse.nse
%Program Files%\Nmap\scripts\ldap-search.nse
%Program Files%\Nmap\scripts\lexmark-config.nse
%Program Files%\Nmap\scripts\llmnr-resolve.nse
%Program Files%\Nmap\scripts\lltd-discovery.nse
%Program Files%\Nmap\scripts\lu-enum.nse
%Program Files%\Nmap\scripts\maxdb-info.nse
%Program Files%\Nmap\scripts\mcafee-epo-agent.nse
%Program Files%\Nmap\scripts\membase-brute.nse
%Program Files%\Nmap\scripts\membase-http-info.nse
%Program Files%\Nmap\scripts\memcached-info.nse
%Program Files%\Nmap\scripts\metasploit-info.nse
%Program Files%\Nmap\scripts\metasploit-msgrpc-brute.nse
%Program Files%\Nmap\scripts\metasploit-xmlrpc-brute.nse
%Program Files%\Nmap\scripts\mikrotik-routeros-brute.nse
%Program Files%\Nmap\scripts\mmouse-brute.nse
%Program Files%\Nmap\scripts\mmouse-exec.nse
%Program Files%\Nmap\scripts\modbus-discover.nse
%Program Files%\Nmap\scripts\mongodb-brute.nse
%Program Files%\Nmap\scripts\mongodb-databases.nse
%Program Files%\Nmap\scripts\mongodb-info.nse
%Program Files%\Nmap\scripts\mqtt-subscribe.nse
%Program Files%\Nmap\scripts\mrinfo.nse
%Program Files%\Nmap\scripts\ms-sql-brute.nse
%Program Files%\Nmap\scripts\ms-sql-config.nse
%Program Files%\Nmap\scripts\ms-sql-dac.nse
%Program Files%\Nmap\scripts\ms-sql-dump-hashes.nse
%Program Files%\Nmap\scripts\ms-sql-empty-password.nse
%Program Files%\Nmap\scripts\ms-sql-hasdbaccess.nse
%Program Files%\Nmap\scripts\ms-sql-info.nse
%Program Files%\Nmap\scripts\ms-sql-ntlm-info.nse
%Program Files%\Nmap\scripts\ms-sql-query.nse
%Program Files%\Nmap\scripts\ms-sql-tables.nse
%Program Files%\Nmap\scripts\ms-sql-xp-cmdshell.nse
%Program Files%\Nmap\scripts\msrpc-enum.nse
%Program Files%\Nmap\scripts\mtrace.nse
%Program Files%\Nmap\scripts\murmur-version.nse
%Program Files%\Nmap\scripts\mysql-audit.nse
%Program Files%\Nmap\scripts\mysql-brute.nse
%Program Files%\Nmap\scripts\mysql-databases.nse
%Program Files%\Nmap\scripts\mysql-dump-hashes.nse
%Program Files%\Nmap\scripts\mysql-empty-password.nse
%Program Files%\Nmap\scripts\mysql-enum.nse
%Program Files%\Nmap\scripts\mysql-info.nse
%Program Files%\Nmap\scripts\mysql-query.nse
%Program Files%\Nmap\scripts\mysql-users.nse
%Program Files%\Nmap\scripts\mysql-variables.nse
%Program Files%\Nmap\scripts\mysql-vuln-cve2012-2122.nse
%Program Files%\Nmap\scripts\nat-pmp-info.nse
%Program Files%\Nmap\scripts\nat-pmp-mapport.nse
%Program Files%\Nmap\scripts\nbd-info.nse
%Program Files%\Nmap\scripts\nbstat.nse
%Program Files%\Nmap\scripts\ncp-enum-users.nse
%Program Files%\Nmap\scripts\ncp-serverinfo.nse
%Program Files%\Nmap\scripts\ndmp-fs-info.nse
%Program Files%\Nmap\scripts\ndmp-version.nse
%Program Files%\Nmap\scripts\nessus-brute.nse
%Program Files%\Nmap\scripts\nessus-xmlrpc-brute.nse
%Program Files%\Nmap\scripts\netbus-auth-bypass.nse
%Program Files%\Nmap\scripts\netbus-brute.nse
%Program Files%\Nmap\scripts\netbus-info.nse
%Program Files%\Nmap\scripts\netbus-version.nse
%Program Files%\Nmap\scripts\nexpose-brute.nse
%Program Files%\Nmap\scripts\nfs-ls.nse
%Program Files%\Nmap\scripts\nfs-showmount.nse
%Program Files%\Nmap\scripts\nfs-statfs.nse
%Program Files%\Nmap\scripts\nje-node-brute.nse
%Program Files%\Nmap\scripts\nje-pass-brute.nse
%Program Files%\Nmap\scripts\nntp-ntlm-info.nse
%Program Files%\Nmap\scripts\nping-brute.nse
%Program Files%\Nmap\scripts\nrpe-enum.nse
%Program Files%\Nmap\scripts\ntp-info.nse
%Program Files%\Nmap\scripts\ntp-monlist.nse
%Program Files%\Nmap\scripts\omp2-brute.nse
%Program Files%\Nmap\scripts\omp2-enum-targets.nse
%Program Files%\Nmap\scripts\omron-info.nse
%Program Files%\Nmap\scripts\openlookup-info.nse
%Program Files%\Nmap\scripts\openvas-otp-brute.nse
%Program Files%\Nmap\scripts\openwebnet-discovery.nse
%Program Files%\Nmap\scripts\oracle-brute-stealth.nse
%Program Files%\Nmap\scripts\oracle-brute.nse
%Program Files%\Nmap\scripts\oracle-enum-users.nse
%Program Files%\Nmap\scripts\oracle-sid-brute.nse
%Program Files%\Nmap\scripts\oracle-tns-version.nse
%Program Files%\Nmap\scripts\ovs-agent-version.nse
%Program Files%\Nmap\scripts\p2p-conficker.nse
%Program Files%\Nmap\scripts\path-mtu.nse
%Program Files%\Nmap\scripts\pcanywhere-brute.nse
%Program Files%\Nmap\scripts\pcworx-info.nse
%Program Files%\Nmap\scripts\pgsql-brute.nse
%Program Files%\Nmap\scripts\pjl-ready-message.nse
%Program Files%\Nmap\scripts\pop3-brute.nse
%Program Files%\Nmap\scripts\pop3-capabilities.nse
%Program Files%\Nmap\scripts\pop3-ntlm-info.nse
%Program Files%\Nmap\scripts\pptp-version.nse
%Program Files%\Nmap\scripts\puppet-naivesigning.nse
%Program Files%\Nmap\scripts\qconn-exec.nse
%Program Files%\Nmap\scripts\qscan.nse
%Program Files%\Nmap\scripts\quake1-info.nse
%Program Files%\Nmap\scripts\quake3-info.nse
%Program Files%\Nmap\scripts\quake3-master-getservers.nse
%Program Files%\Nmap\scripts\rdp-enum-encryption.nse
%Program Files%\Nmap\scripts\rdp-ntlm-info.nse
%Program Files%\Nmap\scripts\rdp-vuln-ms12-020.nse
%Program Files%\Nmap\scripts\realvnc-auth-bypass.nse
%Program Files%\Nmap\scripts\redis-brute.nse
%Program Files%\Nmap\scripts\redis-info.nse
%Program Files%\Nmap\scripts\resolveall.nse
%Program Files%\Nmap\scripts\reverse-index.nse
%Program Files%\Nmap\scripts\rexec-brute.nse
%Program Files%\Nmap\scripts\rfc868-time.nse
%Program Files%\Nmap\scripts\riak-http-info.nse
%Program Files%\Nmap\scripts\rlogin-brute.nse
%Program Files%\Nmap\scripts\rmi-dumpregistry.nse
%Program Files%\Nmap\scripts\rmi-vuln-classloader.nse
%Program Files%\Nmap\scripts\rpc-grind.nse
%Program Files%\Nmap\scripts\rpcap-brute.nse
%Program Files%\Nmap\scripts\rpcap-info.nse
%Program Files%\Nmap\scripts\rpcinfo.nse
%Program Files%\Nmap\scripts\rsa-vuln-roca.nse
%Program Files%\Nmap\scripts\rsync-brute.nse
%Program Files%\Nmap\scripts\rsync-list-modules.nse
%Program Files%\Nmap\scripts\rtsp-methods.nse
%Program Files%\Nmap\scripts\rtsp-url-brute.nse
%Program Files%\Nmap\scripts\rusers.nse
%Program Files%\Nmap\scripts\s7-info.nse
%Program Files%\Nmap\scripts\samba-vuln-cve-2012-1182.nse
%Program Files%\Nmap\scripts\script.db
%Program Files%\Nmap\scripts\servicetags.nse
%Program Files%\Nmap\scripts\shodan-api.nse
%Program Files%\Nmap\scripts\sip-brute.nse
%Program Files%\Nmap\scripts\sip-call-spoof.nse
%Program Files%\Nmap\scripts\sip-enum-users.nse
%Program Files%\Nmap\scripts\sip-methods.nse
%Program Files%\Nmap\scripts\skypev2-version.nse
%Program Files%\Nmap\scripts\smb-brute.nse
%Program Files%\Nmap\scripts\smb-double-pulsar-backdoor.nse
%Program Files%\Nmap\scripts\smb-enum-domains.nse
%Program Files%\Nmap\scripts\smb-enum-groups.nse
%Program Files%\Nmap\scripts\smb-enum-processes.nse
%Program Files%\Nmap\scripts\smb-enum-services.nse
%Program Files%\Nmap\scripts\smb-enum-sessions.nse
%Program Files%\Nmap\scripts\smb-enum-shares.nse
%Program Files%\Nmap\scripts\smb-enum-users.nse
%Program Files%\Nmap\scripts\smb-flood.nse
%Program Files%\Nmap\scripts\smb-ls.nse
%Program Files%\Nmap\scripts\smb-mbenum.nse
%Program Files%\Nmap\scripts\smb-os-discovery.nse
%Program Files%\Nmap\scripts\smb-print-text.nse
%Program Files%\Nmap\scripts\smb-protocols.nse
%Program Files%\Nmap\scripts\smb-psexec.nse
%Program Files%\Nmap\scripts\smb-security-mode.nse
%Program Files%\Nmap\scripts\smb-server-stats.nse
%Program Files%\Nmap\scripts\smb-system-info.nse
%Program Files%\Nmap\scripts\smb-vuln-conficker.nse
%Program Files%\Nmap\scripts\smb-vuln-cve-2017-7494.nse
%Program Files%\Nmap\scripts\smb-vuln-cve2009-3103.nse
%Program Files%\Nmap\scripts\smb-vuln-ms06-025.nse
%Program Files%\Nmap\scripts\smb-vuln-ms07-029.nse
%Program Files%\Nmap\scripts\smb-vuln-ms08-067.nse
%Program Files%\Nmap\scripts\smb-vuln-ms10-054.nse
%Program Files%\Nmap\scripts\smb-vuln-ms10-061.nse
%Program Files%\Nmap\scripts\smb-vuln-ms17-010.nse
%Program Files%\Nmap\scripts\smb-vuln-regsvc-dos.nse
%Program Files%\Nmap\scripts\smb-vuln-webexec.nse
%Program Files%\Nmap\scripts\smb-webexec-exploit.nse
%Program Files%\Nmap\scripts\smb2-capabilities.nse
%Program Files%\Nmap\scripts\smb2-security-mode.nse
%Program Files%\Nmap\scripts\smb2-time.nse
%Program Files%\Nmap\scripts\smb2-vuln-uptime.nse
%Program Files%\Nmap\scripts\smtp-brute.nse
%Program Files%\Nmap\scripts\smtp-commands.nse
%Program Files%\Nmap\scripts\smtp-enum-users.nse
%Program Files%\Nmap\scripts\smtp-ntlm-info.nse
%Program Files%\Nmap\scripts\smtp-open-relay.nse
%Program Files%\Nmap\scripts\smtp-strangeport.nse
%Program Files%\Nmap\scripts\smtp-vuln-cve2010-4344.nse
%Program Files%\Nmap\scripts\smtp-vuln-cve2011-1720.nse
%Program Files%\Nmap\scripts\smtp-vuln-cve2011-1764.nse
%Program Files%\Nmap\scripts\sniffer-detect.nse
%Program Files%\Nmap\scripts\snmp-brute.nse
%Program Files%\Nmap\scripts\snmp-hh3c-logins.nse
%Program Files%\Nmap\scripts\snmp-info.nse
%Program Files%\Nmap\scripts\snmp-interfaces.nse
%Program Files%\Nmap\scripts\snmp-ios-config.nse
%Program Files%\Nmap\scripts\snmp-netstat.nse
%Program Files%\Nmap\scripts\snmp-processes.nse
%Program Files%\Nmap\scripts\snmp-sysdescr.nse
%Program Files%\Nmap\scripts\snmp-win32-services.nse
%Program Files%\Nmap\scripts\snmp-win32-shares.nse
%Program Files%\Nmap\scripts\snmp-win32-software.nse
%Program Files%\Nmap\scripts\snmp-win32-users.nse
%Program Files%\Nmap\scripts\socks-auth-info.nse
%Program Files%\Nmap\scripts\socks-brute.nse
%Program Files%\Nmap\scripts\socks-open-proxy.nse
%Program Files%\Nmap\scripts\ssh-auth-methods.nse
%Program Files%\Nmap\scripts\ssh-brute.nse
%Program Files%\Nmap\scripts\ssh-hostkey.nse
%Program Files%\Nmap\scripts\ssh-publickey-acceptance.nse
%Program Files%\Nmap\scripts\ssh-run.nse
%Program Files%\Nmap\scripts\ssh2-enum-algos.nse
%Program Files%\Nmap\scripts\sshv1.nse
%Program Files%\Nmap\scripts\ssl-ccs-injection.nse
%Program Files%\Nmap\scripts\ssl-cert-intaddr.nse
%Program Files%\Nmap\scripts\ssl-cert.nse
%Program Files%\Nmap\scripts\ssl-date.nse
%Program Files%\Nmap\scripts\ssl-dh-params.nse
%Program Files%\Nmap\scripts\ssl-enum-ciphers.nse
%Program Files%\Nmap\scripts\ssl-heartbleed.nse
%Program Files%\Nmap\scripts\ssl-known-key.nse
%Program Files%\Nmap\scripts\ssl-poodle.nse
%Program Files%\Nmap\scripts\sslv2-drown.nse
%Program Files%\Nmap\scripts\sslv2.nse
%Program Files%\Nmap\scripts\sstp-discover.nse
%Program Files%\Nmap\scripts\stun-info.nse
%Program Files%\Nmap\scripts\stun-version.nse
%Program Files%\Nmap\scripts\stuxnet-detect.nse
%Program Files%\Nmap\scripts\supermicro-ipmi-conf.nse
%Program Files%\Nmap\scripts\svn-brute.nse
%Program Files%\Nmap\scripts\targets-asn.nse
%Program Files%\Nmap\scripts\targets-ipv6-map4to6.nse
%Program Files%\Nmap\scripts\targets-ipv6-multicast-echo.nse
%Program Files%\Nmap\scripts\targets-ipv6-multicast-invalid-dst.nse
%Program Files%\Nmap\scripts\targets-ipv6-multicast-mld.nse
%Program Files%\Nmap\scripts\targets-ipv6-multicast-slaac.nse
%Program Files%\Nmap\scripts\targets-ipv6-wordlist.nse
%Program Files%\Nmap\scripts\targets-sniffer.nse
%Program Files%\Nmap\scripts\targets-traceroute.nse
%Program Files%\Nmap\scripts\targets-xml.nse
%Program Files%\Nmap\scripts\teamspeak2-version.nse
%Program Files%\Nmap\scripts\telnet-brute.nse
%Program Files%\Nmap\scripts\telnet-encryption.nse
%Program Files%\Nmap\scripts\telnet-ntlm-info.nse
%Program Files%\Nmap\scripts\tftp-enum.nse
%Program Files%\Nmap\scripts\tls-alpn.nse
%Program Files%\Nmap\scripts\tls-nextprotoneg.nse
%Program Files%\Nmap\scripts\tls-ticketbleed.nse
%Program Files%\Nmap\scripts\tn3270-screen.nse
%Program Files%\Nmap\scripts\tor-consensus-checker.nse
%Program Files%\Nmap\scripts\traceroute-geolocation.nse
%Program Files%\Nmap\scripts\tso-brute.nse
%Program Files%\Nmap\scripts\tso-enum.nse
%Program Files%\Nmap\scripts\ubiquiti-discovery.nse
%Program Files%\Nmap\scripts\unittest.nse
%Program Files%\Nmap\scripts\unusual-port.nse
%Program Files%\Nmap\scripts\upnp-info.nse
%Program Files%\Nmap\scripts\uptime-agent-info.nse
%Program Files%\Nmap\scripts\url-snarf.nse
%Program Files%\Nmap\scripts\ventrilo-info.nse
%Program Files%\Nmap\scripts\versant-info.nse
%Program Files%\Nmap\scripts\vmauthd-brute.nse
%Program Files%\Nmap\scripts\vmware-version.nse
%Program Files%\Nmap\scripts\vnc-brute.nse
%Program Files%\Nmap\scripts\vnc-info.nse
%Program Files%\Nmap\scripts\vnc-title.nse
%Program Files%\Nmap\scripts\voldemort-info.nse
%Program Files%\Nmap\scripts\vtam-enum.nse
%Program Files%\Nmap\scripts\vulners.nse
%Program Files%\Nmap\scripts\vuze-dht-info.nse
%Program Files%\Nmap\scripts\wdb-version.nse
%Program Files%\Nmap\scripts\weblogic-t3-info.nse
%Program Files%\Nmap\scripts\whois-domain.nse
%Program Files%\Nmap\scripts\whois-ip.nse
%Program Files%\Nmap\scripts\wsdd-discover.nse
%Program Files%\Nmap\scripts\x11-access.nse
%Program Files%\Nmap\scripts\xdmcp-discover.nse
%Program Files%\Nmap\scripts\xmlrpc-methods.nse
%Program Files%\Nmap\scripts\xmpp-brute.nse
%Program Files%\Nmap\scripts\xmpp-info.nse
%Program Files%\Nmap\nselib\afp.lua
%Program Files%\Nmap\nselib\ajp.lua
%Program Files%\Nmap\nselib\amqp.lua
%Program Files%\Nmap\nselib\anyconnect.lua
%Program Files%\Nmap\nselib\asn1.lua
%Program Files%\Nmap\nselib\base32.lua
%Program Files%\Nmap\nselib\base64.lua
%Program Files%\Nmap\nselib\bin.lua
%Program Files%\Nmap\nselib\bitcoin.lua
%Program Files%\Nmap\nselib\bits.lua
%Program Files%\Nmap\nselib\bittorrent.lua
%Program Files%\Nmap\nselib\bjnp.lua
%Program Files%\Nmap\nselib\brute.lua
%Program Files%\Nmap\nselib\cassandra.lua
%Program Files%\Nmap\nselib\citrixxml.lua
%Program Files%\Nmap\nselib\coap.lua
%Program Files%\Nmap\nselib\comm.lua
%Program Files%\Nmap\nselib\creds.lua
%Program Files%\Nmap\nselib\cvs.lua
%Program Files%\Nmap\nselib\datafiles.lua
%Program Files%\Nmap\nselib\datetime.lua
%Program Files%\Nmap\nselib\dhcp.lua
%Program Files%\Nmap\nselib\dhcp6.lua
%Program Files%\Nmap\nselib\dicom.lua
%Program Files%\Nmap\nselib\dns.lua
%Program Files%\Nmap\nselib\dnsbl.lua
%Program Files%\Nmap\nselib\dnssd.lua
%Program Files%\Nmap\nselib\drda.lua
%Program Files%\Nmap\nselib\eap.lua
%Program Files%\Nmap\nselib\eigrp.lua
%Program Files%\Nmap\nselib\formulas.lua
%Program Files%\Nmap\nselib\ftp.lua
%Program Files%\Nmap\nselib\geoip.lua
%Program Files%\Nmap\nselib\giop.lua
%Program Files%\Nmap\nselib\gps.lua
%Program Files%\Nmap\nselib\http.lua
%Program Files%\Nmap\nselib\httpspider.lua
%Program Files%\Nmap\nselib\iax2.lua
%Program Files%\Nmap\nselib\idna.lua
%Program Files%\Nmap\nselib\ike.lua
%Program Files%\Nmap\nselib\imap.lua
%Program Files%\Nmap\nselib\informix.lua
%Program Files%\Nmap\nselib\ipOps.lua
%Program Files%\Nmap\nselib\ipmi.lua
%Program Files%\Nmap\nselib\ipp.lua
%Program Files%\Nmap\nselib\irc.lua
%Program Files%\Nmap\nselib\iscsi.lua
%Program Files%\Nmap\nselib\isns.lua
%Program Files%\Nmap\nselib\jdwp.lua
%Program Files%\Nmap\nselib\json.lua
%Program Files%\Nmap\nselib\knx.lua
%Program Files%\Nmap\nselib\ldap.lua
%Program Files%\Nmap\nselib\lfs.luadoc
%Program Files%\Nmap\nselib\libssh2-utility.lua
%Program Files%\Nmap\nselib\libssh2.luadoc
%Program Files%\Nmap\nselib\listop.lua
%Program Files%\Nmap\nselib\lpeg-utility.lua
%Program Files%\Nmap\nselib\lpeg.luadoc
%Program Files%\Nmap\nselib\ls.lua
%Program Files%\Nmap\nselib\match.lua
%Program Files%\Nmap\nselib\membase.lua
%Program Files%\Nmap\nselib\mobileme.lua
%Program Files%\Nmap\nselib\mongodb.lua
%Program Files%\Nmap\nselib\mqtt.lua
%Program Files%\Nmap\nselib\msrpc.lua
%Program Files%\Nmap\nselib\msrpcperformance.lua
%Program Files%\Nmap\nselib\msrpctypes.lua
%Program Files%\Nmap\nselib\mssql.lua
%Program Files%\Nmap\nselib\multicast.lua
%Program Files%\Nmap\nselib\mysql.lua
%Program Files%\Nmap\nselib\natpmp.lua
%Program Files%\Nmap\nselib\nbd.lua
%Program Files%\Nmap\nselib\ncp.lua
%Program Files%\Nmap\nselib\ndmp.lua
%Program Files%\Nmap\nselib\netbios.lua
%Program Files%\Nmap\nselib\nmap.luadoc
%Program Files%\Nmap\nselib\nrpc.lua
%Program Files%\Nmap\nselib\nsedebug.lua
%Program Files%\Nmap\nselib\omp2.lua
%Program Files%\Nmap\nselib\oops.lua
%Program Files%\Nmap\nselib\openssl.luadoc
%Program Files%\Nmap\nselib\ospf.lua
%Program Files%\Nmap\nselib\outlib.lua
%Program Files%\Nmap\nselib\packet.lua
%Program Files%\Nmap\nselib\pcre.luadoc
%Program Files%\Nmap\nselib\pgsql.lua
%Program Files%\Nmap\nselib\pop3.lua
%Program Files%\Nmap\nselib\pppoe.lua
%Program Files%\Nmap\nselib\proxy.lua
%Program Files%\Nmap\nselib\punycode.lua
%Program Files%\Nmap\nselib\rand.lua
%Program Files%\Nmap\nselib\rdp.lua
%Program Files%\Nmap\nselib\re.lua
%Program Files%\Nmap\nselib\redis.lua
%Program Files%\Nmap\nselib\rmi.lua
%Program Files%\Nmap\nselib\rpc.lua
%Program Files%\Nmap\nselib\rpcap.lua
%Program Files%\Nmap\nselib\rsync.lua
%Program Files%\Nmap\nselib\rtsp.lua
%Program Files%\Nmap\nselib\sasl.lua
%Program Files%\Nmap\nselib\shortport.lua
%Program Files%\Nmap\nselib\sip.lua
%Program Files%\Nmap\nselib\slaxml.lua
%Program Files%\Nmap\nselib\smb.lua
%Program Files%\Nmap\nselib\smb2.lua
%Program Files%\Nmap\nselib\smbauth.lua
%Program Files%\Nmap\nselib\smtp.lua
%Program Files%\Nmap\nselib\snmp.lua
%Program Files%\Nmap\nselib\socks.lua
%Program Files%\Nmap\nselib\srvloc.lua
%Program Files%\Nmap\nselib\ssh1.lua
%Program Files%\Nmap\nselib\ssh2.lua
%Program Files%\Nmap\nselib\sslcert.lua
%Program Files%\Nmap\nselib\sslv2.lua
%Program Files%\Nmap\nselib\stdnse.lua
%Program Files%\Nmap\nselib\strbuf.lua
%Program Files%\Nmap\nselib\strict.lua
%Program Files%\Nmap\nselib\stringaux.lua
%Program Files%\Nmap\nselib\stun.lua
%Program Files%\Nmap\nselib\tab.lua
%Program Files%\Nmap\nselib\tableaux.lua
%Program Files%\Nmap\nselib\target.lua
%Program Files%\Nmap\nselib\tftp.lua
%Program Files%\Nmap\nselib\tls.lua
%Program Files%\Nmap\nselib\tn3270.lua
%Program Files%\Nmap\nselib\tns.lua
%Program Files%\Nmap\nselib\unicode.lua
%Program Files%\Nmap\nselib\unittest.lua
%Program Files%\Nmap\nselib\unpwdb.lua
%Program Files%\Nmap\nselib\upnp.lua
%Program Files%\Nmap\nselib\url.lua
%Program Files%\Nmap\nselib\versant.lua
%Program Files%\Nmap\nselib\vnc.lua
%Program Files%\Nmap\nselib\vulns.lua
%Program Files%\Nmap\nselib\vuzedht.lua
%Program Files%\Nmap\nselib\wsdd.lua
%Program Files%\Nmap\nselib\xdmcp.lua
%Program Files%\Nmap\nselib\xmpp.lua
%Program Files%\Nmap\nselib\zlib.luadoc
%Program Files%\Nmap\nselib\data\dns-srv-names
%Program Files%\Nmap\nselib\data\drupal-modules.lst
%Program Files%\Nmap\nselib\data\drupal-themes.lst
%Program Files%\Nmap\nselib\data\enterprise_numbers.txt
%Program Files%\Nmap\nselib\data\favicon-db
%Program Files%\Nmap\nselib\data\http-default-accounts-fingerprints.lua
%Program Files%\Nmap\nselib\data\http-devframework-fingerprints.lua
%Program Files%\Nmap\nselib\data\http-fingerprints.lua
%Program Files%\Nmap\nselib\data\http-folders.txt
%Program Files%\Nmap\nselib\data\http-sql-errors.lst
%Program Files%\Nmap\nselib\data\http-web-files-extensions.lst
%Program Files%\Nmap\nselib\data\idnaMappings.lua
%Program Files%\Nmap\nselib\data\ike-fingerprints.lua
%Program Files%\Nmap\nselib\data\mgroupnames.db
%Program Files%\Nmap\nselib\data\mysql-cis.audit
%Program Files%\Nmap\nselib\data\oracle-default-accounts.lst
%Program Files%\Nmap\nselib\data\oracle-sids
%Program Files%\Nmap\nselib\data\packetdecoders.lua
%Program Files%\Nmap\nselib\data\passwords.lst
%Program Files%\Nmap\nselib\data\pixel.gif
%Program Files%\Nmap\nselib\data\publickeydb
%Program Files%\Nmap\nselib\data\rtsp-urls.txt
%Program Files%\Nmap\nselib\data\snmpcommunities.lst
%Program Files%\Nmap\nselib\data\ssl-fingerprints
%Program Files%\Nmap\nselib\data\targets-ipv6-wordlist
%Program Files%\Nmap\nselib\data\tftplist.txt
%Program Files%\Nmap\nselib\data\usernames.lst
%Program Files%\Nmap\nselib\data\vhosts-default.lst
%Program Files%\Nmap\nselib\data\vhosts-full.lst
%Program Files%\Nmap\nselib\data\wp-plugins.lst
%Program Files%\Nmap\nselib\data\wp-themes.lst
%Program Files%\Nmap\nselib\data\jdwp-class\JDWPExecCmd.class
%Program Files%\Nmap\nselib\data\jdwp-class\JDWPExecCmd.java
%Program Files%\Nmap\nselib\data\jdwp-class\JDWPSystemInfo.class
%Program Files%\Nmap\nselib\data\jdwp-class\JDWPSystemInfo.java
%Program Files%\Nmap\nselib\data\jdwp-class\README.txt
%Program Files%\Nmap\nselib\data\psexec\README
%Program Files%\Nmap\nselib\data\psexec\backdoor.lua
%Program Files%\Nmap\nselib\data\psexec\default.lua
%Program Files%\Nmap\nselib\data\psexec\drives.lua
%Program Files%\Nmap\nselib\data\psexec\examples.lua
%Program Files%\Nmap\nselib\data\psexec\experimental.lua
%Program Files%\Nmap\nselib\data\psexec\network.lua
%Program Files%\Nmap\nselib\data\psexec\nmap_service.c
%Program Files%\Nmap\nselib\data\psexec\nmap_service.vcproj
%Program Files%\Nmap\nselib\data\psexec\pwdump.lua
%Program Files%\Nmap\icon1.ico
%User Temp%\nsy3AE0.tmp\vcredist_x86.exe
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\.ba1\wixstdba.dll
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\.ba1\thm.xml
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\.ba1\thm.wxl
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\.ba1\logo.png
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\.ba1\license.rtf
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\.ba1\BootstrapperApplicationData.xml
%User Temp%\dd_vcredist_x86_20210805142421.log
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\.be\vcredist_x86.exe
%System Root%\System Volume Information\SPP\snapshot-2
%System Root%\System Volume Information\SPP\OnlineMetadataCache\{8aa9ec51-7b51-4c31-a6ff-92d3d12684e4}_OnDiskSnapshotProp
%System Root%\System Volume Information\SPP\metadata-2
%ProgramData%\Package Cache\{ce085a78-074e-4823-8dc1-8a721b94b76d}\vcredist_x86.exe
%ProgramData%\Package Cache\{ce085a78-074e-4823-8dc1-8a721b94b76d}\state.rsm
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\vcRuntimeMinimum_x86
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\vcRuntimeAdditional_x86
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\cab54A5CABBE7274D8A22EB58060AAB7623
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\cabB3E1576D1FEFBB979E13B1A5379E0B16
%AppDataLocalLow%\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD
%AppDataLocalLow%\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD
%User Temp%\CabFFA3.tmp
%User Temp%\TarFFA4.tmp
%AppDataLocalLow%\Microsoft\CryptnetUrlCache\MetaData\F90F18257CBB4D84216AC1E1F3BB2C76
%AppDataLocalLow%\Microsoft\CryptnetUrlCache\Content\F90F18257CBB4D84216AC1E1F3BB2C76
%User Temp%\dd_vcredist_x86_20210805142421_0_vcRuntimeMinimum_x86.log
%User Temp%\dd_vcredist_x86_20210805142421_1_vcRuntimeAdditional_x86.log
%ProgramData%\Package Cache\{ce085a78-074e-4823-8dc1-8a721b94b76d}\state.rsm
%Program Files%\Nmap\Uninstall.exe
%User Temp%\nsy3AE0.tmp\npcap-1.00.exe
%User Temp%\nsjBD4.tmp
%User Temp%\nsjBD5.tmp\options.ini
%User Temp%\nsjBD5.tmp\final.ini
%User Temp%\nsjBD5.tmp\System.dll
%Program Files%\Npcap\install.log
%User Temp%\nsjBD5.tmp\modern-header.bmp
%User Temp%\nsjBD5.tmp\InstallOptions.dll
%User Temp%\nsjBD5.tmp\NPFInstall.exe
%User Temp%\nsjBD5.tmp\nsExec.dll
%User Temp%\nsjBD5.tmp\ns91B7.tmp
%Program Files%\Npcap\NPFInstall.log
%User Temp%\nsjBD5.tmp\nsA364.tmp
%User Temp%\nsjBD5.tmp\nsA96D.tmp
%User Temp%\nstAA34.tmp\UserInfo.dll
%User Temp%\nstAA34.tmp\ioSpecial.ini
%User Temp%\nstAA34.tmp\modern-wizard.bmp
%User Temp%\nstAA34.tmp\modern-header.bmp
%User Temp%\nsjBD5.tmp\nsB273.tmp
%Program Files%\Npcap\LICENSE
%Program Files%\Npcap\DiagReport.bat
%Program Files%\Npcap\DiagReport.ps1
%Program Files%\Npcap\FixInstall.bat
%Program Files%\Npcap\Uninstall.exe
%Program Files%\Npcap\NPFInstall.exe
%Program Files%\Npcap\npcap.sys
%Program Files%\Npcap\npcap.cat
%Program Files%\Npcap\npcap.inf
%Program Files%\Npcap\npcap_wfp.inf
%System%\wpcap.dll
%System%\Packet.dll
%System%\NpcapHelper.exe
%System%\WlanHelper.exe
%System%\Npcap\wpcap.dll
%System%\Npcap\Packet.dll
%System%\Npcap\NpcapHelper.exe
%System%\Npcap\WlanHelper.exe
%User Temp%\nsjBD5.tmp\Insecure-EV.cer
%User Temp%\nsjBD5.tmp\nsB60D.tmp
%User Temp%\nsjBD5.tmp\Insecure-EV-sha1.cer
%User Temp%\nsjBD5.tmp\nsB7E2.tmp
%User Temp%\nsjBD5.tmp\nsB8CD.tmp
%User Temp%\nsjBD5.tmp\nsBCC4.tmp
%User Temp%\nsjBD5.tmp\nsBDCE.tmp
%User Temp%\{7da11ba6-ed86-0809-41e4-5b6c8e96247d}\SETE169.tmp
%User Temp%\{7da11ba6-ed86-0809-41e4-5b6c8e96247d}\SETE428.tmp
%User Temp%\{7da11ba6-ed86-0809-41e4-5b6c8e96247d}\SETE725.tmp
%User Temp%\Cab6D.tmp
%User Temp%\Tar6E.tmp
%AppDataLocalLow%\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
%AppDataLocalLow%\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357
%User Temp%\Cab243.tmp
%User Temp%\Tar244.tmp
%User Temp%\Cab2B3.tmp
%User Temp%\Tar2B4.tmp
%User Temp%\Cab322.tmp
%User Temp%\Tar323.tmp
%Windows%\inf\oem12.PNF
%System%\drivers\SET54D.tmp
%User Temp%\nsjBD5.tmp\SimpleSC.dll
%Program Files%\Npcap\CheckStatus.bat
%User Temp%\nsjBD5.tmp\ns81C9.tmp
%User Temp%\nsy3AE0.tmp\nmap_performance.reg
%Program Files%\Nmap\nmap_performance.reg
%Program Files%\Nmap\zenmap.exe
%Program Files%\Nmap\ZENMAP_README
%Program Files%\Nmap\COPYING_HIGWIDGETS
%Program Files%\Nmap\python27.dll
%Program Files%\Nmap\py2exe\share\icons\hicolor\index.theme
%Program Files%\Nmap\py2exe\share\themes\Default\gtk-2.0-key\gtkrc
%Program Files%\Nmap\py2exe\share\themes\MS-Windows\gtk-2.0\gtkrc
%Program Files%\Nmap\share\zenmap\config\scan_profile.usp
%Program Files%\Nmap\share\zenmap\config\zenmap.conf
%Program Files%\Nmap\share\zenmap\config\zenmap_version
%Program Files%\Nmap\share\zenmap\docs\help.html
%Program Files%\Nmap\share\zenmap\locale\de\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\es\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\fr\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\hi\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\hr\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\it\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\ja\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\pl\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\pt_BR\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\ru\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\zh\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\misc\profile_editor.xml
%Program Files%\Nmap\share\zenmap\pixmaps\default_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\default_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\freebsd_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\freebsd_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\irix_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\irix_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\linux_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\linux_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\macosx_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\macosx_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\openbsd_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\openbsd_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\redhat_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\redhat_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\solaris_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\solaris_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\throbber.gif
%Program Files%\Nmap\share\zenmap\pixmaps\throbber.png
%Program Files%\Nmap\share\zenmap\pixmaps\ubuntu_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\ubuntu_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\unknown_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\unknown_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_1_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_1_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_2_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_2_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_3_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_3_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_4_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_4_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_5_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_5_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\win_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\win_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\zenmap.png
%Program Files%\Nmap\share\zenmap\pixmaps\radialnet\border.png
%Program Files%\Nmap\share\zenmap\pixmaps\radialnet\firewall.png
%Program Files%\Nmap\share\zenmap\pixmaps\radialnet\logo.png
%Program Files%\Nmap\share\zenmap\pixmaps\radialnet\padlock.png
%Program Files%\Nmap\share\zenmap\pixmaps\radialnet\router.png
%Program Files%\Nmap\share\zenmap\pixmaps\radialnet\switch.png
%Program Files%\Nmap\share\zenmap\pixmaps\radialnet\wireless.png
%Program Files%\Nmap\py2exe\CRYPT32.dll
%Program Files%\Nmap\py2exe\_ctypes.pyd
%Program Files%\Nmap\py2exe\_hashlib.pyd
%Program Files%\Nmap\py2exe\_socket.pyd
%Program Files%\Nmap\py2exe\_sqlite3.pyd
%Program Files%\Nmap\py2exe\_ssl.pyd
%Program Files%\Nmap\py2exe\atk.pyd
%Program Files%\Nmap\py2exe\bz2.pyd
%Program Files%\Nmap\py2exe\cairo._cairo.pyd
%Program Files%\Nmap\py2exe\freetype6.dll
%Program Files%\Nmap\py2exe\gio._gio.pyd
%Program Files%\Nmap\py2exe\glib._glib.pyd
%Program Files%\Nmap\py2exe\gobject._gobject.pyd
%Program Files%\Nmap\py2exe\gtk._gtk.pyd
%Program Files%\Nmap\py2exe\intl.dll
%Program Files%\Nmap\py2exe\libasprintf-0.dll
%Program Files%\Nmap\py2exe\libatk-1.0-0.dll
%Program Files%\Nmap\py2exe\libcairo-2.dll
%Program Files%\Nmap\py2exe\libcairo-gobject-2.dll
%Program Files%\Nmap\py2exe\libcairo-script-interpreter-2.dll
%Program Files%\Nmap\py2exe\libcroco-0.6-3.dll
%Program Files%\Nmap\py2exe\libexpat-1.dll
%Program Files%\Nmap\py2exe\libfontconfig-1.dll
%Program Files%\Nmap\py2exe\libgailutil-18.dll
%Program Files%\Nmap\py2exe\libgcc_s_dw2-1.dll
%Program Files%\Nmap\py2exe\libgdk-win32-2.0-0.dll
%Program Files%\Nmap\py2exe\libgdk_pixbuf-2.0-0.dll
%Program Files%\Nmap\py2exe\libgio-2.0-0.dll
%Program Files%\Nmap\py2exe\libglade-2.0-0.dll
%Program Files%\Nmap\py2exe\libglib-2.0-0.dll
%Program Files%\Nmap\py2exe\libgmodule-2.0-0.dll
%Program Files%\Nmap\py2exe\libgobject-2.0-0.dll
%Program Files%\Nmap\py2exe\libgsf-1-114.dll
%Program Files%\Nmap\py2exe\libgsf-win32-1-114.dll
%Program Files%\Nmap\py2exe\libgthread-2.0-0.dll
%Program Files%\Nmap\py2exe\libgtk-win32-2.0-0.dll
%Program Files%\Nmap\py2exe\libpango-1.0-0.dll
%Program Files%\Nmap\py2exe\libpangocairo-1.0-0.dll
%Program Files%\Nmap\py2exe\libpangoft2-1.0-0.dll
%Program Files%\Nmap\py2exe\libpangowin32-1.0-0.dll
%Program Files%\Nmap\py2exe\libpng14-14.dll
%Program Files%\Nmap\py2exe\library.zip
%Program Files%\Nmap\py2exe\librsvg-2-2.dll
%Program Files%\Nmap\py2exe\libxml2-2.dll
%Program Files%\Nmap\py2exe\pango.pyd
%Program Files%\Nmap\py2exe\pangocairo.pyd
%Program Files%\Nmap\py2exe\pyexpat.pyd
%Program Files%\Nmap\py2exe\select.pyd
%Program Files%\Nmap\py2exe\sqlite3.dll
%Program Files%\Nmap\py2exe\unicodedata.pyd
%Program Files%\Nmap\py2exe\zlib1.dll
%Program Files%\Nmap\py2exe\etc\bash_completion.d\gdbus-bash-completion.sh
%Program Files%\Nmap\py2exe\etc\bash_completion.d\gsettings-bash-completion.sh
%Program Files%\Nmap\py2exe\etc\fonts\fonts.conf
%Program Files%\Nmap\py2exe\etc\fonts\fonts.dtd
%Program Files%\Nmap\py2exe\etc\gtk-2.0\gtk.immodules
%Program Files%\Nmap\py2exe\etc\gtk-2.0\gtkrc
%Program Files%\Nmap\py2exe\etc\gtk-2.0\im-multipress.conf
%Program Files%\Nmap\py2exe\etc\pango\pango.aliases
%Program Files%\Nmap\py2exe\etc\pango\pango.modules
%Program Files%\Nmap\py2exe\lib\gtk-2.0\2.10.0\engines\libpixmap.dll
%Program Files%\Nmap\py2exe\lib\gtk-2.0\2.10.0\engines\libsvg.dll
%Program Files%\Nmap\py2exe\lib\gtk-2.0\2.10.0\engines\libwimp.dll
%Program Files%\Nmap\py2exe\lib\gtk-2.0\include\gdkconfig.h
%Program Files%\Nmap\py2exe\lib\gtk-2.0\modules\libgail.dll
%Program Files%\Nmap\py2exe\share\icons\hicolor\index.theme
%Program Files%\Nmap\py2exe\share\themes\Default\gtk-2.0-key\gtkrc
%Program Files%\Nmap\py2exe\share\themes\MS-Windows\gtk-2.0\gtkrc
%User Temp%\nsy3AE0.tmp\vcredist2008_x86.exe
%System Root%\{Random Characters}\vc_red.cab
%System Root%\{Random Characters}\vc_red.msi
%System Root%\{Random Characters}\install.exe
%System Root%\{Random Characters}\install.res.{Random 4 Characters}.dll
%System Root%\{Random Characters}\eula.{Random 4 Characters}.txt
%System Root%\{Random Characters}\globdata.ini
%System Root%\{Random Characters}\install.ini
%System Root%\{Random Characters}\vcredist.bmp
%System Root%\{Random Characters}\$shtdwn$.req
%User Temp%\dd_vcredistUI7A66.txt
%User Temp%\dd_vcredistMSI7A66.txt
%User Temp%\VWL201D.tmp
%Program Files%\Nmap\ndiff.exe
%Program Files%\Nmap\NDIFF_README
%Program Files%\Nmap\python27.dll
%Program Files%\Nmap\py2exe\CRYPT32.dll
%Program Files%\Nmap\py2exe\_ctypes.pyd
%Program Files%\Nmap\py2exe\_hashlib.pyd
%Program Files%\Nmap\py2exe\_socket.pyd
%Program Files%\Nmap\py2exe\_sqlite3.pyd
%Program Files%\Nmap\py2exe\_ssl.pyd
%Program Files%\Nmap\py2exe\atk.pyd
%Program Files%\Nmap\py2exe\bz2.pyd
%Program Files%\Nmap\py2exe\cairo._cairo.pyd
%Program Files%\Nmap\py2exe\freetype6.dll
%Program Files%\Nmap\py2exe\gio._gio.pyd
%Program Files%\Nmap\py2exe\glib._glib.pyd
%Program Files%\Nmap\py2exe\gobject._gobject.pyd
%Program Files%\Nmap\py2exe\gtk._gtk.pyd
%Program Files%\Nmap\py2exe\intl.dll
%Program Files%\Nmap\py2exe\libasprintf-0.dll
%Program Files%\Nmap\py2exe\libatk-1.0-0.dll
%Program Files%\Nmap\py2exe\libcairo-2.dll
%Program Files%\Nmap\py2exe\libcairo-gobject-2.dll
%Program Files%\Nmap\py2exe\libcairo-script-interpreter-2.dll
%Program Files%\Nmap\py2exe\libcroco-0.6-3.dll
%Program Files%\Nmap\py2exe\libexpat-1.dll
%Program Files%\Nmap\py2exe\libfontconfig-1.dll
%Program Files%\Nmap\py2exe\libgailutil-18.dll
%Program Files%\Nmap\py2exe\libgcc_s_dw2-1.dll
%Program Files%\Nmap\py2exe\libgdk-win32-2.0-0.dll
%Program Files%\Nmap\py2exe\libgdk_pixbuf-2.0-0.dll
%Program Files%\Nmap\py2exe\libgio-2.0-0.dll
%Program Files%\Nmap\py2exe\libglade-2.0-0.dll
%Program Files%\Nmap\py2exe\libglib-2.0-0.dll
%Program Files%\Nmap\py2exe\libgmodule-2.0-0.dll
%Program Files%\Nmap\py2exe\libgobject-2.0-0.dll
%Program Files%\Nmap\py2exe\libgsf-1-114.dll
%Program Files%\Nmap\py2exe\libgsf-win32-1-114.dll
%Program Files%\Nmap\py2exe\libgthread-2.0-0.dll
%Program Files%\Nmap\py2exe\libgtk-win32-2.0-0.dll
%Program Files%\Nmap\py2exe\libpango-1.0-0.dll
%Program Files%\Nmap\py2exe\libpangocairo-1.0-0.dll
%Program Files%\Nmap\py2exe\libpangoft2-1.0-0.dll
%Program Files%\Nmap\py2exe\libpangowin32-1.0-0.dll
%Program Files%\Nmap\py2exe\libpng14-14.dll
%Program Files%\Nmap\py2exe\library.zip
%Program Files%\Nmap\py2exe\librsvg-2-2.dll
%Program Files%\Nmap\py2exe\libxml2-2.dll
%Program Files%\Nmap\py2exe\pango.pyd
%Program Files%\Nmap\py2exe\pangocairo.pyd
%Program Files%\Nmap\py2exe\pyexpat.pyd
%Program Files%\Nmap\py2exe\select.pyd
%Program Files%\Nmap\py2exe\sqlite3.dll
%Program Files%\Nmap\py2exe\unicodedata.pyd
%Program Files%\Nmap\py2exe\zlib1.dll
%Program Files%\Nmap\py2exe\etc\bash_completion.d\gdbus-bash-completion.sh
%Program Files%\Nmap\py2exe\etc\bash_completion.d\gsettings-bash-completion.sh
%Program Files%\Nmap\py2exe\etc\fonts\fonts.conf
%Program Files%\Nmap\py2exe\etc\fonts\fonts.dtd
%Program Files%\Nmap\py2exe\etc\gtk-2.0\gtk.immodules
%Program Files%\Nmap\py2exe\etc\gtk-2.0\gtkrc
%Program Files%\Nmap\py2exe\etc\gtk-2.0\im-multipress.conf
%Program Files%\Nmap\py2exe\etc\pango\pango.aliases
%Program Files%\Nmap\py2exe\etc\pango\pango.modules
%Program Files%\Nmap\py2exe\lib\gtk-2.0\2.10.0\engines\libpixmap.dll
%Program Files%\Nmap\py2exe\lib\gtk-2.0\2.10.0\engines\libsvg.dll
%Program Files%\Nmap\py2exe\lib\gtk-2.0\2.10.0\engines\libwimp.dll
%Program Files%\Nmap\py2exe\lib\gtk-2.0\include\gdkconfig.h
%Program Files%\Nmap\py2exe\lib\gtk-2.0\modules\libgail.dll
%Program Files%\Nmap\py2exe\share\icons\hicolor\index.theme
%Program Files%\Nmap\py2exe\share\themes\Default\gtk-2.0-key\gtkrc
%Program Files%\Nmap\py2exe\share\themes\MS-Windows\gtk-2.0\gtkrc
%Program Files%\Nmap\ncat.exe
%Program Files%\Nmap\ca-bundle.crt
%Program Files%\Nmap\nping.exe
%User Temp%\nsy3AE0.tmp\InstallOptions.dll
%Desktop%\Nmap - Zenmap GUI.lnk
%Programs%\Nmap\Nmap - Zenmap GUI.lnk

To manually delete a malware/grayware file from an affected system:

•For Windows 7, Windows Server 2008 (R2), Windows 8, Windows 8.1, Windows 10, and Windows Server 2012 (R2):

Open a Windows Explorer window.
- For Windows 7 and Server 2008 (R2) users, click Start>Computer.
- For Windows 8, 8.1, 10, and Server 2012 (R2) users, right-click on the lower-left corner of the screen,then click File Explorer.
In the Search Computer/This PC input box, type:

%User Temp%\nsi3ACF.tmp
%User Temp%\nsy3AE0.tmp\shortcuts.ini
%User Temp%\nsy3AE0.tmp\final.ini
%Program Files%\Nmap\CHANGELOG
%Program Files%\Nmap\LICENSE
%Program Files%\Nmap\nmap-mac-prefixes
%Program Files%\Nmap\nmap-os-db
%Program Files%\Nmap\nmap-payloads
%Program Files%\Nmap\nmap-protocols
%Program Files%\Nmap\nmap-rpc
%Program Files%\Nmap\nmap-service-probes
%Program Files%\Nmap\nmap-services
%Program Files%\Nmap\nmap.exe
%Program Files%\Nmap\nse_main.lua
%Program Files%\Nmap\nmap.xsl
%Program Files%\Nmap\nmap_performance.reg
%Program Files%\Nmap\README-WIN32
%Program Files%\Nmap\3rd-party-licenses.txt
%Program Files%\Nmap\licenses\BSD-modified.txt
%Program Files%\Nmap\licenses\BSD-simplified
%Program Files%\Nmap\licenses\LGPL-2
%Program Files%\Nmap\licenses\LGPL-2.1
%Program Files%\Nmap\licenses\LIBLINEAR-license.txt
%Program Files%\Nmap\licenses\Libdnet-license.txt
%Program Files%\Nmap\licenses\Lua-license.txt
%Program Files%\Nmap\licenses\MIT
%Program Files%\Nmap\licenses\MPL-1.1
%Program Files%\Nmap\licenses\OpenSSL-license.txt
%Program Files%\Nmap\licenses\PCRE-license.txt
%Program Files%\Nmap\licenses\WinPcap-license.txt
%Program Files%\Nmap\licenses\zlib-license.txt
%Program Files%\Nmap\libssh2.dll
%Program Files%\Nmap\zlibwapi.dll
%Program Files%\Nmap\libcrypto-1_1.dll
%Program Files%\Nmap\libssl-1_1.dll
%Program Files%\Nmap\scripts\acarsd-info.nse
%Program Files%\Nmap\scripts\address-info.nse
%Program Files%\Nmap\scripts\afp-brute.nse
%Program Files%\Nmap\scripts\afp-ls.nse
%Program Files%\Nmap\scripts\afp-path-vuln.nse
%Program Files%\Nmap\scripts\afp-serverinfo.nse
%Program Files%\Nmap\scripts\afp-showmount.nse
%Program Files%\Nmap\scripts\ajp-auth.nse
%Program Files%\Nmap\scripts\ajp-brute.nse
%Program Files%\Nmap\scripts\ajp-headers.nse
%Program Files%\Nmap\scripts\ajp-methods.nse
%Program Files%\Nmap\scripts\ajp-request.nse
%Program Files%\Nmap\scripts\allseeingeye-info.nse
%Program Files%\Nmap\scripts\amqp-info.nse
%Program Files%\Nmap\scripts\asn-query.nse
%Program Files%\Nmap\scripts\auth-owners.nse
%Program Files%\Nmap\scripts\auth-spoof.nse
%Program Files%\Nmap\scripts\backorifice-brute.nse
%Program Files%\Nmap\scripts\backorifice-info.nse
%Program Files%\Nmap\scripts\bacnet-info.nse
%Program Files%\Nmap\scripts\banner.nse
%Program Files%\Nmap\scripts\bitcoin-getaddr.nse
%Program Files%\Nmap\scripts\bitcoin-info.nse
%Program Files%\Nmap\scripts\bitcoinrpc-info.nse
%Program Files%\Nmap\scripts\bittorrent-discovery.nse
%Program Files%\Nmap\scripts\bjnp-discover.nse
%Program Files%\Nmap\scripts\broadcast-ataoe-discover.nse
%Program Files%\Nmap\scripts\broadcast-avahi-dos.nse
%Program Files%\Nmap\scripts\broadcast-bjnp-discover.nse
%Program Files%\Nmap\scripts\broadcast-db2-discover.nse
%Program Files%\Nmap\scripts\broadcast-dhcp-discover.nse
%Program Files%\Nmap\scripts\broadcast-dhcp6-discover.nse
%Program Files%\Nmap\scripts\broadcast-dns-service-discovery.nse
%Program Files%\Nmap\scripts\broadcast-dropbox-listener.nse
%Program Files%\Nmap\scripts\broadcast-eigrp-discovery.nse
%Program Files%\Nmap\scripts\broadcast-hid-discoveryd.nse
%Program Files%\Nmap\scripts\broadcast-igmp-discovery.nse
%Program Files%\Nmap\scripts\broadcast-jenkins-discover.nse
%Program Files%\Nmap\scripts\broadcast-listener.nse
%Program Files%\Nmap\scripts\broadcast-ms-sql-discover.nse
%Program Files%\Nmap\scripts\broadcast-netbios-master-browser.nse
%Program Files%\Nmap\scripts\broadcast-networker-discover.nse
%Program Files%\Nmap\scripts\broadcast-novell-locate.nse
%Program Files%\Nmap\scripts\broadcast-ospf2-discover.nse
%Program Files%\Nmap\scripts\broadcast-pc-anywhere.nse
%Program Files%\Nmap\scripts\broadcast-pc-duo.nse
%Program Files%\Nmap\scripts\broadcast-pim-discovery.nse
%Program Files%\Nmap\scripts\broadcast-ping.nse
%Program Files%\Nmap\scripts\broadcast-pppoe-discover.nse
%Program Files%\Nmap\scripts\broadcast-rip-discover.nse
%Program Files%\Nmap\scripts\broadcast-ripng-discover.nse
%Program Files%\Nmap\scripts\broadcast-sonicwall-discover.nse
%Program Files%\Nmap\scripts\broadcast-sybase-asa-discover.nse
%Program Files%\Nmap\scripts\broadcast-tellstick-discover.nse
%Program Files%\Nmap\scripts\broadcast-upnp-info.nse
%Program Files%\Nmap\scripts\broadcast-versant-locate.nse
%Program Files%\Nmap\scripts\broadcast-wake-on-lan.nse
%Program Files%\Nmap\scripts\broadcast-wpad-discover.nse
%Program Files%\Nmap\scripts\broadcast-wsdd-discover.nse
%Program Files%\Nmap\scripts\broadcast-xdmcp-discover.nse
%Program Files%\Nmap\scripts\cassandra-brute.nse
%Program Files%\Nmap\scripts\cassandra-info.nse
%Program Files%\Nmap\scripts\cccam-version.nse
%Program Files%\Nmap\scripts\cics-enum.nse
%Program Files%\Nmap\scripts\cics-info.nse
%Program Files%\Nmap\scripts\cics-user-brute.nse
%Program Files%\Nmap\scripts\cics-user-enum.nse
%Program Files%\Nmap\scripts\citrix-brute-xml.nse
%Program Files%\Nmap\scripts\citrix-enum-apps-xml.nse
%Program Files%\Nmap\scripts\citrix-enum-apps.nse
%Program Files%\Nmap\scripts\citrix-enum-servers-xml.nse
%Program Files%\Nmap\scripts\citrix-enum-servers.nse
%Program Files%\Nmap\scripts\clamav-exec.nse
%Program Files%\Nmap\scripts\clock-skew.nse
%Program Files%\Nmap\scripts\coap-resources.nse
%Program Files%\Nmap\scripts\couchdb-databases.nse
%Program Files%\Nmap\scripts\couchdb-stats.nse
%Program Files%\Nmap\scripts\creds-summary.nse
%Program Files%\Nmap\scripts\cups-info.nse
%Program Files%\Nmap\scripts\cups-queue-info.nse
%Program Files%\Nmap\scripts\cvs-brute-repository.nse
%Program Files%\Nmap\scripts\cvs-brute.nse
%Program Files%\Nmap\scripts\daap-get-library.nse
%Program Files%\Nmap\scripts\daytime.nse
%Program Files%\Nmap\scripts\db2-das-info.nse
%Program Files%\Nmap\scripts\deluge-rpc-brute.nse
%Program Files%\Nmap\scripts\dhcp-discover.nse
%Program Files%\Nmap\scripts\dicom-brute.nse
%Program Files%\Nmap\scripts\dicom-ping.nse
%Program Files%\Nmap\scripts\dict-info.nse
%Program Files%\Nmap\scripts\distcc-cve2004-2687.nse
%Program Files%\Nmap\scripts\dns-blacklist.nse
%Program Files%\Nmap\scripts\dns-brute.nse
%Program Files%\Nmap\scripts\dns-cache-snoop.nse
%Program Files%\Nmap\scripts\dns-check-zone.nse
%Program Files%\Nmap\scripts\dns-client-subnet-scan.nse
%Program Files%\Nmap\scripts\dns-fuzz.nse
%Program Files%\Nmap\scripts\dns-ip6-arpa-scan.nse
%Program Files%\Nmap\scripts\dns-nsec-enum.nse
%Program Files%\Nmap\scripts\dns-nsec3-enum.nse
%Program Files%\Nmap\scripts\dns-nsid.nse
%Program Files%\Nmap\scripts\dns-random-srcport.nse
%Program Files%\Nmap\scripts\dns-random-txid.nse
%Program Files%\Nmap\scripts\dns-recursion.nse
%Program Files%\Nmap\scripts\dns-service-discovery.nse
%Program Files%\Nmap\scripts\dns-srv-enum.nse
%Program Files%\Nmap\scripts\dns-update.nse
%Program Files%\Nmap\scripts\dns-zeustracker.nse
%Program Files%\Nmap\scripts\dns-zone-transfer.nse
%Program Files%\Nmap\scripts\docker-version.nse
%Program Files%\Nmap\scripts\domcon-brute.nse
%Program Files%\Nmap\scripts\domcon-cmd.nse
%Program Files%\Nmap\scripts\domino-enum-users.nse
%Program Files%\Nmap\scripts\dpap-brute.nse
%Program Files%\Nmap\scripts\drda-brute.nse
%Program Files%\Nmap\scripts\drda-info.nse
%Program Files%\Nmap\scripts\duplicates.nse
%Program Files%\Nmap\scripts\eap-info.nse
%Program Files%\Nmap\scripts\enip-info.nse
%Program Files%\Nmap\scripts\epmd-info.nse
%Program Files%\Nmap\scripts\eppc-enum-processes.nse
%Program Files%\Nmap\scripts\fcrdns.nse
%Program Files%\Nmap\scripts\finger.nse
%Program Files%\Nmap\scripts\fingerprint-strings.nse
%Program Files%\Nmap\scripts\firewalk.nse
%Program Files%\Nmap\scripts\firewall-bypass.nse
%Program Files%\Nmap\scripts\flume-master-info.nse
%Program Files%\Nmap\scripts\fox-info.nse
%Program Files%\Nmap\scripts\freelancer-info.nse
%Program Files%\Nmap\scripts\ftp-anon.nse
%Program Files%\Nmap\scripts\ftp-bounce.nse
%Program Files%\Nmap\scripts\ftp-brute.nse
%Program Files%\Nmap\scripts\ftp-libopie.nse
%Program Files%\Nmap\scripts\ftp-proftpd-backdoor.nse
%Program Files%\Nmap\scripts\ftp-syst.nse
%Program Files%\Nmap\scripts\ftp-vsftpd-backdoor.nse
%Program Files%\Nmap\scripts\ftp-vuln-cve2010-4221.nse
%Program Files%\Nmap\scripts\ganglia-info.nse
%Program Files%\Nmap\scripts\giop-info.nse
%Program Files%\Nmap\scripts\gkrellm-info.nse
%Program Files%\Nmap\scripts\gopher-ls.nse
%Program Files%\Nmap\scripts\gpsd-info.nse
%Program Files%\Nmap\scripts\hadoop-datanode-info.nse
%Program Files%\Nmap\scripts\hadoop-jobtracker-info.nse
%Program Files%\Nmap\scripts\hadoop-namenode-info.nse
%Program Files%\Nmap\scripts\hadoop-secondary-namenode-info.nse
%Program Files%\Nmap\scripts\hadoop-tasktracker-info.nse
%Program Files%\Nmap\scripts\hbase-master-info.nse
%Program Files%\Nmap\scripts\hbase-region-info.nse
%Program Files%\Nmap\scripts\hddtemp-info.nse
%Program Files%\Nmap\scripts\hnap-info.nse
%Program Files%\Nmap\scripts\hostmap-bfk.nse
%Program Files%\Nmap\scripts\hostmap-crtsh.nse
%Program Files%\Nmap\scripts\hostmap-robtex.nse
%Program Files%\Nmap\scripts\http-adobe-coldfusion-apsa1301.nse
%Program Files%\Nmap\scripts\http-affiliate-id.nse
%Program Files%\Nmap\scripts\http-apache-negotiation.nse
%Program Files%\Nmap\scripts\http-apache-server-status.nse
%Program Files%\Nmap\scripts\http-aspnet-debug.nse
%Program Files%\Nmap\scripts\http-auth-finder.nse
%Program Files%\Nmap\scripts\http-auth.nse
%Program Files%\Nmap\scripts\http-avaya-ipoffice-users.nse
%Program Files%\Nmap\scripts\http-awstatstotals-exec.nse
%Program Files%\Nmap\scripts\http-axis2-dir-traversal.nse
%Program Files%\Nmap\scripts\http-backup-finder.nse
%Program Files%\Nmap\scripts\http-barracuda-dir-traversal.nse
%Program Files%\Nmap\scripts\http-bigip-cookie.nse
%Program Files%\Nmap\scripts\http-brute.nse
%Program Files%\Nmap\scripts\http-cakephp-version.nse
%Program Files%\Nmap\scripts\http-chrono.nse
%Program Files%\Nmap\scripts\http-cisco-anyconnect.nse
%Program Files%\Nmap\scripts\http-coldfusion-subzero.nse
%Program Files%\Nmap\scripts\http-comments-displayer.nse
%Program Files%\Nmap\scripts\http-config-backup.nse
%Program Files%\Nmap\scripts\http-cookie-flags.nse
%Program Files%\Nmap\scripts\http-cors.nse
%Program Files%\Nmap\scripts\http-cross-domain-policy.nse
%Program Files%\Nmap\scripts\http-csrf.nse
%Program Files%\Nmap\scripts\http-date.nse
%Program Files%\Nmap\scripts\http-default-accounts.nse
%Program Files%\Nmap\scripts\http-devframework.nse
%Program Files%\Nmap\scripts\http-dlink-backdoor.nse
%Program Files%\Nmap\scripts\http-dombased-xss.nse
%Program Files%\Nmap\scripts\http-domino-enum-passwords.nse
%Program Files%\Nmap\scripts\http-drupal-enum-users.nse
%Program Files%\Nmap\scripts\http-drupal-enum.nse
%Program Files%\Nmap\scripts\http-enum.nse
%Program Files%\Nmap\scripts\http-errors.nse
%Program Files%\Nmap\scripts\http-exif-spider.nse
%Program Files%\Nmap\scripts\http-favicon.nse
%Program Files%\Nmap\scripts\http-feed.nse
%Program Files%\Nmap\scripts\http-fetch.nse
%Program Files%\Nmap\scripts\http-fileupload-exploiter.nse
%Program Files%\Nmap\scripts\http-form-brute.nse
%Program Files%\Nmap\scripts\http-form-fuzzer.nse
%Program Files%\Nmap\scripts\http-frontpage-login.nse
%Program Files%\Nmap\scripts\http-generator.nse
%Program Files%\Nmap\scripts\http-git.nse
%Program Files%\Nmap\scripts\http-gitweb-projects-enum.nse
%Program Files%\Nmap\scripts\http-google-malware.nse
%Program Files%\Nmap\scripts\http-grep.nse
%Program Files%\Nmap\scripts\http-headers.nse
%Program Files%\Nmap\scripts\http-hp-ilo-info.nse
%Program Files%\Nmap\scripts\http-huawei-hg5xx-vuln.nse
%Program Files%\Nmap\scripts\http-icloud-findmyiphone.nse
%Program Files%\Nmap\scripts\http-icloud-sendmsg.nse
%Program Files%\Nmap\scripts\http-iis-short-name-brute.nse
%Program Files%\Nmap\scripts\http-iis-webdav-vuln.nse
%Program Files%\Nmap\scripts\http-internal-ip-disclosure.nse
%Program Files%\Nmap\scripts\http-joomla-brute.nse
%Program Files%\Nmap\scripts\http-jsonp-detection.nse
%Program Files%\Nmap\scripts\http-litespeed-sourcecode-download.nse
%Program Files%\Nmap\scripts\http-ls.nse
%Program Files%\Nmap\scripts\http-majordomo2-dir-traversal.nse
%Program Files%\Nmap\scripts\http-malware-host.nse
%Program Files%\Nmap\scripts\http-mcmp.nse
%Program Files%\Nmap\scripts\http-method-tamper.nse
%Program Files%\Nmap\scripts\http-methods.nse
%Program Files%\Nmap\scripts\http-mobileversion-checker.nse
%Program Files%\Nmap\scripts\http-ntlm-info.nse
%Program Files%\Nmap\scripts\http-open-proxy.nse
%Program Files%\Nmap\scripts\http-open-redirect.nse
%Program Files%\Nmap\scripts\http-passwd.nse
%Program Files%\Nmap\scripts\http-php-version.nse
%Program Files%\Nmap\scripts\http-phpmyadmin-dir-traversal.nse
%Program Files%\Nmap\scripts\http-phpself-xss.nse
%Program Files%\Nmap\scripts\http-proxy-brute.nse
%Program Files%\Nmap\scripts\http-put.nse
%Program Files%\Nmap\scripts\http-qnap-nas-info.nse
%Program Files%\Nmap\scripts\http-referer-checker.nse
%Program Files%\Nmap\scripts\http-rfi-spider.nse
%Program Files%\Nmap\scripts\http-robots.txt.nse
%Program Files%\Nmap\scripts\http-robtex-reverse-ip.nse
%Program Files%\Nmap\scripts\http-robtex-shared-ns.nse
%Program Files%\Nmap\scripts\http-sap-netweaver-leak.nse
%Program Files%\Nmap\scripts\http-security-headers.nse
%Program Files%\Nmap\scripts\http-server-header.nse
%Program Files%\Nmap\scripts\http-shellshock.nse
%Program Files%\Nmap\scripts\http-sitemap-generator.nse
%Program Files%\Nmap\scripts\http-slowloris-check.nse
%Program Files%\Nmap\scripts\http-slowloris.nse
%Program Files%\Nmap\scripts\http-sql-injection.nse
%Program Files%\Nmap\scripts\http-stored-xss.nse
%Program Files%\Nmap\scripts\http-svn-enum.nse
%Program Files%\Nmap\scripts\http-svn-info.nse
%Program Files%\Nmap\scripts\http-title.nse
%Program Files%\Nmap\scripts\http-tplink-dir-traversal.nse
%Program Files%\Nmap\scripts\http-trace.nse
%Program Files%\Nmap\scripts\http-traceroute.nse
%Program Files%\Nmap\scripts\http-trane-info.nse
%Program Files%\Nmap\scripts\http-unsafe-output-escaping.nse
%Program Files%\Nmap\scripts\http-useragent-tester.nse
%Program Files%\Nmap\scripts\http-userdir-enum.nse
%Program Files%\Nmap\scripts\http-vhosts.nse
%Program Files%\Nmap\scripts\http-virustotal.nse
%Program Files%\Nmap\scripts\http-vlcstreamer-ls.nse
%Program Files%\Nmap\scripts\http-vmware-path-vuln.nse
%Program Files%\Nmap\scripts\http-vuln-cve2006-3392.nse
%Program Files%\Nmap\scripts\http-vuln-cve2009-3960.nse
%Program Files%\Nmap\scripts\http-vuln-cve2010-0738.nse
%Program Files%\Nmap\scripts\http-vuln-cve2010-2861.nse
%Program Files%\Nmap\scripts\http-vuln-cve2011-3192.nse
%Program Files%\Nmap\scripts\http-vuln-cve2011-3368.nse
%Program Files%\Nmap\scripts\http-vuln-cve2012-1823.nse
%Program Files%\Nmap\scripts\http-vuln-cve2013-0156.nse
%Program Files%\Nmap\scripts\http-vuln-cve2013-6786.nse
%Program Files%\Nmap\scripts\http-vuln-cve2013-7091.nse
%Program Files%\Nmap\scripts\http-vuln-cve2014-2126.nse
%Program Files%\Nmap\scripts\http-vuln-cve2014-2127.nse
%Program Files%\Nmap\scripts\http-vuln-cve2014-2128.nse
%Program Files%\Nmap\scripts\http-vuln-cve2014-2129.nse
%Program Files%\Nmap\scripts\http-vuln-cve2014-3704.nse
%Program Files%\Nmap\scripts\http-vuln-cve2014-8877.nse
%Program Files%\Nmap\scripts\http-vuln-cve2015-1427.nse
%Program Files%\Nmap\scripts\http-vuln-cve2015-1635.nse
%Program Files%\Nmap\scripts\http-vuln-cve2017-1001000.nse
%Program Files%\Nmap\scripts\http-vuln-cve2017-5638.nse
%Program Files%\Nmap\scripts\http-vuln-cve2017-5689.nse
%Program Files%\Nmap\scripts\http-vuln-cve2017-8917.nse
%Program Files%\Nmap\scripts\http-vuln-misfortune-cookie.nse
%Program Files%\Nmap\scripts\http-vuln-wnr1000-creds.nse
%Program Files%\Nmap\scripts\http-waf-detect.nse
%Program Files%\Nmap\scripts\http-waf-fingerprint.nse
%Program Files%\Nmap\scripts\http-webdav-scan.nse
%Program Files%\Nmap\scripts\http-wordpress-brute.nse
%Program Files%\Nmap\scripts\http-wordpress-enum.nse
%Program Files%\Nmap\scripts\http-wordpress-users.nse
%Program Files%\Nmap\scripts\http-xssed.nse
%Program Files%\Nmap\scripts\https-redirect.nse
%Program Files%\Nmap\scripts\iax2-brute.nse
%Program Files%\Nmap\scripts\iax2-version.nse
%Program Files%\Nmap\scripts\icap-info.nse
%Program Files%\Nmap\scripts\iec-identify.nse
%Program Files%\Nmap\scripts\ike-version.nse
%Program Files%\Nmap\scripts\imap-brute.nse
%Program Files%\Nmap\scripts\imap-capabilities.nse
%Program Files%\Nmap\scripts\imap-ntlm-info.nse
%Program Files%\Nmap\scripts\impress-remote-discover.nse
%Program Files%\Nmap\scripts\informix-brute.nse
%Program Files%\Nmap\scripts\informix-query.nse
%Program Files%\Nmap\scripts\informix-tables.nse
%Program Files%\Nmap\scripts\ip-forwarding.nse
%Program Files%\Nmap\scripts\ip-geolocation-geoplugin.nse
%Program Files%\Nmap\scripts\ip-geolocation-ipinfodb.nse
%Program Files%\Nmap\scripts\ip-geolocation-map-bing.nse
%Program Files%\Nmap\scripts\ip-geolocation-map-google.nse
%Program Files%\Nmap\scripts\ip-geolocation-map-kml.nse
%Program Files%\Nmap\scripts\ip-geolocation-maxmind.nse
%Program Files%\Nmap\scripts\ip-https-discover.nse
%Program Files%\Nmap\scripts\ipidseq.nse
%Program Files%\Nmap\scripts\ipmi-brute.nse
%Program Files%\Nmap\scripts\ipmi-cipher-zero.nse
%Program Files%\Nmap\scripts\ipmi-version.nse
%Program Files%\Nmap\scripts\ipv6-multicast-mld-list.nse
%Program Files%\Nmap\scripts\ipv6-node-info.nse
%Program Files%\Nmap\scripts\ipv6-ra-flood.nse
%Program Files%\Nmap\scripts\irc-botnet-channels.nse
%Program Files%\Nmap\scripts\irc-brute.nse
%Program Files%\Nmap\scripts\irc-info.nse
%Program Files%\Nmap\scripts\irc-sasl-brute.nse
%Program Files%\Nmap\scripts\irc-unrealircd-backdoor.nse
%Program Files%\Nmap\scripts\iscsi-brute.nse
%Program Files%\Nmap\scripts\iscsi-info.nse
%Program Files%\Nmap\scripts\isns-info.nse
%Program Files%\Nmap\scripts\jdwp-exec.nse
%Program Files%\Nmap\scripts\jdwp-info.nse
%Program Files%\Nmap\scripts\jdwp-inject.nse
%Program Files%\Nmap\scripts\jdwp-version.nse
%Program Files%\Nmap\scripts\knx-gateway-discover.nse
%Program Files%\Nmap\scripts\knx-gateway-info.nse
%Program Files%\Nmap\scripts\krb5-enum-users.nse
%Program Files%\Nmap\scripts\ldap-brute.nse
%Program Files%\Nmap\scripts\ldap-novell-getpass.nse
%Program Files%\Nmap\scripts\ldap-rootdse.nse
%Program Files%\Nmap\scripts\ldap-search.nse
%Program Files%\Nmap\scripts\lexmark-config.nse
%Program Files%\Nmap\scripts\llmnr-resolve.nse
%Program Files%\Nmap\scripts\lltd-discovery.nse
%Program Files%\Nmap\scripts\lu-enum.nse
%Program Files%\Nmap\scripts\maxdb-info.nse
%Program Files%\Nmap\scripts\mcafee-epo-agent.nse
%Program Files%\Nmap\scripts\membase-brute.nse
%Program Files%\Nmap\scripts\membase-http-info.nse
%Program Files%\Nmap\scripts\memcached-info.nse
%Program Files%\Nmap\scripts\metasploit-info.nse
%Program Files%\Nmap\scripts\metasploit-msgrpc-brute.nse
%Program Files%\Nmap\scripts\metasploit-xmlrpc-brute.nse
%Program Files%\Nmap\scripts\mikrotik-routeros-brute.nse
%Program Files%\Nmap\scripts\mmouse-brute.nse
%Program Files%\Nmap\scripts\mmouse-exec.nse
%Program Files%\Nmap\scripts\modbus-discover.nse
%Program Files%\Nmap\scripts\mongodb-brute.nse
%Program Files%\Nmap\scripts\mongodb-databases.nse
%Program Files%\Nmap\scripts\mongodb-info.nse
%Program Files%\Nmap\scripts\mqtt-subscribe.nse
%Program Files%\Nmap\scripts\mrinfo.nse
%Program Files%\Nmap\scripts\ms-sql-brute.nse
%Program Files%\Nmap\scripts\ms-sql-config.nse
%Program Files%\Nmap\scripts\ms-sql-dac.nse
%Program Files%\Nmap\scripts\ms-sql-dump-hashes.nse
%Program Files%\Nmap\scripts\ms-sql-empty-password.nse
%Program Files%\Nmap\scripts\ms-sql-hasdbaccess.nse
%Program Files%\Nmap\scripts\ms-sql-info.nse
%Program Files%\Nmap\scripts\ms-sql-ntlm-info.nse
%Program Files%\Nmap\scripts\ms-sql-query.nse
%Program Files%\Nmap\scripts\ms-sql-tables.nse
%Program Files%\Nmap\scripts\ms-sql-xp-cmdshell.nse
%Program Files%\Nmap\scripts\msrpc-enum.nse
%Program Files%\Nmap\scripts\mtrace.nse
%Program Files%\Nmap\scripts\murmur-version.nse
%Program Files%\Nmap\scripts\mysql-audit.nse
%Program Files%\Nmap\scripts\mysql-brute.nse
%Program Files%\Nmap\scripts\mysql-databases.nse
%Program Files%\Nmap\scripts\mysql-dump-hashes.nse
%Program Files%\Nmap\scripts\mysql-empty-password.nse
%Program Files%\Nmap\scripts\mysql-enum.nse
%Program Files%\Nmap\scripts\mysql-info.nse
%Program Files%\Nmap\scripts\mysql-query.nse
%Program Files%\Nmap\scripts\mysql-users.nse
%Program Files%\Nmap\scripts\mysql-variables.nse
%Program Files%\Nmap\scripts\mysql-vuln-cve2012-2122.nse
%Program Files%\Nmap\scripts\nat-pmp-info.nse
%Program Files%\Nmap\scripts\nat-pmp-mapport.nse
%Program Files%\Nmap\scripts\nbd-info.nse
%Program Files%\Nmap\scripts\nbstat.nse
%Program Files%\Nmap\scripts\ncp-enum-users.nse
%Program Files%\Nmap\scripts\ncp-serverinfo.nse
%Program Files%\Nmap\scripts\ndmp-fs-info.nse
%Program Files%\Nmap\scripts\ndmp-version.nse
%Program Files%\Nmap\scripts\nessus-brute.nse
%Program Files%\Nmap\scripts\nessus-xmlrpc-brute.nse
%Program Files%\Nmap\scripts\netbus-auth-bypass.nse
%Program Files%\Nmap\scripts\netbus-brute.nse
%Program Files%\Nmap\scripts\netbus-info.nse
%Program Files%\Nmap\scripts\netbus-version.nse
%Program Files%\Nmap\scripts\nexpose-brute.nse
%Program Files%\Nmap\scripts\nfs-ls.nse
%Program Files%\Nmap\scripts\nfs-showmount.nse
%Program Files%\Nmap\scripts\nfs-statfs.nse
%Program Files%\Nmap\scripts\nje-node-brute.nse
%Program Files%\Nmap\scripts\nje-pass-brute.nse
%Program Files%\Nmap\scripts\nntp-ntlm-info.nse
%Program Files%\Nmap\scripts\nping-brute.nse
%Program Files%\Nmap\scripts\nrpe-enum.nse
%Program Files%\Nmap\scripts\ntp-info.nse
%Program Files%\Nmap\scripts\ntp-monlist.nse
%Program Files%\Nmap\scripts\omp2-brute.nse
%Program Files%\Nmap\scripts\omp2-enum-targets.nse
%Program Files%\Nmap\scripts\omron-info.nse
%Program Files%\Nmap\scripts\openlookup-info.nse
%Program Files%\Nmap\scripts\openvas-otp-brute.nse
%Program Files%\Nmap\scripts\openwebnet-discovery.nse
%Program Files%\Nmap\scripts\oracle-brute-stealth.nse
%Program Files%\Nmap\scripts\oracle-brute.nse
%Program Files%\Nmap\scripts\oracle-enum-users.nse
%Program Files%\Nmap\scripts\oracle-sid-brute.nse
%Program Files%\Nmap\scripts\oracle-tns-version.nse
%Program Files%\Nmap\scripts\ovs-agent-version.nse
%Program Files%\Nmap\scripts\p2p-conficker.nse
%Program Files%\Nmap\scripts\path-mtu.nse
%Program Files%\Nmap\scripts\pcanywhere-brute.nse
%Program Files%\Nmap\scripts\pcworx-info.nse
%Program Files%\Nmap\scripts\pgsql-brute.nse
%Program Files%\Nmap\scripts\pjl-ready-message.nse
%Program Files%\Nmap\scripts\pop3-brute.nse
%Program Files%\Nmap\scripts\pop3-capabilities.nse
%Program Files%\Nmap\scripts\pop3-ntlm-info.nse
%Program Files%\Nmap\scripts\pptp-version.nse
%Program Files%\Nmap\scripts\puppet-naivesigning.nse
%Program Files%\Nmap\scripts\qconn-exec.nse
%Program Files%\Nmap\scripts\qscan.nse
%Program Files%\Nmap\scripts\quake1-info.nse
%Program Files%\Nmap\scripts\quake3-info.nse
%Program Files%\Nmap\scripts\quake3-master-getservers.nse
%Program Files%\Nmap\scripts\rdp-enum-encryption.nse
%Program Files%\Nmap\scripts\rdp-ntlm-info.nse
%Program Files%\Nmap\scripts\rdp-vuln-ms12-020.nse
%Program Files%\Nmap\scripts\realvnc-auth-bypass.nse
%Program Files%\Nmap\scripts\redis-brute.nse
%Program Files%\Nmap\scripts\redis-info.nse
%Program Files%\Nmap\scripts\resolveall.nse
%Program Files%\Nmap\scripts\reverse-index.nse
%Program Files%\Nmap\scripts\rexec-brute.nse
%Program Files%\Nmap\scripts\rfc868-time.nse
%Program Files%\Nmap\scripts\riak-http-info.nse
%Program Files%\Nmap\scripts\rlogin-brute.nse
%Program Files%\Nmap\scripts\rmi-dumpregistry.nse
%Program Files%\Nmap\scripts\rmi-vuln-classloader.nse
%Program Files%\Nmap\scripts\rpc-grind.nse
%Program Files%\Nmap\scripts\rpcap-brute.nse
%Program Files%\Nmap\scripts\rpcap-info.nse
%Program Files%\Nmap\scripts\rpcinfo.nse
%Program Files%\Nmap\scripts\rsa-vuln-roca.nse
%Program Files%\Nmap\scripts\rsync-brute.nse
%Program Files%\Nmap\scripts\rsync-list-modules.nse
%Program Files%\Nmap\scripts\rtsp-methods.nse
%Program Files%\Nmap\scripts\rtsp-url-brute.nse
%Program Files%\Nmap\scripts\rusers.nse
%Program Files%\Nmap\scripts\s7-info.nse
%Program Files%\Nmap\scripts\samba-vuln-cve-2012-1182.nse
%Program Files%\Nmap\scripts\script.db
%Program Files%\Nmap\scripts\servicetags.nse
%Program Files%\Nmap\scripts\shodan-api.nse
%Program Files%\Nmap\scripts\sip-brute.nse
%Program Files%\Nmap\scripts\sip-call-spoof.nse
%Program Files%\Nmap\scripts\sip-enum-users.nse
%Program Files%\Nmap\scripts\sip-methods.nse
%Program Files%\Nmap\scripts\skypev2-version.nse
%Program Files%\Nmap\scripts\smb-brute.nse
%Program Files%\Nmap\scripts\smb-double-pulsar-backdoor.nse
%Program Files%\Nmap\scripts\smb-enum-domains.nse
%Program Files%\Nmap\scripts\smb-enum-groups.nse
%Program Files%\Nmap\scripts\smb-enum-processes.nse
%Program Files%\Nmap\scripts\smb-enum-services.nse
%Program Files%\Nmap\scripts\smb-enum-sessions.nse
%Program Files%\Nmap\scripts\smb-enum-shares.nse
%Program Files%\Nmap\scripts\smb-enum-users.nse
%Program Files%\Nmap\scripts\smb-flood.nse
%Program Files%\Nmap\scripts\smb-ls.nse
%Program Files%\Nmap\scripts\smb-mbenum.nse
%Program Files%\Nmap\scripts\smb-os-discovery.nse
%Program Files%\Nmap\scripts\smb-print-text.nse
%Program Files%\Nmap\scripts\smb-protocols.nse
%Program Files%\Nmap\scripts\smb-psexec.nse
%Program Files%\Nmap\scripts\smb-security-mode.nse
%Program Files%\Nmap\scripts\smb-server-stats.nse
%Program Files%\Nmap\scripts\smb-system-info.nse
%Program Files%\Nmap\scripts\smb-vuln-conficker.nse
%Program Files%\Nmap\scripts\smb-vuln-cve-2017-7494.nse
%Program Files%\Nmap\scripts\smb-vuln-cve2009-3103.nse
%Program Files%\Nmap\scripts\smb-vuln-ms06-025.nse
%Program Files%\Nmap\scripts\smb-vuln-ms07-029.nse
%Program Files%\Nmap\scripts\smb-vuln-ms08-067.nse
%Program Files%\Nmap\scripts\smb-vuln-ms10-054.nse
%Program Files%\Nmap\scripts\smb-vuln-ms10-061.nse
%Program Files%\Nmap\scripts\smb-vuln-ms17-010.nse
%Program Files%\Nmap\scripts\smb-vuln-regsvc-dos.nse
%Program Files%\Nmap\scripts\smb-vuln-webexec.nse
%Program Files%\Nmap\scripts\smb-webexec-exploit.nse
%Program Files%\Nmap\scripts\smb2-capabilities.nse
%Program Files%\Nmap\scripts\smb2-security-mode.nse
%Program Files%\Nmap\scripts\smb2-time.nse
%Program Files%\Nmap\scripts\smb2-vuln-uptime.nse
%Program Files%\Nmap\scripts\smtp-brute.nse
%Program Files%\Nmap\scripts\smtp-commands.nse
%Program Files%\Nmap\scripts\smtp-enum-users.nse
%Program Files%\Nmap\scripts\smtp-ntlm-info.nse
%Program Files%\Nmap\scripts\smtp-open-relay.nse
%Program Files%\Nmap\scripts\smtp-strangeport.nse
%Program Files%\Nmap\scripts\smtp-vuln-cve2010-4344.nse
%Program Files%\Nmap\scripts\smtp-vuln-cve2011-1720.nse
%Program Files%\Nmap\scripts\smtp-vuln-cve2011-1764.nse
%Program Files%\Nmap\scripts\sniffer-detect.nse
%Program Files%\Nmap\scripts\snmp-brute.nse
%Program Files%\Nmap\scripts\snmp-hh3c-logins.nse
%Program Files%\Nmap\scripts\snmp-info.nse
%Program Files%\Nmap\scripts\snmp-interfaces.nse
%Program Files%\Nmap\scripts\snmp-ios-config.nse
%Program Files%\Nmap\scripts\snmp-netstat.nse
%Program Files%\Nmap\scripts\snmp-processes.nse
%Program Files%\Nmap\scripts\snmp-sysdescr.nse
%Program Files%\Nmap\scripts\snmp-win32-services.nse
%Program Files%\Nmap\scripts\snmp-win32-shares.nse
%Program Files%\Nmap\scripts\snmp-win32-software.nse
%Program Files%\Nmap\scripts\snmp-win32-users.nse
%Program Files%\Nmap\scripts\socks-auth-info.nse
%Program Files%\Nmap\scripts\socks-brute.nse
%Program Files%\Nmap\scripts\socks-open-proxy.nse
%Program Files%\Nmap\scripts\ssh-auth-methods.nse
%Program Files%\Nmap\scripts\ssh-brute.nse
%Program Files%\Nmap\scripts\ssh-hostkey.nse
%Program Files%\Nmap\scripts\ssh-publickey-acceptance.nse
%Program Files%\Nmap\scripts\ssh-run.nse
%Program Files%\Nmap\scripts\ssh2-enum-algos.nse
%Program Files%\Nmap\scripts\sshv1.nse
%Program Files%\Nmap\scripts\ssl-ccs-injection.nse
%Program Files%\Nmap\scripts\ssl-cert-intaddr.nse
%Program Files%\Nmap\scripts\ssl-cert.nse
%Program Files%\Nmap\scripts\ssl-date.nse
%Program Files%\Nmap\scripts\ssl-dh-params.nse
%Program Files%\Nmap\scripts\ssl-enum-ciphers.nse
%Program Files%\Nmap\scripts\ssl-heartbleed.nse
%Program Files%\Nmap\scripts\ssl-known-key.nse
%Program Files%\Nmap\scripts\ssl-poodle.nse
%Program Files%\Nmap\scripts\sslv2-drown.nse
%Program Files%\Nmap\scripts\sslv2.nse
%Program Files%\Nmap\scripts\sstp-discover.nse
%Program Files%\Nmap\scripts\stun-info.nse
%Program Files%\Nmap\scripts\stun-version.nse
%Program Files%\Nmap\scripts\stuxnet-detect.nse
%Program Files%\Nmap\scripts\supermicro-ipmi-conf.nse
%Program Files%\Nmap\scripts\svn-brute.nse
%Program Files%\Nmap\scripts\targets-asn.nse
%Program Files%\Nmap\scripts\targets-ipv6-map4to6.nse
%Program Files%\Nmap\scripts\targets-ipv6-multicast-echo.nse
%Program Files%\Nmap\scripts\targets-ipv6-multicast-invalid-dst.nse
%Program Files%\Nmap\scripts\targets-ipv6-multicast-mld.nse
%Program Files%\Nmap\scripts\targets-ipv6-multicast-slaac.nse
%Program Files%\Nmap\scripts\targets-ipv6-wordlist.nse
%Program Files%\Nmap\scripts\targets-sniffer.nse
%Program Files%\Nmap\scripts\targets-traceroute.nse
%Program Files%\Nmap\scripts\targets-xml.nse
%Program Files%\Nmap\scripts\teamspeak2-version.nse
%Program Files%\Nmap\scripts\telnet-brute.nse
%Program Files%\Nmap\scripts\telnet-encryption.nse
%Program Files%\Nmap\scripts\telnet-ntlm-info.nse
%Program Files%\Nmap\scripts\tftp-enum.nse
%Program Files%\Nmap\scripts\tls-alpn.nse
%Program Files%\Nmap\scripts\tls-nextprotoneg.nse
%Program Files%\Nmap\scripts\tls-ticketbleed.nse
%Program Files%\Nmap\scripts\tn3270-screen.nse
%Program Files%\Nmap\scripts\tor-consensus-checker.nse
%Program Files%\Nmap\scripts\traceroute-geolocation.nse
%Program Files%\Nmap\scripts\tso-brute.nse
%Program Files%\Nmap\scripts\tso-enum.nse
%Program Files%\Nmap\scripts\ubiquiti-discovery.nse
%Program Files%\Nmap\scripts\unittest.nse
%Program Files%\Nmap\scripts\unusual-port.nse
%Program Files%\Nmap\scripts\upnp-info.nse
%Program Files%\Nmap\scripts\uptime-agent-info.nse
%Program Files%\Nmap\scripts\url-snarf.nse
%Program Files%\Nmap\scripts\ventrilo-info.nse
%Program Files%\Nmap\scripts\versant-info.nse
%Program Files%\Nmap\scripts\vmauthd-brute.nse
%Program Files%\Nmap\scripts\vmware-version.nse
%Program Files%\Nmap\scripts\vnc-brute.nse
%Program Files%\Nmap\scripts\vnc-info.nse
%Program Files%\Nmap\scripts\vnc-title.nse
%Program Files%\Nmap\scripts\voldemort-info.nse
%Program Files%\Nmap\scripts\vtam-enum.nse
%Program Files%\Nmap\scripts\vulners.nse
%Program Files%\Nmap\scripts\vuze-dht-info.nse
%Program Files%\Nmap\scripts\wdb-version.nse
%Program Files%\Nmap\scripts\weblogic-t3-info.nse
%Program Files%\Nmap\scripts\whois-domain.nse
%Program Files%\Nmap\scripts\whois-ip.nse
%Program Files%\Nmap\scripts\wsdd-discover.nse
%Program Files%\Nmap\scripts\x11-access.nse
%Program Files%\Nmap\scripts\xdmcp-discover.nse
%Program Files%\Nmap\scripts\xmlrpc-methods.nse
%Program Files%\Nmap\scripts\xmpp-brute.nse
%Program Files%\Nmap\scripts\xmpp-info.nse
%Program Files%\Nmap\nselib\afp.lua
%Program Files%\Nmap\nselib\ajp.lua
%Program Files%\Nmap\nselib\amqp.lua
%Program Files%\Nmap\nselib\anyconnect.lua
%Program Files%\Nmap\nselib\asn1.lua
%Program Files%\Nmap\nselib\base32.lua
%Program Files%\Nmap\nselib\base64.lua
%Program Files%\Nmap\nselib\bin.lua
%Program Files%\Nmap\nselib\bitcoin.lua
%Program Files%\Nmap\nselib\bits.lua
%Program Files%\Nmap\nselib\bittorrent.lua
%Program Files%\Nmap\nselib\bjnp.lua
%Program Files%\Nmap\nselib\brute.lua
%Program Files%\Nmap\nselib\cassandra.lua
%Program Files%\Nmap\nselib\citrixxml.lua
%Program Files%\Nmap\nselib\coap.lua
%Program Files%\Nmap\nselib\comm.lua
%Program Files%\Nmap\nselib\creds.lua
%Program Files%\Nmap\nselib\cvs.lua
%Program Files%\Nmap\nselib\datafiles.lua
%Program Files%\Nmap\nselib\datetime.lua
%Program Files%\Nmap\nselib\dhcp.lua
%Program Files%\Nmap\nselib\dhcp6.lua
%Program Files%\Nmap\nselib\dicom.lua
%Program Files%\Nmap\nselib\dns.lua
%Program Files%\Nmap\nselib\dnsbl.lua
%Program Files%\Nmap\nselib\dnssd.lua
%Program Files%\Nmap\nselib\drda.lua
%Program Files%\Nmap\nselib\eap.lua
%Program Files%\Nmap\nselib\eigrp.lua
%Program Files%\Nmap\nselib\formulas.lua
%Program Files%\Nmap\nselib\ftp.lua
%Program Files%\Nmap\nselib\geoip.lua
%Program Files%\Nmap\nselib\giop.lua
%Program Files%\Nmap\nselib\gps.lua
%Program Files%\Nmap\nselib\http.lua
%Program Files%\Nmap\nselib\httpspider.lua
%Program Files%\Nmap\nselib\iax2.lua
%Program Files%\Nmap\nselib\idna.lua
%Program Files%\Nmap\nselib\ike.lua
%Program Files%\Nmap\nselib\imap.lua
%Program Files%\Nmap\nselib\informix.lua
%Program Files%\Nmap\nselib\ipOps.lua
%Program Files%\Nmap\nselib\ipmi.lua
%Program Files%\Nmap\nselib\ipp.lua
%Program Files%\Nmap\nselib\irc.lua
%Program Files%\Nmap\nselib\iscsi.lua
%Program Files%\Nmap\nselib\isns.lua
%Program Files%\Nmap\nselib\jdwp.lua
%Program Files%\Nmap\nselib\json.lua
%Program Files%\Nmap\nselib\knx.lua
%Program Files%\Nmap\nselib\ldap.lua
%Program Files%\Nmap\nselib\lfs.luadoc
%Program Files%\Nmap\nselib\libssh2-utility.lua
%Program Files%\Nmap\nselib\libssh2.luadoc
%Program Files%\Nmap\nselib\listop.lua
%Program Files%\Nmap\nselib\lpeg-utility.lua
%Program Files%\Nmap\nselib\lpeg.luadoc
%Program Files%\Nmap\nselib\ls.lua
%Program Files%\Nmap\nselib\match.lua
%Program Files%\Nmap\nselib\membase.lua
%Program Files%\Nmap\nselib\mobileme.lua
%Program Files%\Nmap\nselib\mongodb.lua
%Program Files%\Nmap\nselib\mqtt.lua
%Program Files%\Nmap\nselib\msrpc.lua
%Program Files%\Nmap\nselib\msrpcperformance.lua
%Program Files%\Nmap\nselib\msrpctypes.lua
%Program Files%\Nmap\nselib\mssql.lua
%Program Files%\Nmap\nselib\multicast.lua
%Program Files%\Nmap\nselib\mysql.lua
%Program Files%\Nmap\nselib\natpmp.lua
%Program Files%\Nmap\nselib\nbd.lua
%Program Files%\Nmap\nselib\ncp.lua
%Program Files%\Nmap\nselib\ndmp.lua
%Program Files%\Nmap\nselib\netbios.lua
%Program Files%\Nmap\nselib\nmap.luadoc
%Program Files%\Nmap\nselib\nrpc.lua
%Program Files%\Nmap\nselib\nsedebug.lua
%Program Files%\Nmap\nselib\omp2.lua
%Program Files%\Nmap\nselib\oops.lua
%Program Files%\Nmap\nselib\openssl.luadoc
%Program Files%\Nmap\nselib\ospf.lua
%Program Files%\Nmap\nselib\outlib.lua
%Program Files%\Nmap\nselib\packet.lua
%Program Files%\Nmap\nselib\pcre.luadoc
%Program Files%\Nmap\nselib\pgsql.lua
%Program Files%\Nmap\nselib\pop3.lua
%Program Files%\Nmap\nselib\pppoe.lua
%Program Files%\Nmap\nselib\proxy.lua
%Program Files%\Nmap\nselib\punycode.lua
%Program Files%\Nmap\nselib\rand.lua
%Program Files%\Nmap\nselib\rdp.lua
%Program Files%\Nmap\nselib\re.lua
%Program Files%\Nmap\nselib\redis.lua
%Program Files%\Nmap\nselib\rmi.lua
%Program Files%\Nmap\nselib\rpc.lua
%Program Files%\Nmap\nselib\rpcap.lua
%Program Files%\Nmap\nselib\rsync.lua
%Program Files%\Nmap\nselib\rtsp.lua
%Program Files%\Nmap\nselib\sasl.lua
%Program Files%\Nmap\nselib\shortport.lua
%Program Files%\Nmap\nselib\sip.lua
%Program Files%\Nmap\nselib\slaxml.lua
%Program Files%\Nmap\nselib\smb.lua
%Program Files%\Nmap\nselib\smb2.lua
%Program Files%\Nmap\nselib\smbauth.lua
%Program Files%\Nmap\nselib\smtp.lua
%Program Files%\Nmap\nselib\snmp.lua
%Program Files%\Nmap\nselib\socks.lua
%Program Files%\Nmap\nselib\srvloc.lua
%Program Files%\Nmap\nselib\ssh1.lua
%Program Files%\Nmap\nselib\ssh2.lua
%Program Files%\Nmap\nselib\sslcert.lua
%Program Files%\Nmap\nselib\sslv2.lua
%Program Files%\Nmap\nselib\stdnse.lua
%Program Files%\Nmap\nselib\strbuf.lua
%Program Files%\Nmap\nselib\strict.lua
%Program Files%\Nmap\nselib\stringaux.lua
%Program Files%\Nmap\nselib\stun.lua
%Program Files%\Nmap\nselib\tab.lua
%Program Files%\Nmap\nselib\tableaux.lua
%Program Files%\Nmap\nselib\target.lua
%Program Files%\Nmap\nselib\tftp.lua
%Program Files%\Nmap\nselib\tls.lua
%Program Files%\Nmap\nselib\tn3270.lua
%Program Files%\Nmap\nselib\tns.lua
%Program Files%\Nmap\nselib\unicode.lua
%Program Files%\Nmap\nselib\unittest.lua
%Program Files%\Nmap\nselib\unpwdb.lua
%Program Files%\Nmap\nselib\upnp.lua
%Program Files%\Nmap\nselib\url.lua
%Program Files%\Nmap\nselib\versant.lua
%Program Files%\Nmap\nselib\vnc.lua
%Program Files%\Nmap\nselib\vulns.lua
%Program Files%\Nmap\nselib\vuzedht.lua
%Program Files%\Nmap\nselib\wsdd.lua
%Program Files%\Nmap\nselib\xdmcp.lua
%Program Files%\Nmap\nselib\xmpp.lua
%Program Files%\Nmap\nselib\zlib.luadoc
%Program Files%\Nmap\nselib\data\dns-srv-names
%Program Files%\Nmap\nselib\data\drupal-modules.lst
%Program Files%\Nmap\nselib\data\drupal-themes.lst
%Program Files%\Nmap\nselib\data\enterprise_numbers.txt
%Program Files%\Nmap\nselib\data\favicon-db
%Program Files%\Nmap\nselib\data\http-default-accounts-fingerprints.lua
%Program Files%\Nmap\nselib\data\http-devframework-fingerprints.lua
%Program Files%\Nmap\nselib\data\http-fingerprints.lua
%Program Files%\Nmap\nselib\data\http-folders.txt
%Program Files%\Nmap\nselib\data\http-sql-errors.lst
%Program Files%\Nmap\nselib\data\http-web-files-extensions.lst
%Program Files%\Nmap\nselib\data\idnaMappings.lua
%Program Files%\Nmap\nselib\data\ike-fingerprints.lua
%Program Files%\Nmap\nselib\data\mgroupnames.db
%Program Files%\Nmap\nselib\data\mysql-cis.audit
%Program Files%\Nmap\nselib\data\oracle-default-accounts.lst
%Program Files%\Nmap\nselib\data\oracle-sids
%Program Files%\Nmap\nselib\data\packetdecoders.lua
%Program Files%\Nmap\nselib\data\passwords.lst
%Program Files%\Nmap\nselib\data\pixel.gif
%Program Files%\Nmap\nselib\data\publickeydb
%Program Files%\Nmap\nselib\data\rtsp-urls.txt
%Program Files%\Nmap\nselib\data\snmpcommunities.lst
%Program Files%\Nmap\nselib\data\ssl-fingerprints
%Program Files%\Nmap\nselib\data\targets-ipv6-wordlist
%Program Files%\Nmap\nselib\data\tftplist.txt
%Program Files%\Nmap\nselib\data\usernames.lst
%Program Files%\Nmap\nselib\data\vhosts-default.lst
%Program Files%\Nmap\nselib\data\vhosts-full.lst
%Program Files%\Nmap\nselib\data\wp-plugins.lst
%Program Files%\Nmap\nselib\data\wp-themes.lst
%Program Files%\Nmap\nselib\data\jdwp-class\JDWPExecCmd.class
%Program Files%\Nmap\nselib\data\jdwp-class\JDWPExecCmd.java
%Program Files%\Nmap\nselib\data\jdwp-class\JDWPSystemInfo.class
%Program Files%\Nmap\nselib\data\jdwp-class\JDWPSystemInfo.java
%Program Files%\Nmap\nselib\data\jdwp-class\README.txt
%Program Files%\Nmap\nselib\data\psexec\README
%Program Files%\Nmap\nselib\data\psexec\backdoor.lua
%Program Files%\Nmap\nselib\data\psexec\default.lua
%Program Files%\Nmap\nselib\data\psexec\drives.lua
%Program Files%\Nmap\nselib\data\psexec\examples.lua
%Program Files%\Nmap\nselib\data\psexec\experimental.lua
%Program Files%\Nmap\nselib\data\psexec\network.lua
%Program Files%\Nmap\nselib\data\psexec\nmap_service.c
%Program Files%\Nmap\nselib\data\psexec\nmap_service.vcproj
%Program Files%\Nmap\nselib\data\psexec\pwdump.lua
%Program Files%\Nmap\icon1.ico
%User Temp%\nsy3AE0.tmp\vcredist_x86.exe
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\.ba1\wixstdba.dll
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\.ba1\thm.xml
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\.ba1\thm.wxl
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\.ba1\logo.png
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\.ba1\license.rtf
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\.ba1\BootstrapperApplicationData.xml
%User Temp%\dd_vcredist_x86_20210805142421.log
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\.be\vcredist_x86.exe
%System Root%\System Volume Information\SPP\snapshot-2
%System Root%\System Volume Information\SPP\OnlineMetadataCache\{8aa9ec51-7b51-4c31-a6ff-92d3d12684e4}_OnDiskSnapshotProp
%System Root%\System Volume Information\SPP\metadata-2
%ProgramData%\Package Cache\{ce085a78-074e-4823-8dc1-8a721b94b76d}\vcredist_x86.exe
%ProgramData%\Package Cache\{ce085a78-074e-4823-8dc1-8a721b94b76d}\state.rsm
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\vcRuntimeMinimum_x86
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\vcRuntimeAdditional_x86
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\cab54A5CABBE7274D8A22EB58060AAB7623
%User Temp%\{ce085a78-074e-4823-8dc1-8a721b94b76d}\cabB3E1576D1FEFBB979E13B1A5379E0B16
%AppDataLocalLow%\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD
%AppDataLocalLow%\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD
%User Temp%\CabFFA3.tmp
%User Temp%\TarFFA4.tmp
%AppDataLocalLow%\Microsoft\CryptnetUrlCache\MetaData\F90F18257CBB4D84216AC1E1F3BB2C76
%AppDataLocalLow%\Microsoft\CryptnetUrlCache\Content\F90F18257CBB4D84216AC1E1F3BB2C76
%User Temp%\dd_vcredist_x86_20210805142421_0_vcRuntimeMinimum_x86.log
%User Temp%\dd_vcredist_x86_20210805142421_1_vcRuntimeAdditional_x86.log
%ProgramData%\Package Cache\{ce085a78-074e-4823-8dc1-8a721b94b76d}\state.rsm
%Program Files%\Nmap\Uninstall.exe
%User Temp%\nsy3AE0.tmp\npcap-1.00.exe
%User Temp%\nsjBD4.tmp
%User Temp%\nsjBD5.tmp\options.ini
%User Temp%\nsjBD5.tmp\final.ini
%User Temp%\nsjBD5.tmp\System.dll
%Program Files%\Npcap\install.log
%User Temp%\nsjBD5.tmp\modern-header.bmp
%User Temp%\nsjBD5.tmp\InstallOptions.dll
%User Temp%\nsjBD5.tmp\NPFInstall.exe
%User Temp%\nsjBD5.tmp\nsExec.dll
%User Temp%\nsjBD5.tmp\ns91B7.tmp
%Program Files%\Npcap\NPFInstall.log
%User Temp%\nsjBD5.tmp\nsA364.tmp
%User Temp%\nsjBD5.tmp\nsA96D.tmp
%User Temp%\nstAA34.tmp\UserInfo.dll
%User Temp%\nstAA34.tmp\ioSpecial.ini
%User Temp%\nstAA34.tmp\modern-wizard.bmp
%User Temp%\nstAA34.tmp\modern-header.bmp
%User Temp%\nsjBD5.tmp\nsB273.tmp
%Program Files%\Npcap\LICENSE
%Program Files%\Npcap\DiagReport.bat
%Program Files%\Npcap\DiagReport.ps1
%Program Files%\Npcap\FixInstall.bat
%Program Files%\Npcap\Uninstall.exe
%Program Files%\Npcap\NPFInstall.exe
%Program Files%\Npcap\npcap.sys
%Program Files%\Npcap\npcap.cat
%Program Files%\Npcap\npcap.inf
%Program Files%\Npcap\npcap_wfp.inf
%System%\wpcap.dll
%System%\Packet.dll
%System%\NpcapHelper.exe
%System%\WlanHelper.exe
%System%\Npcap\wpcap.dll
%System%\Npcap\Packet.dll
%System%\Npcap\NpcapHelper.exe
%System%\Npcap\WlanHelper.exe
%User Temp%\nsjBD5.tmp\Insecure-EV.cer
%User Temp%\nsjBD5.tmp\nsB60D.tmp
%User Temp%\nsjBD5.tmp\Insecure-EV-sha1.cer
%User Temp%\nsjBD5.tmp\nsB7E2.tmp
%User Temp%\nsjBD5.tmp\nsB8CD.tmp
%User Temp%\nsjBD5.tmp\nsBCC4.tmp
%User Temp%\nsjBD5.tmp\nsBDCE.tmp
%User Temp%\{7da11ba6-ed86-0809-41e4-5b6c8e96247d}\SETE169.tmp
%User Temp%\{7da11ba6-ed86-0809-41e4-5b6c8e96247d}\SETE428.tmp
%User Temp%\{7da11ba6-ed86-0809-41e4-5b6c8e96247d}\SETE725.tmp
%User Temp%\Cab6D.tmp
%User Temp%\Tar6E.tmp
%AppDataLocalLow%\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
%AppDataLocalLow%\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357
%User Temp%\Cab243.tmp
%User Temp%\Tar244.tmp
%User Temp%\Cab2B3.tmp
%User Temp%\Tar2B4.tmp
%User Temp%\Cab322.tmp
%User Temp%\Tar323.tmp
%Windows%\inf\oem12.PNF
%System%\drivers\SET54D.tmp
%User Temp%\nsjBD5.tmp\SimpleSC.dll
%Program Files%\Npcap\CheckStatus.bat
%User Temp%\nsjBD5.tmp\ns81C9.tmp
%User Temp%\nsy3AE0.tmp\nmap_performance.reg
%Program Files%\Nmap\nmap_performance.reg
%Program Files%\Nmap\zenmap.exe
%Program Files%\Nmap\ZENMAP_README
%Program Files%\Nmap\COPYING_HIGWIDGETS
%Program Files%\Nmap\python27.dll
%Program Files%\Nmap\py2exe\share\icons\hicolor\index.theme
%Program Files%\Nmap\py2exe\share\themes\Default\gtk-2.0-key\gtkrc
%Program Files%\Nmap\py2exe\share\themes\MS-Windows\gtk-2.0\gtkrc
%Program Files%\Nmap\share\zenmap\config\scan_profile.usp
%Program Files%\Nmap\share\zenmap\config\zenmap.conf
%Program Files%\Nmap\share\zenmap\config\zenmap_version
%Program Files%\Nmap\share\zenmap\docs\help.html
%Program Files%\Nmap\share\zenmap\locale\de\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\es\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\fr\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\hi\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\hr\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\it\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\ja\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\pl\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\pt_BR\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\ru\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\locale\zh\LC_MESSAGES\zenmap.mo
%Program Files%\Nmap\share\zenmap\misc\profile_editor.xml
%Program Files%\Nmap\share\zenmap\pixmaps\default_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\default_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\freebsd_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\freebsd_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\irix_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\irix_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\linux_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\linux_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\macosx_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\macosx_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\openbsd_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\openbsd_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\redhat_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\redhat_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\solaris_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\solaris_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\throbber.gif
%Program Files%\Nmap\share\zenmap\pixmaps\throbber.png
%Program Files%\Nmap\share\zenmap\pixmaps\ubuntu_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\ubuntu_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\unknown_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\unknown_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_1_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_1_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_2_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_2_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_3_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_3_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_4_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_4_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_5_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\vl_5_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\win_32.png
%Program Files%\Nmap\share\zenmap\pixmaps\win_75.png
%Program Files%\Nmap\share\zenmap\pixmaps\zenmap.png
%Program Files%\Nmap\share\zenmap\pixmaps\radialnet\border.png
%Program Files%\Nmap\share\zenmap\pixmaps\radialnet\firewall.png
%Program Files%\Nmap\share\zenmap\pixmaps\radialnet\logo.png
%Program Files%\Nmap\share\zenmap\pixmaps\radialnet\padlock.png
%Program Files%\Nmap\share\zenmap\pixmaps\radialnet\router.png
%Program Files%\Nmap\share\zenmap\pixmaps\radialnet\switch.png
%Program Files%\Nmap\share\zenmap\pixmaps\radialnet\wireless.png
%Program Files%\Nmap\py2exe\CRYPT32.dll
%Program Files%\Nmap\py2exe\_ctypes.pyd
%Program Files%\Nmap\py2exe\_hashlib.pyd
%Program Files%\Nmap\py2exe\_socket.pyd
%Program Files%\Nmap\py2exe\_sqlite3.pyd
%Program Files%\Nmap\py2exe\_ssl.pyd
%Program Files%\Nmap\py2exe\atk.pyd
%Program Files%\Nmap\py2exe\bz2.pyd
%Program Files%\Nmap\py2exe\cairo._cairo.pyd
%Program Files%\Nmap\py2exe\freetype6.dll
%Program Files%\Nmap\py2exe\gio._gio.pyd
%Program Files%\Nmap\py2exe\glib._glib.pyd
%Program Files%\Nmap\py2exe\gobject._gobject.pyd
%Program Files%\Nmap\py2exe\gtk._gtk.pyd
%Program Files%\Nmap\py2exe\intl.dll
%Program Files%\Nmap\py2exe\libasprintf-0.dll
%Program Files%\Nmap\py2exe\libatk-1.0-0.dll
%Program Files%\Nmap\py2exe\libcairo-2.dll
%Program Files%\Nmap\py2exe\libcairo-gobject-2.dll
%Program Files%\Nmap\py2exe\libcairo-script-interpreter-2.dll
%Program Files%\Nmap\py2exe\libcroco-0.6-3.dll
%Program Files%\Nmap\py2exe\libexpat-1.dll
%Program Files%\Nmap\py2exe\libfontconfig-1.dll
%Program Files%\Nmap\py2exe\libgailutil-18.dll
%Program Files%\Nmap\py2exe\libgcc_s_dw2-1.dll
%Program Files%\Nmap\py2exe\libgdk-win32-2.0-0.dll
%Program Files%\Nmap\py2exe\libgdk_pixbuf-2.0-0.dll
%Program Files%\Nmap\py2exe\libgio-2.0-0.dll
%Program Files%\Nmap\py2exe\libglade-2.0-0.dll
%Program Files%\Nmap\py2exe\libglib-2.0-0.dll
%Program Files%\Nmap\py2exe\libgmodule-2.0-0.dll
%Program Files%\Nmap\py2exe\libgobject-2.0-0.dll
%Program Files%\Nmap\py2exe\libgsf-1-114.dll
%Program Files%\Nmap\py2exe\libgsf-win32-1-114.dll
%Program Files%\Nmap\py2exe\libgthread-2.0-0.dll
%Program Files%\Nmap\py2exe\libgtk-win32-2.0-0.dll
%Program Files%\Nmap\py2exe\libpango-1.0-0.dll
%Program Files%\Nmap\py2exe\libpangocairo-1.0-0.dll
%Program Files%\Nmap\py2exe\libpangoft2-1.0-0.dll
%Program Files%\Nmap\py2exe\libpangowin32-1.0-0.dll
%Program Files%\Nmap\py2exe\libpng14-14.dll
%Program Files%\Nmap\py2exe\library.zip
%Program Files%\Nmap\py2exe\librsvg-2-2.dll
%Program Files%\Nmap\py2exe\libxml2-2.dll
%Program Files%\Nmap\py2exe\pango.pyd
%Program Files%\Nmap\py2exe\pangocairo.pyd
%Program Files%\Nmap\py2exe\pyexpat.pyd
%Program Files%\Nmap\py2exe\select.pyd
%Program Files%\Nmap\py2exe\sqlite3.dll
%Program Files%\Nmap\py2exe\unicodedata.pyd
%Program Files%\Nmap\py2exe\zlib1.dll
%Program Files%\Nmap\py2exe\etc\bash_completion.d\gdbus-bash-completion.sh
%Program Files%\Nmap\py2exe\etc\bash_completion.d\gsettings-bash-completion.sh
%Program Files%\Nmap\py2exe\etc\fonts\fonts.conf
%Program Files%\Nmap\py2exe\etc\fonts\fonts.dtd
%Program Files%\Nmap\py2exe\etc\gtk-2.0\gtk.immodules
%Program Files%\Nmap\py2exe\etc\gtk-2.0\gtkrc
%Program Files%\Nmap\py2exe\etc\gtk-2.0\im-multipress.conf
%Program Files%\Nmap\py2exe\etc\pango\pango.aliases
%Program Files%\Nmap\py2exe\etc\pango\pango.modules
%Program Files%\Nmap\py2exe\lib\gtk-2.0\2.10.0\engines\libpixmap.dll
%Program Files%\Nmap\py2exe\lib\gtk-2.0\2.10.0\engines\libsvg.dll
%Program Files%\Nmap\py2exe\lib\gtk-2.0\2.10.0\engines\libwimp.dll
%Program Files%\Nmap\py2exe\lib\gtk-2.0\include\gdkconfig.h
%Program Files%\Nmap\py2exe\lib\gtk-2.0\modules\libgail.dll
%Program Files%\Nmap\py2exe\share\icons\hicolor\index.theme
%Program Files%\Nmap\py2exe\share\themes\Default\gtk-2.0-key\gtkrc
%Program Files%\Nmap\py2exe\share\themes\MS-Windows\gtk-2.0\gtkrc
%User Temp%\nsy3AE0.tmp\vcredist2008_x86.exe
%System Root%\{Random Characters}\vc_red.cab
%System Root%\{Random Characters}\vc_red.msi
%System Root%\{Random Characters}\install.exe
%System Root%\{Random Characters}\install.res.{Random 4 Characters}.dll
%System Root%\{Random Characters}\eula.{Random 4 Characters}.txt
%System Root%\{Random Characters}\globdata.ini
%System Root%\{Random Characters}\install.ini
%System Root%\{Random Characters}\vcredist.bmp
%System Root%\{Random Characters}\$shtdwn$.req
%User Temp%\dd_vcredistUI7A66.txt
%User Temp%\dd_vcredistMSI7A66.txt
%User Temp%\VWL201D.tmp
%Program Files%\Nmap\ndiff.exe
%Program Files%\Nmap\NDIFF_README
%Program Files%\Nmap\python27.dll
%Program Files%\Nmap\py2exe\CRYPT32.dll
%Program Files%\Nmap\py2exe\_ctypes.pyd
%Program Files%\Nmap\py2exe\_hashlib.pyd
%Program Files%\Nmap\py2exe\_socket.pyd
%Program Files%\Nmap\py2exe\_sqlite3.pyd
%Program Files%\Nmap\py2exe\_ssl.pyd
%Program Files%\Nmap\py2exe\atk.pyd
%Program Files%\Nmap\py2exe\bz2.pyd
%Program Files%\Nmap\py2exe\cairo._cairo.pyd
%Program Files%\Nmap\py2exe\freetype6.dll
%Program Files%\Nmap\py2exe\gio._gio.pyd
%Program Files%\Nmap\py2exe\glib._glib.pyd
%Program Files%\Nmap\py2exe\gobject._gobject.pyd
%Program Files%\Nmap\py2exe\gtk._gtk.pyd
%Program Files%\Nmap\py2exe\intl.dll
%Program Files%\Nmap\py2exe\libasprintf-0.dll
%Program Files%\Nmap\py2exe\libatk-1.0-0.dll
%Program Files%\Nmap\py2exe\libcairo-2.dll
%Program Files%\Nmap\py2exe\libcairo-gobject-2.dll
%Program Files%\Nmap\py2exe\libcairo-script-interpreter-2.dll
%Program Files%\Nmap\py2exe\libcroco-0.6-3.dll
%Program Files%\Nmap\py2exe\libexpat-1.dll
%Program Files%\Nmap\py2exe\libfontconfig-1.dll
%Program Files%\Nmap\py2exe\libgailutil-18.dll
%Program Files%\Nmap\py2exe\libgcc_s_dw2-1.dll
%Program Files%\Nmap\py2exe\libgdk-win32-2.0-0.dll
%Program Files%\Nmap\py2exe\libgdk_pixbuf-2.0-0.dll
%Program Files%\Nmap\py2exe\libgio-2.0-0.dll
%Program Files%\Nmap\py2exe\libglade-2.0-0.dll
%Program Files%\Nmap\py2exe\libglib-2.0-0.dll
%Program Files%\Nmap\py2exe\libgmodule-2.0-0.dll
%Program Files%\Nmap\py2exe\libgobject-2.0-0.dll
%Program Files%\Nmap\py2exe\libgsf-1-114.dll
%Program Files%\Nmap\py2exe\libgsf-win32-1-114.dll
%Program Files%\Nmap\py2exe\libgthread-2.0-0.dll
%Program Files%\Nmap\py2exe\libgtk-win32-2.0-0.dll
%Program Files%\Nmap\py2exe\libpango-1.0-0.dll
%Program Files%\Nmap\py2exe\libpangocairo-1.0-0.dll
%Program Files%\Nmap\py2exe\libpangoft2-1.0-0.dll
%Program Files%\Nmap\py2exe\libpangowin32-1.0-0.dll
%Program Files%\Nmap\py2exe\libpng14-14.dll
%Program Files%\Nmap\py2exe\library.zip
%Program Files%\Nmap\py2exe\librsvg-2-2.dll
%Program Files%\Nmap\py2exe\libxml2-2.dll
%Program Files%\Nmap\py2exe\pango.pyd
%Program Files%\Nmap\py2exe\pangocairo.pyd
%Program Files%\Nmap\py2exe\pyexpat.pyd
%Program Files%\Nmap\py2exe\select.pyd
%Program Files%\Nmap\py2exe\sqlite3.dll
%Program Files%\Nmap\py2exe\unicodedata.pyd
%Program Files%\Nmap\py2exe\zlib1.dll
%Program Files%\Nmap\py2exe\etc\bash_completion.d\gdbus-bash-completion.sh
%Program Files%\Nmap\py2exe\etc\bash_completion.d\gsettings-bash-completion.sh
%Program Files%\Nmap\py2exe\etc\fonts\fonts.conf
%Program Files%\Nmap\py2exe\etc\fonts\fonts.dtd
%Program Files%\Nmap\py2exe\etc\gtk-2.0\gtk.immodules
%Program Files%\Nmap\py2exe\etc\gtk-2.0\gtkrc
%Program Files%\Nmap\py2exe\etc\gtk-2.0\im-multipress.conf
%Program Files%\Nmap\py2exe\etc\pango\pango.aliases
%Program Files%\Nmap\py2exe\etc\pango\pango.modules
%Program Files%\Nmap\py2exe\lib\gtk-2.0\2.10.0\engines\libpixmap.dll
%Program Files%\Nmap\py2exe\lib\gtk-2.0\2.10.0\engines\libsvg.dll
%Program Files%\Nmap\py2exe\lib\gtk-2.0\2.10.0\engines\libwimp.dll
%Program Files%\Nmap\py2exe\lib\gtk-2.0\include\gdkconfig.h
%Program Files%\Nmap\py2exe\lib\gtk-2.0\modules\libgail.dll
%Program Files%\Nmap\py2exe\share\icons\hicolor\index.theme
%Program Files%\Nmap\py2exe\share\themes\Default\gtk-2.0-key\gtkrc
%Program Files%\Nmap\py2exe\share\themes\MS-Windows\gtk-2.0\gtkrc
%Program Files%\Nmap\ncat.exe
%Program Files%\Nmap\ca-bundle.crt
%Program Files%\Nmap\nping.exe
%User Temp%\nsy3AE0.tmp\InstallOptions.dll
%Desktop%\Nmap - Zenmap GUI.lnk
%Programs%\Nmap\Nmap - Zenmap GUI.lnk
Once located, select the file then press SHIFT+DELETE to delete it.
*Note: Read the following Microsoft page if these steps do not work on Windows 7 and Windows Server 2008 (R2).

Step 7

Scan your computer with your Trend Micro product to delete files detected as PUA.Win32.Netcat.B. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check the following Trend Micro Support pages for more information:

Did this description help? Tell us how we did.

PUA.Win32.Netcat.B

OVERVIEW

TECHNICAL DETAILS

SOLUTION

Related Blog Entries

Resources

Support

About Trend

Country Headquarters