How to uninstall Nmap on Windows
Keep saved scan results and Zenmap profiles before removing Nmap. Npcap is a separately installed capture driver and may also be used by Wireshark or other tools.
Save your data and quit
Finish or cancel the scans you started, save wanted results and close Zenmap. Remove Nmap first. If Npcap remains in Windows Apps, decide about it separately after checking other capture tools; do not remove its service or driver files by hand.
Uninstall the tested package
In Windows 11, open Settings › Apps › Installed apps, find Nmap, and choose Uninstall. In Windows 10, use Settings › Apps › Apps & features. Keep the installed program folder intact until its uninstaller finishes. If this was the winget package, first confirm its exact identity:
winget list --id Insecure.Nmap --exact
If the successful query shows the intended installation, remove that package:
winget uninstall --id Insecure.Nmap --exact
This follows the package’s registered removal method; portable packages use their package-manager removal instead. An error or a missing winget match is not proof that the app is absent: check the Windows app list and the original installation method. Follow any vendor confirmation or restart request after saving other work. See Microsoft’s uninstall command documentation.
Data and components to check
The following locations or components need separate decisions. A remaining folder is not automatically disposable.
| Location or component | What to keep or check |
|---|---|
%USERPROFILE%\.zenmap |
Zenmap user data observed after the test; inspect saved profiles and results before optional removal. |
%LOCALAPPDATA%\zenmap.exe.log |
An empty log observed in the test. Review the actual file on this PC, not every similarly named log. |
Npcap |
A separate dependency retained in the test; keep it if another tool needs it. |
See Nmap’s official documentation.
Check the outcome
winget list --id Insecure.Nmap --exact
Test-Path -LiteralPath "$env:USERPROFILE\.zenmap"
Test-Path -LiteralPath "$env:LOCALAPPDATA\zenmap.exe.log"
A successful package query with no matching row means that package registration was not found. A matching row means it still exists; an error leaves the result unknown. For each Test-Path, True means that exact location remains and False means it was not found; an access error does not mean it was removed. Keep deliberately retained data. Check Task Manager for a process whose executable belongs to this installation, and distinguish another version or a separate companion app before acting.
What Mole lists
The review removed Nmap’s program directory and checked its owned user registry key. The Zenmap directory and log above were not listed in that run. Npcap was already installed beforehand and remained registered.
What this test covered
The machine-wide NSIS Nmap 7.80 package was launched through Zenmap and removed. The test verified the recorded removal set, not every later Nmap version or removal of a shared Npcap driver. An upgrade was not executed.
These results are from a development build of Mole. Other released builds were not individually tested.