diff --git a/optional/install-wireshark.cmd b/optional/install-wireshark.cmd
new file mode 100644
index 0000000..7549fe7
--- /dev/null
+++ b/optional/install-wireshark.cmd
@@ -0,0 +1,31 @@
+@echo off
+call check-for-admin
+if %ERRORLEVEL% neq 0 exit /b
+
+set T=%SystemDrive%\TEMP
+set EXE=..\software\wireshark-setup.exe
+
+if NOT EXIST %EXE% (
+  echo ERROR: %EXE% not found!
+  exit /b
+)
+
+echo ####### %0 #######
+
+echo extracting npcap ...
+7z e -aoa -o%T% %EXE% npcap*.exe 1>nul 2>nul
+move /Y %T%\npcap*.exe %T%\npcap.exe
+
+echo installing npcap ...
+start /wait %T%\npcap.exe
+del /F /Q %T%\npcap.exe 2>nul
+
+echo installing WireShark ...
+start /wait %EXE% /S
+
+rem refresh desktop (W10 style)
+ie4uinit.exe -show
+
+echo ####### %0 #######
+pause
+