diff --git a/setup/start_sandbox.ps1 b/setup/start_sandbox.ps1
index c983b17..3a7a615 100644
--- a/setup/start_sandbox.ps1
+++ b/setup/start_sandbox.ps1
@@ -122,6 +122,8 @@ Write-DateLog "Date and time format set" >> $TEMP\start_sandbox.log
 # Dark mode
 if ($WSDFIR_DARK -eq "Yes") {
     Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize -Name AppsUseLightTheme -Value 0
+    New-Item -Path "$env:USERPROFILE\AppData\Roaming\Notepad++" -ItemType Directory -Force | Out-Null
+    Copy-Item "$env:USERPROFILE\Documents\tools\configurations\notepad++_dark.xml" "$env:USERPROFILE\AppData\Roaming\Notepad++\config.xml" -Force
     Write-DateLog "Dark mode set" >> $TEMP\start_sandbox.log
 }
 
diff --git a/setup/utils/dfirws-install.ps1 b/setup/utils/dfirws-install.ps1
index 067654e..cf27253 100644
--- a/setup/utils/dfirws-install.ps1
+++ b/setup/utils/dfirws-install.ps1
@@ -25,9 +25,10 @@ if ($args.Count -eq 0) {
     Write-Output "   --ruby"
     Write-Output "   --rust"
     Write-Output "   --vscode"
+    Write-Output "   --wireshark"
     Write-Output "   --x64dbg"
     Write-Output "   --zui"
-    exit
+    Exit
 }
 
 if ($args -contains "--apimonitor") {
@@ -110,6 +111,10 @@ if ($args -contains "--vscode") {
     Install-VSCode
 }
 
+if ($args -contains "--wireshark") {
+    Install-Wireshark
+}
+
 if ($args -contains "--x64dbg") {
     Install-X64dbg
 }