search

mandiant / flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
Apache License 2.0
6.38k stars 900 forks source link

Issues installing Flare on Windows 10 VM in Hyper-V #402

Closed skg295 closed 1 year ago

skg295 commented 2 years ago

I went through the procedures for installing Flare by running .\install.ps1 in power shell, then the stops at the following error.

Does anyone know how to overcome this issue? I don't have any utilites in my Flare folder.

[2022-05-10T09:35:27.8484244-07:00:::PID 6384] Boxstarter: Error from Chocolatey:

Message : Chocolatey reported an unsuccessful exit code of 1. See C:\Users\Srinivas Gupta\AppData\Local\Boxstarter\boxstarter.log for details. Data : {} InnerException : TargetSite : StackTrace : HelpLink : Source : HResult : -2146233087

[2022-05-10T09:35:27.8484244-07:00:::PID 6384] Boxstarter: Exit Code '1' is no reason to reboot [2022-05-10T09:35:27.8640450-07:00:::PID 6384] ++ Boxstarter finished Calling Chocolatey to install flarevm.win10.installer.fireeye. This may take several minutes to complete... 00:01:41.1074955 [2022-05-10T09:35:27.8640450-07:00:::PID 6384] ++ Boxstarter finished Calling Chocolatey to install flarevm.win10.installer.fireeye. This may take several minutes to complete... 00:01:41.1074955 [2022-05-10T09:35:27.8640450-07:00:::PID 6384] Boxstarter: Restore Automatic Updates from Windows Update [2022-05-10T09:35:27.8796684-07:00:::PID 6384] Boxstarter: Enabling UAC [2022-05-10T09:35:27.8952875-07:00:::PID 6384] Boxstarter: Cleaning up and not rebooting [2022-05-10T09:35:27.8952875-07:00:::PID 6384] Boxstarter: Cleaning up restart file [2022-05-10T09:35:27.9109117-07:00:::PID 6384] Boxstarter: Cleaning up autologon registry keys

Squiblydoo commented 2 years ago

I’ve observed an issue where the Install Script can fail due to a space in the username. It looks like that could be your problem too.

skg295 commented 2 years ago

oh ok, wow. Thanks, I would have never figured that out!

vm-packages commented 1 year ago

Thank you for your feedback! We've been working on major updates to FLARE VM over the last year. The now revamped FLARE VM has just been released and will make the project more open and maintainable. Please check out our blog post at https://www.mandiant.com/resources/blog/flarevm-open-to-public and give the new installation a try.

If this problem still persists with the new installation, please report:

Please note that we use this message to close all legacy issues in this repository. We look forward to your feedback and support for the next generation of FLARE VM.