FLARE-VM installation note

Successfully Installed Packages

The following packages were installed successfully (confirmed by [+] INFO : <package> has been installed messages):

7zip.vm
apimonitor.vm
apktool.vm
asar.vm
autoit-ripper.vm
binaryninja.vm (despite errors, marked installed)
blobrunner.vm
blobrunner64.vm
bytecodeviewer.vm
capa.vm
capa-explorer-web.vm
chrome.extensions.vm (despite errors, marked installed)
cmder.vm
codetrack.vm
common.vm
cryptotester.vm
cyberchef.vm (despite errors, marked installed)
cygwin.vm
de4dot-cex.vm
dex2jar.vm
didier-stevens-beta.vm
didier-stevens-suite.vm
die.vm
dll-to-exe.vm
dnlib.vm
dnspyex.vm
dotdumper.vm
dotnetfx
exeinfope.vm
explorersuite.vm
extreme_dumper.vm
ezviewer.vm
fakenet-ng.vm
file.vm
Firefox
floss.vm
garbageman.vm
ghidra
ghidra.vm
goresym.vm
gostringungarbler.vm
hashmyfiles.vm
hollowshunter.vm
hxd.vm
ida.plugin.capa.vm (despite errors, marked installed)
ida.plugin.comida.vm (despite errors, marked installed)
ida.plugin.dereferencing.vm (despite errors, marked installed)
ida.plugin.diaphora.vm (despite errors, marked installed)
ida.plugin.flare.vm (despite errors, marked installed)
ida.plugin.hrtng.vm
ida.plugin.ifl.vm (despite errors, marked installed)
ida.plugin.xray.vm
ida.plugin.xrefer.vm (despite errors, marked installed)
idafree.vm
idr.vm
ifpstools.vm
ilspy.vm
innoextract.vm
innounp.vm
installer.vm
internet_detector.vm (despite errors, marked installed)
ipython.vm
isd.vm
js-beautify.vm
js-deobfuscator.vm
keystone.vm
magika.vm
malware-jail.vm
map.vm
nasam.vm
net-reactor-slayer.vm
notepadplusplus.vm
notepadpp.plugin.compare.vm
notepadpp.plugin.jstool.vm
notepadpp.plugin.xmltools.vm
obfuscator-io-deobfuscator.vm
offvis.vm
onenoteanalyzer.vm
openjdk
openjdk.vm
pe_unmapper.vm
pebear.vm
peid.vm
pesieve.vm
pestudio.vm
pkg-unpacker.vm
processdump.vm
procdot.vm
psnotify.vm
pycdas.vm
pycdc.vm
python310
rat-king-parser.vm
recaf.vm
reg_export.vm
regshot.vm
resourcehacker.vm
rundotnetdll.vm
scdbg.vm
sclauncher.vm
sclauncher64.vm
sfextract.vm (despite errors, marked installed)
shellcode_launcher.vm
sysinternals.vm (despite errors, marked installed)
systeminformer.vm
uncompyle6.vm
uniextract2.vm
upx.vm
vbdec.vm
vb-decompiler-lite.vm
vcredist140
vcredist2015
visualstudio-installer
visualstudio2017buildtools
vscode.extension.jupyter.vm
vscode.extension.python.vm
vscode.vm
wireshark.vm
x64dbg.vm
yara.vm

Failed to Install Packages

The following packages failed installation (confirmed by final [+] ERROR : Failed to install list):

bindiff.vm
binaryninja.vm (final state: failed)
chrome.extensions.vm (final state: failed)
cyberchef.vm (final state: failed)
debloat.vm
ida.plugin.capa.vm (final state: failed)
ida.plugin.comida.vm (final state: failed)
ida.plugin.dereferencing.vm (final state: failed)
ida.plugin.diaphora.vm (final state: failed)
ida.plugin.flare.vm (final state: failed)
ida.plugin.ifl.vm (final state: failed)
ida.plugin.xrefer.vm (final state: failed)
internet_detector.vm (final state: failed)
libraries.python3.vm
nmap.vm
pdbresym.vm
python310 (final state: failed)
regcool.vm
sfextract.vm (final state: failed)
sysinternals.vm (final state: failed)
ttd.vm
unpyc3.vm
vcbuildtools.vm
visualstudio2017-workload-vctools
windbg.vm

Key Observations

1. Recurring Issues:

   • ttd.vm/windbg.vm: Failed with The type initializer for '<Module>' threw an exception during Appx installation.
   • vcbuildtools.vm: Missing Visual Studio 2017 BuildTools path (C:\Program Files (x86)\Microsoft Visual Studio\2017\BuildTools\VC\Auxiliary\Build).
   • debloat.vm: Missing file start2.bin.
   • regcool.vm: SHA256 checksum mismatch for RegCoolX64.zip.
   • Language pack installation failures due to missing LanguagePackManagement module.

2. Partial Successes:
   Some packages (e.g., binaryninja.vm, ida.plugin.*) showed success messages initially but were later marked as failed in the final summary, indicating post-install validation issues.

Use choco install -y <package> for individual retries after fixing root causes.

For full details, review the log at %VM_COMMON_DIR%\log.txt or %PROGRAMDATA%\chocolatey\logs\chocolatey.log.

Lost Internet Connection

The problem is the Windows DNS Service that gets disabled through the following line of code of the config.xml:

<registry-item name="Force DNS requests to always come from requesting process" path="HKLM:\SYSTEM\CurrentControlSet\services\Dnscache" value="Start" type="DWord" data="4" />

By changing the corresponding registry key back to the default value 2, internet access works. Or execute the following command to change registry value back:

reg add "HKLM\SYSTEM\CurrentControlSet\Services\Dnscache" /v Start /t REG_DWORD /d 2 /f

Updates

07-08-2025: Installed .NET 9.0 for Eric Zimmerman’s GUI Tools, but instead of download the runtime matches the OS's architect (ARM64), I have to download the one matches application architect (x64). Configured registry DNS Service to gain Internet (used to roll back to old snapshots to tackle this issue).