Background Image not found

[ISH2YU]

What's the problem?

Windows PowerShell Copyright (C) Microsoft Corporation. All rights reserved.

Try the new cross-platform PowerShell https://aka.ms/pscore6

PS C:\Windows\system32> .\install.ps1 .\install.ps1 : The term '.\install.ps1' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. At line:1 char:1

• .\install.ps1

•   + CategoryInfo          : ObjectNotFound: (.\install.ps1:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException
  
  

PS C:\Windows\system32> cd C:\Users\flare\Desktop PS C:\Users\flare\Desktop> .\install.ps1 [+] Checking if PowerShell version is compatible... [+] Installing with PowerShell version 5.1.19041.3803 [+] Checking if script is running as administrator... [+] Running as administrator [+] Checking if execution policy is unrestricted... [+] Execution policy is unrestricted [+] Checking Operating System version compatibility... [+] Installing on Windows version [+] Checking for spaces in the username... [+] Username 'flare' does not contain any spaces. [+] Checking if host has enough disk space... [+] Disk is larger than 60 GB [+] Checking for Internet connectivity (google.com)... [+] Internet connectivity check for google.com passed [+] Checking for Internet connectivity (github.com)... [+] Internet connectivity check for github.com passed [+] Checking for Internet connectivity (raw.githubusercontent.com)... [+] Internet connectivity check for raw.githubusercontent.com passed [+] Network connectivity looks good [+] Checking if Windows Defender Tamper Protection is disabled... [+] Tamper Protection is disabled [+] Checking if Windows Defender service is disabled... [+] Defender is disabled [+] Setting password to never expire to avoid that a password expiration blocks the installation... [-] Have you taken a VM snapshot to ensure you can revert to pre-installation state? (Y/N): y [+] Getting user credentials ...

Windows PowerShell credential request Enter your credentials. Password for user flare: ****

[+] Attempting to disable updates... Boxstarter: Microsoft Update is already disabled, no action will be taken. [!] Failed to disable Microsoft Store updates Chocolatey v2.4.3 Nothing to change. Config already set. Chocolatey v2.4.3 Nothing to change. Config already set. Chocolatey v2.4.3 Nothing to change. Config already set. Chocolatey v2.4.3 Nothing to change. Config already set.

name

010editor.vm 7zip.vm apimonitor.vm apktool.vm asar.vm autoit-ripper.vm binaryninja.vm bindiff.vm blobrunner.vm blobrunner64.vm bytecodeviewer.vm capa-explorer-web.vm capa.vm chrome.extensions.vm cmder.vm codetrack.vm cryptotester.vm cyberchef.vm cygwin.vm de4dot-cex.vm dependencywalker.vm dex2jar.vm didier-stevens-beta.vm didier-stevens-suite.vm die.vm dll-to-exe.vm dnlib.vm dnspyex.vm dotdumper.vm dotnet3.5 #comment exeinfope.vm explorersuite.vm extreme_dumper.vm ezviewer.vm fakenet-ng.vm file.vm floss.vm garbageman.vm ghidra.vm goresym.vm gostringungarbler.vm hashmyfiles.vm hollowshunter.vm hxd.vm ida.plugin.capa.vm ida.plugin.comida.vm ida.plugin.dereferencing.vm ida.plugin.diaphora.vm ida.plugin.flare.vm ida.plugin.hrtng.vm ida.plugin.ifl.vm ida.plugin.xray.vm ida.plugin.xrefer.vm idafree.vm idr.vm ifpstools.vm ilspy.vm innoextract.vm innounp.vm internet_detector.vm ipython.vm isd.vm js-beautify.vm js-deobfuscator.vm keystone.vm libraries.python3.vm magika.vm malware-jail.vm map.vm nasm.vm net-reactor-slayer.vm nmap.vm notepadplusplus.vm notepadpp.plugin.compare.vm notepadpp.plugin.jstool.vm notepadpp.plugin.xmltools.vm obfuscator-io-deobfuscator.vm offvis.vm onenoteanalyzer.vm pdbresym.vm pdfstreamdumper.vm pe_unmapper.vm pebear.vm peid.vm pesieve.vm pestudio.vm pkg-unpacker.vm pma-labs.vm procdot.vm processdump.vm psnotify.vm pycdas.vm pycdc.vm rat-king-parser.vm recaf.vm reg_export.vm regcool.vm regshot.vm resourcehacker.vm rundotnetdll.vm scdbg.vm sclauncher.vm sclauncher64.vm sfextract.vm shellcode_launcher.vm sysinternals.vm systeminformer.vm ttd.vm uncompyle6.vm uniextract2.vm unpyc3.vm upx.vm vb-decompiler-lite.vm vbdec.vm vcbuildtools.vm vcredist-all vscode.extension.jupyter.vm vscode.extension.python.vm vscode.vm windbg.vm windows-terminal.vm wireshark.vm x64dbg.plugin.dbgchild.vm x64dbg.plugin.ollydumpex.vm x64dbg.plugin.scyllahide.vm x64dbg.plugin.x64dbgpy.vm x64dbg.vm yara.vm Refreshing environment variables from the registry for powershell.exe. Please wait... Finished Chocolatey v2.4.3 Installing the following packages: common.vm By installing, you accept licenses for the packages. common.vm v0.0.0.20250509 already installed. Forcing reinstall of version '0.0.0.20250509'. Please use upgrade if you meant to upgrade to a new version. [NuGet] One or more unresolved package dependency constraints detected in the Chocolatey lib folder. All dependency constraints must be resolved to add or update packages. If these packages are being updated this message may be ignored, if not the following error(s) may be blocking the current package operation: 'debloat.vm 0.0.0.20250423 constraint: common.vm (>= 0.0.0.20250407)' Downloading package from source 'https://www.myget.org/F/vm-packages/api/v2' Progress: Downloading common.vm 0.0.0.20250509... 100%

common.vm v0.0.0.20250509 (forced) common.vm package files install completed. Performing other installation steps. [+] VM_COMMON_DIR set to: C:\ProgramData_VM [+] PSModulePath set to: C:\ProgramData_VM;C:\ProgramData\Boxstarter;C:\Program Files\WindowsPowerShell\Modules;C:\Windows\system32\WindowsPowerShell\v1.0\Modules [+] TOOL_LIST_DIR set to: C:\Users\flare\Desktop\Tools [+] RAW_TOOLS_DIR set to: C:\Tools Environment Vars (like PATH) have changed. Close/reopen your shell to see the changes (or in powershell/cmd.exe just type refreshenv). The install of common.vm was successful. Software install location not explicitly set, it could be in package or default install location of installer.

Chocolatey installed 1/1 packages. See the log for details (C:\ProgramData\chocolatey\logs\chocolatey.log). Refreshing environment variables from the registry for powershell.exe. Please wait... Finished Chocolatey v2.4.3 Installing the following packages: debloat.vm By installing, you accept licenses for the packages. debloat.vm v0.0.0.20250423 already installed. Forcing reinstall of version '0.0.0.20250423'. Please use upgrade if you meant to upgrade to a new version. Downloading package from source 'https://www.myget.org/F/vm-packages/api/v2' Progress: Downloading debloat.vm 0.0.0.20250423... 100%

debloat.vm v0.0.0.20250423 (forced) debloat.vm package files install completed. Performing other installation steps. Applying C:\Users\flare\Desktop\debloat.vm\tools\win10.xml Invalid path: C:\Users\flare\Desktop\debloat.vm\tools\win10.xml An error occurred while applying config. Error: Invalid path: C:\Users\flare\Desktop\debloat.vm\tools\win10.xml INFO Debloating and performance modifications for Win10 done The install of debloat.vm was successful. Software install location not explicitly set, it could be in package or default install location of installer.

Chocolatey installed 1/1 packages. See the log for details (C:\ProgramData\chocolatey\logs\chocolatey.log). Copy-Item : Cannot find path 'C:\ProgramData_VM\background.png' because it does not exist. At C:\Users\flare\Desktop\install.ps1:970 char:1

• Copy-Item $backgroundImage $lockScreenImage

•   + CategoryInfo          : ObjectNotFound: (C:\ProgramData\_VM\background.png:String) [Copy-Item], ItemNotFoundExce
   ption
    + FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.CopyItemCommand
  
  

Steps to Reproduce

I think its clear just run ./install.ps1

Environment

Vmware

Additional Information

No response

[ISH2YU]

I think the issue was that , for downloading tools i was getting a seperate window I refered to one video https://youtu.be/fSrR4ENARgg?feature=shared and even more few more after 3-4 tries it installed but thats a bug in some installtion somewhere i suppose or else it could have happened in single attempt

[Ana06]

The log says that it does not find C:\ProgramData\_VM\background.png which is downloaded before the tools download in https://github.com/mandiant/flare-vm/blob/main/install.ps1#L1232. Can you check if C:\ProgramData\_VM\background.png exists?

Has someone else experienced this issue? If so, we may want to verify that the required files have been downloaded successfully and provide a more intuitive error to the user.

Related: https://github.com/mandiant/flare-vm/issues/695

[ISH2YU]

Like even if it didnt existed i downloaded one background.png from flare-vm github since it was missing and pasted there but it still didnt work idk why , though I refreshed and installed again for 3-4 tries it worked