install.ps1

# malware-sandbox Install Script
# This script sets up the malware-sandbox Windows Sandbox configuration



Write-Host "Installing malware-sandbox..." -ForegroundColor Green

# Root path where the repository (Tencent.wsb etc.) lives
$InstallPath = $PSScriptRoot

Write-Host "Using repository path: $InstallPath" -ForegroundColor DarkGray

# Persistent storage base in user profile (kept outside repo / program dir). We link App/Data/Downloads to here.
$UserBase = Join-Path $env:UserProfile "malware-sandbox"
$UserApp  = Join-Path $UserBase "App"
$UserData = Join-Path $UserBase "Data"
$UserDownloads = Join-Path $env:UserProfile "Downloads"  # real user downloads

Write-Host "User persistent base: $UserBase" -ForegroundColor DarkGray

# Provide Windows Sandbox information (without requiring admin privileges)
Write-Host "Windows Sandbox Requirements:" -ForegroundColor Yellow
Write-Host "- Windows 11 Pro/Enterprise/Education" -ForegroundColor White
Write-Host "- Windows Sandbox feature must be enabled" -ForegroundColor White
Write-Host ""
Write-Host "To enable Windows Sandbox (run as Administrator):" -ForegroundColor Cyan
Write-Host "Enable-WindowsOptionalFeature -Online -FeatureName 'Containers-DisposableClientVM' -All" -ForegroundColor White
Write-Host "Then restart your computer." -ForegroundColor White
Write-Host ""

Write-Host "Preparing user persistent base (App/Data)..." -ForegroundColor Yellow
foreach ($p in @($UserBase,$UserApp,$UserData)) {
    if (-not (Test-Path $p)) { New-Item -ItemType Directory -Path $p -Force | Out-Null; Write-Host "Created: $p" -ForegroundColor Gray }
}

# Helper: ensure directory link (prefer junction, fallback symlink, fallback plain folder)
function Ensure-DirLink($linkPath, $targetPath) {
    if (-not (Test-Path $targetPath)) { New-Item -ItemType Directory -Path $targetPath -Force | Out-Null }
    if (Test-Path $linkPath) {
        $item = Get-Item $linkPath -ErrorAction SilentlyContinue
        if ($item -and ($item.Attributes -band [IO.FileAttributes]::ReparsePoint)) {
            Write-Host "Already linked: $linkPath" -ForegroundColor DarkGray
            return
        }
        if ($linkPath -ne $targetPath) {
            Write-Host "Existing normal directory at $linkPath. Migrating contents to $targetPath..." -ForegroundColor Yellow
            Get-ChildItem -Path $linkPath -Force | ForEach-Object { Move-Item -Path $_.FullName -Destination $targetPath -Force }
            Remove-Item $linkPath -Recurse -Force
        }
    }
    try {
        New-Item -ItemType Junction -Path $linkPath -Target $targetPath -Force | Out-Null
        Write-Host "Linked (Junction): $linkPath -> $targetPath" -ForegroundColor Green
    } catch {
        Write-Warning "Junction failed for $linkPath. Trying symbolic link. $_"
        try {
            New-Item -ItemType SymbolicLink -Path $linkPath -Target $targetPath -Force | Out-Null
            Write-Host "Linked (Symlink): $linkPath -> $targetPath" -ForegroundColor Green
        } catch {
            Write-Warning "Failed to link $linkPath. Using plain folder (NOT LINKED)."
            if (-not (Test-Path $linkPath)) { New-Item -ItemType Directory -Path $linkPath -Force | Out-Null }
        }
    }
}

Write-Host "Linking App, Data, Downloads..." -ForegroundColor Yellow
Ensure-DirLink (Join-Path $InstallPath "App")  $UserApp
Ensure-DirLink (Join-Path $InstallPath "Data") $UserData
Ensure-DirLink (Join-Path $InstallPath "Downloads") $UserDownloads

# Create required directory structure (original logic retained). Since App/Data are links, their subdirectories go into user profile.
Write-Host "Creating directory structure (original logic) ..." -ForegroundColor Yellow

$directories = @(
    "App\QQ",
    "App\QQNT",
    "App\TIM",
    "App\WeChat",
    "App\Weixin",
    "App\WXWork",
    "App\WeMeet",
    "App\TencentDocs",
    "App\CloudMusic",
    "Data\Common Files",
    "Data\Documents\Tencent",
    "Data\Documents\WeChat",
    "Data\Documents\xwechat_files",
    "Data\Documents\WXWork",
    "Data\Roaming\Tencent",
    "Data\Roaming\WeChat",
    "Data\Roaming\xwechat",
    "Data\Roaming\TencentDocs",
    "Data\Roaming\WeMeet",
    "Data\Roaming\baidu",
    "Data\Roaming\BaiduYunGuanjia",
    "Data\Roaming\BaiduYunKernel",
    "Data\Roaming\Adobe",
    "Data\Roaming\quark-cloud-drive",
    "Data\Local\Quark",
    "Data\Local\QuarkUpdater",
    "Data\Local\Programs\Quark",
    "Data\Local\Programs\Common\Quark",
    "Data\Local\Programs\quark-cloud-drive",
    "Data\Local\CloudMusic",
    "Data\SysWOW64",
    "Data\ProgramData\Tencent",
    "Desktop",
    "Scripts",
    "Data\Documents\CloudMusic"
)

foreach ($dir in $directories) {
    $fullPath = Join-Path $InstallPath $dir
    if (-not (Test-Path $fullPath)) {
        New-Item -ItemType Directory -Path $fullPath -Force | Out-Null
        Write-Host "Created: $fullPath" -ForegroundColor Gray
    }
}

# Downloads already linked earlier; nothing further here.

# Move sandbox-setup.ps1 to Scripts directory if it exists
Write-Host "Setting up sandbox scripts..." -ForegroundColor Yellow
$setupScriptSource = Join-Path $InstallPath "sandbox-setup.ps1"
$setupScriptTarget = Join-Path $InstallPath "Scripts\sandbox-setup.ps1"

if (Test-Path $setupScriptSource) {
    try {
        Copy-Item -Path $setupScriptSource -Destination $setupScriptTarget -Force
        Write-Host "Moved sandbox-setup.ps1 to Scripts directory" -ForegroundColor Green
        
    } catch {
        Write-Warning "Failed to move sandbox-setup.ps1: $($_.Exception.Message)"
    }
}

# Create desktop shortcuts
Write-Host "Creating desktop shortcuts..." -ForegroundColor Yellow

$desktopPath = Join-Path $InstallPath "Desktop"
$shortcuts = @(
    @{Name = "QQ.lnk"; Target = "C:\Program Files (x86)\Tencent\QQ\QQ.exe" },
    @{Name = "WeChat.lnk"; Target = "C:\Program Files\Tencent\WeChat\WeChat.exe" },
    @{Name = "WeMeet.lnk"; Target = "C:\Program Files\Tencent\WeMeet\WeMeet.exe" }
)

foreach ($shortcut in $shortcuts) {
    $shortcutPath = Join-Path $desktopPath $shortcut.Name
    if (-not (Test-Path $shortcutPath)) {
        # Create empty shortcut files as placeholders
        New-Item -ItemType File -Path $shortcutPath -Force | Out-Null
        Write-Host "Created shortcut placeholder: $($shortcut.Name)" -ForegroundColor Gray
    }
}

Write-Host "malware-sandbox installation completed!" -ForegroundColor Green
Write-Host ""
Write-Host "Next steps:" -ForegroundColor Cyan
Write-Host "1. Ensure Windows Sandbox is enabled (see requirements above)" -ForegroundColor White
Write-Host "2. Double-click Malware.wsb to start the sandbox" -ForegroundColor White
Write-Host "3. Install your malware applications inside the sandbox" -ForegroundColor White
Write-Host "4. Move desktop shortcuts to fix persistence" -ForegroundColor White
Write-Host ""
Write-Host "Features:" -ForegroundColor Cyan
Write-Host "- Downloads folder is linked to your user Downloads" -ForegroundColor White
Write-Host "- Files downloaded in sandbox will appear in your main Downloads" -ForegroundColor White
Write-Host "- App & Data stored in user profile for persistence (%UserProfile%/malware-sandbox)" -ForegroundColor White
Write-Host "- Directory structure automatically created" -ForegroundColor White