IDA plugin proposal: hrtng.vm

[mwilliams31]

Package Name

ida.plugin.hrtng

Tool Name

hrtng.dll

Package type

IDA_PLUGIN

Version

1.1.8

Tool's authors

Sergey Belov

Tool's description

IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations

Download URL

https://github.com/KasperskyLab/hrtng/releases/download/v1.1.8/hrtng-1.1.8.7z

Download SHA256 Hash

58dc9b893ca7f5a865175d90ac30dce50aab86f3e2b7d473b94269aa85f44fed

Why is this tool a good addition?

Contains numerous features not currently offered by existing IDA plugins installed in FLARE VM.

Extra information

No response

[mwilliams31]

Beyond including hrtng.dll in the plugins directory, it also requires "apilist.txt and literal.txt files from hrtng/bin/plugins".

[Ana06]

This is a great idea, thanks @mwilliams31! Because the way it is installed, we can use automation to create the package, but we should be able to add it manually. 😉 It seems there are different version for different IDA versions and I assume they can't co-exist, so I think we should install the IDA 9.0 version. Is that right?