From f7f90eb0bd745c7ced846f9ddd2846f9de6d6e98 Mon Sep 17 00:00:00 2001
From: vm-packages <vm-packages@mandiant.com>
Date: Thu, 7 Sep 2023 10:43:02 +0000
Subject: [PATCH] Add cryptotester.vm

Closes https://github.com/mandiant/VM-Packages/issues/598.
---
 packages/cryptotester.vm/cryptotester.vm.nuspec      | 12 ++++++++++++
 packages/cryptotester.vm/tools/chocolateyinstall.ps1 | 10 ++++++++++
 .../cryptotester.vm/tools/chocolateyuninstall.ps1    |  7 +++++++
 3 files changed, 29 insertions(+)
 create mode 100644 packages/cryptotester.vm/cryptotester.vm.nuspec
 create mode 100644 packages/cryptotester.vm/tools/chocolateyinstall.ps1
 create mode 100644 packages/cryptotester.vm/tools/chocolateyuninstall.ps1

diff --git a/packages/cryptotester.vm/cryptotester.vm.nuspec b/packages/cryptotester.vm/cryptotester.vm.nuspec
new file mode 100644
index 000000000..700abd873
--- /dev/null
+++ b/packages/cryptotester.vm/cryptotester.vm.nuspec
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?>
+<package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
+  <metadata>
+    <id>cryptotester.vm</id>
+    <version>1.7.0.20230907</version>
+    <authors>Michael Gillespie (@demonslay335)</authors>
+    <description>Utility tool for performing cryptanalysis with a focus on ransomware cryptography</description>
+    <dependencies>
+      <dependency id="common.vm" />
+    </dependencies>
+  </metadata>
+</package>
diff --git a/packages/cryptotester.vm/tools/chocolateyinstall.ps1 b/packages/cryptotester.vm/tools/chocolateyinstall.ps1
new file mode 100644
index 000000000..3accb0920
--- /dev/null
+++ b/packages/cryptotester.vm/tools/chocolateyinstall.ps1
@@ -0,0 +1,10 @@
+$ErrorActionPreference = 'Stop'
+Import-Module vm.common -Force -DisableNameChecking
+
+$toolName = 'CryptoTester'
+$category = 'Utilities'
+
+$zipUrl = 'https://github.com/Demonslay335/CryptoTester/releases/download/v1.7.0.0/CryptoTester.zip'
+$zipSha256 = 'f1f6fe584fe697e3ec414854600781ae1906e7d28d9f370662a144821694539c'
+
+VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $false
diff --git a/packages/cryptotester.vm/tools/chocolateyuninstall.ps1 b/packages/cryptotester.vm/tools/chocolateyuninstall.ps1
new file mode 100644
index 000000000..08b71ba66
--- /dev/null
+++ b/packages/cryptotester.vm/tools/chocolateyuninstall.ps1
@@ -0,0 +1,7 @@
+$ErrorActionPreference = 'Continue'
+Import-Module vm.common -Force -DisableNameChecking
+
+$toolName = 'CryptoTester'
+$category = 'Utilities'
+
+VM-Uninstall $toolName $category