ida.plugin.hashdb

HashDB is an IDAPython plugin that connects to an online community library to look up hashes, identifying API names and strings in malware.

ida-pluginsBlue Team

Official docs ↗Download ↗

Platforms: Windows · Last verified September 6, 2026

HashDB is an IDAPython plugin that connects to an online community library to look up hashes, identifying API names and strings in malware.

Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.

Getting started

Included by default in a FLARE VM install (`ida.plugin.hashdb` package). See the official VM-Packages listing and upstream homepage linked above for details.

Commonly preinstalled on

FLARE VM

Windows-based reverse-engineering and malware-analysis distribution