Bringing accessible reverse engineering tools into the hands of malware analysts and beginners alike
We’re excited to share that IDA Free 9.1 is now bundled with FLARE VM, the open-source Windows-based virtual machine distribution developed by Mandiant's FLARE (Frontline Applied Research & Expertise) team—now part of Google Cloud.
Described by Google as a “threat intelligence lab in a box”, FLARE VM is a go-to environment for learning and performing reverse engineering, malware analysis, and digital forensics on Windows-based threats. It’s widely adopted by aspiring analysts, hobbyists, and professionals alike for its comprehensive toolset and hands-on training potential.
IDA Free 9.1 is the latest lightweight version of our disassembler, ideal for those learning the fundamentals of reverse engineering. It includes cloud-based decompilers for x86 32-bit and 64-bit architectures and runs on Windows, macOS, and Linux. With IDA Free 9.1 now preinstalled in FLARE-VM, users can immediately dive into binary analysis using one of the most recognizable tools in the field—no additional setup required.
In addition, FLARE-VM adds a convenient "Open with IDA option" to the right-click menu, which automatically looks for the highest available version of IDA (prioritizing IDA Pro). FLARE-VM also helps install IDA Pro by selecting the idapro.vm package and providing an IDA Pro installer, and optionally an IDA license. As part of the FLARE-VM installation, users can select several IDA plugins, which are installed even if IDA Pro is added manually after setup. This adds to the ease of getting started with IDA Pro while also benefiting from a curated plugin ecosystem tailored for reverse engineering workflows.
This integration makes FLARE VM an even stronger foundation for those entering the field of reverse engineering and threat analysis. It also supports our ongoing effort to make IDA Pro more accessible by helping new users become familiar with its interface, capabilities, and core workflows through IDA Free.
We’d also like to thank the FLARE VM community for their active role in improving and maintaining the platform, particularly when it comes to the IDA integration. Community members are often among the first to flag issues when new versions are released, contribute improvement ideas, bug fixes, and so much more. This kind of hands-on collaboration helps ensure that FLARE VM remains a reliable, up-to-date, and user-friendly environment for reverse engineers at every level. Thank you!
Learn more about IDA Free: hex-rays.com/ida-free
Learn more about FLARE VM: github.com/mandiant/flare-vm
