User-mode reverse-engineering memory dumper for Windows. Reconstructs packed, hollowed, and manually-mapped processes into IDA/Ghidra-loadable PEs with rebuilt imports.
windows rust reverse-engineering dfir malware-analysis pe-file memory-dump unpacking process-injection import-reconstruction
-
Updated
Jun 14, 2026 - Rust