in-memory malware configuration extractor — free browser tool | fatcousin

drop process memory dump · xor decode json xml config blocks · c2 ip port campaign mutex extraction · multi-technique local scan · runs locally

memory dump

drop process memory dump

or click

Select file

single-byte XOR · JSON/XML blocks · base64 · RC4 S-box · binary IP:port clusters

drop process memory dump · raw binary