whoamicrash/VMProtectDumper
Windows tool for unpacking VMProtect-protected PE files from memory. Captures OEP, reconstructs IAT, harvests dynamic exec regions, integrates pe-sieve, extracts IOCs, and ships a password-protected archive. Supports EXE / DLL / service-DLL / dropper scenarios
GitHub repository with 20 stars and 10 forks.
Language: C