• Support for Windows 11 24H2 release.
• Bug fixes.
• Added named _SECTION objects to VAD map.
• -memmap auto improvements.
• Hibernation file support.
• FindEvil: UM APC detection. Thanks @thejanit0r for the contribution.
• Sysinfo module for easy-to-read system information.
• Eventlog module for convenient access to event log files.
• Binary search API now allows for up to 16M search terms (up from previous 16).
• Prefetch parsing.

For previous release builds see the release archive.

• Bug fixes.
• Module improvements: ntfs, procinfo, web.
• C# API: improvements.
• Java API: support for java.lang.foreign (JDK21 ) for efficient memory accesses.
• Linux PCIe FPGA performance improvements.
• FindEvil: Triggered Yara rules are now shown.
• FindEvil: AV detections from Windows Defender residing on the analyzed system.
• Python API: new functionality (multi-read, type-read) and improved scatter read performance.
• Support for Proxmox memory dump files.

For previous release builds see the release archive.

Release Archive of past MemProcFS versions and updates for MemProcFS v5.9 and later.