Static PE extractor for forensics