Brovan

Interactive user-mode binary emulator that runs x86_64 PE, ELF, memory dumps and raw files in a controlled sandbox without executing them on the host CPU. Traces resolved APIs, syscalls and functions and can dump emulated network traffic, aiding malware analysis and reverse engineering.