Skip to content
SecArsenal
Educational and ethical use only. Only test systems you own or are explicitly authorized to test. Full disclaimer.

sfextract

sfextract extracts contents (assemblies, configuration, etc.) from .NET single file bundles.

dotnetBlue Team
Official docs ↗Download ↗

Platforms: Windows · Last verified September 6, 2026

sfextract extracts contents (assemblies, configuration, etc.) from .NET single file bundles.

Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.

Getting started

Included by default in a FLARE VM install (`sfextract` package). See the official VM-Packages listing and upstream homepage linked above for details.

Commonly preinstalled on

FLARE VM

Windows-based reverse-engineering and malware-analysis distribution