Windows internals
We examine execution, memory, and operating-system interfaces to explain how native Windows software behaves.
Technical depth.
Practical clarity.
We turn complex binaries into clear technical findings, helping security and engineering teams understand software behaviour and develop informed detections.
The companyUnderstanding the code.
Understanding the code.
Explaining the behaviour.
Grau Research is the specialist malware research and reverse engineering practice of Grau Solutions Ltd. We help antivirus, EDR, threat intelligence, and game security teams understand the software they are investigating.
Our technical foundation draws on nearly seven years of hands-on experience in reverse engineering, low-level development, and Windows internals. We apply that experience to tracing execution, analysing memory and data structures, and understanding obfuscated, virtualized, and protected binaries.
We approach each engagement with a defined technical question, an agreed scope, and a clear purpose for the findings. Our focus is useful analysis: what the software does, how it works, and which evidence can support detection.
Core expertiseDepth where
Depth where
the details matter.
Our expertise connects native code, operating-system behaviour, and the mechanisms hidden by binary protections.
Low-level development
We bring a practical development perspective to binary analysis, connecting disassembly with implementation decisions and the mechanisms behind software behaviour.
Reverse engineering
We trace control flow, recover data structures, and explain the algorithms and decisions inside binaries without source code.
Obfuscation & protections
We analyse obfuscated and virtualized code to understand the relevant logic beneath binary protections.
Our approachThe reasoning
The reasoning
comes with the result.
We document the reasoning behind our findings, from the code and behaviour observed to the evidence supporting each conclusion. Our reports explain confidence, limitations, and practical next steps, giving your team a clear basis for investigation and detection decisions.
Explore the research processA technical question deserves
a technical conversation.