True or false, why? A packed file's data cannot be seen in plain sight, but if we let it run, everything is expected to be unpacked in its process space. To unpack a file, we need to dump the whole memory then extract theexecutable's process image to a file. Volatility can be used to unpack an executable file without memory dumping. The packed executable file has a different PE header and stub from that of the original host file..