diff --git a/Cargo.lock b/Cargo.lock
index 9e5a6f4..0084da5 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1886,7 +1886,7 @@ checksum = "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98"
 
 [[package]]
 name = "memf-carve"
-version = "0.1.0"
+version = "0.1.1"
 dependencies = [
  "forensic-carve",
  "memf-core",
@@ -1994,7 +1994,7 @@ dependencies = [
 
 [[package]]
 name = "memf-windows"
-version = "0.3.1"
+version = "0.4.0"
 dependencies = [
  "aes",
  "aes-gcm",
diff --git a/Cargo.toml b/Cargo.toml
index 844e007..accf749 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -36,9 +36,9 @@ memf-symbols = { version = "0.2.3", path = "crates/memf-symbols" }
 memf-core    = { version = "0.2.3", path = "crates/memf-core" }
 memf-linux   = { version = "0.3.0", path = "crates/memf-linux" }
 memf-session = { version = "0.3.0", path = "crates/memf-session" }
-memf-windows = { version = "0.3.1", path = "crates/memf-windows" }
+memf-windows = { version = "0.4.0", path = "crates/memf-windows" }
 memf-correlate    = { version = "0.3.0", path = "crates/memf-correlate" }
-memf-carve   = { version = "0.1.0", path = "crates/memf-carve" }
+memf-carve   = { version = "0.1.1", path = "crates/memf-carve" }
 # Fleet carving contract + single-pass sweep engine.
 forensic-carve = "0.1"
 assert_cmd = "2"
diff --git a/crates/memf-carve/Cargo.toml b/crates/memf-carve/Cargo.toml
index b10a316..4fdaea5 100644
--- a/crates/memf-carve/Cargo.toml
+++ b/crates/memf-carve/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "memf-carve"
-version = "0.1.0"
+version = "0.1.1"
 description = "Plane-V memory artifact carving: per-process virtual-address-space carving over the forensic-carve sweep engine (memory medium of the fleet carving contract)"
 edition.workspace = true
 rust-version.workspace = true
diff --git a/crates/memf-windows/CHANGELOG.md b/crates/memf-windows/CHANGELOG.md
new file mode 100644
index 0000000..578c7ae
--- /dev/null
+++ b/crates/memf-windows/CHANGELOG.md
@@ -0,0 +1,18 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.4.0](https://github.com/SecurityRonin/memory-forensic/compare/memf-windows-v0.3.1...memf-windows-v0.4.0) - 2026-07-29
+
+### Added
+
+- *(hashdump)* GREEN — wire native SAM hashdump + symbol-free _CMHIVE locator
+
+### Other
+
+- native SAM hashdump + _CMHIVE locator (creds)
diff --git a/crates/memf-windows/Cargo.toml b/crates/memf-windows/Cargo.toml
index 9304dc6..a5a5932 100644
--- a/crates/memf-windows/Cargo.toml
+++ b/crates/memf-windows/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "memf-windows"
-version = "0.3.1"
+version = "0.4.0"
 description = "Windows kernel memory forensic walkers (processes, threads, drivers, DLLs)"
 edition.workspace = true
 rust-version.workspace = true