Compare software

PE-sieve vs HollowsHunter: catalog facts
PE-sieveHollowsHunter
Free

Free and open source.

Free

Free to download from the public GitHub repository.

Windows, Command line Windows, Command line
  • Detects process hollowing, injected PEs, shellcode and hooks
  • Dumps suspicious code for later analysis
  • Scans all running processes in one pass
  • Detects hollowing, shellcode, hooks and in-memory patches
  • Windows only
  • Output assumes familiarity with malware analysis
  • Windows only
  • Command-line tool that expects some malware analysis knowledge
Downloadable app Downloadable app
Open source Closed source
License: BSD-2-Clause License not stated
No account needed No account needed
Works offline Works offline

Checked September 24, 2026

Checked September 23, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.