Compare software

PE-sieve vs THOR Lite: catalog facts
PE-sieve	THOR Lite
Free Free and open source.	Free Free limited version of the commercial THOR scanner.
Windows, Command line	Windows, macOS, Linux, Command line
Detects process hollowing, injected PEs, shellcode and hooks Dumps suspicious code for later analysis	Scans files, processes and autoruns with YARA and IOC signatures Precompiled for Windows, Linux and macOS
Windows only Output assumes familiarity with malware analysis	Not open source Limited modules and signature set compared to the paid THOR
Downloadable app	Downloadable app
Open source	Closed source
License: BSD-2-Clause	License: Proprietary
No account needed	Not stated if an account is needed
Works offline	Works offline
Official website Full listing and sources Checked September 24, 2026	Official website Full listing and sources Checked September 24, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.