Compare software

THOR Lite vs HollowsHunter: catalog facts
THOR LiteHollowsHunter
Free

Free limited version of the commercial THOR scanner.

Free

Free to download from the public GitHub repository.

Windows, macOS, Linux, Command line Windows, Command line
  • Scans files, processes and autoruns with YARA and IOC signatures
  • Precompiled for Windows, Linux and macOS
  • Scans all running processes in one pass
  • Detects hollowing, shellcode, hooks and in-memory patches
  • Not open source
  • Limited modules and signature set compared to the paid THOR
  • Windows only
  • Command-line tool that expects some malware analysis knowledge
Downloadable app Downloadable app
Closed source Closed source
License: Proprietary License not stated
Not stated if an account is needed No account needed
Works offline Works offline

Checked September 24, 2026

Checked September 23, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.