Compare software

THOR Lite vs PE-sieve: catalog facts
THOR Lite	PE-sieve
Free Free limited version of the commercial THOR scanner.	Free Free and open source.
Windows, macOS, Linux, Command line	Windows, Command line
Scans files, processes and autoruns with YARA and IOC signatures Precompiled for Windows, Linux and macOS	Detects process hollowing, injected PEs, shellcode and hooks Dumps suspicious code for later analysis
Not open source Limited modules and signature set compared to the paid THOR	Windows only Output assumes familiarity with malware analysis
Downloadable app	Downloadable app
Closed source	Open source
License: Proprietary	License: BSD-2-Clause
Not stated if an account is needed	No account needed
Works offline	Works offline
Official website Full listing and sources Checked September 24, 2026	Official website Full listing and sources Checked September 24, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.