pe-sieve

Here are 5 public repositories matching this topic...

hasherezade / pe-sieve

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

scans anti-malware malware-analysis pe-format hooking pe-analyzer memory-forensics pe-dumper libpeconv process-analyzer pe-sieve

Updated Jun 6, 2026
C++

hasherezade / hollows_hunter

Star

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

anti-malware malware-analysis memory-forensics malware-detection pe-sieve

Updated Jun 6, 2026
C

hasherezade / mal_unpack

Star

Dynamic unpacker based on PE-sieve

malware-analysis memory-forensics libpeconv pe-sieve malware-unpacker

Updated Apr 14, 2026
C

habanada / NativeMirror

Star

Native Delphi implementation of PE-sieve functionality with a reusable library, CLI, and PE-sieve-compatible DLL for HollowsHunter integration.

delphi dfir memory-scanner process-hollowing windows-internals pe-sieve

Updated Oct 23, 2026
Pascal

0netdbg / pe-sieve

Star

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

scans anti-malware malware-analysis pe-format hooking pe-analyzer memory-forensics pe-dumper libpeconv process-analyzer pe-sieve hasherezade

Updated May 3, 2026
C++

Add this topic to your repo

To associate your repository with the pe-sieve topic, visit your repo's landing page and select "manage topics."

Learn more