PE-Sieve 0.4.0

PE-sieve — scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches.
Detects inline hooks, Process Hollowing, Process Doppelgänging, Reflective DLL Injection, etc.

PE-sieve is meant to be a light-weight engine dedicated to scan a single process at the time. It can be built as an EXE or as a DLL. The DLL version exposes a simple API and can be easily integrated with other applications.


Screenshots

Homepage OR Homepage | What's New
OS: Windows XP / Vista / 7 / 8 / 8.1 / 10 / 11 (x86-x64)
Language: ENG
Medicine: FreeWare
Size: 0,71 MB.
Download From Homepage
Installer
Share:

No comments