Best hollows_hunter Alternatives & Competitors in 2026

Joe Sandbox DEC

Plugin that decompiles malware PE files into readable C code using hybrid analysis.

CAPA

CAPA is a static analysis tool that detects and reports capabilities in executable files across multiple formats, mapping findings to MITRE ATT&CK tactics and techniques.

capa

Capa is a malware analysis tool that detects capabilities in executable files by analyzing PE, ELF, .NET modules, shellcode, and sandbox reports to identify potential malicious behaviors with ATT&CK framework mapping.

readpe

A command-line tool for analyzing and extracting detailed information from Windows Portable Executable (PE) files.

Joe Sandbox ML

ML plugin for Joe Sandbox Cloud detecting malicious files via deep learning.

Threatray

AI-driven binary code analysis platform for malware detection & intelligence.

Shellcode2PE

A Python script that converts shellcode into a PE32 or PE32+ file.

manalyze

A static analysis tool for PE files that identifies potential malicious indicators through compiler detection, packing analysis, signature matching, and suspicious string identification.

OfficePurge

A tool to remove malicious artifacts from Microsoft Office documents, preventing malware infections and data breaches.

CobaltStrikeScan

Scan files or process memory for Cobalt Strike beacons and parse their configuration.

MalConfScan

MalConfScan is a Volatility plugin for extracting configuration data of known malware and analyzing memory images.

dynStruct

dynStruct is a tool for monitoring memory accesses of an ELF binary and recovering structures of the original code.

Pylibemu

A Python wrapper for the Libemu library that enables shellcode analysis and malicious code examination through programmatic interfaces.

FLARE-VM

FLARE-VM is a Windows virtual machine setup tool that automates the installation and configuration of reverse engineering and malware analysis software using Chocolatey and Boxstarter technologies.

peepdf

A Python tool for in-depth PDF analysis and modification.

PLASMA

PLASMA is an interactive disassembler that generates readable assembly code with colored syntax for reverse engineering binary files across multiple architectures and formats.

Drltrace

Drltrace is a dynamic API calls tracer for Windows and Linux applications.

OllyDbg v1.10

A 32-bit assembler level analyzing debugger for Microsoft Windows.

ANY.RUN

Interactive malware sandbox with TI lookup and IOC feeds for SOC teams.

Seqrite Malware Analysis Platform

Malware analysis platform for detecting and analyzing threats via sandbox

OPSWAT MetaDefender Sandbox

AI-driven malware sandbox for detecting evasive threats and zero-day attacks

Nucleon Malprob

AI-powered malware detection service with web interface and API access

PolySwarm Malware Intelligence

Malware intelligence marketplace aggregating multiple detection engines

Cyber Triage Malware Forensics Tool

Malware scanning tool for DFIR using 40+ engines from ReversingLabs

OPSWAT MetaDefender Core

Multi-engine malware detection & file sanitization platform with Deep CDR

OPSWAT MetaDefender Distributed Cluster

Distributed file scanning platform with centralized orchestration & control

Splunk Attack Analyzer

Automated threat analysis platform for phishing and malware investigation

ReversingLabs Spectra Analyze

Malware analysis platform for SOC teams with binary analysis and threat detection

ReversingLabs Spectra Detect

Enterprise file analysis platform for high-volume malware detection

FireEye Detection On Demand

RESTful API for file/URL malware analysis via FireEye virtual execution engine

VMRay Threat Analysis and Detection Platform

Malware sandboxing platform for threat analysis and detection in SOCs

Nightwing DejaVM

Whole-system emulation environment for software dev, debugging, testing & security

Varist Predictive Detection Engine

Real-time malware detection engine with sandboxing and zero-day detection

Antiy Labs PTA

APT-focused file threat analysis system using dynamic & static detection.

Antiy PTA-mobile

Android app dynamic behavior analysis system using sandbox technology.

Cloud Storage Security Antivirus

In-tenant malware scanning for AWS, Azure & GCP object storage.

Cythereal MalWeb

Cloud-based platform that maps malware relationships for threat intelligence.

GLIMPS Malware

Multi-engine file malware detection platform for securing business apps.

GLIMPS Fortress

On-premise AI file repository with continuous malware analysis and retrohunting.

GLIMPS Malware Expert

Deep learning-based malware analysis & threat contextualization platform.

GLIMPS Malware Detect

Multi-engine AI file analysis platform for malware detection via SaaS or on-prem.

Joe Security Joe Lab

Cloud-based bare-metal malware analysis lab for SOC, CERT & CIRT teams.

Joe Sandbox Hypervisor

Custom hypervisor for stealth malware analysis on VMs and bare metal.

Joe Sandbox Cloud

Cloud-based automated malware analysis for Windows, macOS & Linux.

Joe Sandbox Detect

Endpoint utility for EDR/XDR alert validation and user phishing reporting.

Joe Security Joe Reverser

Agentic AI tool for automated malware reverse engineering & phishing analysis.

Joe Security Products

Suite of cloud & on-prem malware/phishing analysis tools for multiple OSes.

Joe Security Joe Sandbox

Deep malware & phishing analysis via static, dynamic, and hybrid methods.