Choose a file or drop it here.
The file is read locally and is never executed.
Select a file to inspect its leading bytes and byte distribution.
Your original file stays in your browser. You can contribute its SHA-256, size and detected format, with an optional filename and text. Review everything before choosing Share for research.
New contributions are retained until manually removed, with an annual review. Administrators can view and export contributed records. You can remove contributions from this tab while it stays open.
Inspect or hash a file to prepare its contribution. Examples and text hashing are excluded.
Editable filename only. Folder paths are removed.
Up to 10 KB. Review and remove confidential details. Text is stored as plain text and is never executed.
We record counts of successful hash calculations and file inspections. Usage events contain no file contents, filenames, hashes or pasted text. Research contributions are separate and require your review and explicit submission.
How it works
Read the first 64 bytes, match a small set of common leading signatures, and calculate Shannon entropy across the selected file.
Know the boundary
A file signature is a clue about format. Entropy describes byte distribution. Neither determines whether a file is malicious.