Security tools

File Inspector

Find out what a file really is, its hashes, its entropy and the strings inside it.

Your text stays on your deviceHow?

How to inspect a file

  1. Choose or drop the file.
  2. Check its real type against its name, and copy its hashes.
  3. Look at its entropy, its strings and its first bytes.

Questions

Is the file opened or run?

No. Its bytes are only read, inside your browser. Nothing in it is opened, run or uploaded.

How does it know the real type?

Most file types start with a known signature, called magic bytes. If the name says .pdf but the bytes say PNG, it warns you.

What does high entropy mean?

Near 8 bits per byte the data looks random, which usually means it is compressed or encrypted. Packed malware often looks like this.

Which strings does it list?

Runs of readable characters, in plain ASCII and in UTF-16 as Windows programs store them, from 4 to 32 characters long or more.