File Signature, Hex & Strings Inspector
Perform bounded, non-executing first-pass triage on a local file. Inspect bytes and useful indicators without uploading the sample to an external service.
About File triageFeatures & how to use
Inspect local file magic bytes, hex, ASCII and UTF-16 strings, entropy and SHA-256. Samples are never uploaded, rendered or executed.
What it can do
- Recognize common executable, archive, document and image signatures from magic bytes rather than the filename extension.
- Calculate SHA-256 and Shannon entropy for the file and 64 KiB blocks, with a 16 MiB sample limit.
- Browse paged hex and extract bounded ASCII and ASCII-range UTF-16 little- or big-endian strings with byte offsets.
- Signatures and entropy are heuristics, not malware detection. Embedded archives are not expanded, and samples are never executed or previewed as active content.
How to use it
- Select a local file and the minimum string length.
- Choose Inspect file, then review the signature, digest, strings and entropy.
- Browse hex pages or filter strings and download a text-only report if needed. Review extracted secrets before sharing it.