File Threat Analyzer

Heuristic safety check on a file — extension vs magic mismatch, double extensions, embedded scripts, size anomalies.

Analyzer Media & Files Updated Apr 19, 2026
How to Use
  1. Drop a file.
  2. Heuristic flags appear — this is a quick check, not antivirus.
  3. Upload the SHA-256 to VirusTotal if needed.
File
⚠️
Drop file to analyze
All local — no upload
Report
Waiting

Checks performed

Extension match
Magic vs .ext
Double extension
foo.pdf.exe
Embedded script
PDF /JS tag, macros
Shebang on non-script
#! in .png etc.
Very large text
Obfuscation hint
Executable
PE/ELF/Mach-O headers

Frequently Asked Questions

Is this AV?

No. It flags patterns commonly associated with malicious intent.

False positives?

Likely for edge cases — treat as hints, not verdicts.

Common Use Cases

Quick triage

Before opening unknown downloads.

Evidence

Document suspicious indicators.

Last updated: