[THUGS(red)]

Dump a file for analysis

Found something you cannot identify? A suspicious attachment, a binary off a compromised host, a firmware image, an odd document? Upload it here. We pull it apart automatically and a human takes it from there.

upload max 95 MiB
Any file type, up to 95 MiB. It is stored outside the web root under a generated name and never executed.
No personal data, please. Strip it before you send it.
Leave blank to stay anonymous — you just will not get an answer back.
what happens to it

The moment it lands, it goes through a static pass — nothing is executed:

  • Identification — libmagic type, MIME, size, SHA-256 and MD5, plus a Shannon entropy score so you can see immediately whether it is packed or encrypted.
  • strings — with URLs, IP addresses, domains, emails and filesystem paths pulled out into their own lists.
  • binwalk — embedded files and signatures, with offsets.
  • exiftool — metadata for images and documents, with any GPS tags called out.
  • Archive listing — contents of zip/tar/7z/rar without extracting anything, flagging path traversal and executable entries.
  • VirusTotal — hash lookup against their engine results.

Members and admins can read the full report and download the original from the dump management page.