Binary Malware Behavior Sandbox — Client-Safe

Static triage: hashes, entropy, strings, byte distribution & heuristic flags. No execution.

Client-side • Light theme

Choose binary file (recommended ≤ 100MB)

Tip: Analysis is local to your browser. No automatic uploads.

Quick checks

Hashes for IOC & sharing
Entropy to detect packing/obfuscation
Strings to surface URLs, commands, DLL/API names
Heuristics to prioritize triage

How it works

Reads file as ArrayBuffer (in-memory)
Computes cryptographic hashes (Web Crypto)
Estimates entropy across the blob
Extracts printable ASCII/UTF-8 strings
Applies keyword heuristics to strings

Security note

Do NOT upload sensitive proprietary binaries to public hosts. Analysis is local unless you export manually.