MSRXTools / Incident response
Suspicious file checker
Drop a file you were sent: see what it really is, whether the name lies, and whether it carries macros, PDF scripts, shortcuts or Android banking-trojan permissions. Plus its SHA-256.
Runs in your browser
Loading tool…
Good to know
- Statements, invoices and challans do not arrive as .exe, .apk, .lnk, .iso, .js or .hta files. If the real type says program, do not open it.
- Do not click “Enable content” or “Enable macros” on a document someone sent you.
- A clean result is not a guarantee. This reads structure only; scan with your device's security app and confirm with the sender through another channel.
Related tools
Access log attack finder
Paste nginx or Apache access logs and find SQL injection, XSS, path traversal, Log4Shell, secret probing, scanners and login brute force, by IP.IOC extractor & defanger
Pull IPs, domains, URLs, emails, hashes and CVE IDs out of any report or alert, defanged and ready to share or block.Website vulnerability scanner
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.
Paste nginx or Apache access logs and find SQL injection, XSS, path traversal, Log4Shell, secret probing, scanners and login brute force, by IP.IOC extractor & defanger
Pull IPs, domains, URLs, emails, hashes and CVE IDs out of any report or alert, defanged and ready to share or block.Website vulnerability scanner
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.