Want to connect your tools? Open the workspace →
FILEFORGE / LOOK INSIDE ANY FILE
What is this file,
really?
Any file type · one file up to 100 MB. Reads the format, metadata and embedded data without changing the file. It is not a virus scanner, and encrypted parts stay unreadable.
Read on your device. Never uploaded.MAGIC BYTES, METADATA, HIDDEN DATA
File inspector
Any file type · one file up to 100 MB · nothing is changed.
Choose a file, or try the sample to see what the inspector finds.
DETECTED FROM THE CONTENT
Unknown
What stands out
Byte entropy
How random the bytes are across the file, from start to end. Text and tables are low; compressed or encrypted data is close to 8 bits per byte. A sudden change can mark a different embedded part.
Checksums
Compare checksums with the ones a download page publishes. Look up the SHA-256 on VirusTotal ↗ sends only the checksum, never the file, and only when you click.
BEFORE YOU OPEN OR SHARE IT
Look before you click.
Check the real type
The first bytes of a file say what it is. An “invoice.pdf” that is really a Windows program, or a “.jpg” that is a ZIP, is flagged straight away.
See what it says about you
Photos can hold GPS coordinates, camera serial numbers and an old thumbnail. Office files and PDFs keep author names, tracked changes, hidden sheets and edit history.
Find what is tucked away
Data appended after the end of an image, files inside files, macros, PDF scripts, user folder paths and invisible Unicode text show up as findings you can jump to in the hex view.
QUESTIONS
A few answers.
Is my file uploaded?
No. The file is read inside your browser tab, in a background worker on your device. Nothing is sent to a server, and the result disappears when you clear it or close the tab.
How does it know the real file type?
Most formats start with a fixed byte pattern, often called magic bytes. PNG files start with 89 50 4E 47, PDFs with %PDF and ZIP-based files such as DOCX with PK. The inspector compares those bytes and the inner structure with more than 70 formats instead of trusting the extension.
What metadata can it read?
EXIF camera data and GPS locations in JPG, PNG, WebP, TIFF and HEIC, XMP edit history, PNG text chunks including AI image prompts, PDF document information, Word, Excel and PowerPoint properties, audio tags, video creation dates and locations, and details of Windows, Linux and macOS programs.
What counts as hidden data?
Bytes after the official end of a file, other files embedded inside it, tracked changes and hidden text or sheets in Office files, PDF scripts and earlier PDF versions kept by incremental saves, private keys and tokens, user folder paths and invisible Unicode characters.
Can it tell me if a file is safe?
It can point out red flags such as disguised programs, macros or PDF JavaScript, but it is not an antivirus. When in doubt, do not open the file, and check its SHA-256 checksum with a scanner you trust.