Skip to main content

Forensics & Binary

File Type Detector

Detect file Type in the supplied data. Add the content, choose the checks, and review the reported details.

Tool workspace

Your input stays in this browser.

Add the required input to continue.

Needs input

Run the tool when your input is ready.

Options

Your result appears here

Detect file Type in the supplied data. Add the content, choose the checks, and review the reported details.

This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.

File Type Detector performs file signature detection on supplied binary or media data. The operation returns file-type candidates based on recognized byte signatures. This result is specific to File Type Detector's selected byte or media interpretation.

The operation returns file-type candidates based on recognized byte signatures. This result is specific to File Type Detector's selected byte or media interpretation. This result runs in the browser for this catalog category. Processing runs in the browser.

Signature detection identifies byte patterns; it does not establish safety, authenticity, or complete file validity.

Instructions

  1. Provide file or files for this tool.
  2. Use a public sample file first. This applies to File Type Detector.
  3. Inspect the beginning bytes and any reported offset. This applies to File Type Detector.
  4. Treat the result as a candidate until the full container parses successfully. This applies to File Type Detector.

Example

Input: A small public byte sample beginning with a known signature, such as PNG bytes "89504e470d0a1a0a". Operation: File Type Detector.

Settings: File Type Detector: Provide bytes or a file accepted by the operation. Use the selected byte encoding exactly. Compare the reported signature with the file extension and container metadata.

Result: The operation returns file-type candidates based on recognized byte signatures. This result is specific to File Type Detector's selected byte or media interpretation.

Limits

  • File Type Detector: A matching signature does not prove a file is safe.
  • File Type Detector: Polyglot, truncated, or modified files can produce ambiguous results.
  • File Type Detector: The detector does not scan content for malware.