Hash analysis

Identify, normalize, and compare hashes locally in the browser. Work with single values, checksum lists, file digests, and a share-safe summary without sending data or making network requests.

Local hash workbench

DetectRecognize MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hex values; legacy algorithms are labeled.

NormalizeTrim, lowercase, and remove colons, spaces, and hyphens from common checksum line formats.

CompareCompare an expected hash, one local file digest, and manifest/list matches.

Share-safe summaryExport a redacted normalized summary without raw lines, file names, or paths.

Paste hashes, checksum lines, or a batch list

Limit 256 KiB. Supports sha256:, sha-256=, SHA256(file)=digest, digest filename, and similar formats. Hash-like values in sensitive contexts count only toward redaction.

Expected hash Expected mode

Manifest / checksum list compare

Choose or drop one file to calculate digests Limit 16 MiB. Bytes are read only in this browser; they are not sent or previewed. File digest calculation covers SHA-1, SHA-256, SHA-384, and SHA-512. MD5 is recognition/list compatibility only. No file selected.

Paste a hash or choose a file, then run analysis.

Trust boundary

Stays in browserPasted content and file bytes stay in the current browser.

No network requestNo third-party request, remote hash query, or sample query is performed.

Share-safe summaryRaw input, raw lines, file names, paths, raw manifest lines, and secret-like contexts are excluded by default.

No risk conclusionOutput is limited to format, normalization, and consistency comparison.

This page performs format identification, normalization, and consistency comparison only; it does not recover source text or infer content.
Review whether the investigation target may be exposed before sharing a hash.
MD5 and SHA-1 are legacy / compatibility identifiers only.

Common next steps

Hash tools: calculate text digests.
File analysis: review file type clues and indicator counts locally.
IOC extraction: extract more observables from logs.
Defang/refang: prepare shareable IOC text.

Hashes found: 0Waiting for local analysis.

Types: NoneMD5 / SHA-1 are labeled legacy.

Compare: Not setExpected and manifest matches.

Report boundary: Completeraw input omitted.

Type chips

SHA-256 0 SHA-384 0 SHA-512 0 SHA-1 legacy 0 MD5 legacy 0 Invalid 0

Normalization preview

No analysis yet. The preview will show line number, shape, normalized hash, type, confidence, and redaction counts.

Findings

Row	Type	Normalized	Count	Confidence	State	Notes
No analysis yet. This page does not read the address bar, files, or remote services automatically.

Manifest compare

Row	Label	Type	Observed	Expected	State	Notes
Manifest/list comparison has not run. This table does not show file names, paths, or raw manifest lines.

Analysis notes

Waiting for local analysis. Legacy, duplicate, mismatch, redaction, and file digest boundaries will appear here.

Derived hash output Default output contains only normalized hashes, not raw lines or file names/paths.

Share-safe summary