Check a file against ransomware IOCs

We hash the file (MD5, SHA-1, SHA-256, SHA-512) and check it against the Ransomware.live IOC database and our per-group YARA rules. Executables also get a static analysis: PE/ELF structure, imports and their capabilities, sections and entropy, ransomware behaviour strings and embedded IOCs. Uploaded files are kept by Ransomware.live for research, along with their hashes and analysis results. Don't upload documents that contain personal or confidential data.