CIRCL hashlookup

Hash LookupMalware Analysis

Automated checks passed
Checked 10/9/2026

CIRCL hashlookup provides a public service and API for identifying known files by cryptographic hash. A missing hash is inconclusive, and a match must be interpreted using the returned source and classification context.

Open Tool GitHub Docs Report incorrect information

Features

✓Look up MD5, SHA-1, and SHA-256 values
✓Known-file classification context
✓Public API and open-source server

Limitations

✗No match does not mean a file is safe or unknown everywhere
✗Classification depends on contributing datasets and update timing

Related Tools

🦠

Hatching Triage

Malware Analysis

Performs static and behavioral analysis of suspicious files and URLs in a malware sandbox.

◆ FreemiumWEB●Advanced

Open Tool Details →

🦠

ANY.RUN

Malware Analysis

Analyze submitted files or URLs in an interactive malware sandbox and search reports by supported hashes.

◆ FreemiumWEB●Intermediate

Open Tool Details →

🦠

Hybrid Analysis

Malware Analysis

Search malware reports by supported hashes and analyze submitted files or URLs in a public sandbox.

✓ FreeWEB●Intermediate

Open Tool Details →

Tool Details

Interface WEB

Pricing Free

Skill Level Intermediate

Open Source Yes ✓

Maintenance Reported active

Reported Update 2026-08

Platforms

🌐 web

Accepts Input Types

md5sha1

CIRCL hashlookup

Features

Limitations

Related Tools

Hatching Triage

ANY.RUN

Hybrid Analysis

Tool Details

Platforms

Accepts Input Types

Tags