Online File Virus Scanner
Choose a file to see its SHA-256 and basic warning signs on your device. With a VirusTotal API key, look up the hash first, then decide separately whether to submit the file.
Choose a file to check
SHA-256 · VIRUSTOTALCheck file on your device
Read the file and calculate SHA-256 on your device. The hash is sent only when you request a lookup; the file is uploaded to VirusTotal only after separate consent.
Or drop one file here
One file · Up to 30 MBLocal check
The file stays on your device while its hash and basic structure are inspected.
VirusTotal lookup
The hash is queried first; the file is uploaded only after separate confirmation.
Your API key goes to the KitoTool server to forward the request to VirusTotal; this tool does not store it. Get an API key
VirusTotal result
Engines that flagged the file
How to Check a File in 4 Steps
Choose a file on your device
Select one file up to 30 MB, or drag it into the tool. The browser starts the local check.
Review the hash and local alerts
Read the SHA-256, detected type and filename or structure warnings. No warning does not prove safety.
Look up the hash on VirusTotal
If you have an API key, enter it, confirm the terms and select Look up SHA-256. The hash and key go through KitoTool; file contents do not.
Read the report or decide on submission
Check detections and the analysis date. If there is no report, submit only after confirming the file contains no private data.
Read the Results Before Opening the File
On-device warnings
Filename or file-type warnings tell you to check the sender before opening it. “No obvious signal” means only that the selected checks found none; it does not prove the file is safe.
VirusTotal report
Check the detection count and analysis date. If engines flag the file, review the details on VirusTotal and verify its source. If none do, still consider the sender and local warnings.
When There Is No Report or Lookup Fails
- No report for this hash
- A missing report is not a clean verdict. Stop here, or submit a non-sensitive file after reading the warning and confirming separately.
- API key rejected or rate limit reached
- Check the key and API access in your VirusTotal account; if you reach a quota, wait and try again. Local results remain available without a key.
- Analysis is still running
- Wait and select Look up SHA-256 again. A report may appear only after VirusTotal finishes analysing the file.
Comments & feedback
Loading ratings…
Write a commentNo account needed