Ransomware File Extension Checker
Catch disguised executables before you double-click
Ransomware attacks often announce themselves through recognizable patterns: encrypted-file extensions like .locky or .lockbit, ransom-note filenames like _readme.txt, and double-extension disguises like invoice.pdf.exe that exploit Windows’ hidden-extensions default. This checker scans any pasted filename list against a curated list of 65+ known patterns and flags each file with a clear verdict and explanation.
- →Flags 65+ file extensions and patterns historically associated with ransomware families
- →Recognizes known ransom-note filenames like _readme.txt and HOW_TO_DECRYPT.html
- →Generically detects double-extension disguises — invoice.pdf.exe, photo.jpg.scr, and similar tricks
- →Clear per-file verdict and plain-English explanation for every line you paste in
- →Watermarked by Cikal Studio Labs · Works on any device, no install required
More Protection Tools
URL Safety Scanner
Instantly check if any URL is safe, phishing, or malicious using 30+ threat intelligence sources.
File Hash Malware Checker
Check any file's MD5 or SHA-256 hash against global malware databases. No file upload required — fully private.
Email Header Phishing Analyzer
Paste any email header and get full SPF/DKIM/DMARC analysis, routing visualization, and a phishing risk score.