Malware Analysis Sandbox at the Hypervisor Layer

Malwagon

Analyze suspicious files, commands, documents and Windows kernel drivers with static and dynamic analysis, logged agentless at the hypervisor layer. No account, 3 free scans a day.

3 of 3 free scans left today

Drop a file here, or browse Release to stage the file Single file, up to 100 MB

staged, ready to analyze

uploading sample0%

To automate submissions, see the API reference or get your API key.

Ask about the platform, a plan, or a specific scan. If it is about a scan, paste the scan id. This reaches the person who runs the hardware.

Security disclosure, abuse or a takedown? Contact page

malwagon file.exe cli close

malwagon suspicious.exe 412.0 KB

$ pip install malwagon
$ export MALWAGON_API_KEY=mwg_...
$ malwagon suspicious.exe
uploading suspicious.exe (412.0 KB)
scan 48213 queued
waiting for the sandbox, usually 90 to 300s
  running      12s elapsed
  analyzing    2m 18s elapsed

  MALICIOUS  score 88/100
  report https://malwagon.com/s/48213

API reference PyPI

scan 48213 2m 18s elapsed MALICIOUS 88/100