Skip to form
Traceix Traceix
Nonprofit-backed manual file reviews

Need a human to look at a suspicious file?

Traceix is operated with the Perkins Cybersecurity Educational Fund (PCEF) , a 501(c)(3) nonprofit. Automated reports are free. For tougher cases, you can ask a human analyst to review the file, funded by a charitable donation.

  • • Step 1: Fill out the form below (okay to leave things blank).
  • • Step 2: We look at your request and tell you a suggested donation and estimated timing.
  • • Step 3: If you agree and donate, a human analyst reviews the file and sends you a plain-language report.
↓ Start with the simple form Learn how it works

Donations support PCEF’s cybersecurity education and research mission. In many situations, donations to a 501(c)(3) may be tax-deductible in the U.S., but please confirm with your own tax advisor.

Simple manual malware review request form #

Don’t worry if you don’t know technical details. Just answer what you can in normal words. It’s okay to leave fields blank. We’ll follow up by email with questions if needed.

About the file (simple answers are fine)

If you know hashes, links, or file types, you can paste them. If not, just skip.

Do you need an NDA (confidentiality agreement)?

We can sign an NDA before you send sensitive or private details.

Can you share extra evidence later?

For example: logs, screenshots, packet captures, sandbox reports (not in this form).

When you click “Request manual review”, your answers will be securely sent to contact@perkinsfund.org. Please watch your email for a reply from the PCEF / Traceix team.

How nonprofit manual review works #

Manual review is an optional, human-led analysis designed for complex, high-risk, or business-critical files that go beyond automated Traceix results. Reviews may include deep static analysis, dynamic behavior review, and higher-level risk explanation in plain language.

  • Traceix automated reports remain free to use.
  • Manual review is provided through PCEF, a U.S. 501(c)(3) nonprofit.
  • Any amount you contribute for manual review is handled as a charitable donation to PCEF, supporting its cybersecurity education and research mission.

Tax note: In many cases, donations to 501(c)(3) organizations may be tax-deductible in the United States. Your specific tax treatment depends on your situation and jurisdiction — please consult your own tax advisor or accountant.

To learn more about the mission your donation supports, visit perkinsfund.org.

Donations, timing & NDAs #

Because every file is different, there is no fixed price list. Instead, we:

  • Review your request for complexity.
  • Estimate analyst effort (time, depth, and urgency).
  • Provide you with:
    • a suggested donation amount to PCEF for this review, and
    • an estimated timeframe for completion.

Your contribution is processed as a charitable donation to the Perkins Cybersecurity Educational Fund, and analyst time is funded out of that donation so that Traceix can remain free for the broader community.

If you require additional confidentiality, we can sign a non-disclosure agreement (NDA) before receiving sensitive, proprietary, or non-public data. You can indicate this requirement directly in the form above.

When should you request a manual review? #

Manual reviews are most useful when you need human judgment and deeper context than an automated report can provide. For example:

  • A file that may be part of a targeted intrusion, APT campaign, or ransomware incident.
  • Executables that interact with proprietary systems or sensitive internal networks.
  • Cases where you need a clear, written explanation for leadership, legal, or customers.
  • Potential malware you plan to use for detection logic, YARA rules, or training datasets.

If you just need a quick sanity check for a common malware sample, the free Traceix automated analysis is usually enough.

What happens after you submit the form? #

  1. You fill out the request form with whatever details you know.
  2. We do a quick complexity review based on your description and any linked Traceix report.
  3. You receive an email from a PCEF/Traceix representative with:
    • a suggested donation amount to fund the analysis, and
    • an estimated timeframe for the manual review.
  4. If you agree and complete the donation, the file is queued for manual review under your requested constraints (including NDA if required).
  5. You receive a written report that explains behavior, risk, and key technical findings in language non-specialists can understand.

Frequently asked questions about manual malware review #

Is manual review required to use Traceix?

No. Traceix automated analysis is free and works well for many cases. Manual review is an optional, donation-supported service for complex or high-impact investigations.

Are manual review donations tax-deductible?

Manual review is funded through charitable donations to the Perkins Cybersecurity Educational Fund, a 501(c)(3) nonprofit. In many situations, donations to 501(c)(3) organizations may be tax-deductible in the United States, but you should confirm with your own tax advisor or accountant based on your location and circumstances.

Will you sign an NDA?

Yes. If you mark that an NDA is required in the form, we can put one in place before receiving sensitive or proprietary information beyond what’s already in Traceix.

How fast can you complete a manual review?

Timing depends on complexity and urgency. During the initial assessment, we propose both a suggested donation amount and an estimated delivery window (for example, 24 hours for critical incidents, or several days for deeper, detailed analysis).