When a suspicious executable lands in your inbox, Freki gives your team a private place to pull it apart before it touches the network. Upload a sample through the web interface and Freki extracts its fingerprints at once: MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes, plus CRC32 and SSDEEP fuzzy hashes for spotting near-duplicate variants. Static analysis then dissects Windows PE files without running them, reporting headers, sections, imported libraries, embedded strings, and capabilities identified in the code. A YARA engine sweeps every sample against your rule sets, so signatures your analysts write flag matching files the moment they arrive. Connect a VirusTotal API key and each report gains antivirus detection results from dozens of engines, placed next to your local findings. The same analysis runs through a REST API, so intake pipelines, mail gateways, and triage scripts can submit files and read verdicts automatically. Analysts discuss findings in community comments attached to each sample, building a shared memory of what a file is and why it matters. Accounts control who may submit samples and call the API, and every analyzed sample stays downloadable for re-examination or sharing with trusted peers. Docker Compose brings the whole platform up behind Nginx with its MariaDB database, keeping live malware samples on your own hardware instead of a public service. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.