ANY.RUN Sandbox

ANY.RUN: Scan files and links to detect malware and phishing

ANY.RUN is a cloud-based sandbox for interactive malware research. The service delivers an advanced level of analysis of cybersecurity threats, while allowing users to engage with potentially malicious samples and URLs in real time within a safe virtual machine (VM) environment. The extension lets you choose your custom analysis preset, which you can configure in ANY.RUN (network settings, privacy level, pre-installed software, etc.). With this official Chrome extension, you can make use of the entire range of ANY.RUN’s capabilities: Analyze files and links on fully interactive Windows (7-11 version) cloud virtual machines (VMs). Collect comprehensive threat reports in JSON, MISP, HTML that contain indicators of compromise and malware configurations. Monitor samples’ malicious behavior and study tactics, techniques, and procedures (TTPs) with the MITRE ATT&CK Matrix. Adjust settings for system reboot, locale selection, and network features like MITM proxy and FakeNET. Run VMs for up to 1200 sec for in-depth analysis. The extension requires ANY.RUN API access. Each analysis session launched through the extension counts towards your API quota.