Any.Run VS Cisco IronPort Web Security Appliance

Any.Run mentions (33)

• How do i know something is a false positive?

  Https://app.any.run/ should be enough for most of the cases. If you have packed/encrypted sample (like EMP.dll from Empress), you can't do anything. Source: 11 months ago

• TIFU By opening a phishing .htm file

  If you open it on https://app.any.run it will show you the outbound connections it makes. If you're responsible for such things, you could then block this on your web proxy/firewall/whatever. Source: 11 months ago

• Where else do you lookup a hashfile that you know is malicious but virustotal, cisco, fortinet, all my devices say the file is clean?

  Hello! Try this https://app.any.run/. Source: about 1 year ago

• klauncher - another pirate virus and spy launcher

  Does anyone have an account at app.any.run to have more analysis about their file? Source: about 1 year ago

• Any chance that hacker can access to other devices through wifi network?

  App.any.run was probably the most useful thing in getting to understand how malware works, its basically an sandbox where it shows you all actions, changes, modifications and network connections done by any executable, including any malware, you can begin by analyzing this piece of Redline Stealer. Source: over 1 year ago

Cisco IronPort Web Security Appliance mentions (0)