ANY.RUN is an online interactive sandbox for DFIR/SOC investigations. The service gives access to fast malware analysis and detection of cybersecurity threats.
The effectiveness of the solution has been proven by over 500,000 active users who find new threats with ANY.RUN daily.
ANY.RUN provides an interactive sandbox for malware analysis, offering deep visibility into threat behavior in a secure, cloud-based environment with Windows, Linux, and Android support. It helps SOC teams accelerate monitoring, triage, DFIR, and threat hunting — enabling them to analyze more threats in a team and process more alerts in less time.
Process Hacker is recommended for advanced users such as IT professionals, system administrators, and developers who require an in-depth tool for system monitoring and process management. It is also suitable for tech-savvy users who need more control over their system’s performance than what the default task manager provides. Casual users may find the interface and functionality overwhelming and should use it carefully to avoid accidental system misconfigurations.
Process Hacker might be a bit more popular than Any.Run. We know about 40 links to it since March 2021 and only 33 links to Any.Run. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
Https://app.any.run/ should be enough for most of the cases. If you have packed/encrypted sample (like EMP.dll from Empress), you can't do anything. Source: almost 2 years ago
If you open it on https://app.any.run it will show you the outbound connections it makes. If you're responsible for such things, you could then block this on your web proxy/firewall/whatever. Source: almost 2 years ago
Hello! Try this https://app.any.run/. Source: about 2 years ago
Does anyone have an account at app.any.run to have more analysis about their file? Source: about 2 years ago
App.any.run was probably the most useful thing in getting to understand how malware works, its basically an sandbox where it shows you all actions, changes, modifications and network connections done by any executable, including any malware, you can begin by analyzing this piece of Redline Stealer. Source: over 2 years ago
For advanced end users? Why would they ditch: https://systeminformer.sourceforge.io/ ? - Source: Hacker News / 3 months ago
System Informer is a versatile system management tool designed to seamlessly monitor and analyze system resources, troubleshoot software issues, and identify potential malware threats. Offers system activity overviews, intuitive graphs, real-time statistics, active network connection monitoring, detailed disk access information, intricate stack trace analysis, and much more. Evily2k describes it "like process... Source: over 1 year ago
Or Process Hacker (https://processhacker.sourceforge.io/) which IMO is even better. - Source: Hacker News / almost 2 years ago
I can use Process Hacker and run "Reduce working set" on it, which makes explorer.exe instantly go down to ~100MB. However, it just starts leaking RAM again and it's a matter of hours until it grows back to several GB. Source: almost 2 years ago
I can't have a task manager style tool installed? It's completely safe and does NOTHING in terms of cheating, no other game has ever flagged it as false positive. Is this AC so bad that it sees the word "h4Ck3R" and thinks it needs to be removed? What else is this thing needlessly scanning my computer for? Source: almost 2 years ago
VirusTotal - VirusTotal is a free service that analyzes suspicious files and URLs and facilitates the quick...
Process Explorer - The top window always shows a list of the currently active processes, including the names of their owning accounts, whereas the information displayed in the bottom window depends on the mode that Process Explorer is in: if it is in handle mode you'l…
Cuckoo Sandbox - Cuckoo Sandbox provides detailed analysis of any suspected malware to help protect you from online threats.
TeraCopy - TeraCopy is a compact program designed to copy and move files at the maximum possible speed, providing the user with a lot of features.
URLscan.io - urlscan.io is a free service to scan and analyse websites. When a URL is submitted to urlscan.io, an automated process will browse to the URL like a regular user and record the activity that this page navigation creates.
WizTree - WizTree quickly finds the files and folders using the most space on your hard drive. It scans the MFT (Master File Table) instead of crawling the entire disk which makes it very fast.