Interactive Online Malware Analysis Sandbox - ANY.RUN

malicious

English

Within the .run top-level domain, 'app.any.run' is registered, featuring subdomain 'app'. The core label 'any' covers 3 characters split between 1 vowel and 2 consonants. Tokenizing the label suggests 1 word: any. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

email

password

username

privacyPolicy

subscription

html/fb/de/fbdefb68-72d6-4f1e-bc5e-311231f84819.html.gz

946808f691e8cf39a5d58729bd6a3c317048d237f14d18783c386ccef8c4e0e1

d063f4e4162203e5b21da66543977f43874d240ed821bb6ec51ca2170f5e8c16

38f4a155b7ab4d3777d57345adb789ca01e111bef251f47d4932d529ffeb1ea3

5027ad76c9fd2aacc8e55639378fa2b70860cbd1aab356f438c9116080e3ae71

fd44268c3c92a2463317a197df4059932ebb9ce2d52f8fa4247f9a187f970fa6

362b30c134522208c0d704792ccfe53d5736de9558dcb9541bf0986d68bbc1c3

37eecc2158e65107dba6016bebd7ca15d681d391486093b2e147552c4a11bfc8

e17ec03309404ca2f95ba0424fe6c74b900bbb5f3ed9faa30befa53004a3e2a7

5743c640722924aa6974b1f602ad1abb67f4c5240cc4829ed64147cf0e6ecf83

28dc446dcf414b52f8b53a23ca3b6e7d28004b7456049e31b659694f5bdb89f8

d09085c74154e9c45d8a32c884298654b16e66fd59e7e98ef427c1cf07e68d65

height=device-height, width=device-width, initial-scale=1.0, user-scalable=no, maximum-scale=1, shrink-to-fit=0

viewport

Interactive malware hunting service. Live testing of most type of threats in any environments. No installation and no waiting necessary.

description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Key-Systems, LLC

any.run

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET


    (function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
    new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
    j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
    'https://analytics.any.run/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
  })(window,document,'script','dataLayer','GTM-NSC8CSS');
  

window.siteConfig = {"name":"DEFAULT","availablePrivacy":["public","owner","bylink","byteam"],"purchasingAvailable":true,"registrationAvailable":true,"dashboardAvailable":true,"languagePack":"en","robotIndex":true,"resetLicenseToFree":true,"publicSubmissionAvailable":true,"isTestServer":false,"startBlackFridayUTCDate":1732406400000,"endBlackFridayUTCDate":1733731140000,"startSpringSaleUTCDate":1747645200000,"endSpringSaleUTCDate":1748764799000}

__meteor_runtime_config__ = JSON.parse(decodeURIComponent("%7B%22meteorRelease%22%3A%22METEOR%402.8.0%22%2C%22meteorEnv%22%3A%7B%22NODE_ENV%22%3A%22production%22%2C%22TEST_METADATA%22%3A%22%7B%7D%22%7D%2C%22PUBLIC_SETTINGS%22%3A%7B%22disconnectTimeSec%22%3A1200%2C%22grecaptchaV3SiteKey%22%3A%226LdW5u8iAAAAADetIRx74dUmVXg7peqerB3GDrI4%22%2C%22paddleClientKey%22%3A%22live_56a5ea6c6e4f457d59ec5b9f21b%22%7D%2C%22ROOT_URL%22%3A%22https%3A%2F%2Fapp.any.run%2F%22%2C%22ROOT_URL_PATH_PREFIX%22%3A%22%22%2C%22reactFastRefreshEnabled%22%3Atrue%2C%22accountsConfigCalled%22%3Atrue%2C%22autoupdate%22%3A%7B%22versions%22%3A%7B%22web.browser%22%3A%7B%22version%22%3A%2292bb38b9b440e017d449f631fb7a509b97742c34%22%2C%22versionRefreshable%22%3A%2291a9dd7e488c18ad30ce5b8f3d718e57e713eb2b%22%2C%22versionNonRefreshable%22%3A%22812582275d28b27f1279a4dea5a1add195c4ca70%22%2C%22versionReplaceable%22%3A%228f67b77df14e0521c31533388d074c45990b10fc%22%7D%2C%22web.browser.legacy%22%3A%7B%22version%22%3A%22bc16dd69754205607d6c4d4cdc19adaa0ec16d54%22%2C%22versionRefreshable%22%3A%2291a9dd7e488c18ad30ce5b8f3d718e57e713eb2b%22%2C%22versionNonRefreshable%22%3A%2235d87111f983d6979c5f4423749b021fa1753fa9%22%2C%22versionReplaceable%22%3A%228f67b77df14e0521c31533388d074c45990b10fc%22%7D%7D%2C%22autoupdateVersion%22%3Anull%2C%22autoupdateVersionRefreshable%22%3Anull%2C%22autoupdateVersionCordova%22%3Anull%2C%22appId%22%3A%221juc5ik1jqv5rmi64uy5%22%7D%2C%22appId%22%3A%221juc5ik1jqv5rmi64uy5%22%2C%22isModern%22%3Atrue%7D"))

Requests	IP Address	Location	AS Autonomous System
42	104.20.34.13	United States	AS13335CLOUDFLARENET
2	104.18.95.41	United States	AS13335CLOUDFLARENET
2	2606:4700:10::6814:220d	United States	AS13335CLOUDFLARENET
2	2606:4700:10::ac42:a9a1	United States	AS13335CLOUDFLARENET
2	2606:4700:3108::ac42:2af3	United States	AS13335CLOUDFLARENET
2	172.66.41.13	United States	AS13335CLOUDFLARENET
2	104.16.79.73	United States	AS13335CLOUDFLARENET
2	2606:4700:3108::ac42:290d	United States	AS13335CLOUDFLARENET
2	2606:4700::6810:5049	United States	AS13335CLOUDFLARENET
2	2606:4700::6812:5e29	United States	AS13335CLOUDFLARENET
48	18	-	-

Security Scan Report: app.any.run

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Bot Protection Detected

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History