What is a feature of the ANY.RUN malware sandbox?

• A. ANY.RUN is an online sandbox tool with interactive reporting functions. Multiple malware samples can be uploaded to ANY.RUN for analysis. It also has the ability to capture screenshots of interactive elements of the malware.
• B. It is a closed-source offline sandbox.
• C. It runs only on Linux.
• D. It cannot capture screenshots.

Answer: (A)

ANY.RUN is a cloud-based, interactive malware sandbox that lets researchers upload multiple samples and observe their behavior in real time through interactive reports. Because it’s online and browser-based, you can run several samples in parallel and see how they behave side by side. A standout feature is capturing screenshots of interactive elements and GUI activity during execution, which helps document visual changes and user-interface interactions as the malware runs. This makes the statement about it being online with interactive reporting, parallel samples, and screenshot capture the best description. The other options imply offline operation, Linux-only use, or no screenshot capability, which do not fit ANY.RUN’s actual capabilities.