Intelligent Sandbox uses secure virtual machines, or analyzer VMs, for dynamic analysis. During dynamic analysis, Intelligent Sandbox executes suspicious files in the analyzer VM, then monitors the file behavior for malicious activities.
To create the analyzer VM and VM profile, review the recommended requirements.
Note
If you already have a VMDK or VHDX file, it must be a single file that contains all files required to create the VM.
The platforms and other specifications listed here are based on test results.
Recommended RAM size
Operating system | RAM size (MB) |
|---|---|
Microsoft Windows XP 32-bit (Service Pack 2 and 3) | 512 |
Microsoft Windows 7 32-bit (Service Pack 1) | 1024 |
Microsoft Windows 7 64-bit (Service Pack 1) | 2048 |
Microsoft Windows 8 Professional 32-bit | 2048 |
Microsoft Windows 8 Professional 64-bit | 2048 |
Microsoft Windows 8.1 64-bit Enterprise (Update 1 version 6.3 build 9600) | 2048 |
Microsoft Windows 8.1 64-bit Professional (Update 1 version 6.3 build 9600) | 2048 |
Microsoft Windows 10 Enterprise 64-bit version 1511,1607,1703, 1909.18363.418 to 1909.18363.778, 20h2(19042.508 - 19042.746), 21h1 (19043.1052 - 19043.1165), 21h2 (19044.1526 - 19044.1586), 22h2 (19045.2006, 19045.2364, 19045.2728) | 3072 |
Microsoft Windows 10 Professional version 1607, 1803, 1809, 1903, 1909.18363.418 to 1909.18363.778 and 20h2(19042.508 - 19042.746), 21h1 (19043.928 - 19043.1165), 21h2(19044.1526 - 19044.1586), 22h2 (19045.2006, 19045.2364, 19045.2728) | 3072 |
Microsoft Windows 11 Professional & Enterprise 64 bit (22000.318 to 22000.739) | 3072 |
Microsoft Windows Server 2003 32-bit (Service Pack 1 and 2) | 2048 |
Microsoft Windows Server 2008 R2 (Service Pack 1) Datacenter | 2048 |
Microsoft Windows Server 2012 Datacenter | 2048 |
Microsoft Windows Server 2012 R2 Standard | 2048 |
Microsoft Windows Server 2012 R2 Datacenter | 2048 |
Microsoft Windows Server 2016 Standard | 2048 |
Microsoft Windows Server 2019 Standard | 3072 |
Supported operating systems
To create an ISO image, Intelligent Sandbox supports the following operating systems.
Operating system | Version |
|---|---|
Microsoft Windows |
NoteWin 10 1903, 1909 and 20h2(19042.508 - 19042.746), 21h1, 21h2 and 22h2 with mentioned build numbers are validated. Make sure you use the supported versions for deployment. If you use the latest build of these versions, it is advised you validate them first as in case of major changes latest build may not work. |
Microsoft Windows Server |
|
Android |
NoteAndroid 2.3 or 4.3 are pre-installed on the Intelligent Sandbox Appliance. |
If you are using a Microsoft Windows operating system, you must have the license key, and it must come in one of these languages:
English
Chinese Simplified
Japanese
German
Italian
Spanish
French
Supported applications
Application | Supported version | Supported languages |
|---|---|---|
Internet Explorer | 6 to 11 NoteInternet Explorer is set for End of Life (EOL) on June 15, 2022, hence we will not address any new issues for IE. | English, Chinese-Simplified, Japanese, German, and Italian. |
Mozilla Firefox | all versions until 105.0.2 | English, Chinese-Simplified, Japanese, German, and Italian. |
Google Chrome | all versions until 107.0.5304.107 | All languages |
Microsoft Office Professional | 2003, 2007, 2010, 2013, 2016, and 2019 | English, Japanese |
Microsoft Outlook | 2010 | English |
Microsoft Edge | Intelligent Sandbox supports Microsoft Edge only on Windows 10, 11 and Windows Server 2019 operating systems. The supported versions are:
| English |
JustSystems Ichitaro word processor | Government 8 and Pro 3 Recommended operating system: Microsoft Windows 7 | Japanese |
Adobe Flash Player software and plug-in | 13 | English |
Adobe Flash Player plug-in only | 32.0.0.238 | English |
Adobe Reader |
| English |
jdk-7u25 |
| English |
jre-7u25 |
| English |
jdk-8u101 |
| English |
jre-8u101 |
| English |
jdk-17 | 64-bit on all 64-bit operating systems | English |
Disk space
The minimum available disk space must be 200 MB. The maximum used total disk space must not exceed 30 GB.
The disk space affects the maximum number of VMs you create.
Maximum VMs
The following table specifies the maximum number of VMs that you can create for each Microsoft Windows operating system. The number of VMs listed in the table is based on the assumption that the disk space occupied by Windows is not more than 22 GB.
Operating system | Minimum disk space occupied | ATD-3000 (Number of VMs) | ATD-6000 (Number of VMs) | ATD-3100 (Number of VMs) | ATD-6100 (Number of VMs) | ATD-3200 (Number of VMs) | ATD-6200 (Number of VMs) |
|---|---|---|---|---|---|---|---|
Microsoft Windows 7 32-bit | 12 GB | 29 | 59 | 29 | 59 | 29 | 59 |
Microsoft Windows 7 64-bit | 14 GB | 29 | 59 | 29 | 59 | 29 | 59 |
Microsoft Windows 8 Professional 32-bit | 25–30 GB | 29 | 59 | 29 | 59 | 29 | 59 |
Microsoft Windows 8 Professional 64-bit | 25–30 GB | 29 | 59 | 29 | 59 | 29 | 59 |
Microsoft Windows 8.1 Enterprise and Professional (Update 1 version 6.3 build 9600) | 25–30 GB | 29 | 59 | 29 | 59 | 29 | 59 |
Microsoft Windows 10 Enterprise 64-bit version 1507, 1511, 1607, 1703, 1909.18363.418 to 1909.18363.778, 20h2(19042.508 - 19042.746), 21h1(19043.1052 - 19043.1165), 21h2(19044.1526 - 19044.1586), 22h2 (19045.2006, 19045.2364, 19045.2728) | 25–30 GB | 29 | 59 | 29 | 59 | 29 | 59 |
Microsoft Windows 10 Professional 64-bit version 1607, 1803, 1809, 1903, 1909.18363.418 to 1909.18363.778, 20h2(19042.508 - 19042.746), 21h1(19043.928 - 19043.1165), 21h2(19044.1526 - 19044.1586), 22h2 (19045.2006, 19045.2364, 19045.2728) | 25–30 GB | 29 | 59 | 29 | 59 | 29 | 59 |
Microsoft Windows 11 Professional & Enterprise 64 bit (22000.318 to 22000.739) | 25–30 GB | 29 | 59 | 29 | 59 | 29 | 59 |
Microsoft Windows Server 2008 64-bit Service Pack 1 Datacenter | 14 GB | 29 | 59 | 29 | 59 | 29 | 59 |
Microsoft Windows 2012 R2 Datacenter and Standard 64-bit | 25–30 GB | 29 | 59 | 29 | 59 | 29 | 59 |
Microsoft Windows 2016 Standard | 25–30 GB | 29 | 59 | 29 | 59 | 29 | 59 |
Microsoft Windows 2019 Standard | 25–30 GB | 29 | 59 | 29 | 59 | 29 | 59 |
Note
For better detection during bulk submission, we recommend not exceeding the number of VM licenses beyond 20 (for ATD-3000) and 15 (for ATD-3100) for Windows 10 20h2 (19042.xxx) and Windows 10 21h1 OS, and not exceeding the number of VM licenses beyond 10 (for ATD-3000) and 5 (for ATD-3100) for Windows 10 21h2 OS.
Supported VM Provisioner Tool operating systems
To use the VM Provisioner Tool, you must use a supported operating system.
Microsoft Windows 7 32-bit and 64-bit (Service Pack 1)
Microsoft Windows 8 Professional 32-bit and 64-bit
Microsoft Windows 8.1 64-bit Enterprise (Update 1 version 6.3 build 9600)
Microsoft Windows 8.1 64-bit Professional (Update 1 version 6.3 build 9600)
Microsoft Windows 10 Enterprise 64-bit version 1511, 1607, 1703 and 1909.18363.418 to 1909.18363.778, 20h2(19042.508 - 19042.746), 21h1(19043.1052 - 19043.1165), 21h2(19044.1526 - 19044.1586), 22h2 (19045.2006, 19045.2364, 19045.2728)
Microsoft Windows 10 Professional 64-bit version 1607, 1803, 1809, 1903 and 1909.18363.418 to 1909.18363.778, 20h2(19042.508 - 19042.746), 21h1(19043.928 - 19043.1165), 21h2(19044.1526 - 19044.1586), 22h2 (19045.2006, 19045.2364, 19045.2728)
Microsoft Windows 11 Professional & Enterprise 64 bit (22000.318 to 22000.739)
Microsoft Windows Server 2008 R2 (Service Pack 1) Datacenter
Microsoft Windows Server 2012 Datacenter
Microsoft Windows Server 2012 R2 Datacenter
Microsoft Windows Server 2012 R2 Standard
Microsoft Windows Server 2016 Standard
Microsoft Windows Server 2019 Standard