`Case 3:17-cv-05659-WHA Document 154-8 Filed 07/12/18 Page 1 of 2
`
`
`
`
`
`EXHIBIT 7
`EXHIBIT 7
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`7/10/2018
`
`Reports
`
`Automated Malware Analysis - Joe Sandbox Filter
`Case 3:17-cv-05659-WHA Document 154-8 Filed 07/12/18 Page 2 of 2
`Contact
`
`High Speed Benign File Filtering
`
`Overview Key Features
`
`Innovative Heuristics
`
`Rather than detecting the malicious behavior of software, Joe Sandbox Filter
`focuses on the identification of benign artifacts. To do so it uses innovative
`heuristics such as entry point analysis or packing detection to classify benign
`codes. Joe Sandbox Filter includes over 30 signatures to detect benign
`characteristics.
`
`Advanced PE Header Analysis
`
`Joe Sandbox Filter consists of an extensive PE file parser which extracts
`fields and flags from PE file structures. It executes many additional forensic
`analyses such as entry point disassembly, XOR and x86 function searches on
`several file parts.
`
`High Performance and Precision
`
`Joe Sandbox Filter is optimized for large-scale analysis with an average
`processing time of 30 seconds per sample. The filter is very precise. False
`negative and positive rates have been optimized to be less than 1%. In several
`tests Joe Sandbox Filter has selected over 50% of all benign samples
`successfully.
`
`Designed for Large Scale Analysis
`
`https://www.joesecurity.org/joe-sandbox-filter#key-features
`
`1/2
`
`