Virtual Analyzer Risk Levels Parent topic

The following table explains the Virtual Analyzer risk levels after object analysis. View the table to understand why a suspicious object was classified as high, medium, or low risk.
Risk Level
Description
High
The object exhibited highly suspicious characteristics that are commonly associated with malware.
Examples:
  • Malware signatures; known exploit code
  • Disabling of security software agents
  • Connection to malicious network destinations
  • Self-replication; infection of other files
  • Dropping or downloading of executable files by documents
Medium
The sample exhibited moderately suspicious characteristics that are also associated with benign applications.
Low
The object exhibited mildly suspicious characteristics that are most likely benign.