Verdict

Verdict
Verdict

This property describes the behavior of the file at runtime. Following is the meaning of each verdict:

  • BENIGN: File with no malicious code.
  • TRUSTED: Behavioural analysis or prevalence indicates a trusted file.
  • HIGHLY_TRUSTED: File from a highly trusted source. For example, Microsoft published the file.
  • SUSPICIOUS: File contains suspicious code and on execution can turn out to be a malware.
  • MALICIOUS: File is a malicious file containing malware or bad code that can harm the system.
  • UNKNOWN: File behavior is UNKNOWN at this point in time or there is some error in the analysis pipeline and verdict could not be concluded.
  • UNINSPECTED: File is marked as excluded and hence was not inspected by the analysis pipeline.
This data structure has no properties.
Enumeration: BENIGN, TRUSTED, HIGHLY_TRUSTED, SUSPICIOUS, MALICIOUS, UNKNOWN, UNINSPECTED