Reference Guide

Navigate the Dell Server
basis or globally quarantine or safelist based on company policies. Depending on how much analysis
can be performed against a PUP, further subclassification may be possible. Those subclasses are
shown below and will aid an administrator in determining whether a particular PUP should be blocked or
allowed to run:
Subclass
Definition
Examples
Adware
Technologies that provide annoying advertisements
(example: pop-ups) or provide bundled third-party add-ons
when installing an application. This usually occurs without
adequate notification to the user about the nature or
presence of the add-
on, control over installation, control over
use, or the ability to fully uninstall the add-on.
Gator,
Adware Info
Corrupt
Any executable that is malformed and unable to run.
Game
Technologies that create an interactive environment with
which a player can play.
Steam
Games,
League of
Legends
Generic
Any PUP that does not fit into an existing category.
HackingTool Technologies that are designed to assist hacking attempts.
Cobalt Strike,
MetaSp0it
Portable
Application
Program designed to run on a computer independently,
without needing installation.
Turbo
Scripting
Tool
Any script that can run as if it were an executable.
AutoIT,
py2exe
Toolbar
Technologies that place additional buttons or input fields on-
screen.
Nasdaq
Toolbar,
Bring Me
Sports
Score
A Score is assigned to each file. Negative scores, from -1 to -100 denote files that are deemed
Abnormal or Unsafe. The score represents the confidence level that the file is malware. The higher the
negative number, the greater the confidence.
File Type
The file is assigned a type, based on the score.
File Types:
Unsafe: A file with a score ranging from -60 to -100. An Unsafe file is one in which the Advanced
Threat Prevention agent finds attributes that greatly resemble malware.
Abnormal: A file with a score ranging from -1 to -59. An Abnormal file has a few malware attributes
but fewer than an unsafe file, thus is less likely to be malware.
Note: Occasionally, a file may be classified as Unsafe or Abnormal even though the score displayed doesn’t
match the range for the classification. This could result from updated findings or additional file analysis after the
initial detection. For the most up-to-date analysis, enable Auto Upload in the Device Policy.
Priority Level
44