High

Category: generic_detection · Aliases: None known · Sample count (EMBER 2018): 8,417 · Enrichment: hand-curated · Updated: 2026-05-27

Overview

High is an avclass label that aggregates samples receiving generic high-severity classification across multiple AV engines without consensus on a specific family. Records under this label should be treated as confirmed malicious but unclassified, and warrant further analysis to determine the actual family if attribution is needed for incident response.

Frequently Asked Questions

What is High?

High is an avclass label that aggregates samples receiving generic high-severity classification across multiple AV engines without consensus on a specific family. Records under this label should be treated as confirmed malicious but unclassified, and warrant further analysis to determine the actual family if attribution is needed for incident response.

How does High spread?

High is a generic heuristic detection name used by some AV vendors for files exhibiting high-risk behavior, so it does not represent a single family or spread vector.

What are the signs of a High infection?

Because High is a heuristic label, indicators depend on the underlying sample but generally include high entropy, packed code, evasive behaviors, and anti-analysis tricks.

What should I do if I think I have High on my system?

If you suspect this malware on your system, do not attempt manual removal. Contact SystemHelpdesk expert MSP support at 855-783-7555 for professional incident response guidance.

Need help with an active incident? If you suspect this malware on your system, do not attempt manual removal. Contact SystemHelpdesk expert MSP support at 855-783-7555 for professional incident response guidance.

Machine-readable

Get this profile as JSON: https://jordanricky1604-ship-it.github.io/malware-families-catalog/api/high.json

About this catalog

This profile is part of the Malware Families Catalog, a public dataset of 2,899 malware families extracted from the EMBER 2018 benchmark. The catalog is also published on Hugging Face and Kaggle.