---
title: "Malware analysis"
slug: "go-endpoint-manager-windows-malware-analysis-1"
updated: 2026-03-04T12:03:46Z
published: 2026-03-04T14:36:49Z
canonical: "docs.senhasegura.io/go-endpoint-manager-windows-malware-analysis-1"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.senhasegura.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Malware analysis

**Malware analysis** is a feature of EPM Windows that allows you to evaluate binaries for which the user requests elevation of privilege. For the analysis, the binary will be forwarded to the [Virus Total](https://www.virustotal.com/gui/home/upload) online service and evaluated. The binary only runs when categorized as clean on that service.

          Attention

          

The **Malware Scan** feature is not a substitute for an antivirus solution, nor should it be confused as such. This feature reinforces the protection of credentials used by users.

## **Configure malware analysis**

1. Access the Segura® platform.
2. Go to **EPM ➔ Settings ➔ Parameters.**
3. Under **General settings**, enable the parameter **Enable application malware and reputation scan.**
4. Enter the Virus Total API token in the **Virus total API token** field.
5. Click **Save.**

## **Analyze a program using EPM Windows agent**

1. Access the desktop of the user's workstation.
2. Start the **Core** application.
3. Click on the **Execute** menu.
4. Choose an available application from the list.
5. Right-click and choose **Analyze Program.**
6. Click **OK** when the message **This file is going to be scanned for malware; it may take a few moments; please wait** is displayed.
7. In the **Analysis Result** column, the program under analysis displays the status **"Analyzing...".**

          Attention

          

While the program is in the analysis process, EPM will not allow execution. After analysis, the program can be executed.