In other cases, it might be possible to decompile a program in order to get access to the original source code or code on a level higher than machine code.
Another common method of heuristic analysis is for the anti-virus program to decompile the suspicious program, then analyze the source code contained within.
This permits software providers to decompile software belonging to a third party, where that party does not make available interoperability information for its software.
