file risk estimation