Back to results
US 2020/0267170 A1Published application
System and method for detecting and classifying malware
AssigneeCyphort Inc.
InventorsAbhijit MOHANTA, Anoop Wilbur SALDANHA
Life of this patent
Estimating the term…
Abstract
A network device may include a memory and one or more processors configured to analyze execution of suspicious data; detect one or more states of execution of the suspicious data; determine that the one or more states of execution are to be assigned a priority level; and extract at least a portion of the suspicious data from one or more locations based on determining that the one or more states of execution are to be assigned a priority level.
Claims21
1-20. (canceled)
A method comprising:
- analyzing, by a device, execution of suspicious data,
- wherein the suspicious data is packed prior to execution;
- detecting, by the device, one or more states of execution of the suspicious data;
- and
- extracting, by the device, at least a portion of the suspicious data from one or more locations based on detecting the one or more states of execution.
2 more elements
A device, comprising:
- one or more memories;
- and
- one or more processors, communicatively coupled to the one or more memories, configured to:
- analyze execution of suspicious data,
- wherein the suspicious data is packed prior to execution;
- detect one or more states of execution of the suspicious data;
- and
- extract at least a portion of the suspicious data from one or more locations based on detecting the one or more states of execution.
5 more elements
A non-transitory computer-readable medium storing instructions, the instructions comprising:
- one or more instructions that, when executed by one or more processors of a device, cause the one or more processors to:
- analyze execution of suspicious data,
- wherein the suspicious data is packed prior to execution;
- detect one or more states of execution of the suspicious data;
- and
- extract at least a portion of the suspicious data from one or more locations based on detecting the one or more states of execution.
3 more elements
Dependencies are inferred from the claim text.