Webroot Inc.

Open Text Corporation

Gaurav Dalal

Mauritius A Schmidtler

Reza Yoosoofmiya

Aspects of the present disclosure relate to threat detection of executable files. A plurality of static data points may be extracted from an executable file without decrypting or unpacking the executable file. The executable file may then be analyzed without decrypting or unpacking the executable file. Analysis of the executable file may comprise applying a classifier to the plurality of extracted static data points. The classifier may be trained from data comprising known malicious executable files, known benign executable files and known unwanted executable files. Based upon analysis of the executable file, a determination can be made as to whether the executable file is harmful.

Growing community of inventors

San Jose, CA, United States of America

Gaurav Dalal