Palo Alto Networks, Inc.

Lauren Che

Yaron Samuel

Wenjun Hu

Robert Jung

Akshata Krishnamoorthy Rao

Dominik Reichel

The present application discloses a method, system, and computer system for detecting malicious files. The method includes receiving a sample, extracting an embedded script from the sample, applying a malicious script detector in connection with determining whether the sample is malicious, and in response to determining that the sample is malicious sending, to a security entity, an indication that the sample is malicious.

Detecting Microsoft Windows installer malware using text classification models

The present application discloses a method, system, and computer system for detecting malicious files. The method includes receiving a sample that comprises a .NET file, obtaining imported API function names based at least in part on a .NET header of the .NET file, determining a hash of a list of unmanaged imported API function names, and determining whether the sample is malware based at least in part on the hash of the list of unmanaged imported API function names.

Growing community of inventors

Dublin, CA, United States of America

Lauren Che