Patent ID: 11941121
Assignee: UAB 360 IT
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 6:
7. A system for detecting malware in files, the system comprising:
at least one computing device; and
a computer-readable medium storing computer-executable instructions that when executed by the at least one computing device cause the at least one computing device to:
receive a file;

determine a first probability that the file is malware using a first malware model, wherein the first malware model is a static malware model;
based on the determined first probability, determine a malware status of the file, wherein the malware status is one of malware, not malware, or inconclusive; and
when malware status of the file is inconclusive:
execute the file by the computing device;
determine a second probability that the file is malware based on the execution of the file using a second malware model, wherein the second malware model is a dynamic malware model;
provide at least a portion of the file and the second probability to a server through the network; and
receive an updated version of the first model from the server, wherein the updated version of the first model was trained using the file and the second probability.