Patent ID: 11921850
Assignee: ACRONIS INTERNATIONAL GMBH
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A computer-implemented method for iterative antimalware scanning, the method executed on a processor, the method comprising:
performing an antimalware scan of a file upon running the file on a target computing system;
performing static analysis of the file, wherein static analysis operates with a tree of file attributes by which files are classified as malicious with a specified accuracy;
performing iteration of dynamic file analysis if static analysis does not allow classifying the file with the specified accuracy;
intercepting an operation of decrypting data blocks during the execution of the file code;
updating the tree of file attributes taking into account the decrypted data blocks;
performing static analysis of the file based on the updated tree of file attributes; and
repeating the steps d. and e. until the file is classified with the specified accuracy.