Patent ID: 11895129
Assignee: JUNIPER NETWORKS, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 17:
18. The non-transitory computer-readable medium of claim 15, wherein, when the file type of the malicious file is a binary file, the one or more instructions, that cause the device to apply the one or more rules to the malicious file to generate the partial file signature for the malicious file, cause the device to:
identify whether the malicious file is a regular executable file or an installer file;
hash a first quantity of bytes of the malicious file to generate the partial file signature when the malicious file is a regular executable file; and
when the malicious file is an installer file:
parse the malicious file to identify compressed data of the malicious file, and
hash the first quantity of bytes and the compressed data of the malicious file to generate the partial file signature.