Patent ID: 11870793
Assignee: MCAFEE, LLC
Field: Computer technology (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 6:
7. An apparatus, comprising:
a memory that stores a process; and
a processor configured to
launch a process including a plurality of primary executable code modules or functions;
execute executable code included in the process, which has a first reputation;
determine a second reputation for a first one of the plurality of primary executable code modules or functions;
determine a third reputation for a second one of the plurality of primary executable code modules or functions;
update the first reputation of the process, based on the third reputation for the second one of the plurality of primary executable code modules or functions, the second reputation for the first one of the plurality of primary executable code modules or functions, and the first reputation of the process;
determine that a user interacts with the process;
update the first reputation of the process with a reputation of the user;
if an event affects the first reputation of the process, modify the first reputation of the process to a merge of the first reputation of the process and a fourth reputation of the event; and,
if the process interprets a content file, combine a reputation of the content file with the first reputation of the process, and the content file is a script or document.