Patent ID: 11895129
Assignee: JUNIPER NETWORKS, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 5:
6. The method of claim 1, wherein, when the file type of the malicious file is a binary file, applying the one or more rules to the malicious file to generate the partial file signature for the malicious file comprises:
identifying whether the malicious file is a regular executable file or an installer file;
hashing a first quantity of bytes of the malicious file to generate the partial file signature when the malicious file is a regular executable file; and
when the malicious file is an installer file:
parsing the malicious file to identify compressed data of the malicious file, and
hashing the first quantity of bytes and the compressed data of the malicious file to generate the partial file signature.