Patent ID: 11870793
Assignee: MCAFEE, LLC
Field: Computer technology (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. At least one non-transitory, computer-readable medium including instructions that, when executed by an electronic device, cause the electronic device to perform a method comprising:
launching a process including a plurality of primary executable code modules or functions;
executing executable code included in the process, the process having a first reputation;
determining a second reputation for a first one of the plurality of primary executable code modules or functions;
determining a third reputation for a second one of the plurality of primary executable code modules or functions;
updating the first reputation of the process, based on the third reputation for the second one of the plurality of primary executable code modules or functions, the second reputation for the first one of the plurality of primary executable code modules or functions, and the first reputation of the process;
determining that a user interacts with the process;
updating the first reputation of the process with a reputation of the user;
if an event affects the first reputation of the process, modifying the first reputation of the process to a merge of the first reputation of the process and a fourth reputation of the event; and,
if the process interprets a content file, combining a reputation of the content file with the first reputation of the process, wherein the content file is a script or document.