Patent Document ID: 20150007319
Application ID: 14037793
Patent Status: 0

Claim One:
1. In a computing device comprising a plurality of computing resources including computing hardware and an operating system executing on the computing hardware, and a plurality of objects including executable objects stored in the computing hardware, a method for analyzing a target object, the method comprising: identifying a first set of attributes of the target object, wherein the first set of attributes consists essentially of attributes having values that are common among a class of similar objects that are similar to the target object, the class of similar objects being defined based on predefined similarity criteria; computing a first hash representing the first set of attributes, the first hash being computed according to a first hashing algorithm that is sensitive to variations in the first set of attributes among the class of similar objects; identifying a second set of attributes of the target object, wherein the second set of attributes consists essentially of attributes having values that are variable among the class of similar objects; computing a second hash representing the second set of attributes, the second hash being computed according to a second hashing algorithm that is insensitive to variations in the second set of attributes among the class of similar objects; generating an aggregate representation of the target object that is based on the first hash and the second hash; and comparing the aggregate representation of the target object against at least one reference aggregate representation of one or more reference objects to produce a comparison result; determining, based on the comparison result, whether the target object is similar to the one or more reference objects.