公开(公告)号：US10607010B2

公开(公告)日：2020-03-31

申请号：US15720321

申请日：2017-09-29

Applicant: Avast Software s.r.o.

Inventor： Michal Krejdl

IPC: G06F21/00 ,  G06F21/56 ,  H04L29/06

Abstract: A file similarity vector for an executable file or executable object can be determined using function lengths of functions in the executable file or data object. The executable file or data object can be scanned, and lengths of functions can be determined. Various statistics such as number of functions, maximum function length, minimum function length, and average function length can be used to create a file similarity vector. The file similarity vector can be used to compare files.

公开(公告)号：US20180096145A1

公开(公告)日：2018-04-05

申请号：US15720321

申请日：2017-09-29

Applicant: Avast Software s.r.o.

Inventor： Michal Krejdl

IPC: G06F21/56

CPC classification number: G06F21/563 ,  G06F2221/033 ,  G06F2221/034 ,  G06F2221/2115 ,  H04L63/145

Abstract: A file similarity vector for an executable file or executable object can be determined using function lengths of functions in the executable file or data object. The executable file or data object can be scanned, and lengths of functions can be determined. Various statistics such as number of functions, maximum function length, minimum function length, and average function length can be used to create a file similarity vector. The file similarity vector can be used to compare files.