公开(公告)号：US20250021648A1

公开(公告)日：2025-01-16

申请号：US18898976

申请日：2024-09-27

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Feng TAN ,  Sen WANG ,  Gong ZHANG ,  Jinhu LIU

IPC: G06F21/56 ,  G06F21/55

Abstract: Embodiments of this application provide a method for detecting ransomware, a related system, and a storage medium. The method includes: obtaining a partial feature of a target file based on preset data in the target file, where the partial feature includes a partial incremental entropy and/or partial histogram statistical data; determining, based on the partial feature of the target file, whether the target file is an encrypted file; and determining, if the target file is the encrypted file, that the target file is attacked by the ransomware. The method can increase file detection efficiency and accuracy.