Invention Grant
- Patent Title: Systems and methods for hashing executable files
- Patent Title (中): 用于散列可执行文件的系统和方法
-
Application No.: US12830101Application Date: 2010-07-02
-
Publication No.: US08352484B1Publication Date: 2013-01-08
- Inventor: Scott Schneider
- Applicant: Scott Schneider
- Applicant Address: US CA Mountain View
- Assignee: Symantec Corporation
- Current Assignee: Symantec Corporation
- Current Assignee Address: US CA Mountain View
- Agency: Advantedge Law Group
- Main IPC: G06F17/30
- IPC: G06F17/30

Abstract:
A method for hashing executable files may include identifying an executable file comprising non-variable executable content that contributes to the functionality of the executable file and does not vary among instances of the executable file. The method may also include identifying, within the executable file, non-executable content that does not contribute to the functionality of the executable file. The method may further include creating a normalized executable file by normalizing at least a portion of the non-executable content of the executable file without normalizing the non-variable executable content of the executable file. The method may include calculating a hash value that represents the normalized executable file. Various other methods, systems, and computer-readable media are also disclosed herein.
Information query