US9852294B1 - Systems and Methods for Detecting Suspicious Applications Based on How Entry-Point Functions Are Triggered