7. A method comprising: receiving, via a network from a remote computing device, a feature vector representing a file stored in a memory of the remote computing device, the feature vector including: a zero-skip n-gram indicating occurrences of adjacent characters in printable characters representing the file, a skip n-gram indicating occurrences of non-adjacent characters in the printable characters representing the file; and an n-gram indicating occurrences of groups of entropy indicators in a set of entropy indicators derived from file entropy data for the file, each entropy indicator of the set of entropy indicators having a value representing entropy of a corresponding chunk of the file; generating, by a trained file classifier, classification data associated with the file based on the feature vector, the classification data indicating whether the file includes malware; and transmitting the classification data to the remote computing device via the network, wherein access to the file or execution of the file at the remote computing device is restricted responsive to the classification data indicating that the file includes malware.
7. A method comprising: receiving, via a network from a remote computing device, a feature vector representing a file stored in a memory of the remote computing device, the feature vector including: a zero-skip n-gram indicating occurrences of adjacent characters in printable characters representing the file, a skip n-gram indicating occurrences of non-adjacent characters in the printable characters representing the file; and an n-gram indicating occurrences of groups of entropy indicators in a set of entropy indicators derived from file entropy data for the file, each entropy indicator of the set of entropy indicators having a value representing entropy of a corresponding chunk of the file; generating, by a trained file classifier, classification data associated with the file based on the feature vector, the classification data indicating whether the file includes malware; and transmitting the classification data to the remote computing device via the network, wherein access to the file or execution of the file at the remote computing device is restricted responsive to the classification data indicating that the file includes malware. 11. The method of claim 7 , wherein the feature vector includes a plurality of skip n-grams including the skip n-gram, each skip n-gram of the plurality of skip n-grams based on a different skip value.