Using a Subtractive Center Behavioral Model to Detect Malware

Table 8

Created dataset and its features.

---

Class, name, RegOpenKeyTP, RegQueryValueTP, RegSetInfoKeyTP

---

Malware, f2ec3cbe4d3840b9b11d3b4052ee2dc7.exe, 760,0,508

Benign, cmd.exe,15,14,0

Malware, f2f72360bada04cb04a148334fb9b4f0.exe,67,48,48

Benign, calc.exe,62,59,9

Malware, f3a61848058d68097e7948cc3662963f.exe,546,701,305

Benign, notepad.exe,31,48,4

Malware, f3ab8adddce6730b1ee494e59ca88d70.exe,321,312,213

Benign, services.exe, 103,84,0

Malware, f3aa954ad390fc6be0be4c89120138e0.exe,498,557,342

Benign, taskhost.exe,0,0,6

---

Features and number of rows are shortened.