{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2016:FWY6IEVJVERWXO42JJVRGDTRG7","short_pith_number":"pith:FWY6IEVJ","canonical_record":{"source":{"id":"1609.03020","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-09-10T09:49:36Z","cross_cats_sorted":[],"title_canon_sha256":"f76c8af8274ae5991def6bd4e74d7d07cd8b4c397fa95e13819d32acd7936a6c","abstract_canon_sha256":"ed344adfbbde14de548e1da9341c2218bca346909a482d5339ee25508373a875"},"schema_version":"1.0"},"canonical_sha256":"2db1e412a9a9236bbb9a4a6b130e7137f09b92def29e8c6e33d961b25caf4a54","source":{"kind":"arxiv","id":"1609.03020","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1609.03020","created_at":"2026-05-18T01:04:49Z"},{"alias_kind":"arxiv_version","alias_value":"1609.03020v1","created_at":"2026-05-18T01:04:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1609.03020","created_at":"2026-05-18T01:04:49Z"},{"alias_kind":"pith_short_12","alias_value":"FWY6IEVJVERW","created_at":"2026-05-18T12:30:15Z"},{"alias_kind":"pith_short_16","alias_value":"FWY6IEVJVERWXO42","created_at":"2026-05-18T12:30:15Z"},{"alias_kind":"pith_short_8","alias_value":"FWY6IEVJ","created_at":"2026-05-18T12:30:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2016:FWY6IEVJVERWXO42JJVRGDTRG7","target":"record","payload":{"canonical_record":{"source":{"id":"1609.03020","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-09-10T09:49:36Z","cross_cats_sorted":[],"title_canon_sha256":"f76c8af8274ae5991def6bd4e74d7d07cd8b4c397fa95e13819d32acd7936a6c","abstract_canon_sha256":"ed344adfbbde14de548e1da9341c2218bca346909a482d5339ee25508373a875"},"schema_version":"1.0"},"canonical_sha256":"2db1e412a9a9236bbb9a4a6b130e7137f09b92def29e8c6e33d961b25caf4a54","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T01:04:49.133543Z","signature_b64":"mGR8fGyYXjflTYN5k7qHhoxlI2GPREQXR4roZollKMidzaZu1VgY0VCNXLQ+fHCYOkrUKZJ6bG5W6/M+H4A1BQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2db1e412a9a9236bbb9a4a6b130e7137f09b92def29e8c6e33d961b25caf4a54","last_reissued_at":"2026-05-18T01:04:49.132992Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T01:04:49.132992Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1609.03020","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:04:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UyviJiIdJrgQnTvf2ZbuMWKwd4SOeVHrc4gX8oquld7oz6kM47D2cauR/DDtiXBdkRSGgjoAk8uYcIs4NSySBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-03T21:06:46.586633Z"},"content_sha256":"4557b066bfc0d894488f90229328c02a159762c139d95b16fe1303ef3c9e3555","schema_version":"1.0","event_id":"sha256:4557b066bfc0d894488f90229328c02a159762c139d95b16fe1303ef3c9e3555"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2016:FWY6IEVJVERWXO42JJVRGDTRG7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Automated Dynamic Analysis of Ransomware: Benefits, Limitations and use for Detection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Daniele Sgandurra, Emil C. Lupu, Luis Mu\\~noz-Gonz\\'alez, Rabih Mohsen","submitted_at":"2016-09-10T09:49:36Z","abstract_excerpt":"Recent statistics show that in 2015 more than 140 millions new malware samples have been found. Among these, a large portion is due to ransomware, the class of malware whose specific goal is to render the victim's system unusable, in particular by encrypting important files, and then ask the user to pay a ransom to revert the damage. Several ransomware include sophisticated packing techniques, and are hence difficult to statically analyse. We present EldeRan, a machine learning approach for dynamically analysing and classifying ransomware. EldeRan monitors a set of actions performed by applica"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1609.03020","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:04:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bL2IlUDJpJ16+rmMeIlnpD5/x0H/dd/N51zZoSZ+wIFPLu5YEYtUI5HiAm0a1OJ+zXi2w9xQpLTSrMzviEOLBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-03T21:06:46.586985Z"},"content_sha256":"1b4b36f9e827547e30c101ea0ac79e4e39914dd1c906590b27b5695e335b81b4","schema_version":"1.0","event_id":"sha256:1b4b36f9e827547e30c101ea0ac79e4e39914dd1c906590b27b5695e335b81b4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FWY6IEVJVERWXO42JJVRGDTRG7/bundle.json","state_url":"https://pith.science/pith/FWY6IEVJVERWXO42JJVRGDTRG7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FWY6IEVJVERWXO42JJVRGDTRG7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-03T21:06:46Z","links":{"resolver":"https://pith.science/pith/FWY6IEVJVERWXO42JJVRGDTRG7","bundle":"https://pith.science/pith/FWY6IEVJVERWXO42JJVRGDTRG7/bundle.json","state":"https://pith.science/pith/FWY6IEVJVERWXO42JJVRGDTRG7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FWY6IEVJVERWXO42JJVRGDTRG7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2016:FWY6IEVJVERWXO42JJVRGDTRG7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ed344adfbbde14de548e1da9341c2218bca346909a482d5339ee25508373a875","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-09-10T09:49:36Z","title_canon_sha256":"f76c8af8274ae5991def6bd4e74d7d07cd8b4c397fa95e13819d32acd7936a6c"},"schema_version":"1.0","source":{"id":"1609.03020","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1609.03020","created_at":"2026-05-18T01:04:49Z"},{"alias_kind":"arxiv_version","alias_value":"1609.03020v1","created_at":"2026-05-18T01:04:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1609.03020","created_at":"2026-05-18T01:04:49Z"},{"alias_kind":"pith_short_12","alias_value":"FWY6IEVJVERW","created_at":"2026-05-18T12:30:15Z"},{"alias_kind":"pith_short_16","alias_value":"FWY6IEVJVERWXO42","created_at":"2026-05-18T12:30:15Z"},{"alias_kind":"pith_short_8","alias_value":"FWY6IEVJ","created_at":"2026-05-18T12:30:15Z"}],"graph_snapshots":[{"event_id":"sha256:1b4b36f9e827547e30c101ea0ac79e4e39914dd1c906590b27b5695e335b81b4","target":"graph","created_at":"2026-05-18T01:04:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Recent statistics show that in 2015 more than 140 millions new malware samples have been found. Among these, a large portion is due to ransomware, the class of malware whose specific goal is to render the victim's system unusable, in particular by encrypting important files, and then ask the user to pay a ransom to revert the damage. Several ransomware include sophisticated packing techniques, and are hence difficult to statically analyse. We present EldeRan, a machine learning approach for dynamically analysing and classifying ransomware. EldeRan monitors a set of actions performed by applica","authors_text":"Daniele Sgandurra, Emil C. Lupu, Luis Mu\\~noz-Gonz\\'alez, Rabih Mohsen","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-09-10T09:49:36Z","title":"Automated Dynamic Analysis of Ransomware: Benefits, Limitations and use for Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1609.03020","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4557b066bfc0d894488f90229328c02a159762c139d95b16fe1303ef3c9e3555","target":"record","created_at":"2026-05-18T01:04:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ed344adfbbde14de548e1da9341c2218bca346909a482d5339ee25508373a875","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-09-10T09:49:36Z","title_canon_sha256":"f76c8af8274ae5991def6bd4e74d7d07cd8b4c397fa95e13819d32acd7936a6c"},"schema_version":"1.0","source":{"id":"1609.03020","kind":"arxiv","version":1}},"canonical_sha256":"2db1e412a9a9236bbb9a4a6b130e7137f09b92def29e8c6e33d961b25caf4a54","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2db1e412a9a9236bbb9a4a6b130e7137f09b92def29e8c6e33d961b25caf4a54","first_computed_at":"2026-05-18T01:04:49.132992Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T01:04:49.132992Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"mGR8fGyYXjflTYN5k7qHhoxlI2GPREQXR4roZollKMidzaZu1VgY0VCNXLQ+fHCYOkrUKZJ6bG5W6/M+H4A1BQ==","signature_status":"signed_v1","signed_at":"2026-05-18T01:04:49.133543Z","signed_message":"canonical_sha256_bytes"},"source_id":"1609.03020","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4557b066bfc0d894488f90229328c02a159762c139d95b16fe1303ef3c9e3555","sha256:1b4b36f9e827547e30c101ea0ac79e4e39914dd1c906590b27b5695e335b81b4"],"state_sha256":"c1f0eac3db8d284bbc0c0bbd8c3508e5cfc44f86f7f4406e9997ca057c593e8e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GZkJvFk34CDoacnWE9rWeGZ6zz4EgnU5sLfMw3StFtqMLj2S84QFz7C6R73yfC18OPBiaZCEEtyVUeFMOcf4Dw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-03T21:06:46.588921Z","bundle_sha256":"7a631a564c6e4e2d98082529e93c3b036c4571eaa4d7fc661c1045453334c9be"}}