{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:RMI66EBY3KZZ2BG3MAMYTZL2HX","short_pith_number":"pith:RMI66EBY","canonical_record":{"source":{"id":"1905.01999","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-05-06T12:47:30Z","cross_cats_sorted":[],"title_canon_sha256":"cb9f01c10d28bd4380c492e15894cea84ca3b1b9353513f589d1a55609a594b7","abstract_canon_sha256":"f046eb6291153e53f0bf23fa2856161b56d345ae9c48fe58039566077270ddae"},"schema_version":"1.0"},"canonical_sha256":"8b11ef1038dab39d04db601989e57a3ddaf2a9b1099672a64354c46d5265bcbf","source":{"kind":"arxiv","id":"1905.01999","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1905.01999","created_at":"2026-07-05T02:16:41Z"},{"alias_kind":"arxiv_version","alias_value":"1905.01999v2","created_at":"2026-07-05T02:16:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1905.01999","created_at":"2026-07-05T02:16:41Z"},{"alias_kind":"pith_short_12","alias_value":"RMI66EBY3KZZ","created_at":"2026-07-05T02:16:41Z"},{"alias_kind":"pith_short_16","alias_value":"RMI66EBY3KZZ2BG3","created_at":"2026-07-05T02:16:41Z"},{"alias_kind":"pith_short_8","alias_value":"RMI66EBY","created_at":"2026-07-05T02:16:41Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:RMI66EBY3KZZ2BG3MAMYTZL2HX","target":"record","payload":{"canonical_record":{"source":{"id":"1905.01999","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-05-06T12:47:30Z","cross_cats_sorted":[],"title_canon_sha256":"cb9f01c10d28bd4380c492e15894cea84ca3b1b9353513f589d1a55609a594b7","abstract_canon_sha256":"f046eb6291153e53f0bf23fa2856161b56d345ae9c48fe58039566077270ddae"},"schema_version":"1.0"},"canonical_sha256":"8b11ef1038dab39d04db601989e57a3ddaf2a9b1099672a64354c46d5265bcbf","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:16:41.128652Z","signature_b64":"Zz7FsY3cQn0LeAa+ugzeWYjx+KJP7XMOGy9JjCy1MHL02rSXif/jPuSb50BhxjDUWcsOB0R+spiWR50cUCIsBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8b11ef1038dab39d04db601989e57a3ddaf2a9b1099672a64354c46d5265bcbf","last_reissued_at":"2026-07-05T02:16:41.128259Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:16:41.128259Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1905.01999","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:16:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cltSXV5WQrSXCr2k+7q3MSkinSPhZI/nB7bzn5FheJsaifpFmKhzxgvahpLubmSl3KEKGN5UUlDbNQOPIwDBAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T20:38:56.117790Z"},"content_sha256":"7bcb9b8e70938b99071723e7abc08842c621edc4091dc08d6a2ec3584f8fe21f","schema_version":"1.0","event_id":"sha256:7bcb9b8e70938b99071723e7abc08842c621edc4091dc08d6a2ec3584f8fe21f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:RMI66EBY3KZZ2BG3MAMYTZL2HX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Benchmark API Call Dataset for Windows PE Malware Classification","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Ahmet Faruk Yaz{\\i}, Ferhat Ozgur Catak","submitted_at":"2019-05-06T12:47:30Z","abstract_excerpt":"The use of operating system API calls is a promising task in the detection of PE-type malware in the Windows operating system. This task is officially defined as running malware in an isolated sandbox environment, recording the API calls made with the Windows operating system and sequentially analyzing these calls. Here, we have analyzed 7107 different malicious software belonging to various families such as virus, backdoor, trojan in an isolated sandbox environment and transformed these analysis results into a format where different classification algorithms and methods can be used. First, we"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1905.01999","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1905.01999/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:16:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4hQVMV0uI5aiJTTyU33Hh8iTqCde4zXumzjRsZv/kO1ur3jAq2FLC0l0T2xHgO3i+OqhwTHaLYMW/47otTHOAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T20:38:56.118406Z"},"content_sha256":"e599772873500ed499d2eeb5d17fcd1cdc3925523e3573a5086cdd8a78c238c3","schema_version":"1.0","event_id":"sha256:e599772873500ed499d2eeb5d17fcd1cdc3925523e3573a5086cdd8a78c238c3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RMI66EBY3KZZ2BG3MAMYTZL2HX/bundle.json","state_url":"https://pith.science/pith/RMI66EBY3KZZ2BG3MAMYTZL2HX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RMI66EBY3KZZ2BG3MAMYTZL2HX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T20:38:56Z","links":{"resolver":"https://pith.science/pith/RMI66EBY3KZZ2BG3MAMYTZL2HX","bundle":"https://pith.science/pith/RMI66EBY3KZZ2BG3MAMYTZL2HX/bundle.json","state":"https://pith.science/pith/RMI66EBY3KZZ2BG3MAMYTZL2HX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RMI66EBY3KZZ2BG3MAMYTZL2HX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:RMI66EBY3KZZ2BG3MAMYTZL2HX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f046eb6291153e53f0bf23fa2856161b56d345ae9c48fe58039566077270ddae","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-05-06T12:47:30Z","title_canon_sha256":"cb9f01c10d28bd4380c492e15894cea84ca3b1b9353513f589d1a55609a594b7"},"schema_version":"1.0","source":{"id":"1905.01999","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1905.01999","created_at":"2026-07-05T02:16:41Z"},{"alias_kind":"arxiv_version","alias_value":"1905.01999v2","created_at":"2026-07-05T02:16:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1905.01999","created_at":"2026-07-05T02:16:41Z"},{"alias_kind":"pith_short_12","alias_value":"RMI66EBY3KZZ","created_at":"2026-07-05T02:16:41Z"},{"alias_kind":"pith_short_16","alias_value":"RMI66EBY3KZZ2BG3","created_at":"2026-07-05T02:16:41Z"},{"alias_kind":"pith_short_8","alias_value":"RMI66EBY","created_at":"2026-07-05T02:16:41Z"}],"graph_snapshots":[{"event_id":"sha256:e599772873500ed499d2eeb5d17fcd1cdc3925523e3573a5086cdd8a78c238c3","target":"graph","created_at":"2026-07-05T02:16:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1905.01999/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The use of operating system API calls is a promising task in the detection of PE-type malware in the Windows operating system. This task is officially defined as running malware in an isolated sandbox environment, recording the API calls made with the Windows operating system and sequentially analyzing these calls. Here, we have analyzed 7107 different malicious software belonging to various families such as virus, backdoor, trojan in an isolated sandbox environment and transformed these analysis results into a format where different classification algorithms and methods can be used. First, we","authors_text":"Ahmet Faruk Yaz{\\i}, Ferhat Ozgur Catak","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-05-06T12:47:30Z","title":"A Benchmark API Call Dataset for Windows PE Malware Classification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1905.01999","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7bcb9b8e70938b99071723e7abc08842c621edc4091dc08d6a2ec3584f8fe21f","target":"record","created_at":"2026-07-05T02:16:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f046eb6291153e53f0bf23fa2856161b56d345ae9c48fe58039566077270ddae","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-05-06T12:47:30Z","title_canon_sha256":"cb9f01c10d28bd4380c492e15894cea84ca3b1b9353513f589d1a55609a594b7"},"schema_version":"1.0","source":{"id":"1905.01999","kind":"arxiv","version":2}},"canonical_sha256":"8b11ef1038dab39d04db601989e57a3ddaf2a9b1099672a64354c46d5265bcbf","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8b11ef1038dab39d04db601989e57a3ddaf2a9b1099672a64354c46d5265bcbf","first_computed_at":"2026-07-05T02:16:41.128259Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:16:41.128259Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Zz7FsY3cQn0LeAa+ugzeWYjx+KJP7XMOGy9JjCy1MHL02rSXif/jPuSb50BhxjDUWcsOB0R+spiWR50cUCIsBw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:16:41.128652Z","signed_message":"canonical_sha256_bytes"},"source_id":"1905.01999","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7bcb9b8e70938b99071723e7abc08842c621edc4091dc08d6a2ec3584f8fe21f","sha256:e599772873500ed499d2eeb5d17fcd1cdc3925523e3573a5086cdd8a78c238c3"],"state_sha256":"3e396a8710f148aeb3f1c509c8ba8c0f904b479258fa3af4349c6c11db929f92"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gORHlIDq4LSWhOm5oVgv+xNe2aokp+XRlwvMs+eI7WX/9fZXrAY2WUN2uQbfL4bnhWjQnlg3v3CMcFyNH7MYAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T20:38:56.123561Z","bundle_sha256":"265ca17875872638a0d1d0ced52a5b917d416f2a46bbb91f0daeb3385fa9b267"}}