## 5 Ransomware Datasets
\begin{table}
\begin{tabular}{c c c c c c c c} \hline \hline  & & \multicolumn{5}{c}{**Ransomware Datasets**} \\ \hline
**Sr\#** & **Study** & **Tool** & **Platform** & **Dataset Type** & **Family Name** & **Dataset Source** & **\# of Samples** \\ \hline  & & & & & & Wannancy & & \\ \cline{6-8}  & & & & & & Vipasana & & \\
9 & RAPPER [81] & Cuckoo samdbox & Windows & Ransomware & Lody & NA & NA \\ \cline{6-8}  & & & & & Petya & & \\ \cline{6-8}  & & & & Benign & NA & & \\ \hline  & & & & & AiDS & & 400 \\ \cline{6-8}  & & & & & RaaS & 310 \\ \cline{6-8}  & & & & & GpCode & 800 \\ \cline{6-8}
10 & RANDS [96] & Virtual testbed & Windows & Ransomware & CryptoLocker & VirusTotal & 720 \\ \cline{6-8}  & & & & Archiveus & Malware Blacklist & 1500 \\ \cline{6-8}  & & & & CryptoWall & & 3250 \\ \cline{6-8}  & & & & WinLock & & 2620 \\ \cline{6-8}  & & & & Reveton & 400 \\ \cline{6-8}  & & & & Benign & Website & 500 \\ \hline  & & & & & VirusTotal & 357 \\
11 & [97] & Cuckoo & Windows & Ransomware & Syandurra & 491 \\ \cline{6-8}  & & & & theZoo & 56 \\ \cline{6-8}  & & & & Benign & Syandurra & 942 \\ \hline  & & & & & Wannancy & & \\ \cline{6-8}
12 & [7] & Flow esporter & & & Ransomware & Petya & & \\ \cline{6-8}  & & Flow controller & IoT & & BadRabbit & & 50,537 \\ \cline{6-8}  & & & & PowerGhost & & & \\ \cline{6-8}  & & & & Benign & & Network Traffic generated & \\ \cline{6-8}  & & & & & by Integrated Clinical & 100,000 & Environment (ICE) \\ \hline  & & & & & Ransomware & RISS of LCL machine & 582 \\ \cline{6-8}
13 & [98] & Did not mention & Windows & Goodware & learning online repository & 942 \\ \hline  & & & & & VirusShare & \\
14 &
\begin{tabular}{c} PEDA \\ [79] \\ \end{tabular} & Cuckoo & Windows & Ransomware & Syandurra & VS malware repository & 995 \\ \cline{6-8}  & & & & & Geodware & NA & 942 \\ \hline  & & & & & WannaCry & & \\ \cline{6-8}  & & & & DBGer & & \\ \cline{6-8}  & & & & & Defray & \\ \cline{6-8}
15 & [99] & Cuckoo & Host in Security & \begin{tabular}{c} Ransomware \\ operated \\ Centre \\ \end{tabular} & \
\begin{tabular}{c} Ransomware \\ attacked logs \\ \end{tabular} &
\begin{tabular}{c} Lody \\ \end{tabular} & Infected System logs & NA \\ \cline{6-8}
15 & [99] & Cuckoo & Octaroo & Centre & & & GandCrab & \\ \cline{6-8}  & & & & & nRansom & \\ \cline{6-8}  & & & & Non attacked & & \\ \cline{6-8}  & & & logs & Uninfected logs & NA \\ \hline  & & & & & Ransomware & VirusShare & 80 \\ \cline{6-8}
16 &
\begin{tabular}{c} RanStop \\ [100] \\ performance counter \\ \end{tabular} & Monitoring of micro-architectural & Windows & Windows & Goodware & OpenSSL & 76 \\ \cline{6-8}
17 & [101] & Python script and MATLAB & Networks & Dataset created by the network traffic of Malware Capture Facility Project (MCFP) \\ \hline  & & & & System files & \\  & & & & Documents & \\
18 & [91] & User clint software & Backup Systems & Encrypted & Images & NA & 600 \\  & & & files & Source code & & \\  & & & & Executables & & \\  & & & & Compressed & & \\ \hline \hline \end{tabular}
\end{table} 
Table 3: _Cont._  
\begin{table}
\begin{tabular}{c c c c c c c c} \hline \hline  & & \multicolumn{5}{c}{**Ransomware Datasets**} \\ \hline
**Sr\#** & **Study** & **Tool** & **Platform** & **Dataset Type** & **Family Name** & **Dataset Source** & **\# of Samples** \\ \hline  & & & & & System files & & \\  & & & & & Documents & & \\  & & & & & Images & & \\  & & & & & Source code & & \\  & & & & & Executables & & \\  & & & & & Compressed & & \\ \hline
19 & [102] & Virtual machine, Disco, and process monitoring & Windows & \begin{tabular}{c} Ransomware \\ \end{tabular}  & \begin{tabular}{c} VirusShare \\ \end{tabular}  & \ \begin{tabular}{c} NA \\ \end{tabular}  & \begin{tabular}{c} NA \\ \end{tabular}  \\ \hline
20 & \begin{tabular}{c} AIRaD \\ [103] \\ \end{tabular}  & Sandbox & Windows & \begin{tabular}{c} Ransomware \\ \end{tabular}  & \begin{tabular}{c} VirusTotal \\ \end{tabular}  & 550 \\ \hline  & & & & & \begin{tabular}{c} TeslaCrypt \\ \end{tabular}  & \begin{tabular}{c} 96 \\ \end{tabular}  \\ \hline  & & & & &