Racing demons: Malware detection in early execution