Detection and classification of malicious software utilizing Max-Flows between system-call groups