This dataset accompanies the paper 'Evaluating Malware Forensic Tools' (submitted for publication) and forms the data generated from 24 experiments where multiple malware binary files were executed under controlled conditions. For each experiment, 4,800 malware binary files were selected for execution across a bank of virtual machines. Each row within each file contains the MD5 hash of a binary file, the number of artefacts it is expected to produced when executed, and the number of artefacts observed when executed. Each data file is stored as a CSV file. More detail on the dataset is available from ian.m.kennedy@open.ac.uk