Instead of telling the anti-virus software what the common attributes of a malware are, why not have the software learn that itself from terabytes of pre-determined files? HP says its Sure View algorithm can detect even the latest viruses and malware based on a similar technology that Nvidia uses for its Deep learning super-sampling (DLSS) graphics technique.
https://www.notebookcheck.net/HP-and-Nvidia-team-up-to-create-Sure-Sense-anti-virus-software-powered-by-deep-learning.416253.0.html