Abstract: A software analysis system collects a first set of time series counter values from an original version of software instrumented with software telemetry counters, and collects a second set of time series counter values from a modified version of the software that also is instrumented with the software telemetry counters. The first time series become dimensions input to train a weight matrix of a first self-organizing map, to cause the first self-organizing map to cluster the time series into a group of first clusters describing execution of the original software. The second time series become dimensions input to train a weight matrix of a second self-organizing map, to cause the second self-organizing map to cluster the time series into a group of second clusters describing execution of the modified software. Deviation analysis between the first and second groups of clusters is used to identify execution differences between the software versions.