{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:L7IDDCTKCE5GWZ66ON2CPDQGL5","short_pith_number":"pith:L7IDDCTK","canonical_record":{"source":{"id":"2506.00659","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-31T18:01:50Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"c3291d90123da5340be73ac7a84c7ae26fe50a3ed589a1454472ff94c2963849","abstract_canon_sha256":"f351cd963dee97dfb93007a27284df8b4e8484ce2ea623081cf85cf69213deb4"},"schema_version":"1.0"},"canonical_sha256":"5fd0318a6a113a6b67de7374278e065f567067fbc05d372ebd3d6e5aea60aada","source":{"kind":"arxiv","id":"2506.00659","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.00659","created_at":"2026-07-05T11:34:08Z"},{"alias_kind":"arxiv_version","alias_value":"2506.00659v1","created_at":"2026-07-05T11:34:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.00659","created_at":"2026-07-05T11:34:08Z"},{"alias_kind":"pith_short_12","alias_value":"L7IDDCTKCE5G","created_at":"2026-07-05T11:34:08Z"},{"alias_kind":"pith_short_16","alias_value":"L7IDDCTKCE5GWZ66","created_at":"2026-07-05T11:34:08Z"},{"alias_kind":"pith_short_8","alias_value":"L7IDDCTK","created_at":"2026-07-05T11:34:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:L7IDDCTKCE5GWZ66ON2CPDQGL5","target":"record","payload":{"canonical_record":{"source":{"id":"2506.00659","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-31T18:01:50Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"c3291d90123da5340be73ac7a84c7ae26fe50a3ed589a1454472ff94c2963849","abstract_canon_sha256":"f351cd963dee97dfb93007a27284df8b4e8484ce2ea623081cf85cf69213deb4"},"schema_version":"1.0"},"canonical_sha256":"5fd0318a6a113a6b67de7374278e065f567067fbc05d372ebd3d6e5aea60aada","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:34:08.744332Z","signature_b64":"jww2zLIX4sp/bt6kFO1nFC5HcbX7PXijccTnv2+WQ1sc45S5/bCE5x2qZe3J08PxUBEYOcHQdXejfBUNc1SeBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5fd0318a6a113a6b67de7374278e065f567067fbc05d372ebd3d6e5aea60aada","last_reissued_at":"2026-07-05T11:34:08.743800Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:34:08.743800Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.00659","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:34:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wpDsoYXL/+dlm5fwUVqXgRa5iMlOnGmlENCXXO99wKLcXofwYj+FDtrdSziQx4KdsbsOp+DKDlFMn8Fhs4kADw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T21:51:14.855938Z"},"content_sha256":"bda9607d2c18e4df47aeea0ea45bde2029d4d8ac42de0578cc7a8b566be78b5e","schema_version":"1.0","event_id":"sha256:bda9607d2c18e4df47aeea0ea45bde2029d4d8ac42de0578cc7a8b566be78b5e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:L7IDDCTKCE5GWZ66ON2CPDQGL5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"PackHero: A Scalable Graph-based Approach for Efficient Packer Identification","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Marco Di Gennaro, Mario D'Onghia, Mario Polino, Michele Carminati, Stefano Zanero","submitted_at":"2025-05-31T18:01:50Z","abstract_excerpt":"Anti-analysis techniques, particularly packing, challenge malware analysts, making packer identification fundamental. Existing packer identifiers have significant limitations: signature-based methods lack flexibility and struggle against dynamic evasion, while Machine Learning approaches require extensive training data, limiting scalability and adaptability. Consequently, achieving accurate and adaptable packer identification remains an open problem. This paper presents PackHero, a scalable and efficient methodology for identifying packers using a novel static approach. PackHero employs a Grap"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.00659","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.00659/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:34:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tNAkJJJCLJ40wDqQ7bwK+IyulUaHbc0Jg7xnqXkUSgF4mCPKWcHaU+YjW3wlCV6KCmJKI/mS6aXf+4V9b8+ZAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T21:51:14.856429Z"},"content_sha256":"ce4aec87f30c060bc8ea13e66acf63610afa8a299fe127fd51709db4ae7c90e4","schema_version":"1.0","event_id":"sha256:ce4aec87f30c060bc8ea13e66acf63610afa8a299fe127fd51709db4ae7c90e4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/L7IDDCTKCE5GWZ66ON2CPDQGL5/bundle.json","state_url":"https://pith.science/pith/L7IDDCTKCE5GWZ66ON2CPDQGL5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/L7IDDCTKCE5GWZ66ON2CPDQGL5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T21:51:14Z","links":{"resolver":"https://pith.science/pith/L7IDDCTKCE5GWZ66ON2CPDQGL5","bundle":"https://pith.science/pith/L7IDDCTKCE5GWZ66ON2CPDQGL5/bundle.json","state":"https://pith.science/pith/L7IDDCTKCE5GWZ66ON2CPDQGL5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/L7IDDCTKCE5GWZ66ON2CPDQGL5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:L7IDDCTKCE5GWZ66ON2CPDQGL5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f351cd963dee97dfb93007a27284df8b4e8484ce2ea623081cf85cf69213deb4","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-31T18:01:50Z","title_canon_sha256":"c3291d90123da5340be73ac7a84c7ae26fe50a3ed589a1454472ff94c2963849"},"schema_version":"1.0","source":{"id":"2506.00659","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.00659","created_at":"2026-07-05T11:34:08Z"},{"alias_kind":"arxiv_version","alias_value":"2506.00659v1","created_at":"2026-07-05T11:34:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.00659","created_at":"2026-07-05T11:34:08Z"},{"alias_kind":"pith_short_12","alias_value":"L7IDDCTKCE5G","created_at":"2026-07-05T11:34:08Z"},{"alias_kind":"pith_short_16","alias_value":"L7IDDCTKCE5GWZ66","created_at":"2026-07-05T11:34:08Z"},{"alias_kind":"pith_short_8","alias_value":"L7IDDCTK","created_at":"2026-07-05T11:34:08Z"}],"graph_snapshots":[{"event_id":"sha256:ce4aec87f30c060bc8ea13e66acf63610afa8a299fe127fd51709db4ae7c90e4","target":"graph","created_at":"2026-07-05T11:34:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.00659/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Anti-analysis techniques, particularly packing, challenge malware analysts, making packer identification fundamental. Existing packer identifiers have significant limitations: signature-based methods lack flexibility and struggle against dynamic evasion, while Machine Learning approaches require extensive training data, limiting scalability and adaptability. Consequently, achieving accurate and adaptable packer identification remains an open problem. This paper presents PackHero, a scalable and efficient methodology for identifying packers using a novel static approach. PackHero employs a Grap","authors_text":"Marco Di Gennaro, Mario D'Onghia, Mario Polino, Michele Carminati, Stefano Zanero","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-31T18:01:50Z","title":"PackHero: A Scalable Graph-based Approach for Efficient Packer Identification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.00659","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bda9607d2c18e4df47aeea0ea45bde2029d4d8ac42de0578cc7a8b566be78b5e","target":"record","created_at":"2026-07-05T11:34:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f351cd963dee97dfb93007a27284df8b4e8484ce2ea623081cf85cf69213deb4","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-31T18:01:50Z","title_canon_sha256":"c3291d90123da5340be73ac7a84c7ae26fe50a3ed589a1454472ff94c2963849"},"schema_version":"1.0","source":{"id":"2506.00659","kind":"arxiv","version":1}},"canonical_sha256":"5fd0318a6a113a6b67de7374278e065f567067fbc05d372ebd3d6e5aea60aada","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5fd0318a6a113a6b67de7374278e065f567067fbc05d372ebd3d6e5aea60aada","first_computed_at":"2026-07-05T11:34:08.743800Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:34:08.743800Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jww2zLIX4sp/bt6kFO1nFC5HcbX7PXijccTnv2+WQ1sc45S5/bCE5x2qZe3J08PxUBEYOcHQdXejfBUNc1SeBA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:34:08.744332Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.00659","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bda9607d2c18e4df47aeea0ea45bde2029d4d8ac42de0578cc7a8b566be78b5e","sha256:ce4aec87f30c060bc8ea13e66acf63610afa8a299fe127fd51709db4ae7c90e4"],"state_sha256":"3a4ff0460df19bac9f35d783dd8de5dd0ccadbdd0ce053e7b31c1d5c23be9fab"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VVlwFpytahVjHMrZunpo5LR6hjRXqm3//uiU0CG0PD6WsK5VKmTuvyBGGVWc1/Tcgm02DE/x1Pdh9bOB5oQ1CA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T21:51:14.860628Z","bundle_sha256":"30d93d9ab305b97449fbadacfc3b0faa8c8c90d00414055a73313a76477a8ad2"}}