Readonlyartifact
artifact:
| {
evidence: | {
analysis_profile: {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
};
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
| {
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
};
result: {
artifact: {
byte_length: number;
format: "pe";
path: string;
sha256: string;
};
assembly: | {
culture: string
| null;
flags: number;
hash_algorithm: number;
name: string;
public_key: {
byte_length: number;
kind: "none" | "public-key" | "public-key-token";
sha256: string | null;
token: string | null;
};
row_offset: number;
token: string;
version: string;
}
| null;
attributes: {
complete: boolean;
dropped: number;
items: {
constructor_token: string
| null;
decoded_fixed_string: string | null;
parent_token: string;
row_offset: number;
token: string;
type_name: string | null;
value_length: number;
value_sha256: string;
}[];
limit: number;
offset: number;
returned: number;
total: number;
};
classification: {
container: "pe";
evidence: { code: string; detail: string; file_offset: number
| null }[];
implementation:
| "unknown"
| "not-managed"
| "cil"
| "cil-and-ready-to-run"
| "cpp-cli-mixed"
| "metadata-only";
managed_architecture: | "unknown"
| "x86"
| "x86_64"
| "arm"
| "arm64"
| "anycpu"
| "anycpu-prefer-32";
runtime_family: | "unknown"
| "dotnet-framework"
| "modern-dotnet"
| "unity-mono"
| "mixed-clr-native";
status: "managed"
| "malformed"
| "not-managed";
};
coverage: {
issues: {
code: | "invalid-cli-header"
| "invalid-directory"
| "invalid-metadata-root"
| "invalid-stream"
| "missing-stream"
| "invalid-tables"
| "invalid-row"
| "invalid-heap-index"
| "invalid-string"
| "invalid-blob"
| "invalid-guid"
| "invalid-resource"
| "limit-exceeded";
detail: string;
offset: number
| null;
scope: string;
}[];
state: "unavailable"
| "complete"
| "partial";
};
limitations: string[];
metadata: {
status: "complete"
| "partial"
| "malformed"
| "absent";
stream_names: string[];
table_row_counts: Record<string, number>;
version: string | null;
};
module: | {
enc_base_id: string
| null;
enc_id: string | null;
generation: number;
mvid: string | null;
name: string;
row_offset: number;
token: string;
}
| null;
pe: {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64";
characteristics: number;
cli:
| {
entry_point: {
kind: "none"
| "metadata-token"
| "native-rva";
value: string | null;
};
flag_names: string[];
flags: number;
header_offset: number;
header_size: number;
managed_native_header_rva: number;
managed_native_header_size: number;
metadata_rva: number;
metadata_size: number;
ready_to_run_signature: boolean;
resources_rva: number;
resources_size: number;
runtime_version: string;
strong_name_rva: number;
strong_name_size: number;
}
| null;
machine: number;
machine_hex: string;
optional_header: "pe32"
| "pe32-plus";
section_count: number;
};
references: {
complete: boolean;
dropped: number;
items: {
culture: string
| null;
flags: number;
hash_value_length: number;
hash_value_sha256: string | null;
name: string;
public_key_or_token: {
byte_length: number;
kind: "none" | "public-key" | "public-key-token";
sha256: string | null;
token: string | null;
};
row_offset: number;
token: string;
version: string;
}[];
limit: number;
offset: number;
returned: number;
total: number;
};
resources: {
complete: boolean;
dropped: number;
items: {
data_length: number
| null;
data_sha256: string | null;
declared_offset: number;
embedded: boolean;
flags: number;
implementation_token: string | null;
name: string;
row_offset: number;
token: string;
visibility: "unknown" | "public" | "private";
}[];
limit: number;
offset: number;
returned: number;
total: number;
};
schema_version: 1;
target_frameworks: string[];
};
}
| null
Readonlyboundaries
boundaries:
| {
evidence: | {
analysis_profile: {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
};
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
| {
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
};
result: {
artifact: {
byte_length: number;
format: "pe";
path: string;
sha256: string;
};
cli_native: {
il_only: boolean;
managed_native_header_rva: number;
managed_native_header_size: number;
native_entry_point: boolean;
ready_to_run_signature: boolean;
requires_32bit: boolean;
strong_name_signed: boolean;
};
coverage: {
issues: {
code: | "invalid-cli-header"
| "invalid-directory"
| "invalid-metadata-root"
| "invalid-stream"
| "missing-stream"
| "invalid-tables"
| "invalid-row"
| "invalid-heap-index"
| "invalid-string"
| "invalid-blob"
| "invalid-guid"
| "invalid-resource"
| "limit-exceeded";
detail: string;
offset: number
| null;
scope: string;
}[];
state: "unavailable"
| "complete"
| "partial";
};
identity_scope: {
requires_artifact_sha256: string;
requires_mvid: string
| null;
token_identity: "build-local";
};
limitations: string[];
metadata: {
status: "complete"
| "partial"
| "malformed"
| "absent";
table_row_counts: Record<string, number>;
version: string | null;
};
module: | {
enc_base_id: string
| null;
enc_id: string | null;
generation: number;
mvid: string | null;
name: string;
row_offset: number;
token: string;
}
| null;
module_refs: {
complete: boolean;
dropped: number;
items: { name: string; row_offset: number; token: string }[];
limit: number;
offset: number;
returned: number;
total: number;
};
native_implementations: {
complete: boolean;
dropped: number;
items: {
body_interpretation: | "unknown"
| "managed-cil"
| "native-or-runtime"
| "not-file-backed";
boundary_kind: | "pinvoke"
| "native-body"
| "runtime-provided"
| "unmanaged-method"
| "mixed-or-unknown";
code_type: "unknown"
| "runtime"
| "il"
| "native"
| "optil";
flags: number;
impl_flags: number;
managed_kind: "unknown" | "managed" | "unmanaged";
name: string;
pinvoke_declared: boolean;
row_offset: number;
rva: number;
token: string;
}[];
limit: number;
offset: number;
returned: number;
total: number;
};
pinvoke_imports: {
complete: boolean;
dropped: number;
items: {
best_fit: "unknown"
| "disabled"
| "assembly-default"
| "enabled";
call_convention:
| "unknown"
| "not-specified"
| "winapi"
| "cdecl"
| "stdcall"
| "thiscall"
| "fastcall";
char_set: "unknown"
| "auto"
| "not-specified"
| "ansi"
| "unicode";
import_name: string;
import_scope_name: string | null;
import_scope_token: string | null;
mapping_flags: number;
mapping_flags_hex: string;
member_kind: "unknown" | "method" | "field";
member_name: string | null;
member_token: string | null;
no_mangle: boolean;
row_offset: number;
supports_last_error: boolean;
throw_on_unmappable_char:
| "unknown"
| "disabled"
| "assembly-default"
| "enabled";
token: string;
verification: "managed-declaration-only";
}[];
limit: number;
offset: number;
returned: number;
total: number;
};
schema_version: 1;
summary: {
mixed_mode_or_native_header: boolean;
module_ref_count: number;
native_implementation_count: number;
pinvoke_import_count: number;
ready_to_run: boolean;
};
};
}
| null
Readonlymembers
members:
| {
evidence: | {
analysis_profile: {
digest: string;
parameters: Record<string, JSONType>;
provider: { id: string; name: string; version: string };
provider_profile_schema_version: number;
schema_version: 1;
};
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
}
| {
authority: | "shipped-artifact"
| "controlled-replay"
| "historical-reference"
| "external-service"
| "analyst-inference";
confidence: "observed"
| "derived"
| "inferred";
environment:
| {
architecture: string;
id: string;
isolation: "process"
| "none"
| "container"
| "virtual-machine";
platform: string;
}
| null;
evidence_id: string;
evidence_links: string[];
limitations: string[];
locations: (
| { address: string; kind: "address" }
| { end: string; kind: "address-range"; start: string }
| { kind: "artifact-path"; path: string }
| { kind: "file-offset"; offset: number }
| { end: number; kind: "file-offset-range"; start: number }
)[];
normalized_result: JSONType;
operation: string;
parameters: Record<string, JSONType>;
predicate_type: string;
provider: { id: string; name: string; version: string | null };
raw_result: JSONType;
schema_version: 2;
subject:
| {
architecture: "x86"
| "x86_64"
| "arm"
| "arm64"
| null;
digest: { sha256: string };
format:
| "unknown"
| "file"
| "directory"
| "javascript"
| "source-map"
| "plist"
| "entitlements"
| "dmg"
| "zip"
| "pkg"
| "asar"
| "javascript-bundle"
| "mach-o-universal"
| "mach-o"
| "elf"
| "pe"
| "hopper"
| "analysis-database"
| "ipa"
| "apk";
local_path: string;
name: string;
}
| null;
};
result: {
artifact: {
byte_length: number;
format: "pe";
path: string;
sha256: string;
};
call_edges: {
complete: boolean;
dropped: number;
items: {
caller: string
| null;
caller_token: string;
opcode: string;
target_kind: "unknown" | "method-def" | "member-ref" | "method-spec";
target_name: string | null;
target_token: string;
}[];
limit: number;
offset: number;
returned: number;
total: number;
};
coverage: {
issues: {
code: | "invalid-cli-header"
| "invalid-directory"
| "invalid-metadata-root"
| "invalid-stream"
| "missing-stream"
| "invalid-tables"
| "invalid-row"
| "invalid-heap-index"
| "invalid-string"
| "invalid-blob"
| "invalid-guid"
| "invalid-resource"
| "limit-exceeded";
detail: string;
offset: number
| null;
scope: string;
}[];
state: "unavailable"
| "complete"
| "partial";
};
field_accesses: {
complete: boolean;
dropped: number;
items: {
field_name: string
| null;
field_token: string;
method: string | null;
method_token: string;
opcode: string;
}[];
limit: number;
offset: number;
returned: number;
total: number;
};
fields: {
complete: boolean;
dropped: number;
items: {
declaring_type: string
| null;
declaring_type_token: string | null;
flags: number;
name: string;
row_offset: number;
signature: {
calling_convention: string | null;
field_type: string | null;
generic_parameter_count: number | null;
issue: string | null;
kind: "unknown" | "method" | "field";
parameter_count: number | null;
parameter_types: string[];
parse_status: "unsupported" | "decoded" | "partial" | "malformed";
raw_length: number;
raw_sha256: string;
return_type: string | null;
};
token: string;
}[];
limit: number;
offset: number;
returned: number;
total: number;
};
identity_scope: {
requires_artifact_sha256: string;
requires_mvid: string
| null;
token_identity: "build-local";
};
limitations: string[];
member_refs: {
complete: boolean;
dropped: number;
items: {
name: string;
parent_token: string
| null;
row_offset: number;
signature: {
calling_convention: string | null;
field_type: string | null;
generic_parameter_count: number | null;
issue: string | null;
kind: "unknown" | "method" | "field";
parameter_count: number | null;
parameter_types: string[];
parse_status: "unsupported" | "decoded" | "partial" | "malformed";
raw_length: number;
raw_sha256: string;
return_type: string | null;
};
token: string;
}[];
limit: number;
offset: number;
returned: number;
total: number;
};
metadata: {
status: "complete"
| "partial"
| "malformed"
| "absent";
table_row_counts: Record<string, number>;
version: string | null;
};
methods: {
complete: boolean;
dropped: number;
items: {
body: {
anchors: {
il_offset: number;
opcode: string;
operand: string
| null;
operand_kind:
| "string"
| "unknown"
| "type"
| "method"
| "field"
| "none"
| "signature"
| "token"
| "branch"
| "constant"
| "switch"
| "variable";
}[];
decoded_instruction_count: number;
exception_regions: {
class_token: string
| null;
filter_offset: number | null;
flags: number;
handler_length: number;
handler_offset: number;
try_length: number;
try_offset: number;
}[];
file_offset: number
| null;
header_format: "unknown" | "none" | "tiny" | "fat";
il_sha256: string | null;
il_size: number;
init_locals: boolean | null;
instruction_count: number;
issue: string | null;
local_var_sig_token: string | null;
max_stack: number | null;
normalized_il_sha256: string | null;
opcode_counts: Record<string, number>;
rva: number;
status: "too-large" | "partial" | "malformed" | "present" | "absent";
truncated_instructions: number;
};
declaring_type: string
| null;
declaring_type_token: string | null;
flags: number;
impl_flags: number;
name: string;
row_offset: number;
rva: number;
signature: {
calling_convention: string | null;
field_type: string | null;
generic_parameter_count: number | null;
issue: string | null;
kind: "unknown" | "method" | "field";
parameter_count: number | null;
parameter_types: string[];
parse_status: "unsupported" | "decoded" | "partial" | "malformed";
raw_length: number;
raw_sha256: string;
return_type: string | null;
};
token: string;
}[];
limit: number;
offset: number;
returned: number;
total: number;
};
module: | {
enc_base_id: string
| null;
enc_id: string | null;
generation: number;
mvid: string | null;
name: string;
row_offset: number;
token: string;
}
| null;
schema_version: 1;
types: {
complete: boolean;
dropped: number;
items: {
extends_token: string
| null;
field_list: {
count: number;
first_row: number | null;
last_row: number | null;
};
flags: number;
full_name: string;
method_list: {
count: number;
first_row: number
| null;
last_row: number | null;
};
name: string;
namespace: string;
row_offset: number;
token: string;
}[];
limit: number;
offset: number;
returned: number;
total: number;
};
};
}
| null