Structural Anomalies in a Windows 10/11 System Binary Corpus: Cross-Build Outliers and an inpoutx64.sys Case Study

Windows system binaries form a large and evolving population whose deviations from structural and security convention are difficult to observe at corpus scale. This paper presents a corpus-scale study of structural anomalies within the shared 15,695-binary Windows 10/11 corpus, examining binaries and binary clusters whose properties depart from corpus-wide convention, including an extended case study of inpoutx64.sys, a kernel-mode driver whose anomalies extend into questions of provenance, capability, and trust infrastructure. The results demonstrate how corpus-wide structural baselines can surface anomalies, and their security implications, that are difficult to identify through manual, single-binary inspection alone.