Skip to main content

appbinary-inspector

Static inspection tools plus an open-source, disk-paged character-model architecture.

Features

  • Detects PE, ELF, Mach-O, ZIP, 7z, and RAR headers
  • Calculates SHA-256 and SHA-1 hashes
  • Extracts readable strings and entropy
  • Reads basic PE header metadata
  • Extracts embedded ZIP archives and carves recognizable binary signatures
  • Exports PE headers and raw binary sections for authorized analysis
  • Builds a compact tokenizer for source code, logs, or extracted text
  • Provides editable PyTorch classifier, autoencoder, and transformer templates
  • Keeps CardStack model cards as separately stored 4-bit SSD files
  • Loads only router-selected cards into a small LRU cache during generation
  • Generates one next byte at a time for true character-level output

Install

pip install appbinary-inspector

Use

appbin inspect program.exe
appbin extract program.exe --output extracted
appbin binary-extract program.exe --output pe_parts
appbin tokenize source.py --vocab source-tokenizer.json
appbin model-template classifier

CardStack: low-VRAM model experiments

CardStack is a small trainable byte-level language model. Its expert cards are stored as separate 4-bit files. At inference, inactive cards remain on disk and the cache retains only a limited number of recently selected cards.

from appbinary_inspector import CardStackConfig, CardStackLM, train_next_character

model = CardStackLM(CardStackConfig(width=128, layers=4, cards_per_layer=8, active_cards=2, cache_cards=4))
losses = train_next_character(model, open("training.txt", encoding="utf-8").read(), steps=500)
model.save("my-card-model")  # writes a base file plus separate 4-bit card files

paged = CardStackLM.load("my-card-model")
print(paged.generate("Hello", new_characters=80))

CLI version:

appbin card-create --output my-card-model --width 128 --layers 4 --cards 8 --active-cards 2
appbin card-train my-card-model training.txt --steps 500
appbin card-generate my-card-model "Hello" --characters 80

This reduces active model-card memory. It does not make a dense, unmodified 70B model fit instantly on a low-VRAM GPU: disk bandwidth and CPU/GPU transfer time become the tradeoff, and models need to be trained for sparse routing.

PyTorch models

Install optional PyTorch support:

pip install "appbinary-inspector[torch]"
from appbinary_inspector.torch_builder import create_model, preset

config = preset("classifier")
config["layers"][0]["out_features"] = 512
model = create_model(config)

Safety

Targets are read as bytes only and never executed. The package does not defeat encryption, DRM, licensing controls, passwords, or code protections. It can analyze plaintext, export raw PE sections, and extract recognizable embedded content from files you are authorized to inspect.

Metadata

Release files for appbinary-inspector 0.4.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for appbinary-inspector 0.4.0
File Size Uploaded Provenance Actions
appbinary_inspector-0.4.0.tar.gz 11.4 kB With provenance Details for appbinary_inspector-0.4.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for appbinary-inspector 0.4.0
File Interpreter ABI Platform Actions
appbinary_inspector-0.4.0-py3-none-any.whl Python 3 none any Details for appbinary_inspector-0.4.0-py3-none-any.whl

Total release size: 26.4 kB

Release files / appbinary_inspector-0.4.0.tar.gz

Download URL appbinary_inspector-0.4.0.tar.gz
Size 11.4 kB
Tags Source
SHA-256 checksum
How to use checksums
986208624b1fcbcb009a1ce7e9cf908c1f4f38bcf3a0a9a5c3f7609e74a7e096
BLAKE2b-256 checksum
How to use checksums
8a7a761e93a2a11b29d31f64cbb833e22eb3da5713e4e34d27e84343c0dffcc9
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 11, 2026.

Transparency log

Release files / appbinary_inspector-0.4.0-py3-none-any.whl

Download URL appbinary_inspector-0.4.0-py3-none-any.whl
Size 15.0 kB
Tags Python 3
SHA-256 checksum
How to use checksums
ced5e24841cfda572b7987e9ed776a7f172c062386bdc3243e2a452d88965011
BLAKE2b-256 checksum
How to use checksums
7604b55aabfccd569a47dd124d659ff89f7ec46e6b9011ad6b4cdcdacda3afa7
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 11, 2026.

Transparency log

Security for appbinary-inspector 0.4.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

Both files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for appbinary_inspector-0.4.0.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 11, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page