Skip to main content

appbinary-inspector

Static inspection tools plus an open-source, disk-paged character-model architecture.

Features

  • Detects PE, ELF, Mach-O, ZIP, 7z, and RAR headers
  • Calculates SHA-256 and SHA-1 hashes
  • Extracts readable strings and entropy
  • Reads basic PE header metadata
  • Extracts embedded ZIP archives and carves recognizable binary signatures
  • Exports PE headers and raw binary sections for authorized analysis
  • Builds a compact tokenizer for source code, logs, or extracted text
  • Provides editable PyTorch classifier, autoencoder, and transformer templates
  • Keeps CardStack model cards as separately stored 4-bit SSD files
  • Loads only router-selected cards into a small LRU cache during generation
  • Generates one next byte at a time for true character-level output

Install

pip install appbinary-inspector

Use

appbin inspect program.exe
appbin extract program.exe --output extracted
appbin binary-extract program.exe --output pe_parts
appbin tokenize source.py --vocab source-tokenizer.json
appbin model-template classifier

CardStack: low-VRAM model experiments

CardStack is a small trainable byte-level language model. Its expert cards are stored as separate 4-bit files. At inference, inactive cards remain on disk and the cache retains only a limited number of recently selected cards.

from appbinary_inspector import CardStackConfig, CardStackLM, train_next_character

model = CardStackLM(CardStackConfig(width=128, layers=4, cards_per_layer=8, active_cards=2, cache_cards=4))
losses = train_next_character(model, open("training.txt", encoding="utf-8").read(), steps=500)
model.save("my-card-model")  # writes a base file plus separate 4-bit card files

paged = CardStackLM.load("my-card-model")
print(paged.generate("Hello", new_characters=80))

CLI version:

appbin card-create --output my-card-model --width 128 --layers 4 --cards 8 --active-cards 2
appbin card-train my-card-model training.txt --steps 500
appbin card-generate my-card-model "Hello" --characters 80

Text chat interface

Open a local chat box after training a model. It binds only to your computer, opens in your browser, and never sends prompts to a remote service.

appbin chat my-card-model

Python import API

Use the model from normal Python code without a terminal command interface:

from appbinary_inspector import appbincardcr

mycard = appbincardcr("my-card-model")
reply = mycard("Explain gravity", output=True)

# Or call it in one line:
reply = appbincardcr(mycard, "Explain gravity", output=True)

Hugging Face models

Hub IDs and local Transformers directories work through the same API.

from appbinary_inspector import appbincardcr

mycard = appbincardcr(
    "Qwen/Qwen2.5-1.5B-Instruct",
    backend="huggingface",
    device_map="auto",
)
mycard("Explain gravity", output=True)

Install support with pip install "appbinary-inspector[huggingface]". For CUDA 4-bit loading, install appbinary-inspector[huggingface-4bit] and pass load_in_4bit=True. Standard Hugging Face models keep their original dense layout; only models trained or converted for CardStack use disk-card paging.

This reduces active model-card memory. It does not make a dense, unmodified 70B model fit instantly on a low-VRAM GPU: disk bandwidth and CPU/GPU transfer time become the tradeoff, and models need to be trained for sparse routing.

PyTorch models

Install optional PyTorch support:

pip install "appbinary-inspector[torch]"
from appbinary_inspector.torch_builder import create_model, preset

config = preset("classifier")
config["layers"][0]["out_features"] = 512
model = create_model(config)

Safety

Targets are read as bytes only and never executed. The package does not defeat encryption, DRM, licensing controls, passwords, or code protections. It can analyze plaintext, export raw PE sections, and extract recognizable embedded content from files you are authorized to inspect.

Metadata

Release files for appbinary-inspector 0.7.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for appbinary-inspector 0.7.1
File Size Uploaded Provenance Actions
appbinary_inspector-0.7.1.tar.gz 16.5 kB With provenance Details for appbinary_inspector-0.7.1.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for appbinary-inspector 0.7.1
File Interpreter ABI Platform Actions
appbinary_inspector-0.7.1-py3-none-any.whl Python 3 none any Details for appbinary_inspector-0.7.1-py3-none-any.whl

Total release size: 37.4 kB

Release files / appbinary_inspector-0.7.1.tar.gz

Download URL appbinary_inspector-0.7.1.tar.gz
Size 16.5 kB
Tags Source
SHA-256 checksum
How to use checksums
2104b7be6d08084be147261edad0ade8835418d46fdb13da5163d642de666ee8
BLAKE2b-256 checksum
How to use checksums
eff8a4e31c2a37ebaea90f604d4abe2a77f032647b1aa1f7201687a439701888
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 11, 2026.

Transparency log

Release files / appbinary_inspector-0.7.1-py3-none-any.whl

Download URL appbinary_inspector-0.7.1-py3-none-any.whl
Size 20.9 kB
Tags Python 3
SHA-256 checksum
How to use checksums
812230b0dcfaa5df8b70195f355f523c77396146b379280406a73e3f5c8d22e9
BLAKE2b-256 checksum
How to use checksums
3051659052c97943e2abf98b6be00ee4b72cdbf8c15d89e2b29f9c4b69bb5e29
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 11, 2026.

Transparency log

Security for appbinary-inspector 0.7.1

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

Both files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for appbinary_inspector-0.7.1.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 11, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page