{ "llm": { "conf": 0.40330166, "grade": "benign", "model": "Qwen/Qwen3.6-27B", "outcome": "benign", "interpretation": "Legitimate Rust audio transcoder package" }, "ml": { "v": "7", "eng": "2.3.0-beta.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.14757377, "rte": "az", "prob": 0.14757377 } ], "prob": 0.14757377, "skip": [ { "rte": "az/whl", "why": "unavailable" }, { "rte": "az/whl", "why": "unavailable" } ], "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.14757376909255981, "type": "whl" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.007068812847137451, "type": "python" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.03757590055465698, "type": "macho" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.07609114050865173, "type": "pkg_info" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.005262881517410278, "type": "text" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.000033408403396606445, "type": "json" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.00020036101341247559, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-07-08T14:35:15Z" }, "path": "desphere_native-0.1.1-cp39-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "p!H([6Awak2MK\u00268aPOrjVJ%.m0055W000@r003LvB8U/7A+eP}vrujbwImy$x(mTbuTCB8D2eB93v\u003cl01N\u003c6l[L*8:aM$znQ[TIhd.O4LpTTlIvo?4-+gG+cT^lD:\u0026JSV/\u003cL3\u003cBl7ig-i59p97.E+2zO2ONoVW=o(h", "n": [ { "c": 2, "d": "Python wheel archive basename", "i": "metadata/file/extension/identity::python-wheel-basename", "o": 0, "z": 97, "cf": 0.949999988079071 } ], "ln": 0 } ], "mol": "Md₂(BiSi₂)", "sha": "2ea9bd37e9683d8934b81b83cce5fcf382a3e8d360fbe203823026e2d0a0cb3b", "path": "desphere_native-0.1.1-cp39-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl", "risk": 4, "size": 501872, "type": "whl", "facts": { "metrics": { "whl": { "native_extension_count": 1.0 }, "file": { "size": 501872.0, "entropy": 7.99, "size_bytes": 501872.0 }, "binary": { "overall_entropy": 7.99, "peak_region_bytes": 498688.0, "peak_region_entropy": 7.84 }, "archive": { "file_count": 7.0, "member_count": 7.0, "script_count": 1.0, "zip_bomb_ratio": 6.75, "directory_count": 0.0, "executable_count": 1.0, "extra_field_size": 0.0, "noise_file_count": 0.0, "total_compressed": 500738.0, "compression.ratio": 0.42, "hidden_file_count": 0.0, "total_uncompressed": 1182176.0, "crc_collision_count": 0.0, "entry_comment_count": 0.0, "max_filename_length": 61.0, "rtlo_filename_count": 0.0, "format.regular_count": 7.0, "nested_archive_count": 0.0, "path_traversal_count": 0.0, "symlink_escape_count": 0.0, "security.setgid_count": 0.0, "security.setuid_count": 0.0, "security.sticky_count": 0.0, "double_extension_count": 0.0, "duplicate_member_count": 0.0, "security.symlink_count": 0.0, "unicode_filename_count": 0.0, "homoglyph_filename_count": 0.0, "security.encrypted_count": 0.0, "timing.mtime_unique_count": 1.0, "timing.mtime_unique_ratio": 0.14, "misplaced_executable_count": 1.0, "timing.mtime_dominant_count": 7.0, "timing.mtime_spread_seconds": 0.0, "timing.sentinel_mtime_count": 0.0, "security.world_writable_count": 0.0, "timing.mtime_dominant_fraction": 1.0, "compression.method_counts.deflate": 7.0 } } }, "ident": { "name": { "value": "desphere_native", "source": "whl.distribution", "verified": false }, "trust": "unsigned", "authors": [ { "name": "Uriel Cohen Priva", "role": "author", "source": "whl.author" } ], "version": { "value": "0.1.1", "source": "whl.version", "verified": false } }, "traits": [ { "id": "metadata/package/quality/ecosystem::pkginfo-license-file", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares license file", "from": [ { "file": 3 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-version-field", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares package version", "from": [ { "file": 3 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-summary-field", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares package summary", "from": [ { "file": 3 } ] }, { "id": "metadata/binary/metrics/structural::high-entropy-cstring", "conf": 1.0, "crit": 3, "desc": "High entropy __cstring section (\u003e=4.5)", "from": [ { "file": 2 } ] }, { "id": "metadata/signed/adhoc::unsigned", "conf": 1.0, "crit": 3, "desc": "Ad-hoc Signature", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/fs/directory/readdir::readdir-closedir", "conf": 0.6600000262260437, "crit": 2, "desc": "Uses closedir", "from": [ { "file": 2 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-core-metadata", "conf": 1.0, "crit": 1, "desc": "Python core metadata marker", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/fs/directory/readdir::readdir-opendir", "conf": 0.6600000262260437, "crit": 2, "desc": "Uses opendir", "from": [ { "file": 2 } ] }, { "id": "metadata/signed/id::libdesphere.dylib", "conf": 1.0, "crit": 3, "desc": "Identifier: libdesphere.dylib", "from": [ { "file": 2 } ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-name-field", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares package name", "from": [ { "file": 3 } ] } ] }, { "ctx": [ { "b": "w].*batdhoB8U/7A+eP}vrujbwGUY7AbP=sasW", "n": [ { "c": 2, "d": "Python file extension", "i": "metadata/file/extension/identity::py", "o": 0, "z": 11, "cf": 1.0 } ], "ln": 1, "addr": 0 }, { "b": "", "ln": 2, "addr": 31 }, { "b": "uTEtZv{-N=jS[oDB8U/7A+eP}vrujbwIds%wn+%+uJ", "ln": 3, "addr": 32 } ], "depth": 1, "facts": { "imp": [ [ "", "hasattr" ], [ "", ".desphere_native" ] ], "mbr": [ "desphere_native.__all__", "desphere_native.__doc__" ], "tgt": [ "hasattr" ], "metrics": { "ast": { "max_depth": 6.0, "bind_count": 2.0, "call_count": 1.0, "node_count": 42.0, "member_count": 2.0, "identifier_count": 4.0, "member_depth_max": 2.0, "string_literal_count": 1.0 }, "file": { "size": 143.0, "entropy": 4.24, "size_bytes": 143.0 }, "text": { "space_count": 13.0, "total_lines": 5.0, "char_entropy": 4.24, "unique_chars": 27.0, "string_density": 0.2, "avg_line_length": 27.8, "max_line_length": 39.0, "empty_line_ratio": 0.2, "last_line_length": 37.0, "whitespace_ratio": 0.12, "most_common_ratio": 0.17, "identifier_density": 1.8, "line_length_stddev": 14.25, "normalized_string_count": 0.45, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 1.0, "most_common_char_codepoint": 95.0, "normalized_unique_identifiers": 1.72 }, "binds": { "count": 2.0 }, "calls": { "count": 1.0 }, "binary": { "overall_entropy": 4.24, "peak_region_bytes": 143.0, "peak_region_entropy": 4.24 }, "imports": { "count": 1.0, "relative_ratio": 1.0, "unique_modules": 1.0, "relative_imports": 1.0, "third_party_count": 1.0, "third_party_ratio": 1.0 }, "members": { "count": 2.0 }, "strings": { "total": 1.0, "avg_length": 7.0, "max_length": 7.0, "avg_entropy": 1.38, "total_bytes": 7.0 }, "identifiers": { "count": 4.0, "total": 9.0, "avg_length": 9.0, "max_length": 15.0, "min_length": 7.0, "avg_entropy": 2.16, "reuse_ratio": 0.44, "unique_count": 4.0, "length_stddev": 3.46, "all_lowercase_ratio": 1.0, "double_underscore_count": 2.0, "underscore_prefix_count": 2.0 } } }, "id": 1, "path": "desphere_native-0.1.1-cp39-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl!!desphere_native/__init__.py", "risk": 1, "sha": "d8246e1027e9376adc204c8260c2d1cd0109546f0a5c02a5244cb52b47f64164", "size": 143, "traits": [ { "id": "metadata/file/extension/identity::py", "conf": 1.0, "crit": 2, "desc": "Python file extension", "spans": [ [ 0, 11 ] ] }, { "id": "metadata/file/metrics::low-overall-entropy-source", "conf": 0.8999999761581421, "crit": 2, "desc": "Script overall entropy stays low", "spans": [ [ 0, 29 ] ] }, { "id": "metadata/file/extension/identity::python-artifact-extension", "conf": 1.0, "crit": 1, "desc": "Python artifact file extension (py/pyi/pyc)", "spans": [ [ 0, 11 ] ] } ], "type": "python" }, { "ctx": [ { "b": "+kO#^000020rr9800003002m:00[Aj0000e0rr9d0000000@S900]l\u003c0000e000000000000000000000000000", "n": [ { "c": 3, "d": "Recognized PE anti-analysis marker", "i": "objectives/anti-analysis/debugger-detect/combined-checks::evasion-aware-recognized-pe-marker", "o": 0, "z": 22, "cf": 1.0 } ], "ln": 0 }, { "b": "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "n": [ { "c": 2, "d": "Mach-O UUID metadata", "i": "metadata/build/reproducible::macho-uuid", "o": 1824, "z": 36, "cf": 1.0 } ], "ln": 1808 }, { "b": "\u003e!N@k07.*V4$)4C002N2azbLjaxH\u003cfnqP\u003eNnv-TYy*?u%wGTK2ndXt5v@DHcBrCV", "n": [ { "c": 2, "d": "English language detection", "i": "metadata/file/profile/language::lang-english", "o": 59466, "z": 3, "cf": 0.800000011920929 } ], "ln": 59450 }, { "b": "uo}}7./O7kInOMH4fcw]Zx1rm0knEl002YH{VOpW002MzZ\u0026VOFIn-2x:4h6zoO@u7?*tLbnRv0FA$Qjy\u003e@Y7G071p00002-8V", "n": [ { "c": 3, "d": "Signal ignore byte pattern (x86_64)", "i": "micro-behaviors/os/signal/handler::sig-ign-pattern", "o": 61261, "z": 29, "cf": 0.4000000059604645 } ], "ln": 61245 }, { "b": "z/YSmx(v($yYBCn00000vrc16zdNQbCv+/ayIvV%p*[x=wL3=YmriA!A:@J]y?mc1u@yMSB.(dXi^2s:A:-]ndpsopzxJw9ayESUA:Q2kvqH6$p\u003cEd@z/cXmvqo.3aA?spB7]Mgaz\u003e?lB7]J8p\u003cEd@z/cXmx(m\u003cfaA?spB7]Mgaz\u003e?lB7]J8p\u003cEd@z/cXvwPz\u003caz/cXsBAh8kxcp\u003e@B0bNyzY\u0026[9", "n": [ { "c": 2, "d": "Rust expect failure message", "i": "metadata/lang/compiler/systems::expect-failed", "o": 358296, "z": 128, "cf": 0.8500000238418579 } ], "ln": 358280 }, { "b": "zc+uoekUUxCTnidAt%?Dv{%g\u0026wN(]\u003eqE%](y\u0026?Z0B-8zzvq)Rzu)6x9ayPdgu}29Ru)6S3y\u0026%r6zGGDgzEEu7wPz*fAYLsOzGGDgwN({azGoq%v}YpWy?j-0z!9ASwI4FhBAg/cBrCEtA=2l3x)Kifx(v(iz!pa*C%#:]q/(C\u0026wGUI{By!%7wN[R.mriz\u003eB97\u0026jwGV5cz/](baz$+lwPw]5wGUY8", "n": [ { "c": 2, "d": "Rust expect failure message", "i": "metadata/lang/compiler/systems::expect-failed", "o": 359072, "z": 128, "cf": 0.8500000238418579 } ], "ln": 359056 }, { "b": "x(!ufzF8mBv}x.5aARJABzbkdm[Dw%x(+zoA=kS9vRG{}wfu8fx(4u6viw]:BAg^", "n": [ { "c": 2, "d": "English language detection", "i": "metadata/file/profile/language::lang-english", "o": 359351, "z": 3, "cf": 0.800000011920929 } ], "ln": 359335 }, { "b": "wmY#=003[PBy^GQA=(mxCwhejayF8Eq=E9\u003ck%[pAqB9VsjUZs!wO#W9A=k\u0026jwO#Pj", "n": [ { "c": 2, "d": "English language detection", "i": "metadata/file/profile/language::lang-english", "o": 360690, "z": 4, "cf": 0.800000011920929 } ], "ln": 360674 }, { "b": "x(v)gefFwgz/P@lzF6pRze0J6j%jVMzEW9\u003ey?mc1u@yMSB.(dXi^2s:A:-]ndpsopzxJw9ayESUA:Q2kvqH6$0000007gWxBy/uiB1ZB5B8Mhwv}xZml@#VLmGrz*", "n": [ { "c": 2, "d": "Rust expect failure message", "i": "metadata/lang/compiler/systems::expect-failed", "o": 360902, "z": 52, "cf": 0.8500000238418579 } ], "ln": 360886 }, { "b": "wPIv4x(Ffdz/c%LazC)twmY.2wN/d\u003cwN)\u003eBB-Rapl${ZYy*?O?5c8Xg000005Dz!h000005=.", "n": [ { "c": 3, "d": "Meeting update action prompt text", "i": "objectives/evasion/masquerade/brand/meeting::meeting-update-action-text", "o": 363728, "z": 10, "cf": 0.8399999737739563 } ], "ln": 363712 }, { "b": "w?E+dx\u003eIa3at1Y\u003c00000DUEwvvqGT*aAI*CByxAxfFLssg=mfIi5$zRv}od.DVAXcB-ILqz/cXlx(dNaaAz44v}YB:ElRaKzfd*1mriA!A:S@hB7/Gmy?aU$wGUY7AbP/sx\u003c$)\u0026aA}KwxM53nayMy2w]hSJi.14dzddKdwPzfxas[THzGGDgzEEu7wPz*fAYLsOzGGDgwN({azGoq%v}YpWy?j-0", "n": [ { "c": 2, "d": "Rust expect failure message", "i": "metadata/lang/compiler/systems::expect-failed", "o": 364944, "z": 128, "cf": 0.8500000238418579 } ], "ln": 364928 }, { "b": "v\u003c2G6ayMy8B-7Yhx(v(iBzb98ay!?$zF%RtB-8zqzE-.E0000MfFCjngb7Hrg+Z^v", "n": [ { "c": 2, "d": "English language detection", "i": "metadata/file/profile/language::lang-english", "o": 367519, "z": 4, "cf": 0.800000011920929 } ], "ln": 367503 }, { "b": "By!#9c]0RivRG{bp^W@1vqYP#zfmBDvrS\u0026jzFTOE01%0.Abn%9B7]91wGU(iyIv.", "n": [ { "c": 2, "d": "English language detection", "i": "metadata/file/profile/language::lang-english", "o": 392175, "z": 3, "cf": 0.800000011920929 } ], "ln": 392159 }, { "b": "gHSjMh!C6dfkLuiA::0lfjwWkz^$CwA:{+zBAh8kxd!jC0cAl\u0026zGxrawmU:.A:-\u003cbv@C(", "n": [ { "c": 1, "d": "Go allocation symbol bytes", "i": "micro-behaviors/mem/alloc/heap::go-alloc-symbol-bytes", "o": 393390, "z": 7, "cf": 0.7599999904632568 } ], "ln": 393374 }, { "b": "3n0?p3pFDnz!9A4BzbkdAaa3dz^^f0Bz\u0026pozGGDgy?m3#wN({1x([DkwI4FhwnbE\u0026aw+A", "n": [ { "c": 1, "d": "payload keyword", "i": "objectives/command-and-control/dropper/keywords::payload", "o": 393538, "z": 7, "cf": 0.6000000238418579 } ], "ln": 393522 }, { "b": "e(k$]x\u003e6ORv}xR3x(v\u003e?3rgXIaz2!cwPh:9z/cXrvqf^]wfu8fwO@R*B-RTEv@C(", "n": [ { "c": 2, "d": "English language detection", "i": "metadata/file/profile/language::lang-english", "o": 396240, "z": 3, "cf": 0.800000011920929 } ], "ln": 396224 }, { "b": "x\u003e}o5q*ACawO\u003c\u003eXx(\u003e)GBzbxfaz2!cwPh:9z/cXiB0b18A+PYdwftG8z/3Q-vrl0G", "n": [ { "c": 2, "d": "English language detection", "i": "metadata/file/profile/language::lang-english", "o": 396322, "z": 4, "cf": 0.800000011920929 } ], "ln": 396306 }, { "b": "CvtLnwQ5f9v@#o)aARJAxKM6}atC0GxKL{jayYFnaIXNiv}Yp\u003eB0bWrA+cw9z/]@d", "n": [ { "c": 2, "d": "English language detection", "i": "metadata/file/profile/language::lang-english", "o": 401241, "z": 4, "cf": 0.800000011920929 } ], "ln": 401225 }, { "b": "00000000000000000000=?^5d3\u0026*nd000001][S65c8Xgc\u003cP!MG-Ehm0000082%Tp:n#twuTD=3sx2n2000000000000000000", "n": [ { "c": 2, "d": "Mach-O linked dylib metadata", "i": "metadata/binary/linking/runtime::dylib", "o": 589824, "z": 30, "cf": 1.0 } ], "ln": 589808 }, { "b": "dGxCG5c8Xg00000000003\u0026*nch#\u0026{U7YTKo0SSi2000l7000l7flItRfkLuifkLuix\u003e870B$LK5wo\u002609vGlxd000003\u0026*nch#\u0026{U7YTKo0SSi2002W@00031flItRfkLuifkLuiq*ACawO\u003c4^e[xlzx\u003c}5x00000cia", "n": [ { "c": 2, "d": "Mach-O linked dylib metadata", "i": "metadata/binary/linking/runtime::dylib", "o": 591784, "z": 25, "cf": 1.0 } ], "ln": 591768 }, { "b": "3paBR0S!Lz0#4WH0%aU^0%E3zpy:x5DK)aO.VM2b0SYCg0xVB=1aTqkcJHdjcJGy?7xz270SZNEPBE4Ev/RSm0dU", "n": [ { "c": 2, "d": "CPython extension PyInit export", "i": "metadata/lang/compiler/native::python-pyinit-export", "o": 615805, "z": 22, "cf": 0.949999988079071 } ], "ln": 615789 }, { "b": "1onA4000000000000000DUEwvvqGT*aAI*CByxAxfFLssg=mfIi5$zRv}od.w]zYLat2=1B7/o8ayPslzfo}ywo\u00265nazC)tBAhInv}Yp\u003ex!.w5BULTh00000wQ5rdA=90znmuNMaAR43y?j-0vq]T+x([Ry", "n": [ { "c": 2, "d": "Lowercase hexadecimal alphabet string", "i": "metadata/file/string/charset::lowercase-hex-alphabet", "o": 894272, "z": 76, "cf": 0.20000000298023224 } ], "ln": 894256 }, { "b": "%c\u003cq}1rW$30E\u003e7H00000flhhRByM$jv(uqUvpp]Bv(lkQvQ\u0026[UfFNcIh.)6DvRdA9hF1)8vk?ZQw\u0026R+5", "n": [ { "c": 3, "d": "High entropy __cstring section (\u003e=4.5)", "i": "metadata/binary/metrics/structural::high-entropy-cstring", "o": 919816, "z": 16, "cf": 1.0 } ], "ln": 919800 }, { "b": "wPxHVwmYj)xj2E?B94y?vpBd}Bo2VPqCIygBvgaToIYy(iAxp8CUqy1B97}KAb](bwD", "n": [ { "c": 2, "d": "Abort program execution", "i": "micro-behaviors/os/signal/handler::abort", "o": 1046355, "z": 5, "cf": 0.8999999761581421 } ], "ln": 1046339 }, { "b": "uQ[WHpgn0JpHX6Iv@}YTw]\u002665Bo2VPqCIyfB2ml0Bvga-BWYF4iCpYKnk0qAg\u0026^.WBn", "n": [ { "c": 3, "d": "Read file status and metadata", "i": "micro-behaviors/fs/file/stat::stat", "o": 1053333, "z": 5, "cf": 0.800000011920929 } ], "ln": 1053317 }, { "b": "C%#%/uSqq\u0026wKQSWz/L?+z/xo9wnc5:uT)[\u003cB7F(@ASxDNqCIygBvgaToIYy(iAxp8CUqy1B97}GwO#VCf-", "n": [ { "c": 2, "d": "Uses closedir", "i": "micro-behaviors/fs/directory/readdir::readdir-closedir", "o": 1055031, "z": 8, "cf": 0.6600000262260437 }, { "c": 2, "d": "Uses opendir", "i": "micro-behaviors/fs/directory/readdir::readdir-opendir", "o": 1055022, "z": 7, "cf": 0.6600000262260437 } ], "ln": 1055006 }, { "b": "uVZacuT^}(BAqLAvq(iNzfo-kvq(iNzeAZ20af8hpiGxOpiolMlVVWfpIJrUr-%J?oj6F@ByW9Y", "n": [ { "c": 2, "d": "Maps files or devices into memory", "i": "micro-behaviors/fs/memory/mmap::mmap", "o": 1056913, "z": 4, "cf": 0.6600000262260437 }, { "c": 2, "d": "Unmap files from memory", "i": "micro-behaviors/fs/memory/mmap::munmap", "o": 1056905, "z": 6, "cf": 0.6600000262260437 } ], "ln": 1056889 }, { "b": "BAg/1wJj^LvpJ\u003eQw]mPQz/xo90af!?A+]r80af8hpiG-mBwu{MBvgaToIYy(iAxp8", "n": [ { "c": 2, "d": "Generic file read/write operations", "i": "micro-behaviors/fs/file/read-write::binary-file-ops", "o": 1057897, "z": 4, "cf": 0.800000011920929 } ], "ln": 1057881 }, { "b": "f/0(?y\u0026r*0uVyj1B.7LWCxdztwDl7AqCIygBvgacB8:fGiDX$Dlpk9pv@Dy0gIgGCh2", "n": [ { "c": 2, "d": "Write files (write)", "i": "micro-behaviors/fs/file/write/direct::write--write", "o": 1062368, "z": 5, "cf": 0.6600000262260437 } ], "ln": 1062352 }, { "b": "z/{evB-Z#2vq{shA+bkTp\u003cCM5oJc4wBy!/FzGx@vwDl7lC%#:]uS7DRBz(hh0afX!xMvV)wm6g@By/Y9Bn", "n": [ { "c": 3, "d": "Recognized extension change marker", "i": "objectives/impact/ransom/tactics::recognized-extension-change-marker", "o": 1062948, "z": 17, "cf": 0.8999999761581421 } ], "ln": 1062932 }, { "b": "i5AAIgg\u0026o]fAq7M00000}RzT@000Rn00001000000000o00000}RzRZ000Q#00io600ic40001z0000", "n": [ { "c": 3, "d": "Ad-hoc Signature", "i": "metadata/signed/adhoc::unsigned", "o": 1150704, "z": 15, "cf": 1.0 } ], "ln": 1150688 }, { "b": "0000000SA60000000000y?Wu?wPI*7wPzumwo\u002609vGlxd000000000000000KdfG?]?+c[v\u0026WLrL-l{0@@", "n": [ { "c": 3, "d": "Identifier: libdesphere.dylib", "i": "metadata/signed/id::libdesphere.dylib", "o": 1150816, "z": 17, "cf": 1.0 } ], "ln": 1150800 } ], "depth": 1, "facts": { "exp": [ [ "PyInit_desphere_native" ] ], "imp": [ [ "desphere_native.abi3.so", "PyBool_Type" ], [ "desphere_native.abi3.so", "PyBytes_Type" ], [ "desphere_native.abi3.so", "PyExc_AttributeError" ], [ "desphere_native.abi3.so", "PyExc_BaseException" ], [ "desphere_native.abi3.so", "PyExc_ImportError" ], [ "desphere_native.abi3.so", "PyExc_SystemError" ], [ "desphere_native.abi3.so", "PyExc_TypeError" ], [ "desphere_native.abi3.so", "PyExc_ValueError" ], [ "desphere_native.abi3.so", "PyList_Type" ], [ "desphere_native.abi3.so", "PyUnicode_Type" ], [ "desphere_native.abi3.so", "Py_FalseStruct" ], [ "desphere_native.abi3.so", "Py_NoneStruct" ], [ "desphere_native.abi3.so", "Py_TrueStruct" ], [ "libsystem.b", "tlv_bootstrap" ], [ "libsystem.b", "tlv_bootstrap" ], [ "libsystem.b", "tlv_bootstrap" ], [ "libsystem.b", "tlv_bootstrap" ], [ "libsystem.b", "tlv_bootstrap" ], [ "libsystem.b", "tlv_bootstrap" ], [ "libsystem.b", "tlv_bootstrap" ], [ "libsystem.b", "tlv_bootstrap" ], [ "libsystem.b", "dyld_stub_binder" ], [ "libsystem.b", "CCRandomGenerateBytes" ], [ "desphere_native.abi3.so", "PyBytes_AsString" ], [ "desphere_native.abi3.so", "PyBytes_FromStringAndSize" ], [ "desphere_native.abi3.so", "PyBytes_Size" ], [ "desphere_native.abi3.so", "PyCMethod_New" ], [ "desphere_native.abi3.so", "PyDict_Next" ], [ "desphere_native.abi3.so", "PyDict_Size" ], [ "desphere_native.abi3.so", "PyErr_Fetch" ], [ "desphere_native.abi3.so", "PyErr_GivenExceptionMatches" ], [ "desphere_native.abi3.so", "PyErr_NewExceptionWithDoc" ], [ "desphere_native.abi3.so", "PyErr_NormalizeException" ], [ "desphere_native.abi3.so", "PyErr_Print" ], [ "desphere_native.abi3.so", "PyErr_PrintEx" ], [ "desphere_native.abi3.so", "PyErr_Restore" ], [ "desphere_native.abi3.so", "PyErr_SetObject" ], [ "desphere_native.abi3.so", "PyErr_SetString" ], [ "desphere_native.abi3.so", "PyErr_WriteUnraisable" ], [ "desphere_native.abi3.so", "PyEval_RestoreThread" ], [ "desphere_native.abi3.so", "PyEval_SaveThread" ], [ "desphere_native.abi3.so", "PyException_GetCause" ], [ "desphere_native.abi3.so", "PyException_GetTraceback" ], [ "desphere_native.abi3.so", "PyException_SetCause" ], [ "desphere_native.abi3.so", "PyException_SetTraceback" ], [ "desphere_native.abi3.so", "PyGILState_Ensure" ], [ "desphere_native.abi3.so", "PyGILState_Release" ], [ "desphere_native.abi3.so", "PyInterpreterState_Get" ], [ "desphere_native.abi3.so", "PyInterpreterState_GetID" ], [ "desphere_native.abi3.so", "PyList_Append" ], [ "desphere_native.abi3.so", "PyList_New" ], [ "desphere_native.abi3.so", "PyLong_FromUnsignedLongLong" ], [ "desphere_native.abi3.so", "PyModule_Create2" ], [ "desphere_native.abi3.so", "PyModule_GetNameObject" ], [ "desphere_native.abi3.so", "PyObject_CallObject" ], [ "desphere_native.abi3.so", "PyObject_GetAttr" ], [ "desphere_native.abi3.so", "PyObject_Repr" ], [ "desphere_native.abi3.so", "PyObject_SetAttr" ], [ "desphere_native.abi3.so", "PyObject_Str" ], [ "desphere_native.abi3.so", "PyTuple_GetItem" ], [ "desphere_native.abi3.so", "PyTuple_New" ], [ "desphere_native.abi3.so", "PyTuple_SetItem" ], [ "desphere_native.abi3.so", "PyTuple_Size" ], [ "desphere_native.abi3.so", "PyType_GetFlags" ], [ "desphere_native.abi3.so", "PyType_GetSlot" ], [ "desphere_native.abi3.so", "PyType_IsSubtype" ], [ "desphere_native.abi3.so", "PyUnicode_AsEncodedString" ], [ "desphere_native.abi3.so", "PyUnicode_AsUTF8String" ], [ "desphere_native.abi3.so", "PyUnicode_FromStringAndSize" ], [ "desphere_native.abi3.so", "PyUnicode_InternInPlace" ], [ "desphere_native.abi3.so", "Py_DecRef" ], [ "desphere_native.abi3.so", "Py_GetVersion" ], [ "desphere_native.abi3.so", "Py_IncRef" ], [ "desphere_native.abi3.so", "Py_IsInitialized" ], [ "libsystem.b", "Unwind_Backtrace" ], [ "libsystem.b", "Unwind_DeleteException" ], [ "libsystem.b", "Unwind_GetDataRelBase" ], [ "libsystem.b", "Unwind_GetIP" ], [ "libsystem.b", "Unwind_GetIPInfo" ], [ "libsystem.b", "Unwind_GetLanguageSpecificData" ], [ "libsystem.b", "Unwind_GetRegionStart" ], [ "libsystem.b", "Unwind_GetTextRelBase" ], [ "libsystem.b", "Unwind_RaiseException" ], [ "libsystem.b", "Unwind_Resume" ], [ "libsystem.b", "Unwind_SetGR" ], [ "libsystem.b", "Unwind_SetIP" ], [ "libsystem.b", "error" ], [ "libsystem.b", "dyld_get_image_header" ], [ "libsystem.b", "dyld_get_image_name" ], [ "libsystem.b", "dyld_get_image_vmaddr_slide" ], [ "libsystem.b", "dyld_image_count" ], [ "libsystem.b", "tlv_atexit" ], [ "libsystem.b", "abort" ], [ "libsystem.b", "bzero" ], [ "libsystem.b", "calloc" ], [ "libsystem.b", "close" ], [ "libsystem.b", "closedir" ], [ "libsystem.b", "dirfd" ], [ "libsystem.b", "dispatch_release" ], [ "libsystem.b", "dispatch_semaphore_create" ], [ "libsystem.b", "dispatch_semaphore_signal" ], [ "libsystem.b", "dispatch_semaphore_wait" ], [ "libsystem.b", "free" ], [ "libsystem.b", "fstat" ], [ "libsystem.b", "getcwd" ], [ "libsystem.b", "getenv" ], [ "libsystem.b", "malloc" ], [ "libsystem.b", "memcmp" ], [ "libsystem.b", "memcpy" ], [ "libsystem.b", "memmove" ], [ "libsystem.b", "memset" ], [ "libsystem.b", "mmap" ], [ "libsystem.b", "munmap" ], [ "libsystem.b", "open" ], [ "libsystem.b", "opendir" ], [ "libsystem.b", "posix_memalign" ], [ "libsystem.b", "pthread_mutex_destroy" ], [ "libsystem.b", "pthread_mutex_init" ], [ "libsystem.b", "pthread_mutex_lock" ], [ "libsystem.b", "pthread_mutex_trylock" ], [ "libsystem.b", "pthread_mutex_unlock" ], [ "libsystem.b", "pthread_mutexattr_destroy" ], [ "libsystem.b", "pthread_mutexattr_init" ], [ "libsystem.b", "pthread_mutexattr_settype" ], [ "libsystem.b", "pthread_threadid_np" ], [ "libsystem.b", "readdir_r" ], [ "libsystem.b", "realloc" ], [ "libsystem.b", "strerror_r" ], [ "libsystem.b", "strlen" ], [ "libsystem.b", "write" ], [ "libsystem.b", "writev" ], [ "libsystem.b", "close$NOCANCEL" ], [ "libsystem.b", "fstat$INODE64" ], [ "libsystem.b", "opendir$INODE64" ], [ "libsystem.b", "readdir_r$INODE64" ] ], "sec": [ [ "__TEXT,__text", 591992, 288376, 6.65, "r-x" ], [ "__TEXT,__stubs", 880368, 1308, 3.81, "r-x" ], [ "__TEXT,__stub_helper", 881676, 1332, 4.12, "r-x" ], [ "__TEXT,__const", 883008, 27468, 6.98, "r-x" ], [ "__TEXT,__gcc_except_tab", 910476, 9340, 5.0, "r-x" ], [ "__TEXT,__cstring", 919816, 11561, 5.15, "r-x" ], [ "__TEXT,__unwind_info", 931380, 7696, 5.54, "r-x" ], [ "__TEXT,__eh_frame", 939080, 42804, 5.22, "r-x" ], [ "__DATA_CONST,__got", 983040, 120, 0.21, "rw-" ], [ "__DATA_CONST,__const", 983160, 10928, 2.51, "rw-" ], [ "__DATA,__la_symbol_ptr", 999424, 872, 2.55, "rw-" ], [ "__DATA,__data", 1000296, 2856, 0.22, "rw-" ], [ "__DATA,__thread_vars", 1003152, 192, 0.33, "rw-" ], [ "__DATA,__thread_data", 1003344, 32, 0.2, "rw-" ], [ "__DATA,__thread_bss", 589824, 88, 1.91, "rw-" ], [ "__DATA,__common", 589824, 72, 2.17, "rw-" ], [ "__DATA,__bss", 589824, 136, 2.04, "rw-" ] ], "metrics": { "file": { "size": 565408.0, "entropy": 6.62, "size_bytes": 1155232.0 }, "macho": { "slice_count": 2.0, "wx_segment_count": 0.0, "data_in_code_count": 37.0, "load_command_count": 14.0, "has_dyld_info_legacy": 1.0, "function_starts_count": 805.0, "uses_legacy_version_min": 1.0 }, "binary": { "is_pie": 0.0, "has_overlay": 1.0, "is_stripped": 0.0, "code_entropy": 6.26, "data_entropy": 1.99, "overlay_size": 730984.0, "string_count": 3056.0, "overlay_ratio": 0.63, "overall_entropy": 6.62, "overlay_entropy": 6.46, "entropy_variance": 4.87, "avg_string_length": 74.25, "max_string_length": 686.0, "peak_region_bytes": 20480.0, "code_to_data_ratio": 0.96, "peak_region_entropy": 7.83, "string_length_stddev": 75.28, "largest_section_ratio": 0.29, "sentence_string_count": 156.0, "sentence_string_ratio": 0.05, "high_entropy_string_count": 0.0 }, "exports": { "count": 1.0 }, "imports": { "count": 131.0 }, "sections": { "count": 17.0, "code_size": 404191.0, "entropy_max": 7.06, "entropy_mean": 3.25, "name_entropy": 4.04, "writable_count": 9.0, "executable_count": 8.0, "nonstandard_count": 5.0, "executable_writable_count": 0.0 }, "consistency": { "extension_content_mismatch": 1.0, "extension_content_mismatch.binary_as_binary": 1.0 }, "dependencies": { "count": 3.0 } } }, "id": 2, "mol": "Md₂(BiSi₂)", "path": "desphere_native-0.1.1-cp39-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl!!desphere_native/desphere_native.abi3.so", "risk": 4, "sha": "c1812f02ddd642446f99a03a667634ae549e98b0382c292c0e1630d17024de7d", "size": 565408, "traits": [ { "id": "metadata/signed/adhoc::unsigned", "conf": 1.0, "crit": 3, "desc": "Ad-hoc Signature", "spans": [ [ 1150704, 15 ] ] }, { "id": "metadata/signed/id::libdesphere.dylib", "conf": 1.0, "crit": 3, "desc": "Identifier: libdesphere.dylib", "spans": [ [ 1150816, 17 ] ] }, { "id": "micro-behaviors/fs/directory/readdir::readdir-closedir", "conf": 0.6600000262260437, "crit": 2, "desc": "Uses closedir", "spans": [ [ 1055031, 8 ] ] }, { "id": "micro-behaviors/fs/directory/readdir::readdir-opendir", "conf": 0.6600000262260437, "crit": 2, "desc": "Uses opendir", "spans": [ [ 1055022, 7 ] ] }, { "id": "metadata/binary/metrics/structural::high-entropy-cstring", "conf": 1.0, "crit": 3, "desc": "High entropy __cstring section (\u003e=4.5)", "spans": [ [ 919816, 16 ] ] } ], "type": "macho" }, { "ctx": [ { "b": "o\u003ewAPwmoN*eMMC6B7]MgiV{gggY", "n": [ { "c": 2, "d": "PyPI package has basic metadata", "i": "metadata/package/quality/ecosystem::pypi-basic-metadata", "o": 0, "z": 21, "cf": 0.949999988079071 } ], "ln": 1, "addr": 0 }, { "b": "pgn0JiV}%AB8U/7A+c?uvrujbwD", "n": [ { "c": 1, "d": "PKG-INFO declares package name", "i": "metadata/package/quality/ecosystem::pkginfo-name-field", "o": 22, "z": 21, "cf": 0.8999999761581421 } ], "ln": 2, "addr": 22 }, { "b": "r+lq)x(v(IattA5e?)", "n": [ { "c": 1, "d": "PKG-INFO declares package version", "i": "metadata/package/quality/ecosystem::pkginfo-version-field", "o": 44, "z": 14, "cf": 0.8999999761581421 } ], "ln": 3, "addr": 44 }, { "b": "lU{gLB7]l2wPx*Op\u0026ZF!A:-*4x(mMaoKR*KBZX]]auzLaqGW55", "ln": 4, "addr": 59 }, { "b": "lU{gLB7]l2wPx*Op\u0026ZF!A:-*4x(mMaoKR*KBZX]]auzLap\u003cEd@z/cWUiV{i", "ln": 5, "addr": 100 }, { "b": "lU{gLB7]l2wPx*OoLF0FzGxwiiYXxVq+n8$AbY\u0026oC4ChbiYXxTnMl*ax\u003e7Z(B7C", "ln": 6, "addr": 148 }, { "b": "lU{gLB7]l2wPx*OrbV.\u0026v\u003c0/[awD#{BzkP6wnbD{iYXxZz/]@dff%.\u003ex(taPiV{!dzGYPiB7]Mg", "ln": 7, "addr": 199 }, { "b": "oLF0FzGxwvmRMWIiV}9/lQ::Gmf", "n": [ { "c": 2, "d": "PyPI package declares license metadata", "i": "metadata/package/quality/ecosystem::pypi-license-metadata", "o": 260, "z": 21, "cf": 0.9399999976158142 } ], "ln": 8, "addr": 260 }, { "b": "q/#}]vrcSOax0u6Bt4PUz.\u0026IhnMeOhq=31NqBIYRvqYP#q!Q8\u0026By/tsaARJAqB%tEfipCuaARTjzGxrawmY=", "n": [ { "c": 1, "d": "PKG-INFO declares package summary", "i": "metadata/package/quality/ecosystem::pkginfo-summary-field", "o": 282, "z": 67, "cf": 0.8999999761581421 } ], "ln": 9, "addr": 282 }, { "b": "oj-x)z/PxfiV@G.xK#i}en/fyBs.GDz/P@hzy*0uB$v6Awnb%kBAg/cB7oc0wD", "ln": 10, "addr": 350 }, { "b": "l3mo.z/N(YrDq!+y-(8-xK#67p\u0026Zn[ve", "ln": 11, "addr": 400 }, { "b": "qE%\u0026\u003cx(W^aeL{.mxM4=Hau?}Ae\u0026-", "ln": 13, "addr": 439 }, { "b": "l$HBHA+PGmx(v(vlVl\u003c:wO#Pwrc-B]iV@JQCYUPQvrcc]z*c7Xay/7[A=U/ljYLDJeJt*mC42A9vqZfIm[ch", "ln": 14, "addr": 462 }, { "b": "p\u0026ZF?wN/*lrz(HKav{A/wPh6\u003cwH[%qBAzFyiXJd0x([3hvLheez7*3wAb]JhwNPQ?xFi[cB8U/7A+b", "n": [ { "c": 1, "d": "Regex component marker", "i": "metadata/package/manifest/homepage::pypi-no-homepage-unless-cond-4--rx-2", "o": 530, "z": 12, "cf": 0.699999988079071 }, { "c": 1, "d": "Regex component marker", "i": "metadata/package/manifest/homepage::pypi-no-homepage-unless-cond-4--rx-4", "o": 553, "z": 19, "cf": 0.699999988079071 } ], "ln": 15, "addr": 530 }, { "b": "p\u0026ZF?wN/*lrz(HKaw#=\u0026z/YSmz/QaOazt\u003esAc15[fk20vxMW=pv@DiqBZ]xhwPIA\u003eA:@=owmY?3xK#i}", "ln": 16, "addr": 593 }, { "b": "", "ln": 17, "addr": 658 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 2031.0, "entropy": 5.28, "size_bytes": 2031.0 }, "binary": { "overall_entropy": 5.28, "peak_region_bytes": 2031.0, "peak_region_entropy": 5.26 } } }, "id": 3, "path": "desphere_native-0.1.1-cp39-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl!!desphere_native-0.1.1.dist-info/METADATA", "risk": 1, "sha": "b6df35cdf5f04e61e05f1c516a261f8d9e4c6114516dc6a78161a7bf797fa078", "size": 2031, "traits": [ { "id": "metadata/package/quality/ecosystem::pkginfo-summary-field", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares package summary", "spans": [ [ 282, 67 ] ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-license-file", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares license file", "spans": [ [ 260, 21 ] ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-name-field", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares package name", "spans": [ [ 22, 21 ] ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-core-metadata", "conf": 1.0, "crit": 1, "desc": "Python core metadata marker", "spans": [ [ 0, 21 ] ] }, { "id": "metadata/package/quality/ecosystem::pkginfo-version-field", "conf": 0.8999999761581421, "crit": 1, "desc": "PKG-INFO declares package version", "spans": [ [ 44, 14 ] ] }, { "id": "metadata/package/manifest/author/identity::pypi-no-author-email", "conf": 0.699999988079071, "crit": 2, "desc": "PyPI metadata omits author email" }, { "id": "metadata/package/quality/ecosystem::pypi-basic-metadata", "conf": 0.949999988079071, "crit": 2, "desc": "PyPI package has basic metadata", "spans": [ [ 0, 21 ], [ 22, 21 ], [ 44, 14 ], [ 282, 67 ] ] }, { "id": "metadata/package/quality/ecosystem::pypi-license-metadata", "conf": 0.9399999976158142, "crit": 2, "desc": "PyPI package declares license metadata", "spans": [ [ 0, 21 ], [ 260, 21 ] ] } ], "type": "pkg_info" }, { "ctx": [ { "b": "", "ln": 4, "addr": 50 }, { "b": "p?sV:x(!ufz/cXiB0bdcA+eZ9azk.6zGGD2efFLBwO005w/$O%vrc0(efG4MayPekaAg[jB8L}sz^)/%x(mT5xcpR9v@Dsi", "ln": 5, "addr": 51 }, { "b": "z!pblxLzJgB8LVjCvtJ6ayPd#ayPtjz!0G\u0026By!#9wn+$2zdNQbvruj4zxJL9y?mVgd0fclar\u003c:5w]@l9A+cBzefG4May]4(yY", "n": [ { "c": 2, "d": "English language detection", "i": "metadata/file/profile/language::lang-english", "o": 131, "z": 4, "cf": 0.800000011920929 } ], "ln": 6, "addr": 128 }, { "b": "x(k5nxK@q+z!s9nvrb{4Cwhejz/{dAA+frlA+P39x(v(uazC.6y\u0026%o5zF78ox([3bB-X:xx(dNavruj4zxK4mwGV2cxj#yd", "ln": 7, "addr": 206 }, { "b": "Bz\u0026pAB7D)Bv@DsiefF!FwnbU3efF!vA+w@maAhEjy?W%7efFFqB98CpvS=^7efG1RvR/:*wO#N2efFwswg}\u003ewaAIagyY", "ln": 8, "addr": 283 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 1074.0, "entropy": 5.1, "size_bytes": 1074.0 }, "binary": { "overall_entropy": 5.1, "peak_region_bytes": 1024.0, "peak_region_entropy": 5.1 } } }, "id": 4, "path": "desphere_native-0.1.1-cp39-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl!!desphere_native-0.1.1.dist-info/licenses/LICENSE", "risk": 1, "sha": "ea6b2a5b4f88b0efe968c105a913df7fcea1dcc5cbac4d24ef891260e89e2404", "size": 1074, "traits": [ { "id": "metadata/file/profile/language::lang-english", "conf": 0.800000011920929, "crit": 2, "desc": "English language detection", "spans": [ [ 131, 4 ] ] } ], "type": "text" }, { "ctx": [ { "b": "DJ", "n": [ { "c": 2, "d": "JSON data format", "i": "metadata/file/format::valid", "o": 0, "z": 23, "cf": 0.6000000238418579 } ], "ln": 1, "addr": 0 }, { "b": "arR\u003eqz/4%ZA=2lbb03?\u003clWrfTz/fbOsrYo", "ln": 2, "addr": 2 }, { "b": "arR\u003eHAaJJWwPz\u003caz/c:War\u0026J)h6KN", "ln": 3, "addr": 30 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 22882.0, "entropy": 4.71, "size_bytes": 22882.0 }, "json": { "parsed_bytes": 22882.0, "parse_limit_bytes": 76800.0 }, "binary": { "overall_entropy": 4.71, "peak_region_bytes": 21858.0, "peak_region_entropy": 4.91 } } }, "id": 5, "path": "desphere_native-0.1.1-cp39-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl!!desphere_native-0.1.1.dist-info/sboms/desphere.cyclonedx.json", "risk": 1, "sha": "5e69639d21115b921191fc8e743fed7c588d4edeb3b20acd595e69884bde6acc", "size": 22882, "traits": [ { "id": "metadata/file/extension/identity::web-asset-extension", "conf": 1.0, "crit": 1, "desc": "Web asset file extension (css/html/js/json)", "spans": [ [ 0, 23 ] ] }, { "id": "metadata/file/format::valid", "conf": 0.6000000238418579, "crit": 2, "desc": "JSON data format", "spans": [ [ 0, 23 ] ] } ], "type": "json" }, { "id": 6, "mol": "Md", "sha": "3512f63fccacd9b2e98a41c4e1b5e9b6cd7e4b4fed28f536da96cefc53f8573e", "path": "desphere-native@0.1.1.registry.json", "risk": 1, "size": 795, "type": "registry", "depth": 1 } ], "omitted_files": 1, "v": "8" } }