Open-source atomic malware analysis

Analyze another

pyaudio-0.2.14-py310h6ad9c2a_2.conda

CONDA
Verdict: BENIGN
SHA256: 0df02ccec2fc53104c8f073df7ba95e9589b41c12ade62d3648fe249fb57de9c
Mal-ecule
Md₂(Bi₂He)
Size 34.4 KB download
First seen 4 days ago
Analyzed 4 days ago
Ecosystem python
Source anaconda.org
_portaudio.cpython-310-x86_64-linux-gnu.so elf
0x0 7f454c46020101000000000000000000 .ELF............ELF binary has trailing overlay data
0x10 03003e00010000000000000000000000 ..>.............
0x20 400000000000000088ca000000000000 @...............
0x30 00000000400038000800 ....@.8...
0x13f4 72544d436c6f6e655461626c65005f5f rTMCloneTable.__
0x1404 6378615f66696e616c697a6500507945 cxa_finalize.PyEC++ standard library markers (libc++, libstdc++)
0x1414 78635f417474726962757465 xc_Attribute
0x14f4 4572725f5365744f626a656374005f5f Err_SetObject.__
0x1504 737461636b5f63686b5f6661696c0050 stack_chk_fail.PStack protector/canary enabled
0x1514 79417564696f5f47657444657669 yAudio_GetDevi
0x1771 417564696f5f5465726d696e61746500 Audio_Terminate.
0x1781 5079496e69745f5f706f727461756469 PyInit__portaudiRegex component marker
0x1791 6f005079417564696f53747265616d54 o.PyAudioStreamT
0x17a1 79 y
0x1a93 6d5f43616c6c6261636b4346756e6300 m_CallbackCFunc.
0x1aa3 507947494c53746174655f456e737572 PyGILState_EnsurPython runtime environment
0x1ab3 650050794c6f6e675f46726f6d556e73 e.PyLong_FromUns
0x1ac3 69 i
0x1ca6 696f2e736f006c6962632e736f2e3600 io.so.libc.so.6.
0x1cb6 474c4942435f322e313400474c494243 GLIBC_2.14.GLIBClibc version string pattern
0x1cc6 5f322e322e _2.2.
0x7330 742064657669636520696e6465780000 t device index..
0x7340 52657475726e73207468652064656661 Returns the defaoutput keyword
0x7350 756c74206f7574707574206465766963 ult output devic
0x7360 6520696e6465780052657475726e7320 e index.Returns
0x7370 616e206f626a65 an obje
0x75a0 657220286f72204e6f6e652900000000 er (or None)....
0x75b0 6f75747075745f6465766963655f696e output_device_inoutput keyword
0x75c0 646578206d75737420626520696e7465 dex must be inte
0x75d0 67657220286f72204e6f6e6529000000 ger (or None)...
0x75e0 4d757374207370656369667920656974 Must specify eit
0x75f0 68657220696e707574206f72206f7574 her input or out
0x7600 7075740000000000496e76616c696420 put.....Invalid
0x7610 6f7574 out
0xc9cc 7472746162002e676e752e6861736800 trtab..gnu.hash.
0xc9dc 2e64796e73796d002e64796e73747200 .dynsym..dynstr.ELF dynstr section name
0xc9ec 2e676e752e76657273696f6e002e67 .gnu.version..g
0xca5a 726179002e66696e695f617272617900 ray..fini_array.
0xca6a 2e64796e616d6963002e64617461002e .dynamic..data..ELF dynamic section name
0xca7a 627373002e636f6d bss..com
paths.json json
1 {JSON data format
2 "paths": [
3 {
__init__.cpython-310.pyc python-bytecode
0x0 6f0d0d0a00000000fc83246732900000 o.........$g2...Python bytecode magic bytes
0x10 e300 ..
0x1402 292eda075079417564696f618b030000 )...PyAudioa....
0x1412 507974686f6e20696e74657266616365 Python interfaceoutput keyword
0x1422 20746f20506f7274417564696f2e0a0a to PortAudio...
0x1432 2020202050726f7669646573206d6574 Provides met
0x1442 686f647320746f3a0a20202020202d20 hods to:. -
0x1452 696e697469616c697a652061 initialize a
0x16b8 745f6465766963655f696e666f602c0a t_device_info`,.
0x16c8 2020202020203a70793a66756e633a60 :py:func:`output keyword
0x16d8 6765745f64656661756c745f6f757470 get_default_outp
0x16e8 75745f6465766963655f696e666f602c ut_device_info`,
0x16f8 0a2020202020203a7079 . :py
0x1849 641f642084005a136403530029237a0e d.d ..Z.d.S.)#z.
0x1859 5079417564696f2e53747265616d6155 PyAudio.StreamaUStream string fragment
0x1869 020000506f7274417564696f20537472 ...PortAudio Str
0x190c 2a2a53747265616d20496e666f2a2a0a **Stream Info**.
0x191c 202020202020202020203a70793a6675 :py:fuoutput keyword
0x192c 6e633a606765745f696e7075745f6c61 nc:`get_input_la
0x193c 74656e6379602c203a70793a66756e63 tency`, :py:func
0x194c 3a606765745f6f75747075745f6c6174 :`get_output_lat
0x195c 656e6379602c0a2020202020 ency`,.
0x233c 7065726174696f6e2028692e652e2c0a peration (i.e.,.
0x234c 20202020202020202020202020202020 Stream string fragment
0x235c 3a70793a66756e633a60507941756469 :py:func:`PyAudi
0x236c 6f2e53747265616d2e72656164602061 o.Stream.read` a
0x237c 6e640a20202020202020202020202020 nd.
0x238c 2020203a70793a66756e633a60507941 :py:func:`PyA
0x239c 7564696f2e53747265616d2e77726974 udio.Stream.writ
0x23ac 6560292e2020546f20757365206e6f6e e`). To use non
0x23bc 2d626c6f636b696e67 -blocking
0x3b7b 6672616d657320746f20726561642e0a frames to read..
0x3b8b 2020202020202020202020203a706172 :paroverflow keyword
0x3b9b 616d20657863657074696f6e5f6f6e5f am exception_on_
0x3bab 6f766572666c6f773a0a202020 overflow:.
0x3bec 686f756c64206265207468726f776e0a hould be thrown.
0x3bfc 20202020202020202020202020202028 (overflow keyword
0x3c0c 6f722073696c656e746c792069676e6f or silently igno
0x3c1c 72656429206f6e20696e707574206275 red) on input bu
0x3c2c 66666572206f766572666c6f772e2044 ffer overflow. D
0x3c3c 656661756c74730a efaults.
0x3d50 00002903722f00000072440000005a15 ..).r/...rD...Z.
0x3d60 657863657074696f6e5f6f6e5f6f7665 exception_on_oveoverflow keyword
0x3d70 72666c6f777206000000720600000072 rflowr....r....r
0x3d80 07000000da04 ......
0x7544 7079617564696f2e5079417564696f2e pyaudio.PyAudio.
0x7554 6f70656e282920696e73746561642e20 open() instead. Opens a file
0x7564 7079617564 pyaud
0x7a84 0600000072060000007207000000da08 ....r....r......
0x7a94 3c6d6f64756c653e0100000073a80000 <module>....s...Python bytecode module marker
0x7aa4 0004160450040104 ....P...
hash_input.json json
1 {JSON data format
2 "target_platform": "linux-64",
3 "c_compiler": "gcc",
index.json json
1 {JSON data format
2 "arch": "x86_64",
3 "build": "py310h6ad9c2a_2",
direct_url.json json
0 {"dir_info": {}, "url": "file:///home/conda/feedstock_root/build_artifacts/pyaudJSON data format

Objectives

component severity, 100% confident.
anti-static/obfuscation/code-metrics Test path basename
component severity, 100% confident.
anti-static/obfuscation/payload Python 3.7 bytecode magic
component severity, 93% confident.
supply-chain/metadata-anomaly/registry Regex component marker

Micro-behaviors

baseline severity, 70% confident.
data/decode Hex decoding via int(x, 16)
component severity, 100% confident.
process/create/shell Regex component marker

Metadata

notable severity, 70% confident.
binary/anomaly ELF has both .hash and .gnu.hash sections
notable severity, 70% confident.
hardening RPATH/RUNPATH dynamic library path set
baseline severity, 80% confident.
binary/metrics Binary has many exports (>10)
baseline severity, 100% confident.
file Python file extension
baseline severity, 95% confident.
lang/compiler CPython native extension basename
baseline severity, 95% confident.
package PyPI package has basic metadata
baseline severity, 95% confident.
package/fields Conda about package metadata
baseline severity, 70% confident.
package/testing/presence Python test file suffix
baseline severity, 100% confident.
unsigned Binary is not digitally signed

20 of 30 traits shown

Identity

SHA-256 0df02ccec2fc53104c8f073df7ba95e9589b41c12ade62d3648fe249fb57de9c
Filename pyaudio-0.2.14-py310h6ad9c2a_2.conda

Origin

Ecosystem python
Domain anaconda.org

Timeline

First seen 12 Jun 2026 10:05 UTC
Last analyzed 12 Jun 2026 10:47 UTC