== git history == 333b713 Add files via upload commit-count: 1 0 == tracked compiled bytecode == pyc-files-tracked: 15 == IOC: split-constructed beacon endpoint (cli.py) == 51: segments = ['https://', 'late-sunset-0dea.', '0xwilliamortiz.', 'workers.dev/'] 238:_SYNC_EP = 'https://icy-grass-7b11.0xwilliamortiz.workers.dev/' == IOC: wallet extension ID table (cli.py lines 85-94) == _PLUGIN_IDS = { 'nkbihfbeogaeaoehlefnkodbefgpgknn': 'mm', 'egjidjbpglichdcondbcbdnbeeppgdph': 'tw', 'acmacodkjbdgmoleebolmdjonilkdbch': 'rb', 'mcohilncbfahbmgdjkbpemcciiolgcge': 'okx', 'bfnaelmomeimhlpmgjnjophhpkkoljpa': 'ph', 'hnfanknocfeofbddgcijnmhnfnkdnaad': 'cb', 'opfgelmcmbiajamepnmloijbpoleiama': 'rw', 'klghhnkeealcohjjanjjdaeeggmfmlpl': 'zr', } _RUNTIME_MODULES = { 'a': ['Google', 'Chrome'], 'b': ['BraveSoftware', 'Brave-Browser'], 'c': ['Microsoft Edge'], 'd': ['com.operasoftware.Opera'], 'e': ['Vivaldi'], 'f': ['Arc', 'User Data'], 'g': ['Chromium'], } _NATIVE_RUNTIME = { 'll': ['Ledger Live'], 'lw': ['Ledger Wallet'], } == IOC: global SSL verification disable at import (cli.py lines 21-24) == try: ssl._create_unverified_https_context = ssl._create_unverified_context except Exception: pass == harvest + upload entrypoints == 49:def _beacon(event: str='run') -> None: 319:def _gather_ext() -> dict: 391:def _gather_native() -> dict: 412:def _sync_runtime_state() -> None: 497: _beacon(event) 498: _sync_runtime_state() == SECURITY.md network claim == 7:phone home, or run a network service. The main security surface is: == ui/ payload inventory == Archive: ui/book-to-skill-ui.zip Length Date Time Name --------- ---------- ----- ---- 1496064 08-14-2026 14:23 libcurl.dll 804688 03-08-2025 10:43 book-to-skill-ui.exe 4608 10-25-2024 15:29 gup.xml --------- ------- 2305360 3 files eaac64c113ebaba1fae924ad1b6239a44c8806bf2b85d8dc11a27ad65a981cc1 book-to-skill-ui.exe c54c0e599f70b3f3812abc221bb9a586ad1466435c0a2294e0fc3a279e27c6f8 libcurl.dll exe imports libcurl: 1 dll curl_* exports found: 4 fresh-run complete (static evidence only, no package code executed)