{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:NUBXGGBNT6QE7Q65NKJIV4WFBS","short_pith_number":"pith:NUBXGGBN","canonical_record":{"source":{"id":"2407.08924","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-12T02:10:07Z","cross_cats_sorted":[],"title_canon_sha256":"ad126a5da38143785b3ff4ec8e6e1845eaa306dcf55d1409b7a6d36a6d0c6cfc","abstract_canon_sha256":"aba273e3eee9dbc64b6b01a76692809f1445becbfded1ac2c85cd8cae0bc3ca5"},"schema_version":"1.0"},"canonical_sha256":"6d0373182d9fa04fc3dd6a928af2c50c8ea1978421a6957810d89a28232e9e5c","source":{"kind":"arxiv","id":"2407.08924","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.08924","created_at":"2026-07-05T08:42:58Z"},{"alias_kind":"arxiv_version","alias_value":"2407.08924v1","created_at":"2026-07-05T08:42:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.08924","created_at":"2026-07-05T08:42:58Z"},{"alias_kind":"pith_short_12","alias_value":"NUBXGGBNT6QE","created_at":"2026-07-05T08:42:58Z"},{"alias_kind":"pith_short_16","alias_value":"NUBXGGBNT6QE7Q65","created_at":"2026-07-05T08:42:58Z"},{"alias_kind":"pith_short_8","alias_value":"NUBXGGBN","created_at":"2026-07-05T08:42:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:NUBXGGBNT6QE7Q65NKJIV4WFBS","target":"record","payload":{"canonical_record":{"source":{"id":"2407.08924","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-12T02:10:07Z","cross_cats_sorted":[],"title_canon_sha256":"ad126a5da38143785b3ff4ec8e6e1845eaa306dcf55d1409b7a6d36a6d0c6cfc","abstract_canon_sha256":"aba273e3eee9dbc64b6b01a76692809f1445becbfded1ac2c85cd8cae0bc3ca5"},"schema_version":"1.0"},"canonical_sha256":"6d0373182d9fa04fc3dd6a928af2c50c8ea1978421a6957810d89a28232e9e5c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:42:58.658675Z","signature_b64":"8ESzrxT1OqYT8FPXD3OeFV0NVNn2WAXQox9XoYrsyKzxCWQ02fcEcOs5LcfF0M6MoNAQrnTrwPBu+wARLIldDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6d0373182d9fa04fc3dd6a928af2c50c8ea1978421a6957810d89a28232e9e5c","last_reissued_at":"2026-07-05T08:42:58.658071Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:42:58.658071Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.08924","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:42:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iIUxTTmqfviejCBiqWNMae5zyF34tjgEMSXgHXcMKJT0EXQ4AKT5nP15aciagn4e8+4liaI3vmIJPdXcJJsaDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T04:06:23.190768Z"},"content_sha256":"12a7caa688d7caf4f510376e2779dc6434254dc54dc5fcd1421d90c233241d78","schema_version":"1.0","event_id":"sha256:12a7caa688d7caf4f510376e2779dc6434254dc54dc5fcd1421d90c233241d78"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:NUBXGGBNT6QE7Q65NKJIV4WFBS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Disassembling Obfuscated Executables with LLM","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Hang Zhang, Hongbo Chen, Huanyao Rong, Shengchen Duan, Shen Wang, Xiaofeng Wang, Yue Duan","submitted_at":"2024-07-12T02:10:07Z","abstract_excerpt":"Disassembly is a challenging task, particularly for obfuscated executables containing junk bytes, which is designed to induce disassembly errors. Existing solutions rely on heuristics or leverage machine learning techniques, but only achieve limited successes. Fundamentally, such obfuscation cannot be defeated without in-depth understanding of the binary executable's semantics, which is made possible by the emergence of large language models (LLMs). In this paper, we present DisasLLM, a novel LLM-driven dissembler to overcome the challenge in analyzing obfuscated executables. DisasLLM consists"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.08924","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.08924/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:42:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/BWyxo8EFrfwZLcAUMd9tzUwGfNECLSdPCEB03vMwByOU3tN99b/ZwB35NaHwgy7wZN9VnNbedRdLCmJQAmUDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T04:06:23.191256Z"},"content_sha256":"d1000602e00992318a466a644856b3be7a30909171d2842dadc51caaf2209803","schema_version":"1.0","event_id":"sha256:d1000602e00992318a466a644856b3be7a30909171d2842dadc51caaf2209803"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NUBXGGBNT6QE7Q65NKJIV4WFBS/bundle.json","state_url":"https://pith.science/pith/NUBXGGBNT6QE7Q65NKJIV4WFBS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NUBXGGBNT6QE7Q65NKJIV4WFBS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T04:06:23Z","links":{"resolver":"https://pith.science/pith/NUBXGGBNT6QE7Q65NKJIV4WFBS","bundle":"https://pith.science/pith/NUBXGGBNT6QE7Q65NKJIV4WFBS/bundle.json","state":"https://pith.science/pith/NUBXGGBNT6QE7Q65NKJIV4WFBS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NUBXGGBNT6QE7Q65NKJIV4WFBS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:NUBXGGBNT6QE7Q65NKJIV4WFBS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"aba273e3eee9dbc64b6b01a76692809f1445becbfded1ac2c85cd8cae0bc3ca5","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-12T02:10:07Z","title_canon_sha256":"ad126a5da38143785b3ff4ec8e6e1845eaa306dcf55d1409b7a6d36a6d0c6cfc"},"schema_version":"1.0","source":{"id":"2407.08924","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.08924","created_at":"2026-07-05T08:42:58Z"},{"alias_kind":"arxiv_version","alias_value":"2407.08924v1","created_at":"2026-07-05T08:42:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.08924","created_at":"2026-07-05T08:42:58Z"},{"alias_kind":"pith_short_12","alias_value":"NUBXGGBNT6QE","created_at":"2026-07-05T08:42:58Z"},{"alias_kind":"pith_short_16","alias_value":"NUBXGGBNT6QE7Q65","created_at":"2026-07-05T08:42:58Z"},{"alias_kind":"pith_short_8","alias_value":"NUBXGGBN","created_at":"2026-07-05T08:42:58Z"}],"graph_snapshots":[{"event_id":"sha256:d1000602e00992318a466a644856b3be7a30909171d2842dadc51caaf2209803","target":"graph","created_at":"2026-07-05T08:42:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.08924/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Disassembly is a challenging task, particularly for obfuscated executables containing junk bytes, which is designed to induce disassembly errors. Existing solutions rely on heuristics or leverage machine learning techniques, but only achieve limited successes. Fundamentally, such obfuscation cannot be defeated without in-depth understanding of the binary executable's semantics, which is made possible by the emergence of large language models (LLMs). In this paper, we present DisasLLM, a novel LLM-driven dissembler to overcome the challenge in analyzing obfuscated executables. DisasLLM consists","authors_text":"Hang Zhang, Hongbo Chen, Huanyao Rong, Shengchen Duan, Shen Wang, Xiaofeng Wang, Yue Duan","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-12T02:10:07Z","title":"Disassembling Obfuscated Executables with LLM"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.08924","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:12a7caa688d7caf4f510376e2779dc6434254dc54dc5fcd1421d90c233241d78","target":"record","created_at":"2026-07-05T08:42:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"aba273e3eee9dbc64b6b01a76692809f1445becbfded1ac2c85cd8cae0bc3ca5","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-12T02:10:07Z","title_canon_sha256":"ad126a5da38143785b3ff4ec8e6e1845eaa306dcf55d1409b7a6d36a6d0c6cfc"},"schema_version":"1.0","source":{"id":"2407.08924","kind":"arxiv","version":1}},"canonical_sha256":"6d0373182d9fa04fc3dd6a928af2c50c8ea1978421a6957810d89a28232e9e5c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6d0373182d9fa04fc3dd6a928af2c50c8ea1978421a6957810d89a28232e9e5c","first_computed_at":"2026-07-05T08:42:58.658071Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:42:58.658071Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8ESzrxT1OqYT8FPXD3OeFV0NVNn2WAXQox9XoYrsyKzxCWQ02fcEcOs5LcfF0M6MoNAQrnTrwPBu+wARLIldDg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:42:58.658675Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.08924","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:12a7caa688d7caf4f510376e2779dc6434254dc54dc5fcd1421d90c233241d78","sha256:d1000602e00992318a466a644856b3be7a30909171d2842dadc51caaf2209803"],"state_sha256":"cca4e9497cb76eff33f95b7bff711ba8e9709d52938d42e14b60518e662b26bb"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4aikvGHxZOZnlhVeF2TtoE9dFvRU+iAVnU+uZvJYjo1JcH/sUEth834avobQJSod7ltQHF6YpPKM7DqolPBsCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T04:06:23.195389Z","bundle_sha256":"b96151a8c74273d156e95c395aa43910518d333379000c2bbffe3720e11fbfa9"}}