Benign alpine Download

fail2ban-pyc 1.1.0-r3

Legitimate fail2ban test suite bytecode

Generates X509 cert via openssl reqPython bytecode gethostname name

SHA-2566783cf720d5daf74bd7b334d4643cfdf14d4997c7fd4d4a623b0338e3018f35f

URLhttps://dl-cdn.alpinelinux.org/alpine/latest-stable/main/x86_64/fail2ban-pyc-1.1.0-r3.apk

Evidence

Generates self-signed TLS certificate test_smtp.cpython-314.pyc · 0x34eb–0x36db

⋯3 more rows
0x351b726561746520612073656c6620736967reate a self sig
0x352b6e65642053534c206365727469666963ned SSL certific
0x353b61746520696e2074656d706f72617279ate in temporary
⋯4 more rows
0x358b20202020202020202020202020202020                
0x359b202020202052657475726e7320612074     Returns a t
0x35ab75706c6520636f6e7461696e696e6720uple containing 
0x35bb74686520636572746966696361746520the certificate 
0x35cb66696c65206e616d6520616e64207468file name and th
⋯3 more rows
0x360b20202020202020202020202020202020                
0x361b2020546865206365727420284543433a  The cert (ECC:
0x362b3235362c203130307965617273292063256, 100years) c
0x363b72656174656420776974683a0a202020reated with:.   
0x364b20202020202020202020202020202020                
0x365b20202020206f70656e73736c20726571     openssl req
0x366b202d78353039202d6f7574202f746d70 -x509 -out /tmp
⋯7 more rows

SOCK_STREAM socket type test_smtp.cpython-314.pyc · 0x4032–0x40f2

0x40320000000000670200001c0069021f001d.....g.....i....
0x4042001f001f001f00520123003b031d0069.......R.#.;...i
0x405201290372880000004e72870000002905.).r....Nr....).
0x4062728c000000da0741465f494e4554da0br......AF_INET..
0x4072534f434b5f53545245414dda0462696eSOCK_STREAM..bin
0x408264728d0000002901da01737301000000dr....)...ss....
⋯7 more rows

subprocess module reference in Python bytecode misctestcase.cpython-314.pyc · 0xaed–0xbad

⋯3 more rows
0xb1d004e542901da057368656c6c2904da0a.NT)...shell)...
0xb2d73756270726f63657373da0c63686563subprocess..chec
0xb3d6b5f6f7574707574720e000000da0672k_outputr......r
⋯7 more rows

socket module near connect in bytecode csocket.cpython-314.pyc · 0x27a–0x39a

⋯3 more rows
0x2aa03e9010000004ee9ffffffff2908da06......N.....)...
0x2ba736f636b6574da0741465f554e4958dasocket..AF_UNIX.
0x2ca0b534f434b5f53545245414dda0f5f43.SOCK_STREAM.._C
0x2da536f636b65745f5f63736f636bda0a67Socket__csock..g
0x2ea657474696d656f7574da115f43536f63ettimeout.._CSoc
0x2fa6b65745f5f646566746f7574da0a7365ket__deftout..se
0x30a7474696d656f7574da07636f6e6e6563ttimeout..connec
0x31a742903da0473656c66da04736f636bdat)...self..sock.
0x32a0774696d656f75747303000000262626.timeouts....&&&
⋯7 more rows

Python socket sendall name in bytecode csocket.cpython-314.pyc · 0x958–0xa18

⋯3 more rows
0x9886901721d000000290a7210000000da07i.r....).r......
0x99873656e64616c6c7206000000da05434csendallr......CL
0x9a84f53457227000000da0873687574646fOSEr'.....shutdo
⋯7 more rows

Showing the top 5 files — 7 more files (52 regions) not shown.

No evidence locations were recorded for this file. Raw result