Benign Download

archiveinfo.py

Python hex byte decode transformPython binascii.unhexlify hex decode

SHA-256a226cdbb901e2dd1c0b719b6bd0bbb638ddc6aa9aafb047b1bfefa4c36fa3222

Evidence

Python binascii.unhexlify hex decode lines 162–166

  if checkall:
      all_defined = file.read(1)
      if all_defined != unhexlify("00"):
          return [True] * count
  result = []

Credential-access vocabulary word: password lines 308–311

      "decompressor",
      "files",
      "password",
  ]

Defensive dangerous code-call denylist lines 708–712

              isempty = read_boolean(buffer, numfiles, checkall=False)
              list(map(lambda x, y: x.update({"emptystream": y}), self.files, isempty))  # type: ignore
              numemptystreams += isempty.count(True)
          elif prop == PROPERTY.EMPTY_FILE:
              self.emptyfiles = read_boolean(buffer, numemptystreams, checkall=False)