Benign python Download

melon-browser 0.1.0

“Readable and optimized string-matching algorithms and a fast keyword processor.”

Ad-hoc SignatureHigh entropy __cstring section (>=4.5)

SHA-256e9cde55c5f7421a4fe3df68f1ac33e00212e4401668a6206275a09868d81e0d1

URLhttps://files.pythonhosted.org/packages/04/7c/fd87017be22b47308939b0d3b07c85d7460dac7dcadd4cd4def1fe1fb61d/melon_browser-0.1.0-cp39-cp39-macosx_10_14_universal2.whl

MaleculeMd₂(BiSi₂)

Evidence

High entropy __cstring section (>=4.5) _melon_native.cpython-39-darwin.so · 0x65960–0x65990

0x6596048000000000000000800000000000000H...............
0x65970332e3900507974686f6e2076657273693.9.Python versi
0x659806f6e206d69736d617463683a206d6f64on mismatch: mod
0x65990756c652077617320636f6d70696c6564ule was compiled

Ad-hoc Signature _melon_native.cpython-39-darwin.so · 0x86650–0x86680

0x866506564476c6f62616c7300000000000000edGlobals.......
0x86660fade0cc00000095f0000000100000000......._........
0x8667000000014fade0c020000094b00020400...........K....
0x86680000200020000006b00000058000000  .......k...X... 

Identifier: bindings-arm64.out _melon_native.cpython-39-darwin.so · 0x866bc–0x866fc

0x866bc000000000001f0440000000000000000.......D........
0x866cc62696e64696e67732d61726d36342e6fbindings-arm64.o
0x866dc757400a9c0994ea669c225528e7396e3ut....N.i.%R.s..
0x866ecb74e84ce90b890c003c92f8efe82edd2.N......../.....
0x866fcab5d                            .]              

Python open() file call cli.py · lines 30–34

30def _load_keywords(processor: KeywordProcessor, path: str) -> None:
  with open(path, "r", encoding="utf-8") as handle:
      for line in handle:
          line = line.rstrip("\n")
          if not line:

stdin string reference cli.py · lines 98–101

  extract = sub.add_parser("extract", help="extract keywords from text")
  extract.add_argument("file", nargs="?", help="input file (default: stdin)")
  extract.add_argument("--keywords", required=True, help="keyword file (one per line)")
  extract.add_argument("--spans", action="store_true", help="print start/end offsets")

No evidence locations were recorded for this file. Raw result