7eb2af6bf941e11db8dee1ef620eb2f9c52991cf7023e44c5d7066dd671f3dff

Analysis

max time kernel
157s
max time network
163s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
29/01/2024, 00:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

OurRedString-v12.1_FULL-pc.lite.rar
Size

80.3MB
MD5

d01f21540c123615747b7bcbac972cc2
SHA1

ce8ae4c113471167aaadaf198022cb4071a00685
SHA256

7eb2af6bf941e11db8dee1ef620eb2f9c52991cf7023e44c5d7066dd671f3dff
SHA512

59b36a04fbedbb164ed4ba8cd746893f71f29f24546e6ffdd4dc51cff12f30bc1fe18d2eb5779174cbdd3bdc443794ed17d62efbe9cce4d666d0236e181cfbab
SSDEEP

1572864:WfYqNMLJ2xa/MCwR5syKy6HbnqRIKxrmFdr+9pXjbZiUDeU96Omm:WfY3Jn/Mrs3ym7tyrmnr+9viJU960

Score

7^/10

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1232405761-1209240240-3206092754-1000\Control Panel\International\Geo\Nation	cmd.exe

Executes dropped EXE 1 IoCs

pid	Process
1972	OurRedString.exe

Loads dropped DLL 6 IoCs

pid	Process
1972	OurRedString.exe
1972	OurRedString.exe
1972	OurRedString.exe
1972	OurRedString.exe
1972	OurRedString.exe
1972	OurRedString.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1232405761-1209240240-3206092754-1000_Classes\Local Settings	cmd.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4268	7zFM.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeRestorePrivilege	4268	7zFM.exe
Token: 35	4268	7zFM.exe
Token: SeSecurityPrivilege	4268	7zFM.exe
Token: 33	3008	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	3008	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
4268	7zFM.exe
4268	7zFM.exe
4268	7zFM.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1972	OurRedString.exe
1972	OurRedString.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 368 wrote to memory of 4268	368	cmd.exe	86
PID 368 wrote to memory of 4268	368	cmd.exe	86
PID 1972 wrote to memory of 5064	1972	OurRedString.exe	101
PID 1972 wrote to memory of 5064	1972	OurRedString.exe	101
PID 1972 wrote to memory of 2956	1972	OurRedString.exe	102
PID 1972 wrote to memory of 2956	1972	OurRedString.exe	102
PID 1972 wrote to memory of 748	1972	OurRedString.exe	105
PID 1972 wrote to memory of 748	1972	OurRedString.exe	105

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\OurRedString-v12.1_FULL-pc.lite.rar
1⤵
- Checks computer location settings
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:368
- C:\Program Files\7-Zip\7zFM.exe
  "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\OurRedString-v12.1_FULL-pc.lite.rar"
  2⤵
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  PID:4268

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2780

C:\Users\Admin\Desktop\New folder\OurRedString.exe
"C:\Users\Admin\Desktop\New folder\OurRedString.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1972
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c "ver"
  2⤵
  PID:5064
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c "ver"
  2⤵
  PID:2956
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c "ver"
  2⤵
  PID:748

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4f8 0x4f0
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3008

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\Desktop\New folder\OurRedString.exe

Filesize
269KB

MD5
8a6b18112d1c3553388cbca1a904ed56

SHA1
ac957bea9aa1fd582ad960eee7f97d0e56e79dd2

SHA256
3f648bdc9e20ccf2b54b94114dba374eb5c7d051709e4df43751820122307dee

SHA512
e00a0fa2541c851d7828a5b1a1c8fce4908f453425f9b55bb3380af608d9d171dda98384a787173265c69ddaf8e4a23913268d83f54b46c7f1d2510941332a87

Download Submit
C:\Users\Admin\Desktop\New folder\OurRedString.py

Filesize
7KB

MD5
dc9e4c67d1d604eded98541cd1e57d49

SHA1
948a2ae98b195e08e779b31fdc464a69ee98fe0d

SHA256
6af25cf47b94af38a4d4d1ea20e48851b2a8f9e557455a3eab439c5e588831bf

SHA512
d61f02f88298aaf85fbd9ace2585c4ab774e783b4629c3fd2ae15559b9d523a0e80cc9dbe2b9d517081a59f85bf53aac44d165ed90c6f63f9bdd292afb42d2e1

Download Submit
C:\Users\Admin\Desktop\New folder\game\saves\persistent.1706488846.tmp

Filesize
1KB

MD5
c4ad62a11e3dfc6db60d9ec0060e673e

SHA1
f9d96b5846f32c21cf2cf24ce122d78af2efc60d

SHA256
5eff7c262f30ba83d9b4a3a4c6818338a682de8935f819555123e6cfc753e23e

SHA512
3c125253a0fe346e9f9be7b373d8327fc2da444da9f936dbad9c89a648c146eb2d61713826fccba66ec5df48a7467e1001deef01eea7b4889077c5188f949d1a

Download Submit
C:\Users\Admin\Desktop\New folder\lib\py3-windows-x86_64\libpython3.9.dll

Filesize
5.6MB

MD5
e55765485c442e8548b6a1622e85109c

SHA1
f82392103884d7982365790157e37bbb9585a9b3

SHA256
f6dfb15999cf44686571422edec088016f3177d292a5735f57af0d3acf889520

SHA512
3cc04eeb9418b58377a66197507a9f3338f435b104809fbb2c4788904d5da846a5b3dd3d0978689941dae98c13777b88288cd0a42f4fd96125bad5db9ead2f49

Download Submit
C:\Users\Admin\Desktop\New folder\lib\py3-windows-x86_64\libpython3.9.dll

Filesize
4.7MB

MD5
ae9695dcf9c7591953222bc0f712e525

SHA1
80c3454d57ec55b7ac0ce46b3f8628dd017c1c05

SHA256
70bfd6360e54346c418e451c6a88bc51a977f3c02d700c20e30be7db5c6c5a67

SHA512
e1541f579af8f5b67ae4c1330dec6e8cb416c80064addb9ef9f6c794197f068c2b8fda405a1b9f5540ab8687faf70e1a749147eea293b03c67473e142da0287b

Download Submit
C:\Users\Admin\Desktop\New folder\lib\py3-windows-x86_64\librenpython.dll

Filesize
4.9MB

MD5
07ad56c48705bdcc3a86f370bd9f0ad2

SHA1
d6d3312b0dbad437e56d6369a60261116524c457

SHA256
382d4e29b88badd9be253d2b7e53e80b0ec59062be95ad358d7a5f09424dcc2f

SHA512
085e003c83d438b8dab21be07532e6c6eb1e8165081c157be525e2adb58d95782b09ce2e0d9319e08a4693751de09c32d6329db48e38f61f39da007b5736e3f5

Download Submit
C:\Users\Admin\Desktop\New folder\lib\py3-windows-x86_64\librenpython.dll

Filesize
6.5MB

MD5
79e0445ed575d1fd10fd75a92342b867

SHA1
97a77a4dbdf660cf260f98b6ecd6aeada40a6cb7

SHA256
a5041f83a3a2f293431f682a766eeaea0367e241d5bc2d66c17cf8ed180d3973

SHA512
ef74f59a1eb0157c926ea3f748859124aeba170a622c82dd737a6a28272c1309204c2aaa8d1a96b7fa42030ba260ca5ec48cb1187ad191dea288752c6a5c1fc6

Download Submit
C:\Users\Admin\Desktop\New folder\lib\py3-windows-x86_64\pythonw.exe

Filesize
269KB

MD5
4014ce877f13090c1d4ff2c415c43f17

SHA1
8efd1397d8384d103e8dad189119bcde9a502d51

SHA256
613442f6c8b6e54368d1b8808701287286dc42ce5f74689f827312a1fba264e5

SHA512
94bb0c58278005642a0429e1b32f4dbee456fc70dda022959e75bf19cfe42607fb9fa41408059faf1be10a3c1cda531941e1f8414b3d9f0cf127bc012eb98075

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\__future__.pyc

Filesize
4KB

MD5
7601462b5b8ac8253d3df7e376b70497

SHA1
2c4972450b267ecda76b715df90025b97fec656a

SHA256
503225472b86ea58bea49743fe2a9a9ca3996c44a6adf41866c0f86a2f859344

SHA512
2d3c8c05b8e54f25dc779249f031e2ca2ecd0137dd1f8aa444f4bc8bf43fff248ce50c316c91e81ac8bb88bc5c173083e0f059a914112ccaa0d87adf28f8bfc0

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\_collections_abc.pyc

Filesize
31KB

MD5
05e5adc7d381a52a759c4568e5be29dd

SHA1
93fcb04a9cc88345c7ff43e2d97439b1ab62dc00

SHA256
823d65010bf8b1ccfb2c65038b45b57b306881d20eda8524ab8d0e4e5bb841d1

SHA512
cedec3ba975abb06cfdd4ba9f9b9da3a20bb88b6a9d88d27282f6d04e7789d4d171353c62877660ac14c11974c2b27a785e1879bcc94ff87705bc4bb180ad982

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\_weakrefset.pyc

Filesize
7KB

MD5
ccd5b848a676854c9710974b04ad3f01

SHA1
287b2a3caf15d74d6a000a7fd4d8d4c7cccf3258

SHA256
fd4f44cad7553a943ceea4ff1b7f4af4103aed11ecdafab48ac06a847724c18f

SHA512
a08ea3811ac567fdcdc76217e0ddbe6fc557df9fcd3f66ca617b9c28cca47ddc53b625a3eb3db462da7ec41414bbbcdab781cc3d4b823ea65c4080ff7045d6ce

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\abc.pyc

Filesize
5KB

MD5
9b428424e495ea582b9e2fb0e4c108ce

SHA1
a9bfc0a723d765af891d043bc85f8009c497bfc9

SHA256
cc3dab02775e0098c44a876710212deca199611679d4fbcccd29c5f09a94a9ae

SHA512
a7ab3151346c5d7f800a5a7ace34b61125c88f1e614248883dcd30c966cad6e7dfb6bce7a33ee9da38feb39be60d6072d1a2f3f80ec4b96c6f7da4632c2ae73b

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\codecs.pyc

Filesize
33KB

MD5
a99c178b67bc4747378633d0699ea718

SHA1
dc92fc53b64032350b23dd5e9f2a773be3cf4df1

SHA256
2030c0d7fce09a237c13faccceeff4169e1cfa0f2f1150e751311c439fcc5d17

SHA512
6c8f8635d5e43ab9ab0996a6c245bc7cdd5a6e31de79069339ce6d594582f0c356682b91db367396bd28da8e42d2300bb31e6d97042dea6f599fc2a631ada478

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\collections\__init__.pyc

Filesize
47KB

MD5
8fc3768ca46c00270c58e329a8490a53

SHA1
497e64598f9de68d3aa645fcc72ac45ccf8bf978

SHA256
31100be889654bb0aeb5a19888acc89fbf85553e66a3765d3b9530e413fb9c6a

SHA512
f303accbc065e0d26d17a092490844085445d4c75f5f542b1080659be65f4864f65a277cc28edee09223c2b61600a6528921782b360e6bba6e7eef4c0750e4fe

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\collections\abc.pyc

Filesize
280B

MD5
01fb225a76ad864af0758248e3264299

SHA1
0ad69420af69188e6007e2f394d2d1cbfaeecc74

SHA256
bb93d8a6140cbaa7cb902ccbd99b51b0c6f55ee9072121416f9b09977db771b4

SHA512
18be86b778cef2a38b9b6fd4688884f0aba38f4fddf143899f110d22f5fca57d42b96f439d8eff5694d0cffb90a595ea122aaa3d537d18f2c2a88c53f720f520

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\contextlib.pyc

Filesize
19KB

MD5
2287d6c2f1d3084a94fb24622344d4f9

SHA1
596cab3bdf1fe92fc2ec8f960293477f13ac4753

SHA256
52ba700a7eda79be4e24374d064a1de9b12b1cd7fd476b71367578f112f822e2

SHA512
697cb7635c303e81664bfe45e2177e97e503e44dba43748a2a49ac9911844e441d8d772a673ff86dc288b8645314a103112e604c083cb021cbe8a832462e20d9

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\copy.pyc

Filesize
6KB

MD5
feb42fec2628bd3413181c1fafa49190

SHA1
f8b595c56c6ad6fadf4b2beab50ac7afa4268364

SHA256
ab6e215f5fdb0f3d7be3a334ff236c3e60c8f59dc751dddd246c598fad72d5e6

SHA512
a6aef0daabac6a38f58f528418890513051831711b0893905255b21d77b6b54ecd535a76a6e7a608d9d3006539fef3913e44509d77a0d5acf1244ff0c78423ae

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\copyreg.pyc

Filesize
4KB

MD5
c230208a8cb6c60dfaf9645d025420cf

SHA1
f6c3bc477f1093d934d362bb2324212a2156d3b7

SHA256
a556aa69410d75d8cf4658ad3a5566fb22d28c74bf5f5ce45d54d9bba04c408a

SHA512
3dc6fdc08b55599c55e86e87c4c3b9a9f232574e65a92309ec65ae18281057a3dcc9429a125e1b8614d60edfbd9cef4f4702d3395cef5a36d927fb2ca4b103d9

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\ctypes\__init__.pyc

Filesize
16KB

MD5
2e6244ee605b5301621ef62e37439338

SHA1
920cc6463e1b57100ad5e5bedb66a6cc09492fa2

SHA256
669999d4ba831c2f6b2c47db203f627c4b1120dc7f1ba1fc8694fb0d8f824365

SHA512
0abea7dc9d1e427b92ea5cf477a2bbe48408f0e67b49df425115a692c44b482a4e2e61caf16be1b3811baeb38df89bb538d3defb9d38e0845713b9868de5f1d9

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\ctypes\_endian.pyc

Filesize
1KB

MD5
e6e1dc6904af00815b0b5bf7a2905492

SHA1
536b3deb0c3a9767fe3b6537238cd3b6574ca913

SHA256
0a058d339541434ba823568dc3147d588610d9fca8c495a94cef613ea02ddcf6

SHA512
e1d1440461f80574ff80df356453add4fc25dcade8ca9d3a2becb01cc61dab2a8db8de89802008ea4cd34f9986a582f2603c66ab0eb6aed518fbd164e8ba1bb6

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\encodings\__init__.pyc

Filesize
3KB

MD5
03621a6c870ad20333b3a276e6227c42

SHA1
56ead66ca87724a87a2f0a033880a660edacd6d9

SHA256
0b8390c7d07486d5ede8cebe0bc3c04fdbe6a7bbc382438d05d951594d1e72d9

SHA512
d176c4c965782603bb18e81fcfafd88590d44428b4c6fe2c8a66ca7d54d5782539fa4d6a86a9fd05461b9e0aba1b95fa67d731acb853cf633f2a08f4b939041d

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\encodings\aliases.pyc

Filesize
6KB

MD5
7db2f072fdff8d7125c1917722ec563b

SHA1
c0f28cc31b497c0300b8145eb1a13ea9369c3b45

SHA256
0cbf08e6d33f4a3da5ac82ac7a3176ac3d07aa9402dc1bff509a732ab07400c1

SHA512
a641babeef8ad25d5071b14b49f7008203fc22145628e3d29d815cbcd6a046353564dd367c023a1faad8020b18105a8352dcfbbe15f703c0804b417788d43ac3

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\encodings\latin_1.pyc

Filesize
1KB

MD5
7785cc7cc0abcce34ae148afaaf692f0

SHA1
7d12f555983e109004dce25fe6230b54ecba0fa5

SHA256
cbfa916baeeba3fa3e4d6c470bb4311e6b070cf69eaffdb4a44110793dbe2dc8

SHA512
8ca7e150b9367e86d73472783d0a440abea510f326106a1935b362b429af6f1f92220aab1bede15e9e0613355588e36286835f9e0aa305fa1e370189da12fc82

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\encodings\utf_8.pyc

Filesize
1KB

MD5
ae188a031c96da28f3d63558dbbf177a

SHA1
9cfc93d7669e46ce12382478f55451080156601a

SHA256
e93b538280ade9bba5d16ab2cbf07f60e73e31da5dfc46d8b506349652c0f144

SHA512
b0429faa46299333c2a953cb132cc39b163ab2d16cb64a2d0b71e6ecb25b476f841514fa34d6f96f9c84edb1a0427e8a1b1f872c9b966d5061c0b36ed4a01e8a

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\enum.pyc

Filesize
25KB

MD5
fd03b2cadb390a3171831088354d5b26

SHA1
618ee4a228cb2cab2630a899bf5a80ba287a9530

SHA256
d11d69c4aadf089720cd4e9d4a4e6d03ba27a95f35a3091cf05efa59d6aea5c1

SHA512
2153a64dbac511f4f1708c9afa247812795eaf3e1fa9cfdf2d072e2ba31444b596e0758238c3017f82211db15fbb24d7d1214e0bf5dd618eeb108226e83e0b66

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\functools.pyc

Filesize
28KB

MD5
d2fff7d128b2f4a955358deca855310d

SHA1
3b7504b3f3e761910c4b33a889d7591f07fd3c57

SHA256
700e05c6f0754a57c0abd23d0e45aebe96f18eee9d6fe2a009b6c75cec207eb3

SHA512
74edb2cac19b85f91da762e9fc1e3f430cb7a66ac19423330de61240a854829afca1f7e017afcb50cd3db3ba883947f00dc9fd489a7ab63519567ddef13baaa2

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\future\__init__.pyc

Filesize
3KB

MD5
416b79fd15623f718f05364569665b37

SHA1
85aa6e5e3a57807bda1a8dca24a4666381562176

SHA256
c9d1e0ec82af9ad18f0c8df58c31f280815627bfcabdae95653a3fef1bd56576

SHA512
47773bb84d8962294cebbf127a109b22b8117be23797352434c4577f24fddb73a5e0faac97c32b393ae62095faa1f47350b95a6153c594638ebddd81d7879f26

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\future\standard_library\__init__.pyc

Filesize
17KB

MD5
5cbffd1b652bf6388649fa2a9bcc3578

SHA1
f2d87c59895b47ab70352561ccbc8150b3f42279

SHA256
bbfd2ccea6ba0d23372e9c24fc4406298c33f40150721c4d1b5d57faff7f4783

SHA512
cb7e13c99d80c35171759e63bc1d440ca5bdbcfe585edd23eb0ec4e150efea16597c16362925a937d0b068947e387425839bd0e49238f896c970a2e8fc24055e

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\genericpath.pyc

Filesize
3KB

MD5
7a981f82577308ba762982fd3ed2b96b

SHA1
5611fdcc0797d02c8aae92d02181a8f756342d03

SHA256
b1d80d21f76ac0a7a414309c4175458296774aa96f2ff460cb5b5325447177ad

SHA512
51fe44eacf4c271befb3ab6f9760ca224284107b5607efed632d5babe4d16868f36fe7bdc1a813bb5155722e4cbbae4cb51545f1ad86b71c16da28496679072a

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\heapq.pyc

Filesize
13KB

MD5
fc157f5ee2c3036add00d850163bf123

SHA1
d1e0d4708cb4761db9bfce72ada4d0cbbc124683

SHA256
8c16baa0b27d1d74c083dc85bad5f66d5708e2f56175ab04b01d8c5339cb3d4d

SHA512
9d6b8cccff6ef5423d0bf5f80dcb1a7304bde9f23e32ba9111b0bf7ee6b01e878b6982e73320edcc4e107569e273bec1c2670e1d927239f1703287233cecbeed

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\imp.pyc

Filesize
9KB

MD5
423e2cf70a8d21b288920235c7e15257

SHA1
28583a4fcc12086c2497928f1c4866ae11fb4195

SHA256
d5937244c653a35dcdcff6fed43749eb80708e576ce4362b39461c41b42ffdf2

SHA512
a095ea2fcd38f854853b6514753f7dceeb70c07afc53e072725b5d92d8069edbcf513aaa2e1ac3bd4823501013e4957f9ddec148ede30698612bc3f9df208d1a

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\importlib\__init__.pyc

Filesize
3KB

MD5
12235ce7cea1e0b27de96d6218da673c

SHA1
1f4acc62eee2d096b7d64f9dba63ee965ce41cb1

SHA256
54220d6a4d2542eed8b3532a50557b19190b8c6fb8208feec7496c972cbe0e6e

SHA512
fd718d38801f82cb0aa464c764078be8914539ae9e1880eddfd9429cee156c448a1bab57bebd8c116edc541420fa45f9dcc59a85bd08eef249c73943df581091

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\importlib\abc.pyc

Filesize
16KB

MD5
a22904481dbc1b838635773f511efdad

SHA1
199c26b60639b0e8d419404a6ead641150c0aa4e

SHA256
9cbcc7b6440d43bca425364ce9c8a3f768f6451e55aec075b33d5c04e1a7008c

SHA512
073bf5f75dccd2ae8d39b65be4219eecd35dbfb08fde11eaaf78c1eb4ac04719422f0f2c8b73305111a158afa0c041181fd5c8ba570a4d052185d57a2a4901a2

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\importlib\machinery.pyc

Filesize
1007B

MD5
efc0bc3565cf5dee7fe0a33622f2e7d2

SHA1
7b64b54314c6fcb9c198a67a93684af638c387fa

SHA256
b4a8b2f8c97e09240ec4a0c933c506eae29d4831d33ff19953ba18aa2f103855

SHA512
8d832a2778fd9eafd55c82f09fdab25cc1227f786e6fb36c2cf3a32c9ed8cb7b0e1fb10ed840daa495efd66a71b2497b824f9cb0e8a77caf7d81276e36621e00

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\importlib\util.pyc

Filesize
9KB

MD5
7ab40632567cabe7233910b3a25c6d6b

SHA1
8df10f14bf6694412fa17face22e79b9d8368f2e

SHA256
5c6352183d27a09e9bd93efc4ca9f1f05bd377aaf857a0856f75a745da82c19c

SHA512
d28b7d47a70ec5458026fcc834871fb9e4f6f06ad1fdd89a629abb1c54b878c5876b9baa02b96357e6966b04d44aafe5bfe33ecf7489a772945dfb3f378c30e5

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\io.pyc

Filesize
3KB

MD5
b762637171d97d16529f391425dcda19

SHA1
68d5b0d0885c48d7cb0fdbdcb6466cbe4438881e

SHA256
6e2a76ea23b53c5e22fa40735595c5f652b6f2d27bd16079aab113bbb8cbdc6e

SHA512
a23f0aa834a60f991b2e35f7e58b3fda751b2b094335a56d506c7c9f1233979aa09f419de1ee4b5f9b899e4baf7debf4b49985b7b96d822d868fb8d6a5a79bce

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\keyword.pyc

Filesize
959B

MD5
2ad511d73edd6e205f2cec146cee9403

SHA1
911b49dee6071398f808336aae9f156cd0977807

SHA256
bd7a436bfbd8eb03c71f1d9b843108efc1dd62b5528068b309bc2fec7e858fb7

SHA512
a10eaf2569369b2ba9bc54f15f77f2185bd55fa678086378240ecbc482721cde13ea1ebd0aeb7057136c02784a8d1f4239119e989a51ca97feb708162a22f8e3

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\linecache.pyc

Filesize
3KB

MD5
8dd24b3c5412effcb9815c36547ec9a1

SHA1
690016c8ba63b5ad5f6cfe0ee60fb083abbead16

SHA256
986e2acb64e365026b9c4bc1ce3adea48a81b4e5298f690acced5e71e7ccdbd4

SHA512
b9185c461160b249449a167260b1d075c1bc21cce2a3fa5f654db331da54efd1f6e4655c35c6430a9f49d923726aede2932d1f7448d26c44ac9b9e1236e5ea08

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\locale.pyc

Filesize
33KB

MD5
457c92c1f8128a642464a7c81f411b51

SHA1
8fc25149482d0899046a9fce02c9f872d5297c72

SHA256
5cbceef396f385644243eed2bb6c4e44931b550917ef533f0e24d3a7d1486b83

SHA512
27f16edccbaa5d66035ba38aa7c0b606f6a44bc130084ddda47ee8519893a0d002924cd89420f7fbd8b4ac9c4ef5803e92b24ccb6f69bcd842d968be8bd59af6

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\logging\__init__.pyc

Filesize
64KB

MD5
62b44d03f312264b30ba9a8c3b34a289

SHA1
ab4825be0d6464facf83697230184a8089863f0a

SHA256
926dcb1f5a40c6240876125a724470e8158181275306e015364781f2b5d3a52c

SHA512
037290a61ea969a4ae6a61f980bdf680f10a903e272ebd2d4c36f1c7daa01ddc0ff9fdf7f74ab4482ef3be8a44cded4123c8171be1e58c6c3dc67ec5d22327bb

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\ntpath.pyc

Filesize
14KB

MD5
a4703a6efbd51dc01791088b243d5994

SHA1
ce1462c3d40ee748f0b14d67e21de42cb7dd8ef9

SHA256
7affced3e6c0cc0eaf4eec1fecdfe04442949a9131d5be9875242fba0e5a4104

SHA512
641cc3c2895e968e445c001471541e3f6e24b17318e5ef2e085b51aedcc4c330962f1fda66c07ece5a515194b3995faa4d2be46c5b240b024c81d6aecdf6eb5f

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\operator.pyc

Filesize
13KB

MD5
02c2c3489dad8099edbc5002c167bc28

SHA1
91edb1e5ad386b92828dce049f91d62daeb57496

SHA256
3b7862564b1125776f50726f92aa5f517701d39ca97eb23021275802868a0654

SHA512
ccdd15a2174ca5fc85d48a6c19c7a8adbc94354cf90cbe61eb7090ab5b65b7d96b5be02e164307f465e33440c811cb40cfaadc977f3b0a40df5acd9200910713

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\os.pyc

Filesize
30KB

MD5
d1c7181645af39691565cba97e307cd8

SHA1
30354c148c7f8d9a3ceb73c10738820a82f6efb2

SHA256
8e2f859315557071443c71b82c8b9b0e41131a6fbd07c855783c095bb55e4f9b

SHA512
9ed51f11a4253ea7299ad8667757c9cfdfa1982e1c7a23b39d071cee735d2589346abcc6cd7f57217d1a817441b8bd2bb9fdc5961c0352385e90d0e67c8a7931

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\re.pyc

Filesize
14KB

MD5
03462c7c32f8f8d73fb7ce182d9533b4

SHA1
2f11f80d319f0ef5f56ba2f29f2eeb9b8e7c7e9d

SHA256
abcfc907b5871444ac894edf62483dd6f166506cd5f9194e7b3fe853a7987750

SHA512
9d2c2b9118c5beec3b7739ac6122bb20e01d19f9199889f47a7498d87bcd8924a00b3bcd3022607d7310ce1edc695c2b11d87a38bf0287850b56776a43789e70

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\reprlib.pyc

Filesize
5KB

MD5
609a7e8ab58a590f094fe13fabe30830

SHA1
a8c1fe4ad33553e120737dffe5fb9f33d9d5527b

SHA256
73636ad040fce32abcb9141e6aa8516752e579fcbf4a8d3d058e4cadd125014a

SHA512
25b1fbf10b66142c2f72f0550aad75b509b7c2fe5daa8343a758c01bfea63ff6226354e36a842943c26111e912eb2994e50071007f6a01ffa3c2c7b4b9c9ffd4

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\site.pyc

Filesize
8KB

MD5
0d206972ed29674a8ebac741725e355b

SHA1
4ec344beef94c70813448b26cf349604d902a650

SHA256
d1b7fc688ed80c7a28172db5ef27e7280fb47024f26c355e616ef7a4efac838b

SHA512
35470c479627d64dfaaf18b2589cbf033e3b2b07700426d5a4a6eb17f0b263de828432bde79a16b69963151c6cc0c81dee481af6e8ceb2cf992a7feba86186cd

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\sre_compile.pyc

Filesize
14KB

MD5
9ef3e11156726fddf0d34051a29d0dac

SHA1
d15807875a2da7a63bf43f438406cb9e86bee713

SHA256
701263cec364deb33183865162eef1d819db1fccc900dac33f880ddb961ee6c6

SHA512
a4ad7f59556f8c34406cf293b64d30fb8dba673a8ee94611f23f5e0871c2488ef1713629124aa619af356581d3175a33fa39d567d7a6b6e8a2fb5d97f202e75f

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\sre_constants.pyc

Filesize
6KB

MD5
044a7c50ca9928664c053305b974b88c

SHA1
bffaacc37d41a8c876ba9acb3c2a4d40b6504704

SHA256
afaddd2e33f5c5c50380aac08414565b2150a621eefefeffae88a0448118175c

SHA512
890e1e52aaee9fd50efca076d628dabafdd760f6f3df4f2d9084cfd3866e956a725964ea47bdadd60a519f611dffe47eb9145ba76d08b94fe3dc68e8e59ed9f9

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\sre_parse.pyc

Filesize
21KB

MD5
387f8ca9631c7b0f07dc4734678ab158

SHA1
f809610da1ff9177f8fcfcf5b273cb35f7aa8e4c

SHA256
80a01c01cefc7e7b2ffdaeed724a8cbc3d606e598e2aca6a04b684551afad9cb

SHA512
6d7f1877f1aa2c90b2e355d832f865095cef93ca9fac755b588c7e5448b318bc86695498795b67f1e1961387d43d43dac2b667f2c76a1a2028c1c0ab58bad29f

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\stat.pyc

Filesize
4KB

MD5
60645a14755057d8fe402cd807d111c5

SHA1
6d40e2a7a35b74b08be4a6e5d24e8c679ff52c7e

SHA256
1eddaf02af6b6be72b72df806f2932e741dfad65593aaa1d3ac41ded415bcc22

SHA512
728780a47e3d9da38a03f84674d120a4cb9bd159386546afeed6de80a2bc39d6c0352318c1e02d5928f532bad758c123228cebe0d3c0b95e16a3b41d81b68a3a

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\string.pyc

Filesize
7KB

MD5
a9ad2ad95106bd25cd02e22037536507

SHA1
65eeab3f2482f8c5d3539be21dda4042d1922b62

SHA256
bc0d6b6281a7fdc9002225212f0ce1218d5b361d345e7178bc3cc6fda4c26bfe

SHA512
bdbd3c12b0113318d65abeee66a68bfbe830d48bbe5f63fb4d50c3563a0e0da8f037d88deb5cdecd34ac926e529a8c222047f5dbbf9b3f5f629fada3e667589c

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\struct.pyc

Filesize
349B

MD5
5854da28885903f6a641106fcd21192f

SHA1
25c5a939180d1bdcdbb93697decec018b7b55499

SHA256
740a3c580acf1a03cc6d416eb66a438e03fee1958e6d4b055ad23fb6d5f2888a

SHA512
8185cc818656a72c74d6bbe87532e0b49b009993654b1ee668dee48f492ee508f10b2bd7d47544b8ec258e30bf271ee5d8d488f864ad8fddd270b0665d8ae69e

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\threading.pyc

Filesize
41KB

MD5
376711d01b87b799a90b38a210b5cd99

SHA1
c40db2191f9c1c7eff74862247b2c48343b1a591

SHA256
e345b224a27f4c08aaf51bfb01c9580743bc08cefa06fcb20abae30a8979b947

SHA512
694260b776a285b7100eb96233b9092fb80d4005df476840f6c38197c6d2e699d6d71dc762b3cbd45c3349c96c2466c9e4af2470916127780a25248c421de2f6

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\token.pyc

Filesize
2KB

MD5
17535753cce6834f9e6fb0424f4f6a5f

SHA1
256220466f8733cc76690e2974cd9413156792c4

SHA256
9e74fa8f9427fbce1e380b536c7cee13d3c052671196e44b45559a4106697c7c

SHA512
7c7ebdb3f8f5b7ee055cf02103b0794009efb3d18de6dbcc572914dbf83c5473cf07aa3704f95c7d748def8cae94043eac288ec4c4929539032f57a85b918439

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\tokenize.pyc

Filesize
16KB

MD5
670dfb825d9f8178286eb122536257e6

SHA1
f8c46974c7fcded9d427eca0c6979c173881970a

SHA256
bea59a3ad17945fe66d69f33184ee3debaccd0568793166c1e3ba91c6bafd7fa

SHA512
1bb269b0265e155e3c358582ab8ad2a57052cdc4ed9b7403dc877db8f9f4307d393e630f8fe2d49a89974a20cf8e2d539b9ac9bdfadc0ab59742dcda72c4da55

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\traceback.pyc

Filesize
20KB

MD5
487a29af35102b11194f2463901b4a7a

SHA1
88fd79b97b3a62d35efde83287896ad4e8cae3ae

SHA256
1914f2028d93de8a5685a20e18f810fee3331739446e3ca638a44ad0f05ceb96

SHA512
b3a8b841fee6465c03ca4e457c7d98937155dc5f21fd651ae66657be68ded86bd28269cf1b1801ade5033878a91310a973b1531c92004c7ccea835b33eeacf27

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\types.pyc

Filesize
9KB

MD5
9b5e0e3bfa4acb49585c84a8e50ecd9d

SHA1
9dfc416c7849fd65d2cba707b9817ac16ddc8eab

SHA256
24be5660f0dbf125e44b08488ded3661383ebe75c8a3de05d9e44627c53c685f

SHA512
c229e8d7ac9daeb412d64322567eae6dbf4a9a35619336cf5f82d594286291afe975747c64c91d3d370e00c95cebff60ef749d84e0ac1eeece0fe10659a0ea4e

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\typing.pyc

Filesize
70KB

MD5
bed2f208c7301cff0bfd076ce96ee777

SHA1
eb856b3eeffae06292724bab1d7228ee59cb3d4c

SHA256
b26d71d2f555d9b1ff30abf25ce4d839c1bbf97b694676f89e64621780dc4c66

SHA512
29a4df09f7196f227e013792cc4b77928f543f69d25f321bc8b562c69dc05dc406b53a2abd3cd723a0a0f6613ecb1cd76a82c485215b3a6fc119dcaca7286f1f

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\warnings.pyc

Filesize
13KB

MD5
9446f9ddbc397e57f162101529afca0e

SHA1
27e084ec79b459241d04717311ddc3988638dec2

SHA256
a20960ecb726e21440fb5b15fe75e4cbd358cfc04840ef55fc5969d6ff790caa

SHA512
c91f62bfe8e99af01a98a9c2d483b75d43dddf68fb5fa74a9b5db96c82ffb7e1a4aca37b701fec74e8a93cefebbe25024fcd43aaccc72f9bb01a6c5e0905e4b2

Download Submit
C:\Users\Admin\Desktop\New folder\lib\python3.9\weakref.pyc

Filesize
19KB

MD5
1b52c8a8faf0b12fdb2ed6673acd8860

SHA1
7b1dcfbc2bc54d2ad2e0a13015d6d71ec9535f3c

SHA256
e4e24bb5a445b2e694b986e6c61b984ec7bdc954dcbcc93cb71e6e0a56d5b414

SHA512
a79937ddbdad580589f83afe3831400c4f9254528d9f5b7b4961cd40a3d465674b4b092ad986bf3129912a346754ce1625779c2bf90759411be1413dea7a17fa

Download Submit
C:\Users\Admin\Desktop\New folder\renpy\__init__.py

Filesize
19KB

MD5
c7845c9ed89c18e082c7d198b0f90341

SHA1
bfb615256d02af5ed44113b793cc6772cc9d7688

SHA256
287800f471b8167cdd3ec001cd999ca49c957e0fc66723497afe6ea33ad60b9c

SHA512
91ef3d963fae9917ab55b1fc8ebeb9585a4b4e8d424d942414d0f28f4d2f914eaca21f73a785d38a802f96e5ea767b3540f6b13ec615cea0c1910d53d838ab10

Download Submit
C:\Users\Admin\Desktop\New folder\renpy\__pycache__\__init__.cpython-39.pyc

Filesize
13KB

MD5
4f4b2be7c4da8fe64ec56c75fcb5487d

SHA1
056a84e41d715d9834adc4697bb9963c7ba7c489

SHA256
6429681abde8c7ddda21126c77f08d9e78eb3a6f2f14fd4480416b6eef81b6f7

SHA512
2d3aaa63bb101ca7941bea096a020e4b9aa70d3126b7b7a3b89d98fea74dc088772b1646004027b17c4549104511eb5092f8d097ececa99ebca71b5e5b7b276d

Download Submit
C:\Users\Admin\Desktop\New folder\renpy\compat\__init__.py

Filesize
5KB

MD5
ceb289fd580cbbb117d9d87630334b74

SHA1
bfe4ce06bc8741cc8d2a6d34de34bfbf6a3ca87e

SHA256
e24ff152318cc56d4841f280eabe7ea43c19b79bec2c18f23476811241b5a8bc

SHA512
7cdd3a0726f28baaefb37e1104bd693362a4a96ef0d011fab25c6e6c45904aa3727d4d4f291c01c71572fe071a59f6e91b75621a353a1f561d5e480ffd334080

Download Submit
C:\Users\Admin\Desktop\New folder\renpy\compat\__pycache__\__init__.cpython-39.pyc

Filesize
3KB

MD5
dd23fed3056aea878c676f07396e31a2

SHA1
236b3cae706e53d3e568c5bd4b24232fd83a5e04

SHA256
70a6830143446a7e2fdfcd5144a5229176bd35a215843f6107f88e2f3526796d

SHA512
5dadbc7a7d9936de1733fd88b0ab188144eb5c27a5667e4349fb796d5a93d2e887ba6fbff78eca25e205d9e271fce7955ae5d5b1553692ba9693596a63ea3f6f

Download Submit
memory/1972-2788-0x0000000140000000-0x000000014004B000-memory.dmp

Filesize
300KB

Download
memory/1972-2790-0x00007FFE56D20000-0x00007FFE57543000-memory.dmp

Filesize
8.1MB

Download
memory/1972-2801-0x00007FFE57550000-0x00007FFE586D7000-memory.dmp

Filesize
17.5MB

Download
memory/1972-2802-0x00007FFE56D20000-0x00007FFE57543000-memory.dmp

Filesize
8.1MB

Download
memory/1972-2803-0x00007FFE6F560000-0x00007FFE6F56D000-memory.dmp

Filesize
52KB

Download
memory/1972-2808-0x00007FFE57550000-0x00007FFE586D7000-memory.dmp

Filesize
17.5MB

Download
memory/1972-2809-0x00007FFE56D20000-0x00007FFE57543000-memory.dmp

Filesize
8.1MB

Download
memory/1972-2789-0x00007FFE57550000-0x00007FFE586D7000-memory.dmp

Filesize
17.5MB

Download
memory/1972-2823-0x0000000140000000-0x000000014004B000-memory.dmp

Filesize
300KB

Download
memory/1972-2824-0x00007FFE57550000-0x00007FFE586D7000-memory.dmp

Filesize
17.5MB

Download
memory/1972-2826-0x00007FFE6F560000-0x00007FFE6F56D000-memory.dmp

Filesize
52KB

Download
memory/1972-2825-0x00007FFE56D20000-0x00007FFE57543000-memory.dmp

Filesize
8.1MB

Download