Trojan.Siggen32.16184

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '<File name>' = '%ALLUSERSPROFILE%\Update.vbs'
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] '{316e3b12-1191-47df-b9d4-dcf0bf2f6cc4}' = '"%LOCALAPPDATA%\Package Cache\{316e3b12-1191-47df-b9d4-dcf0bf2f6cc4}\python-3.12.6-amd64.exe...

Malicious functions

To complicate detection of its presence in the operating system,

blocks the following features:

User Account Control (UAC)

adds antivirus exclusion:

'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -Command Add-MpPreference -ExclusionPath "%LOCALAPPDATA%\.IFnIuIVMXj"
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -Command Add-MpPreference -ExclusionPath "<SYSTEM32>\Tasks"

Reads files which store third party applications passwords

%LOCALAPPDATA%\google\chrome\user data\default\web data
%LOCALAPPDATA%\google\chrome\user data\default\login data
%LOCALAPPDATA%\microsoft\edge\user data\default\web data
%LOCALAPPDATA%\microsoft\edge\user data\default\login data
%APPDATA%\opera software\opera stable\login data

Modifies file system

Creates the following files

%TEMP%\pkg-a0lbh6\5ad24cd4d19ef03079717bd6309fe0604c2a4829cd92788ebf6da95c41d3d28f
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\package.json
%TEMP%\pkg-a0lbh6\82c0fffccc54ef10231be8c7e190feb8feea44efc01b4ecfe12e4d8a0ecfb20d
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\binding.gyp
%TEMP%\pkg-a0lbh6\8d6b400ae7f69a80d0cdd37a968d7b9a913661fa53475e5b8de49dda21684973
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\lib\sqlite3.js
%TEMP%\pkg-a0lbh6\762c7a74d7f92860a3873487b68e89f654a21d2aaeae9524eab5de9c65e66a9c
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\lib\sqlite3-binding.js
%TEMP%\pkg-a0lbh6\d06caec6136120c6fb7ee3681b1ca949e8b634e747ea8d3080c90f35aeb7728f
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\lib\trace.js
%TEMP%\pkg-a0lbh6\a39db87a3a3aa954ac3f6553b9fbfc642eb22bef7586cc1f0559e676aa073fa8
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\lib\sqlite3.d.ts
%TEMP%\pkg-a0lbh6\4d65f2899fb54955218f28ec358a2cad2c2074a7b43f862933c6a35e69ae0632
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\deps\common-sqlite.gypi
%TEMP%\pkg-a0lbh6\5be353d29c0fabea29cfd34448c196da9506009c0b20fde55e01d4191941dd74
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\deps\extract.js
%TEMP%\pkg-a0lbh6\e419c0ce9b0c4ba177c1f0af7f5e9c0b798b2bad8626347e3f0f37c9ffe67804
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\deps\sqlite-autoconf-3440200.tar.gz
%TEMP%\pkg-a0lbh6\8793f62b1133892ba376d18a15f552ef12b1e016f7e5df32ffb7279b760c11bd
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\deps\sqlite3.gyp
%TEMP%\pkg-a0lbh6\cce55c56b41cb493ebd43b232ff8ffc9f5a180f5bab2d10372eca6780eb105f6
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\src\async.h
%TEMP%\pkg-a0lbh6\960e50580d2f2e668ee79b0c2ef99eaf006bc9178f438c4bb4e278f80f3d8960
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\src\backup.cc
%TEMP%\pkg-a0lbh6\556ba9af78010f41bc6b5b806743dc728bc181934bf8a7c6e5d606f9b8c7a2e9
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\src\backup.h
%TEMP%\pkg-a0lbh6\40ea909433a35a95a8463c49231ddca040717681fc96ee3ba6f10840429b4ad6
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\src\database.cc
%TEMP%\pkg-a0lbh6\8521f458b206ed8f9bf79e2bd869da0a35054b4be44d6ea8c371db207eccb283
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\src\database.h
%TEMP%\pkg-a0lbh6\9d4264bb1dcbef8d927bb3a1809a01b0b89d726c217cee99ea9ccfdc7d456b6f
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\src\gcc-preinclude.h
%TEMP%\pkg-a0lbh6\c25be1861bd8e8457300b218f5fa0bba734f9d1f92b47d3b6ab8ee7c1862ccbe
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\src\macros.h
%TEMP%\pkg-a0lbh6\e80fae190ace1a5153a397ae9fe55d6d28651471fb7bebf9bbb5528095d70f44
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\src\node_sqlite3.cc
%TEMP%\pkg-a0lbh6\2fe8c826256cb1b96e26c74aeab465a329a307e7e1107ba296d059a07cc0f948
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\src\statement.cc
%TEMP%\pkg-a0lbh6\605633ba0fb1922c16aa5fbfffed52a097f29bf31cee7190d810c24c02de515b
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\src\statement.h
%TEMP%\pkg-a0lbh6\e0ab4f798bccb877548b0ab0f3d98c051b36cde240fdf424c70ace7daf0ffd36
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\src\threading.h
%TEMP%\pkg-a0lbh6\b9a7b76665d92af2d90cc6a15ffdc1a79635559cbc1c40bd1f83c4c4449cd442
%TEMP%\pkg\f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c\sqlite3\build\release\node_sqlite3.node
<SYSTEM32>\mn9bswl5gu.txt
%TEMP%\ct5rl4xj6g.ps1
%TEMP%\eup2hbtc\eup2hbtc.0.cs
%TEMP%\eup2hbtc\eup2hbtc.cmdline
%TEMP%\eup2hbtc\eup2hbtc.out
%TEMP%\eup2hbtc\csca1cfd4d5956f463793c7b17be6caed70.tmp
%TEMP%\res77a1.tmp
%TEMP%\eup2hbtc\eup2hbtc.dll
%LOCALAPPDATA%\google\chrome\user data\default\webdata.db
%LOCALAPPDATA%\google\chrome\user data\default\passwords.db
%ALLUSERSPROFILE%\steam\launcher\rm9suvvpusok\en-rmegusuilfy\stolen_files.zip
%ALLUSERSPROFILE%\update.vbs
%LOCALAPPDATA%\microsoft\windows\actioncentercache\windows-systemtoast-securityandmaintenance_10_0.png
%ALLUSERSPROFILE%\steam\launcher\rm9suvvpusok\en-rmegusuilfy\serial-check.txt
%ALLUSERSPROFILE%\steam\launcher\rm9suvvpusok\en-rmegusuilfy\debug.log
%TEMP%\nhjh8wqvtx.py
%LOCALAPPDATA%\microsoft\edge\user data\default\webdata.db
%LOCALAPPDATA%\microsoft\edge\user data\default\passwords.db
%APPDATA%\opera software\opera stable\webdata.db
%APPDATA%\opera software\opera stable\passwords.db
%TEMP%\python-installer.exe
%ALLUSERSPROFILE%\steam\launcher\rm9suvvpusok\en-rmegusuilfy\passwords\passwords.txt
%ALLUSERSPROFILE%\steam\launcher\rm9suvvpusok\en-rmegusuilfy\autofills\autofills.txt
%WINDIR%\temp\{445d9588-fdee-495c-9453-bda1aa0c757b}\.cr\python-installer.exe
%WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\.ba\pythonba.dll
%WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\.ba\default.thm
%WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\.ba\default.wxl
%WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\.ba\sidebar.png
%WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\.ba\bootstrapperapplicationdata.xml
%TEMP%\python 3.12.6 (64-bit)_20251229173221.log
%WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\.be\python-3.12.6-amd64.exe
%LOCALAPPDATA%\package cache\{316e3b12-1191-47df-b9d4-dcf0bf2f6cc4}\python-3.12.6-amd64.exe
%LOCALAPPDATA%\package cache\{316e3b12-1191-47df-b9d4-dcf0bf2f6cc4}\state.rsm
%WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\core_justforme
%WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\exe_justforme
%WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\dev_justforme
%WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\lib_justforme
%WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\tcltk_justforme
%WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\launcher_justforme
%WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\pip_justforme
%WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\path_justforme
%TEMP%\python 3.12.6 (64-bit)_20251229173221_000_core_justforme.log
%WINDIR%\temp\~df6a80b63bc111c0dd.tmp
%WINDIR%\installer\sourcehash{901b913c-fa63-48d2-9842-7d7676739378}
%WINDIR%\temp\~df5b8f132517ad5ca7.tmp
%WINDIR%\temp\~dfeace19a98a2a6f63.tmp
%WINDIR%\temp\~df205d660dcd628528.tmp
%LOCALAPPDATA%\programs\python\python312\python312.dll
%LOCALAPPDATA%\programs\python\python312\python3.dll
%WINDIR%\temp\~df392107bf0b9e6203.tmp
%WINDIR%\temp\~df13cc7cb4fa757fde.tmp
%WINDIR%\temp\~dfa4d3b67ba1b5155b.tmp
%WINDIR%\temp\~df9eb224489aee6dec.tmp
%WINDIR%\temp\~df3bad0cd55a9c9552.tmp
%WINDIR%\temp\~df58594d14745dffbb.tmp
%WINDIR%\temp\~df3f485c4a5d3bfd7b.tmp
%WINDIR%\temp\~dff1f2b37294c4a81b.tmp
%TEMP%\python 3.12.6 (64-bit)_20251229173221_001_exe_justforme.log
%WINDIR%\temp\~df53acf61d93b209b6.tmp
%WINDIR%\installer\sourcehash{537b2af5-504b-4303-99cb-fde56f47aa51}
%WINDIR%\temp\~df5bc4a32ad32ca341.tmp
%WINDIR%\temp\~df314cb1dcc3f60380.tmp
%WINDIR%\temp\~df24bb020446879834.tmp
%LOCALAPPDATA%\programs\python\python312\license.txt
%LOCALAPPDATA%\programs\python\python312\news.txt
%LOCALAPPDATA%\programs\python\python312\dlls\py.ico
%LOCALAPPDATA%\programs\python\python312\dlls\pyc.ico
%LOCALAPPDATA%\programs\python\python312\dlls\pyd.ico
%LOCALAPPDATA%\programs\python\python312\python.exe
%LOCALAPPDATA%\programs\python\python312\pythonw.exe
%LOCALAPPDATA%\programs\python\python312\vcruntime140.dll
%LOCALAPPDATA%\programs\python\python312\vcruntime140_1.dll
%APPDATA%\microsoft\windows\start menu\programs\python 3.12\python 3.12 (64-bit).lnk
%WINDIR%\temp\~dfdba42d9d0f2a467c.tmp
%WINDIR%\temp\~dfed8994c55d5546df.tmp
%WINDIR%\temp\~dfdcc63e1ac2b821e1.tmp
%WINDIR%\temp\~dfafef12a9fb901056.tmp
%WINDIR%\temp\~df8accfa20494842e7.tmp
%WINDIR%\temp\~df95820b77564945db.tmp
%WINDIR%\temp\~dfc7873cc8d43ec334.tmp
%WINDIR%\temp\~df0ff10793774617ad.tmp
%TEMP%\python 3.12.6 (64-bit)_20251229173221_002_dev_justforme.log
%WINDIR%\temp\~dfdb2e70906e3e5c11.tmp
%WINDIR%\installer\sourcehash{2f4e9933-7587-4d85-9ba1-f2903afb36d8}
%WINDIR%\temp\~df1a1e2a7f11b5ccbe.tmp
%WINDIR%\temp\~dfc4bd2586d362817f.tmp
%WINDIR%\temp\~dfe12bf7bb36ea0a5b.tmp
%LOCALAPPDATA%\programs\python\python312\include\abstract.h
%LOCALAPPDATA%\programs\python\python312\include\bltinmodule.h
%LOCALAPPDATA%\programs\python\python312\include\boolobject.h
%LOCALAPPDATA%\programs\python\python312\include\bytearrayobject.h
%LOCALAPPDATA%\programs\python\python312\include\bytesobject.h
%LOCALAPPDATA%\programs\python\python312\include\ceval.h
%LOCALAPPDATA%\programs\python\python312\include\codecs.h
%LOCALAPPDATA%\programs\python\python312\include\compile.h
%LOCALAPPDATA%\programs\python\python312\include\complexobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\abstract.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\bytearrayobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\bytesobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\cellobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\ceval.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\classobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\code.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\compile.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\complexobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\context.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\descrobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\dictobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\fileobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\fileutils.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\floatobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\frameobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\funcobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\genobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\import.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\initconfig.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\interpreteridobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\listobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\longintrepr.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\longobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\memoryobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\methodobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\modsupport.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\object.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\objimpl.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\odictobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\picklebufobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\pthread_stubs.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\pyctype.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\pydebug.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\pyerrors.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\pyfpe.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\pyframe.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\pylifecycle.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\pymem.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\pystate.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\pythonrun.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\pythread.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\pytime.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\setobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\sysmodule.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\traceback.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\tupleobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\unicodeobject.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\warnings.h
%LOCALAPPDATA%\programs\python\python312\include\cpython\weakrefobject.h
%LOCALAPPDATA%\programs\python\python312\include\datetime.h
%LOCALAPPDATA%\programs\python\python312\include\descrobject.h
%LOCALAPPDATA%\programs\python\python312\include\dictobject.h
%LOCALAPPDATA%\programs\python\python312\include\dynamic_annotations.h
%LOCALAPPDATA%\programs\python\python312\include\enumobject.h
%LOCALAPPDATA%\programs\python\python312\include\errcode.h
%LOCALAPPDATA%\programs\python\python312\include\exports.h
%LOCALAPPDATA%\programs\python\python312\include\fileobject.h
%LOCALAPPDATA%\programs\python\python312\include\fileutils.h
%LOCALAPPDATA%\programs\python\python312\include\floatobject.h
%LOCALAPPDATA%\programs\python\python312\include\frameobject.h
%LOCALAPPDATA%\programs\python\python312\include\genericaliasobject.h
%LOCALAPPDATA%\programs\python\python312\include\import.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_abstract.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_asdl.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_ast.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_ast_state.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_atexit.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_atomic.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_atomic_funcs.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_bitutils.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_blocks_output_buffer.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_bytes_methods.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_bytesobject.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_call.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_ceval.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_ceval_state.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_code.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_compile.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_condvar.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_context.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_descrobject.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_dict.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_dict_state.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_dtoa.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_emscripten_signal.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_exceptions.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_faulthandler.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_fileutils.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_fileutils_windows.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_floatobject.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_flowgraph.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_format.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_frame.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_function.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_gc.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_genobject.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_getopt.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_gil.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_global_objects.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_global_objects_fini_generated.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_global_strings.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_hamt.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_hashtable.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_import.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_initconfig.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_instruments.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_interp.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_intrinsics.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_list.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_long.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_memoryobject.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_moduleobject.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_namespace.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_object.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_object_state.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_obmalloc.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_obmalloc_init.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_opcode.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_opcode_utils.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_parser.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_pathconfig.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_pyarena.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_pyerrors.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_pyhash.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_pylifecycle.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_pymath.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_pymem.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_pymem_init.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_pystate.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_pythread.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_range.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_runtime.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_runtime_init.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_runtime_init_generated.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_signal.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_sliceobject.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_strhex.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_structseq.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_symtable.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_sysmodule.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_time.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_token.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_traceback.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_tracemalloc.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_tuple.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_typeobject.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_typevarobject.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_ucnhash.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_unicodeobject.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_unicodeobject_generated.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_unionobject.h
%LOCALAPPDATA%\programs\python\python312\include\internal\pycore_warnings.h
%LOCALAPPDATA%\programs\python\python312\include\interpreteridobject.h
%LOCALAPPDATA%\programs\python\python312\include\intrcheck.h
%LOCALAPPDATA%\programs\python\python312\include\iterobject.h
%LOCALAPPDATA%\programs\python\python312\include\listobject.h
%LOCALAPPDATA%\programs\python\python312\include\longobject.h
%LOCALAPPDATA%\programs\python\python312\include\marshal.h
%LOCALAPPDATA%\programs\python\python312\include\memoryobject.h
%LOCALAPPDATA%\programs\python\python312\include\methodobject.h
%LOCALAPPDATA%\programs\python\python312\include\modsupport.h
%LOCALAPPDATA%\programs\python\python312\include\moduleobject.h
%LOCALAPPDATA%\programs\python\python312\include\object.h
%LOCALAPPDATA%\programs\python\python312\include\objimpl.h
%LOCALAPPDATA%\programs\python\python312\include\opcode.h
%LOCALAPPDATA%\programs\python\python312\include\osdefs.h
%LOCALAPPDATA%\programs\python\python312\include\osmodule.h
%LOCALAPPDATA%\programs\python\python312\include\patchlevel.h
%LOCALAPPDATA%\programs\python\python312\include\py_curses.h
%LOCALAPPDATA%\programs\python\python312\include\pybuffer.h
%LOCALAPPDATA%\programs\python\python312\include\pycapsule.h
%LOCALAPPDATA%\programs\python\python312\include\pyconfig.h
%LOCALAPPDATA%\programs\python\python312\include\pydtrace.h
%LOCALAPPDATA%\programs\python\python312\include\pyerrors.h
%LOCALAPPDATA%\programs\python\python312\include\pyexpat.h
%LOCALAPPDATA%\programs\python\python312\include\pyframe.h
%LOCALAPPDATA%\programs\python\python312\include\pyhash.h
%LOCALAPPDATA%\programs\python\python312\include\pylifecycle.h
%LOCALAPPDATA%\programs\python\python312\include\pymacconfig.h
%LOCALAPPDATA%\programs\python\python312\include\pymacro.h
%LOCALAPPDATA%\programs\python\python312\include\pymath.h
%LOCALAPPDATA%\programs\python\python312\include\pymem.h
%LOCALAPPDATA%\programs\python\python312\include\pyport.h
%LOCALAPPDATA%\programs\python\python312\include\pystate.h
%LOCALAPPDATA%\programs\python\python312\include\pystats.h
%LOCALAPPDATA%\programs\python\python312\include\pystrcmp.h
%LOCALAPPDATA%\programs\python\python312\include\pystrtod.h
%LOCALAPPDATA%\programs\python\python312\include\python.h
%LOCALAPPDATA%\programs\python\python312\include\pythonrun.h
%LOCALAPPDATA%\programs\python\python312\include\pythread.h
%LOCALAPPDATA%\programs\python\python312\include\pytypedefs.h
%LOCALAPPDATA%\programs\python\python312\include\rangeobject.h
%LOCALAPPDATA%\programs\python\python312\include\setobject.h
%LOCALAPPDATA%\programs\python\python312\include\sliceobject.h
%LOCALAPPDATA%\programs\python\python312\include\structmember.h
%LOCALAPPDATA%\programs\python\python312\include\structseq.h
%LOCALAPPDATA%\programs\python\python312\include\sysmodule.h
%LOCALAPPDATA%\programs\python\python312\include\traceback.h
%LOCALAPPDATA%\programs\python\python312\include\tracemalloc.h
%LOCALAPPDATA%\programs\python\python312\include\tupleobject.h
%LOCALAPPDATA%\programs\python\python312\include\typeslots.h
%LOCALAPPDATA%\programs\python\python312\include\unicodeobject.h
%LOCALAPPDATA%\programs\python\python312\include\warnings.h
%LOCALAPPDATA%\programs\python\python312\include\weakrefobject.h
%LOCALAPPDATA%\programs\python\python312\libs\python312.lib
%LOCALAPPDATA%\programs\python\python312\libs\python3.lib
%WINDIR%\temp\~df3ca5e444ef7efb21.tmp
%WINDIR%\temp\~df27d14e4f0a2c89ae.tmp
%WINDIR%\temp\~dfded659b77d587a8e.tmp
%WINDIR%\temp\~dffb94b1581230e754.tmp
%WINDIR%\temp\~df1063e13ee2389cc0.tmp
%WINDIR%\temp\~df24b635c12931366a.tmp
%WINDIR%\temp\~dfdf7634c99c16ce18.tmp
%WINDIR%\temp\~df57b24e06e5baaabe.tmp
%TEMP%\python 3.12.6 (64-bit)_20251229173221_003_lib_justforme.log
%WINDIR%\temp\~df05f64947fd65058c.tmp
%WINDIR%\installer\sourcehash{1daef824-881a-49c6-b91e-1d28877ff18d}
%WINDIR%\temp\~df5ee0868017e7e23c.tmp
%WINDIR%\temp\~df5acc386029425e2e.tmp
%WINDIR%\temp\~df7f243089fc4fd54b.tmp
%LOCALAPPDATA%\programs\python\python312\dlls\_asyncio.pyd
%LOCALAPPDATA%\programs\python\python312\dlls\_bz2.pyd
%LOCALAPPDATA%\programs\python\python312\dlls\_ctypes.pyd
%LOCALAPPDATA%\programs\python\python312\dlls\_decimal.pyd
%LOCALAPPDATA%\programs\python\python312\dlls\_elementtree.pyd
%LOCALAPPDATA%\programs\python\python312\dlls\_hashlib.pyd
%LOCALAPPDATA%\programs\python\python312\dlls\_lzma.pyd
%LOCALAPPDATA%\programs\python\python312\dlls\_msi.pyd
%LOCALAPPDATA%\programs\python\python312\dlls\_multiprocessing.pyd
%LOCALAPPDATA%\programs\python\python312\dlls\_overlapped.pyd
%LOCALAPPDATA%\programs\python\python312\dlls\_queue.pyd
%LOCALAPPDATA%\programs\python\python312\dlls\_socket.pyd
%LOCALAPPDATA%\programs\python\python312\dlls\_sqlite3.pyd
%LOCALAPPDATA%\programs\python\python312\dlls\_ssl.pyd
%LOCALAPPDATA%\programs\python\python312\dlls\_uuid.pyd
%LOCALAPPDATA%\programs\python\python312\dlls\_wmi.pyd
%LOCALAPPDATA%\programs\python\python312\dlls\_zoneinfo.pyd
%LOCALAPPDATA%\programs\python\python312\lib\__future__.py
%LOCALAPPDATA%\programs\python\python312\lib\__hello__.py
%LOCALAPPDATA%\programs\python\python312\lib\__phello__\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\__phello__\spam.py
%LOCALAPPDATA%\programs\python\python312\lib\_aix_support.py
%LOCALAPPDATA%\programs\python\python312\lib\_collections_abc.py
%LOCALAPPDATA%\programs\python\python312\lib\_compat_pickle.py
%LOCALAPPDATA%\programs\python\python312\lib\_compression.py
%LOCALAPPDATA%\programs\python\python312\lib\_markupbase.py
%LOCALAPPDATA%\programs\python\python312\lib\_osx_support.py
%LOCALAPPDATA%\programs\python\python312\lib\_py_abc.py
%LOCALAPPDATA%\programs\python\python312\lib\_pydatetime.py
%LOCALAPPDATA%\programs\python\python312\lib\_pydecimal.py
%LOCALAPPDATA%\programs\python\python312\lib\_pyio.py
%LOCALAPPDATA%\programs\python\python312\lib\_pylong.py
%LOCALAPPDATA%\programs\python\python312\lib\_sitebuiltins.py
%LOCALAPPDATA%\programs\python\python312\lib\_strptime.py
%LOCALAPPDATA%\programs\python\python312\lib\_threading_local.py
%LOCALAPPDATA%\programs\python\python312\lib\_weakrefset.py
%LOCALAPPDATA%\programs\python\python312\lib\abc.py
%LOCALAPPDATA%\programs\python\python312\lib\aifc.py
%LOCALAPPDATA%\programs\python\python312\lib\antigravity.py
%LOCALAPPDATA%\programs\python\python312\lib\argparse.py
%LOCALAPPDATA%\programs\python\python312\lib\ast.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\__main__.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\base_events.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\base_futures.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\base_subprocess.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\base_tasks.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\constants.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\coroutines.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\events.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\exceptions.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\format_helpers.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\futures.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\locks.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\log.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\mixins.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\proactor_events.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\protocols.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\queues.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\runners.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\selector_events.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\sslproto.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\staggered.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\streams.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\subprocess.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\taskgroups.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\tasks.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\threads.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\timeouts.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\transports.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\trsock.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\unix_events.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\windows_events.py
%LOCALAPPDATA%\programs\python\python312\lib\asyncio\windows_utils.py
%LOCALAPPDATA%\programs\python\python312\lib\base64.py
%LOCALAPPDATA%\programs\python\python312\lib\bdb.py
%LOCALAPPDATA%\programs\python\python312\lib\bisect.py
%LOCALAPPDATA%\programs\python\python312\lib\bz2.py
%LOCALAPPDATA%\programs\python\python312\lib\calendar.py
%LOCALAPPDATA%\programs\python\python312\lib\cgi.py
%LOCALAPPDATA%\programs\python\python312\lib\cgitb.py
%LOCALAPPDATA%\programs\python\python312\lib\chunk.py
%LOCALAPPDATA%\programs\python\python312\lib\cmd.py
%LOCALAPPDATA%\programs\python\python312\lib\code.py
%LOCALAPPDATA%\programs\python\python312\lib\codecs.py
%LOCALAPPDATA%\programs\python\python312\lib\codeop.py
%LOCALAPPDATA%\programs\python\python312\lib\collections\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\collections\abc.py
%LOCALAPPDATA%\programs\python\python312\lib\colorsys.py
%LOCALAPPDATA%\programs\python\python312\lib\compileall.py
%LOCALAPPDATA%\programs\python\python312\lib\concurrent\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\concurrent\futures\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\concurrent\futures\_base.py
%LOCALAPPDATA%\programs\python\python312\lib\concurrent\futures\process.py
%LOCALAPPDATA%\programs\python\python312\lib\concurrent\futures\thread.py
%LOCALAPPDATA%\programs\python\python312\lib\configparser.py
%LOCALAPPDATA%\programs\python\python312\lib\contextlib.py
%LOCALAPPDATA%\programs\python\python312\lib\contextvars.py
%LOCALAPPDATA%\programs\python\python312\lib\copy.py
%LOCALAPPDATA%\programs\python\python312\lib\copyreg.py
%LOCALAPPDATA%\programs\python\python312\lib\cprofile.py
%LOCALAPPDATA%\programs\python\python312\lib\crypt.py
%LOCALAPPDATA%\programs\python\python312\lib\csv.py
%LOCALAPPDATA%\programs\python\python312\lib\ctypes\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\ctypes\_aix.py
%LOCALAPPDATA%\programs\python\python312\lib\ctypes\_endian.py
%LOCALAPPDATA%\programs\python\python312\lib\ctypes\macholib\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\ctypes\macholib\dyld.py
%LOCALAPPDATA%\programs\python\python312\lib\ctypes\macholib\dylib.py
%LOCALAPPDATA%\programs\python\python312\lib\ctypes\macholib\fetch_macholib
%LOCALAPPDATA%\programs\python\python312\lib\ctypes\macholib\fetch_macholib.bat
%LOCALAPPDATA%\programs\python\python312\lib\ctypes\macholib\framework.py
%LOCALAPPDATA%\programs\python\python312\lib\ctypes\macholib\readme.ctypes
%LOCALAPPDATA%\programs\python\python312\lib\ctypes\util.py
%LOCALAPPDATA%\programs\python\python312\lib\ctypes\wintypes.py
%LOCALAPPDATA%\programs\python\python312\lib\curses\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\curses\ascii.py
%LOCALAPPDATA%\programs\python\python312\lib\curses\has_key.py
%LOCALAPPDATA%\programs\python\python312\lib\curses\panel.py
%LOCALAPPDATA%\programs\python\python312\lib\curses\textpad.py
%LOCALAPPDATA%\programs\python\python312\lib\dataclasses.py
%LOCALAPPDATA%\programs\python\python312\lib\datetime.py
%LOCALAPPDATA%\programs\python\python312\lib\dbm\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\dbm\dumb.py
%LOCALAPPDATA%\programs\python\python312\lib\dbm\gnu.py
%LOCALAPPDATA%\programs\python\python312\lib\dbm\ndbm.py
%LOCALAPPDATA%\programs\python\python312\lib\decimal.py
%LOCALAPPDATA%\programs\python\python312\lib\difflib.py
%LOCALAPPDATA%\programs\python\python312\lib\dis.py
%LOCALAPPDATA%\programs\python\python312\lib\doctest.py
%LOCALAPPDATA%\programs\python\python312\lib\email\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\email\_encoded_words.py
%LOCALAPPDATA%\programs\python\python312\lib\email\_header_value_parser.py
%LOCALAPPDATA%\programs\python\python312\lib\email\_parseaddr.py
%LOCALAPPDATA%\programs\python\python312\lib\email\_policybase.py
%LOCALAPPDATA%\programs\python\python312\lib\email\architecture.rst
%LOCALAPPDATA%\programs\python\python312\lib\email\base64mime.py
%LOCALAPPDATA%\programs\python\python312\lib\email\charset.py
%LOCALAPPDATA%\programs\python\python312\lib\email\contentmanager.py
%LOCALAPPDATA%\programs\python\python312\lib\email\encoders.py
%LOCALAPPDATA%\programs\python\python312\lib\email\errors.py
%LOCALAPPDATA%\programs\python\python312\lib\email\feedparser.py
%LOCALAPPDATA%\programs\python\python312\lib\email\generator.py
%LOCALAPPDATA%\programs\python\python312\lib\email\header.py
%LOCALAPPDATA%\programs\python\python312\lib\email\headerregistry.py
%LOCALAPPDATA%\programs\python\python312\lib\email\iterators.py
%LOCALAPPDATA%\programs\python\python312\lib\email\message.py
%LOCALAPPDATA%\programs\python\python312\lib\email\mime\application.py
%LOCALAPPDATA%\programs\python\python312\lib\email\mime\audio.py
%LOCALAPPDATA%\programs\python\python312\lib\email\mime\base.py
%LOCALAPPDATA%\programs\python\python312\lib\email\mime\image.py
%LOCALAPPDATA%\programs\python\python312\lib\email\mime\message.py
%LOCALAPPDATA%\programs\python\python312\lib\email\mime\multipart.py
%LOCALAPPDATA%\programs\python\python312\lib\email\mime\nonmultipart.py
%LOCALAPPDATA%\programs\python\python312\lib\email\mime\text.py
%LOCALAPPDATA%\programs\python\python312\lib\email\parser.py
%LOCALAPPDATA%\programs\python\python312\lib\email\policy.py
%LOCALAPPDATA%\programs\python\python312\lib\email\quoprimime.py
%LOCALAPPDATA%\programs\python\python312\lib\email\utils.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\aliases.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\ascii.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\base64_codec.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\big5.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\big5hkscs.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\bz2_codec.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\charmap.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp037.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp1006.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp1026.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp1125.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp1140.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp1250.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp1251.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp1252.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp1253.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp1254.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp1255.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp1256.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp1257.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp1258.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp273.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp424.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp437.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp500.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp720.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp737.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp775.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp850.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp852.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp855.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp856.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp857.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp858.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp860.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp861.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp862.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp863.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp864.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp865.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp866.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp869.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp874.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp875.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp932.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp949.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\cp950.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\euc_jis_2004.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\euc_jisx0213.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\euc_jp.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\euc_kr.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\gb18030.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\gb2312.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\gbk.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\hex_codec.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\hp_roman8.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\hz.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\idna.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso2022_jp.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso2022_jp_1.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso2022_jp_2.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso2022_jp_2004.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso2022_jp_3.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso2022_jp_ext.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso2022_kr.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso8859_1.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso8859_10.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso8859_11.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso8859_13.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso8859_14.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso8859_15.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso8859_16.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso8859_2.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso8859_3.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso8859_4.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso8859_5.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso8859_6.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso8859_7.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso8859_8.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\iso8859_9.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\johab.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\koi8_r.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\koi8_t.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\koi8_u.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\kz1048.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\latin_1.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\mac_arabic.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\mac_croatian.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\mac_cyrillic.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\mac_farsi.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\mac_greek.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\mac_iceland.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\mac_latin2.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\mac_roman.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\mac_romanian.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\mac_turkish.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\mbcs.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\oem.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\palmos.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\ptcp154.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\punycode.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\quopri_codec.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\raw_unicode_escape.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\rot_13.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\shift_jis.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\shift_jis_2004.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\shift_jisx0213.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\tis_620.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\undefined.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\unicode_escape.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\utf_16.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\utf_16_be.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\utf_16_le.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\utf_32.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\utf_32_be.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\utf_32_le.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\utf_7.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\utf_8.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\utf_8_sig.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\uu_codec.py
%LOCALAPPDATA%\programs\python\python312\lib\encodings\zlib_codec.py
%LOCALAPPDATA%\programs\python\python312\lib\ensurepip\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\ensurepip\__main__.py
%LOCALAPPDATA%\programs\python\python312\lib\ensurepip\_bundled\pip-24.2-py3-none-any.whl
%LOCALAPPDATA%\programs\python\python312\lib\ensurepip\_uninstall.py
%LOCALAPPDATA%\programs\python\python312\lib\enum.py
%LOCALAPPDATA%\programs\python\python312\lib\filecmp.py
%LOCALAPPDATA%\programs\python\python312\lib\fileinput.py
%LOCALAPPDATA%\programs\python\python312\lib\fnmatch.py
%LOCALAPPDATA%\programs\python\python312\lib\fractions.py
%LOCALAPPDATA%\programs\python\python312\lib\ftplib.py
%LOCALAPPDATA%\programs\python\python312\lib\functools.py
%LOCALAPPDATA%\programs\python\python312\lib\genericpath.py
%LOCALAPPDATA%\programs\python\python312\lib\getopt.py
%LOCALAPPDATA%\programs\python\python312\lib\getpass.py
%LOCALAPPDATA%\programs\python\python312\lib\gettext.py
%LOCALAPPDATA%\programs\python\python312\lib\glob.py
%LOCALAPPDATA%\programs\python\python312\lib\graphlib.py
%LOCALAPPDATA%\programs\python\python312\lib\gzip.py
%LOCALAPPDATA%\programs\python\python312\lib\hashlib.py
%LOCALAPPDATA%\programs\python\python312\lib\heapq.py
%LOCALAPPDATA%\programs\python\python312\lib\hmac.py
%LOCALAPPDATA%\programs\python\python312\lib\html\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\html\entities.py
%LOCALAPPDATA%\programs\python\python312\lib\html\parser.py
%LOCALAPPDATA%\programs\python\python312\lib\http\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\http\client.py
%LOCALAPPDATA%\programs\python\python312\lib\http\cookiejar.py
%LOCALAPPDATA%\programs\python\python312\lib\http\cookies.py
%LOCALAPPDATA%\programs\python\python312\lib\http\server.py
%LOCALAPPDATA%\programs\python\python312\lib\imaplib.py
%LOCALAPPDATA%\programs\python\python312\lib\imghdr.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\_abc.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\_bootstrap.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\_bootstrap_external.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\abc.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\machinery.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\metadata\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\metadata\_adapters.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\metadata\_collections.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\metadata\_functools.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\metadata\_itertools.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\metadata\_meta.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\metadata\_text.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\readers.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\resources\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\resources\_adapters.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\resources\_common.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\resources\_itertools.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\resources\_legacy.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\resources\abc.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\resources\readers.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\resources\simple.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\simple.py
%LOCALAPPDATA%\programs\python\python312\lib\importlib\util.py
%LOCALAPPDATA%\programs\python\python312\lib\inspect.py
%LOCALAPPDATA%\programs\python\python312\lib\io.py
%LOCALAPPDATA%\programs\python\python312\lib\ipaddress.py
%LOCALAPPDATA%\programs\python\python312\lib\json\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\json\decoder.py
%LOCALAPPDATA%\programs\python\python312\lib\json\encoder.py
%LOCALAPPDATA%\programs\python\python312\lib\json\scanner.py
%LOCALAPPDATA%\programs\python\python312\lib\json\tool.py
%LOCALAPPDATA%\programs\python\python312\lib\keyword.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\__main__.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\btm_matcher.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\btm_utils.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixer_base.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixer_util.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_apply.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_asserts.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_basestring.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_buffer.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_dict.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_except.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_exec.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_execfile.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_exitfunc.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_filter.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_funcattrs.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_future.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_getcwdu.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_has_key.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_idioms.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_import.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_imports.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_imports2.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_input.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_intern.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_isinstance.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_itertools.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_itertools_imports.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_long.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_map.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_metaclass.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_methodattrs.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_ne.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_next.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_nonzero.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_numliterals.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_operator.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_paren.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_print.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_raise.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_raw_input.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_reduce.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_reload.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_renames.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_repr.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_set_literal.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_standarderror.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_sys_exc.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_throw.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_tuple_params.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_types.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_unicode.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_urllib.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_ws_comma.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_xrange.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_xreadlines.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\fixes\fix_zip.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\grammar.txt
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\main.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\patcomp.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\patterngrammar.txt
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\pgen2\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\pgen2\conv.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\pgen2\driver.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\pgen2\grammar.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\pgen2\literals.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\pgen2\parse.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\pgen2\pgen.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\pgen2\token.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\pgen2\tokenize.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\pygram.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\pytree.py
%LOCALAPPDATA%\programs\python\python312\lib\lib2to3\refactor.py
%LOCALAPPDATA%\programs\python\python312\lib\linecache.py
%LOCALAPPDATA%\programs\python\python312\lib\locale.py
%LOCALAPPDATA%\programs\python\python312\lib\logging\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\logging\config.py
%LOCALAPPDATA%\programs\python\python312\lib\logging\handlers.py
%LOCALAPPDATA%\programs\python\python312\lib\lzma.py
%LOCALAPPDATA%\programs\python\python312\lib\mailbox.py
%LOCALAPPDATA%\programs\python\python312\lib\mailcap.py
%LOCALAPPDATA%\programs\python\python312\lib\mimetypes.py
%LOCALAPPDATA%\programs\python\python312\lib\modulefinder.py
%LOCALAPPDATA%\programs\python\python312\lib\msilib\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\msilib\schema.py
%LOCALAPPDATA%\programs\python\python312\lib\msilib\sequence.py
%LOCALAPPDATA%\programs\python\python312\lib\msilib\text.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\connection.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\context.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\dummy\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\dummy\connection.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\forkserver.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\heap.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\managers.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\pool.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\popen_fork.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\popen_forkserver.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\popen_spawn_posix.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\popen_spawn_win32.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\process.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\queues.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\reduction.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\resource_sharer.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\resource_tracker.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\shared_memory.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\sharedctypes.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\spawn.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\synchronize.py
%LOCALAPPDATA%\programs\python\python312\lib\multiprocessing\util.py
%LOCALAPPDATA%\programs\python\python312\lib\netrc.py
%LOCALAPPDATA%\programs\python\python312\lib\nntplib.py
%LOCALAPPDATA%\programs\python\python312\lib\ntpath.py
%LOCALAPPDATA%\programs\python\python312\lib\nturl2path.py
%LOCALAPPDATA%\programs\python\python312\lib\numbers.py
%LOCALAPPDATA%\programs\python\python312\lib\opcode.py
%LOCALAPPDATA%\programs\python\python312\lib\operator.py
%LOCALAPPDATA%\programs\python\python312\lib\optparse.py
%LOCALAPPDATA%\programs\python\python312\lib\os.py
%LOCALAPPDATA%\programs\python\python312\lib\pathlib.py
%LOCALAPPDATA%\programs\python\python312\lib\pdb.py
%LOCALAPPDATA%\programs\python\python312\lib\pickle.py
%LOCALAPPDATA%\programs\python\python312\lib\pickletools.py
%LOCALAPPDATA%\programs\python\python312\lib\pipes.py
%LOCALAPPDATA%\programs\python\python312\lib\pkgutil.py
%LOCALAPPDATA%\programs\python\python312\lib\platform.py
%LOCALAPPDATA%\programs\python\python312\lib\plistlib.py
%LOCALAPPDATA%\programs\python\python312\lib\poplib.py
%LOCALAPPDATA%\programs\python\python312\lib\posixpath.py
%LOCALAPPDATA%\programs\python\python312\lib\pprint.py
%LOCALAPPDATA%\programs\python\python312\lib\profile.py
%LOCALAPPDATA%\programs\python\python312\lib\pstats.py
%LOCALAPPDATA%\programs\python\python312\lib\pty.py
%LOCALAPPDATA%\programs\python\python312\lib\py_compile.py
%LOCALAPPDATA%\programs\python\python312\lib\pyclbr.py
%LOCALAPPDATA%\programs\python\python312\lib\pydoc.py
%LOCALAPPDATA%\programs\python\python312\lib\pydoc_data\_pydoc.css
%LOCALAPPDATA%\programs\python\python312\lib\pydoc_data\topics.py
%LOCALAPPDATA%\programs\python\python312\lib\queue.py
%LOCALAPPDATA%\programs\python\python312\lib\quopri.py
%LOCALAPPDATA%\programs\python\python312\lib\random.py
%LOCALAPPDATA%\programs\python\python312\lib\re\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\re\_casefix.py
%LOCALAPPDATA%\programs\python\python312\lib\re\_compiler.py
%LOCALAPPDATA%\programs\python\python312\lib\re\_constants.py
%LOCALAPPDATA%\programs\python\python312\lib\re\_parser.py
%LOCALAPPDATA%\programs\python\python312\lib\reprlib.py
%LOCALAPPDATA%\programs\python\python312\lib\rlcompleter.py
%LOCALAPPDATA%\programs\python\python312\lib\runpy.py
%LOCALAPPDATA%\programs\python\python312\lib\sched.py
%LOCALAPPDATA%\programs\python\python312\lib\secrets.py
%LOCALAPPDATA%\programs\python\python312\lib\selectors.py
%LOCALAPPDATA%\programs\python\python312\lib\shelve.py
%LOCALAPPDATA%\programs\python\python312\lib\shlex.py
%LOCALAPPDATA%\programs\python\python312\lib\shutil.py
%LOCALAPPDATA%\programs\python\python312\lib\signal.py
%LOCALAPPDATA%\programs\python\python312\lib\site.py
%LOCALAPPDATA%\programs\python\python312\lib\site-packages\readme.txt
%LOCALAPPDATA%\programs\python\python312\lib\smtplib.py
%LOCALAPPDATA%\programs\python\python312\lib\sndhdr.py
%LOCALAPPDATA%\programs\python\python312\lib\socket.py
%LOCALAPPDATA%\programs\python\python312\lib\socketserver.py
%LOCALAPPDATA%\programs\python\python312\lib\sqlite3\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\sqlite3\__main__.py
%LOCALAPPDATA%\programs\python\python312\lib\sqlite3\dbapi2.py
%LOCALAPPDATA%\programs\python\python312\lib\sqlite3\dump.py
%LOCALAPPDATA%\programs\python\python312\lib\sre_compile.py
%LOCALAPPDATA%\programs\python\python312\lib\sre_constants.py
%LOCALAPPDATA%\programs\python\python312\lib\sre_parse.py
%LOCALAPPDATA%\programs\python\python312\lib\ssl.py
%LOCALAPPDATA%\programs\python\python312\lib\stat.py
%LOCALAPPDATA%\programs\python\python312\lib\statistics.py
%LOCALAPPDATA%\programs\python\python312\lib\string.py
%LOCALAPPDATA%\programs\python\python312\lib\stringprep.py
%LOCALAPPDATA%\programs\python\python312\lib\struct.py
%LOCALAPPDATA%\programs\python\python312\lib\subprocess.py
%LOCALAPPDATA%\programs\python\python312\lib\sunau.py
%LOCALAPPDATA%\programs\python\python312\lib\symtable.py
%LOCALAPPDATA%\programs\python\python312\lib\sysconfig.py
%LOCALAPPDATA%\programs\python\python312\lib\tabnanny.py
%LOCALAPPDATA%\programs\python\python312\lib\tarfile.py
%LOCALAPPDATA%\programs\python\python312\lib\telnetlib.py
%LOCALAPPDATA%\programs\python\python312\lib\tempfile.py
%LOCALAPPDATA%\programs\python\python312\lib\textwrap.py
%LOCALAPPDATA%\programs\python\python312\lib\this.py
%LOCALAPPDATA%\programs\python\python312\lib\threading.py
%LOCALAPPDATA%\programs\python\python312\lib\timeit.py
%LOCALAPPDATA%\programs\python\python312\lib\token.py
%LOCALAPPDATA%\programs\python\python312\lib\tokenize.py
%LOCALAPPDATA%\programs\python\python312\lib\tomllib\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\tomllib\_parser.py
%LOCALAPPDATA%\programs\python\python312\lib\tomllib\_re.py
%LOCALAPPDATA%\programs\python\python312\lib\tomllib\_types.py
%LOCALAPPDATA%\programs\python\python312\lib\trace.py
%LOCALAPPDATA%\programs\python\python312\lib\traceback.py
%LOCALAPPDATA%\programs\python\python312\lib\tracemalloc.py
%LOCALAPPDATA%\programs\python\python312\lib\tty.py
%LOCALAPPDATA%\programs\python\python312\lib\turtle.py
%LOCALAPPDATA%\programs\python\python312\lib\types.py
%LOCALAPPDATA%\programs\python\python312\lib\typing.py
%LOCALAPPDATA%\programs\python\python312\lib\unittest\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\unittest\__main__.py
%LOCALAPPDATA%\programs\python\python312\lib\unittest\_log.py
%LOCALAPPDATA%\programs\python\python312\lib\unittest\async_case.py
%LOCALAPPDATA%\programs\python\python312\lib\unittest\case.py
%LOCALAPPDATA%\programs\python\python312\lib\unittest\loader.py
%LOCALAPPDATA%\programs\python\python312\lib\unittest\main.py
%LOCALAPPDATA%\programs\python\python312\lib\unittest\mock.py
%LOCALAPPDATA%\programs\python\python312\lib\unittest\result.py
%LOCALAPPDATA%\programs\python\python312\lib\unittest\runner.py
%LOCALAPPDATA%\programs\python\python312\lib\unittest\signals.py
%LOCALAPPDATA%\programs\python\python312\lib\unittest\suite.py
%LOCALAPPDATA%\programs\python\python312\lib\unittest\util.py
%LOCALAPPDATA%\programs\python\python312\lib\urllib\error.py
%LOCALAPPDATA%\programs\python\python312\lib\urllib\parse.py
%LOCALAPPDATA%\programs\python\python312\lib\urllib\request.py
%LOCALAPPDATA%\programs\python\python312\lib\urllib\response.py
%LOCALAPPDATA%\programs\python\python312\lib\urllib\robotparser.py
%LOCALAPPDATA%\programs\python\python312\lib\uu.py
%LOCALAPPDATA%\programs\python\python312\lib\uuid.py
%LOCALAPPDATA%\programs\python\python312\lib\venv\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\venv\__main__.py
%LOCALAPPDATA%\programs\python\python312\lib\venv\scripts\common\activate
%LOCALAPPDATA%\programs\python\python312\lib\venv\scripts\common\activate.ps1
%LOCALAPPDATA%\programs\python\python312\lib\venv\scripts\nt\activate.bat
%LOCALAPPDATA%\programs\python\python312\lib\venv\scripts\nt\deactivate.bat
%LOCALAPPDATA%\programs\python\python312\lib\venv\scripts\posix\activate.csh
%LOCALAPPDATA%\programs\python\python312\lib\venv\scripts\posix\activate.fish
%LOCALAPPDATA%\programs\python\python312\lib\warnings.py
%LOCALAPPDATA%\programs\python\python312\lib\wave.py
%LOCALAPPDATA%\programs\python\python312\lib\weakref.py
%LOCALAPPDATA%\programs\python\python312\lib\webbrowser.py
%LOCALAPPDATA%\programs\python\python312\lib\wsgiref\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\wsgiref\handlers.py
%LOCALAPPDATA%\programs\python\python312\lib\wsgiref\headers.py
%LOCALAPPDATA%\programs\python\python312\lib\wsgiref\simple_server.py
%LOCALAPPDATA%\programs\python\python312\lib\wsgiref\types.py
%LOCALAPPDATA%\programs\python\python312\lib\wsgiref\util.py
%LOCALAPPDATA%\programs\python\python312\lib\wsgiref\validate.py
%LOCALAPPDATA%\programs\python\python312\lib\xdrlib.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\dom\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\dom\domreg.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\dom\expatbuilder.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\dom\minicompat.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\dom\minidom.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\dom\nodefilter.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\dom\pulldom.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\dom\xmlbuilder.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\etree\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\etree\celementtree.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\etree\elementinclude.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\etree\elementpath.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\etree\elementtree.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\parsers\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\parsers\expat.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\sax\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\sax\_exceptions.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\sax\expatreader.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\sax\handler.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\sax\saxutils.py
%LOCALAPPDATA%\programs\python\python312\lib\xml\sax\xmlreader.py
%LOCALAPPDATA%\programs\python\python312\lib\xmlrpc\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\xmlrpc\client.py
%LOCALAPPDATA%\programs\python\python312\lib\xmlrpc\server.py
%LOCALAPPDATA%\programs\python\python312\lib\zipapp.py
%LOCALAPPDATA%\programs\python\python312\lib\zipfile\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\zipfile\__main__.py
%LOCALAPPDATA%\programs\python\python312\lib\zipfile\_path\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\zipfile\_path\glob.py
%LOCALAPPDATA%\programs\python\python312\lib\zipimport.py
%LOCALAPPDATA%\programs\python\python312\lib\zoneinfo\__init__.py
%LOCALAPPDATA%\programs\python\python312\lib\zoneinfo\_common.py
%LOCALAPPDATA%\programs\python\python312\lib\zoneinfo\_tzpath.py
%LOCALAPPDATA%\programs\python\python312\lib\zoneinfo\_zoneinfo.py
%LOCALAPPDATA%\programs\python\python312\dlls\libcrypto-3.dll
%LOCALAPPDATA%\programs\python\python312\dlls\libffi-8.dll
%LOCALAPPDATA%\programs\python\python312\dlls\libssl-3.dll
%LOCALAPPDATA%\programs\python\python312\dlls\pyexpat.pyd
%LOCALAPPDATA%\programs\python\python312\lib\venv\scripts\nt\python.exe
%LOCALAPPDATA%\programs\python\python312\dlls\python_lib.cat
%LOCALAPPDATA%\programs\python\python312\lib\venv\scripts\nt\pythonw.exe
%LOCALAPPDATA%\programs\python\python312\dlls\select.pyd
%LOCALAPPDATA%\programs\python\python312\dlls\sqlite3.dll
%LOCALAPPDATA%\programs\python\python312\dlls\unicodedata.pyd
%LOCALAPPDATA%\programs\python\python312\dlls\winsound.pyd
%WINDIR%\temp\~df7933d08aadcbb8c8.tmp
%WINDIR%\temp\~df2ad13ccb4947d78a.tmp
%WINDIR%\temp\~df0a5863c5417bf14f.tmp
%WINDIR%\temp\~df0df6ef7d5b7ab0fc.tmp
%WINDIR%\temp\~dff9c56f06b92e7917.tmp
%WINDIR%\temp\~df8ea6722e286617a2.tmp
%WINDIR%\temp\~df90d375c282101125.tmp
%WINDIR%\temp\~dfb2e0c61a30043bc2.tmp
%TEMP%\python 3.12.6 (64-bit)_20251229173221_004_tcltk_justforme.log
%WINDIR%\temp\~df946950ddc3ff03aa.tmp
%WINDIR%\installer\sourcehash{08a1963d-07d1-4620-929c-385f6a307772}
%WINDIR%\temp\~df0bb25b011544c223.tmp
%WINDIR%\temp\~df062244a87c75a9f7.tmp
%WINDIR%\temp\~dff9023ac9e0f0eefc.tmp

Deletes following files that it created itself

<SYSTEM32>\mn9bswl5gu.txt
%TEMP%\res77a1.tmp
%TEMP%\eup2hbtc\csca1cfd4d5956f463793c7b17be6caed70.tmp
%TEMP%\eup2hbtc\eup2hbtc.0.cs
%TEMP%\eup2hbtc\eup2hbtc.dll
%TEMP%\eup2hbtc\eup2hbtc.out
%TEMP%\eup2hbtc\eup2hbtc.cmdline
%TEMP%\ct5rl4xj6g.ps1

Moves the following files

from %WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\core_justforme to %LOCALAPPDATA%\package cache\.unverified\core_justforme
from %LOCALAPPDATA%\package cache\.unverified\core_justforme to %LOCALAPPDATA%\package cache\{901b913c-fa63-48d2-9842-7d7676739378}v3.12.6150.0\core.msi
from %WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\exe_justforme to %LOCALAPPDATA%\package cache\.unverified\exe_justforme
from %LOCALAPPDATA%\package cache\.unverified\exe_justforme to %LOCALAPPDATA%\package cache\{537b2af5-504b-4303-99cb-fde56f47aa51}v3.12.6150.0\exe.msi
from %WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\dev_justforme to %LOCALAPPDATA%\package cache\.unverified\dev_justforme
from %LOCALAPPDATA%\package cache\.unverified\dev_justforme to %LOCALAPPDATA%\package cache\{2f4e9933-7587-4d85-9ba1-f2903afb36d8}v3.12.6150.0\dev.msi
from %WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\lib_justforme to %LOCALAPPDATA%\package cache\.unverified\lib_justforme
from %LOCALAPPDATA%\package cache\.unverified\lib_justforme to %LOCALAPPDATA%\package cache\{1daef824-881a-49c6-b91e-1d28877ff18d}v3.12.6150.0\lib.msi
from %WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\tcltk_justforme to %LOCALAPPDATA%\package cache\.unverified\tcltk_justforme
from %LOCALAPPDATA%\package cache\.unverified\tcltk_justforme to %LOCALAPPDATA%\package cache\{08a1963d-07d1-4620-929c-385f6a307772}v3.12.6150.0\tcltk.msi
from %WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\launcher_justforme to %LOCALAPPDATA%\package cache\.unverified\launcher_justforme
from %LOCALAPPDATA%\package cache\.unverified\launcher_justforme to %LOCALAPPDATA%\package cache\{fe223d83-99b9-41d5-99fc-fa3995d8f82d}v3.12.6150.0\launcher.msi
from %WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\pip_justforme to %LOCALAPPDATA%\package cache\.unverified\pip_justforme
from %LOCALAPPDATA%\package cache\.unverified\pip_justforme to %LOCALAPPDATA%\package cache\{1d520ce1-f09a-4a26-b110-52081fea0ab9}v3.12.6150.0\pip.msi
from %WINDIR%\temp\{68512706-f2b0-4fc4-8e13-f0f9bc0e6087}\path_justforme to %LOCALAPPDATA%\package cache\.unverified\path_justforme
from %LOCALAPPDATA%\package cache\.unverified\path_justforme to %LOCALAPPDATA%\package cache\{3c524136-e47a-45c7-bb2c-242eac3f4c32}v3.12.6150.0\path.msi

Network activity

Connects to

'di##ord.com':443
'py##on.org':443

TCP

Other

'di##ord.com':443
'py##on.org':443

UDP

DNS ASK di##ord.com
DNS ASK py##on.org

Miscellaneous

Creates and executes the following

'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -ExecutionPolicy Bypass -File "%TEMP%\ct5rl4XJ6g.ps1"
'%TEMP%\python-installer.exe' /quiet InstallAllUsers=0 PrependPath=1 Include_test=0 Include_pip=1 Include_doc=0
'%WINDIR%\temp\{445d9588-fdee-495c-9453-bda1aa0c757b}\.cr\python-installer.exe' -burn.clean.room="%TEMP%\python-installer.exe" -burn.filehandle.attached=532 -burn.filehandle.self=576 /quiet InstallAllUsers=0 PrependPath=1 Include_test=0 Include_pip=1 Include_doc=0

Executes the following

'<SYSTEM32>\cmd.exe' /d /s /c "powershell.exe -ExecutionPolicy Bypass -File "%TEMP%\ct5rl4XJ6g.ps1""
'%WINDIR%\microsoft.net\framework64\v4.0.30319\csc.exe' /noconfig /fullpaths @"%TEMP%\eup2hbtc\eup2hbtc.cmdline"
'%WINDIR%\microsoft.net\framework64\v4.0.30319\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES77A1.tmp" "%TEMP%\eup2hbtc\CSCA1CFD4D5956F463793C7B17BE6CAED70.TMP"
'<SYSTEM32>\cmd.exe' /d /s /c "wmic diskdrive get serialnumber"
'<SYSTEM32>\wbem\wmic.exe' diskdrive get serialnumber
'<SYSTEM32>\cmd.exe' /d /s /c "tasklist"
'<SYSTEM32>\tasklist.exe'
'<SYSTEM32>\cmd.exe' /d /s /c "powershell.exe Add-Type -AssemblyName System.Security; [System.Security.Cryptography.ProtectedData]::Unprotect([byte[]]@(1,0,0,0,208,140,157,223,1,21,209,17,140,122,0,192,79,194,151,2...
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' Add-Type -AssemblyName System.Security; [System.Security.Cryptography.ProtectedData]::Unprotect([byte[]]@(1,0,0,0,208,140,157,223,1,21,209,17,140,122,0,192,79,194,151,235,1,0,0,0,69,247,204,56,...
'<SYSTEM32>\cmd.exe' /d /s /c "reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 0 /f"
'<SYSTEM32>\reg.exe' add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 0 /f
'<SYSTEM32>\cmd.exe' /d /s /c "reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v <File name> /t REG_SZ /d "%ALLUSERSPROFILE%\Update.vbs" /f"
'<SYSTEM32>\cmd.exe' /d /s /c "powershell -Command Add-MpPreference -ExclusionPath "%LOCALAPPDATA%\.IFnIuIVMXj""
'<SYSTEM32>\reg.exe' add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v <File name> /t REG_SZ /d "%ALLUSERSPROFILE%\Update.vbs" /f
'<SYSTEM32>\cmd.exe' /d /s /c "powershell -Command Add-MpPreference -ExclusionPath "<SYSTEM32>\Tasks""
'<SYSTEM32>\cmd.exe' /d /s /c "wmic baseboard get serialnumber"
'<SYSTEM32>\cmd.exe' /d /s /c "pip install pillow"
'<SYSTEM32>\wbem\wmic.exe' baseboard get serialnumber
'<SYSTEM32>\cmd.exe' /d /s /c "wmic path win32_computersystemproduct get uuid"
'<SYSTEM32>\cmd.exe' /d /s /c "wmic bios get smbiosbiosversion"
'<SYSTEM32>\wbem\wmic.exe' path win32_computersystemproduct get uuid
'<SYSTEM32>\wbem\wmic.exe' bios get smbiosbiosversion
'<SYSTEM32>\cmd.exe' /d /s /c "wmic PATH Win32_VideoController GET Description,PNPDeviceID"
'<SYSTEM32>\wbem\wmic.exe' PATH Win32_VideoController GET Description,PNPDeviceID
'<SYSTEM32>\cmd.exe' /d /s /c "wmic MemoryChip get /format:list | find /i "Speed""
'<SYSTEM32>\wbem\wmic.exe' MemoryChip get /format:list
'<SYSTEM32>\find.exe' /i "Speed"
'<SYSTEM32>\cmd.exe' /d /s /c "wmic path win32_VideoController get name"
'<SYSTEM32>\cmd.exe' /d /s /c "wmic memorychip get serialnumber"
'<SYSTEM32>\wbem\wmic.exe' path win32_VideoController get name
'<SYSTEM32>\wbem\wmic.exe' memorychip get serialnumber
'<SYSTEM32>\cmd.exe' /d /s /c "powershell Get-ItemPropertyValue -Path 'HKLM:SOFTWARE\Microsoft\Windows NT\CurrentVersion' -Name ProductName"
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' Get-ItemPropertyValue -Path 'HKLM:SOFTWARE\Microsoft\Windows NT\CurrentVersion' -Name ProductName
'<SYSTEM32>\cmd.exe' /d /s /c "wmic csproduct get uuid"
'<SYSTEM32>\wbem\wmic.exe' csproduct get uuid
'<SYSTEM32>\cmd.exe' /d /s /c "wmic cpu get processorid"
'<SYSTEM32>\wbem\wmic.exe' cpu get processorid
'<SYSTEM32>\cmd.exe' /d /s /c "getmac /NH"
'<SYSTEM32>\getmac.exe' /NH
'<SYSTEM32>\cmd.exe' /d /s /c "tasklist /fo csv"
'<SYSTEM32>\tasklist.exe' /fo csv
'<SYSTEM32>\cmd.exe' /d /s /c "powershell.exe -ExecutionPolicy Bypass -File "%TEMP%\ct5rl4XJ6g.ps1""' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v4.0.30319\csc.exe' /noconfig /fullpaths @"%TEMP%\eup2hbtc\eup2hbtc.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v4.0.30319\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES77A1.tmp" "%TEMP%\eup2hbtc\CSCA1CFD4D5956F463793C7B17BE6CAED70.TMP"' (with hidden window)
'<SYSTEM32>\cmd.exe' /d /s /c "wmic diskdrive get serialnumber"' (with hidden window)
'<SYSTEM32>\cmd.exe' /d /s /c "tasklist"' (with hidden window)
'<SYSTEM32>\cmd.exe' /d /s /c "powershell.exe Add-Type -AssemblyName System.Security; [System.Security.Cryptography.ProtectedData]::Unprotect([byte[]]@(1,0,0,0,208,140,157,223,1,21,209,17,140,122,0,192,79,194,151,2...' (with hidden window)
'<SYSTEM32>\cmd.exe' /d /s /c "reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 0 /f"' (with hidden window)
'<SYSTEM32>\cmd.exe' /d /s /c "reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v <File name> /t REG_SZ /d "%ALLUSERSPROFILE%\Update.vbs" /f"' (with hidden window)
'<SYSTEM32>\cmd.exe' /d /s /c "powershell -Command Add-MpPreference -ExclusionPath "%LOCALAPPDATA%\.IFnIuIVMXj""' (with hidden window)
'<SYSTEM32>\cmd.exe' /d /s /c "powershell -Command Add-MpPreference -ExclusionPath "<SYSTEM32>\Tasks""' (with hidden window)
'<SYSTEM32>\cmd.exe' /d /s /c "wmic baseboard get serialnumber"' (with hidden window)
'<SYSTEM32>\cmd.exe' /d /s /c "pip install pillow"' (with hidden window)
'<SYSTEM32>\cmd.exe' /d /s /c "wmic path win32_computersystemproduct get uuid"' (with hidden window)
'<SYSTEM32>\cmd.exe' /d /s /c "wmic bios get smbiosbiosversion"' (with hidden window)
'<SYSTEM32>\cmd.exe' /d /s /c "wmic PATH Win32_VideoController GET Description,PNPDeviceID"' (with hidden window)
'<SYSTEM32>\cmd.exe' /d /s /c "wmic MemoryChip get /format:list | find /i "Speed""' (with hidden window)
'<SYSTEM32>\cmd.exe' /d /s /c "wmic path win32_VideoController get name"' (with hidden window)
'<SYSTEM32>\cmd.exe' /d /s /c "wmic memorychip get serialnumber"' (with hidden window)
'<SYSTEM32>\cmd.exe' /d /s /c "powershell Get-ItemPropertyValue -Path 'HKLM:SOFTWARE\Microsoft\Windows NT\CurrentVersion' -Name ProductName"' (with hidden window)
'<SYSTEM32>\cmd.exe' /d /s /c "wmic csproduct get uuid"' (with hidden window)
'<SYSTEM32>\cmd.exe' /d /s /c "wmic cpu get processorid"' (with hidden window)
'<SYSTEM32>\cmd.exe' /d /s /c "getmac /NH"' (with hidden window)
'<SYSTEM32>\cmd.exe' /d /s /c "tasklist /fo csv"' (with hidden window)
'%TEMP%\python-installer.exe' /quiet InstallAllUsers=0 PrependPath=1 Include_test=0 Include_pip=1 Include_doc=0' (with hidden window)

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations

Free trial