I was working on a query for osquery to get the hash of every python executed.