Trojan.Encoder.44501

Technical Information

Malicious functions

Reads files which store third party applications passwords

%HOMEPATH%\desktop\archer.avi
%HOMEPATH%\desktop\advice_process.htm
%HOMEPATH%\desktop\coffee.bmp
%HOMEPATH%\desktop\dashborder_120.bmp
%HOMEPATH%\desktop\dashborder_144.bmp
%HOMEPATH%\desktop\dial.bmp
%HOMEPATH%\desktop\dialmap.bmp
%HOMEPATH%\desktop\fi51.doc
%HOMEPATH%\desktop\garden.htm
%HOMEPATH%\desktop\ituneshelpunavailable.htm
%HOMEPATH%\desktop\sdkfailsafeemulator.cer
%HOMEPATH%\desktop\sdksampleprivdeveloper.cer
%HOMEPATH%\desktop\tileimage.bmp
%HOMEPATH%\desktop\toolbar.bmp
%HOMEPATH%\desktop\tree_view.htm
%HOMEPATH%\desktop\trivial-merge.htm
%HOMEPATH%\desktop\weeklysheet1215.doc

Modifies file system

Creates the following files

C:\runtmp\_mei23602\vcruntime140.dll
C:\runtmp\_mei23602\_bz2.pyd
C:\runtmp\_mei23602\_cffi_backend.cp314-win_amd64.pyd
C:\runtmp\_mei23602\_decimal.pyd
C:\runtmp\_mei23602\_hashlib.pyd
C:\runtmp\_mei23602\_lzma.pyd
C:\runtmp\_mei23602\_socket.pyd
C:\runtmp\_mei23602\_ssl.pyd
C:\runtmp\_mei23602\_tcl_data\auto.tcl
C:\runtmp\_mei23602\_tcl_data\clock.tcl
C:\runtmp\_mei23602\_tcl_data\encoding\ascii.enc
C:\runtmp\_mei23602\_tcl_data\encoding\big5.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cns11643.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp1250.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp1251.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp1252.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp1253.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp1254.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp1255.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp1256.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp1257.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp1258.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp437.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp737.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp775.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp850.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp852.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp855.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp857.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp860.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp861.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp862.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp863.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp864.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp865.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp866.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp869.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp874.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp932.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp936.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp949.enc
C:\runtmp\_mei23602\_tcl_data\encoding\cp950.enc
C:\runtmp\_mei23602\_tcl_data\encoding\dingbats.enc
C:\runtmp\_mei23602\_tcl_data\encoding\ebcdic.enc
C:\runtmp\_mei23602\_tcl_data\encoding\euc-cn.enc
C:\runtmp\_mei23602\_tcl_data\encoding\euc-jp.enc
C:\runtmp\_mei23602\_tcl_data\encoding\euc-kr.enc
C:\runtmp\_mei23602\_tcl_data\encoding\gb12345.enc
C:\runtmp\_mei23602\_tcl_data\encoding\gb1988.enc
C:\runtmp\_mei23602\_tcl_data\encoding\gb2312-raw.enc
C:\runtmp\_mei23602\_tcl_data\encoding\gb2312.enc
C:\runtmp\_mei23602\_tcl_data\encoding\iso2022-jp.enc
C:\runtmp\_mei23602\_tcl_data\encoding\iso2022-kr.enc
C:\runtmp\_mei23602\_tcl_data\encoding\iso2022.enc
C:\runtmp\_mei23602\_tcl_data\encoding\iso8859-1.enc
C:\runtmp\_mei23602\_tcl_data\encoding\iso8859-10.enc
C:\runtmp\_mei23602\_tcl_data\encoding\iso8859-11.enc
C:\runtmp\_mei23602\_tcl_data\encoding\iso8859-13.enc
C:\runtmp\_mei23602\_tcl_data\encoding\iso8859-14.enc
C:\runtmp\_mei23602\_tcl_data\encoding\iso8859-15.enc
C:\runtmp\_mei23602\_tcl_data\encoding\iso8859-16.enc
C:\runtmp\_mei23602\_tcl_data\encoding\iso8859-2.enc
C:\runtmp\_mei23602\_tcl_data\encoding\iso8859-3.enc
C:\runtmp\_mei23602\_tcl_data\encoding\iso8859-4.enc
C:\runtmp\_mei23602\_tcl_data\encoding\iso8859-5.enc
C:\runtmp\_mei23602\_tcl_data\encoding\iso8859-6.enc
C:\runtmp\_mei23602\_tcl_data\encoding\iso8859-7.enc
C:\runtmp\_mei23602\_tcl_data\encoding\iso8859-8.enc
C:\runtmp\_mei23602\_tcl_data\encoding\iso8859-9.enc
C:\runtmp\_mei23602\_tcl_data\encoding\jis0201.enc
C:\runtmp\_mei23602\_tcl_data\encoding\jis0208.enc
C:\runtmp\_mei23602\_tcl_data\encoding\jis0212.enc
C:\runtmp\_mei23602\_tcl_data\encoding\koi8-r.enc
C:\runtmp\_mei23602\_tcl_data\encoding\koi8-ru.enc
C:\runtmp\_mei23602\_tcl_data\encoding\koi8-t.enc
C:\runtmp\_mei23602\_tcl_data\encoding\koi8-u.enc
C:\runtmp\_mei23602\_tcl_data\encoding\ksc5601.enc
C:\runtmp\_mei23602\_tcl_data\encoding\maccenteuro.enc
C:\runtmp\_mei23602\_tcl_data\encoding\maccroatian.enc
C:\runtmp\_mei23602\_tcl_data\encoding\maccyrillic.enc
C:\runtmp\_mei23602\_tcl_data\encoding\macdingbats.enc
C:\runtmp\_mei23602\_tcl_data\encoding\macgreek.enc
C:\runtmp\_mei23602\_tcl_data\encoding\maciceland.enc
C:\runtmp\_mei23602\_tcl_data\encoding\macjapan.enc
C:\runtmp\_mei23602\_tcl_data\encoding\macroman.enc
C:\runtmp\_mei23602\_tcl_data\encoding\macromania.enc
C:\runtmp\_mei23602\_tcl_data\encoding\macthai.enc
C:\runtmp\_mei23602\_tcl_data\encoding\macturkish.enc
C:\runtmp\_mei23602\_tcl_data\encoding\macukraine.enc
C:\runtmp\_mei23602\_tcl_data\encoding\shiftjis.enc
C:\runtmp\_mei23602\_tcl_data\encoding\symbol.enc
C:\runtmp\_mei23602\_tcl_data\encoding\tis-620.enc
C:\runtmp\_mei23602\_tcl_data\history.tcl
C:\runtmp\_mei23602\_tcl_data\http1.0\http.tcl
C:\runtmp\_mei23602\_tcl_data\http1.0\pkgindex.tcl
C:\runtmp\_mei23602\_tcl_data\init.tcl
C:\runtmp\_mei23602\_tcl_data\msgs\af.msg
C:\runtmp\_mei23602\_tcl_data\msgs\af_za.msg
C:\runtmp\_mei23602\_tcl_data\msgs\ar.msg
C:\runtmp\_mei23602\_tcl_data\msgs\ar_in.msg
C:\runtmp\_mei23602\_tcl_data\msgs\ar_jo.msg
C:\runtmp\_mei23602\_tcl_data\msgs\ar_lb.msg
C:\runtmp\_mei23602\_tcl_data\msgs\ar_sy.msg
C:\runtmp\_mei23602\_tcl_data\msgs\be.msg
C:\runtmp\_mei23602\_tcl_data\msgs\bg.msg
C:\runtmp\_mei23602\_tcl_data\msgs\bn.msg
C:\runtmp\_mei23602\_tcl_data\msgs\bn_in.msg
C:\runtmp\_mei23602\_tcl_data\msgs\ca.msg
C:\runtmp\_mei23602\_tcl_data\msgs\cs.msg
C:\runtmp\_mei23602\_tcl_data\msgs\da.msg
C:\runtmp\_mei23602\_tcl_data\msgs\de.msg
C:\runtmp\_mei23602\_tcl_data\msgs\de_at.msg
C:\runtmp\_mei23602\_tcl_data\msgs\de_be.msg
C:\runtmp\_mei23602\_tcl_data\msgs\el.msg
C:\runtmp\_mei23602\_tcl_data\msgs\en_au.msg
C:\runtmp\_mei23602\_tcl_data\msgs\en_be.msg
C:\runtmp\_mei23602\_tcl_data\msgs\en_bw.msg
C:\runtmp\_mei23602\_tcl_data\msgs\en_ca.msg
C:\runtmp\_mei23602\_tcl_data\msgs\en_gb.msg
C:\runtmp\_mei23602\_tcl_data\msgs\en_hk.msg
C:\runtmp\_mei23602\_tcl_data\msgs\en_ie.msg
C:\runtmp\_mei23602\_tcl_data\msgs\en_in.msg
C:\runtmp\_mei23602\_tcl_data\msgs\en_nz.msg
C:\runtmp\_mei23602\_tcl_data\msgs\en_ph.msg
C:\runtmp\_mei23602\_tcl_data\msgs\en_sg.msg
C:\runtmp\_mei23602\_tcl_data\msgs\en_za.msg
C:\runtmp\_mei23602\_tcl_data\msgs\en_zw.msg
C:\runtmp\_mei23602\_tcl_data\msgs\eo.msg
C:\runtmp\_mei23602\_tcl_data\msgs\es.msg
C:\runtmp\_mei23602\_tcl_data\msgs\es_ar.msg
C:\runtmp\_mei23602\_tcl_data\msgs\es_bo.msg
C:\runtmp\_mei23602\_tcl_data\msgs\es_cl.msg
C:\runtmp\_mei23602\_tcl_data\msgs\es_co.msg
C:\runtmp\_mei23602\_tcl_data\msgs\es_cr.msg
C:\runtmp\_mei23602\_tcl_data\msgs\es_do.msg
C:\runtmp\_mei23602\_tcl_data\msgs\es_ec.msg
C:\runtmp\_mei23602\_tcl_data\msgs\es_gt.msg
C:\runtmp\_mei23602\_tcl_data\msgs\es_hn.msg
C:\runtmp\_mei23602\_tcl_data\msgs\es_mx.msg
C:\runtmp\_mei23602\_tcl_data\msgs\es_ni.msg
C:\runtmp\_mei23602\_tcl_data\msgs\es_pa.msg
C:\runtmp\_mei23602\_tcl_data\msgs\es_pe.msg
C:\runtmp\_mei23602\_tcl_data\msgs\es_pr.msg
C:\runtmp\_mei23602\_tcl_data\msgs\es_py.msg
C:\runtmp\_mei23602\_tcl_data\msgs\es_sv.msg
C:\runtmp\_mei23602\_tcl_data\msgs\es_uy.msg
C:\runtmp\_mei23602\_tcl_data\msgs\es_ve.msg
C:\runtmp\_mei23602\_tcl_data\msgs\et.msg
C:\runtmp\_mei23602\_tcl_data\msgs\eu.msg
C:\runtmp\_mei23602\_tcl_data\msgs\eu_es.msg
C:\runtmp\_mei23602\_tcl_data\msgs\fa.msg
C:\runtmp\_mei23602\_tcl_data\msgs\fa_in.msg
C:\runtmp\_mei23602\_tcl_data\msgs\fa_ir.msg
C:\runtmp\_mei23602\_tcl_data\msgs\fi.msg
C:\runtmp\_mei23602\_tcl_data\msgs\fo.msg
C:\runtmp\_mei23602\_tcl_data\msgs\fo_fo.msg
C:\runtmp\_mei23602\_tcl_data\msgs\fr.msg
C:\runtmp\_mei23602\_tcl_data\msgs\fr_be.msg
C:\runtmp\_mei23602\_tcl_data\msgs\fr_ca.msg
C:\runtmp\_mei23602\_tcl_data\msgs\fr_ch.msg
C:\runtmp\_mei23602\_tcl_data\msgs\ga.msg
C:\runtmp\_mei23602\_tcl_data\msgs\ga_ie.msg
C:\runtmp\_mei23602\_tcl_data\msgs\gl.msg
C:\runtmp\_mei23602\_tcl_data\msgs\gl_es.msg
C:\runtmp\_mei23602\_tcl_data\msgs\gv.msg
C:\runtmp\_mei23602\_tcl_data\msgs\gv_gb.msg
C:\runtmp\_mei23602\_tcl_data\msgs\he.msg
C:\runtmp\_mei23602\_tcl_data\msgs\hi.msg
C:\runtmp\_mei23602\_tcl_data\msgs\hi_in.msg
C:\runtmp\_mei23602\_tcl_data\msgs\hr.msg
C:\runtmp\_mei23602\_tcl_data\msgs\hu.msg
C:\runtmp\_mei23602\_tcl_data\msgs\id.msg
C:\runtmp\_mei23602\_tcl_data\msgs\id_id.msg
C:\runtmp\_mei23602\_tcl_data\msgs\is.msg
C:\runtmp\_mei23602\_tcl_data\msgs\it.msg
C:\runtmp\_mei23602\_tcl_data\msgs\it_ch.msg
C:\runtmp\_mei23602\_tcl_data\msgs\ja.msg
C:\runtmp\_mei23602\_tcl_data\msgs\kl.msg
C:\runtmp\_mei23602\_tcl_data\msgs\kl_gl.msg
C:\runtmp\_mei23602\_tcl_data\msgs\ko.msg
C:\runtmp\_mei23602\_tcl_data\msgs\ko_kr.msg
C:\runtmp\_mei23602\_tcl_data\msgs\kok.msg
C:\runtmp\_mei23602\_tcl_data\msgs\kok_in.msg
C:\runtmp\_mei23602\_tcl_data\msgs\kw.msg
C:\runtmp\_mei23602\_tcl_data\msgs\kw_gb.msg
C:\runtmp\_mei23602\_tcl_data\msgs\lt.msg
C:\runtmp\_mei23602\_tcl_data\msgs\lv.msg
C:\runtmp\_mei23602\_tcl_data\msgs\mk.msg
C:\runtmp\_mei23602\_tcl_data\msgs\mr.msg
C:\runtmp\_mei23602\_tcl_data\msgs\mr_in.msg
C:\runtmp\_mei23602\_tcl_data\msgs\ms.msg
C:\runtmp\_mei23602\_tcl_data\msgs\ms_my.msg
C:\runtmp\_mei23602\_tcl_data\msgs\mt.msg
C:\runtmp\_mei23602\_tcl_data\msgs\nb.msg
C:\runtmp\_mei23602\_tcl_data\msgs\nl.msg
C:\runtmp\_mei23602\_tcl_data\msgs\nl_be.msg
C:\runtmp\_mei23602\_tcl_data\msgs\nn.msg
C:\runtmp\_mei23602\_tcl_data\msgs\pl.msg
C:\runtmp\_mei23602\_tcl_data\msgs\pt.msg
C:\runtmp\_mei23602\_tcl_data\msgs\pt_br.msg
C:\runtmp\_mei23602\_tcl_data\msgs\ro.msg
C:\runtmp\_mei23602\_tcl_data\msgs\ru.msg
C:\runtmp\_mei23602\_tcl_data\msgs\ru_ua.msg
C:\runtmp\_mei23602\_tcl_data\msgs\sh.msg
C:\runtmp\_mei23602\_tcl_data\msgs\sk.msg
C:\runtmp\_mei23602\_tcl_data\msgs\sl.msg
C:\runtmp\_mei23602\_tcl_data\msgs\sq.msg
C:\runtmp\_mei23602\_tcl_data\msgs\sr.msg
C:\runtmp\_mei23602\_tcl_data\msgs\sv.msg
C:\runtmp\_mei23602\_tcl_data\msgs\sw.msg
C:\runtmp\_mei23602\_tcl_data\msgs\ta.msg
C:\runtmp\_mei23602\_tcl_data\msgs\ta_in.msg
C:\runtmp\_mei23602\_tcl_data\msgs\te.msg
C:\runtmp\_mei23602\_tcl_data\msgs\te_in.msg
C:\runtmp\_mei23602\_tcl_data\msgs\th.msg
C:\runtmp\_mei23602\_tcl_data\msgs\tr.msg
C:\runtmp\_mei23602\_tcl_data\msgs\uk.msg
C:\runtmp\_mei23602\_tcl_data\msgs\vi.msg
C:\runtmp\_mei23602\_tcl_data\msgs\zh.msg
C:\runtmp\_mei23602\_tcl_data\msgs\zh_cn.msg
C:\runtmp\_mei23602\_tcl_data\msgs\zh_hk.msg
C:\runtmp\_mei23602\_tcl_data\msgs\zh_sg.msg
C:\runtmp\_mei23602\_tcl_data\msgs\zh_tw.msg
C:\runtmp\_mei23602\_tcl_data\opt0.4\optparse.tcl
C:\runtmp\_mei23602\_tcl_data\opt0.4\pkgindex.tcl
C:\runtmp\_mei23602\_tcl_data\package.tcl
C:\runtmp\_mei23602\_tcl_data\parray.tcl
C:\runtmp\_mei23602\_tcl_data\safe.tcl
C:\runtmp\_mei23602\_tcl_data\tclindex
C:\runtmp\_mei23602\_tcl_data\tm.tcl
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\abidjan
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\accra
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\addis_ababa
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\algiers
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\asmara
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\asmera
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\bamako
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\bangui
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\banjul
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\bissau
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\blantyre
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\brazzaville
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\bujumbura
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\cairo
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\casablanca
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\ceuta
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\conakry
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\dakar
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\dar_es_salaam
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\djibouti
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\douala
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\el_aaiun
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\freetown
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\gaborone
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\harare
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\johannesburg
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\juba
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\kampala
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\khartoum
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\kigali
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\kinshasa
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\lagos
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\libreville
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\lome
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\luanda
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\lubumbashi
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\lusaka
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\malabo
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\maputo
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\maseru
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\mbabane
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\mogadishu
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\monrovia
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\nairobi
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\ndjamena
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\niamey
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\nouakchott
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\ouagadougou
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\porto-novo
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\sao_tome
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\timbuktu
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\tripoli
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\tunis
C:\runtmp\_mei23602\_tcl_data\tzdata\africa\windhoek
C:\runtmp\_mei23602\_tcl_data\tzdata\america\adak
C:\runtmp\_mei23602\_tcl_data\tzdata\america\anchorage
C:\runtmp\_mei23602\_tcl_data\tzdata\america\anguilla
C:\runtmp\_mei23602\_tcl_data\tzdata\america\antigua
C:\runtmp\_mei23602\_tcl_data\tzdata\america\araguaina
C:\runtmp\_mei23602\_tcl_data\tzdata\america\argentina\buenos_aires
C:\runtmp\_mei23602\_tcl_data\tzdata\america\argentina\catamarca
C:\runtmp\_mei23602\_tcl_data\tzdata\america\argentina\comodrivadavia
C:\runtmp\_mei23602\_tcl_data\tzdata\america\argentina\cordoba
C:\runtmp\_mei23602\_tcl_data\tzdata\america\argentina\jujuy
C:\runtmp\_mei23602\_tcl_data\tzdata\america\argentina\la_rioja
C:\runtmp\_mei23602\_tcl_data\tzdata\america\argentina\mendoza
C:\runtmp\_mei23602\_tcl_data\tzdata\america\argentina\rio_gallegos
C:\runtmp\_mei23602\_tcl_data\tzdata\america\argentina\salta
C:\runtmp\_mei23602\_tcl_data\tzdata\america\argentina\san_juan
C:\runtmp\_mei23602\_tcl_data\tzdata\america\argentina\san_luis
C:\runtmp\_mei23602\_tcl_data\tzdata\america\argentina\tucuman
C:\runtmp\_mei23602\_tcl_data\tzdata\america\argentina\ushuaia
C:\runtmp\_mei23602\_tcl_data\tzdata\america\aruba
C:\runtmp\_mei23602\_tcl_data\tzdata\america\asuncion
C:\runtmp\_mei23602\_tcl_data\tzdata\america\atikokan
C:\runtmp\_mei23602\_tcl_data\tzdata\america\atka
C:\runtmp\_mei23602\_tcl_data\tzdata\america\bahia
C:\runtmp\_mei23602\_tcl_data\tzdata\america\bahia_banderas
C:\runtmp\_mei23602\_tcl_data\tzdata\america\barbados
C:\runtmp\_mei23602\_tcl_data\tzdata\america\belem
C:\runtmp\_mei23602\_tcl_data\tzdata\america\belize
C:\runtmp\_mei23602\_tcl_data\tzdata\america\blanc-sablon
C:\runtmp\_mei23602\_tcl_data\tzdata\america\boa_vista
C:\runtmp\_mei23602\_tcl_data\tzdata\america\bogota
C:\runtmp\_mei23602\_tcl_data\tzdata\america\boise
C:\runtmp\_mei23602\_tcl_data\tzdata\america\buenos_aires
C:\runtmp\_mei23602\_tcl_data\tzdata\america\cambridge_bay
C:\runtmp\_mei23602\_tcl_data\tzdata\america\campo_grande
C:\runtmp\_mei23602\_tcl_data\tzdata\america\cancun
C:\runtmp\_mei23602\_tcl_data\tzdata\america\caracas
C:\runtmp\_mei23602\_tcl_data\tzdata\america\catamarca
C:\runtmp\_mei23602\_tcl_data\tzdata\america\cayenne
C:\runtmp\_mei23602\_tcl_data\tzdata\america\cayman
C:\runtmp\_mei23602\_tcl_data\tzdata\america\chicago
C:\runtmp\_mei23602\_tcl_data\tzdata\america\chihuahua
C:\runtmp\_mei23602\_tcl_data\tzdata\america\ciudad_juarez
C:\runtmp\_mei23602\_tcl_data\tzdata\america\coral_harbour
C:\runtmp\_mei23602\_tcl_data\tzdata\america\cordoba
C:\runtmp\_mei23602\_tcl_data\tzdata\america\costa_rica
C:\runtmp\_mei23602\_tcl_data\tzdata\america\creston
C:\runtmp\_mei23602\_tcl_data\tzdata\america\cuiaba
C:\runtmp\_mei23602\_tcl_data\tzdata\america\curacao
C:\runtmp\_mei23602\_tcl_data\tzdata\america\danmarkshavn
C:\runtmp\_mei23602\_tcl_data\tzdata\america\dawson
C:\runtmp\_mei23602\_tcl_data\tzdata\america\dawson_creek
C:\runtmp\_mei23602\_tcl_data\tzdata\america\denver
C:\runtmp\_mei23602\_tcl_data\tzdata\america\detroit
C:\runtmp\_mei23602\_tcl_data\tzdata\america\dominica
C:\runtmp\_mei23602\_tcl_data\tzdata\america\edmonton
C:\runtmp\_mei23602\_tcl_data\tzdata\america\eirunepe
C:\runtmp\_mei23602\_tcl_data\tzdata\america\el_salvador
C:\runtmp\_mei23602\_tcl_data\tzdata\america\ensenada
C:\runtmp\_mei23602\_tcl_data\tzdata\america\fort_nelson
C:\runtmp\_mei23602\_tcl_data\tzdata\america\fort_wayne
C:\runtmp\_mei23602\_tcl_data\tzdata\america\fortaleza
C:\runtmp\_mei23602\_tcl_data\tzdata\america\glace_bay
C:\runtmp\_mei23602\_tcl_data\tzdata\america\godthab
C:\runtmp\_mei23602\_tcl_data\tzdata\america\goose_bay
C:\runtmp\_mei23602\_tcl_data\tzdata\america\grand_turk
C:\runtmp\_mei23602\_tcl_data\tzdata\america\grenada
C:\runtmp\_mei23602\_tcl_data\tzdata\america\guadeloupe
C:\runtmp\_mei23602\_tcl_data\tzdata\america\guatemala
C:\runtmp\_mei23602\_tcl_data\tzdata\america\guayaquil
C:\runtmp\_mei23602\_tcl_data\tzdata\america\guyana
C:\runtmp\_mei23602\_tcl_data\tzdata\america\halifax
C:\runtmp\_mei23602\_tcl_data\tzdata\america\havana
C:\runtmp\_mei23602\_tcl_data\tzdata\america\hermosillo
C:\runtmp\_mei23602\_tcl_data\tzdata\america\indiana\indianapolis
C:\runtmp\_mei23602\_tcl_data\tzdata\america\indiana\knox
C:\runtmp\_mei23602\_tcl_data\tzdata\america\indiana\marengo
C:\runtmp\_mei23602\_tcl_data\tzdata\america\indiana\petersburg
C:\runtmp\_mei23602\_tcl_data\tzdata\america\indiana\tell_city
C:\runtmp\_mei23602\_tcl_data\tzdata\america\indiana\vevay
C:\runtmp\_mei23602\_tcl_data\tzdata\america\indiana\vincennes
C:\runtmp\_mei23602\_tcl_data\tzdata\america\indiana\winamac
C:\runtmp\_mei23602\_tcl_data\tzdata\america\indianapolis
C:\runtmp\_mei23602\_tcl_data\tzdata\america\inuvik
C:\runtmp\_mei23602\_tcl_data\tzdata\america\iqaluit
C:\runtmp\_mei23602\_tcl_data\tzdata\america\jamaica
C:\runtmp\_mei23602\_tcl_data\tzdata\america\jujuy
C:\runtmp\_mei23602\_tcl_data\tzdata\america\juneau
C:\runtmp\_mei23602\_tcl_data\tzdata\america\kentucky\louisville
C:\runtmp\_mei23602\_tcl_data\tzdata\america\kentucky\monticello
C:\runtmp\_mei23602\_tcl_data\tzdata\america\knox_in
C:\runtmp\_mei23602\_tcl_data\tzdata\america\kralendijk
C:\runtmp\_mei23602\_tcl_data\tzdata\america\la_paz
C:\runtmp\_mei23602\_tcl_data\tzdata\america\lima
C:\runtmp\_mei23602\_tcl_data\tzdata\america\los_angeles
C:\runtmp\_mei23602\_tcl_data\tzdata\america\louisville
C:\runtmp\_mei23602\_tcl_data\tzdata\america\lower_princes
C:\runtmp\_mei23602\_tcl_data\tzdata\america\maceio
C:\runtmp\_mei23602\_tcl_data\tzdata\america\managua
C:\runtmp\_mei23602\_tcl_data\tzdata\america\manaus
C:\runtmp\_mei23602\_tcl_data\tzdata\america\marigot
C:\runtmp\_mei23602\_tcl_data\tzdata\america\martinique
C:\runtmp\_mei23602\_tcl_data\tzdata\america\matamoros
C:\runtmp\_mei23602\_tcl_data\tzdata\america\mazatlan
C:\runtmp\_mei23602\_tcl_data\tzdata\america\mendoza
C:\runtmp\_mei23602\_tcl_data\tzdata\america\menominee
C:\runtmp\_mei23602\_tcl_data\tzdata\america\merida
C:\runtmp\_mei23602\_tcl_data\tzdata\america\metlakatla
C:\runtmp\_mei23602\_tcl_data\tzdata\america\mexico_city
C:\runtmp\_mei23602\_tcl_data\tzdata\america\miquelon
C:\runtmp\_mei23602\_tcl_data\tzdata\america\moncton
C:\runtmp\_mei23602\_tcl_data\tzdata\america\monterrey
C:\runtmp\_mei23602\_tcl_data\tzdata\america\montevideo
C:\runtmp\_mei23602\_tcl_data\tzdata\america\montreal
C:\runtmp\_mei23602\_tcl_data\tzdata\america\montserrat
C:\runtmp\_mei23602\_tcl_data\tzdata\america\nassau
C:\runtmp\_mei23602\_tcl_data\tzdata\america\new_york
C:\runtmp\_mei23602\_tcl_data\tzdata\america\nipigon
C:\runtmp\_mei23602\_tcl_data\tzdata\america\nome
C:\runtmp\_mei23602\_tcl_data\tzdata\america\noronha
C:\runtmp\_mei23602\_tcl_data\tzdata\america\north_dakota\beulah
C:\runtmp\_mei23602\_tcl_data\tzdata\america\north_dakota\center
C:\runtmp\_mei23602\_tcl_data\tzdata\america\north_dakota\new_salem
C:\runtmp\_mei23602\_tcl_data\tzdata\america\nuuk
C:\runtmp\_mei23602\_tcl_data\tzdata\america\ojinaga
C:\runtmp\_mei23602\_tcl_data\tzdata\america\panama
C:\runtmp\_mei23602\_tcl_data\tzdata\america\pangnirtung
C:\runtmp\_mei23602\_tcl_data\tzdata\america\paramaribo
C:\runtmp\_mei23602\_tcl_data\tzdata\america\phoenix
C:\runtmp\_mei23602\_tcl_data\tzdata\america\port-au-prince
C:\runtmp\_mei23602\_tcl_data\tzdata\america\port_of_spain
C:\runtmp\_mei23602\_tcl_data\tzdata\america\porto_acre
C:\runtmp\_mei23602\_tcl_data\tzdata\america\porto_velho
C:\runtmp\_mei23602\_tcl_data\tzdata\america\puerto_rico
C:\runtmp\_mei23602\_tcl_data\tzdata\america\punta_arenas
C:\runtmp\_mei23602\_tcl_data\tzdata\america\rainy_river
C:\runtmp\_mei23602\_tcl_data\tzdata\america\rankin_inlet
C:\runtmp\_mei23602\_tcl_data\tzdata\america\recife
C:\runtmp\_mei23602\_tcl_data\tzdata\america\regina
C:\runtmp\_mei23602\_tcl_data\tzdata\america\resolute
C:\runtmp\_mei23602\_tcl_data\tzdata\america\rio_branco
C:\runtmp\_mei23602\_tcl_data\tzdata\america\rosario
C:\runtmp\_mei23602\_tcl_data\tzdata\america\santa_isabel
C:\runtmp\_mei23602\_tcl_data\tzdata\america\santarem
C:\runtmp\_mei23602\_tcl_data\tzdata\america\santiago
C:\runtmp\_mei23602\_tcl_data\tzdata\america\santo_domingo
C:\runtmp\_mei23602\_tcl_data\tzdata\america\sao_paulo
C:\runtmp\_mei23602\_tcl_data\tzdata\america\scoresbysund
C:\runtmp\_mei23602\_tcl_data\tzdata\america\shiprock
C:\runtmp\_mei23602\_tcl_data\tzdata\america\sitka
C:\runtmp\_mei23602\_tcl_data\tzdata\america\st_barthelemy
C:\runtmp\_mei23602\_tcl_data\tzdata\america\st_johns
C:\runtmp\_mei23602\_tcl_data\tzdata\america\st_kitts
C:\runtmp\_mei23602\_tcl_data\tzdata\america\st_lucia
C:\runtmp\_mei23602\_tcl_data\tzdata\america\st_thomas
C:\runtmp\_mei23602\_tcl_data\tzdata\america\st_vincent
C:\runtmp\_mei23602\_tcl_data\tzdata\america\swift_current
C:\runtmp\_mei23602\_tcl_data\tzdata\america\tegucigalpa
C:\runtmp\_mei23602\_tcl_data\tzdata\america\thule
C:\runtmp\_mei23602\_tcl_data\tzdata\america\thunder_bay
C:\runtmp\_mei23602\_tcl_data\tzdata\america\tijuana
C:\runtmp\_mei23602\_tcl_data\tzdata\america\toronto
C:\runtmp\_mei23602\_tcl_data\tzdata\america\tortola
C:\runtmp\_mei23602\_tcl_data\tzdata\america\vancouver
C:\runtmp\_mei23602\_tcl_data\tzdata\america\virgin
C:\runtmp\_mei23602\_tcl_data\tzdata\america\whitehorse
C:\runtmp\_mei23602\_tcl_data\tzdata\america\winnipeg
C:\runtmp\_mei23602\_tcl_data\tzdata\america\yakutat
C:\runtmp\_mei23602\_tcl_data\tzdata\america\yellowknife
C:\runtmp\_mei23602\_tcl_data\tzdata\antarctica\casey
C:\runtmp\_mei23602\_tcl_data\tzdata\antarctica\davis
C:\runtmp\_mei23602\_tcl_data\tzdata\antarctica\dumontdurville
C:\runtmp\_mei23602\_tcl_data\tzdata\antarctica\macquarie
C:\runtmp\_mei23602\_tcl_data\tzdata\antarctica\mawson
C:\runtmp\_mei23602\_tcl_data\tzdata\antarctica\mcmurdo
C:\runtmp\_mei23602\_tcl_data\tzdata\antarctica\palmer
C:\runtmp\_mei23602\_tcl_data\tzdata\antarctica\rothera
C:\runtmp\_mei23602\_tcl_data\tzdata\antarctica\south_pole
C:\runtmp\_mei23602\_tcl_data\tzdata\antarctica\syowa
C:\runtmp\_mei23602\_tcl_data\tzdata\antarctica\troll
C:\runtmp\_mei23602\_tcl_data\tzdata\antarctica\vostok
C:\runtmp\_mei23602\_tcl_data\tzdata\arctic\longyearbyen
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\aden
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\almaty
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\amman
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\anadyr
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\aqtau
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\aqtobe
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\ashgabat
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\ashkhabad
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\atyrau
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\baghdad
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\bahrain
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\baku
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\bangkok
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\barnaul
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\beirut
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\bishkek
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\brunei
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\calcutta
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\chita
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\choibalsan
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\chongqing
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\chungking
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\colombo
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\dacca
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\damascus
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\dhaka
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\dili
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\dubai
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\dushanbe
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\famagusta
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\gaza
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\harbin
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\hebron
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\ho_chi_minh
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\hong_kong
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\hovd
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\irkutsk
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\istanbul
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\jakarta
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\jayapura
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\jerusalem
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\kabul
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\kamchatka
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\karachi
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\kashgar
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\kathmandu
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\katmandu
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\khandyga
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\kolkata
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\krasnoyarsk
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\kuala_lumpur
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\kuching
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\kuwait
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\macao
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\macau
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\magadan
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\makassar
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\manila
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\muscat
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\nicosia
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\novokuznetsk
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\novosibirsk
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\omsk
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\oral
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\phnom_penh
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\pontianak
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\pyongyang
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\qatar
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\qostanay
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\qyzylorda
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\rangoon
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\riyadh
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\saigon
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\sakhalin
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\samarkand
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\seoul
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\shanghai
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\singapore
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\srednekolymsk
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\taipei
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\tashkent
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\tbilisi
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\tehran
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\tel_aviv
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\thimbu
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\thimphu
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\tokyo
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\tomsk
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\ujung_pandang
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\ulaanbaatar
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\ulan_bator
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\urumqi
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\ust-nera
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\vientiane
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\vladivostok
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\yakutsk
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\yangon
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\yekaterinburg
C:\runtmp\_mei23602\_tcl_data\tzdata\asia\yerevan
C:\runtmp\_mei23602\_tcl_data\tzdata\atlantic\azores
C:\runtmp\_mei23602\_tcl_data\tzdata\atlantic\bermuda
C:\runtmp\_mei23602\_tcl_data\tzdata\atlantic\canary
C:\runtmp\_mei23602\_tcl_data\tzdata\atlantic\cape_verde
C:\runtmp\_mei23602\_tcl_data\tzdata\atlantic\faeroe
C:\runtmp\_mei23602\_tcl_data\tzdata\atlantic\faroe
C:\runtmp\_mei23602\_tcl_data\tzdata\atlantic\jan_mayen
C:\runtmp\_mei23602\_tcl_data\tzdata\atlantic\madeira
C:\runtmp\_mei23602\_tcl_data\tzdata\atlantic\reykjavik
C:\runtmp\_mei23602\_tcl_data\tzdata\atlantic\south_georgia
C:\runtmp\_mei23602\_tcl_data\tzdata\atlantic\st_helena
C:\runtmp\_mei23602\_tcl_data\tzdata\atlantic\stanley
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\act
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\adelaide
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\brisbane
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\broken_hill
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\canberra
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\currie
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\darwin
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\eucla
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\hobart
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\lhi
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\lindeman
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\lord_howe
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\melbourne
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\nsw
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\north
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\perth
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\queensland
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\south
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\sydney
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\tasmania
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\victoria
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\west
C:\runtmp\_mei23602\_tcl_data\tzdata\australia\yancowinna
C:\runtmp\_mei23602\_tcl_data\tzdata\brazil\acre
C:\runtmp\_mei23602\_tcl_data\tzdata\brazil\denoronha
C:\runtmp\_mei23602\_tcl_data\tzdata\brazil\east
C:\runtmp\_mei23602\_tcl_data\tzdata\brazil\west
C:\runtmp\_mei23602\_tcl_data\tzdata\cet
C:\runtmp\_mei23602\_tcl_data\tzdata\cst6cdt
C:\runtmp\_mei23602\_tcl_data\tzdata\canada\atlantic
C:\runtmp\_mei23602\_tcl_data\tzdata\canada\central
C:\runtmp\_mei23602\_tcl_data\tzdata\canada\eastern
C:\runtmp\_mei23602\_tcl_data\tzdata\canada\mountain
C:\runtmp\_mei23602\_tcl_data\tzdata\canada\newfoundland
C:\runtmp\_mei23602\_tcl_data\tzdata\canada\pacific
C:\runtmp\_mei23602\_tcl_data\tzdata\canada\saskatchewan
C:\runtmp\_mei23602\_tcl_data\tzdata\canada\yukon
C:\runtmp\_mei23602\_tcl_data\tzdata\chile\continental
C:\runtmp\_mei23602\_tcl_data\tzdata\chile\easterisland
C:\runtmp\_mei23602\_tcl_data\tzdata\cuba
C:\runtmp\_mei23602\_tcl_data\tzdata\eet
C:\runtmp\_mei23602\_tcl_data\tzdata\est
C:\runtmp\_mei23602\_tcl_data\tzdata\est5edt
C:\runtmp\_mei23602\_tcl_data\tzdata\egypt
C:\runtmp\_mei23602\_tcl_data\tzdata\eire
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt+0
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt+1
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt+10
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt+11
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt+12
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt+2
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt+3
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt+4
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt+5
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt+6
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt+7
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt+8
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt+9
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt-0
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt-1
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt-10
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt-11
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt-12
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt-13
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt-14
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt-2
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt-3
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt-4
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt-5
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt-6
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt-7
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt-8
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt-9
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\gmt0
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\greenwich
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\uct
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\utc
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\universal
C:\runtmp\_mei23602\_tcl_data\tzdata\etc\zulu
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\amsterdam
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\andorra
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\astrakhan
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\athens
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\belfast
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\belgrade
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\berlin
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\bratislava
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\brussels
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\bucharest
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\budapest
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\busingen
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\chisinau
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\copenhagen
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\dublin
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\gibraltar
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\guernsey
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\helsinki
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\isle_of_man
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\istanbul
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\jersey
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\kaliningrad
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\kiev
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\kirov
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\kyiv
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\lisbon
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\ljubljana
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\london
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\luxembourg
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\madrid
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\malta
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\mariehamn
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\minsk
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\monaco
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\moscow
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\nicosia
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\oslo
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\paris
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\podgorica
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\prague
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\riga
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\rome
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\samara
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\san_marino
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\sarajevo
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\saratov
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\simferopol
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\skopje
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\sofia
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\stockholm
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\tallinn
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\tirane
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\tiraspol
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\ulyanovsk
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\uzhgorod
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\vaduz
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\vatican
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\vienna
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\vilnius
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\volgograd
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\warsaw
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\zagreb
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\zaporozhye
C:\runtmp\_mei23602\_tcl_data\tzdata\europe\zurich
C:\runtmp\_mei23602\_tcl_data\tzdata\gb
C:\runtmp\_mei23602\_tcl_data\tzdata\gb-eire
C:\runtmp\_mei23602\_tcl_data\tzdata\gmt
C:\runtmp\_mei23602\_tcl_data\tzdata\gmt+0
C:\runtmp\_mei23602\_tcl_data\tzdata\gmt-0
C:\runtmp\_mei23602\_tcl_data\tzdata\gmt0
C:\runtmp\_mei23602\_tcl_data\tzdata\greenwich
C:\runtmp\_mei23602\_tcl_data\tzdata\hst
C:\runtmp\_mei23602\_tcl_data\tzdata\hongkong
C:\runtmp\_mei23602\_tcl_data\tzdata\iceland
C:\runtmp\_mei23602\_tcl_data\tzdata\indian\antananarivo
C:\runtmp\_mei23602\_tcl_data\tzdata\indian\chagos
C:\runtmp\_mei23602\_tcl_data\tzdata\indian\christmas
C:\runtmp\_mei23602\_tcl_data\tzdata\indian\cocos
C:\runtmp\_mei23602\_tcl_data\tzdata\indian\comoro
C:\runtmp\_mei23602\_tcl_data\tzdata\indian\kerguelen
C:\runtmp\_mei23602\_tcl_data\tzdata\indian\mahe
C:\runtmp\_mei23602\_tcl_data\tzdata\indian\maldives
C:\runtmp\_mei23602\_tcl_data\tzdata\indian\mauritius
C:\runtmp\_mei23602\_tcl_data\tzdata\indian\mayotte
C:\runtmp\_mei23602\_tcl_data\tzdata\indian\reunion
C:\runtmp\_mei23602\_tcl_data\tzdata\iran
C:\runtmp\_mei23602\_tcl_data\tzdata\israel
C:\runtmp\_mei23602\_tcl_data\tzdata\jamaica
C:\runtmp\_mei23602\_tcl_data\tzdata\japan
C:\runtmp\_mei23602\_tcl_data\tzdata\kwajalein
C:\runtmp\_mei23602\_tcl_data\tzdata\libya
C:\runtmp\_mei23602\_tcl_data\tzdata\met
C:\runtmp\_mei23602\_tcl_data\tzdata\mst
C:\runtmp\_mei23602\_tcl_data\tzdata\mst7mdt
C:\runtmp\_mei23602\_tcl_data\tzdata\mexico\bajanorte
C:\runtmp\_mei23602\_tcl_data\tzdata\mexico\bajasur
C:\runtmp\_mei23602\_tcl_data\tzdata\mexico\general
C:\runtmp\_mei23602\_tcl_data\tzdata\nz
C:\runtmp\_mei23602\_tcl_data\tzdata\nz-chat
C:\runtmp\_mei23602\_tcl_data\tzdata\navajo
C:\runtmp\_mei23602\_tcl_data\tzdata\prc
C:\runtmp\_mei23602\_tcl_data\tzdata\pst8pdt
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\apia
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\auckland
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\bougainville
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\chatham
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\chuuk
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\easter
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\efate
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\enderbury
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\fakaofo
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\fiji
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\funafuti
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\galapagos
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\gambier
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\guadalcanal
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\guam
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\honolulu
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\johnston
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\kanton
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\kiritimati
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\kosrae
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\kwajalein
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\majuro
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\marquesas
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\midway
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\nauru
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\niue
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\norfolk
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\noumea
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\pago_pago
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\palau
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\pitcairn
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\pohnpei
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\ponape
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\port_moresby
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\rarotonga
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\saipan
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\samoa
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\tahiti
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\tarawa
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\tongatapu
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\truk
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\wake
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\wallis
C:\runtmp\_mei23602\_tcl_data\tzdata\pacific\yap
C:\runtmp\_mei23602\_tcl_data\tzdata\poland
C:\runtmp\_mei23602\_tcl_data\tzdata\portugal
C:\runtmp\_mei23602\_tcl_data\tzdata\roc
C:\runtmp\_mei23602\_tcl_data\tzdata\rok
C:\runtmp\_mei23602\_tcl_data\tzdata\singapore
C:\runtmp\_mei23602\_tcl_data\tzdata\systemv\ast4
C:\runtmp\_mei23602\_tcl_data\tzdata\systemv\ast4adt
C:\runtmp\_mei23602\_tcl_data\tzdata\systemv\cst6
C:\runtmp\_mei23602\_tcl_data\tzdata\systemv\cst6cdt
C:\runtmp\_mei23602\_tcl_data\tzdata\systemv\est5
C:\runtmp\_mei23602\_tcl_data\tzdata\systemv\est5edt
C:\runtmp\_mei23602\_tcl_data\tzdata\systemv\hst10
C:\runtmp\_mei23602\_tcl_data\tzdata\systemv\mst7
C:\runtmp\_mei23602\_tcl_data\tzdata\systemv\mst7mdt
C:\runtmp\_mei23602\_tcl_data\tzdata\systemv\pst8
C:\runtmp\_mei23602\_tcl_data\tzdata\systemv\pst8pdt
C:\runtmp\_mei23602\_tcl_data\tzdata\systemv\yst9
C:\runtmp\_mei23602\_tcl_data\tzdata\systemv\yst9ydt
C:\runtmp\_mei23602\_tcl_data\tzdata\turkey
C:\runtmp\_mei23602\_tcl_data\tzdata\uct
C:\runtmp\_mei23602\_tcl_data\tzdata\us\alaska
C:\runtmp\_mei23602\_tcl_data\tzdata\us\aleutian
C:\runtmp\_mei23602\_tcl_data\tzdata\us\arizona
C:\runtmp\_mei23602\_tcl_data\tzdata\us\central
C:\runtmp\_mei23602\_tcl_data\tzdata\us\east-indiana
C:\runtmp\_mei23602\_tcl_data\tzdata\us\eastern
C:\runtmp\_mei23602\_tcl_data\tzdata\us\hawaii
C:\runtmp\_mei23602\_tcl_data\tzdata\us\indiana-starke
C:\runtmp\_mei23602\_tcl_data\tzdata\us\michigan
C:\runtmp\_mei23602\_tcl_data\tzdata\us\mountain
C:\runtmp\_mei23602\_tcl_data\tzdata\us\pacific
C:\runtmp\_mei23602\_tcl_data\tzdata\us\samoa
C:\runtmp\_mei23602\_tcl_data\tzdata\utc
C:\runtmp\_mei23602\_tcl_data\tzdata\universal
C:\runtmp\_mei23602\_tcl_data\tzdata\w-su
C:\runtmp\_mei23602\_tcl_data\tzdata\wet
C:\runtmp\_mei23602\_tcl_data\tzdata\zulu
C:\runtmp\_mei23602\_tcl_data\word.tcl
C:\runtmp\_mei23602\_tk_data\bgerror.tcl
C:\runtmp\_mei23602\_tk_data\button.tcl
C:\runtmp\_mei23602\_tk_data\choosedir.tcl
C:\runtmp\_mei23602\_tk_data\clrpick.tcl
C:\runtmp\_mei23602\_tk_data\comdlg.tcl
C:\runtmp\_mei23602\_tk_data\console.tcl
C:\runtmp\_mei23602\_tk_data\dialog.tcl
C:\runtmp\_mei23602\_tk_data\entry.tcl
C:\runtmp\_mei23602\_tk_data\focus.tcl
C:\runtmp\_mei23602\_tk_data\fontchooser.tcl
C:\runtmp\_mei23602\_tk_data\iconlist.tcl
C:\runtmp\_mei23602\_tk_data\icons.tcl
C:\runtmp\_mei23602\_tk_data\images\readme
C:\runtmp\_mei23602\_tk_data\images\logo.eps
C:\runtmp\_mei23602\_tk_data\images\logo100.gif
C:\runtmp\_mei23602\_tk_data\images\logo64.gif
C:\runtmp\_mei23602\_tk_data\images\logolarge.gif
C:\runtmp\_mei23602\_tk_data\images\logomed.gif
C:\runtmp\_mei23602\_tk_data\images\pwrdlogo.eps
C:\runtmp\_mei23602\_tk_data\images\pwrdlogo100.gif
C:\runtmp\_mei23602\_tk_data\images\pwrdlogo150.gif
C:\runtmp\_mei23602\_tk_data\images\pwrdlogo175.gif
C:\runtmp\_mei23602\_tk_data\images\pwrdlogo200.gif
C:\runtmp\_mei23602\_tk_data\images\pwrdlogo75.gif
C:\runtmp\_mei23602\_tk_data\images\tai-ku.gif
C:\runtmp\_mei23602\_tk_data\license.terms
C:\runtmp\_mei23602\_tk_data\listbox.tcl
C:\runtmp\_mei23602\_tk_data\megawidget.tcl
C:\runtmp\_mei23602\_tk_data\menu.tcl
C:\runtmp\_mei23602\_tk_data\mkpsenc.tcl
C:\runtmp\_mei23602\_tk_data\msgbox.tcl
C:\runtmp\_mei23602\_tk_data\msgs\cs.msg
C:\runtmp\_mei23602\_tk_data\msgs\da.msg
C:\runtmp\_mei23602\_tk_data\msgs\de.msg
C:\runtmp\_mei23602\_tk_data\msgs\el.msg
C:\runtmp\_mei23602\_tk_data\msgs\en.msg
C:\runtmp\_mei23602\_tk_data\msgs\en_gb.msg
C:\runtmp\_mei23602\_tk_data\msgs\eo.msg
C:\runtmp\_mei23602\_tk_data\msgs\es.msg
C:\runtmp\_mei23602\_tk_data\msgs\fi.msg
C:\runtmp\_mei23602\_tk_data\msgs\fr.msg
C:\runtmp\_mei23602\_tk_data\msgs\hu.msg
C:\runtmp\_mei23602\_tk_data\msgs\it.msg
C:\runtmp\_mei23602\_tk_data\msgs\nl.msg
C:\runtmp\_mei23602\_tk_data\msgs\pl.msg
C:\runtmp\_mei23602\_tk_data\msgs\pt.msg
C:\runtmp\_mei23602\_tk_data\msgs\ru.msg
C:\runtmp\_mei23602\_tk_data\msgs\sv.msg
C:\runtmp\_mei23602\_tk_data\msgs\zh_cn.msg
C:\runtmp\_mei23602\_tk_data\obsolete.tcl
C:\runtmp\_mei23602\_tk_data\optmenu.tcl
C:\runtmp\_mei23602\_tk_data\palette.tcl
C:\runtmp\_mei23602\_tk_data\panedwindow.tcl
C:\runtmp\_mei23602\_tk_data\pkgindex.tcl
C:\runtmp\_mei23602\_tk_data\safetk.tcl
C:\runtmp\_mei23602\_tk_data\scale.tcl
C:\runtmp\_mei23602\_tk_data\scrlbar.tcl
C:\runtmp\_mei23602\_tk_data\spinbox.tcl
C:\runtmp\_mei23602\_tk_data\tclindex
C:\runtmp\_mei23602\_tk_data\tearoff.tcl
C:\runtmp\_mei23602\_tk_data\text.tcl
C:\runtmp\_mei23602\_tk_data\tk.tcl
C:\runtmp\_mei23602\_tk_data\tkfbox.tcl
C:\runtmp\_mei23602\_tk_data\ttk\alttheme.tcl
C:\runtmp\_mei23602\_tk_data\ttk\aquatheme.tcl
C:\runtmp\_mei23602\_tk_data\ttk\button.tcl
C:\runtmp\_mei23602\_tk_data\ttk\clamtheme.tcl
C:\runtmp\_mei23602\_tk_data\ttk\classictheme.tcl
C:\runtmp\_mei23602\_tk_data\ttk\combobox.tcl
C:\runtmp\_mei23602\_tk_data\ttk\cursors.tcl
C:\runtmp\_mei23602\_tk_data\ttk\defaults.tcl
C:\runtmp\_mei23602\_tk_data\ttk\entry.tcl
C:\runtmp\_mei23602\_tk_data\ttk\fonts.tcl
C:\runtmp\_mei23602\_tk_data\ttk\menubutton.tcl
C:\runtmp\_mei23602\_tk_data\ttk\notebook.tcl
C:\runtmp\_mei23602\_tk_data\ttk\panedwindow.tcl
C:\runtmp\_mei23602\_tk_data\ttk\progress.tcl
C:\runtmp\_mei23602\_tk_data\ttk\scale.tcl
C:\runtmp\_mei23602\_tk_data\ttk\scrollbar.tcl
C:\runtmp\_mei23602\_tk_data\ttk\sizegrip.tcl
C:\runtmp\_mei23602\_tk_data\ttk\spinbox.tcl
C:\runtmp\_mei23602\_tk_data\ttk\treeview.tcl
C:\runtmp\_mei23602\_tk_data\ttk\ttk.tcl
C:\runtmp\_mei23602\_tk_data\ttk\utils.tcl
C:\runtmp\_mei23602\_tk_data\ttk\vistatheme.tcl
C:\runtmp\_mei23602\_tk_data\ttk\wintheme.tcl
C:\runtmp\_mei23602\_tk_data\ttk\xptheme.tcl
C:\runtmp\_mei23602\_tk_data\unsupported.tcl
C:\runtmp\_mei23602\_tk_data\xmfbox.tcl
C:\runtmp\_mei23602\_tkinter.pyd
C:\runtmp\_mei23602\_zstd.pyd
C:\runtmp\_mei23602\base_library.zip
C:\runtmp\_mei23602\cryptography-46.0.5.dist-info\installer
C:\runtmp\_mei23602\cryptography-46.0.5.dist-info\metadata
C:\runtmp\_mei23602\cryptography-46.0.5.dist-info\record
C:\runtmp\_mei23602\cryptography-46.0.5.dist-info\wheel
C:\runtmp\_mei23602\cryptography-46.0.5.dist-info\licenses\license
C:\runtmp\_mei23602\cryptography-46.0.5.dist-info\licenses\license.apache
C:\runtmp\_mei23602\cryptography-46.0.5.dist-info\licenses\license.bsd
C:\runtmp\_mei23602\cryptography\hazmat\bindings\_rust.pyd
C:\runtmp\_mei23602\kevin.ico
C:\runtmp\_mei23602\libcrypto-3.dll
C:\runtmp\_mei23602\libssl-3.dll
C:\runtmp\_mei23602\python3.dll
C:\runtmp\_mei23602\python314.dll
C:\runtmp\_mei23602\select.pyd
C:\runtmp\_mei23602\tcl86t.dll
C:\runtmp\_mei23602\tcl8\8.4\platform-1.0.19.tm
C:\runtmp\_mei23602\tcl8\8.4\platform\shell-1.1.4.tm
C:\runtmp\_mei23602\tcl8\8.5\msgcat-1.6.1.tm
C:\runtmp\_mei23602\tcl8\8.5\tcltest-2.5.8.tm
C:\runtmp\_mei23602\tcl8\8.6\http-2.9.8.tm
C:\runtmp\_mei23602\tk86t.dll
C:\runtmp\_mei23602\unicodedata.pyd
C:\runtmp\_mei23602\zlib1.dll

Sets the 'hidden' attribute to the following files

<Full path to file>

Modifies the following files

%HOMEPATH%\desktop\advice_process.htm
%HOMEPATH%\desktop\archer.avi
%HOMEPATH%\desktop\coffee.bmp
%HOMEPATH%\desktop\dashborder_120.bmp
%HOMEPATH%\desktop\dashborder_144.bmp
%HOMEPATH%\desktop\dial.bmp
%HOMEPATH%\desktop\dialmap.bmp
%HOMEPATH%\desktop\google chrome.lnk
%HOMEPATH%\desktop\telegram.lnk

Modifies user data files (Trojan.Encoder).

Changes user data files extensions (Trojan.Encoder).

Miscellaneous

Restarts the analyzed sample

Executes the following

'<SYSTEM32>\attrib.exe' +H +S +R <Full path to file>

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial