Trojan.MulDrop38.22911

Technical Information

Malicious functions

To complicate detection of its presence in the operating system,

adds antivirus exclusion:

'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' Set-MpPreference -DisableIntrusionPreventionSystem $true -DisableIOAVProtection $true -DisableRealtimeMonitoring $true -DisableScriptScanning $true -EnableControlledFolderAccess Disabled -Enabl...
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -inputformat none -outputformat none -NonInteractive -Command "Add-MpPreference -ExclusionPath %HOMEPATH%\AppData"
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -inputformat none -outputformat none -NonInteractive -Command "Add-MpPreference -ExclusionPath %HOMEPATH%\Local"

Modifies file system

Creates the following files

%TEMP%\_mei31162\81d243bd2c585b0f4821__mypyc.cp314-win_amd64.pyd
%TEMP%\_mei31162\pil\_avif.cp314-win_amd64.pyd
%TEMP%\_mei31162\pil\_imaging.cp314-win_amd64.pyd
%TEMP%\_mei31162\pil\_imagingcms.cp314-win_amd64.pyd
%TEMP%\_mei31162\pil\_imagingmath.cp314-win_amd64.pyd
%TEMP%\_mei31162\pil\_imagingtk.cp314-win_amd64.pyd
%TEMP%\_mei31162\pil\_webp.cp314-win_amd64.pyd
%TEMP%\_mei31162\vcruntime140.dll
%TEMP%\_mei31162\vcruntime140_1.dll
%TEMP%\_mei31162\_asyncio.pyd
%TEMP%\_mei31162\_bz2.pyd
%TEMP%\_mei31162\_cffi_backend.cp314-win_amd64.pyd
%TEMP%\_mei31162\_ctypes.pyd
%TEMP%\_mei31162\_decimal.pyd
%TEMP%\_mei31162\_elementtree.pyd
%TEMP%\_mei31162\_hashlib.pyd
%TEMP%\_mei31162\_lzma.pyd
%TEMP%\_mei31162\_multiprocessing.pyd
%TEMP%\_mei31162\_overlapped.pyd
%TEMP%\_mei31162\_queue.pyd
%TEMP%\_mei31162\_socket.pyd
%TEMP%\_mei31162\_ssl.pyd
%TEMP%\_mei31162\_uuid.pyd
%TEMP%\_mei31162\_wmi.pyd
%TEMP%\_mei31162\_zstd.pyd
%TEMP%\_mei31162\base_library.zip
%TEMP%\_mei31162\bcrypt\_bcrypt.pyd
%TEMP%\_mei31162\certifi\cacert.pem
%TEMP%\_mei31162\charset_normalizer\cd.cp314-win_amd64.pyd
%TEMP%\_mei31162\charset_normalizer\md.cp314-win_amd64.pyd
%TEMP%\_mei31162\cryptography-48.0.0.dist-info\installer
%TEMP%\_mei31162\cryptography-48.0.0.dist-info\metadata
%TEMP%\_mei31162\cryptography-48.0.0.dist-info\record
%TEMP%\_mei31162\cryptography-48.0.0.dist-info\wheel
%TEMP%\_mei31162\cryptography-48.0.0.dist-info\licenses\license
%TEMP%\_mei31162\cryptography-48.0.0.dist-info\licenses\license.apache
%TEMP%\_mei31162\cryptography-48.0.0.dist-info\licenses\license.bsd
%TEMP%\_mei31162\cryptography-48.0.0.dist-info\sboms\cryptography-rust.cyclonedx.json
%TEMP%\_mei31162\cryptography-48.0.0.dist-info\sboms\sbom.json
%TEMP%\_mei31162\cryptography\hazmat\bindings\_rust.pyd
%TEMP%\_mei31162\cv2\__init__.py
%TEMP%\_mei31162\cv2\config-3.py
%TEMP%\_mei31162\cv2\config.py
%TEMP%\_mei31162\cv2\cv2.pyd
%TEMP%\_mei31162\cv2\data\__init__.py
%TEMP%\_mei31162\cv2\gapi\__init__.py
%TEMP%\_mei31162\cv2\load_config_py3.py
%TEMP%\_mei31162\cv2\mat_wrapper\__init__.py
%TEMP%\_mei31162\cv2\misc\__init__.py
%TEMP%\_mei31162\cv2\misc\version.py
%TEMP%\_mei31162\cv2\opencv_videoio_ffmpeg4130_64.dll
%TEMP%\_mei31162\cv2\typing\__init__.py
%TEMP%\_mei31162\cv2\utils\__init__.py
%TEMP%\_mei31162\cv2\version.py
%TEMP%\_mei31162\libcrypto-3.dll
%TEMP%\_mei31162\libffi-8.dll
%TEMP%\_mei31162\libssl-3.dll
%TEMP%\_mei31162\numpy-2.4.4.dist-info\delvewheel
%TEMP%\_mei31162\numpy-2.4.4.dist-info\installer
%TEMP%\_mei31162\numpy-2.4.4.dist-info\metadata
%TEMP%\_mei31162\numpy-2.4.4.dist-info\record
%TEMP%\_mei31162\numpy-2.4.4.dist-info\wheel
%TEMP%\_mei31162\numpy-2.4.4.dist-info\entry_points.txt
%TEMP%\_mei31162\numpy-2.4.4.dist-info\licenses\license.txt
%TEMP%\_mei31162\numpy-2.4.4.dist-info\licenses\numpy\_core\include\numpy\libdivide\license.txt
%TEMP%\_mei31162\numpy-2.4.4.dist-info\licenses\numpy\_core\src\common\pythoncapi-compat\copying
%TEMP%\_mei31162\numpy-2.4.4.dist-info\licenses\numpy\_core\src\highway\license
%TEMP%\_mei31162\numpy-2.4.4.dist-info\licenses\numpy\_core\src\multiarray\dragon4_license.txt
%TEMP%\_mei31162\numpy-2.4.4.dist-info\licenses\numpy\_core\src\npysort\x86-simd-sort\license.md
%TEMP%\_mei31162\numpy-2.4.4.dist-info\licenses\numpy\_core\src\umath\svml\license
%TEMP%\_mei31162\numpy-2.4.4.dist-info\licenses\numpy\fft\pocketfft\license.md
%TEMP%\_mei31162\numpy-2.4.4.dist-info\licenses\numpy\linalg\lapack_lite\license.txt
%TEMP%\_mei31162\numpy-2.4.4.dist-info\licenses\numpy\ma\license
%TEMP%\_mei31162\numpy-2.4.4.dist-info\licenses\numpy\random\license.md
%TEMP%\_mei31162\numpy-2.4.4.dist-info\licenses\numpy\random\src\distributions\license.md
%TEMP%\_mei31162\numpy-2.4.4.dist-info\licenses\numpy\random\src\mt19937\license.md
%TEMP%\_mei31162\numpy-2.4.4.dist-info\licenses\numpy\random\src\pcg64\license.md
%TEMP%\_mei31162\numpy-2.4.4.dist-info\licenses\numpy\random\src\philox\license.md
%TEMP%\_mei31162\numpy-2.4.4.dist-info\licenses\numpy\random\src\sfc64\license.md
%TEMP%\_mei31162\numpy-2.4.4.dist-info\licenses\numpy\random\src\splitmix64\license.md
%TEMP%\_mei31162\numpy.libs\libscipy_openblas64_-63c857e738469261263c764a36be9436.dll
%TEMP%\_mei31162\numpy.libs\msvcp140-a4c2229bdc2a2a630acdc095b4d86008.dll
%TEMP%\_mei31162\numpy\_core\_multiarray_tests.cp314-win_amd64.pyd
%TEMP%\_mei31162\numpy\_core\_multiarray_umath.cp314-win_amd64.pyd
%TEMP%\_mei31162\numpy\fft\_pocketfft_umath.cp314-win_amd64.pyd
%TEMP%\_mei31162\numpy\linalg\_umath_linalg.cp314-win_amd64.pyd
%TEMP%\_mei31162\numpy\random\_bounded_integers.cp314-win_amd64.pyd
%TEMP%\_mei31162\numpy\random\_common.cp314-win_amd64.pyd
%TEMP%\_mei31162\numpy\random\_generator.cp314-win_amd64.pyd
%TEMP%\_mei31162\numpy\random\_mt19937.cp314-win_amd64.pyd
%TEMP%\_mei31162\numpy\random\_pcg64.cp314-win_amd64.pyd
%TEMP%\_mei31162\numpy\random\_philox.cp314-win_amd64.pyd
%TEMP%\_mei31162\numpy\random\_sfc64.cp314-win_amd64.pyd
%TEMP%\_mei31162\numpy\random\bit_generator.cp314-win_amd64.pyd
%TEMP%\_mei31162\numpy\random\mtrand.cp314-win_amd64.pyd
%TEMP%\_mei31162\psutil\_psutil_windows.pyd
%TEMP%\_mei31162\pycountry-26.2.16.dist-info\installer
%TEMP%\_mei31162\pycountry-26.2.16.dist-info\metadata
%TEMP%\_mei31162\pycountry-26.2.16.dist-info\record
%TEMP%\_mei31162\pycountry-26.2.16.dist-info\wheel
%TEMP%\_mei31162\pycountry-26.2.16.dist-info\licenses\license.txt
%TEMP%\_mei31162\pycountry\copyright.txt
%TEMP%\_mei31162\pycountry\databases\iso15924.json
%TEMP%\_mei31162\pycountry\databases\iso3166-1.json
%TEMP%\_mei31162\pycountry\databases\iso3166-2.json
%TEMP%\_mei31162\pycountry\databases\iso3166-3.json
%TEMP%\_mei31162\pycountry\databases\iso4217.json
%TEMP%\_mei31162\pycountry\databases\iso639-3.json
%TEMP%\_mei31162\pycountry\databases\iso639-5.json
%TEMP%\_mei31162\pycountry\locales\ab\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ab\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\ace\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ach\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\af\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\af\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\af\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\ak\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\am\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\am\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\am\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\an\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ar\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\ar\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ar\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\ar\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\ar\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\as\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\as\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\ast\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\ast\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ast\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\ast\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\ast\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\ast\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\ast\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\ay\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\az\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\az\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\az\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\az\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\ba\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\ba\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ba\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\ba\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\ba\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\ba\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\ba\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\bar\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\be\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\be\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\be\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\be\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\be\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\be\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\be\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\bg\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\bg\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\bg\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\bg\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\bg\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\bi\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\bn\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\bn\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\bn\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\bn\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\bn\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\bn_bd\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\bn_bd\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\bn_bd\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\bn_in\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\bn_in\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\br\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\br\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\br\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\br\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\br\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\br\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\bs\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\bs\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\bs\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\bs\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\byn\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\byn\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\byn\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\ca\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\ca\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ca\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\ca\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\ca\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\ca\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\ce\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ch\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\chr\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ckb\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\ckb\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ckb\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\crh\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\crh\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\crh\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\crh\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\cs\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\cs\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\cs\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\cs\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\cs\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\cs\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\cs\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\csb\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\cv\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\cv\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\cy\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\cy\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\cy\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\cy\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\cy\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\cy\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\cy\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\da\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\da\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\da\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\da\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\da\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\da\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\da\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\de\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\de\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\de\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\de\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\de\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\de\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\de\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\dv\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\dz\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\dz\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\ee\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\el\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\el\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\el\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\el\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\el\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\el\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\el\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\en\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\eo\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\eo\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\eo\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\eo\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\eo\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\eo\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\eo\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\es\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\es\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\es\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\es\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\es\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\es\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\et\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\et\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\et\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\et\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\et\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\et\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\et\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\eu\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\eu\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\eu\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\eu\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\eu\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\eu\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\fa\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\fa\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\fa\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\fa\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\fa\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\ff\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\fi\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\fi\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\fi\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\fi\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\fi\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\fi\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\fil\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\fil\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\fil\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\fo\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\fo\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\fr\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\fr\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\fr\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\fr\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\fr\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\fr\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\fr\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\frp\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\fur\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\fur\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\fur\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\fur\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\fy\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ga\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ga\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\ga\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\ga\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\ga\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\gez\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\gez\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\gez\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\gl\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\gl\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\gl\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\gl\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\gl\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\gn\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\gu\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\gu\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\gu\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\gv\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ha\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\haw\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\haw\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\he\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\he\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\he\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\he\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\he\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\hi\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\hi\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\hi\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\hi\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\hi\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\hi\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\hi\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\hr\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\hr\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\hr\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\hr\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\hr\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\hr\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\hr\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\ht\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\hu\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\hu\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\hu\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\hu\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\hu\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\hu\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\hu\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\hy\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\hy\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\ia\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\ia\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ia\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\id\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\id\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\id\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\id\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\id\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\id\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\id\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\io\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\is\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\is\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\is\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\is\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\is\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\is\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\is\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\it\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\it\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\it\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\it\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\it\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\it\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\it\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\iu\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ja\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\ja\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ja\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\ja\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\ja\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\ja\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\jam\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ka\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\ka\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ka\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\ka\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\ka\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\ka\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\ka\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\kab\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\kab\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\kab\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\kab\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\kab\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\kab\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\kab\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\ki\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\kk\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\kk\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\kl\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\km\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\km\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\km\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\km\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\kmr\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\kmr\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\kmr\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\kn\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\kn\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\kn\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\ko\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\ko\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ko\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\ko\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\ko\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\ko\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\kok\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\kv\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\kw\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ky\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ky\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\lo\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\lo\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\lo\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\lo\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\lo\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\lo\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\lo\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\lt\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\lt\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\lt\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\lt\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\lt\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\lt\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\lt\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\lv\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\lv\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\lv\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\lv\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\lv\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\lv\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\mai\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\mhr\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\mi\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\mi\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\mi\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\mk\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\mk\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\mk\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\ml\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\ml\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ml\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\mn\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\mn\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\mn\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\mn\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\mr\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\mr\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\mr\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\ms\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ms\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\ms\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\mt\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\mt\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\mt\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\my\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\na\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\nah\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\nb_no\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\nb_no\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\nb_no\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\nb_no\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\nb_no\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\nb_no\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\nb_no\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\ne\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ne\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\nl\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\nl\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\nl\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\nl\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\nl\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\nl\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\nl\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\nn\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\nn\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\nn\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\nn\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\nn\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\nso\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\nso\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\nso\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\nso\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\nv\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\oc\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\oc\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\oc\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\oc\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\oc\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\oc\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\oc\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\or\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\or\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\or\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\ota\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\ota\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ota\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\ota\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\ota\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\ota\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\ota\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\pa\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\pa\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\pa\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\pa_pk\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\pa_pk\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\pa_pk\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\pap\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\pi\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\pl\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\pl\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\pl\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\pl\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\pl\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\pl\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\pl\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\ps\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ps\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\ps\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\pt\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\pt\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\pt\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\pt\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\pt\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\pt\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\pt_br\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\pt_br\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\pt_br\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\pt_br\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\pt_br\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\pt_br\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\pt_br\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\ro\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\ro\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ro\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\ro\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\ro\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\ro\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\ro\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\ro_md\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ru\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\ru\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ru\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\ru\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\ru\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\ru\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\ru\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\rw\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\rw\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\rw\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\rw\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\sc\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\sc\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\sc\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\sc\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\sc\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\sc\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\sc\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\sd\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\si\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\si\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\si\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\sk\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\sk\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\sk\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\sk\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\sk\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\sk\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\sk\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\sl\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\sl\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\sl\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\sl\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\sl\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\sl\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\so\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\so\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\so\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\so\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\so\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\so\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\son\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\sq\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\sq\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\sq\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\sq\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\sq\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\sq\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\sq\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\sr@latin\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\sr@latin\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\sr@latin\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\sr@latin\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\sr@latin\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\sr@latin\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\sr@latin\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\sr\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\sr\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\sr\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\sr\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\sr\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\sr\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\sr\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\sv\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\sv\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\sv\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\sv\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\sv\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\sv\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\sv\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\sw\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\sw\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\ta\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\ta\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ta\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\ta\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\ta\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\ta\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\ta\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\te\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\te\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\tg\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\th\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\th\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\th\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\th\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\th\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\th\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\ti\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ti\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\ti\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\tig\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\tig\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\tig\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\tk\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\tk\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\tl\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\tl\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\tr\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\tr\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\tr\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\tr\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\tr\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\tr\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\tr\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\tt@iqtelif\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\tt@iqtelif\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\tt@iqtelif\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\tt\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\tt\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\tt\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\tzm\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\tzm\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\tzm\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\ug\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\ug\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ug\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\ug\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\ug\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\ug\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\ug\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\uk\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\uk\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\uk\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\uk\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\uk\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\uk\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\uk\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\ur\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\uz\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ve\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\ve\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\ve\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\ve\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\vi\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\vi\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\vi\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\vi\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\vi\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\vi\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\wa\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\wa\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\wa\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\wa\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\wal\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\wal\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\wo\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\wo\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\xh\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\xh\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\xh\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\yo\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\zh_cn\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\zh_cn\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\zh_cn\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\zh_cn\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\zh_cn\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\zh_cn\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\zh_cn\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\zh_hk\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\zh_hk\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\zh_hk\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\zh_hk\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\zh_tw\lc_messages\iso15924.mo
%TEMP%\_mei31162\pycountry\locales\zh_tw\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\zh_tw\lc_messages\iso3166-2.mo
%TEMP%\_mei31162\pycountry\locales\zh_tw\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\zh_tw\lc_messages\iso4217.mo
%TEMP%\_mei31162\pycountry\locales\zh_tw\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pycountry\locales\zh_tw\lc_messages\iso639-5.mo
%TEMP%\_mei31162\pycountry\locales\zu\lc_messages\iso3166-1.mo
%TEMP%\_mei31162\pycountry\locales\zu\lc_messages\iso3166-3.mo
%TEMP%\_mei31162\pycountry\locales\zu\lc_messages\iso639-3.mo
%TEMP%\_mei31162\pyexpat.pyd
%TEMP%\_mei31162\python3.dll
%TEMP%\_mei31162\python314.dll
%TEMP%\_mei31162\pywin32_system32\pywintypes314.dll
%TEMP%\_mei31162\select.pyd
%TEMP%\_mei31162\setuptools\_vendor\importlib_metadata-8.7.1.dist-info\installer
%TEMP%\_mei31162\setuptools\_vendor\importlib_metadata-8.7.1.dist-info\metadata
%TEMP%\_mei31162\setuptools\_vendor\importlib_metadata-8.7.1.dist-info\record
%TEMP%\_mei31162\setuptools\_vendor\importlib_metadata-8.7.1.dist-info\wheel
%TEMP%\_mei31162\setuptools\_vendor\importlib_metadata-8.7.1.dist-info\licenses\license
%TEMP%\_mei31162\setuptools\_vendor\importlib_metadata-8.7.1.dist-info\top_level.txt
%TEMP%\_mei31162\setuptools\_vendor\jaraco\text\lorem ipsum.txt
%TEMP%\_mei31162\unicodedata.pyd
%TEMP%\_mei31162\viro.aes
%TEMP%\_mei31162\win32\win32pdh.pyd
%TEMP%\xkxnuhpkb2\wifi\no wifi networks found.txt

Network activity

Connects to

'gs##tic.com':443
'ra#.####ubusercontent.com':443

TCP

Other

'gs##tic.com':443
'ra#.####ubusercontent.com':443

UDP

DNS ASK gs##tic.com
DNS ASK vi###bvnru.in
DNS ASK ra#.####ubusercontent.com

Miscellaneous

Restarts the analyzed sample

Executes the following

'<SYSTEM32>\cmd.exe' /c "wmic csproduct get uuid"
'<SYSTEM32>\wbem\wmic.exe' csproduct get uuid
'<SYSTEM32>\cmd.exe' /c "wmic path win32_VideoController get name"
'<SYSTEM32>\wbem\wmic.exe' path win32_VideoController get name
'<SYSTEM32>\cmd.exe' /c "powershell.exe Set-MpPreference -DisableIntrusionPreventionSystem $true -DisableIOAVProtection $true -DisableRealtimeMonitoring $true -DisableScriptScanning $true -EnableControlledFolderAcc...
'<SYSTEM32>\netsh.exe' wlan show profiles
'<SYSTEM32>\cmd.exe' /c "powershell.exe -inputformat none -outputformat none -NonInteractive -Command "Add-MpPreference -ExclusionPath %USERPROFILE%\AppData" & powershell.exe -inputformat none -outputformat none -N...
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -command "Set-MpPreference -ExclusionExtension '.exe','.py'"
'<SYSTEM32>\cmd.exe' /c "wmic csproduct get uuid"' (with hidden window)
'<SYSTEM32>\cmd.exe' /c "wmic path win32_VideoController get name"' (with hidden window)
'<SYSTEM32>\cmd.exe' /c "powershell.exe Set-MpPreference -DisableIntrusionPreventionSystem $true -DisableIOAVProtection $true -DisableRealtimeMonitoring $true -DisableScriptScanning $true -EnableControlledFolderAcc...' (with hidden window)
'<SYSTEM32>\cmd.exe' /c "powershell.exe -inputformat none -outputformat none -NonInteractive -Command "Add-MpPreference -ExclusionPath %USERPROFILE%\AppData" & powershell.exe -inputformat none -outputformat none -N...' (with hidden window)

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial