Trojan.MulDrop41.42052

Technical Information

Modifies file system

Creates the following files

%TEMP%\_mei25082\crypto\cipher\_arc4.pyd
%TEMP%\_mei25082\crypto\cipher\_salsa20.pyd
%TEMP%\_mei25082\crypto\cipher\_chacha20.pyd
%TEMP%\_mei25082\crypto\cipher\_pkcs1_decode.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_aes.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_aesni.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_arc2.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_blowfish.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_cast.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_cbc.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_cfb.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_ctr.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_des.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_des3.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_ecb.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_eksblowfish.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_ocb.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_ofb.pyd
%TEMP%\_mei25082\crypto\hash\_blake2b.pyd
%TEMP%\_mei25082\crypto\hash\_blake2s.pyd
%TEMP%\_mei25082\crypto\hash\_md2.pyd
%TEMP%\_mei25082\crypto\hash\_md4.pyd
%TEMP%\_mei25082\crypto\hash\_md5.pyd
%TEMP%\_mei25082\crypto\hash\_ripemd160.pyd
%TEMP%\_mei25082\crypto\hash\_sha1.pyd
%TEMP%\_mei25082\crypto\hash\_sha224.pyd
%TEMP%\_mei25082\crypto\hash\_sha256.pyd
%TEMP%\_mei25082\crypto\hash\_sha384.pyd
%TEMP%\_mei25082\crypto\hash\_sha512.pyd
%TEMP%\_mei25082\crypto\hash\_ghash_clmul.pyd
%TEMP%\_mei25082\crypto\hash\_ghash_portable.pyd
%TEMP%\_mei25082\crypto\hash\_keccak.pyd
%TEMP%\_mei25082\crypto\hash\_poly1305.pyd
%TEMP%\_mei25082\crypto\math\_modexp.pyd
%TEMP%\_mei25082\crypto\protocol\_scrypt.pyd
%TEMP%\_mei25082\crypto\publickey\_curve25519.pyd
%TEMP%\_mei25082\crypto\publickey\_curve448.pyd
%TEMP%\_mei25082\crypto\publickey\_ec_ws.pyd
%TEMP%\_mei25082\crypto\publickey\_ed25519.pyd
%TEMP%\_mei25082\crypto\publickey\_ed448.pyd
%TEMP%\_mei25082\crypto\util\_cpuid_c.pyd
%TEMP%\_mei25082\crypto\util\_strxor.pyd
%TEMP%\_mei25082\pythonwin\mfc140u.dll
%TEMP%\_mei25082\pythonwin\win32ui.pyd
%TEMP%\_mei25082\sdl2.dll
%TEMP%\_mei25082\sdl2_image.dll
%TEMP%\_mei25082\sdl2_mixer.dll
%TEMP%\_mei25082\sdl2_ttf.dll
%TEMP%\_mei25082\vcruntime140.dll
%TEMP%\_mei25082\vcruntime140_1.dll
%TEMP%\_mei25082\_asyncio.pyd
%TEMP%\_mei25082\_bz2.pyd
%TEMP%\_mei25082\_cffi_backend.cp312-win_amd64.pyd
%TEMP%\_mei25082\_ctypes.pyd
%TEMP%\_mei25082\_decimal.pyd
%TEMP%\_mei25082\_hashlib.pyd
%TEMP%\_mei25082\_lzma.pyd
%TEMP%\_mei25082\_multiprocessing.pyd
%TEMP%\_mei25082\_overlapped.pyd
%TEMP%\_mei25082\_queue.pyd
%TEMP%\_mei25082\_socket.pyd
%TEMP%\_mei25082\_sounddevice_data\portaudio-binaries\readme.md
%TEMP%\_mei25082\_sounddevice_data\portaudio-binaries\libportaudio64bit-asio.dll
%TEMP%\_mei25082\_sounddevice_data\portaudio-binaries\libportaudio64bit.dll
%TEMP%\_mei25082\_sqlite3.pyd
%TEMP%\_mei25082\_ssl.pyd
%TEMP%\_mei25082\_uuid.pyd
%TEMP%\_mei25082\_wmi.pyd
%TEMP%\_mei25082\aiohttp\_helpers.cp312-win_amd64.pyd
%TEMP%\_mei25082\aiohttp\_http_parser.cp312-win_amd64.pyd
%TEMP%\_mei25082\aiohttp\_http_writer.cp312-win_amd64.pyd
%TEMP%\_mei25082\aiohttp\_websocket.cp312-win_amd64.pyd
%TEMP%\_mei25082\attrs-25.3.0.dist-info\installer
%TEMP%\_mei25082\attrs-25.3.0.dist-info\metadata
%TEMP%\_mei25082\attrs-25.3.0.dist-info\record
%TEMP%\_mei25082\attrs-25.3.0.dist-info\wheel
%TEMP%\_mei25082\attrs-25.3.0.dist-info\licenses\license
%TEMP%\_mei25082\base_library.zip
%TEMP%\_mei25082\certifi\cacert.pem
%TEMP%\_mei25082\charset_normalizer\md.cp312-win_amd64.pyd
%TEMP%\_mei25082\charset_normalizer\md__mypyc.cp312-win_amd64.pyd
%TEMP%\_mei25082\cryptography-46.0.3.dist-info\installer
%TEMP%\_mei25082\cryptography-46.0.3.dist-info\metadata
%TEMP%\_mei25082\cryptography-46.0.3.dist-info\record
%TEMP%\_mei25082\cryptography-46.0.3.dist-info\wheel
%TEMP%\_mei25082\cryptography-46.0.3.dist-info\licenses\license
%TEMP%\_mei25082\cryptography-46.0.3.dist-info\licenses\license.apache
%TEMP%\_mei25082\cryptography-46.0.3.dist-info\licenses\license.bsd
%TEMP%\_mei25082\cryptography\hazmat\bindings\_rust.pyd
%TEMP%\_mei25082\cv2\__init__.py
%TEMP%\_mei25082\cv2\config-3.py
%TEMP%\_mei25082\cv2\config.py
%TEMP%\_mei25082\cv2\cv2.pyd
%TEMP%\_mei25082\cv2\data\__init__.py
%TEMP%\_mei25082\cv2\gapi\__init__.py
%TEMP%\_mei25082\cv2\load_config_py3.py
%TEMP%\_mei25082\cv2\mat_wrapper\__init__.py
%TEMP%\_mei25082\cv2\misc\__init__.py
%TEMP%\_mei25082\cv2\misc\version.py
%TEMP%\_mei25082\cv2\opencv_videoio_ffmpeg4120_64.dll
%TEMP%\_mei25082\cv2\typing\__init__.py
%TEMP%\_mei25082\cv2\utils\__init__.py
%TEMP%\_mei25082\cv2\version.py
%TEMP%\_mei25082\freetype.dll
%TEMP%\_mei25082\frozenlist\_frozenlist.cp312-win_amd64.pyd
%TEMP%\_mei25082\libcrypto-3.dll
%TEMP%\_mei25082\libffi-8.dll
%TEMP%\_mei25082\libjpeg-9.dll
%TEMP%\_mei25082\libmodplug-1.dll
%TEMP%\_mei25082\libogg-0.dll
%TEMP%\_mei25082\libopus-0.dll
%TEMP%\_mei25082\libopusfile-0.dll
%TEMP%\_mei25082\libpng16-16.dll
%TEMP%\_mei25082\libssl-3.dll
%TEMP%\_mei25082\libtiff-5.dll
%TEMP%\_mei25082\libwebp-7.dll
%TEMP%\_mei25082\multidict\_multidict.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy-2.2.6.dist-info\delvewheel
%TEMP%\_mei25082\numpy-2.2.6.dist-info\installer
%TEMP%\_mei25082\numpy-2.2.6.dist-info\license.txt
%TEMP%\_mei25082\numpy-2.2.6.dist-info\metadata
%TEMP%\_mei25082\numpy-2.2.6.dist-info\record
%TEMP%\_mei25082\numpy-2.2.6.dist-info\wheel
%TEMP%\_mei25082\numpy-2.2.6.dist-info\entry_points.txt
%TEMP%\_mei25082\numpy.libs\libscipy_openblas64_-13e2df515630b4a41f92893938845698.dll
%TEMP%\_mei25082\numpy.libs\msvcp140-263139962577ecda4cd9469ca360a746.dll
%TEMP%\_mei25082\numpy\_core\_multiarray_tests.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\_core\_multiarray_umath.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\fft\_pocketfft_umath.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\linalg\_umath_linalg.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\random\_bounded_integers.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\random\_common.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\random\_generator.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\random\_mt19937.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\random\_pcg64.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\random\_philox.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\random\_sfc64.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\random\bit_generator.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\random\mtrand.cp312-win_amd64.pyd
%TEMP%\_mei25082\portmidi.dll
%TEMP%\_mei25082\propcache\_helpers_c.cp312-win_amd64.pyd
%TEMP%\_mei25082\psutil\_psutil_windows.pyd
%TEMP%\_mei25082\pyexpat.pyd
%TEMP%\_mei25082\pygame\sdl2.dll
%TEMP%\_mei25082\pygame\sdl2_image.dll
%TEMP%\_mei25082\pygame\sdl2_mixer.dll
%TEMP%\_mei25082\pygame\sdl2_ttf.dll
%TEMP%\_mei25082\pygame\_freetype.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\base.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\bufferproxy.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\color.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\constants.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\display.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\draw.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\event.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\font.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\freesansbold.ttf
%TEMP%\_mei25082\pygame\freetype.dll
%TEMP%\_mei25082\pygame\image.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\imageext.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\joystick.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\key.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\libjpeg-9.dll
%TEMP%\_mei25082\pygame\libogg-0.dll
%TEMP%\_mei25082\pygame\libopus-0.dll
%TEMP%\_mei25082\pygame\libpng16-16.dll
%TEMP%\_mei25082\pygame\mask.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\math.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\mixer.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\mixer_music.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\mouse.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\pixelarray.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\pixelcopy.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\pygame_icon.bmp
%TEMP%\_mei25082\pygame\rect.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\rwobject.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\scrap.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\surface.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\surflock.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\time.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\transform.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\zlib1.dll
%TEMP%\_mei25082\python3.dll
%TEMP%\_mei25082\python312.dll
%TEMP%\_mei25082\pywin32_system32\pythoncom312.dll
%TEMP%\_mei25082\pywin32_system32\pywintypes312.dll
%TEMP%\_mei25082\select.pyd
%TEMP%\_mei25082\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\installer
%TEMP%\_mei25082\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\license
%TEMP%\_mei25082\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\metadata
%TEMP%\_mei25082\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\record
%TEMP%\_mei25082\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\wheel
%TEMP%\_mei25082\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\top_level.txt
%TEMP%\_mei25082\setuptools\_vendor\jaraco\text\lorem ipsum.txt
%TEMP%\_mei25082\sqlite3.dll
%TEMP%\_mei25082\unicodedata.pyd
%TEMP%\_mei25082\wheel-0.45.1.dist-info\installer
%TEMP%\_mei25082\wheel-0.45.1.dist-info\license.txt
%TEMP%\_mei25082\wheel-0.45.1.dist-info\metadata
%TEMP%\_mei25082\wheel-0.45.1.dist-info\record
%TEMP%\_mei25082\wheel-0.45.1.dist-info\wheel
%TEMP%\_mei25082\wheel-0.45.1.dist-info\entry_points.txt
%TEMP%\_mei25082\win32\_win32sysloader.pyd
%TEMP%\_mei25082\win32\win32api.pyd
%TEMP%\_mei25082\win32\win32crypt.pyd
%TEMP%\_mei25082\win32\win32event.pyd
%TEMP%\_mei25082\win32\win32pdh.pyd
%TEMP%\_mei25082\win32\win32trace.pyd
%TEMP%\_mei25082\yarl\_quoting_c.cp312-win_amd64.pyd
%TEMP%\_mei25082\zlib1.dll
%TEMP%\_mei25082\zstandard\_cffi.cp312-win_amd64.pyd
%TEMP%\_mei25082\zstandard\backend_c.cp312-win_amd64.pyd
%TEMP%\gen_py\3.12\__init__.py
%TEMP%\gen_py\3.12\dicts.dat
%APPDATA%\microsoft\windows\winsxs\windowsmesh.exe
%TEMP%\_mei50642\crypto\cipher\_arc4.pyd
%TEMP%\_mei50642\crypto\cipher\_salsa20.pyd
%TEMP%\_mei50642\crypto\cipher\_chacha20.pyd
%TEMP%\_mei50642\crypto\cipher\_pkcs1_decode.pyd
%TEMP%\_mei50642\crypto\cipher\_raw_aes.pyd
%TEMP%\_mei50642\crypto\cipher\_raw_aesni.pyd
%TEMP%\_mei50642\crypto\cipher\_raw_arc2.pyd
%TEMP%\_mei50642\crypto\cipher\_raw_blowfish.pyd
%TEMP%\_mei50642\crypto\cipher\_raw_cast.pyd
%TEMP%\_mei50642\crypto\cipher\_raw_cbc.pyd
%TEMP%\_mei50642\crypto\cipher\_raw_cfb.pyd
%TEMP%\_mei50642\crypto\cipher\_raw_ctr.pyd
%TEMP%\_mei50642\crypto\cipher\_raw_des.pyd
%TEMP%\_mei50642\crypto\cipher\_raw_des3.pyd
%TEMP%\_mei50642\crypto\cipher\_raw_ecb.pyd
%TEMP%\_mei50642\crypto\cipher\_raw_eksblowfish.pyd
%TEMP%\_mei50642\crypto\cipher\_raw_ocb.pyd
%TEMP%\_mei50642\crypto\cipher\_raw_ofb.pyd
%TEMP%\_mei50642\crypto\hash\_blake2b.pyd
%TEMP%\_mei50642\crypto\hash\_blake2s.pyd
%TEMP%\_mei50642\crypto\hash\_md2.pyd
%TEMP%\_mei50642\crypto\hash\_md4.pyd
%TEMP%\_mei50642\crypto\hash\_md5.pyd
%TEMP%\_mei50642\crypto\hash\_ripemd160.pyd
%TEMP%\_mei50642\crypto\hash\_sha1.pyd
%TEMP%\_mei50642\crypto\hash\_sha224.pyd
%TEMP%\_mei50642\crypto\hash\_sha256.pyd
%TEMP%\_mei50642\crypto\hash\_sha384.pyd
%TEMP%\_mei50642\crypto\hash\_sha512.pyd
%TEMP%\_mei50642\crypto\hash\_ghash_clmul.pyd
%TEMP%\_mei50642\crypto\hash\_ghash_portable.pyd
%TEMP%\_mei50642\crypto\hash\_keccak.pyd
%TEMP%\_mei50642\crypto\hash\_poly1305.pyd
%TEMP%\_mei50642\crypto\math\_modexp.pyd
%TEMP%\_mei50642\crypto\protocol\_scrypt.pyd
%TEMP%\_mei50642\crypto\publickey\_curve25519.pyd
%TEMP%\_mei50642\crypto\publickey\_curve448.pyd
%TEMP%\_mei50642\crypto\publickey\_ec_ws.pyd
%TEMP%\_mei50642\crypto\publickey\_ed25519.pyd
%TEMP%\_mei50642\crypto\publickey\_ed448.pyd
%TEMP%\_mei50642\crypto\util\_cpuid_c.pyd
%TEMP%\_mei50642\crypto\util\_strxor.pyd
%TEMP%\_mei50642\pythonwin\mfc140u.dll
%TEMP%\_mei50642\pythonwin\win32ui.pyd
%TEMP%\_mei50642\sdl2.dll
%TEMP%\_mei50642\sdl2_image.dll
%TEMP%\_mei50642\sdl2_mixer.dll
%TEMP%\_mei50642\sdl2_ttf.dll
%TEMP%\_mei50642\vcruntime140.dll
%TEMP%\_mei50642\vcruntime140_1.dll
%TEMP%\_mei50642\_asyncio.pyd
%TEMP%\_mei50642\_bz2.pyd
%TEMP%\_mei50642\_cffi_backend.cp312-win_amd64.pyd
%TEMP%\_mei50642\_ctypes.pyd
%TEMP%\_mei50642\_decimal.pyd
%TEMP%\_mei50642\_hashlib.pyd
%TEMP%\_mei50642\_lzma.pyd
%TEMP%\_mei50642\_multiprocessing.pyd
%TEMP%\_mei50642\_overlapped.pyd
%TEMP%\_mei50642\_queue.pyd
%TEMP%\_mei50642\_socket.pyd
%TEMP%\_mei50642\_sounddevice_data\portaudio-binaries\readme.md
%TEMP%\_mei50642\_sounddevice_data\portaudio-binaries\libportaudio64bit-asio.dll
%TEMP%\_mei50642\_sounddevice_data\portaudio-binaries\libportaudio64bit.dll
%TEMP%\_mei50642\_sqlite3.pyd
%TEMP%\_mei50642\_ssl.pyd
%TEMP%\_mei50642\_uuid.pyd
%TEMP%\_mei50642\_wmi.pyd
%TEMP%\_mei50642\aiohttp\_helpers.cp312-win_amd64.pyd
%TEMP%\_mei50642\aiohttp\_http_parser.cp312-win_amd64.pyd
%TEMP%\_mei50642\aiohttp\_http_writer.cp312-win_amd64.pyd
%TEMP%\_mei50642\aiohttp\_websocket.cp312-win_amd64.pyd
%TEMP%\_mei50642\attrs-25.3.0.dist-info\installer
%TEMP%\_mei50642\attrs-25.3.0.dist-info\metadata
%TEMP%\_mei50642\attrs-25.3.0.dist-info\record
%TEMP%\_mei50642\attrs-25.3.0.dist-info\wheel
%TEMP%\_mei50642\attrs-25.3.0.dist-info\licenses\license
%TEMP%\_mei50642\base_library.zip
%TEMP%\_mei50642\certifi\cacert.pem
%TEMP%\_mei50642\charset_normalizer\md.cp312-win_amd64.pyd
%TEMP%\_mei50642\charset_normalizer\md__mypyc.cp312-win_amd64.pyd
%TEMP%\_mei50642\cryptography-46.0.3.dist-info\installer
%TEMP%\_mei50642\cryptography-46.0.3.dist-info\metadata
%TEMP%\_mei50642\cryptography-46.0.3.dist-info\record
%TEMP%\_mei50642\cryptography-46.0.3.dist-info\wheel
%TEMP%\_mei50642\cryptography-46.0.3.dist-info\licenses\license
%TEMP%\_mei50642\cryptography-46.0.3.dist-info\licenses\license.apache
%TEMP%\_mei50642\cryptography-46.0.3.dist-info\licenses\license.bsd
%TEMP%\_mei50642\cryptography\hazmat\bindings\_rust.pyd
%TEMP%\_mei50642\cv2\__init__.py
%TEMP%\_mei50642\cv2\config-3.py
%TEMP%\_mei50642\cv2\config.py
%TEMP%\_mei50642\cv2\cv2.pyd
%TEMP%\_mei50642\cv2\data\__init__.py
%TEMP%\_mei50642\cv2\gapi\__init__.py
%TEMP%\_mei50642\cv2\load_config_py3.py
%TEMP%\_mei50642\cv2\mat_wrapper\__init__.py
%TEMP%\_mei50642\cv2\misc\__init__.py
%TEMP%\_mei50642\cv2\misc\version.py
%TEMP%\_mei50642\cv2\opencv_videoio_ffmpeg4120_64.dll
%TEMP%\_mei50642\cv2\typing\__init__.py
%TEMP%\_mei50642\cv2\utils\__init__.py
%TEMP%\_mei50642\cv2\version.py
%TEMP%\_mei50642\freetype.dll
%TEMP%\_mei50642\frozenlist\_frozenlist.cp312-win_amd64.pyd
%TEMP%\_mei50642\libcrypto-3.dll
%TEMP%\_mei50642\libffi-8.dll
%TEMP%\_mei50642\libjpeg-9.dll
%TEMP%\_mei50642\libmodplug-1.dll
%TEMP%\_mei50642\libogg-0.dll
%TEMP%\_mei50642\libopus-0.dll
%TEMP%\_mei50642\libopusfile-0.dll
%TEMP%\_mei50642\libpng16-16.dll
%TEMP%\_mei50642\libssl-3.dll
%TEMP%\_mei50642\libtiff-5.dll
%TEMP%\_mei50642\libwebp-7.dll
%TEMP%\_mei50642\multidict\_multidict.cp312-win_amd64.pyd
%TEMP%\_mei50642\numpy-2.2.6.dist-info\delvewheel
%TEMP%\_mei50642\numpy-2.2.6.dist-info\installer
%TEMP%\_mei50642\numpy-2.2.6.dist-info\license.txt
%TEMP%\_mei50642\numpy-2.2.6.dist-info\metadata
%TEMP%\_mei50642\numpy-2.2.6.dist-info\record
%TEMP%\_mei50642\numpy-2.2.6.dist-info\wheel
%TEMP%\_mei50642\numpy-2.2.6.dist-info\entry_points.txt
%TEMP%\_mei50642\numpy.libs\libscipy_openblas64_-13e2df515630b4a41f92893938845698.dll
%TEMP%\_mei50642\numpy.libs\msvcp140-263139962577ecda4cd9469ca360a746.dll
%TEMP%\_mei50642\numpy\_core\_multiarray_tests.cp312-win_amd64.pyd
%TEMP%\_mei50642\numpy\_core\_multiarray_umath.cp312-win_amd64.pyd
%TEMP%\_mei50642\numpy\fft\_pocketfft_umath.cp312-win_amd64.pyd
%TEMP%\_mei50642\numpy\linalg\_umath_linalg.cp312-win_amd64.pyd
%TEMP%\_mei50642\numpy\random\_bounded_integers.cp312-win_amd64.pyd
%TEMP%\_mei50642\numpy\random\_common.cp312-win_amd64.pyd
%TEMP%\_mei50642\numpy\random\_generator.cp312-win_amd64.pyd
%TEMP%\_mei50642\numpy\random\_mt19937.cp312-win_amd64.pyd
%TEMP%\_mei50642\numpy\random\_pcg64.cp312-win_amd64.pyd
%TEMP%\_mei50642\numpy\random\_philox.cp312-win_amd64.pyd
%TEMP%\_mei50642\numpy\random\_sfc64.cp312-win_amd64.pyd
%TEMP%\_mei50642\numpy\random\bit_generator.cp312-win_amd64.pyd
%TEMP%\_mei50642\numpy\random\mtrand.cp312-win_amd64.pyd
%TEMP%\_mei50642\portmidi.dll
%TEMP%\_mei50642\propcache\_helpers_c.cp312-win_amd64.pyd
%TEMP%\_mei50642\psutil\_psutil_windows.pyd
%TEMP%\_mei50642\pyexpat.pyd
%TEMP%\_mei50642\pygame\sdl2.dll
%TEMP%\_mei50642\pygame\sdl2_image.dll
%TEMP%\_mei50642\pygame\sdl2_mixer.dll
%TEMP%\_mei50642\pygame\sdl2_ttf.dll
%TEMP%\_mei50642\pygame\_freetype.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\base.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\bufferproxy.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\color.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\constants.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\display.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\draw.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\event.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\font.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\freesansbold.ttf
%TEMP%\_mei50642\pygame\freetype.dll
%TEMP%\_mei50642\pygame\image.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\imageext.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\joystick.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\key.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\libjpeg-9.dll
%TEMP%\_mei50642\pygame\libogg-0.dll
%TEMP%\_mei50642\pygame\libopus-0.dll
%TEMP%\_mei50642\pygame\libpng16-16.dll
%TEMP%\_mei50642\pygame\mask.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\math.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\mixer.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\mixer_music.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\mouse.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\pixelarray.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\pixelcopy.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\pygame_icon.bmp
%TEMP%\_mei50642\pygame\rect.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\rwobject.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\scrap.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\surface.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\surflock.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\time.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\transform.cp312-win_amd64.pyd
%TEMP%\_mei50642\pygame\zlib1.dll
%TEMP%\_mei50642\python3.dll
%TEMP%\_mei50642\python312.dll
%TEMP%\_mei50642\pywin32_system32\pythoncom312.dll
%TEMP%\_mei50642\pywin32_system32\pywintypes312.dll
%TEMP%\_mei50642\select.pyd
%TEMP%\_mei50642\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\installer
%TEMP%\_mei50642\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\license
%TEMP%\_mei50642\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\metadata
%TEMP%\_mei50642\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\record
%TEMP%\_mei50642\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\wheel
%TEMP%\_mei50642\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\top_level.txt
%TEMP%\_mei50642\setuptools\_vendor\jaraco\text\lorem ipsum.txt
%TEMP%\_mei50642\sqlite3.dll
%TEMP%\_mei50642\unicodedata.pyd
%TEMP%\_mei50642\wheel-0.45.1.dist-info\installer
%TEMP%\_mei50642\wheel-0.45.1.dist-info\license.txt
%TEMP%\_mei50642\wheel-0.45.1.dist-info\metadata
%TEMP%\_mei50642\wheel-0.45.1.dist-info\record
%TEMP%\_mei50642\wheel-0.45.1.dist-info\wheel
%TEMP%\_mei50642\wheel-0.45.1.dist-info\entry_points.txt
%TEMP%\_mei50642\win32\_win32sysloader.pyd
%TEMP%\_mei50642\win32\win32api.pyd
%TEMP%\_mei50642\win32\win32crypt.pyd
%TEMP%\_mei50642\win32\win32event.pyd
%TEMP%\_mei50642\win32\win32pdh.pyd
%TEMP%\_mei50642\win32\win32trace.pyd
%TEMP%\_mei50642\yarl\_quoting_c.cp312-win_amd64.pyd
%TEMP%\_mei50642\zlib1.dll
%TEMP%\_mei50642\zstandard\_cffi.cp312-win_amd64.pyd
%TEMP%\_mei50642\zstandard\backend_c.cp312-win_amd64.pyd
%TEMP%\7qk72gxh
%TEMP%\comtypes_cache\windowsmesh-312\_00020430_0000_0000_c000_000000000046_0_2_0.py
%TEMP%\comtypes_cache\windowsmesh-312\stdole.py
%TEMP%\comtypes_cache\windowsmesh-312\_c866ca3a_32f7_11d2_9602_00c04f8ee628_0_5_4.py
%TEMP%\comtypes_cache\windowsmesh-312\speechlib.py
%APPDATA%\microsoft\speech\files\userlexicons\sp_42167fba3fe5431fb430e3ac4bb9fc41.dat

Deletes following files that it created itself

%TEMP%\_mei25082\aiohttp\_helpers.cp312-win_amd64.pyd
%TEMP%\_mei25082\aiohttp\_http_parser.cp312-win_amd64.pyd
%TEMP%\_mei25082\aiohttp\_http_writer.cp312-win_amd64.pyd
%TEMP%\_mei25082\aiohttp\_websocket.cp312-win_amd64.pyd
%TEMP%\_mei25082\attrs-25.3.0.dist-info\installer
%TEMP%\_mei25082\attrs-25.3.0.dist-info\licenses\license
%TEMP%\_mei25082\attrs-25.3.0.dist-info\metadata
%TEMP%\_mei25082\attrs-25.3.0.dist-info\record
%TEMP%\_mei25082\attrs-25.3.0.dist-info\wheel
%TEMP%\_mei25082\base_library.zip
%TEMP%\_mei25082\certifi\cacert.pem
%TEMP%\_mei25082\charset_normalizer\md.cp312-win_amd64.pyd
%TEMP%\_mei25082\charset_normalizer\md__mypyc.cp312-win_amd64.pyd
%TEMP%\_mei25082\crypto\cipher\_arc4.pyd
%TEMP%\_mei25082\crypto\cipher\_chacha20.pyd
%TEMP%\_mei25082\crypto\cipher\_pkcs1_decode.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_aes.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_aesni.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_arc2.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_blowfish.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_cast.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_cbc.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_cfb.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_ctr.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_des.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_des3.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_ecb.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_eksblowfish.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_ocb.pyd
%TEMP%\_mei25082\crypto\cipher\_raw_ofb.pyd
%TEMP%\_mei25082\crypto\cipher\_salsa20.pyd
%TEMP%\_mei25082\crypto\hash\_blake2b.pyd
%TEMP%\_mei25082\crypto\hash\_blake2s.pyd
%TEMP%\_mei25082\crypto\hash\_ghash_clmul.pyd
%TEMP%\_mei25082\crypto\hash\_ghash_portable.pyd
%TEMP%\_mei25082\crypto\hash\_keccak.pyd
%TEMP%\_mei25082\crypto\hash\_md2.pyd
%TEMP%\_mei25082\crypto\hash\_md4.pyd
%TEMP%\_mei25082\crypto\hash\_md5.pyd
%TEMP%\_mei25082\crypto\hash\_poly1305.pyd
%TEMP%\_mei25082\crypto\hash\_ripemd160.pyd
%TEMP%\_mei25082\crypto\hash\_sha1.pyd
%TEMP%\_mei25082\crypto\hash\_sha224.pyd
%TEMP%\_mei25082\crypto\hash\_sha256.pyd
%TEMP%\_mei25082\crypto\hash\_sha384.pyd
%TEMP%\_mei25082\crypto\hash\_sha512.pyd
%TEMP%\_mei25082\crypto\math\_modexp.pyd
%TEMP%\_mei25082\crypto\protocol\_scrypt.pyd
%TEMP%\_mei25082\crypto\publickey\_curve25519.pyd
%TEMP%\_mei25082\crypto\publickey\_curve448.pyd
%TEMP%\_mei25082\crypto\publickey\_ec_ws.pyd
%TEMP%\_mei25082\crypto\publickey\_ed25519.pyd
%TEMP%\_mei25082\crypto\publickey\_ed448.pyd
%TEMP%\_mei25082\crypto\util\_cpuid_c.pyd
%TEMP%\_mei25082\crypto\util\_strxor.pyd
%TEMP%\_mei25082\cryptography\hazmat\bindings\_rust.pyd
%TEMP%\_mei25082\cryptography-46.0.3.dist-info\installer
%TEMP%\_mei25082\cryptography-46.0.3.dist-info\licenses\license
%TEMP%\_mei25082\cryptography-46.0.3.dist-info\licenses\license.apache
%TEMP%\_mei25082\cryptography-46.0.3.dist-info\licenses\license.bsd
%TEMP%\_mei25082\cryptography-46.0.3.dist-info\metadata
%TEMP%\_mei25082\cryptography-46.0.3.dist-info\record
%TEMP%\_mei25082\cryptography-46.0.3.dist-info\wheel
%TEMP%\_mei25082\cv2\config-3.py
%TEMP%\_mei25082\cv2\config.py
%TEMP%\_mei25082\cv2\cv2.pyd
%TEMP%\_mei25082\cv2\data\__init__.py
%TEMP%\_mei25082\cv2\gapi\__init__.py
%TEMP%\_mei25082\cv2\load_config_py3.py
%TEMP%\_mei25082\cv2\mat_wrapper\__init__.py
%TEMP%\_mei25082\cv2\misc\version.py
%TEMP%\_mei25082\cv2\misc\__init__.py
%TEMP%\_mei25082\cv2\opencv_videoio_ffmpeg4120_64.dll
%TEMP%\_mei25082\cv2\typing\__init__.py
%TEMP%\_mei25082\cv2\utils\__init__.py
%TEMP%\_mei25082\cv2\version.py
%TEMP%\_mei25082\cv2\__init__.py
%TEMP%\_mei25082\freetype.dll
%TEMP%\_mei25082\frozenlist\_frozenlist.cp312-win_amd64.pyd
%TEMP%\_mei25082\libcrypto-3.dll
%TEMP%\_mei25082\libffi-8.dll
%TEMP%\_mei25082\libjpeg-9.dll
%TEMP%\_mei25082\libmodplug-1.dll
%TEMP%\_mei25082\libogg-0.dll
%TEMP%\_mei25082\libopus-0.dll
%TEMP%\_mei25082\libopusfile-0.dll
%TEMP%\_mei25082\libpng16-16.dll
%TEMP%\_mei25082\libssl-3.dll
%TEMP%\_mei25082\libtiff-5.dll
%TEMP%\_mei25082\libwebp-7.dll
%TEMP%\_mei25082\multidict\_multidict.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\fft\_pocketfft_umath.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\linalg\_umath_linalg.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\random\bit_generator.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\random\mtrand.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\random\_bounded_integers.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\random\_common.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\random\_generator.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\random\_mt19937.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\random\_pcg64.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\random\_philox.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\random\_sfc64.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\_core\_multiarray_tests.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy\_core\_multiarray_umath.cp312-win_amd64.pyd
%TEMP%\_mei25082\numpy-2.2.6.dist-info\delvewheel
%TEMP%\_mei25082\numpy-2.2.6.dist-info\entry_points.txt
%TEMP%\_mei25082\numpy-2.2.6.dist-info\installer
%TEMP%\_mei25082\numpy-2.2.6.dist-info\license.txt
%TEMP%\_mei25082\numpy-2.2.6.dist-info\metadata
%TEMP%\_mei25082\numpy-2.2.6.dist-info\record
%TEMP%\_mei25082\numpy-2.2.6.dist-info\wheel
%TEMP%\_mei25082\numpy.libs\libscipy_openblas64_-13e2df515630b4a41f92893938845698.dll
%TEMP%\_mei25082\numpy.libs\msvcp140-263139962577ecda4cd9469ca360a746.dll
%TEMP%\_mei25082\portmidi.dll
%TEMP%\_mei25082\propcache\_helpers_c.cp312-win_amd64.pyd
%TEMP%\_mei25082\psutil\_psutil_windows.pyd
%TEMP%\_mei25082\pyexpat.pyd
%TEMP%\_mei25082\pygame\base.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\bufferproxy.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\color.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\constants.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\display.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\draw.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\event.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\font.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\freesansbold.ttf
%TEMP%\_mei25082\pygame\freetype.dll
%TEMP%\_mei25082\pygame\image.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\imageext.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\joystick.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\key.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\libjpeg-9.dll
%TEMP%\_mei25082\pygame\libogg-0.dll
%TEMP%\_mei25082\pygame\libopus-0.dll
%TEMP%\_mei25082\pygame\libpng16-16.dll
%TEMP%\_mei25082\pygame\mask.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\math.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\mixer.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\mixer_music.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\mouse.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\pixelarray.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\pixelcopy.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\pygame_icon.bmp
%TEMP%\_mei25082\pygame\rect.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\rwobject.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\scrap.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\sdl2.dll
%TEMP%\_mei25082\pygame\sdl2_image.dll
%TEMP%\_mei25082\pygame\sdl2_mixer.dll
%TEMP%\_mei25082\pygame\sdl2_ttf.dll
%TEMP%\_mei25082\pygame\surface.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\surflock.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\time.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\transform.cp312-win_amd64.pyd
%TEMP%\_mei25082\pygame\zlib1.dll
%TEMP%\_mei25082\pygame\_freetype.cp312-win_amd64.pyd
%TEMP%\_mei25082\python3.dll
%TEMP%\_mei25082\python312.dll
%TEMP%\_mei25082\pythonwin\mfc140u.dll
%TEMP%\_mei25082\pythonwin\win32ui.pyd
%TEMP%\_mei25082\pywin32_system32\pythoncom312.dll
%TEMP%\_mei25082\pywin32_system32\pywintypes312.dll
%TEMP%\_mei25082\sdl2.dll
%TEMP%\_mei25082\sdl2_image.dll
%TEMP%\_mei25082\sdl2_mixer.dll
%TEMP%\_mei25082\sdl2_ttf.dll
%TEMP%\_mei25082\select.pyd
%TEMP%\_mei25082\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\installer
%TEMP%\_mei25082\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\license
%TEMP%\_mei25082\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\metadata
%TEMP%\_mei25082\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\record
%TEMP%\_mei25082\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\top_level.txt
%TEMP%\_mei25082\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\wheel
%TEMP%\_mei25082\setuptools\_vendor\jaraco\text\lorem ipsum.txt
%TEMP%\_mei25082\sqlite3.dll
%TEMP%\_mei25082\unicodedata.pyd
%TEMP%\_mei25082\vcruntime140.dll
%TEMP%\_mei25082\vcruntime140_1.dll
%TEMP%\_mei25082\wheel-0.45.1.dist-info\entry_points.txt
%TEMP%\_mei25082\wheel-0.45.1.dist-info\installer
%TEMP%\_mei25082\wheel-0.45.1.dist-info\license.txt
%TEMP%\_mei25082\wheel-0.45.1.dist-info\metadata
%TEMP%\_mei25082\wheel-0.45.1.dist-info\record
%TEMP%\_mei25082\wheel-0.45.1.dist-info\wheel
%TEMP%\_mei25082\win32\win32api.pyd
%TEMP%\_mei25082\win32\win32crypt.pyd
%TEMP%\_mei25082\win32\win32event.pyd
%TEMP%\_mei25082\win32\win32pdh.pyd
%TEMP%\_mei25082\win32\win32trace.pyd
%TEMP%\_mei25082\win32\_win32sysloader.pyd
%TEMP%\_mei25082\yarl\_quoting_c.cp312-win_amd64.pyd
%TEMP%\_mei25082\zlib1.dll
%TEMP%\_mei25082\zstandard\backend_c.cp312-win_amd64.pyd
%TEMP%\_mei25082\zstandard\_cffi.cp312-win_amd64.pyd
%TEMP%\_mei25082\_asyncio.pyd
%TEMP%\_mei25082\_bz2.pyd
%TEMP%\_mei25082\_cffi_backend.cp312-win_amd64.pyd
%TEMP%\_mei25082\_ctypes.pyd
%TEMP%\_mei25082\_decimal.pyd
%TEMP%\_mei25082\_hashlib.pyd
%TEMP%\_mei25082\_lzma.pyd
%TEMP%\_mei25082\_multiprocessing.pyd
%TEMP%\_mei25082\_overlapped.pyd
%TEMP%\_mei25082\_queue.pyd
%TEMP%\_mei25082\_socket.pyd
%TEMP%\_mei25082\_sounddevice_data\portaudio-binaries\libportaudio64bit-asio.dll
%TEMP%\_mei25082\_sounddevice_data\portaudio-binaries\libportaudio64bit.dll
%TEMP%\_mei25082\_sounddevice_data\portaudio-binaries\readme.md
%TEMP%\_mei25082\_sqlite3.pyd
%TEMP%\_mei25082\_ssl.pyd
%TEMP%\_mei25082\_uuid.pyd
%TEMP%\_mei25082\_wmi.pyd
%TEMP%\7qk72gxh

Miscellaneous

Creates and executes the following

'%APPDATA%\microsoft\windows\winsxs\windowsmesh.exe'

Restarts the analyzed sample

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial