Trojan.MulDrop32.44750

Technical Information

Malicious functions

To complicate detection of its presence in the operating system,

blocks the following features:

User Account Control (UAC)

Searches for windows to

detect analytical utilities:

ClassName: 'RegmonClass', WindowName: ''
ClassName: 'FilemonClass', WindowName: ''
ClassName: '', WindowName: 'File Monitor - Sysinternals: www.sysinternals.com'
ClassName: 'PROCMON_WINDOW_CLASS', WindowName: ''
ClassName: '', WindowName: 'Process Monitor - Sysinternals: www.sysinternals.com'

Modifies file system

Creates the following files

%LOCALAPPDATA%\hellogreen_4856_134021735257557175\bbs.exe
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\_bz2.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\_cffi_backend.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\_ctypes.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\_data.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\_decimal.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\_elementtree.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\_hashlib.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\_lzma.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\_multiprocessing.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\_queue.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\_socket.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\_ssl.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\_uuid.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\_win32sysloader.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\_wmi.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\libcrypto-3.dll
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\libffi-8.dll
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\libssl-3.dll
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\mfc140u.dll
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pyexpat.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\python3.dll
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\python312.dll
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pythoncom312.dll
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pywintypes312.dll
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\select.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\unicodedata.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\vcruntime140.dll
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\vcruntime140_1.dll
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\win32api.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\win32crypt.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\win32evtlog.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\win32security.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\win32ui.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\cipher\_salsa20.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\cipher\_raw_aes.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\cipher\_raw_aesni.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\cipher\_raw_cbc.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\cipher\_raw_cfb.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\cipher\_raw_ctr.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\cipher\_raw_ecb.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\cipher\_raw_eksblowfish.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\cipher\_raw_ocb.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\cipher\_raw_ofb.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\hash\_blake2s.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\hash\_md5.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\hash\_sha1.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\hash\_sha224.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\hash\_sha256.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\hash\_sha384.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\hash\_sha512.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\hash\_ghash_clmul.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\hash\_ghash_portable.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\hash\_keccak.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\protocol\_scrypt.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\util\_cpuid_c.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptodome\util\_strxor.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\certifi\cacert.pem
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\charset_normalizer\md.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\charset_normalizer\md__mypyc.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\cryptography\hazmat\bindings\_rust.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\jaraco\text\lorem ipsum.txt
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\psutil\_psutil_windows.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\cet
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\cst6cdt
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\cuba
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\eet
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\est
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\est5edt
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\egypt
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\eire
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\factory
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\gb
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\gb-eire
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\gmt
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\gmt+0
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\gmt-0
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\gmt0
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\greenwich
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\hst
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\hongkong
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\iceland
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\iran
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\israel
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\jamaica
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\japan
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\kwajalein
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\libya
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\met
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\mst
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\mst7mdt
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\nz
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\nz-chat
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\navajo
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\prc
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pst8pdt
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\poland
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\portugal
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\roc
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\rok
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\singapore
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\turkey
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\uct
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\utc
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\universal
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\w-su
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\wet
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\zulu
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\iso3166.tab
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\leapseconds
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\tzdata.zi
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\zone.tab
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\zone1970.tab
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\zonenow.tab
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\abidjan
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\accra
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\addis_ababa
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\algiers
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\asmara
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\asmera
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\bamako
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\bangui
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\banjul
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\bissau
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\blantyre
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\brazzaville
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\bujumbura
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\cairo
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\casablanca
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\ceuta
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\conakry
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\dakar
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\dar_es_salaam
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\djibouti
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\douala
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\el_aaiun
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\freetown
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\gaborone
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\harare
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\johannesburg
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\juba
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\kampala
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\khartoum
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\kigali
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\kinshasa
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\lagos
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\libreville
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\lome
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\luanda
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\lubumbashi
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\lusaka
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\malabo
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\maputo
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\maseru
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\mbabane
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\mogadishu
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\monrovia
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\nairobi
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\ndjamena
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\niamey
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\nouakchott
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\ouagadougou
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\porto-novo
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\sao_tome
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\timbuktu
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\tripoli
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\tunis
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\africa\windhoek
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\adak
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\anchorage
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\anguilla
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\antigua
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\araguaina
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\aruba
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\asuncion
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\atikokan
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\atka
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\bahia
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\bahia_banderas
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\barbados
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\belem
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\belize
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\blanc-sablon
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\boa_vista
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\bogota
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\boise
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\buenos_aires
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\cambridge_bay
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\campo_grande
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\cancun
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\caracas
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\catamarca
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\cayenne
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\cayman
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\chicago
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\chihuahua
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\ciudad_juarez
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\coral_harbour
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\cordoba
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\costa_rica
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\creston
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\cuiaba
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\curacao
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\danmarkshavn
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\dawson
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\dawson_creek
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\denver
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\detroit
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\dominica
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\edmonton
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\eirunepe
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\el_salvador
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\ensenada
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\fort_nelson
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\fort_wayne
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\fortaleza
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\glace_bay
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\godthab
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\goose_bay
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\grand_turk
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\grenada
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\guadeloupe
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\guatemala
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\guayaquil
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\guyana
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\halifax
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\havana
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\hermosillo
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\indianapolis
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\inuvik
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\iqaluit
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\jamaica
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\jujuy
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\juneau
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\knox_in
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\kralendijk
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\la_paz
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\lima
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\los_angeles
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\louisville
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\lower_princes
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\maceio
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\managua
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\manaus
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\marigot
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\martinique
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\matamoros
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\mazatlan
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\mendoza
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\menominee
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\merida
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\metlakatla
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\mexico_city
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\miquelon
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\moncton
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\monterrey
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\montevideo
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\montreal
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\montserrat
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\nassau
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\new_york
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\nipigon
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\nome
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\noronha
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\nuuk
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\ojinaga
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\panama
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\pangnirtung
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\paramaribo
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\phoenix
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\port-au-prince
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\port_of_spain
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\porto_acre
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\porto_velho
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\puerto_rico
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\punta_arenas
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\rainy_river
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\rankin_inlet
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\recife
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\regina
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\resolute
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\rio_branco
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\rosario
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\santa_isabel
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\santarem
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\santiago
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\santo_domingo
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\sao_paulo
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\scoresbysund
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\shiprock
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\sitka
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\st_barthelemy
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\st_johns
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\st_kitts
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\st_lucia
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\st_thomas
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\st_vincent
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\swift_current
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\tegucigalpa
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\thule
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\thunder_bay
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\tijuana
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\toronto
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\tortola
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\vancouver
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\virgin
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\whitehorse
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\winnipeg
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\yakutat
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\yellowknife
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\argentina\buenos_aires
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\argentina\catamarca
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\argentina\comodrivadavia
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\argentina\cordoba
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\argentina\jujuy
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\argentina\la_rioja
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\argentina\mendoza
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\argentina\rio_gallegos
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\argentina\salta
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\argentina\san_juan
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\argentina\san_luis
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\argentina\tucuman
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\argentina\ushuaia
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\indiana\indianapolis
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\indiana\knox
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\indiana\marengo
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\indiana\petersburg
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\indiana\tell_city
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\indiana\vevay
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\indiana\vincennes
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\indiana\winamac
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\kentucky\louisville
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\kentucky\monticello
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\north_dakota\beulah
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\north_dakota\center
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\america\north_dakota\new_salem
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\antarctica\casey
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\antarctica\davis
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\antarctica\dumontdurville
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\antarctica\macquarie
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\antarctica\mawson
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\antarctica\mcmurdo
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\antarctica\palmer
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\antarctica\rothera
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\antarctica\south_pole
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\antarctica\syowa
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\antarctica\troll
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\antarctica\vostok
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\arctic\longyearbyen
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\aden
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\almaty
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\amman
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\anadyr
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\aqtau
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\aqtobe
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\ashgabat
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\ashkhabad
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\atyrau
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\baghdad
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\bahrain
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\baku
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\bangkok
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\barnaul
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\beirut
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\bishkek
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\brunei
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\calcutta
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\chita
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\choibalsan
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\chongqing
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\chungking
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\colombo
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\dacca
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\damascus
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\dhaka
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\dili
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\dubai
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\dushanbe
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\famagusta
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\gaza
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\harbin
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\hebron
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\ho_chi_minh
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\hong_kong
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\hovd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\irkutsk
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\istanbul
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\jakarta
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\jayapura
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\jerusalem
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\kabul
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\kamchatka
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\karachi
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\kashgar
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\kathmandu
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\katmandu
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\khandyga
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\kolkata
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\krasnoyarsk
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\kuala_lumpur
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\kuching
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\kuwait
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\macao
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\macau
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\magadan
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\makassar
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\manila
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\muscat
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\nicosia
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\novokuznetsk
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\novosibirsk
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\omsk
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\oral
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\phnom_penh
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\pontianak
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\pyongyang
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\qatar
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\qostanay
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\qyzylorda
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\rangoon
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\riyadh
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\saigon
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\sakhalin
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\samarkand
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\seoul
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\shanghai
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\singapore
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\srednekolymsk
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\taipei
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\tashkent
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\tbilisi
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\tehran
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\tel_aviv
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\thimbu
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\thimphu
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\tokyo
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\tomsk
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\ujung_pandang
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\ulaanbaatar
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\ulan_bator
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\urumqi
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\ust-nera
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\vientiane
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\vladivostok
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\yakutsk
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\yangon
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\yekaterinburg
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\asia\yerevan
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\atlantic\azores
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\atlantic\bermuda
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\atlantic\canary
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\atlantic\cape_verde
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\atlantic\faeroe
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\atlantic\faroe
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\atlantic\jan_mayen
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\atlantic\madeira
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\atlantic\reykjavik
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\atlantic\south_georgia
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\atlantic\st_helena
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\atlantic\stanley
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\act
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\adelaide
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\brisbane
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\broken_hill
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\canberra
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\currie
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\darwin
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\eucla
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\hobart
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\lhi
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\lindeman
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\lord_howe
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\melbourne
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\nsw
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\north
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\perth
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\queensland
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\south
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\sydney
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\tasmania
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\victoria
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\west
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\australia\yancowinna
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\brazil\acre
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\brazil\denoronha
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\brazil\east
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\brazil\west
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\canada\atlantic
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\canada\central
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\canada\eastern
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\canada\mountain
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\canada\newfoundland
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\canada\pacific
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\canada\saskatchewan
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\canada\yukon
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\chile\continental
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\chile\easterisland
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt+0
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt+1
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt+10
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt+11
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt+12
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt+2
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt+3
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt+4
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt+5
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt+6
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt+7
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt+8
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt+9
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt-0
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt-1
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt-10
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt-11
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt-12
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt-13
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt-14
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt-2
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt-3
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt-4
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt-5
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt-6
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt-7
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt-8
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt-9
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\gmt0
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\greenwich
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\uct
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\utc
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\universal
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\etc\zulu
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\amsterdam
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\andorra
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\astrakhan
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\athens
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\belfast
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\belgrade
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\berlin
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\bratislava
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\brussels
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\bucharest
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\budapest
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\busingen
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\chisinau
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\copenhagen
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\dublin
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\gibraltar
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\guernsey
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\helsinki
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\isle_of_man
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\istanbul
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\jersey
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\kaliningrad
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\kiev
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\kirov
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\kyiv
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\lisbon
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\ljubljana
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\london
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\luxembourg
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\madrid
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\malta
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\mariehamn
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\minsk
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\monaco
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\moscow
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\nicosia
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\oslo
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\paris
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\podgorica
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\prague
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\riga
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\rome
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\samara
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\san_marino
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\sarajevo
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\saratov
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\simferopol
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\skopje
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\sofia
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\stockholm
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\tallinn
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\tirane
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\tiraspol
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\ulyanovsk
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\uzhgorod
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\vaduz
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\vatican
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\vienna
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\vilnius
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\volgograd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\warsaw
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\zagreb
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\zaporozhye
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\europe\zurich
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\indian\antananarivo
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\indian\chagos
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\indian\christmas
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\indian\cocos
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\indian\comoro
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\indian\kerguelen
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\indian\mahe
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\indian\maldives
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\indian\mauritius
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\indian\mayotte
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\indian\reunion
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\mexico\bajanorte
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\mexico\bajasur
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\mexico\general
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\apia
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\auckland
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\bougainville
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\chatham
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\chuuk
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\easter
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\efate
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\enderbury
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\fakaofo
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\fiji
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\funafuti
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\galapagos
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\gambier
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\guadalcanal
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\guam
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\honolulu
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\johnston
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\kanton
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\kiritimati
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\kosrae
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\kwajalein
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\majuro
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\marquesas
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\midway
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\nauru
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\niue
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\norfolk
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\noumea
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\pago_pago
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\palau
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\pitcairn
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\pohnpei
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\ponape
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\port_moresby
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\rarotonga
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\saipan
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\samoa
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\tahiti
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\tarawa
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\tongatapu
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\truk
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\wake
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\wallis
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\pacific\yap
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\us\alaska
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\us\aleutian
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\us\arizona
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\us\central
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\us\east-indiana
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\us\eastern
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\us\hawaii
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\us\indiana-starke
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\us\michigan
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\us\mountain
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\us\pacific
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\pytz\zoneinfo\us\samoa
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\zstandard\_cffi.pyd
%LOCALAPPDATA%\hellogreen_4856_134021735257557175\zstandard\backend_c.pyd
%TEMP%\gen_py\3.12\__init__.py
%TEMP%\gen_py\3.12\dicts.dat
%LOCALAPPDATA%\microsoft\windows\actioncentercache\windows-systemtoast-securityandmaintenance_10_0.png

Miscellaneous

Searches for the following windows

ClassName: 'Registry Monitor - Sysinternals: www.sysinternals.com' WindowName: ''
ClassName: '18467-41' WindowName: ''

Creates and executes the following

'%LOCALAPPDATA%\hellogreen_4856_134021735257557175\bbs.exe'

Executes the following

'<SYSTEM32>\cmd.exe' /c cls

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial