Malware Analysis Report

2025-01-18 12:23

Sample ID 221115-p47vzaea25
Target 0dd05e9a74cdc3e174bec63b67cd86db.exe
SHA256 cf7bad0b2b13efccb7df15f015ec51d766d5a63a2b5acec200fff093c6d70c03
Tags
wshrat persistence trojan
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V6

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

cf7bad0b2b13efccb7df15f015ec51d766d5a63a2b5acec200fff093c6d70c03

Threat Level: Known bad

The file 0dd05e9a74cdc3e174bec63b67cd86db.exe was found to be: Known bad.

Malicious Activity Summary

wshrat persistence trojan

WSHRAT payload

WSHRAT

Blocklisted process makes network request

Executes dropped EXE

Checks computer location settings

Drops startup file

Loads dropped DLL

Adds Run key to start application

Looks up external IP address via web service

Suspicious use of SetThreadContext

Program crash

Enumerates physical storage devices

NSIS installer

Suspicious use of SendNotifyMessage

Suspicious use of FindShellTrayWindow

Suspicious behavior: MapViewOfSection

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2022-11-15 12:54

Signatures

NSIS installer

installer
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2022-11-15 12:54

Reported

2022-11-15 12:56

Platform

win7-20221111-en

Max time kernel

150s

Max time network

34s

Command Line

"C:\Users\Admin\AppData\Local\Temp\0dd05e9a74cdc3e174bec63b67cd86db.exe"

Signatures

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\0dd05e9a74cdc3e174bec63b67cd86db.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A

Enumerates physical storage devices

Suspicious behavior: MapViewOfSection

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1732 wrote to memory of 872 N/A C:\Users\Admin\AppData\Local\Temp\0dd05e9a74cdc3e174bec63b67cd86db.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 1732 wrote to memory of 872 N/A C:\Users\Admin\AppData\Local\Temp\0dd05e9a74cdc3e174bec63b67cd86db.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 1732 wrote to memory of 872 N/A C:\Users\Admin\AppData\Local\Temp\0dd05e9a74cdc3e174bec63b67cd86db.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 1732 wrote to memory of 872 N/A C:\Users\Admin\AppData\Local\Temp\0dd05e9a74cdc3e174bec63b67cd86db.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1280 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1280 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1280 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1280 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 428 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 428 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 428 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 428 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 580 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 580 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 580 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 580 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1176 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1176 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1176 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1176 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1872 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1872 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1872 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1872 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1112 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1112 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1112 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1112 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1700 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1700 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1700 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1700 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1772 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1772 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1772 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1772 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1564 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1564 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1564 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1564 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 700 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 700 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 700 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 700 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1156 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1156 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1156 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1156 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1008 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1008 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1008 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1008 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1352 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1352 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1352 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1352 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1276 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1276 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1276 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1276 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1276 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1344 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1344 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe
PID 872 wrote to memory of 1344 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe

Processes

C:\Users\Admin\AppData\Local\Temp\0dd05e9a74cdc3e174bec63b67cd86db.exe

"C:\Users\Admin\AppData\Local\Temp\0dd05e9a74cdc3e174bec63b67cd86db.exe"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

Network

N/A

Files

memory/1732-54-0x00000000759C1000-0x00000000759C3000-memory.dmp

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

memory/872-56-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\bhxbv.au3

MD5 15c76149d977e7b58cd8ec39e9fc0ffc
SHA1 df15820647280ed3570411bd6d4b7f53de120a58
SHA256 07f89ca81aaa00e7bbba649b436badd01c3890f5d3c4ec982c91908aea6c1dca
SHA512 1935a375d29e645335ddd870bfe767a1a2be9af7b18138ff0490d3aa815f09ce37719424c816c8139ffdc56dc1f3d2c261f1925b3bbadc2caeb4594be7a995d6

C:\Users\Admin\AppData\Local\Temp\jhrljxs.o

MD5 3cddfd67ea5d870e028336f33ed3e2bf
SHA1 12e888cd359c5446b95d554caf95ce51f013260b
SHA256 b13a437518174975b7c229806c328c0294e285ee70ac34e3bad96bfbea6108f1
SHA512 890f3b7847a639e2e4e7dd5a5b7d075fecce956baaefab6dcf31cfddea3b960689a3b9fa42a56788f668d52d6c23120e49b7a55ce90caa2f10bc7c067c569233

C:\Users\Admin\AppData\Local\Temp\bduwbvp.s

MD5 763ecd63206a47ff65311e4044d5ad9d
SHA1 834b765c686043538aa1103322211d64fd08eb92
SHA256 564b8f221a4c2cc40ad9979d19125883307a7f623a58de6ede10b9ffc2db0e7e
SHA512 db4050f06e7b81b76b8cd65fb2365b6bb703057f9472d6da413b15bdd4d36e39a213a8aab4715e0c888bc61d99ef765c1a7442afad22845f4e966d7468b12ca4

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

Analysis: behavioral2

Detonation Overview

Submitted

2022-11-15 12:54

Reported

2022-11-15 12:56

Platform

win10v2004-20220812-en

Max time kernel

146s

Max time network

152s

Command Line

"C:\Users\Admin\AppData\Local\Temp\0dd05e9a74cdc3e174bec63b67cd86db.exe"

Signatures

WSHRAT

trojan wshrat

WSHRAT payload

Description Indicator Process Target
N/A N/A N/A N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-2891029575-1462575-1165213807-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A

Drops startup file

Description Indicator Process Target
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wApVJ.vbs C:\Windows\SysWOW64\wscript.exe N/A
File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wApVJ.vbs C:\Windows\SysWOW64\wscript.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-2891029575-1462575-1165213807-1000\software\microsoft\windows\currentversion\run C:\Windows\SysWOW64\wscript.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2891029575-1462575-1165213807-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\wApVJ = "wscript.exe //B \"C:\\Users\\Admin\\AppData\\Roaming\\wApVJ.vbs\"" C:\Windows\SysWOW64\wscript.exe N/A
Key created \REGISTRY\MACHINE\software\WOW6432Node\microsoft\windows\currentversion\run C:\Windows\SysWOW64\wscript.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\wApVJ = "wscript.exe //B \"C:\\Users\\Admin\\AppData\\Roaming\\wApVJ.vbs\"" C:\Windows\SysWOW64\wscript.exe N/A

Looks up external IP address via web service

Description Indicator Process Target
N/A ip-api.com N/A N/A

Suspicious use of SetThreadContext

Description Indicator Process Target
PID 5036 set thread context of 1696 N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe

Enumerates physical storage devices

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Users\Admin\AppData\Local\Temp\ocymim.exe

Suspicious behavior: MapViewOfSection

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\ocymim.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\0dd05e9a74cdc3e174bec63b67cd86db.exe

"C:\Users\Admin\AppData\Local\Temp\0dd05e9a74cdc3e174bec63b67cd86db.exe"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

"C:\Users\Admin\AppData\Local\Temp\ocymim.exe" "C:\Users\Admin\AppData\Local\Temp\bhxbv.au3"

C:\Windows\SysWOW64\wscript.exe

"C:\Windows\System32\wscript.exe" "C:\Users\Admin\AppData\Roaming\wApVJ.vbs"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 1696 -ip 1696

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1696 -s 780

Network

Country Destination Domain Proto
N/A 8.8.8.8:53 ip-api.com udp
N/A 208.95.112.1:80 ip-api.com tcp
N/A 8.8.8.8:53 snkcyp.duckdns.org udp
N/A 194.180.48.65:44147 snkcyp.duckdns.org tcp
N/A 194.180.48.65:44147 snkcyp.duckdns.org tcp
N/A 52.178.17.2:443 tcp
N/A 194.180.48.65:44147 snkcyp.duckdns.org tcp
N/A 104.80.225.205:443 tcp
N/A 194.180.48.65:44147 snkcyp.duckdns.org tcp
N/A 67.24.27.254:80 tcp
N/A 67.24.27.254:80 tcp
N/A 67.24.27.254:80 tcp
N/A 8.8.8.8:53 96.108.152.52.in-addr.arpa udp
N/A 194.180.48.65:44147 snkcyp.duckdns.org tcp
N/A 52.109.12.20:443 tcp
N/A 194.180.48.65:44147 snkcyp.duckdns.org tcp
N/A 194.180.48.65:44147 snkcyp.duckdns.org tcp
N/A 194.180.48.65:44147 snkcyp.duckdns.org tcp
N/A 194.180.48.65:44147 snkcyp.duckdns.org tcp
N/A 194.180.48.65:44147 snkcyp.duckdns.org tcp
N/A 194.180.48.65:44147 snkcyp.duckdns.org tcp
N/A 194.180.48.65:44147 snkcyp.duckdns.org tcp

Files

memory/5036-132-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\bhxbv.au3

MD5 15c76149d977e7b58cd8ec39e9fc0ffc
SHA1 df15820647280ed3570411bd6d4b7f53de120a58
SHA256 07f89ca81aaa00e7bbba649b436badd01c3890f5d3c4ec982c91908aea6c1dca
SHA512 1935a375d29e645335ddd870bfe767a1a2be9af7b18138ff0490d3aa815f09ce37719424c816c8139ffdc56dc1f3d2c261f1925b3bbadc2caeb4594be7a995d6

C:\Users\Admin\AppData\Local\Temp\jhrljxs.o

MD5 3cddfd67ea5d870e028336f33ed3e2bf
SHA1 12e888cd359c5446b95d554caf95ce51f013260b
SHA256 b13a437518174975b7c229806c328c0294e285ee70ac34e3bad96bfbea6108f1
SHA512 890f3b7847a639e2e4e7dd5a5b7d075fecce956baaefab6dcf31cfddea3b960689a3b9fa42a56788f668d52d6c23120e49b7a55ce90caa2f10bc7c067c569233

C:\Users\Admin\AppData\Local\Temp\bduwbvp.s

MD5 763ecd63206a47ff65311e4044d5ad9d
SHA1 834b765c686043538aa1103322211d64fd08eb92
SHA256 564b8f221a4c2cc40ad9979d19125883307a7f623a58de6ede10b9ffc2db0e7e
SHA512 db4050f06e7b81b76b8cd65fb2365b6bb703057f9472d6da413b15bdd4d36e39a213a8aab4715e0c888bc61d99ef765c1a7442afad22845f4e966d7468b12ca4

memory/1696-137-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Local\Temp\ocymim.exe

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

memory/1696-139-0x0000000000400000-0x000000000049C000-memory.dmp

memory/1472-140-0x0000000000000000-mapping.dmp

C:\Users\Admin\AppData\Roaming\wApVJ.vbs

MD5 f57851c2992b81862fb373cc0986ffa8
SHA1 78e8025e28e2198bc9931d0a825e31ad25ea0069
SHA256 4656fa5210092757e338ed88d2e1a071e3f8da982b82046f5705af6fd8be7733
SHA512 7dc7c539ae7a67401ed490b680070f26a13d6a839301970aef7306c4c0e5505059493692b53cbf5593c6b91292331e1f0e47c65b0be49fe99317fdd7f722024c