Analysis
- max time kernel
149s - max time network
122s - platform
windows10_x64 - resource
win10 - submitted
29/06/2020, 08:08
Static task
static1
Behavioral task
behavioral1
Sample
CatFN.bin.exe
Resource
win7
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
CatFN.bin.exe
Resource
win10
windows10_x64
0 signatures
0 seconds
General
- Target CatFN.bin.exe
- Size 598KB
- Sample200629-fpvebmglpa
- SHA256 b24cb4cd3db305d5451cb3c0d0e60fe578b1fd38aca4be6032fb0ce2f0b786b4
- MD5 168a064e52bc4794df93d3b2a7282cc5
- SHA1 112cbb8210fc8980f6ad6815874d437e54cc0f82
- SHA512 e701cbcd5fe4d8af9eae00c9865bbbb2ec49b8d48ec330f52d90629269bbf514604b0c6b814266476d8fa828b87672b379249259fc8a667cf2fb6f7054ed2420
- MD5 SHA1 SHA512
Score
7/10
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 6 IoCs
description pid Process procid_target PID 3932 wrote to memory of 2996 3932 CatFN.bin.exe 67 PID 3932 wrote to memory of 2996 3932 CatFN.bin.exe 67 PID 2996 wrote to memory of 3236 2996 cmd.exe 69 PID 2996 wrote to memory of 3236 2996 cmd.exe 69 PID 3932 wrote to memory of 3968 3932 CatFN.bin.exe 70 PID 3932 wrote to memory of 3968 3932 CatFN.bin.exe 70 - Suspicious behavior: EnumeratesProcesses 1524 IoCs
pid Process 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe 3932 CatFN.bin.exe - Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Enumerates connected drives 3 TTPs
- Modifies control panel 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2066881839-3229799743-3576549721-1000\Control Panel\Desktop CatFN.bin.exe - Sets desktop wallpaper using registry 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2066881839-3229799743-3576549721-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\wl.jpg" CatFN.bin.exe - Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2066881839-3229799743-3576549721-1000_Classes\Local Settings CatFN.bin.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\CatFN.bin.exe"C:\Users\Admin\AppData\Local\Temp\CatFN.bin.exe"1⤵
- Suspicious use of WriteProcessMemory
- Suspicious behavior: EnumeratesProcesses
- Modifies control panel
- Sets desktop wallpaper using registry
- Modifies registry class
PID:3932 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c wusa C:\Users\Admin\AppData\Local\Temp\64.cab /quiet /extract:C:\Windows\system32\migwiz\ & exit2⤵
- Suspicious use of WriteProcessMemory
PID:2996 -
C:\Windows\system32\wusa.exewusa C:\Users\Admin\AppData\Local\Temp\64.cab /quiet /extract:C:\Windows\system32\migwiz\3⤵PID:3236
-
-
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\888.vbs"2⤵PID:3968
-