17e17c0be44eceb4b719d80e0647df5fe5f112067dcbeb17a33ee2053422d6c7

Analysis

max time kernel
150s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/06/2026, 07:32

Target
MeowResolverBypassFinder.exe
Size 17.7MB
Sample260628-jdbrysgs3k
SHA256 17e17c0be44eceb4b719d80e0647df5fe5f112067dcbeb17a33ee2053422d6c7
MD5 8643da63501233de41f53b994db67b7a
SHA1 9f881a11bb09997f42ac485909139197e4a8a578
SHA512 5406911eef78bcc443c42024252a3c9957ddd7e1807c03536ffd0e798d4d60f22fb6b3ba48a5fb6aa2316a36e1b3c3812bfb8dbd4034eefbb0b826f5ca71a96e
SSDEEP 196608:7dvIyQs3CY9eO8OwcPFGUeRGILzHifw2M5f2CUbWa7:7drz7whrcIafw2M5uCUC4
TLSH
T1D617BE16E3E942A9E57EC178C6634517EBB17855232097CF0058EE592F33BD0AEBE321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 7064 wrote to memory of 6412	7064	MeowResolverBypassFinder.exe	91

C:\Users\Admin\AppData\Local\Temp\MeowResolverBypassFinder.exe
"C:\Users\Admin\AppData\Local\Temp\MeowResolverBypassFinder.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:7064
- C:\Windows\SYSTEM32\fsutil.exe
  "fsutil" usn queryjournal C:
  2⤵
  PID:6412