664f8e49f45b3fda22f2deb4a164e9dd0737cd8ec65aef928526b86424bb3726

Analysis

max time kernel
150s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/08/2026, 20:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-13_757b7e2991187e4644f8092801547730_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
Size 5.5MB
Sample260813-zbbbeayala
SHA256 664f8e49f45b3fda22f2deb4a164e9dd0737cd8ec65aef928526b86424bb3726
MD5 757b7e2991187e4644f8092801547730
SHA1 2794280875a99f47ddcf347f3eaa5f57ecc30058
SHA512 4eab71b675ecbbc4eaf2b8c32e0803621202cd920c60835c6082f683dad199be6a1957ef70158698ed84a643b4113b243e7d19f4749a7426b80d965a6f4e56cf
SSDEEP 98304:LJoAE23/rqTkwCx4Obd1IEkPxxp0wpviMiF:SAZ/2TQ6H5
TLSH
T146464B16BA6B94ACD05AC474C3468A239E2170DF1B36BAFF418485383F6ABF15B3D714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion persistence

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
5384	BridgeAgent.exe
4676	BridgeAgent.exe

Adds Run key to start application 2 TTPs 3 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe

Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

Command interpreters often include specific commands/flags that ignore errors and other hangups.

defense_evasion

Ignore Process Interrupts

T1564.011

pid	Process
5964	powershell.exe

Modifies registry key 1 TTPs 3 IoCs

Modify Registry

T1112

pid	Process
368	reg.exe
5616	reg.exe
3232	reg.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5964	powershell.exe
5964	powershell.exe

Suspicious use of AdjustPrivilegeToken 43 IoCs

description	pid	Process
Token: SeDebugPrivilege	5964	powershell.exe
Token: SeIncreaseQuotaPrivilege	5964	powershell.exe
Token: SeSecurityPrivilege	5964	powershell.exe
Token: SeTakeOwnershipPrivilege	5964	powershell.exe
Token: SeLoadDriverPrivilege	5964	powershell.exe
Token: SeSystemProfilePrivilege	5964	powershell.exe
Token: SeSystemtimePrivilege	5964	powershell.exe
Token: SeProfSingleProcessPrivilege	5964	powershell.exe
Token: SeIncBasePriorityPrivilege	5964	powershell.exe
Token: SeCreatePagefilePrivilege	5964	powershell.exe
Token: SeBackupPrivilege	5964	powershell.exe
Token: SeRestorePrivilege	5964	powershell.exe
Token: SeShutdownPrivilege	5964	powershell.exe
Token: SeDebugPrivilege	5964	powershell.exe
Token: SeSystemEnvironmentPrivilege	5964	powershell.exe
Token: SeRemoteShutdownPrivilege	5964	powershell.exe
Token: SeUndockPrivilege	5964	powershell.exe
Token: SeManageVolumePrivilege	5964	powershell.exe
Token: 33	5964	powershell.exe
Token: 34	5964	powershell.exe
Token: 35	5964	powershell.exe
Token: 36	5964	powershell.exe
Token: SeIncreaseQuotaPrivilege	5964	powershell.exe
Token: SeSecurityPrivilege	5964	powershell.exe
Token: SeTakeOwnershipPrivilege	5964	powershell.exe
Token: SeLoadDriverPrivilege	5964	powershell.exe
Token: SeSystemProfilePrivilege	5964	powershell.exe
Token: SeSystemtimePrivilege	5964	powershell.exe
Token: SeProfSingleProcessPrivilege	5964	powershell.exe
Token: SeIncBasePriorityPrivilege	5964	powershell.exe
Token: SeCreatePagefilePrivilege	5964	powershell.exe
Token: SeBackupPrivilege	5964	powershell.exe
Token: SeRestorePrivilege	5964	powershell.exe
Token: SeShutdownPrivilege	5964	powershell.exe
Token: SeDebugPrivilege	5964	powershell.exe
Token: SeSystemEnvironmentPrivilege	5964	powershell.exe
Token: SeRemoteShutdownPrivilege	5964	powershell.exe
Token: SeUndockPrivilege	5964	powershell.exe
Token: SeManageVolumePrivilege	5964	powershell.exe
Token: 33	5964	powershell.exe
Token: 34	5964	powershell.exe
Token: 35	5964	powershell.exe
Token: 36	5964	powershell.exe

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 4228 wrote to memory of 368	4228	2026-08-13_757b7e2991187e4644f8092801547730_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe	89
PID 4228 wrote to memory of 5384	4228	2026-08-13_757b7e2991187e4644f8092801547730_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe	91
PID 5384 wrote to memory of 5616	5384	BridgeAgent.exe	92
PID 5384 wrote to memory of 4676	5384	BridgeAgent.exe	94
PID 4676 wrote to memory of 2884	4676	BridgeAgent.exe	96
PID 4676 wrote to memory of 5964	4676	BridgeAgent.exe	98
PID 4676 wrote to memory of 4240	4676	BridgeAgent.exe	101
PID 4676 wrote to memory of 3232	4676	BridgeAgent.exe	103
PID 4676 wrote to memory of 3296	4676	BridgeAgent.exe	105
PID 4676 wrote to memory of 6116	4676	BridgeAgent.exe	107
PID 4676 wrote to memory of 4248	4676	BridgeAgent.exe	109
PID 4676 wrote to memory of 3940	4676	BridgeAgent.exe	111
PID 4676 wrote to memory of 920	4676	BridgeAgent.exe	113
PID 4676 wrote to memory of 4544	4676	BridgeAgent.exe	115

C:\Users\Admin\AppData\Local\Temp\2026-08-13_757b7e2991187e4644f8092801547730_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-13_757b7e2991187e4644f8092801547730_akira_cobalt-strike_glassworm_rusty-stealer_satacom.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4228
- C:\Windows\system32\reg.exe
  "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
  2⤵
  - Adds Run key to start application
  - Modifies registry key
  PID:368
- C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
  "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --supervisor
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:5384
- - C:\Windows\system32\reg.exe
    "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
    3⤵
    - Adds Run key to start application
    - Modifies registry key
    PID:5616
- - C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
    "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --runtime --supervisor-pid 5384
    3⤵
    - Executes dropped EXE
    - Suspicious use of WriteProcessMemory
    PID:4676
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:2884
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      "powershell.exe" -NoLogo -NoProfile -NonInteractive -Command "$ErrorActionPreference='SilentlyContinue'; $exe=$env:BRIDGE_TRUST_EXE; $sig=Get-AuthenticodeSignature -LiteralPath $exe; $sigStatus=if($sig){[string]$sig.Status}else{'Unknown'}; $publisher=if($sig -and $sig.SignerCertificate){[string]$sig.SignerCertificate.Subject}else{''}; $mp=Get-MpComputerStatus; $tamper=if($null -ne $mp -and $null -ne $mp.IsTamperProtected){if([bool]$mp.IsTamperProtected){'Enabled'}else{'Disabled'}}else{'Unknown'}; $source='Local'; if(Test-Path 'HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender'){$source='MDM'}elseif(Test-Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender'){$source='Group Policy'}; $onboard=(Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows Advanced Threat Protection\Status' -Name OnboardingState -ErrorAction SilentlyContinue).OnboardingState; if($onboard -eq 1 -and $source -eq 'Local'){$source='Defender for Endpoint'}; $detection='Unknown'; if(Get-Command Get-MpThreatDetection -ErrorAction SilentlyContinue){$matches=@(Get-MpThreatDetection | Where-Object { (($_.Resources | Out-String) -like ('*'+$exe+'*')) });$detection=if($matches.Count -gt 0){'Detection observed'}else{'None observed'}}; [ordered]@{signature_status=$sigStatus;publisher=$publisher;tamper_protection=$tamper;management_source=$source;defender_detection=$detection}|ConvertTo-Json -Compress"
      4⤵
      Hide Artifacts: Ignore Process Interrupts
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:5964
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:4240
  - - C:\Windows\system32\reg.exe
      "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
      4⤵
      Adds Run key to start application
      Modifies registry key
      PID:3232
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:3296
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:6116
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:4248
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:3940
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:920
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:4544

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Hide Artifacts

T1564

Ignore Process Interrupts

T1564.011

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 4KB
SHA256 dc06c8ea82606b3c8d018e6df2c7f677afff16db9e172877ef46c238e85930b6
MD5 1f2fcdbd277bdced5e06ba2ed82aeb36
SHA1 87ace3b9df7758a949a34c3259c78326873132b3
SHA512 92c463c9b58d3c776df63ee1c1f9af5e226df0c9ae27ee8d998024892f5a9ca5e5e40d79a260123ed1b219841b83fe9144fa707558a581e14bcc4700ec6dabf5
SSDEEP 96:oE1F4ZXsCZcSRcZTLP1F0ZszCsnG1FiHsZAgfFm1SCH:bFVhFbFQFrW1Sm
TLSH
T10991A0285EE8C4334C038A5EF63A4F82BF71F81DDA4799086F72655A93D2D8F5C0917A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 c4f09a937dedb11f01d71a00371eb262789a82e643cf38a045ed0f7c31121387
MD5 3a4faf176f838280cdd296144cfa88e0
SHA1 2a751258ad7986f03efdee49a21d47369e175b5f
SHA512 21f72971c405d262c7d069ace91a0872ce28a3657d17a2b8ea49119359452cae3b214c911b2aefb36dc3aefac7987822eaa64143acdcd959f128daa5f58d60b1
TLSH
T1CB3183244DF9C1730C03D56FB63A4F85EAB1B80DEE471B089B72A64B52D2E4F5C4917A
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 90db5636f218698832740b1ca56481640b4e332b98397cfd4fe890f98b622197
MD5 1a607f27283b06a1f4ddb7fd6838c4cf
SHA1 fd285980cb53951bc0da455c8778ad9a8058b1dc
SHA512 01c4d3ae71cd5ef448a8ca7a33f9677bc08c84f0706bec76a8fa49bc788c6e3592a27c1047a44c588fb5bebe2acf3f4a93b83e142d3c8de5fbca6d5fd328985c
TLSH
T10E5183244EE8C5374C03DA6FB62A4FC5EE71F80DEA475A085F72B54A92D2D4F9C4903A
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 844a4d7599373db9540192608cb8fccd297fda10aba0d62f3b5cc53f05581e8f
MD5 c0b0b68d6fa2150b8080ea6515be4daf
SHA1 9b94513c4c343c19ccb91400e134ab48baa80205
SHA512 1c55daad43a4bfbc48b9ea586433aad62c31a842b749bcd454de771cfaf5780dae9ce392b49f9bdff71f28c3bc78d10eba920f9b08531d14437906b5ffe906f7
TLSH
T1C52190104DE9C1730C13E51AB57A4E8599F1B40DAF4B17045771964F12D2E4F184417A
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 3KB
SHA256 b32f6409cb3e9de7e2fce809d7d6233146da5b7d5f0b96bc9ccd6e6ff24eabae
MD5 246904c68299c8d2a0617487d4baa86c
SHA1 d87c228fa3c812c2db08d780b0b776c314f8c941
SHA512 c06af80721f3013a4a0096771173b8f7aad9b5bf4a57efe08ba2d3823433e3c6cc8d50daeb29ea46a5769c75ab113679b35345c291f5f76aba4be5167ca9b1ad
TLSH
T1335192244EE8C5334C038A6EB62A4F86FF71F81DD9475A085F72B54A92D2D4F9C4903A
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 3KB
SHA256 f12065df8f33cfba49418830bae4be07ae47c4d12995593393acf1c708bf92ee
MD5 9cb6cf170897728f2165bf4f22cff22a
SHA1 7911f6e2a9751e79868d998e4e260976110ae5dc
SHA512 a9f094ade992b91e94a3bc7faf3a51b79a25df35c3e075a99a896b333ce943de0dfd2b37c60df4ae7a8e8906e90e7c8993f535c4502b5d5cd74919324813b668
TLSH
T14E8190245EE8C0334C038A6EF62A4F86FF71F81DDA475A086F72654A92D2D8F5C0917A
MD5 SHA1 SHA512 TLSH

Submit Download

root-ca.crt

Path C:\Users\Admin\AppData\Local\Bridge\root-ca.crt
Size 607B
SHA256 ed55debc90067da4865114e7411471c0d95cba935b8b16b451643fd99d184660
MD5 d46514e0283ca13ad00937598ef74b38
SHA1 bae94612bc81fe46989606b9c8ed4a85307efc9d
SHA512 1575d82d1c00305e2d1a4447143dea629e641976c0aed274df4c6b9e9f0821e7e2ceb1335f12e69460432755bbee9fb16a759c80cfa6d4b166df442806002f1a
TLSH
T16AF002A50F196D88B003F1899C12973EC929C2E362D3F0694D283098D604AA059FE02F
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 704d79eafc873873a5514cbac67004bc41dd4e5fb0f8f37b6172db458dbc3b82
MD5 5d20f6435ede1f883636c37964d3d568
SHA1 115a8104b2fa04c605197168c7f0b5b3e3c2734e
SHA512 2b50150acb3db77e22a62077474b4de8594ee6523a32fc35d42a26f3eeb9dc2f7bf4ee85d1ef0de5c195577271daed1f03dcc6f7ef7c4606b0b5bf44a116230d
TLSH
T1B7B02B02C0B7CCC0C09C21C221A028424249000AAD0209046519CD00541640518CF48D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 699eca640622a8c37dbac507343a8f23942d77cf6d05b4a91ac715b6b51c65bf
MD5 b29beecb304cf295205e7800f2b66e4d
SHA1 4656a517705858f9aab45dc55f8e6e663d104d18
SHA512 fc90c07c30d26c41fc8dffe0461b0363d3d46711b38b7b9848c54e83372e6c0886a954d35fbb93e385ebf6a1b374441620d25c77863135b758dd3dd7feb4ae03
TLSH
T175B02203C0BBCCC0C0A822C222A02882828A000AAC020A08AA2ACE00880A00A288F88E
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 9b9fbbc5231664188afd38a02ae0c85cca7cb62c2a46bf6b3369e2e9f5bc09c6
MD5 fd7a0b62972ecbf7998259cca82dcf40
SHA1 4c45ce558bf30d74bea4225ae40f9ff253018ee6
SHA512 e5ba119b837af6e88d0116b3f1f107cafa3fd0a13b6b3ab806f89fca7612df7d76ecfc1a735b1d821cb6244c311e881d4f4bb7254f3dfac19134813c8d877bb2
TLSH
T1F5B02B03C177CCC0C09821C212912402424D040AEC030508A519CD004446005188F48C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 5a1ed23d73d364b0a4ca4f945ff7b5e540b13f7d92b033ba22f4b7d007fa1de2
MD5 9a09b0589921955e52a9b1fe984055a5
SHA1 df9314c4f6c2e732493fa677a67e0d64f975bc28
SHA512 ba33bf0a610d79e778dc24262f4655eefb87084e9aac72ff7ab13e511a8de3c17fdd63874199d66471564723d924be08849f4e6f900a6c0f9063b858a095b7c7
TLSH
T11AB02B02C57BCCC0C09825C2169024024649040AAC070904A619CD000446005148B48C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 73b04e303ab069a355c384c5a717110089c631150574840ff22c324b52754723
MD5 7e2f8dfeac702f6a8237eae6bcb404a3
SHA1 d11db971068349051e751209974e0eed921b2d0a
SHA512 d4179fe95030a9cc8cc3c73ded137e11cc1765c8e1f26adee071704763017ae6d25cba0099654b6b79064c1d05aedc517a6a087ebe9b411572e93e7c31527921
TLSH
T105B02B03C0B7CCC0C0AC25D2159024034289004AFC020504671DCD000406005148B44C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 14c6749a6420a80db97a8211db4643c4505ba5dbeba9e653293ff039cf4a0762
MD5 cedfae92160ad02c666f409e311efe1d
SHA1 4be70a17c81c568d7f7b41cf8b8cfdd903ab986a
SHA512 0ff98557976acf44bbfcc25338e222e1aa47bcea5afbe402da025aa8f505e505e151b00589984fb49d7dd6eac10463b426965dab642478f47096da86c9adfe9f
TLSH
T17CB02B02C077CCC0C09829C211A024024249000AEC0209046519CD040406005148B49D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 12a15d8876cd043b06ba2389c174c28af64327ce78e5db9c25388aa3da060acf
MD5 b8fc95abc1d13d5c3398fd7f67234dfb
SHA1 e4502c732f8452b94f21d1fd013aaf5d0fbe7458
SHA512 54ee386ceaf878463fbc3c9d2b2f4412eef05c368637b11eac089d1eb0dfaf715c5cdb7e164e0f6c9e64e00a9ead46ff9b3111893fc32e4d235d2543688bfafb
TLSH
T140B02B02C077CCC0C09825C2129424024249044EFC024944661DCD000406005188B48E
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 0d7b11bfb5d1a21f888dd298e6da7f7c02d31806d0a764d7851d67488f77e376
MD5 41505e49678a2a9733c69e6a683c2e79
SHA1 5919f88997b093aabdf8fbd736d3d34d56bb2259
SHA512 308f00d933008a63a6ab55e296d05366a7b09c93cbb815f2c26fb5fd14a621c374deab80531990e69d46debcd5bcb67464d5b19ae79702d27d7490f80257ae11
TLSH
T142B02B02C0B7CCC0C09821C211A424034649040AAC030504A519CD00144600514CB48C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 786fa8a94e767064708320bd9097eb4dece5997571091ac242060aebd8ea7313
MD5 7d0faff5f0a8f47c8b1dfb577de804f4
SHA1 476e607811b2518f6860fbf53e821b65fcf5a1b6
SHA512 41bd789d6ed044810488f9e3f1a4eea2cb7f3092606ad337ab24983f18d3de1f54a62b9b58182396c4c39991fa15cbc30e0c12a6a51b1fab22b8119fc8946990
TLSH
T18FB02B02C477CCC0C09825C222E024024649040EBC030504A51DCD000446405148B48C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 2c23502be784614386f3d84afc8a1e0bfa94bd10e65af7cd78e72900fd6d7e83
MD5 8309a8b3ca675e2f783ada06f3359b49
SHA1 3eb111cad9b6cd07b0fe4c156358ad02dad332a2
SHA512 17da2990d78f7fca1792f1d08d24464244980c731d187008a1f121e63ed1a96add1766f131a3ef4e3dd191565fb726f61feefcf870d0a9f86af07d7c87408dde
TLSH
T1B4B02B02C1BBCCC0C09821C2219024438249040AAC030504A529CD000846006248B88C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 bebc2061b9a83f32fb3709ee2879e6e0b9015f695df3f99b903abe907f66134a
MD5 e6ca999d2c6b55745cce078beb9bd265
SHA1 f30bda103eeadccaf4b52b1615d806d63a0b05d2
SHA512 0f30f5c279dc45ae1db9d3e686abf273c9b80b95b15a156b5a6645378ffce831438638dc08cff99141cdf6ab57b6162e71dc57ee77b491736e01d5e5791a4b60
TLSH
T138B02B02C17BCCC0C0A821C2269028428249000AAC0209046619CD004406105188F48D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 b2e049031c9bd229ce37775a79a4cc76ec85c7b643132f2ec3f428e039eb4403
MD5 b3ab2ac6d3a096936529c9b26ee62f65
SHA1 ef834c7bec03c553dc79297b8c01f8593657d80d
SHA512 7ec0da476e65b3171cbbeb2d56d2f078b00887ab6e2cc9abadcc97e546ee2202916580c8d32f02619b3ab923a6166194051759f3e47ee0f83b91512027ee4caa
TLSH
T1FDB02B02C1B7CCC0C0D825C2119024024249400AAC0309146519CD00040A405148B48D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 882e98ccc4be06a65aaa3155cf46d74ec7a76a0ec0df9f1e2b4ec6b47a2f9fe9
MD5 b389441f5554ae4ae51d96cf6466ece7
SHA1 73feb6bf50c802466e906aa16d839ed24e4b8f5a
SHA512 7d5032eff689bd72011e6dbaecdc6ee8fcb2043c03208be1cd935b60261685e1f7751c33f74d845b450948013b2e23da40e2f8401d3871efe0d0b7027d992171
TLSH
T100B02B02C077CCC0C09821C211902C82424A000AAC020D046519CD00045600514CF48D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 ef928146eb3f58453385a28dcaf09b708d55ae7a5786409a75492c9a0cf417f8
MD5 05c69c8299f8933032829c7367f20f3a
SHA1 cb27b436127b123780756f130158f63e0c27d7c5
SHA512 0d486abc98fac2cd9badd0e6d532740959f40bc893fabaa31c5cffdc22b0a79763e3f9f2091506a2e11ba1ad398903cb271658b3335e9cad3d154906ab662bf5
TLSH
T1B2B09B42D577CDD4C19825C251952842464D444AED534554A519CD045556505598F49D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 477d53ecceee8e30e6f6ad39e7dc935af66cc204a0ed7333acb0cb3dab424d25
MD5 09cd55b6876e91622cfdafbb064a04c3
SHA1 26f24f8f44edd751db2688e97de7d957e1ccb630
SHA512 bea9552c112954c872e480324b2a7b1befde23fe31e3dd1bf64858249988fa9995c04152e201a5af49801c5717e6471ba9060003a4ff28b281421f1ff0784c93
TLSH
T169B02B02C077CCC0C09821C211902802464E040AAC070504A519CD000446005148B4CC
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 2e8ce11ab5454bfd6b29bf4bcd4585cf737db844e1b903bffe50f93b668b54cb
MD5 5f21f8db7ede1749e458fc7b2af10f60
SHA1 5dadf63945ea3a10459c26653d8a8d7bd2427cf6
SHA512 8781e363ed70affa29d0f74bfcbf35df3e9422e8a348bf9a27f6cc899f6af6f932f10e17e51970e39d6cfe27f45a9f63b2950d53bf7966505ad35fed5b01cd07
TLSH
T16EB02202C0BBCCC0C0A82AC222A03802828E000AAC020A08AA2ACE00080A08A288F88E
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 6b4100599dccb93ea2d32f4003a173d1fb19c53b300771b9519a28f57d739ee8
MD5 368e435997150a098509e5d41135d675
SHA1 8158f262d54b91af248844ef6801997e58d361b5
SHA512 08dbd13f24132655a8f181dcd982eadf533ddcf1a9185390d59c3a4e27bec48bb9cb885ffffcac3edef5a994b84878c56ed789f2eb84a77d50b3bbdb517c2793
TLSH
T1C0B02B03C073CCC0C0AC25C2119424034249040AAC0605046519CE000406005248B45D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 13ea7cb4d1dde05db63759c45bc0963faf8ebc666d31ebe8681a8bfd4e8c0112
MD5 f27e58a73f3f4174d0df971287375ca5
SHA1 84817782189fc40dfdd221f8c265d76c5a5b6fd5
SHA512 c14d23427129cf72a1ff1d7bea25af5ee3fb5ae291a9ac659470eddb572b56d7d82802c4655ee555157193cc169bfabdc3980b2bebeffee795fc8b6019a7a689
TLSH
T1BFB09B42D577CDD4C19825C251952442464D444AED534954A519CD04555E505598F49D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 f7fe4215233920c989941d739b785ff26fd8e8a10d4b4f89007651b92934b39b
MD5 d19c229d985db6c433c5b827223596c9
SHA1 c5385fa3bc55662f9c186088021d449e0b06f199
SHA512 f09d5615124d5af2fd6e1f2c237acab1699985f21e3b488117ca6f7ea74ff03f57ab372d6314391b22f2a8f3deace8d244a01e421cf47d5b04dd4af8a0155db7
TLSH
T155B02B02C077CCD0C09821C2119028424249000AAC0209046519CD001456005148F48D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 7d696e7053fec48758c62273fb26b14a9c3360d20d3762d0ced620fd60b39da5
MD5 d95a8088084eaef8652ecfb4bc135158
SHA1 c575253e639d26abd8288a234eb3f2ae013c0233
SHA512 f0a2d2b3029e56e2076b37b83dcde920f44c8c129b47b8a3f71747ec6901907709375d0543e92577e41a15a46ab3d30e910bbc59109b715674c30c76fadfc800
TLSH
T1C9B09B43E21B49A8805915E171A56552544D448E9C52D7157558CD448556405559B40D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 5f7de7492a3dcef976a8a6c4db44942f39bdeed4f83eb64e8c8487dae5474195
MD5 2e5e10df356463dad7201881401b1ce1
SHA1 bad7192f2bd40fe8208b979f8da7d86f7ed04acf
SHA512 87b8ce61d08f0319effd89db1f3842214ada6e9e76634159e716c3efa4333bf92f653c36c967cc3b984e47217c8be70e59d98bbf0e02524db3899d526a3b2a31
TLSH
T1E8B09B43E21F4968805955D161B55551444D844E9C5297146564CD408575405D5DB40D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 2c45acfc1d735df08651af1065cce9d81581b262d2b98f5e7b025d2d462f0d88
MD5 907bdd12c36484c5faecb9a827ac145f
SHA1 7b2a1e9c0a006c62400ec90c477156f5a12cdde5
SHA512 bf23bd75ec82d3b8132512e8d25f65cdb2c44120645aaedeba37606ebfa9ace44557f673030691e1ecbcbbc8efe4428ee96b8beed202e3b3b01fcacfa22e071d
TLSH
T13DB09B43E21F8969805919D161B55551844D448E9C5297146554CD44855950595DB40D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f6abbfd8aabb4f72f1f5d2730682904c8eb1c5953ded20cbfb369df478388907
MD5 a63cafe8bddf562724c68cc7ca876aa2
SHA1 a166db62711e40b9a880b843738115ec1efc2394
SHA512 730cd0b810afee94be80e83ab1b93bda93036e333f7440df38283e71fe2927792054be4914c123c742c30a41f8c6fa083673450c5810c8dcbfe0c489955040f2
TLSH
T1CAB02B43E21F8968C05818D121A41501484D404E9C4287042544CC408455004608F00C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 d74f3d74560ce5de6a63bf86e7aa4d590869935739498b89ca07b75e72316e18
MD5 5cfc4626b5e2423c2993fab66cf000b0
SHA1 12351275e2af44ae7b9e724f93913c9a8ca81f0b
SHA512 b50d740bcb190547a1b35508c09a90c47d1ce5f9c007feacb05d013ee16d2c34be4c3c29018d094d9233a2a4c6b9622b20b58cb84b4c28d5b311e9acf0d84ce9
TLSH
T108B09B43E21F49A4805915F161A55552444E544EDC52D7146554CD40855540955DB40D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 82ee1c5ee2fcba76d718b9da53b392785accc9fa2ce61639549199e6ff73c892
MD5 c0396084cdafc6dec7d4ce89f0e40fa0
SHA1 5767b3153c85e941473f3b3d9b6c61331f03410e
SHA512 9d2c4bc47bf427a38c0c64e25418fff71927b3d82eea90163caa408c213ec23c57ddd33a9cf62fe9f3b50fcd53633d95df1778e94a81ecb4987ecd695f026118
TLSH
T17AB02B03E31F49A4800910D121A46512444D404E9C4387142344CC008855005918B00C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 596a3897838b38f17327b371a35f0527892e8273771dc99f68111c89a83f5dc9
MD5 faca33b595ec60d79d4435c73cdedba7
SHA1 07be209ba6685dd85b2868a01090cbbddd5e58aa
SHA512 2b70f2c61c75caf32bfdda6de903f32cd1b5bcb16cae4280465a5dc68e148895a99c5d282fa41b3c95f44e4541344f1b8198f9358c8e18f236be047bd39b78ae
TLSH
T139B09B43E25F4AA4845925D161A55552444D444E9C5797186554CD408565405559B40D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 442416492bf876101233cb322812b01fe82e00b08508cfcd2df954420a4dc26d
MD5 46288bfbe4007e1b0b333381087c22ca
SHA1 aba99f4b2de154dd87c852295deffc19fb1737ad
SHA512 b7c7cf7f6ade567886b4a073d1c0accd87af6a38d29e876f4838566d36d0d3643e9b5cefcd5da54610a41888319b9531a44fbaf74806dd1e9844542814ea5e26
TLSH
T120B02B03E21B4964801918F160A41512444D408E9C4287042144CC408419404508F00C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f7320dd35fbd3bda5de88654d639f6a2253b6ce3b3dda2795dd1a5b045e7eed4
MD5 33b5cde829dd9233411c1b3a9992a292
SHA1 2b31b3b24e2c8894703e49a4dce0b5a0adba83a1
SHA512 b9cd531a8e71684509ad46a98c4124dc9fae6cd54f18c1e9273dc6a83eed360508ee124a63557d4d44f58b762a5b96bdce2b8511410a1b3d825632cfe9a50645
TLSH
T1E0B02B43E21F4964800820D120A46601444D404E9C4287042144CC008465004509B40D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 a5cd47ec16be9f7546404023899f70e3586a27ab5e50c4d07d984866ab31dfe6
MD5 2d2ebb26a02782e1caf7872f8e5a6893
SHA1 767f65c86f9e86201bfad7937083e6d989889867
SHA512 313b7b26ea06af869a4cff4f88c9c6de2b010bbd403c0d6c9b307094dd171083cd2a5922efa175a5835428d5e0bccc9fb012b01fa7becd5aff486b0ceab2360d
TLSH
T14EB02B03E21F4964801810D120A45501844D484E9C4287042348CD008465408D08B00C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 6484dec7b29f4a3843d96a4588e86242dc5683c382f83351cd4e408434a59362
MD5 1c87925a890651b62ebdd058585d9a44
SHA1 b08b8a7c8ad396738448482d1154d2c29c3abe4a
SHA512 07738013bfdfc4f887be494ae33ab80e94bb7b0e23b45235a18288c9d8121370e15c27ea356e3c71689c1c6f22b342e8a1bf4763f643127e3661d24d20e2f7b0
TLSH
T1DCB02B43E21F4964801824D132A41502444E414EAC4287042154CC008455004908B00C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 6dfee7b40fe49c1968420c6ee63596381f556c7321ad7c9158d5f17f92ec2fc7
MD5 5f60091f4fba7b03ac5825f235ca1ebc
SHA1 c4869decad3875d43e077c8f7d2baef9e24c4c08
SHA512 8e130d697893b5e45ed5834863577a3e2ab5520a1535b980f0d29c12bcc7b658ed7594d89d552eb6d1236e4264d29eb2f7293dd75c2a0cf51ac7a6503daa7f47
TLSH
T15DB02B03E21F4964800810D220E42912444D408E9C8287042144CC40C855004A19B00C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 fc89349e12abcf3d0963cf39d293cd1c20d915cb5b7c2ba8a3bae43d56554716
MD5 7e88aac644b0cc4da581623f1d95807c
SHA1 02071e202f4ccfbdb17dec58954388fa05aa7a4f
SHA512 c6d21e254232422c7f5d80dedc3aa590eba7a8541e7441a1d2cd03139f3e53a4a145da87efdb01eae15be22c3ea86411ff7573876bbcaeaafcf59c90062fa758
TLSH
T137B02B03E21F4964800810D120A53502444E809E9C4287042148CC008459004518B00D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 d9e110ac6627fcadacde68f79fc3927bbbd8542d77ab39e1dbe14a7cb003b68e
MD5 63d004454b39260763ef1c57f02838ec
SHA1 7eb07358334a2d4982d3ba55b80258cebaed87d0
SHA512 0a25614d17afe8e1e59fff169e25760da19f7f9808a3e2d1cf9b76c9657327697c0d8126b62c7ec4e1a3c606e96bd7425e027f543b7b726488f296af259c266c
TLSH
T106B01443F31F4D74C05D15D175F55551444D454FDC57D7147754CD40C55540555DF40D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 ff437a57951afddc5bd88e1e03b05308b09b811e87fe38ff342f5a207cc85b0a
MD5 65c4c82d7617cd9fb4b2ac458c58507e
SHA1 2131f31d3c1474067e5ebc9395b1b3fad20c2ce1
SHA512 7e6a67a9f5283120f2147ade9a4303a81432af8a5efab12a042ee8c453f76941fff86e46f62d473fbdb1a60c1a823eb325a7c67d46be51e071f0102eb8cac30d
TLSH
T143B09B43E21F8964805915E161B56551444D844E9C5397147654CD40859D405559F40D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 596c325b22f306466fe0bed8c850e6346a43533a344c70c1d76a7ef80dacb3d1
MD5 6b5c2679b4892fe26bbd8bdfc38925af
SHA1 7116f7a6f7d71bc3a4b66d96c9b96b0bdc734835
SHA512 8051a2cae9de658eab6d018328eb27e9c27d406a1c38f49c0a4715789be2f67803760cf67d388cab0c373a24019ae5a05038e4685d4377209ea6eb67e4d78283
TLSH
T190B02B03E31B4968C01810E120A42612444D404E9C42C7142144CC00841A004508B00C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 fc5a8bbb7e6313196120ef341a6876a4314f30d7783c34ba92d0946f0f52755f
MD5 3178d461c587a279508b54a1fb772258
SHA1 8d5eae6f04479f2d33cf527b379bf19cc66fea63
SHA512 050d353fa14b4c187c3ac90f2e67c2b8f92734414f3869576b67d40a9afa122ae41dec9114e4248803f98b511c7b888950567d6f72a3ad1fa2548594e414f42c
TLSH
T1CEB09B43E61F4AA4805915D161A55551548E544FDC5297146658CD408595405559B40D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 117B
SHA256 2f59ccb1616d9f4e68458656d521387be0387d5c966559fb3d64c8c86087eb72
MD5 b216a5ff37c4997b2c382cb8aab10770
SHA1 840b53cba4e09c414a30f5d1dc210a134c7b89a8
SHA512 aeb3d4d80fab1cc133955c9d4ee70fea9b306d417f97bded65ae53111bba663261c70ef8c9485586e488f673a110065b2267b6af0126ed19bca875485499ba17
TLSH
T10FB09243E22B89A8C42D29B291A92A02804E404EAD56DA597704C984892A409969B40C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 43aae578b92fe1a16cd6564026c73fc94dbf973aeb1131f91998b2f8ce8d98ed
MD5 104ecbcd66c7e69261856284ce240daa
SHA1 e655a9b3c831e8b2b6027058fdf661245fac47f5
SHA512 f7b39637c0e7d4fa8bd67e352c6e5fdde9d3bb23395eff1aae94cef77557d28b277022f86fe4aaf134e327e577d365d5bd7e82c36a354822fde2e02c381cd0f0
TLSH
T11CB02B03E21B49A4801921E220A42512444D404E9D4287042144CC008426004518B40C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 7ba5590284783f6858766579b7d8db49200088d032790b06eea5bcf03f2aadaf
MD5 e5a127cb74ce259ec37247360f43696c
SHA1 c7cf771d96fb72a45e9dfea5cf9f085e58400828
SHA512 437346cb8cf4fe510f0153a8505f8da1d732c8a83b34068d0eac112678bf347832b0780d2dc018b06b1c7e7d0e1df25005958e0d658d2ed33d958c35bff58e8f
TLSH
T1BEB09B53E21F89A4805955D161A55553844E444E9C5797146598CD408575405659B40D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 4cff9ed5a40813d3ea4a1c0ecd1038e0978c4410e2b625ab7f4b195a95e2c403
MD5 3ff9f2511db78d9887476ce45c5cc125
SHA1 1284880e0efb1403e8a7f395b318282b0ff2b6e5
SHA512 a6b3c12ada54f89a62dfd4997b70cb2f8a9072ce2bfa99743768569e40c0514c733b4b0755561870655a61f1ccdd7c92387ecaf538d0b6edb20c81a91eec6c4e
TLSH
T1E3B02B03E21B49B8C01810E130A43512444D404E9C42C7042148CC008415004908B00C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 6f5d3556c18b415e935355373d75516d3832def0e18b156c41025e8665c3dc8e
MD5 c94ec2708b6b217ad7fb0818d5312ab9
SHA1 6d987b686f8c100c4c383f2778ef1526a411aca6
SHA512 a4f53805d0d4dd82b52c1fe2d8a5ff374f27c84579ed5bcd591c349fdcca0b9a5b98df769d4cc3dcaadabe3ffb797f2d2047f6820cb4b97531b10ce78576638e
TLSH
T1D8B02B03F21B4968805820E120A42552454D404E9C4297043284CC008416008508F00C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 fa6b4f85829621bafd45ff77f35957146bfab24266e6a4c06eaa1b680147a566
MD5 cd7783deb1295351aee1483afad28192
SHA1 73380637b5d55c5e20b48b2c114d406f1d1a2ca3
SHA512 d7ad2428a1d27633bba6576474c82762504d5aa832951c6de1e2217af1be8048c60214dc31f49ef4d038bc241c071fa905601ef1839cac61abfde4a8fdc41664
TLSH
T115B09B43E21B4964806915F161B55552445D548E9C92D7146654CD408559405559F50D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 374c2224190d396b4fe1b7b9c5754386e0d6f333053a4e8513668121c26dd517
MD5 0bd84f3fe53608c543c00a95f65092fc
SHA1 88cf8d36e8ab805715a86495774e6d9fcaaf84f0
SHA512 beb43ac2cb15ab29692747b1c2f11c7a56100c5e525c920ba47a9b39c1d72a9092514690c988a44bfb54182f2403cff7cde2ab6e9de927c3615e6da0c966a981
TLSH
T100B02B03E21B4964801828E120A41502444D408E9C428B043544CC40C415004608B00C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f6a09667968ee2c7fa39031e3a3602e8abaee80b65d92b63af2203fa8d28f090
MD5 28bc4033a051eabb226388b2c9414233
SHA1 6d901d88b337a446dea65a659fb029e5043ae0c9
SHA512 093fa4aa8c5ff49cc079076ddaf29b5aee3ace11bf48deb29ad31722377f5b230d6a0287de951be3bc709e2f998d608539ee58aa5ca9f4d565baf47c43df135f
TLSH
T1A1B02B03E21B8964C01C11E160A42512444D404E9CD287042144CC408419004509B40C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 29ea1bc8e672f4ee446622730f0114556731cbb24ad2d2ea15c01499c72adc93
MD5 e0a49b71ba9857d8c7467e6d127a220c
SHA1 d6a447e2b97f4001211431d1c26ce0e318777a1e
SHA512 76ebd33e782ad93397552be47514f6e5ddfc97accab5f16b8117784ad5ac0bc480311c2fb1a5b25a3b505aa5972c80e8e5faaace4bed25cae4c1f834fe5fda07
TLSH
T1B6B02B03E21B4964801810E260A42502444E404E9C42C7042144CC008416404508B40C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 894805163d79740758451860322f56ece58606271d0f4ec13557907133fa9d50
MD5 c8d8702ec57bb94a94063f15a5164eb2
SHA1 1a59c5dd2b8862341a437562c4ff64bbbc9e705a
SHA512 7b0ba995f087cdc2518e84db27422dc41083cfc8bf329f22d62e792a01aa2fb80514a9b210db0635cb5a01f6d4a94d4856854535dcdedf26fcfcabdd63f47379
TLSH
T160B09B53F21F8D64805925D261B56551444E444EAD52D7146954CD408955405A59B50D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 b5c5888ccfcefe830976b0e47856906b5514278d790e30560f7cea2169714566
MD5 24057da9d7d525a63b74051d661d07ef
SHA1 679532ccd1259b37f95b53347b3ceab3bb9ccb46
SHA512 f4f8274b19cd3f5fb143f0e8308b43f3de2ff74f1196fe06481629f7023fdaf686ae2304104230052ed10ba4ff25e292ed8cc23f93b6891971f4cd68012980a1
TLSH
T123B02B03F21F4D64800810E120A43512444E404EDC4287142154CC008499005518B00C
MD5 SHA1 SHA512 TLSH

Submit Download

BridgeAgent.exe

Path C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
Size 5.5MB
SHA256 664f8e49f45b3fda22f2deb4a164e9dd0737cd8ec65aef928526b86424bb3726
MD5 757b7e2991187e4644f8092801547730
SHA1 2794280875a99f47ddcf347f3eaa5f57ecc30058
SHA512 4eab71b675ecbbc4eaf2b8c32e0803621202cd920c60835c6082f683dad199be6a1957ef70158698ed84a643b4113b243e7d19f4749a7426b80d965a6f4e56cf
SSDEEP 98304:LJoAE23/rqTkwCx4Obd1IEkPxxp0wpviMiF:SAZ/2TQ6H5
TLSH
T146464B16BA6B94ACD05AC474C3468A239E2170DF1B36BAFF418485383F6ABF15B3D714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/5964-171-0x00007FFC45BF0000-0x00007FFC46594000-memory.dmp

Download

memory/5964-196-0x00007FFC45BF0000-0x00007FFC46594000-memory.dmp

Download

memory/5964-194-0x000001D8D7440000-0x000001D8D7968000-memory.dmp

Download

memory/5964-193-0x000001D8D6D40000-0x000001D8D6F02000-memory.dmp

Download

memory/5964-189-0x000001D8D66C0000-0x000001D8D66DE000-memory.dmp

Download

memory/5964-188-0x000001D8D65B0000-0x000001D8D65BA000-memory.dmp

Download

memory/5964-186-0x000001D8D65C0000-0x000001D8D65DE000-memory.dmp

Download

memory/5964-187-0x000001D8D65E0000-0x000001D8D6692000-memory.dmp

Download

memory/5964-183-0x00007FFC45BF0000-0x00007FFC46594000-memory.dmp

Download

memory/5964-182-0x00007FFC45BF0000-0x00007FFC46594000-memory.dmp

Download

memory/5964-181-0x00007FFC45BF0000-0x00007FFC46594000-memory.dmp

Download

memory/5964-180-0x00007FFC45BF0000-0x00007FFC46594000-memory.dmp

Download

memory/5964-179-0x00007FFC45BF0000-0x00007FFC46594000-memory.dmp

Download

memory/5964-178-0x00007FFC45BF0000-0x00007FFC46594000-memory.dmp

Download

memory/5964-177-0x00007FFC45BF0000-0x00007FFC46594000-memory.dmp

Download

memory/5964-176-0x00007FFC45BF0000-0x00007FFC46594000-memory.dmp

Download

memory/5964-174-0x00007FFC45BF0000-0x00007FFC46594000-memory.dmp

Download

memory/5964-175-0x000001D8D63F0000-0x000001D8D6412000-memory.dmp

Download

memory/5964-170-0x00007FFC45BF0000-0x00007FFC46594000-memory.dmp

Download

memory/5964-169-0x00007FFC45D7F000-0x00007FFC45D80000-memory.dmp

Download