Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    15/08/2026, 03:31

General

  • Target
    file.exe
  • Size 5.8MB
  • Sample260815-d3acjaywet
  • SHA256 6ca51deb014b8b313336ff09d44e9b308e55e1c4e8a08d315096250dea0ad853
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Adds Run key to start application 2 TTPs 3 IoCs
  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

  • Modifies registry key 1 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 16 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\file.exe
    "C:\Users\Admin\AppData\Local\Temp\file.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1592
    • C:\Windows\system32\reg.exe
      "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
      2⤵
      • Adds Run key to start application
      • Modifies registry key
      PID:936
    • C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
      "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --supervisor
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:3924
      • C:\Windows\system32\reg.exe
        "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
        3⤵
        • Adds Run key to start application
        • Modifies registry key
        PID:3972
      • C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
        "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --runtime --supervisor-pid 3924
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:2416
        • C:\Windows\system32\hostname.exe
          "hostname.exe"
          4⤵
            PID:3472
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            "powershell.exe" -NoLogo -NoProfile -NonInteractive -Command "$ErrorActionPreference='SilentlyContinue'; $exe=$env:BRIDGE_TRUST_EXE; $sig=Get-AuthenticodeSignature -LiteralPath $exe; $sigStatus=if($sig){[string]$sig.Status}else{'Unknown'}; $publisher=if($sig -and $sig.SignerCertificate){[string]$sig.SignerCertificate.Subject}else{''}; $mp=Get-MpComputerStatus; $tamper=if($null -ne $mp -and $null -ne $mp.IsTamperProtected){if([bool]$mp.IsTamperProtected){'Enabled'}else{'Disabled'}}else{'Unknown'}; $source='Local'; if(Test-Path 'HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender'){$source='MDM'}elseif(Test-Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender'){$source='Group Policy'}; $onboard=(Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows Advanced Threat Protection\Status' -Name OnboardingState -ErrorAction SilentlyContinue).OnboardingState; if($onboard -eq 1 -and $source -eq 'Local'){$source='Defender for Endpoint'}; $detection='Unknown'; if(Get-Command Get-MpThreatDetection -ErrorAction SilentlyContinue){$matches=@(Get-MpThreatDetection | Where-Object { (($_.Resources | Out-String) -like ('*'+$exe+'*')) });$detection=if($matches.Count -gt 0){'Detection observed'}else{'None observed'}}; [ordered]@{signature_status=$sigStatus;publisher=$publisher;tamper_protection=$tamper;management_source=$source;defender_detection=$detection}|ConvertTo-Json -Compress"
            4⤵
            • Hide Artifacts: Ignore Process Interrupts
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:3332
          • C:\Windows\system32\hostname.exe
            "hostname.exe"
            4⤵
              PID:4920
            • C:\Windows\system32\hostname.exe
              "hostname.exe"
              4⤵
                PID:3360
              • C:\Windows\system32\hostname.exe
                "hostname.exe"
                4⤵
                  PID:2096
                • C:\Windows\system32\reg.exe
                  "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
                  4⤵
                  • Adds Run key to start application
                  • Modifies registry key
                  PID:4956
                • C:\Windows\system32\hostname.exe
                  "hostname.exe"
                  4⤵
                    PID:2420
                  • C:\Windows\system32\hostname.exe
                    "hostname.exe"
                    4⤵
                      PID:3472
                    • C:\Windows\system32\hostname.exe
                      "hostname.exe"
                      4⤵
                        PID:1984
                      • C:\Windows\system32\hostname.exe
                        "hostname.exe"
                        4⤵
                          PID:2740
                        • C:\Windows\system32\hostname.exe
                          "hostname.exe"
                          4⤵
                            PID:3236
                          • C:\Windows\system32\hostname.exe
                            "hostname.exe"
                            4⤵
                              PID:2404

                      Network

                            MITRE ATT&CK Enterprise v16

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            bridge-agent.log

                            • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
                            • Size 4KB
                            • SHA256 e6e67ee6db89d2015f1d9ec5acfe02a6a36bab2bfa6c66241d46d2999b7ea64e
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            bridge-agent.log

                            • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
                            • Size 899B
                            • SHA256 c6cb2500351fabec05f5284450c3695542ead47760bd5176b8da8c9c4b17ac6e
                            • MD5 SHA1 SHA512 TLSH

                            bridge-agent.log

                            • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
                            • Size 1KB
                            • SHA256 c0b5296edbb1ac0da661259b3403c4686a4d7ec097e47f584af066ebdd32a9ce
                            • MD5 SHA1 SHA512 TLSH

                            bridge-agent.log

                            • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
                            • Size 2KB
                            • SHA256 b0e6ccce50b4915780eff9c68f478db9650cde1156098b9da7a4cf88a48fee8d
                            • MD5 SHA1 SHA512 TLSH

                            bridge-agent.log

                            • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
                            • Size 561B
                            • SHA256 74ea4fbadd703a8ce6b61434a344306e100d677fb95372a5e0935cd82ef4bbd3
                            • MD5 SHA1 SHA512 TLSH

                            bridge-agent.log

                            • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
                            • Size 2KB
                            • SHA256 3ad819ff022b0b0ef854b331f6aa6db927ef446e57de2a8f19b3f7669433de45
                            • MD5 SHA1 SHA512 TLSH

                            bridge-agent.log

                            • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
                            • Size 2KB
                            • SHA256 0b42b9a6ba374be1e2e9b24edc402d74b7418abc20aeb1dae3b8f77af7ee81ff
                            • MD5 SHA1 SHA512 TLSH

                            root-ca.crt

                            • Path C:\Users\Admin\AppData\Local\Bridge\root-ca.crt
                            • Size 623B
                            • SHA256 937f065a54c262b2fd0037fb24ae7520b17914c9bd8e1af2bf80b0b91e5951e5
                            • MD5 SHA1 SHA512 TLSH

                            runtime.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                            • Size 120B
                            • SHA256 1eab2a07d11f8223c794570fdd89d165d6f3aea7b26115ad57af2d80b76e957b
                            • MD5 SHA1 SHA512 TLSH

                            runtime.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                            • Size 120B
                            • SHA256 9edf9e3e3f7751da973ae8ab1c7239b9468564392d32f45f4389cadd5952852f
                            • MD5 SHA1 SHA512 TLSH

                            runtime.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                            • Size 120B
                            • SHA256 6b3e0b145d936fc1018e635926e73bc97aea785fe2f46d1fb2d9faacd46f95f2
                            • MD5 SHA1 SHA512 TLSH

                            runtime.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                            • Size 120B
                            • SHA256 b9401cb666530c5ee3ddc9fa7548d015edf397b7ce8e981882d55120042e21f6
                            • MD5 SHA1 SHA512 TLSH

                            runtime.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                            • Size 120B
                            • SHA256 b39b5d039307bb076945197a8fca9328c5b6dc62ab05bcbdb8f7d47a6069e48b
                            • MD5 SHA1 SHA512 TLSH

                            runtime.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                            • Size 120B
                            • SHA256 21b88668a5aceee9dcc498dc6677115e674f464bf62d8aa407d084af9504a06a
                            • MD5 SHA1 SHA512 TLSH

                            runtime.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                            • Size 120B
                            • SHA256 687ac85700ef3dd587b77ae224ef49d0b002ba0a30dc8e98d35ea92a03b50597
                            • MD5 SHA1 SHA512 TLSH

                            runtime.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                            • Size 120B
                            • SHA256 1e0512e6e0c9eae276ce0530710dfeda3799be8e5aed7bf917130086f207c264
                            • MD5 SHA1 SHA512 TLSH

                            runtime.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                            • Size 120B
                            • SHA256 a16a2d9604ec142c209b70d76c2b17d03bb5777d061fb05a6f9345087af15c06
                            • MD5 SHA1 SHA512 TLSH

                            runtime.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                            • Size 120B
                            • SHA256 d3d0883e5afa82d6412208240093afe95cc4111f265785a82df84adbcba30284
                            • MD5 SHA1 SHA512 TLSH

                            runtime.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                            • Size 120B
                            • SHA256 a99aa6818314eec5479c0a715592fc69ed11d2eda929b6dbebb8e478ce851080
                            • MD5 SHA1 SHA512 TLSH

                            runtime.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                            • Size 120B
                            • SHA256 56ffb03ad952844d825b07e0c7e3f489c819d844d357b4f6d95b42a0105486f4
                            • MD5 SHA1 SHA512 TLSH

                            runtime.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                            • Size 120B
                            • SHA256 d629400c92d8f9e0ed6f1fe0434b5d28b6aa082c82d7b1f4638aa6b1191b3d14
                            • MD5 SHA1 SHA512 TLSH

                            runtime.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                            • Size 120B
                            • SHA256 989a78241d0eb56885e530c66496525002874ea7ea8e530044574158e86ea8c0
                            • MD5 SHA1 SHA512 TLSH

                            runtime.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                            • Size 120B
                            • SHA256 ff79b0eea8858088d4ee863066e1e76f721720163872a27ed251f349d8250fa2
                            • MD5 SHA1 SHA512 TLSH

                            runtime.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                            • Size 120B
                            • SHA256 614b69853bc4aba7901ab39514bd2ffc605b92ad886dd8c0a06fba4aba405c1e
                            • MD5 SHA1 SHA512 TLSH

                            runtime.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                            • Size 120B
                            • SHA256 a7e1771c36968b8589cdf77ffa47e9a4d717538af75409614ff6fd3379bdd14b
                            • MD5 SHA1 SHA512 TLSH

                            runtime.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                            • Size 120B
                            • SHA256 a7887aea3349ff21cf4ab410c5347cf798aedaa76ff7f18edf3f1bb5d8315d38
                            • MD5 SHA1 SHA512 TLSH

                            runtime.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                            • Size 120B
                            • SHA256 1a08c0c95160aafe6e5d6ab530a2dbc26baa2a8a30345ca3f07961d57a67ea9b
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 cdf388ab89fec390fb97f81018fe2ae52230ff0d97c6ab00558184b1545b7024
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 15546a1239685cd03d2b37d8f0e2a3aaf9aa426b945f8f9da6bf7d39d59d8442
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 93f0c393d909e4f773f709c764826e2e434ec5b19090e8b3ff2e349fd2209ed4
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 d44e0c85c6baccdaadf08033e1eea1a712b2a9da8d9e04e0531cd806228418cb
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 4503af0fe219dd5b3548436e27ae895df543be9e0dc0cd8232210a965e9a73cf
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 a5763211e7cfd4170c9596e3949c63a9f08fd373e1ea816d501ac8d01d441848
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 5e1a80bb3d2d2b737f918afda7d80e176fb23fc7d0e291fba74b3baabfeafe29
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 b82ff9fca9ecaf9989838982d22b809c623c3435eff13b4211488073774fa0ac
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 4299f47153acd4947de697dbfc49ee77c27d457cc2fd4ae3bd988ed31350e4cb
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 70820ee36acff9142131f33ba5f6f3a6f8e28874d268063a0f1dbbd9ce987ee2
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 0c7b690182eb60d715674a3f7391d50b60380ca9d64bbeaf06b44c4f0c56ecaa
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 117B
                            • SHA256 530d4e18b72e5000ddd8b0b540db21f884bcf8e0d48bdfa72f19935fa8340846
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 4ed310317ce6e1627ddce1064469f340a38dcadf5a2576550b5ba78ec0b9de6b
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 61ccd4643ead3117d5376962648689101fe5c84eba4a532d87231cc8a2ee9920
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 c866410d74389762ed49e3610772886ab088f4659397e072a65f5dc458fa7e84
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 ff81a427bd1525aa6c2a39a3c41927279f330331e61f42b3052e89da0fb7a02f
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 f5f35d13b98f53f25c74df465ec90fd0590c69733a3b5fb5943e2205e89e1a89
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 57e0ee49a86c5010cb390ef5f61da847cb731ff24672915e3436e06d0f10d4bb
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 039bba9e22800dda3b8fa108d12c1be60c5dbe461566a9763aa9c0d3e69ee071
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 a380b540f9bf5654ff70010611f1b18d006fdaa7b3a86c0af1b5d26ad5578b0e
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 e9ad44b88fee26d549eb5bb5f261ba159ad6247573a8101f43ef143f44dcdbe7
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 df4f13ea06a0c45fa90dc399c0881b3ca0d1496463548a0a106a5cd49f52def7
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 561472526ece488c779d9b35d2ebe2cdae2392943b0c0ee37cc18fd41de4e0a2
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 5e88c3035283c365fdd03fc003b912f1f698a6fc681108fdcd022dd550e96999
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 d92b7c5f5a3209526f3a9d02cea11db5fe51d08d7bd86abe493b2618a3253d8f
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 25731039b4e3a39f4c33c5afbd1a7558e9e76aaf174bc24237d2453220dca7c5
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 9ecdfd85f198ce535c43955a2d1f8ee4145c0dcebf02df82331406ab44de0644
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 2edf7cbfa484b263a18527a344f0252389402ea8ad8c99f452100b1b241d7ed6
                            • MD5 SHA1 SHA512 TLSH

                            supervisor.heartbeat.json

                            • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                            • Size 123B
                            • SHA256 d5997c012cf3cb8d0abf98e85340851fda3a843c47f0d358f4a3f8bdd101f0b1
                            • MD5 SHA1 SHA512 TLSH

                            BridgeAgent.exe

                            • Path C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
                            • Size 5.8MB
                            • SHA256 6ca51deb014b8b313336ff09d44e9b308e55e1c4e8a08d315096250dea0ad853
                            • MD5 SHA1 SHA512 SSDEEP TLSH

                            __PSScriptPolicyTest_cnwbgpcy.2dc.ps1

                            • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_cnwbgpcy.2dc.ps1
                            • Size 60B
                            • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                            • MD5 SHA1 SHA512 TLSH

                            memory/3332-105-0x000001E652AB0000-0x000001E652FD8000-memory.dmp

                            memory/3332-104-0x000001E6523B0000-0x000001E652572000-memory.dmp

                            memory/3332-101-0x000001E64FDA0000-0x000001E64FDC2000-memory.dmp

                            memory/3332-94-0x000001E64FDD0000-0x000001E64FDE0000-memory.dmp

                            memory/3332-95-0x000001E64FDD0000-0x000001E64FDE0000-memory.dmp