Analysis

  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    15/08/2026, 03:31

General

  • Target
    file.exe
  • Size 5.8MB
  • Sample260815-d3acjaywet
  • SHA256 6ca51deb014b8b313336ff09d44e9b308e55e1c4e8a08d315096250dea0ad853
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Adds Run key to start application 2 TTPs 3 IoCs
  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

  • Modifies registry key 1 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 43 IoCs
  • Suspicious use of WriteProcessMemory 15 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\file.exe
    "C:\Users\Admin\AppData\Local\Temp\file.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:5856
    • C:\Windows\system32\reg.exe
      "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
      2⤵
      • Adds Run key to start application
      • Modifies registry key
      PID:3336
    • C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
      "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --supervisor
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:2988
      • C:\Windows\system32\reg.exe
        "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
        3⤵
        • Adds Run key to start application
        • Modifies registry key
        PID:1368
      • C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
        "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --runtime --supervisor-pid 2988
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:5828
        • C:\Windows\system32\hostname.exe
          "hostname.exe"
          4⤵
            PID:2684
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            "powershell.exe" -NoLogo -NoProfile -NonInteractive -Command "$ErrorActionPreference='SilentlyContinue'; $exe=$env:BRIDGE_TRUST_EXE; $sig=Get-AuthenticodeSignature -LiteralPath $exe; $sigStatus=if($sig){[string]$sig.Status}else{'Unknown'}; $publisher=if($sig -and $sig.SignerCertificate){[string]$sig.SignerCertificate.Subject}else{''}; $mp=Get-MpComputerStatus; $tamper=if($null -ne $mp -and $null -ne $mp.IsTamperProtected){if([bool]$mp.IsTamperProtected){'Enabled'}else{'Disabled'}}else{'Unknown'}; $source='Local'; if(Test-Path 'HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender'){$source='MDM'}elseif(Test-Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender'){$source='Group Policy'}; $onboard=(Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows Advanced Threat Protection\Status' -Name OnboardingState -ErrorAction SilentlyContinue).OnboardingState; if($onboard -eq 1 -and $source -eq 'Local'){$source='Defender for Endpoint'}; $detection='Unknown'; if(Get-Command Get-MpThreatDetection -ErrorAction SilentlyContinue){$matches=@(Get-MpThreatDetection | Where-Object { (($_.Resources | Out-String) -like ('*'+$exe+'*')) });$detection=if($matches.Count -gt 0){'Detection observed'}else{'None observed'}}; [ordered]@{signature_status=$sigStatus;publisher=$publisher;tamper_protection=$tamper;management_source=$source;defender_detection=$detection}|ConvertTo-Json -Compress"
            4⤵
            • Hide Artifacts: Ignore Process Interrupts
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:1004
          • C:\Windows\system32\hostname.exe
            "hostname.exe"
            4⤵
              PID:2080
            • C:\Windows\system32\reg.exe
              "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
              4⤵
              • Adds Run key to start application
              • Modifies registry key
              PID:5752
            • C:\Windows\system32\hostname.exe
              "hostname.exe"
              4⤵
                PID:1112
              • C:\Windows\system32\hostname.exe
                "hostname.exe"
                4⤵
                  PID:2456
                • C:\Windows\system32\hostname.exe
                  "hostname.exe"
                  4⤵
                    PID:1820
                  • C:\Windows\system32\hostname.exe
                    "hostname.exe"
                    4⤵
                      PID:3400
                    • C:\Windows\system32\hostname.exe
                      "hostname.exe"
                      4⤵
                        PID:4256
                      • C:\Windows\system32\hostname.exe
                        "hostname.exe"
                        4⤵
                          PID:2800
                        • C:\Windows\system32\hostname.exe
                          "hostname.exe"
                          4⤵
                            PID:2532

                    Network

                          MITRE ATT&CK Enterprise v16

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads

                          bridge-agent.log

                          • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
                          • Size 3KB
                          • SHA256 14da256c56b345bf089c84400a219e86dee27c3fe7a618b56829f96769d1f547
                          • MD5 SHA1 SHA512 TLSH

                          bridge-agent.log

                          • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
                          • Size 6KB
                          • SHA256 554e077f8f20a4b62a3e1e1dc3dd21031969baa4d899420b8749c61267b93bee
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          bridge-agent.log

                          • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
                          • Size 1KB
                          • SHA256 09ef4b676665061f234cb98cb8884173a351c0c8f2b12f97ff10ea33eeeef37b
                          • MD5 SHA1 SHA512 TLSH

                          bridge-agent.log

                          • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
                          • Size 2KB
                          • SHA256 023e910e9018d433169ffa6aed7724c93e3118c8dd79dccef95af7fe11e6a742
                          • MD5 SHA1 SHA512 TLSH

                          bridge-agent.log

                          • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
                          • Size 899B
                          • SHA256 3c484c81dcbc4a3c7176767368a2661f238028bcc80828b4a38928ca46be4ef9
                          • MD5 SHA1 SHA512 TLSH

                          bridge-agent.log

                          • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
                          • Size 2KB
                          • SHA256 5650520ae9e78cb4be61b455813aeee035386008f5f4db3010414083977e4e71
                          • MD5 SHA1 SHA512 TLSH

                          root-ca.crt

                          • Path C:\Users\Admin\AppData\Local\Bridge\root-ca.crt
                          • Size 623B
                          • SHA256 937f065a54c262b2fd0037fb24ae7520b17914c9bd8e1af2bf80b0b91e5951e5
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 ccbf377c7aed74be4430aaf6c1fe7ad26fdcdd44caca1dfbda6fb33a3133db6d
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 95b0ce6df07a96ef554d1180787b71088b5bba19a60c95aad91dea5b3b5c778b
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 ef04b15d3c2c6c3b760386e2ea008a2c305ded55fc667c340311f75c708c73f7
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 81c2517bafc224efabea97125bb8dea59bd0863f7117154ea3727229317009ad
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 5aafd908184ea717bf6aa5263ef354c49fe6dea5aac4ab38b7eaa12a544cd755
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 60eb9ddfbdcfeeb3597309a585016abd1bc107cf5d483d63a7874ae88b5263ba
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 4505147ee3d05966719c71185dc3936e27f27500cb7b61565e101586295b4278
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 5f27b5a59b8563f734a66405f51f566c3f7b5244904b6ab0abd6cc2e18584f0d
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 c3ff35d738dced1731876a53d8c64b3d727da3e1afda999c79b155b2449f2c12
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 d6a25c35df89e95d1211a71089331a8fb1f497176f5dc018225afe84e81d2517
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 e1d43bc7adb5f5458c689ef8ac0f5101aed9af7f2364ec267c53be96aa489fae
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 a83650bd646fdd92dce3936f3675f0c80a270080757767aff3b890296593b936
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 c6a40acbd10751dc2e9efb82e78445865e7980518336bc38af1e377962532291
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 999b8c5de34402cb37eb68b92b613216a5c9bb0aa962f8a1447a31f96546049f
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 98e86f032d2d58acefcecbb5940baba713d5a63c868c3be6801de1cc9b9f6ace
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 8fa2c31661182a580cf3e716784a1b18dfddd5aba0fa68cf25f2678885908495
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 ca5abe987d2e7f5776987f17f3a786d620c517512d4c2c5975c7cc74c1e0396e
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 a4cad4e5dc6b432618b200b478bc4fd4785244e1ec5b8a61134cd0f1c06fbec6
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 692a7666c6d6bcc20d758d295409b5c266be2977ce87010dec708cd584874321
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 1ef1c325bedc6aade13c6f0d816ee0a863401fc69fa91c7b58ae479e5de147fa
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 3ff4261f52482512ca5482d29936e4c019ad4e36d0b76e8ae94b39b2d46dd4f9
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 5a141997357f4159485f1433df4f819850ce21bd24a03d6b4188f13f875124ec
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 847c72562b759525363ca457551e001b55066ee0a31ee675e1b479c1052e6eb0
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 382dc12661d189fcb8562e88c48b6a6729c2ad0fc67f38499c7dcb22f2ba07ca
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 79ab3e7657189bdfc2190b5c7d4d41123c0370ed3f20e8cb5bde5a7ad39cddd2
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 191836a7c2466282a6f4838cff69f0d68858f2d291bacbc0869fe5a1f8dcb458
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 f2dae9b32ff615fbbf1d12b6e8db1b174e499c14e6e5f14a8b2abd4ea372069e
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 3a1a8b1f8e9888a1562cd1284498e2fb22d071a176c1a6f57b4f4f8a6e2c8a26
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 818179d0b5db09aa06be93993c5281e1d120f23d441c63e6df27eeba7aa22aa2
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 58830ea26ecae2a161e2f7844f018f79fa09714d2bf3347786fd76a5375b50ef
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 8b40598cd28bd11df1645f7a7aab6a8a699998bffb830839df26bf6b05c76a71
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 9386dee48516096754863445ea099866e58621ac96b4a4ade64ddf9a9c3c5649
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 54b85f987776a5b66339e7361bbce9eb2ec986c071712d4db3067326fb77c317
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 9f363bbf91f8c59780087370ac43a95ed2b3bbfcb370a4c892ca7c8846c559f3
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 1a19e7cea4a19f8baacba1d4f1751413d71ac564f9857c024f6c7dcd1c80e084
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 a06fdde7fa04c2949bd29f5a8b92a607fbb6452b2a284f65831c00c456ad840f
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 fc6ebaa2cda526ee83c5b92fc8f176da2f1b3c1193177dd9753d81aa289fd0ff
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 7be3bee098741936e78ba46ddb19dd8bb81717c0872cd2392415c7caca55bc63
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 117B
                          • SHA256 283a3f145eb5a2e82478dd08581cbab1da33f03ad6604ac30722ec7dcca575a4
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 38b59123bfcccc9b96d85b53bc0c12e9213a166732ff7155b7ec2d7d37546d33
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 1b8cc98159b3a1fee10aeea67305f08aab6d73e30cfdc0a94d2cfc314c50df05
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 68af2cadf136b373262b838a8bae186a4b3170252b2eeefbcde7725c9deb21ec
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 cfbefff681e3ddf2f20308f6ac8d7ed192a95423ae208192e98b2c8c98270187
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 e14819c6d2a892a06458f9b9e438f35ee07212afc17ffaf8e5130d075e2a5704
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 e39c333ac2e9b21d080bac9219227fb411975ffae5643b0d3f2800ab1cd6a0cf
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 fb56937dbd28a16742a7745f95190135b0cac037c3d72b593574a239f13cc203
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 98102fa66ed7cf109be00871029045f9d1d5ad2df413e8dce0dce0b4fe765684
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 5bf8cd1801bdcd87f6f566f593e1b0ec99d95bd1f86bcff8fec50c8f1d1f8903
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 12c7a43a1fd8d433b19d8fa5efbd971bbac24f96844668d351e29587cfbee1ea
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 c0e6f08c78881445e0aad53a24c627f22e28f66dae5174744e2f5dc930ac8804
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 1e45c9a6c9aea93205eebe68de245c2fc661613a9548548be9063bb7fbd51831
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 e6561abc3ea1e82ea1c7e2b01d87107c9e2d2451bded09dc08db32bb260fd0ec
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 89eeca14f9941227e6450019a410aed964279b35b0109ab4aa8601352db4f1f6
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 465d414e261475afb433b843c5b8522be508ed89b403a36ad0c6d8a9526d3e36
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 c4f5b2630f0648d3e05cd1d58938e7a9bb796f3536184fd636ae125116986df2
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 c3264fc8f88f1de2ed2ac95a0d861a9e05c9a61593f6e67fbcf0f25eabca332c
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 33cf5e2c7e176732bf9508d947c8a1e4058454075a0618e46cb568f8f091ec0c
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 4abfe466708be7930462c4796fc7baf294b67e9b90835e314dbc41e7122c6a4b
                          • MD5 SHA1 SHA512 TLSH

                          BridgeAgent.exe

                          • Path C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
                          • Size 5.8MB
                          • SHA256 6ca51deb014b8b313336ff09d44e9b308e55e1c4e8a08d315096250dea0ad853
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          memory/1004-95-0x000002863CA30000-0x000002863CAE2000-memory.dmp

                          memory/1004-96-0x000002863CA00000-0x000002863CA0A000-memory.dmp

                          memory/1004-97-0x000002863CC60000-0x000002863CC7E000-memory.dmp

                          memory/1004-91-0x000002863C750000-0x000002863C772000-memory.dmp

                          memory/1004-94-0x000002863CA10000-0x000002863CA2E000-memory.dmp

                          memory/1004-98-0x000002863CF10000-0x000002863D0D2000-memory.dmp

                          memory/1004-99-0x000002863D610000-0x000002863DB38000-memory.dmp