Analysis

  • max time kernel
    149s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    16/08/2026, 12:30

General

  • Target
    f480f04bac2f0438424e1f3386812680488ddfa009fb98b0ec8cb647e292f09d.exe
  • Size 5.8MB
  • Sample260816-ppntjsdc54
  • SHA256 f480f04bac2f0438424e1f3386812680488ddfa009fb98b0ec8cb647e292f09d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Adds Run key to start application 2 TTPs 3 IoCs
  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

  • Modifies registry key 1 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 15 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f480f04bac2f0438424e1f3386812680488ddfa009fb98b0ec8cb647e292f09d.exe
    "C:\Users\Admin\AppData\Local\Temp\f480f04bac2f0438424e1f3386812680488ddfa009fb98b0ec8cb647e292f09d.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4588
    • C:\Windows\system32\reg.exe
      "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
      2⤵
      • Adds Run key to start application
      • Modifies registry key
      PID:4524
    • C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
      "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --supervisor
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:5048
      • C:\Windows\system32\reg.exe
        "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
        3⤵
        • Adds Run key to start application
        • Modifies registry key
        PID:4036
      • C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
        "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --runtime --supervisor-pid 5048
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:3764
        • C:\Windows\system32\hostname.exe
          "hostname.exe"
          4⤵
            PID:4080
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            "powershell.exe" -NoLogo -NoProfile -NonInteractive -Command "$ErrorActionPreference='SilentlyContinue'; $exe=$env:BRIDGE_TRUST_EXE; $sig=Get-AuthenticodeSignature -LiteralPath $exe; $sigStatus=if($sig){[string]$sig.Status}else{'Unknown'}; $publisher=if($sig -and $sig.SignerCertificate){[string]$sig.SignerCertificate.Subject}else{''}; $mp=Get-MpComputerStatus; $tamper=if($null -ne $mp -and $null -ne $mp.IsTamperProtected){if([bool]$mp.IsTamperProtected){'Enabled'}else{'Disabled'}}else{'Unknown'}; $source='Local'; if(Test-Path 'HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender'){$source='MDM'}elseif(Test-Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender'){$source='Group Policy'}; $onboard=(Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows Advanced Threat Protection\Status' -Name OnboardingState -ErrorAction SilentlyContinue).OnboardingState; if($onboard -eq 1 -and $source -eq 'Local'){$source='Defender for Endpoint'}; $detection='Unknown'; if(Get-Command Get-MpThreatDetection -ErrorAction SilentlyContinue){$matches=@(Get-MpThreatDetection | Where-Object { (($_.Resources | Out-String) -like ('*'+$exe+'*')) });$detection=if($matches.Count -gt 0){'Detection observed'}else{'None observed'}}; [ordered]@{signature_status=$sigStatus;publisher=$publisher;tamper_protection=$tamper;management_source=$source;defender_detection=$detection}|ConvertTo-Json -Compress"
            4⤵
            • Hide Artifacts: Ignore Process Interrupts
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:4936
          • C:\Windows\system32\hostname.exe
            "hostname.exe"
            4⤵
              PID:3444
            • C:\Windows\system32\reg.exe
              "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
              4⤵
              • Adds Run key to start application
              • Modifies registry key
              PID:568
            • C:\Windows\system32\hostname.exe
              "hostname.exe"
              4⤵
                PID:3336
              • C:\Windows\system32\hostname.exe
                "hostname.exe"
                4⤵
                  PID:4324
                • C:\Windows\system32\hostname.exe
                  "hostname.exe"
                  4⤵
                    PID:3860
                  • C:\Windows\system32\hostname.exe
                    "hostname.exe"
                    4⤵
                      PID:976
                    • C:\Windows\system32\hostname.exe
                      "hostname.exe"
                      4⤵
                        PID:3440
                      • C:\Windows\system32\hostname.exe
                        "hostname.exe"
                        4⤵
                          PID:1744
                        • C:\Windows\system32\hostname.exe
                          "hostname.exe"
                          4⤵
                            PID:4952

                    Network

                          MITRE ATT&CK Enterprise v16

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads

                          bridge-agent.log

                          • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
                          • Size 4KB
                          • SHA256 ecea53955b4a10c0eac916e008eab335b67686e7d1b04d09b6fda38c826d8aeb
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          bridge-agent.log

                          • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
                          • Size 1KB
                          • SHA256 191a73c6ad2c1ab1798051f28893ae5216906f180fae543320d963f1c3f8793f
                          • MD5 SHA1 SHA512 TLSH

                          bridge-agent.log

                          • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
                          • Size 1KB
                          • SHA256 ec822176882308d1772538f7ceae1c153394a640b446228945fc41844f096d04
                          • MD5 SHA1 SHA512 TLSH

                          bridge-agent.log

                          • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
                          • Size 1KB
                          • SHA256 36235ca26c91380c8713460d92800f1810941b8bebd9ab687d2691d022307938
                          • MD5 SHA1 SHA512 TLSH

                          bridge-agent.log

                          • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
                          • Size 2KB
                          • SHA256 568fb65511a4ca1c8eeb5970ea8ca979ccc94864c7f9161c3e3587ac1f6a8ab4
                          • MD5 SHA1 SHA512 TLSH

                          bridge-agent.log

                          • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
                          • Size 2KB
                          • SHA256 bca186ff8ab4e6a324fde69ea7bc10747cd23c5e0fcc6b27b45da10d44297d99
                          • MD5 SHA1 SHA512 TLSH

                          bridge-agent.log

                          • Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
                          • Size 3KB
                          • SHA256 25b04783e018bf235c8c012f6f467ea1c5b532aa7931cde01e866e4c4140633c
                          • MD5 SHA1 SHA512 TLSH

                          root-ca.crt

                          • Path C:\Users\Admin\AppData\Local\Bridge\root-ca.crt
                          • Size 623B
                          • SHA256 baf478d9a16e027884d5b2d4a45181818e44904144e29dd35e5788a0eb1c8f57
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 6a83f2875fd3a43384ba9503f3ad21f219429d0057d69e0275c2bce475c7b1ec
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 ec757210b4544a7ad6adb373b67da5e4a0c6b106b11aa11be0fbccdaa4ac9ccd
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 826c27d03b4c66a2cf421febd47dcb5fefe397584bf0fec431e1c84df050fb0c
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 b2be91ce68ece02e33585a02e13f2f377bae350f88aa28a717db7fe7df6fb98b
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 f5d46802caa00f409f259ec37a31f330460f76e0b75279789ea85a46b71f6959
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 3fe4b77ed024a04011f49a07c2c68c1ec51b32110cd00e4ac3e0348aff0db1ea
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 335f021c1e1e536817475724b4586c7dc87f20205acb45e6e6fbd396be9a674d
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 52c6760a2897a9162e8a59fe38ab22177672c2f507dda36fd1c9b021aa0dcba0
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 ee3a94c001ddb06c7055e97cace60a8732316b5d80d22e94f3305dad1eefc35a
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 a738d601a00cf3151b5143980fb41718f5257dd09244bf762f40c3ea9daa8417
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 81c93035f127242c90e844a6b73a91a179ae768aa5ce84c28d4df08eebec7ae8
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 c8398404cadda507c5e8238b149debc202f3b500e0f16ff4b66862c5e0f9a28a
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 b07344acba7513de52e024474e312879533c2c1b770c53197923ccdea691877c
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 c06b846c1a800c8af5e661a10f3a94a3b3e1ddb1333921260f43933bb8a32c38
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 3108ec33597bcfef8c0fbc4657b8fb7eee71e794ea70754a9a592a5363d83dc8
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 5225890db05159df201dcce31131bebee12b11d31859990a9857d5bfbd800f85
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 6bbdaa9c6c868cce6d5e4eb8ea3b6096c26dfa737001b34a969c6e26e96b5d6a
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 65f8e96101f39cc78e73e095576bdd0ff78f1b882d03186d4cc86781296d4abd
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 c24b25db8769ce202fde312660b4e1e761961a4ddd92cb4e0e24dbc0d04c60ee
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 2726851b7bce53712ad48942cf224636c41c38a555ab3b18e157d60009a45899
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 2d93f0597e29062035c61dd8428ec964f29c4ddbbeb7f21d01e22d26b8c2e50e
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 5f3f4e350748dfd4977a42637f1f6843f4eee9f6d528c461f6cd056bf7a4a1e7
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 953c7119844a99b2662bb42609da5458ac660c8e5a6d7253986185c455794a2d
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 c7590fbf8c8ecc9eb9f567145956ecef1b59f53559e1ccabcfc7e34c474a04c1
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 a7b38edcfe5404a6c8c457124f45e05e84fb8715d6f0f83cff9d2f4417517c3d
                          • MD5 SHA1 SHA512 TLSH

                          runtime.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
                          • Size 120B
                          • SHA256 3983be5dfc703e24408c2082e4e3e90839e2cae85a43560b2a0db27c996cbf9b
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 ce138ca446b6bef54972c9b984dcf43183db97ed8289a1f489ea0defb9a1e7db
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 e7ca87256d592398456a3be73ec188a0358e7f7261f30f296a5aca71d863bbbd
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 47a360dd2844e9f283334ddcae0bd06a5aa2432fb40b2253c883454f91e4d51c
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 57032decce87e74a99b9f9e5fe457bd53a453288c75f0948654c1879f20f3567
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 4949193e156b15a281c2ea78d770f0570704ded123563cbbf149fc501df5f4ee
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 24226ceccd2b46eda80b02b9db35e09849c1f89fd9e307c7b4217e3fc6a5ed72
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 9554d4448aa7fd02338352779e0efc798ba7db91b63954c91301b643f5ef42d3
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 c64381e07f574224123793d03cc14ee4896fb5454f1eb72fb9f0dafc91110b44
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 067f20d8eda1ae659a560688d0b1eeffc3f829d9ada152f78bb3199486bcca73
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 b5d4ba1c1efa63ed35fbca0e978275c633a8c0e1b4befa49bbf82f427b1152d1
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 cb9ec42ec616d4a76bed377a6a13648ffd46047f39031f3e665fa1c29d32779a
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 d4f6c1e53cef63efeb0e4cd36c461ce7a0b16a9948031d26505dc0c3a4bb4133
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 e5d74abe8a9c51a1ad3d61a1d70b727e63a2cc3daae14cc82f6dbef35ced771c
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 239ef497f42e4ae78d6fbe575b132f5071870ba848cddcd21442768f2042cdca
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 fb6f87b0f188f996ffb3b95579330fdc83ab78da4521982134c423a05f174958
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 814c3cc11dc7c40a1447e7fe43f5b456f899013e703cdc488c4e0e1ce12122ad
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 ef05a25261abbc0797602452d067242c9921bdf1fb6910a78f24841e750a94b3
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 304559d53d24dce321c87954d63d520dd5a9266db65678fa174d57eb0709c6dd
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 4e130907c2dffe178c1892719ebb6adfa27be009c441d7d766bbcbf85c116988
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 ada22405c3017ba833e2cf595c9038eb424e995fd9ced8be34c3f301c49e7a2c
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 3cfac254e8f11cbb62c364d12bf3ec9a3d77d36cebf6c726559819b5453170d5
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 2147b11dd83e2d61c284d3aee03f5561a7c8aeb934e78af1acb5d3994c1e447c
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 ea1d3d1e818cf4274da1d23c54a9632030969f7cbbf96ca4aff6e00ea779057b
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 ce9a147464eb7d8fdc903afdcb5f170ef8f1f38791e079bfb3397456f8666fea
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 150b68e6fb50cc091c3e4a579dc04f92906bf3ee94d23173412278df3c7bef00
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 eb31aaa67ce66e8e96f178752cc368ba722a89309b0c3a82a0634e37ba07d45f
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 1147f65162123d803be769630387e09670c56fd2c7291ed6f8a35587844a974a
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 7eeb31a3f3b41c634b4dd4cdb15f07334e59d59d3521dfcf593f7bde582e62c5
                          • MD5 SHA1 SHA512 TLSH

                          supervisor.heartbeat.json

                          • Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
                          • Size 123B
                          • SHA256 ab00fe61a37a5e06489a2e10994957369a6dadea7af7bf0fbfb52e9095fb5a27
                          • MD5 SHA1 SHA512 TLSH

                          BridgeAgent.exe

                          • Path C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
                          • Size 5.8MB
                          • SHA256 f480f04bac2f0438424e1f3386812680488ddfa009fb98b0ec8cb647e292f09d
                          • MD5 SHA1 SHA512 SSDEEP TLSH

                          __PSScriptPolicyTest_rlzuet12.lie.ps1

                          • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_rlzuet12.lie.ps1
                          • Size 60B
                          • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                          • MD5 SHA1 SHA512 TLSH

                          memory/4936-118-0x0000023BF3000000-0x0000023BF3010000-memory.dmp

                          memory/4936-117-0x0000023BF3000000-0x0000023BF3010000-memory.dmp

                          memory/4936-119-0x0000023BF2F80000-0x0000023BF2FA2000-memory.dmp

                          memory/4936-127-0x0000023BF3FF0000-0x0000023BF41B2000-memory.dmp

                          memory/4936-128-0x0000023BF46F0000-0x0000023BF4C18000-memory.dmp