bridgeagent | d49785f0195374536fa826a9f2228da105b80fa7bff5d8bee24c7260c665a09e

Analysis

max time kernel
150s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/09/2026, 12:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
file_ea7a051a82d4b3b5.exe
Size 6.4MB
Sample260916-precwsah77
SHA256 d49785f0195374536fa826a9f2228da105b80fa7bff5d8bee24c7260c665a09e
MD5 ea7aeeebfda6f39a868a6ba491695737
SHA1 01adc9b0769c2bcd81bac32d23ff9776c1a3eab4
SHA512 a233e07859d60c35c7831790547c913585dba9dcf9f82b965f3c9081f0e792f9af925e669ccdeb5b689f7f18df569f20c21e97285d4c17aa594f66692e499664
SSDEEP 98304:/HL3d0WMOPQ2p+COJx5C/YDX6XC7nKj54:7vBOoy
TLSH
T193663B11BA6B94BCD557C8B483068A239E2130DF1B26BAFF418486393F69BF11B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

backdoor defense_evasion bridgeagent loader persistence

Malware Config

Extracted

Family

bridgeagent

2.27.168.45

Signatures

Family: BridgeAgent,ShadowHVNC
BridgeAgent aka ShadowHVNC is a Windows backdoor and loader written in Rust.
backdoor loader bridgeagent

Detects BridgeAgent aka ShadowHVNC loader 1 IoCs

resource	yara_rule
behavioral2/files/0x000e00000001c42a-19.dat	family_bridgeagent

Executes dropped EXE 2 IoCs

pid	Process
4196	BridgeAgent.exe
236	BridgeAgent.exe

Adds Run key to start application 2 TTPs 3 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe

Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

Command interpreters often include specific commands/flags that ignore errors and other hangups.

defense_evasion

Ignore Process Interrupts

T1564.011

pid	Process
1244	powershell.exe

Modifies registry key 1 TTPs 3 IoCs

Modify Registry

T1112

pid	Process
5500	reg.exe
4644	reg.exe
1236	reg.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1244	powershell.exe
1244	powershell.exe

Suspicious use of AdjustPrivilegeToken 43 IoCs

description	pid	Process
Token: SeDebugPrivilege	1244	powershell.exe
Token: SeIncreaseQuotaPrivilege	1244	powershell.exe
Token: SeSecurityPrivilege	1244	powershell.exe
Token: SeTakeOwnershipPrivilege	1244	powershell.exe
Token: SeLoadDriverPrivilege	1244	powershell.exe
Token: SeSystemProfilePrivilege	1244	powershell.exe
Token: SeSystemtimePrivilege	1244	powershell.exe
Token: SeProfSingleProcessPrivilege	1244	powershell.exe
Token: SeIncBasePriorityPrivilege	1244	powershell.exe
Token: SeCreatePagefilePrivilege	1244	powershell.exe
Token: SeBackupPrivilege	1244	powershell.exe
Token: SeRestorePrivilege	1244	powershell.exe
Token: SeShutdownPrivilege	1244	powershell.exe
Token: SeDebugPrivilege	1244	powershell.exe
Token: SeSystemEnvironmentPrivilege	1244	powershell.exe
Token: SeRemoteShutdownPrivilege	1244	powershell.exe
Token: SeUndockPrivilege	1244	powershell.exe
Token: SeManageVolumePrivilege	1244	powershell.exe
Token: 33	1244	powershell.exe
Token: 34	1244	powershell.exe
Token: 35	1244	powershell.exe
Token: 36	1244	powershell.exe
Token: SeIncreaseQuotaPrivilege	1244	powershell.exe
Token: SeSecurityPrivilege	1244	powershell.exe
Token: SeTakeOwnershipPrivilege	1244	powershell.exe
Token: SeLoadDriverPrivilege	1244	powershell.exe
Token: SeSystemProfilePrivilege	1244	powershell.exe
Token: SeSystemtimePrivilege	1244	powershell.exe
Token: SeProfSingleProcessPrivilege	1244	powershell.exe
Token: SeIncBasePriorityPrivilege	1244	powershell.exe
Token: SeCreatePagefilePrivilege	1244	powershell.exe
Token: SeBackupPrivilege	1244	powershell.exe
Token: SeRestorePrivilege	1244	powershell.exe
Token: SeShutdownPrivilege	1244	powershell.exe
Token: SeDebugPrivilege	1244	powershell.exe
Token: SeSystemEnvironmentPrivilege	1244	powershell.exe
Token: SeRemoteShutdownPrivilege	1244	powershell.exe
Token: SeUndockPrivilege	1244	powershell.exe
Token: SeManageVolumePrivilege	1244	powershell.exe
Token: 33	1244	powershell.exe
Token: 34	1244	powershell.exe
Token: 35	1244	powershell.exe
Token: 36	1244	powershell.exe

Suspicious use of WriteProcessMemory 15 IoCs

description	pid	Process	procid_target
PID 5176 wrote to memory of 5500	5176	file_ea7a051a82d4b3b5.exe	88
PID 5176 wrote to memory of 4196	5176	file_ea7a051a82d4b3b5.exe	90
PID 4196 wrote to memory of 4644	4196	BridgeAgent.exe	91
PID 4196 wrote to memory of 236	4196	BridgeAgent.exe	93
PID 236 wrote to memory of 5916	236	BridgeAgent.exe	94
PID 236 wrote to memory of 1244	236	BridgeAgent.exe	96
PID 236 wrote to memory of 5100	236	BridgeAgent.exe	99
PID 236 wrote to memory of 1236	236	BridgeAgent.exe	101
PID 236 wrote to memory of 1004	236	BridgeAgent.exe	103
PID 236 wrote to memory of 2672	236	BridgeAgent.exe	105
PID 236 wrote to memory of 3192	236	BridgeAgent.exe	107
PID 236 wrote to memory of 2416	236	BridgeAgent.exe	110
PID 236 wrote to memory of 4804	236	BridgeAgent.exe	112
PID 236 wrote to memory of 4936	236	BridgeAgent.exe	114
PID 236 wrote to memory of 1240	236	BridgeAgent.exe	116

C:\Users\Admin\AppData\Local\Temp\file_ea7a051a82d4b3b5.exe
"C:\Users\Admin\AppData\Local\Temp\file_ea7a051a82d4b3b5.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5176
- C:\Windows\system32\reg.exe
  "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
  2⤵
  - Adds Run key to start application
  - Modifies registry key
  PID:5500
- C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
  "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --supervisor
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:4196
- - C:\Windows\system32\reg.exe
    "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
    3⤵
    - Adds Run key to start application
    - Modifies registry key
    PID:4644
- - C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
    "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --runtime --supervisor-pid 4196
    3⤵
    - Executes dropped EXE
    - Suspicious use of WriteProcessMemory
    PID:236
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:5916
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      "powershell.exe" -NoLogo -NoProfile -NonInteractive -Command "$ErrorActionPreference='SilentlyContinue'; $exe=$env:BRIDGE_TRUST_EXE; $sig=Get-AuthenticodeSignature -LiteralPath $exe; $sigStatus=if($sig){[string]$sig.Status}else{'Unknown'}; $publisher=if($sig -and $sig.SignerCertificate){[string]$sig.SignerCertificate.Subject}else{''}; $mp=Get-MpComputerStatus; $tamper=if($null -ne $mp -and $null -ne $mp.IsTamperProtected){if([bool]$mp.IsTamperProtected){'Enabled'}else{'Disabled'}}else{'Unknown'}; $source='Local'; if(Test-Path 'HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender'){$source='MDM'}elseif(Test-Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender'){$source='Group Policy'}; $onboard=(Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows Advanced Threat Protection\Status' -Name OnboardingState -ErrorAction SilentlyContinue).OnboardingState; if($onboard -eq 1 -and $source -eq 'Local'){$source='Defender for Endpoint'}; $detection='Unknown'; if(Get-Command Get-MpThreatDetection -ErrorAction SilentlyContinue){$matches=@(Get-MpThreatDetection | Where-Object { (($_.Resources | Out-String) -like ('*'+$exe+'*')) });$detection=if($matches.Count -gt 0){'Detection observed'}else{'None observed'}}; [ordered]@{signature_status=$sigStatus;publisher=$publisher;tamper_protection=$tamper;management_source=$source;defender_detection=$detection}|ConvertTo-Json -Compress"
      4⤵
      Hide Artifacts: Ignore Process Interrupts
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:1244
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:5100
  - - C:\Windows\system32\reg.exe
      "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
      4⤵
      Adds Run key to start application
      Modifies registry key
      PID:1236
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:1004
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:2672
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:3192
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:2416
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:4804
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:4936
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:1240

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Hide Artifacts

T1564

Ignore Process Interrupts

T1564.011

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 950B
SHA256 162ca18dfdef6ef6fc324416e081c268f356d87cd3a8e073fb450740b6d14bdf
MD5 8e8f67bb45e925bdd2a332c2a9f65921
SHA1 737f88836f8984e67e9c1a811c79b2c8eb4eb5ac
SHA512 1bba812fe9f39477604db8a700786fa9d94920b6e9e10c5d6129c1ec238190902e1d3fc49f502f530f167ea86248f3595693638c658417cb159dd91b79baefe2
TLSH
T1A4115B2111F9823658D36137957FEF8CF0757E3E7FD6DB01D362844AA502D0C58C6256
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 6KB
SHA256 f759f40a9d1bbfe0e026a590763b8aea6a9fc3a8d5b7b04dee9d9c6514ff661b
MD5 da93fdbce712809ebe3224824b37b726
SHA1 c86a36943eedebd3433e6477bb620837623d5550
SHA512 0404ece33079aeec585260b7a6493fa55f53ac5256b1863294a8aeb862168eeb3c3b170ca8b3c97ad878eaf45dc90b548a1843aec1f980afa595ab237682193e
SSDEEP 96:oMTM0YmsM03ukc09vNLBTiNHs1TTD5sfV5S/YsGT1RB4/GoEvaSvBxPfpWcm:dYNLb4S8m7GTJuGfvLrPfpDm
TLSH
T1EAD1A62035FC5032A4C30622E2EF6FACB56DB63BBB41DF04A362505BF5ABD4C5D62552
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 4e6d504124dd9cc933f85b8732a88582c9276ee12281d2914d4d1fd4ae7e8023
MD5 61dd312cec79c7ff081c6bf404023eb5
SHA1 038043a9d7868a23859c7bf0f628da5f69357fc2
SHA512 a6827933bb849306ab9b104819497f46fb88c06c4d21e2d21643ff34b732a248e7cbd6e59f4a86268c520eaeeffd9f7e19905248d9ce390dc5033f9b02aa1d27
TLSH
T18B317D2011F9823618D31237D5AFAFCCF179BA3EBF96DB10E362954BE103E0C9886152
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 d7c06f7cee58b217aa386e5866a9ad7f674f80958b06c37e65083da27fbdf9d2
MD5 fe9917f17ff9153510212fa5324b5bbe
SHA1 f9b5c0f112211a281aaac02bac1ecf64460d04ec
SHA512 b4ab4699ae60a64d32a0813f77e403d59fc4b9e615f1269d64082d3d38cafb2a7000a06dc28ba4614edbc3203ac4aa6f1de9ea0d525420a13e1d2b7dbe9682ae
TLSH
T1C9318E2011F8423658D31237E5AFAFCCF179BA3EBF92DB00E362954BE103E0C9886152
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 595B
SHA256 b8f0d10eea79d81601d961893c2ecea1b5654f5df4930ff21f42107357adf2d3
MD5 771446554601fe902eb0ca087e5996a9
SHA1 47fcfbbe160f9005c45c6ef55314f6aa674f792e
SHA512 7498ec62c76a398bd17b3050706532034d9311b4b8a3b10a26cc6ededcd252510c3280d2960106eef8ea7dff1b945deaaae2cc33609822797a463c9c1b2033c9
TLSH
T1F6F0783020BE923A18D32266916EFFCCB07A7E3E6B82A711D350408AA602D0C9886216
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 89c337f9b9a85e4a931591ca8b14958b87b89aefbb1c05611526d365479554df
MD5 d93f5b8bb455405e3af9b4c759538a34
SHA1 3bde112bb719f2a0a0a3fc4d61183ae30aee8953
SHA512 346f2c64ddaf5098069aa9e5896fcaf72d3c800d2e987ee67e4342e0aaeedc3729530c2adc266c8d9d95049d67c1bdef7c0945c209727d9c8b06712cf2dc66b1
TLSH
T12A413B2061F8413658C35277E5EFAFCCF179BA3FBB82DB10A3629157E513D0C5886166
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 f99798b880144cedb9f44a65883bf842fd42b80e47cab1b812e6c4d6b83e8d0b
MD5 eee79322f85ee0a2fdc16a39c60803ba
SHA1 563287914debf30b5f0bb1ed7a488ce7f7407ecd
SHA512 5ae545e7b1ea6aa1862c56e6518adf05ab2ba597a7d5558393a637e7328051a066086cda9ad002b3e7f5367d2bb75c4e0e5c5c99eef530d3af68f26a3aa4c9aa
TLSH
T1C951362021F8413668C34236E5EFBFCCB1B9B63FBB82DB00A366915BE113D0C5886166
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 3KB
SHA256 7bb59ed22aa3467a020ce4798f5a0ad4d1079d25ea1aabd34e94c05c944d1467
MD5 f3805bfd0256127dfd3c829c0b80eff8
SHA1 cc2fc6e0383fde9f711468a5a40539b05e3115aa
SHA512 dda76a2d381a075c5861240173980b600ced62495cefcd6509c4c765a72a485f0868c2404803c56ddd4bc2405e85c7b2571ca75a7c17d1cf2b697e1a9d179429
TLSH
T12C716A2036FC4137A8C30236E5EEAFCCB16DB63BFB82DB00A366915BE543D1C5846166
MD5 SHA1 SHA512 TLSH

Submit Download

root-ca.crt

Path C:\Users\Admin\AppData\Local\Bridge\root-ca.crt
Size 619B
SHA256 870c9ca91e4ad282145b8c298a980313042f8880e372ed57a21fefa403bd4276
MD5 f8c2a355dafb45ab856c4d0de1a7f7c1
SHA1 3f96ad2fd94b33e5143b09532388919ba4781801
SHA512 74f44680dda7d9ddcd9a3452f4c174b83cac7ad35758173cd3ed4871a2d14ffc708b92fdff495596cec4d4a0be76a7ab585b635d149882e5d5e00f6b35c2988a
TLSH
T15AF002444F5B985859BBD12869A2139FCA86B0C0E94FB05724194093D319F7FC0BC1CF
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 f84a3ccc969a26e0a7aafcde4dc48b9609252127802a2f4a85f74936a1078f89
MD5 140f5a256988e8adf5bf2b2762ed14ce
SHA1 3b1625a461ef10330a35e7cb60608ad066a90038
SHA512 e791271a55e5d14d8eac8c4bf15805b59fb2a93b5f5a3ae068ca2fa6cb8474de661e7d332d2bb822e3ea5c7e9e7e30a81c051a58e2806f45fb6b95a46fa0d17b
TLSH
T1A0B01235DA6F8D68C0A942C223A5A4C7F29EA4479D671F557F16CC50C5074092B8312D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 df9a85bd4cb3b1d5882315a49d81bd305beb513441de8539638cf39ce41559f9
MD5 39730ad36ef362012287dcc042ab4416
SHA1 5b0d75cb1acd59a35b882e2e04ca5103756d08b8
SHA512 809e6e1f0dab53201671241dca99977c6f317966e9cca2c5b59a6779cd6496dabe7c7235985abb55c1e3ea539ba86dfeb43f42ff2ff9f1c513d56c7199cb9280
TLSH
T1D4B01235DA7F8D68C0B842C663A4A487F29F9447D8675F557E15CC80D60740A2B8352D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 994954ec91c9562e63a283ba24caea5a8dba6e9b38719b9388464075ebd6cae8
MD5 3276379a3475e855235e6f2f3d164a21
SHA1 6453969abb09dc48b8dea19f829cda4240835fbb
SHA512 de7bf90fb001b825a9c2abbf17aacbd80c0e921b1c3b6f59b3ad5ade4ca8f07a417767c139e9b4cd239fac153c80c6e426dd2e506d4e0630bce7b5f4db3330e1
TLSH
T14BB01225DA6F8DA4C4A842C6E3A5A887F29F944798671F55BF19CC40C5074092B8322D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 c9e65c4726d9ac474c8993a9944a74bd0dbafb3708614fe04060187556c01698
MD5 8868ce9361ef6b04e6529b8ba8f6ab81
SHA1 f8a6f6312d57bc8eeabc54ffcb79e405f9094efc
SHA512 56e7d1327307345aa257817284613929e913ebbceb935f77142359bfebdd1638dd7604b25f143977d12e4addafd9ddeea18b6b2b60aa031307685041f79147bd
TLSH
T131B01225DA6F8E54C1A9C2C763A4A487F29D944798672F55BF15CC40C50B4092B8322D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 daaa7788b00193276edbdd6a4faf8d196bb5d9fa824c859c59f278be4e6ace75
MD5 38ccd7ed6a5cd28bdfd4ea46397eb4f3
SHA1 0fbd105e6decd34f5945eb99797f38755d7d3476
SHA512 f46fa433555345b35347beb1c330b4d3720f9c471aa14cc6162aa5134cd2f2ee136810a3f085486c07f3d69714b4996e2c4f579d4b66a78a2613ae27968bc59f
TLSH
T13AB01225EA6F8E64C0B8C2D763A4A487F29E9487986B1F557E15CC80C5074192B8312E
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 f6f74bc0db96c800574c353fa3b4fde302e012a52ad11b71481a62820b332de9
MD5 ae087a647b094b6c6f35b4815eae1f83
SHA1 49c610fa4175664c96a357aaafc1dbc04a813f4f
SHA512 d28e87cdc93b8401eb081a53ae5f5993118b6e7757e4ef078a86a3a7511a0ed41b847514d72c993f1b3be06f890dd09a17e1ea111783239b8333c9501c439474
TLSH
T15BB01225DA6F8D54C2A943C763A4B487F69D944B98671F55BF15CC44C5074092F8323D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 a8ea779d346a3e0b88a5490fdd795c4d2ae7772697d7fb24b8c553a234c0d2ee
MD5 f428212dfb534fc4686a85d3d423732c
SHA1 c0886f89f957576a3144d7bb3081e1e78c37c1cc
SHA512 d5c18bd2b794dadfffa593362b76aedd60f5bd2d7fe39781dd33a01f8835a3e932f7c7eea425c8bd2d7156cc2fb106306228dd95f81072036ab6d2391e05fb84
TLSH
T16CB01235DA7F8D54C0F942C623A4A487F29D9487A86B2F557E15CD50C54740A2B8353D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 faea59a6f7d22921c951429bdb7b190a8dd67bf7d768643cf9a4758f416d2d61
MD5 ffd8655709823fb987637811e197f398
SHA1 aeeb82f16e561c906a6d671f8c1c795e864effa1
SHA512 9c4cb20349c66be3639bcaa0ff53c9d586f52206a7b1c7433a93c0aa5101cbdb08b95fa4aeb3c20efb10368e8c9d27e14da5a3cf70cf6020444ad66defb91c8c
TLSH
T101B01225DAAF8D94C0B942C623B4E487F29D944799671F66BF15CC40C5074096B8312D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 d4520d315610c8466f072030f7539db04ce00e753eed032ebcdbbbc45a3cc8c9
MD5 8bd9ae5a74ab6dd5558b0f365d0c9b86
SHA1 7a12dd844a9e4175d09c23ac399498d5ea90d9eb
SHA512 3d8057b4574e7b888665f13092a1e14418d2501e39536a332e0420d3f2d31569badda2fb72e085c0a3d20f7242200fe46073f3bdbe9293189e3835dac7cd9412
TLSH
T138B01235DA6F8D64C4F842C223A4B487F2DE94479C771F55BF19CC44C5074092B8312D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 ebdbb9ad4aa357fd9304b8062dc322fb7829132e7bfd64d6ae2f489ad47fac18
MD5 5c64e50f92f4a3e29e495e5de5223bc1
SHA1 1c93c3a9ad45866f64f2b664fe1e739e7c7c4e79
SHA512 2e671cc31c01a5d14872c652ef8a043b5d3c12a25ccc6366cb284cfbf76525c7c503ed9d520e1036f13559e18357e459a80cb5218465f26b50a802a6bed5826d
TLSH
T119B01226DA6F8DB4C0E942C223A5B487F29E9487986B1F657E15CC50C5075096B8312D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 20054a0c148b46d4949f7f3cb2d34aa74d1bb5c88ab730cc1d7c69e97046e8cf
MD5 5e46db1153b34c701bf24a70d76b79b7
SHA1 7e4ccafdd152767fc0bcc5cb84d7f768718a6699
SHA512 1639151cb7acf5029ae4fc1646b36ed08bec67c6dcfd93720728b45723d58fd92ec95de2ddaff81ae3d9c3e12dce7114e082e8b525f1bfdbf0cc0ff14f3646de
TLSH
T148B01225DE6F8D64C0B842C763B4B487F69E94479C671F567E15CC40C5074096F8713D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 e4617448f4719ee60a4d5e901ecc2de00387f53601ea92b6e69fa6d9b616b2d0
MD5 b7705f29274988ccc4c3b3f164a9cc6a
SHA1 310da4c7c965dbdc7651d30450f8d4b1816e72da
SHA512 77f9f6ff457944a8b4ae05535faecfbc006777b33ddcd5e4d9123fa20088e56dcc551f89d4e442dcee83873571e7ec92f30116254bde7fe5d2c0283850ed2c37
TLSH
T10DB01225DAAF8D54C4A842C6A3E4E487F29E988788A71F567F29CC40C54F5092B8322E
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 7c25772e2bf89e8c43f0fb2beaedac8b7e66adb7747058db3890e0c1b8b981cb
MD5 0fe0b941a0962f3211504b86a65998c4
SHA1 ee5389bba281493bce292884ec383ce6270f1860
SHA512 4b80309859bcbd6c40d9bdbce0a12968da38c6ec1eaac8552ac1ab8981371fa226348d27f20d683c4b602bea0f38034be5318ae2d0b0a49cf40768b8ad2916b4
TLSH
T192B01225DA6F8E94C4A942C663A4A487F29EA44B98671F55FF15CC40C5074092B8316E
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 533ace5dfe03ad396f92b1ca44de5a9fe6c238fac9e668d30941d8487ca50a42
MD5 a277e92848c059db197c65cb24d76bbb
SHA1 668a539ea7ce9d5570269ca0fd7e731ef0107e34
SHA512 b203a2402be8c9ef2aa6056c24161edad3051fe30071be28edc71412364d93157a3c52681230857bf05457448a92b07eb1d585069798766a3d144a2c3a427706
TLSH
T1F8B01225DA6FCE58C0A942C623A8A8C7F29E944798675F55BE15CC40E6074092B8312D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 ec3c983fdb9a7d2b408579ae95d84160ea0b9fc35be56d7296a5809f460b5d9d
MD5 02d6912ecdf3fd2d2d97ce5056f97b19
SHA1 215f2e719180ecb45c5c22ea849f17f819a2b150
SHA512 e7378d17da1493131fc08b535ee53f85e10dd5b22d2000fda84acc9891c6b6af83c63e2e96bec08207e1d08211272acddb6ae2ed2a74b05cda2b555e2019e9e3
TLSH
T1DEB01225DAAF8D94C4A942C323B8A487F29D94478CA71F55BE16CC50C9076093B8316D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 40a2244931b46a6661d2d10a47d4e1239c873b925f1b2047a2a0d9e1a853e28e
MD5 4f74d6497ebb938fab88a328aa100941
SHA1 c16fd738517808488653cac605ad5088096657dc
SHA512 c985afe040245bf741add4036952e0011fc3f052bfe9910baf3d92d6367172c464c53f8772a3fe2006f91cd6e1bff11db9c3c3e52f418b0a11993262ba1d0661
TLSH
T1E2B01225DE6FCD64C0A842CA63A8A487F39E9447986B1F557E15CC40C5074092B8312D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 adc7725495226be40b9dffc619032631e05a23c0393da075ce2aa772feabe631
MD5 a567ac9904d50ad768f02d12bff62044
SHA1 f4488342e2cc8fbac80c2c1305d6e93ea83a0a78
SHA512 78b69a0a2bbb34374983d903dfb41d678889d6efb06bf237682053e4aa4069a014fb760098e9fe52900641a1e17755991cf507cb6d68b75efce47be0d7e9c571
TLSH
T132B01225DAAF8D94C4A882C663A4A487F2AEA48788AB1F557E15CC40C5475192B8322D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 41b609bd52a6a65f67740b2b9b071931518d3bc0091ea71d8985ed84867514e4
MD5 9e9e298173ce67be9040a8015b99dd13
SHA1 831402ec45ccf01f87958205b427b5fb73e4fdc7
SHA512 74fdfbc47ab57df77b9ae606f3fe47292a379664dc52590add2898afb4e06589d5e5dc7d71410c1359d42d8a89fb987866381f7c402e9c2b8685fe81a754e640
TLSH
T193B02220CA2F8C80C0E802C223A0A083F28C800388232F083F08CC00C0030082B8303C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 37e0ed0b358858b04a00171e291bed0916cf21927a841563d8f888269b16cfc0
MD5 56e6cd72d289688ea7abac27f0f4ee43
SHA1 044559a396ad074c91d53ae8b1020727a047b2a6
SHA512 d9fc7ef2d5b9f8652eb9fe8cb840d5805d4c6a8b1700c800a42c3a4bdebb91164d5eb8139f0df9faafce7ddc32978108081c0fcd9e997927db4a6940fc3495a5
TLSH
T1EBB01225DAAF8D94C4A842C223B5A487F29D944BD8A71F557E15CC50C50B5092B8323E
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 231d5659f2cc4d3f46bcea1c85d99c52d04b251c518f93be3bc4bace93135919
MD5 77a3e070b8a881114621d7f0ad2b1f25
SHA1 307d48251ce21c91df163fe07ee12fdd89a35d94
SHA512 c4918c1266d532d1c0d759bbccc41fbe41963076554adf52f60e39eebfee35bcb6617282895c3bb71aea6fbdce0ec2606d4d3e7090756d218ef7716298024d8e
TLSH
T165B01235DAAF8D5CC0B942C623B4A487F29DA4479D671F55BF15CC40D5074092F8312D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 34e0ba167b8b0679afd33458fcd58b3555430d4f4e71c782793ba9d498f9ec69
MD5 7694062b37a2b0d456a6ecba55a47df4
SHA1 2e5445caaf08c10ceaeac5f69a60a9dfb6a9346c
SHA512 2d9d233a1bdd341bf99c936492c201223a82203b639a6426e05a0cb3ff735834af4787e7f121082dafd15cba17731c2bb1991e08efdeed2d6ff1f0f8a11f662c
TLSH
T1FAB01225DAEF8D64C5A942C2A3B4A487F29D944788A71F66BF15CC40C6075092B8322D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 35104ec46ece6c587088931fc56f3ea64f67382c5b038d51ab3f5bed4ea270cc
MD5 a8c4010e1595a30f02c7fbfa38567e42
SHA1 a549c4d51eac3b6ac487aa7c9076bd5d63068603
SHA512 141dfdee8c5c939abb66331b87286e432a844a4d0cfe90ab926cd82f511e31c43a3b37d650895560b6b8ae4b8991bc272d7002f6ebbb2e244c5e71cf65e22782
TLSH
T19FB02220CABF8C08C8B802C223A0A083F28F8083C8A30F003F00CC80C2030082F8302C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 f350ffed24d1a373a65157c868d00f7afa3759fa98149d0a50ccf4bda8973682
MD5 96a0bf1ad6a47ac7c83dbad3c0fdf16b
SHA1 a51eef2169b7b42353e1e9c40f5d00f333bd4eb3
SHA512 5ed86b1a7b4d8f955ade3594cce696ff9f81a130cf9339e0545ad0a05b59b5eb14a8900a6b6fd65824459de37eab9cf49232b668ef2ec212f0ed87cea6cb31e2
TLSH
T1EFB01225DAAF8D54C4A842D763A8A487F29E948B8CA75F557F15CC40C9476092B8312E
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 f73a10e1675baf92da44e44020bae5a0c8cc0e73449e4ac8a8a85b5f26cb8668
MD5 2883e14eda21511783cf6331384b7444
SHA1 0cb738073a6185cb9cd1146bac0afca0e6e1b758
SHA512 333403ee45fd172795b1b2af9e9675b6d5aa5198b798956ad65d0f8b17b7015f523b66c151f4b3230727ace995a3f5586e5c717a16269a779874789a8cd5aa0f
TLSH
T1FEB01225DEBF8D54C4B842C6A3B9B4C7F29E948789A71F557F15CC40C5475092F8312D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 ac688a5ac08f0b44abcd807cbe1d2315bfa7aee4659d396814245fec9dae0629
MD5 9b7ae0fde9ee65fb330ff72cca203c92
SHA1 2d050c33e4b6b1f65cff1c55fdef97316569c616
SHA512 0017f5594c41cea960120f29d2649b40cba115edb79db0aa09a28b1f06a7e7748263ef5c8da9aa5d7bffb7e6107c26545e44be213d6350e42f56761370e4eab4
TLSH
T18DB01225DAAF8D54C4A992C223B4A487F2ADA4478CA71F55BE15CC40C50B5093B8322D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 6dfbf572e8ae55f01780921e47a52aa5b69e3c1fa3809b162ec33c58a13b536c
MD5 44e2e630d09222811928c1f9fda7176a
SHA1 79d4384a1424a71fa127f1a3ad4b3de96c802564
SHA512 c2d284b5597aaa90180b2f07f7a46068339b3154557cb2070a64afb57057cbf413abec8793e3766a992aba46464a4dedaa5c0a0baca18449b44a336b9fa363fd
TLSH
T11AB01225DABF8D54CCB842C633B4A487F29D944798A71F557F15CC50C6475092F8353E
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 b54cdde446d72f5c37c64b67496df156d517ddf40807b8b3f1f4e6ef24489a7e
MD5 7e0457ff135f164ab31ddcc227582d88
SHA1 19f0b73a8036e667957ad8dc3e52c10d30f35e18
SHA512 904ad2c12f90a0a22b93fa1fdf253e2a296fd8830ace58d9be6fb17db3507167dac537afe0d2b1e9a5d9854f6f6fb3b8455a15397a45fcfa430a31904dc46b42
TLSH
T1D0B02220CAAF8C00C0A802C2A3BAA083F28F808388A30F08BF00CC00C0032082B8302C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 86584362272cb6701d31ca9865cf75d92b1399006577b9084a9d544d190f554d
MD5 1e5a24a6572664a2f07ff3bba143ca5e
SHA1 319ee556896eff8383c63096c1dbc7e4bc121f6e
SHA512 dbc15277e2af58dff73207d0fd1e36f4f4f06867e6cc0adf370a3dd3e0e5938c1267882798d6a212ca1c7cdac7c50646ee3a31900346e6bbc257d12be74120b9
TLSH
T1BDB02220CAEF8C00C0A802C2A3A0A083F28E80838CA30F233E00CC00C0030082B8302C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 1aa47e8a89285c28e5fac185984aa359086b9d28fb996e2ad9eedbeb862d0f20
MD5 904267e40041bdad2341a33c933b3425
SHA1 f4facc7bfcabd72cf3e805845295eb5f7813a889
SHA512 1f97dbbc2527f601d6972c9b60cae9519d9c15cede8de88f6ed0bcb15af040c73918daa36ff73a237100c9391c337ca68b4bdce2de7de7fcce31e74950d69350
TLSH
T113B012A5DAAF8D54C4E842C263B4A487F29DE48788A71F59BE15CC50C5075092B8317E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 116B
SHA256 3fa62e147ef2725432d5eaa1698192d814b26f69d95d4add324324a9cc385121
MD5 fecabd1195874063cc289dd64288f9cb
SHA1 080ad44732ea605aedc44db9852f2e6fc04994ac
SHA512 087bfd300095b0aaf9356017030c4e19cb0b9a9945353e06f7e1199120f6c669ab93ded5e42b613193dc1abc467d274856b0fc6f1529471954f24022d1edaad6
TLSH
T149B01222E76F4F58841D3AE366AC6A42C4CD688EDE67EB15BD04CCC0C406809D38702C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 80b0b2566e1628b451e4803f63755d1e49c638048714b412ca411d1a8e11a0b5
MD5 dfb1c1c012b13562fe9e8c24ee3c317f
SHA1 f73cb8788cac65d7631736a4fef2f75df4c1f607
SHA512 ed38272f6db5e65a72e756cdd8b890f22052c104ab48b8d6c6410fa76e67e68cf491be443a120f93fb2d10a7a65cf26ecff30fb95d19ddce95b72c0700ef05b5
TLSH
T148B01253F62F8F988C2953D223ADAA43D08D444FDD5EAF277A14CD40C40B416E28741C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 6edbee0133abe1fefbf562432bae65150b36d83a67c0535ede08d9493cc882cf
MD5 ac3d55e496473380c3e543bc92cfda50
SHA1 38178856d03ea5f2db7b0ae3f2f7d0d9911337ef
SHA512 0ef0d91f5587660844796f7a354f4df8ffa32e1547e0b53ae015411e8b1540339e0d9adef8177424c1fac6f72c1610b2ee259c148be8ae842e1537a2efaea032
TLSH
T114B01253F62F5F688C2997D322AD6A42D08D444FDD5E97177908CC80C40B416E28711D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 c5331af5fc4600980051188eca3a67d55acfaff1ff5ec11813aaf3d676a26d36
MD5 a97eda37c663ba2b35a2cb5df88d429a
SHA1 69583078da15b0fc32bffd59bec4320d037bbf9d
SHA512 9aba816078b616b640d756d914c839770050055026d228401861e4febd0a69b6789c90f782477a57cc4b9f115e3039761f3c7daefa9a66f44f07909e5646d5b6
TLSH
T1CFB09262E62B8E588829539222AD6A46D48D444F995E9B1B7A04CC40C44A406A28701C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 240c792b49b8ce4df5d0174ec10f15e122bba39bbaccf2f840487b14681dfef9
MD5 6afc8b0b9228ab19cb1e628eeed7888d
SHA1 2d5d7d39e3a968c9117d78ebf43b95e30644dd7c
SHA512 f4d4a3451d666d781c543095dbbfd355da0a05171da4a148bebd2b12b4a28df4840d0042d925afe7f27577bd9bbee099c51e7d509e8e87d81ffe81cd32f0dc45
TLSH
T1C5B09252E62B4A688829639322A96A42E08D444F995E9B177A04CC40C41B806A68702D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 36a15d40fc7387c23f7d1e8d5cbb1b42b635cddfb047b07bb7fe9eaae5dd92e2
MD5 df51873f1f44b54bc5253ebdfc92d76a
SHA1 4f9dc0d778b8640c4fd34ec2edd74caedad83f0d
SHA512 28b168aa78693920e784e145f2bc527f3a2aafa34dbf7b1f06c06c2d00addfe1e34481299251b8f7505796c4df6b423b699d5e4550fd16677a42a3b5351684cb
TLSH
T1A3B09262E62B4A688829939222AD6A52D08E444F995E97177904CC40D40A406A28701D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 400bad2edb14661afeb1c344ba81a210c25eebe193e7e0f3abe2c7fdf5f2e077
MD5 ca3d6cad141c999d441033688ebbaa75
SHA1 14cb2940b5d1a529c5ee05552ff03e6c38d78775
SHA512 49930ef9211dbac3c332474353c0f9a9647f6fef326d78312404d9efbf4b6c8eccd5ab1cb1b69d449f4481695378c0e328f0cc2d858277d44bcda210c0f83ef7
TLSH
T145B09252E62B5AA88829579222AA6A42D08D448F995E9B2B7904CC40C40A506A28701D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 cebd538ff0f325b2d4bef57ba7294e4bd5d6366f2e12be02da83e7731a6ab903
MD5 d9a9d955e9c490bc23c02235c734190a
SHA1 3b7ca87cc80d5a456651163b73bfc1cd424279b0
SHA512 41a159e154808b3d15f0f7e8e98ca8e6996c4970f5d0149452f2b037b55fc06eb355bdb350e723b34c6c68439b6c97bc34ab3b5215d309544e9dad7f7617c083
TLSH
T165B01253F66F4F5C8C2953D232AD7A42D08D544FED5E9B577904CC40C41B506E28B01C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 2ae42fb4ff4599c9a66966cbe8146a4563ee4a6f48ca727a832c040619cf6499
MD5 0f3a8bf34d16c22d7f9afbfb2341b0bb
SHA1 0238bf5101dd333385785c7d5e6445ca53bdd23f
SHA512 39ceba1d02028e71dab42556a281b427a90de8af104bcc3e15fb90ded367fc3378ad20a608fa7b196cce4b18095d4ef30d25476ac2c625a163a2dff0a98422b1
TLSH
T1A1B01253F63F9F588C2993D322AD6A82D08D444FDD6E9B17B904CC40C40F406E28701C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 d18d5e9f4b7785a0553fc25116f454dd59b415e088c7d73bd8b66c0f094c5ccb
MD5 b2d2fde4ee6b394ab7a95bfb016d0e24
SHA1 92d1420819fa9331e7dd6be7bdeb523a171ad398
SHA512 36c21da3aeefc2794ad9038508b3fcf1a29b0a5b1d642ae1845f916d78a27e75d7e0c52fa0acc99ab82dd9b707f86f082fafd0694c0e8268dd94f915cccb026f
TLSH
T1C7B09292E62B8E98882953D262A96A42D48E444F9D5E9B17B904CD40C40A406E28701C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 2d37f20145194bb556fb82a8bcb83c7d651bdafa5a9a101b6b623bcd07b67a2e
MD5 17b8dfa6a1dde0f399afe68f7ccd16b2
SHA1 9664c67bf7f9e207857b7ea35b0b7207ac5649c9
SHA512 28325c9630566bc597669415e6af85e93e9e51ed4647e582324036e7960112867cd38e2ca528a6fe6b2a8fe361ecb64d1faa1c243a9874b0312d2e4c65cfd73c
TLSH
T1CBB01273F66F4F688C3957D222AD6A46D18D444FDD5ED7177904CC40C40B516E28701C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 b17324239281b492bc8fcbfe373dc0978f95cd6df243e600b0192e642e3f414b
MD5 92f1fa4ae6562ff828189f42a0ae073a
SHA1 54c66266b62b1e2d1fe1445b7f25bbc9ee77b579
SHA512 f829340900e08795ec0322427049713d0b6f3c10be3dfc02461db9d14633c98ea12460dae108a707e8bc6e243a63011ddfb05190849ea3fad44ecc1682edc320
TLSH
T112B09252E62B4AA88829579262A96A42D48E444F9D5E9717B904CD40C40A406A28701D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 ccb387d1a7c902d8860d0952160086c9615d346c445a28af74067e68cbb57a17
MD5 6a7ce5bd8f61cae928587d7f0b7160f5
SHA1 7e8e96d7691984d1604e4c377624f9688dd852d3
SHA512 37dfe3e7ade1365e5800a2455e78d93b5bfa5297e4e232c1adf9cb2a2d41538764f3abbce5320dfd6990d8523ccde98d36754417783da25ada403a31dceedd2c
TLSH
T1F4B01253F63F4F688C2953D222AD6A52D28D448FDD5ED7177E04CC40D81B516E28B01C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 8739fd5f771a14a9a07e995c2465c114e3b44081186b2acc5b153bb14c0955ef
MD5 20782f7a15dfa9600193430997ad2bec
SHA1 c58a109cdf1dc4d9b8a94652c8ba31f568dd8f5d
SHA512 871dab67216260a1f0275107c2cd89332998ef0f4e8baa7c808ac3968879702bde95026621f628de2d97d6f6e5f137a7e438666d830e63992bec12a2cd1e2b3d
TLSH
T1BEB09292E6AB4AA88C29539222AD6A43D08D844F899E97177904CC40C44A606A28702C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 1ebb42a83f723955dfef20a9e079fb854e9f31e90f36e5993f7d54567a00eca3
MD5 e571961138cae34e338490e49ac8bd5c
SHA1 487392097a7af78cfebbf998177f0ab8f78d2366
SHA512 5c9bfc634883e34b12cf1f033d457a9b3dd704dbe9c93013dd576ca894435556432e635128b2a2ba497828423486f3c72d466390ee67bcb9e6eaff33c42e30f5
TLSH
T10DB09252E62F8F588829539222A96A42D08D444F995E9B177A04CC40C81A506A68701C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 d630303c30e46b59d407f0c94b6322e91113fefc15262fa177070ba46913cfa9
MD5 2caa124156204075cd671a9c6e884844
SHA1 a1d83e9e8e04a243a8e625291718d4e017a59825
SHA512 ae31739152c590f7d0deae012326188f79f5a4b40bcc3f49ca0c9cae6169c37ca12211b8b39d28263baa886272cf6be0b6b7b7640b48686d246d653199c9f7a8
TLSH
T174B01253F62F4F6C8C6973D222AD6A52D08D444FDD5E9B577A04CE40C40B416F28711C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 06e0f3d5a9c610bea9a92e5cd1baef68e7a0c128e47a99e7982b0f2b7cdda6c6
MD5 525a9b75f0c4fb9af040af6e6af82a48
SHA1 9aa8df141f604924ccd2d92f39b9f1111d0929cc
SHA512 3c060d5741c2eece724f785edfff884b5156cdd6c6b7906958ceea6bb81303713d12ddc19e97ea85d1829a3b855e2a4382ac9936b6a137ae47a9edd102872e3b
TLSH
T109B09292E66B4B688C29939222A96A42D09D444F899E97177B04CC40D90A90AA68701C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 8d202deb6c9a0bebbd6be15026936cf77c478b3d2a850df46637cfe2606fa24e
MD5 75d4166340e0893ac411131e23097034
SHA1 b8b2812ccd1ac767aa9c9c0ab42abdf6165fa70e
SHA512 df94bc6002bc7988fcbf1421e10f5bc5696624a8b312cff1e8d61a55cc5b1bf353a1acb4b71cd1b24d723a8971cfe26df3c5e4053df664da9190461baa03f67a
TLSH
T1E9B09262E62B8A688C69639222AD6A52D18D444E995EA7177908CD40C41A416A28701C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 ce96d48b231579900796e620a82c6bdd03748e69aee1834e58c129d87ff9d675
MD5 562bac7087b862489b5476dab9ee66c1
SHA1 26eda8c8a6f03b4303eb0c46b4253564dd224d31
SHA512 c0df805d4ff4ddf99d44466f4a0604a76995fd4672cfe38f258532252eaa6c932774ce3219e4c5a52a3f0f5ef9d17cab8443fbdac43758ad792af5c9cfc3173c
TLSH
T1F4B09292EA6B4A588C6997A222A96A42D08E444FC99E97177A14CC40C40A506A28701D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 ecb55f130bcc1cce0fdda20bc6cec39253ca192c49d27e1394eba5b3e161fee6
MD5 0da4787a5efccea70dfda5bc6fe163ba
SHA1 75d08c82c9ce4842f9b8c9dc850bb632f5748e68
SHA512 f2d073a15527d0027c11249a2e893bc8d867e196c1b8762e46cd1e66962b604bd44839b761d8f4453b914a6a68b0247cc73e6a362b36bc736510a932520a1d8d
TLSH
T157B09292E66B4F988C29539222A96A82D08E444F89AEA727B904CC40C41A506A28701C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 cde26dc563c62c566f8ffb2bff6fed4a079977b5e428b5da17a140cab2128954
MD5 213a2f75a2532748baa5e087f5fd8d29
SHA1 518d863e5f38e57a0812678457ab9619a294435e
SHA512 75180d98edff90f5a44d12724f2f13cc56131a1f93d49351444258035706ce3980fb9e16ae55a852542e3ba06ed88e8bb2ab59bbf730b86bfe0aef656c115b8d
TLSH
T156B01293F66F4FA88C2953D322AD6A42D09D444FCD9E97177904CC40C40B606E28B01C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 2eb451adc7ad651fb95b912e02d314b7e5a5b22bb6384896116a67253aa86e8e
MD5 9f58182d8dc96b3c5d88c2c065c27842
SHA1 d8906bc6b75a1713ef5c63db8920e44e1f027caa
SHA512 a799354a92e77f6f79dacd6acddad2b3eaf4fb1364dd03435c4884a1e94614ce10dadd794aa7b7e52bf2d17497342b905700150a05a89384baec7792841c89b4
TLSH
T119B01293F66F4FA98C2953D322AD6A43D1CE844FCD9E97177904CC40C40F506E68711D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 a58cb6c2674a4043fb3afc4d706850e644fc78b1770fca53acea99d4d0f6292f
MD5 a1cdc1c09b7d5c36149afdd8d9c9d9a8
SHA1 94c8fdefe9d8ae09b0440545b01625f67f2bc794
SHA512 3368830c1f2187e4cc8f6bade599ac7ec17445b77995da25ab6d7cf9778da63bd9a99600570230e60164080c786bf932c171aea4e113b9f28aa23cf0268bf405
TLSH
T15EB012D3F67F4F688D2953D362AD6A52D48D544FCD9E971BB904CD40C40B507E28702C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 4035bfd5b52dbd53a7deeac92b5f3fe0e5b01477e9169329480aa3e4a5e8eb4f
MD5 1b4e99e0743ec56c4bc5843a0dd9a6b1
SHA1 ccd5048917131ba1c5d60f52d4c6f5522662de0d
SHA512 dcb014021a59b93f7dfd84985524f69af1d84e7f5b36003574dcf9e5c27bb37968c14aef6853a993957765cbbb05d431c0489bd325acc819db5b30bb1ac2314e
TLSH
T151B01293F66F4F588C3953D322AD6A52E49D584FCD9E971F7A04CC40D40B50AE28701C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 7ccd4ff573e19daef88d8af99fd00295e5604d5a905cb4534555e88a916fdf86
MD5 6efcd5d8a87754855f9d18c777b3090c
SHA1 e9e8c848253e7579913ccd293c9df4a0980e5488
SHA512 0ee22df6f45e7594c093155dd6ff9dfd0a181c45eb642449f32f84f7af71885282f720d640000f156e719a6611599ab3d958c81fcf98ac82caf40de2e0ca0b56
TLSH
T1FDB09292E66B8A598C29579222A96A52D08D444FC99E97277A04CC40C40A506E68701C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 9e30816f1172015bb7085dbbd20547bb6a9c5765da07156087401075886ebc31
MD5 2f3ff67d07342dfa68098c57d73bb333
SHA1 c0e4e669d4983f0babbca4027fd521242306c0d1
SHA512 8d213003fa56f7026acecb45d208ab957f7afddaac652ea28a5ad1a05ea397aef5342f163774b26d634de508c524601406668fcfaecdba6288f1029fbe748f71
TLSH
T190B01293F66F4F688C2953D322AD6A43D08D444FCD9E9B277904CC40C80F506E28701C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 c6125fdaff43886e321d81a40acf67fe14bb3e918fe34908b3718bde6f8f6e05
MD5 f2a60184e576108bfed719ec8c7c6271
SHA1 64b80bd6baafdf974c7c941c44bee5411b12522e
SHA512 70dae8d7746a3518b65d4f891849515d5804bd151c92149a2c002bf721e6a529673db1e9fd25122f52fe99916ac6a9cb386d798dfd948bfa08cf83b79c5a1b17
TLSH
T146B012D3F66F4F688C2957D322AD6A42D09D548FCD9E971BB904CD40C40F506E68701C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 45ee474f559aec7642bf1bfeb86c8ca08e4554f3099d6c27f01eedcabbdd1426
MD5 e7c14f2274042b4d629fea55d4dfd957
SHA1 c8eb86dbfccf2bc697be60b2722a0038220eaa93
SHA512 2c379c1daf3b4acb03aae8d188ddd1e923ae5e9f7e1403b6bffc41b80080da88385184b3834fc51f3a90288c1839265141d23d35f7ab65b8741cac72f36ef738
TLSH
T1F3B01293F66F4F588C2993D262AD6BC2D0CE484FCD9E9B177A04CC40C80B506E78701C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 0a1bbae30689ff6cebb15129a205a673c0dea007762bf89c8b61edd5e7269f86
MD5 39df658d5a36e8dadfe381d53cf9e73f
SHA1 dbcfa91334b3f78e7ecc9a89724b64b7940ec613
SHA512 572677f2127afea0711caefa206b00b4078c79d33fb93ef7eb5687009a90b7efe5fc74e79c55b20a96e7f4ef992565bb362706d9d7dee100b0b51d8553acb1d8
TLSH
T113B012D3F66F4F588C2957D262ADAA42D0CD498FCD9EA71FB904CD40C40B507E28701C
MD5 SHA1 SHA512 TLSH

Submit Download

BridgeAgent.exe

Path C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
Size 6.4MB
SHA256 d49785f0195374536fa826a9f2228da105b80fa7bff5d8bee24c7260c665a09e
MD5 ea7aeeebfda6f39a868a6ba491695737
SHA1 01adc9b0769c2bcd81bac32d23ff9776c1a3eab4
SHA512 a233e07859d60c35c7831790547c913585dba9dcf9f82b965f3c9081f0e792f9af925e669ccdeb5b689f7f18df569f20c21e97285d4c17aa594f66692e499664
SSDEEP 98304:/HL3d0WMOPQ2p+COJx5C/YDX6XC7nKj54:7vBOoy
TLSH
T193663B11BA6B94BCD557C8B483068A239E2130DF1B26BAFF418486393F69BF11B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_awxgsnfu.kg3.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_awxgsnfu.kg3.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1244-95-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

Download

memory/1244-110-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

Download

memory/1244-111-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

Download

memory/1244-102-0x000001147E970000-0x000001147E98E000-memory.dmp

Download

memory/1244-112-0x000001147F290000-0x000001147F452000-memory.dmp

Download

memory/1244-107-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

Download

memory/1244-104-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

Download

memory/1244-93-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

Download

memory/1244-113-0x000001147F990000-0x000001147FEB8000-memory.dmp

Download

memory/1244-103-0x000001147EAB0000-0x000001147EB62000-memory.dmp

Download

memory/1244-105-0x000001147E990000-0x000001147E99A000-memory.dmp

Download

memory/1244-92-0x000001147E6A0000-0x000001147E6C2000-memory.dmp

Download

memory/1244-109-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

Download

memory/1244-86-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

Download

memory/1244-115-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

Download

memory/1244-85-0x00007FFE8A74F000-0x00007FFE8A750000-memory.dmp

Download

memory/1244-106-0x000001147ECE0000-0x000001147ECFE000-memory.dmp

Download

memory/1244-108-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

Download