bridgeagent | b0dd515bb7aa8f966469cc470ff9845d4b7bdcdb0ce25ea5ec9b9923dd183d65

Analysis

max time kernel
150s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/09/2026, 04:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-09-18_60af2224bf44f0411c405a3dc3a7fed6_akira_glassworm_icedid_rusty-stealer.exe
Size 6.4MB
Sample260918-e1z1vaxy6p
SHA256 b0dd515bb7aa8f966469cc470ff9845d4b7bdcdb0ce25ea5ec9b9923dd183d65
MD5 60af2224bf44f0411c405a3dc3a7fed6
SHA1 adf460420d128d39bcd5cf86a7dbbd1dd6c9d2b7
SHA512 51358b6b32e66af5e0c69ea004b690a479bd79d765b62637153c54944b4d01a1d747c5add243ba1d06804887a58c227474edae4c7098ed9a45fe3c233968e3b3
SSDEEP 98304:pHL3R0WMOPQ2p+COJx5C/YDX6XC7nip5d:BrBOoy
TLSH
T127663B11BA6B94BCD557C8B483068A239E2130DF1B26BAFF418486393F69BF11B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

backdoor defense_evasion bridgeagent loader persistence

Malware Config

Extracted

Family

bridgeagent

185.166.153.90

Signatures

Family: BridgeAgent,ShadowHVNC
BridgeAgent aka ShadowHVNC is a Windows backdoor and loader written in Rust.
backdoor loader bridgeagent

Detects BridgeAgent aka ShadowHVNC loader 1 IoCs

resource	yara_rule
behavioral2/files/0x000d00000001c45e-19.dat	family_bridgeagent

Executes dropped EXE 2 IoCs

pid	Process
4088	BridgeAgent.exe
4056	BridgeAgent.exe

Adds Run key to start application 2 TTPs 3 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe

Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

Command interpreters often include specific commands/flags that ignore errors and other hangups.

defense_evasion

Ignore Process Interrupts

T1564.011

pid	Process
5764	powershell.exe

Modifies registry key 1 TTPs 3 IoCs

Modify Registry

T1112

pid	Process
3720	reg.exe
3144	reg.exe
1804	reg.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5764	powershell.exe
5764	powershell.exe

Suspicious use of AdjustPrivilegeToken 43 IoCs

description	pid	Process
Token: SeDebugPrivilege	5764	powershell.exe
Token: SeIncreaseQuotaPrivilege	5764	powershell.exe
Token: SeSecurityPrivilege	5764	powershell.exe
Token: SeTakeOwnershipPrivilege	5764	powershell.exe
Token: SeLoadDriverPrivilege	5764	powershell.exe
Token: SeSystemProfilePrivilege	5764	powershell.exe
Token: SeSystemtimePrivilege	5764	powershell.exe
Token: SeProfSingleProcessPrivilege	5764	powershell.exe
Token: SeIncBasePriorityPrivilege	5764	powershell.exe
Token: SeCreatePagefilePrivilege	5764	powershell.exe
Token: SeBackupPrivilege	5764	powershell.exe
Token: SeRestorePrivilege	5764	powershell.exe
Token: SeShutdownPrivilege	5764	powershell.exe
Token: SeDebugPrivilege	5764	powershell.exe
Token: SeSystemEnvironmentPrivilege	5764	powershell.exe
Token: SeRemoteShutdownPrivilege	5764	powershell.exe
Token: SeUndockPrivilege	5764	powershell.exe
Token: SeManageVolumePrivilege	5764	powershell.exe
Token: 33	5764	powershell.exe
Token: 34	5764	powershell.exe
Token: 35	5764	powershell.exe
Token: 36	5764	powershell.exe
Token: SeIncreaseQuotaPrivilege	5764	powershell.exe
Token: SeSecurityPrivilege	5764	powershell.exe
Token: SeTakeOwnershipPrivilege	5764	powershell.exe
Token: SeLoadDriverPrivilege	5764	powershell.exe
Token: SeSystemProfilePrivilege	5764	powershell.exe
Token: SeSystemtimePrivilege	5764	powershell.exe
Token: SeProfSingleProcessPrivilege	5764	powershell.exe
Token: SeIncBasePriorityPrivilege	5764	powershell.exe
Token: SeCreatePagefilePrivilege	5764	powershell.exe
Token: SeBackupPrivilege	5764	powershell.exe
Token: SeRestorePrivilege	5764	powershell.exe
Token: SeShutdownPrivilege	5764	powershell.exe
Token: SeDebugPrivilege	5764	powershell.exe
Token: SeSystemEnvironmentPrivilege	5764	powershell.exe
Token: SeRemoteShutdownPrivilege	5764	powershell.exe
Token: SeUndockPrivilege	5764	powershell.exe
Token: SeManageVolumePrivilege	5764	powershell.exe
Token: 33	5764	powershell.exe
Token: 34	5764	powershell.exe
Token: 35	5764	powershell.exe
Token: 36	5764	powershell.exe

Suspicious use of WriteProcessMemory 15 IoCs

description	pid	Process	procid_target
PID 5972 wrote to memory of 3720	5972	2026-09-18_60af2224bf44f0411c405a3dc3a7fed6_akira_glassworm_icedid_rusty-stealer.exe	88
PID 5972 wrote to memory of 4088	5972	2026-09-18_60af2224bf44f0411c405a3dc3a7fed6_akira_glassworm_icedid_rusty-stealer.exe	90
PID 4088 wrote to memory of 3144	4088	BridgeAgent.exe	91
PID 4088 wrote to memory of 4056	4088	BridgeAgent.exe	93
PID 4056 wrote to memory of 1304	4056	BridgeAgent.exe	94
PID 4056 wrote to memory of 5764	4056	BridgeAgent.exe	96
PID 4056 wrote to memory of 5864	4056	BridgeAgent.exe	99
PID 4056 wrote to memory of 1804	4056	BridgeAgent.exe	101
PID 4056 wrote to memory of 1652	4056	BridgeAgent.exe	103
PID 4056 wrote to memory of 5172	4056	BridgeAgent.exe	105
PID 4056 wrote to memory of 2228	4056	BridgeAgent.exe	107
PID 4056 wrote to memory of 3296	4056	BridgeAgent.exe	110
PID 4056 wrote to memory of 3688	4056	BridgeAgent.exe	112
PID 4056 wrote to memory of 4636	4056	BridgeAgent.exe	114
PID 4056 wrote to memory of 1304	4056	BridgeAgent.exe	116

C:\Users\Admin\AppData\Local\Temp\2026-09-18_60af2224bf44f0411c405a3dc3a7fed6_akira_glassworm_icedid_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-18_60af2224bf44f0411c405a3dc3a7fed6_akira_glassworm_icedid_rusty-stealer.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5972
- C:\Windows\system32\reg.exe
  "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
  2⤵
  - Adds Run key to start application
  - Modifies registry key
  PID:3720
- C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
  "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --supervisor
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:4088
- - C:\Windows\system32\reg.exe
    "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
    3⤵
    - Adds Run key to start application
    - Modifies registry key
    PID:3144
- - C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
    "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --runtime --supervisor-pid 4088
    3⤵
    - Executes dropped EXE
    - Suspicious use of WriteProcessMemory
    PID:4056
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:1304
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      "powershell.exe" -NoLogo -NoProfile -NonInteractive -Command "$ErrorActionPreference='SilentlyContinue'; $exe=$env:BRIDGE_TRUST_EXE; $sig=Get-AuthenticodeSignature -LiteralPath $exe; $sigStatus=if($sig){[string]$sig.Status}else{'Unknown'}; $publisher=if($sig -and $sig.SignerCertificate){[string]$sig.SignerCertificate.Subject}else{''}; $mp=Get-MpComputerStatus; $tamper=if($null -ne $mp -and $null -ne $mp.IsTamperProtected){if([bool]$mp.IsTamperProtected){'Enabled'}else{'Disabled'}}else{'Unknown'}; $source='Local'; if(Test-Path 'HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender'){$source='MDM'}elseif(Test-Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender'){$source='Group Policy'}; $onboard=(Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows Advanced Threat Protection\Status' -Name OnboardingState -ErrorAction SilentlyContinue).OnboardingState; if($onboard -eq 1 -and $source -eq 'Local'){$source='Defender for Endpoint'}; $detection='Unknown'; if(Get-Command Get-MpThreatDetection -ErrorAction SilentlyContinue){$matches=@(Get-MpThreatDetection | Where-Object { (($_.Resources | Out-String) -like ('*'+$exe+'*')) });$detection=if($matches.Count -gt 0){'Detection observed'}else{'None observed'}}; [ordered]@{signature_status=$sigStatus;publisher=$publisher;tamper_protection=$tamper;management_source=$source;defender_detection=$detection}|ConvertTo-Json -Compress"
      4⤵
      Hide Artifacts: Ignore Process Interrupts
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:5764
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:5864
  - - C:\Windows\system32\reg.exe
      "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
      4⤵
      Adds Run key to start application
      Modifies registry key
      PID:1804
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:1652
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:5172
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:2228
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:3296
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:3688
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:4636
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:1304

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Hide Artifacts

T1564

Ignore Process Interrupts

T1564.011

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 4KB
SHA256 2b09348574e54732b6ea1f0437948734ea7b125c4e2ae9e9548def47f2feeb72
MD5 54c972952631fcf00feefcebb78face9
SHA1 5fb6ffb587fe407c300db5a51990f3a40d8b0cbd
SHA512 1516eb62498f7553ed4bce709dcac89da6624604489413ff4799be72c1bc67366455706c55b9bad4ff18e7779d8817c7a2015b9ea246b1486e973a5971167162
SSDEEP 96:oLud5kns6k7BpckNiLmudAtsVtsneudfZmsXWvfsHlssTK/jSsp/E/o:NgsX5NclQNte/dp/E/o
TLSH
T12191CB7439ACA53369420316E5395FCEF221B21E9A85AFC5F331BAC9E251F0C9887661
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 36330ac8963eb4cd50fe580aae5cedf4893ea393fb5a7accb941999480ce077c
MD5 e70a9e09d1aacd2d0709419f1f995b92
SHA1 1946abe04d26eb54224bda32bb5bacfd662a2b29
SHA512 6e4b76b76f376cbb7f5cd3a477dd9a5b45aac59b3ceec8885065d70830df03ae830983e12e80737d6c4f7ebda1ef9e41ed76f87d55f2f823db2e088f594a692b
TLSH
T1FD31CE3038F906351D86531BF936AF8EE171B50DAB9A9F80B332F789E211E0D98C3251
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 32d04381e33dd59dac30762ad18994c556f515633c32b22703482a7f2ede0da5
MD5 a7f218f6435253056ad6e8009b17c135
SHA1 10cb66bdfb96634747d42e60f416e33a288b7ed1
SHA512 2550186a756598ef1061006e9c9ddad2744d3ac17ef6fe8242ca5701604845159118016c61b01ff917e6444a0d441540c662f88f94f365873dee289e4ef57767
TLSH
T1BB21BE3034FA06351986731BB426AF8FD171740DAF9A5F40A331EA8DA241E0DD883391
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 c17beae4ce34994543879c63c52829619cc7d6b292a42622f37b044387ed2e41
MD5 0d1bca7bc447fabc6fc19c86b0666f11
SHA1 3e823c3b7ac4b999af8853a281b858dd87fb6678
SHA512 6ec1559bac1e0e46a699adf083d970011b36180444734beadb68a697ddc7b9bc97d2079ec787c53394c22d0924a8ddff143f2e68f29767b015ccf8f1fc10adf4
TLSH
T17551DD3039FC06365946532AE9366FCEE261B50D9B96AFC4B332F789E251E0C98C7151
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 3KB
SHA256 5946569e056a96da053655458183c03d0fa5d1611f07a7888273c615af2e5135
MD5 3082594351ba9f5177ebba06604bc40a
SHA1 5e9e10e487a6e609a853397ecb8277464080d7d5
SHA512 345eb0e35847f4047089c470b144eaa08ffecf1a4a819f509d79947625f084c67b7490b08fcc4a4c7c6f273f7150f61092ae3e1c19f3bcdee22a61d8838575ad
TLSH
T19951CE7039FC15365946431AE9356FCEE261B10E9B86AFC5F332B789E351E0C98C3151
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 3KB
SHA256 3c207fa36ba2f67e299e603a5846865ad73125fad43a587a541ecb0604297ca3
MD5 be02df876a542e1009acac7af43fbcb2
SHA1 d98b6227eb269a700d08d95308a3a56280192fdc
SHA512 829a5d33dc98a5c777c6df9241a564ae4147401e3b31d9bd94392e25d396925fe3b3c5228b02aea331fac2ad05cb2dcebc1a4619fa141aeafeb694e586af060a
TLSH
T1EF81A97039FC5537A9420316E9795FCEE225B10E9A86EF85B332BBC9E251E0C9883161
MD5 SHA1 SHA512 TLSH

Submit Download

root-ca.crt

Path C:\Users\Admin\AppData\Local\Bridge\root-ca.crt
Size 623B
SHA256 8ad639e729374bf493e79cdb5f541cb07542898f8b2a6e9451bf91f7b27b4f53
MD5 f88393563e79f7843b6bd812657ea808
SHA1 4233d1b60990ee3ca28dff773e3c52706ac80588
SHA512 66353509657259b76c541dc110436e519a08b102cf05dcc04c659d3d89276b1cd6cf4a971cc2efb97ea73a534ea026057a96e78fe3802fcf5ba674e621920364
TLSH
T1F6F002FA4F021C29E05FC0FCF5B1A315CA16C1836503B5BE06752084914DB3184FE13E
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 d33833273982d36fc86e6b6278b4d87149d70450621e13aa77402f3f6456c959
MD5 f096831bea873ad1efedd2128909ce5c
SHA1 35ce45851f1766300f80f6fb99585f2c6a34f6c6
SHA512 af9df925168ef997d923d530985ac4734a8c1a2fdd0a702afe3a6d5f80eefd42c866be977057d64d93e7cd9edabb8e769d49f3236b0db4206d0d1280d7b7b440
TLSH
T141B09B82E5664DC984B421C712643587415F444644524B656615C4008805555658714D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 82e5596fd9626c0a545f137722c27b0d7bdf6ccecaf3238d254eb49ee6ea1901
MD5 7d4a5c0bf76b5ecdf6998703fdedc7e3
SHA1 390721aebc0cdb67fa86c0786a6f8249ce72bf58
SHA512 022271b4adcabc550fd1880f85e03d095b172c8740bdc37051a41c8da0ced87f4ce6c20f82b4305202cf78a63580adef18e3c0a31d33bed3dfa421ec13a33da9
TLSH
T185B092C2E9668ECA84B821CB22A5359B829F484A88534B796715C804880AA262A8B08D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 f1e635ce0e0de47677dd7de6cf49168abac46ef6103f01ce4774ad7dcb6245c9
MD5 ff6a91d30a1aef201cc80237e32b0467
SHA1 7233e557e8a81d64d43d118d5b97c710f1af26a9
SHA512 6ba32dde43d575201c75ed84401fddc3250eae40083a0c41b8b80653302f00f34b6f33ed4a8849d6aa06a93a0df7607bb8e49a230479724bf1bb742809bc13d1
TLSH
T1BCB09B82D5664DC985F461C71264358B415F444744524B656615C4008806655658704D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 3727078f9179a189c72c4b3383844e1c81f0a9e5b1c18f6f9b97b282c521aa13
MD5 5f75501d9bc569abf6fa9a70076cdb9b
SHA1 469baef9daf0eb369ddecc63730d10e73c488717
SHA512 c3410ff1d876e1ed11c1bd0dd53aadbca57e489b10ffc84a1a3cacb66a4ee160684d614b783cf2ccfa75e89785f88b40c83dd6c4453d72310c9b3984a4754b1b
TLSH
T1D9B092C6E9668E8A85B821CB22A4358B829F484A88524B697715C800880AA1A2A8B08D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 135007fa1efc278204d9697bcdc7a6d2f2f76a9bc6a5ceba9d81dd75eb73230a
MD5 c11c2bff990a19f9b24f712bca69d664
SHA1 5ef5c34bbe702cf491fab4d1eae22bd4c47b62f8
SHA512 4d0e521487907df27d235aff42cd6fedbf3270f375b841b18ffea6c60efc0fe4606b6718ac21de236449b80601886bf79f8b6712fc8b5cc02e9600d050358796
TLSH
T14DB09B82D9764EC984B421C712643587415F444648534B656715C4008805915258704D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 b28b969dbed4d1b16ce5d1f949d953e12e5e1eee73e4d09474998cfe7d3a41b4
MD5 d87fe3d76a0d5e93a7fc54a94c088f2b
SHA1 11812846a9441b1c5b4211cef3bbb85d9027fb92
SHA512 e637a3f42cc56f9d31b3c91a6d7d40f904dd9cd7e80a30d247321a92de078b56a764119e7411b1f7ea98ed9814431fe51cb919cf2cb5916a9eea2b7d0c04eb0d
TLSH
T140B09282E9668ECA88B821CB22A4368B819F484A88564B796615C810880AA152A8B08D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 b1f0b2c1d22667e5c9d4d8963f05e1e8dbd39e3908dbe5f19653274ebc2643f7
MD5 8bd9835235c4fde9cb9aca7cf132dae8
SHA1 60b09a6b39ed167bc7efc98393c07b53180f4925
SHA512 8928d1cfc3e96d340fc62f7a74e86b46061cffdfe147a21560b88f7b38a15cf635a1f740533aa55b8f35dc01d89934066bc95f224e28264679c6c65fccaf4f85
TLSH
T141B09B82D5664EC984B421C716743587415F444744524B656715C4108805515298704D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 9d7c8833e7b3bcf2fe0f2e67fb7e3f0d30887be1ea4f32eead353f802375fa97
MD5 54802385dc13f3d60ff978880d7b72d8
SHA1 69d981809f80c402103c3aba0977eb229edfe740
SHA512 a04a3e77a6004211b04aef81fd3085a5619cdd3eb1461633cd85c47124fee940e925056f8d109af248287eedb081a09e1769ce88cd3866efd446ae9c30696f59
TLSH
T157B09282E9668ECA85B821C726B4358B829F484B89524B696719C800880AA562ACB08D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 fa97315b6bb607fdad24ad7e666ac4e6b2a00e8ecdc24ed5c413952dbd60ee0f
MD5 ce925b9143f76217210015329d6c9b4e
SHA1 16966a85dce09b78a6cc66845363c937881f50c9
SHA512 7ae1025bc25701134f16d5abb97025a397b67d5e285111ace300df4ee836168f77c1339275be6ce073974b6424b6313438645c81b9db6714e116c7eda4b77938
TLSH
T1ADB09282E9668E8A84B861C722A435CB829F484A88524B697715C800880AA1A3A8B09D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 6dcefff5a0fd524d7395b06aed521e1c4b9b89bf05664dc076ad5d90fa955200
MD5 ef4ce9725d1e1ef6954b0da76ea95b76
SHA1 7234cf8116a934af1fd3d0235f9fbed26845fc66
SHA512 b227b590dbd688bbf70eca01af6bd2ed75b75aa7f67134eff238193c0ece3837a17a6f0df3f0bde53d05b1b841fb718c47725153052effaf37acfbbdced0e2c7
TLSH
T1AEB09BC2D5668E8984B421C712643587419F484A44524B756615C8108905655258704D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 f70e52b4bc2588eec280c2d9b14a0e3798905098bb77671392f33e54c8a4a38d
MD5 9f8f00f82eeebae79409b373bc0c02ad
SHA1 0b4c8e2fe51003b8e725f879336511325e701b7d
SHA512 196e3524ba57cb98dae3056a9b5a3ebfd589128c639a146a644c6c87a634341b230c38edfc86e40568954e262eb4898aac76a55d5207674614751c7cc8d336d3
TLSH
T1E5B09282E9668ECA88B861CB22A4359B819F484A88524B69661AC800880AA157A8B18D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 49265168be281f78368dec836b9ebcb0f6fa8077e087c9b1369711141218f948
MD5 d11f28bf147458e6e7cd4e95dabdc4da
SHA1 01c1805dbf507c66a2c84f824ee7a55e0cf0ae45
SHA512 4dc0330c05832b79133882e31377d560845c9173e4889318488891f26863464e8e5f9fc258f1f7d6f2d853ef1725e6cb4580b83b1ac869941f80ed0adcb831cd
TLSH
T11FB09B82D5764DC984F421C712643596419F444B44524B656615C8108905515258714D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 cc1dfcc248b74fe2775033098578fdfc2917aef15955ea66b4625a4b4d252c6a
MD5 2fad690fb1af395b96707d91031e6c03
SHA1 5b332414c6a2125c8dc2e0e3d53e31994f19ab39
SHA512 62c4e714fb419df2b1c8f9b93e793083aa49d570c7c1b8c5ad1f90bd6160aed51e3ad8e85bd6473e704d02e760079efd63e8c5c1e6b4eef19ed29dbd3708d7b6
TLSH
T1EFB09B82D5668EC984B421C712743587415F444648524B657615C8008815515658704D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 00d4512faaa28126e055f1c85a92537fe95b1d8b9fba1967d35b20b522b76f21
MD5 64a782e50ecdfaf88331ff2a43153ca0
SHA1 b6e6d27dcd300a3aacd9f7892bda5d1ce2897720
SHA512 87c994786560eee0c2b8af8d4618fff0bcc8a5dd4cbb1337624b513cb4444af3c0a763b198a64e6d96501fb0ed0812702099ac612b11da91d65381ae01343bc5
TLSH
T1F2B09BC2D5664E8984B421C712643687415F444648524B656715C4008805515358704D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 60d62bd4a37953d00c86341b48ae85935933629ba9fd181b1e27b187951eade5
MD5 3562047d59c4809ca9830c18bc303b35
SHA1 abb63076b475017d668e8c7e734185dc05acbcd0
SHA512 f07d11d2f9c5d7d8125bacf08809217f095d734aeeeb9de2c080888e01751e9061e04e9f8aa8761bfa0a631b6b6cfa5876a5b7b7befde127ea9a80e476fcea64
TLSH
T1D2B09BC2D5664EC984B421C712653587415F544645524B75A715C4008805555258704D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 5d831481195e4c68e51de4ea9fc2de9bb45218f0b3cb4c21faf5047bc8eb9b22
MD5 84af1915f04434f4bbbb09c0732a2f83
SHA1 f460be8ffe8838c44729e0b236b30c81e0badf37
SHA512 c79a1ad188825351f8b3d1ce092812e03c71a1ef3115bf9e6ef6e5bb315771e933cd80f4c2da0ed68432de0d8f275fe090b82867d12d78c1236794bc8c10a295
TLSH
T1D3B09B92D5664EC985F421C752643586814F444E45524B656715C4048809555258704D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 706fa02d1a148b1ddb4a0abffd4137b73e909d4a92d65abcc7b03fa5e638b82e
MD5 7292c6570afe5c5954167909ed052400
SHA1 6ac6fee45977aa0e3227cd6c43fd16f1746c7339
SHA512 0fb695d8bc9f2e0e716499e590a3eeb7df1d4e97d6191f7afc1a462d709ff01e9ebb78cbbe510fafbf8421bd7cbcc2cdd43ae7acff2331464bd0d14b94e9271d
TLSH
T146B09BC2D5664EC984F421C712643596414F444A45524F657715CC008809519258714D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 9a446400ee6fd1df7c359108c74461078cebb24919f3f1732e6e7e511583008a
MD5 59f3cff0881f150a4c0c45d7505be0c0
SHA1 c00631b238bea62fa3e8e3166c3310e96e478ed4
SHA512 d21ddac15d4423f8cd7a60d2a21a7080b0ba7689fa82ad880b6461cb0c208e59dfaba84fdcdcb4346bf555e14c509921932330b5effb93195c95e3e6f223db30
TLSH
T14EB09B86D5764DC984F421C712643586418F444B85528B656615C410880D515258B04D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 1a2b29d2f0b7fa688302ea3b97b4a76addb8063d7ab204c4bef549a55764fa88
MD5 5a991cd26d645b0e9b5195cdd8b33fb2
SHA1 3f1885bd1291b41ad203514d96db344e889a35bf
SHA512 b57ca32ef821065a8d816592c4302f78d877d85f85aadad7dc38b73ec0cdbc4fd420af65fdb23aade5d3d6c8975d19ffbc6ada8254de27d542907b9993971f5a
TLSH
T1EAB09B86D5664EC985F435D716A53586414F484B44524B656715C4008805A15358704D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 282c8bd8de7b79b165305321d16afb575b73c3e541e49fbd1229b5c759e4e79e
MD5 cd6cff2fcc5ecabbd9a1d6f302391f8d
SHA1 93d377ec7aeda27a5266de55eda20aa0accc6e8c
SHA512 33d53316a305a2e6cd619a358d9e1ff97e3aaee9a8dcf6602b954d62e35e02e92e9b89aece80835ca13c43d404cfbb81575ee9d3de416b090201424ff94d9f07
TLSH
T19EB09B82D5664EC984F461D712753586414F444B48524B656715C4008809515358704D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 a488a41678a9acea25fb5353c9d99a5839bba47599db934e4ac516f363330d91
MD5 e6111079ce60a424964e507d9d7aad76
SHA1 7016cb4651626cabe3c59c016423f0a4cf803117
SHA512 773069f3ff8cacb409b64086c60c5ccae6cf5817216a9ce7bd974d1d4a32267de82500723e2e9e328aafbe688d04fd9a152861d70098e18af36120abf5c42053
TLSH
T11FB09B82D5664DC984F421C752643586418F484B48524B656615C4048805555398704D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 5720da86239fc31154a191bba22e729bc7c64507bee0e5a5855256b767c7bb16
MD5 91598cafbe8631862fd14f90959598bb
SHA1 5e3f3445ea8a4eb626403182e1f2684a8929a3f9
SHA512 1e6e75dcb7da78b4ea434cf512399b6fbdaf96aafcc05fe33d0140d5dbd0e018b4a29f8db25ea223994293c3fe75586888c2efb2785f4014105728fba8a4d1d2
TLSH
T1A4B09B82D9664EC984F421C716643586414F444B45924B696715C4108809515298704D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 152a0c0ef943ce4e79a34f7ab42865151f54a830f1d2eb40e806f0f77f70f88d
MD5 38d6d017621581b18750891c75610d12
SHA1 df49c404ca35a46115cb5604251d9745d88bc262
SHA512 9777f9ccf6ab089c5e5f55549018631e6fe28ec0a45e73b58fb44edb39ba7279324075c03e2a9b2e0e4d278b8855cde225d0c70df77d731ebb3596152ee1c3b0
TLSH
T1F2B09B82E5664DC985F421C71264358A418F444B85564B656615C4008809615258704D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 310164fb88c774d47977a8d31b91cea704a14313e076e1a18c5d7728964402b3
MD5 2a40df961056da05f58c5b2e11d6de8c
SHA1 109536dde3ff99789514454035fe25a0c7313412
SHA512 d0dc0ac4e8f061ac777379cdf8b47679d66debad5a0dbf23cb596fee4890af2e34fa4d8c30c7024e128030e56bddb53b3f9e78a649e58b160f9a1acb34ef139b
TLSH
T106B09282E9668ECE88F821CB22A5359A818F484A89524B696619C800891AA196A8B18D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 09ec1330b5227402782c3834e1db73a865f83cb0d16ea291dc473bcfb0bf7438
MD5 413f2504b3322b4dce83cdd3d21301de
SHA1 b00cc046d03f1d4fbe65023ad10cc23073fd0180
SHA512 799d8d3bd1904e298838f1d2679d5d6f4be9250f80180f049b1d944d20377875381a0b8b2ad03b4fcb9447565197881da576c04b8d9be7d18fdb3cdf7b68be39
TLSH
T173B09B82D9664ECD84F421D712643597414F484B44524B657715C8048805915258704D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 af24f5a8d3c635ced3e6c43118ba4d810bc3d44e60c50f89e682bd415ca6373d
MD5 2bb38327b5f922fe7246816805e6f514
SHA1 1f6fde244c681039e0d7e0c44dcea99b2f190523
SHA512 74d7cba6411d738c44dbdf9b82a47eeee8b0bdf3d41dbd9a44d4efc65ea73e68890a81dd12948d0b2e8d017f68d87b7cf2ce3142821ec82840afc4bc2298711d
TLSH
T178B09B82D9764DC984F421C712643586418F444B48524B656619C4008805555258B04D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 117B
SHA256 1a758cd9e929143da0385303ed7260cdc12db585d4e90667c7ec2bc562ccb4fb
MD5 2d8db707116294b503cd735fc52a581b
SHA1 468c41e07c97235c2862f44faa30a2e7325cf503
SHA512 99e0f773e66fd087753d9f1887f8725c2e862d1d4a8d0aeb9b51927268d4f2592f753c12864fdef9ef3b0008d6a701a91262e61f150b8ae4a036064b36c21a52
TLSH
T17BB01243E22BC9DAC47836E3D3A42B83D15F484F9D53CF597A04C440C426506E74304C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 3507787f3395ea13cceac32ada4495ffa8274ccc96f60a786dfd01c4849760fb
MD5 e47b788c816d9124b8b87b94c6ee4f56
SHA1 93dbbf4a25d08144bbe01b7b8c9f14e7601bcc4d
SHA512 e3b8c6533f7b90f642eb8d8ebe2c4a629b895bf43d6a794f46cd4be1d872f234e430e47281166e229bcad46c06636bf1ead71598b7424264168e2459f1ed4a07
TLSH
T172B01243E62F89AEC4B83AD317B87983819F484FEC9347187E14C841C02B957D6C305C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 6b2f89fab0e4771d35227c5eee5c5c623e908f12a952eb9fd5055c874a1fc549
MD5 59373553adac3f3e47364273e38cbebd
SHA1 6ca37e3bb1fd92a82ca58f0693f93a0fdee5d798
SHA512 2b91cf5b6e8988b118ca2f251d185e2b560c4a5cca43c9e6892c88400c6eb56030b6a4ccfc50141c1c1c19cebab2a139912b847bb399b2996225af89ef5e4212
TLSH
T104B09292E22B89AA84A83AD356A42983859F485AD89246187A14C840C01B557D68315C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 afe6ac8c2b60298b337da4fa122846a333a9fdac77b447a6ecd263e7d26d6ada
MD5 4515fb87fa4b83e7ee98a3502daf7d3d
SHA1 0a6feb59336a269d0db53bddd314271be78498c0
SHA512 66edb3ff3a2e2313a09bb5b67f1101cfeae5618f292cb0439dfe4fa47e0940603caa4d6352f9ed94674fbb6263a9eb70a71b1d55ed5b3b54742fe37715a92494
TLSH
T179B09242E22B89AA84A83AD316A82982819F484ADC9647186A14C851C01A657DA8305E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f1e5c02ddc16e4670eec6afc2bf4bd1b9d13757d7ba5c05dcb93d2ea879d77de
MD5 94d86e09a229647e24939cce2ca8ed9e
SHA1 891e9ff9b76c33a72bd1bb2594c82065f494bdfe
SHA512 70069620154d6e418cdc2ea99004067a9598217737f0f08d30455dbfb83f2e5a6eadc7c81db2b24f095cec28a3dd051e33b39985d2911b066656e91a51e6254b
TLSH
T1BEB01283E22B8A6EC0B83ED317B43983829F584FDC9287187E14CC40C01B957D6C305C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f4a5186edd8bf5c417047953630fdadd13637c4c1fd876000c6e1aedbe603138
MD5 340d0cd001b21299f1719d4156935437
SHA1 7b3ddcdf059348ede53ca03e950a17ade384a0ed
SHA512 8e3ebf2838bb631843cd8a55e0a62fa377d9116ca2e0ee254f9023a8b65d50be735d96ade5abe53520e32fd2963346324a3a0466d607a5703bf8a79495e82fb0
TLSH
T1C4B09252E22B89AA80A93AE31AB43992829F484BD89286187B18C841C01A597DA8705C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 874382919adbcb17e25909931c14b00a6251ec3cb15c9b11d5cdbc7f81c08661
MD5 e555e5782f4acc0a676ad66199587e57
SHA1 bf3dcf7013429a44dd6719697f218dae9bd0b20c
SHA512 e1fbb5f7bbae7c9b509c670982a6fe9c88f09c7e9fca70804a123f287ceb9e8a24290b702400303da3679891053d2a2c9e7e35cd57dc6171403aee9c093430b3
TLSH
T14CB09292E22B896A80A83AD316B42982829F484AD8A286286A14C841C01A5A7D68305C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 d055b882e8fe94f472a8060eaad8f6c7a6cffe651267ec1dc4bca562a755f267
MD5 34e1bc8b9fd57da57df304c590a47a6b
SHA1 3e8783a56d9b41f55ad6d1ff5869e3405ae587cc
SHA512 f8a1bfbc5eb9bb905261059a4176125ca3c63dfddc9383e86cacc1a97aa9cdcc19cd83bd117d1622a3df86e692182cd403a5faf8b45982e21182eef9dcebfa64
TLSH
T125B01243E22B896EC0BC3AD357B53997929F484FDC9347187E14C840C42B957D6C305C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 7d5e9f9e00dc06aca447b95b4fec2150569752193db1eeb1354757b901fb83a0
MD5 ded4e6201a6871c458eb3df4b9253f82
SHA1 55eef15c6034e09bf549b7c1228024c9bdd610ea
SHA512 ab614cf2c4f210e135f7cdabf7dcf6e133b762ad23f7b3523310f36206bd99474d94a2f0629399af7daae66430e40d44a3faf65d11707a02d0ee5439d24c9a27
TLSH
T15AB09242E62B89AA84A93AD316B4398281AF484FD8A246186B14C841C02B55BDA8305C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 b40720e462d367713dbb69cf854af96e18f7e2caf369ba7681f9165dfd9d50e9
MD5 b453427cc5c9be9c48a151a2877e6879
SHA1 893946cd5603073f802ee75ac92205801ec8796a
SHA512 9d6b0926ecd4ce0bc23e7bc74a830f6b3c3082481aed3e6eb7b2bb3549c332f9dde505444aff402f487f8c2e88cb0e3b33402d75975dda2b8e815c9a6f2685ac
TLSH
T167B09242E22B89AA88A87AD326A4398691AF488AD89246196A14C840C02A957E68305C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 3033d9c842795580210c8b40f6a7fbbb06d954595ab049eee80af201e48dacda
MD5 f5530b1898e4243b7bb37f549f765865
SHA1 e5841e6f1ae27f1ad7c42cb9c471140a956c3829
SHA512 fe0a1bc4747b947af68180f80cec70bddb7d788b98ea6fbdd4454fe78a82cec569f125c6ce088b5c9ccb6366fdd9da5424f8c15e586f2d48c953704e6ea0cd23
TLSH
T1F4B09242E22B89AA84A83AD316A53982819F484ED9A247286A14C840C02A567D68305D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 252f2fed4852cc213c3ac02fd2d1af6a69f1e5d53e9eac8df5af99b9c72486f9
MD5 e970ace5353a866788e3bcf98c2add2a
SHA1 6dd590ffe7f3c669a663c81a8616f57a8ff99a67
SHA512 7db6730c39677f5f53b4f0a5531c00a92bf3f9b591c687d6788fa79aa1c225fdeb16f0abb54e8e43cce25437c0163a2cc4d8d88efc3374c72de453dc9bb8f8b3
TLSH
T155B01243E22BC96EC0B93AD357B43983929F488FDD9247287E14CC40C01BA57D6C306C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 79141360ffdc21fed6d66914913fd13978469c0c00ea57ae29543f1af798c68b
MD5 99d2d179933a909c4ca1c6d1420d9192
SHA1 dd998b56d4acb0cd2045cca0af9afd0db1c838f3
SHA512 9bf00e41ffc9673b40212fa15a0f4bc60d3d6634d58f0dd91a80e5cc65d6a22d89b2881482f6753f9d1f6513680a190d5bb4d1f7e006f0c729668e9e7cc216da
TLSH
T156B01243E22B896EC0B83AD327B43B83829F884FDCA247187F18C840C02B557D6C305C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 1c52b634028917e519de390d6dff327c4c335610de3f5ea5a539154514278e9c
MD5 23c8d565c7f197f0272fc234010513f0
SHA1 1e6dc307a517550cc0897d6f2b5020e0c75613c3
SHA512 5bd60b238e355df35b49026d7e7b722658ea7974e69d37e746888ac5fb5b9875a44b8770024fca33be5ec393d44133af9a7910fe0bc09b2e6050ec985d62e86a
TLSH
T1BBB09242E22B89AA80A93AD35BA83992818F484EEC9647186E28C841C01A657D68325C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 763a38bc76c73d5f72d72d11f3e9e7a64651a8fd0bfb5e9b7bdc7f743f73cffa
MD5 37f346f31b86b73946bd613e96a3a0a8
SHA1 76081e5f9872114929c3061393683f746473eb5b
SHA512 6c2c7b0d55704b4384dcd975640aaafa3aac0d1c8e8ed50c9bfe7703461f6287bc530e6150717ea2e2e41b10a2783f40fcd6bb20b6d081deed9ed9f1561b92f3
TLSH
T196B09292E22B896A80A8BAD326A4398292AF488AD89246186A14C840C01A567E68306C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 8a3910e6282abe2c1585957f44a92dce24957f7484b25ae82d3b87e4d86e8118
MD5 96e5a4b43336d0688fc4f6afb83bac9f
SHA1 2b85cb8308d162b2059fd010716cea585333407b
SHA512 33a0cd5cd176a6161f904767c0633f8222918fad62ca66a51c7aef29e42b0665c56ab80620a738095f8bf9de187004bff3af4bb995fd0516662e3a1472c0c2db
TLSH
T1B9B09242E22B8AAA84A83AD316A42A82819F484ADC9247186A58C940C02B957D6C305C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 c34a43731e2a6cb38ee9745a7fd63edaf146585310f2e225d792f5a60923a730
MD5 e7b633daf231a1c06fb298234cd422e0
SHA1 47331afd8fd8c837b7319ce3a54a59760bbed417
SHA512 6217f07c19a5a4b9e0fc1853b2f7125016fedf939ec29e2f2db74e4ef0654859e0361fb06a835ff4c57d05cc27c59e5b37c854de85abe9526b59bc51b32f5f1c
TLSH
T134B01253E32B89AEC4B83AD357B43A86818F4C4FDC9287187E18CC41C01B557D6C305C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 d0f3eee36def14d8f33a1742b910a1f488f1b1c339ad5f3b570fde228f904fe5
MD5 4592912ec92aec0d67f60232e5ef6d25
SHA1 1f1bc89a588f446b0d9adc936a13a670b31f5fbe
SHA512 daa863285b3bea3db682f61d4f235365c4eaabc18570b174e7db0e625a7bbd92aca6b9b6a1dcbd505a4695cdbe88e856e0466b7073cc4491b9e62b87c2b7abbf
TLSH
T184B01243E22B89AFC4B83AD317B43983919F485FDC9647187E14C840C91B997D6D305C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f8ade84d96545ffb30b571d5ecf5170fed5ada0f1f6cecbf1bd947b60ec8c313
MD5 a70760244065a41323b565e5879bd996
SHA1 9f7ce8cf6a784b8d04a011d7fb19765e5fba9fa2
SHA512 ca8509d51b2dd32413193b97593376051972377f1ba7a18f839e5976223115e844ed816fa58072a096eac16cd1b3dc4b976e47edd75b74fdff340593a0977cf5
TLSH
T14FB01263E22B89AFC0B93AD35BB43992818F484FDC9247187E18CC40C02B557D7C355C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 50c570ba03e3628a43d2ecc9f98640bbeec866aaef748e885b8630822383da76
MD5 468332170313b3d8b286db5acb86e1fb
SHA1 249b4a2d2773cb60876f09f7073f2a3b418cc297
SHA512 7b8a4551d0d0a42a8817dbd4423ae73240eeda1190a392bdc3dbb1086561319a2a0a42fe24886ba6f67ce35c5b546de487cd9c881b8fbaf6206b1cd359ee09ef
TLSH
T140B01243E22B89EEC1B83AD357B83982818F484FFC924B187E18C840C02B597D6C305C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 667559352d93f78793db0f3550b8aca4deeca9d9405ff5ab7df3ac6119f73bd2
MD5 64c4b57a05e2217a54b2a573fb14a0e0
SHA1 76a364cebc5a2e7529fc951d3656a39efd81df91
SHA512 dce0bba9f2e248439c48f4c79fd9fa00b5cde2226c8214b090d8599ff347a7f2ebbd8fd7079b7f9bc1565c5e334ae4ad8d3e8778cbca372cb4b5e9598af2d4f5
TLSH
T185B09242E22B89AA84A83AD357A82A82818F484EE89287187A18C841C01A557DA8305C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 569ce9e490118429259255a7a64864f0c0fcb8196ec9f3945863ba4300de80b4
MD5 aa8a8d73564db9540a847480fdb59745
SHA1 89aba7d9eefd21272e71ec853768e7a052602203
SHA512 442f717e35c33bfa0facb93d5d6500da5dbf25b63654ebbe942f2efca39be76da2622fe939e5140d9ca95a5ecec8b7ae3dc94bcab2dd72ab87ce4db68a1406aa
TLSH
T1CFB09B42D11B4599806439D357642541414F444ED85146146A14C440C016557D58305D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 34679bc97a0a88c897ce7b3aa157c36400ab1056aa6152cd40189ca752ff2b24
MD5 035c134436487564c5392f81e7112e22
SHA1 75831e7fa9819546805597264f9854fc1dd20a5b
SHA512 c492595ffeafe3b32931c9c02059ebcf92f4a74f09d46a4f8fd263e1a42accd3dfcaf64b96ee0d9d748ea67a2fb7060b27d7d3c19bb333bbad65d7863be0e59c
TLSH
T15EB09292E22B99AA84AC7AD356A42A82818F484ED89246186A18C840C01A997D68305C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 1b3858813865945b1d21db40f47e1dd8ac351dc84f853380b2965a66354bee7b
MD5 af3723b56bcb9288252bd574970f3b13
SHA1 3ef70c88a4878d01e33c357887f9478f33dc1d56
SHA512 c270b0458601464452fa5202574ac5f56b6e9c91d56f33a2d0492086c606dddf5d59fa9d09be9469a55ba6195e7b9ae747f36df8f28d51e3d04dc0e9ba332788
TLSH
T1C3B09253E22B8AAA80B83AD396A42982818F484ED8924618AA18C980C01A567D68305D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 cbc88cff5146cb4e483eb7eeb6ec94ca5248d150992643efed7ab0a837d4647a
MD5 dae6d62ebf69c658bee4f039ff41db2d
SHA1 0e6d2ff8c72b477725d0a51cbc5648f5c2d390f2
SHA512 0ca196d5fd2c3274760813c2bd4bf3d1b9c122245e56518737747b8ceab74959a23377395fa09cda4bed964d7577c50650d7af12b89e16350c3736f2d4d4009d
TLSH
T18DB01253E22B89AEC0B83AD357B43982938F484FEC924B187E28C840C01B557D6C306C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 ae7192d0621335770a227393fa263842417d6534f668eb0aa4b981ddd43dca07
MD5 b45dae1e98af133f40dce42ec16cf1a2
SHA1 d35fecc061b5f4c2fa7ec98dce7aee36d4df5bc9
SHA512 bd2c6d66a5f7f999f870945a3badbbbe0407d14063d09cbf63e699c4f210269b24741ba8369433615370852b61f08bb071bb900106d83a8c8540ec263cb821bc
TLSH
T1B1B01443D557455DC07475D317743541414F444FDC5147157D1CCC40C017557D5C305C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 347a3aa5a2dff01504d5d5f6cbc7aeed16972c742722a32a378e5d0c2145ee6a
MD5 c58986c5ba44ae99a4286a5e7286aa14
SHA1 d762bb0886abe6fad61f7b9d4f0488db13719764
SHA512 06deef87c6b5d31cc4eb8c935a562ff476f212fe58e3b578e96bffff6bb42aa49c5c7142dd8a01ec42a90580bef3bd5280b623677ad1be60708f50b43c389284
TLSH
T1F0B09243E22B99AA80AC3AD357A82982818F484EE89246186AA8C880C01A957DA8305C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 d60126594d316188244e3928d68cf6620f9461a47678a38b7d47d985054d93b3
MD5 fcaac0ffc8340c64496eb6efccf29938
SHA1 fb3e705c46121cf12d4279db2fb642b2c0fa61da
SHA512 e0c802b0bebb608602d718879de0b17e0022b3ca1f80c33244fd0404ca5adceaf586a7b2faa75c7997362c284ef49036c66cbabe5f6f0fc8632957e7c214cbfd
TLSH
T10EB09282E62B89AA80A83AD357A83982918F485FE89246986A18C840C01A55BD6C705C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 e18f2ea8d91fa131ca1bc10cebd34a65513a7813dffb3bd97447b644f462e806
MD5 2a10939f5608d7444d62290b7e324f53
SHA1 78dd164837d377ced0418cd3d75a65af9b48cd88
SHA512 e21a2b03a8914b87754f003441b6f88ea9c850c447a6292f0a4ec5de3053aa581da5d95778e6193de290698858df43f81f3ea80867ab3268f4861fed88d9a071
TLSH
T1C6B01253E62BC9AEC0B83AD357B83A82818F884FDCD247187E28C841D01B557DAC305C
MD5 SHA1 SHA512 TLSH

Submit Download

BridgeAgent.exe

Path C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
Size 6.4MB
SHA256 b0dd515bb7aa8f966469cc470ff9845d4b7bdcdb0ce25ea5ec9b9923dd183d65
MD5 60af2224bf44f0411c405a3dc3a7fed6
SHA1 adf460420d128d39bcd5cf86a7dbbd1dd6c9d2b7
SHA512 51358b6b32e66af5e0c69ea004b690a479bd79d765b62637153c54944b4d01a1d747c5add243ba1d06804887a58c227474edae4c7098ed9a45fe3c233968e3b3
SSDEEP 98304:pHL3R0WMOPQ2p+COJx5C/YDX6XC7nip5d:BrBOoy
TLSH
T127663B11BA6B94BCD557C8B483068A239E2130DF1B26BAFF418486393F69BF11B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/5764-132-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

Download

memory/5764-122-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

Download

memory/5764-123-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

Download

memory/5764-121-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

Download

memory/5764-124-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

Download

memory/5764-120-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

Download

memory/5764-125-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

Download

memory/5764-118-0x000001FA617F0000-0x000001FA61812000-memory.dmp

Download

memory/5764-126-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

Download

memory/5764-119-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

Download

memory/5764-130-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

Download

memory/5764-115-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

Download

memory/5764-131-0x000001FA79DA0000-0x000001FA79E52000-memory.dmp

Download

memory/5764-114-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

Download

memory/5764-129-0x000001FA61D00000-0x000001FA61D1E000-memory.dmp

Download

memory/5764-113-0x00007FFE6AA5F000-0x00007FFE6AA60000-memory.dmp

Download

memory/5764-133-0x000001FA61D20000-0x000001FA61D2A000-memory.dmp

Download

memory/5764-134-0x000001FA61D50000-0x000001FA61D6E000-memory.dmp

Download

memory/5764-135-0x000001FA7A600000-0x000001FA7A7C2000-memory.dmp

Download

memory/5764-136-0x000001FA7AD00000-0x000001FA7B228000-memory.dmp

Download

memory/5764-138-0x00007FFE6A8D0000-0x00007FFE6B274000-memory.dmp

Download