bridgeagent | 50fdd8477244d8b3a59aa81bb2020ad2aad38d557039b36a38f6a8a74f87a969

Analysis

max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/09/2026, 04:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-09-18_722e946d22082045a78b7b5bdf9acf9b_akira_glassworm_icedid_rusty-stealer.exe
Size 6.4MB
Sample260918-etz29swdlf
SHA256 50fdd8477244d8b3a59aa81bb2020ad2aad38d557039b36a38f6a8a74f87a969
MD5 722e946d22082045a78b7b5bdf9acf9b
SHA1 0d5b68ad9a01774739da97d504c9507bfbb57f2b
SHA512 14e5736e791c8c9c610d6b483cbb37db53ca8c82614a96e58eed423d028a99efa95f9815b3fb194a0f7ca9615c00569efc7c18d93697dc9f688f3a195c59c0fc
SSDEEP 98304:KHL3w0WMOPQ2p+COJx5C/YDX6XC7nzw54:m0BOoy
TLSH
T1C4663B11BA6B94BCD557C8B483068A239E2130DF1B26BAFF418486393F69BF11B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

backdoor defense_evasion bridgeagent loader persistence

Malware Config

Extracted

Family

bridgeagent

91.92.33.73

Signatures

Family: BridgeAgent,ShadowHVNC
BridgeAgent aka ShadowHVNC is a Windows backdoor and loader written in Rust.
backdoor loader bridgeagent

Detects BridgeAgent aka ShadowHVNC loader 1 IoCs

resource	yara_rule
behavioral1/files/0x000700000002437b-22.dat	family_bridgeagent

Executes dropped EXE 2 IoCs

pid	Process
3956	BridgeAgent.exe
624	BridgeAgent.exe

Adds Run key to start application 2 TTPs 3 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe

Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

Command interpreters often include specific commands/flags that ignore errors and other hangups.

defense_evasion

Ignore Process Interrupts

T1564.011

pid	Process
4476	powershell.exe

Modifies registry key 1 TTPs 3 IoCs

Modify Registry

T1112

pid	Process
4044	reg.exe
2116	reg.exe
4160	reg.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4476	powershell.exe
4476	powershell.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4476	powershell.exe

Suspicious use of WriteProcessMemory 15 IoCs

description	pid	Process	procid_target
PID 3584 wrote to memory of 4160	3584	2026-09-18_722e946d22082045a78b7b5bdf9acf9b_akira_glassworm_icedid_rusty-stealer.exe	86
PID 3584 wrote to memory of 3956	3584	2026-09-18_722e946d22082045a78b7b5bdf9acf9b_akira_glassworm_icedid_rusty-stealer.exe	88
PID 3956 wrote to memory of 4044	3956	BridgeAgent.exe	89
PID 3956 wrote to memory of 624	3956	BridgeAgent.exe	91
PID 624 wrote to memory of 2460	624	BridgeAgent.exe	94
PID 624 wrote to memory of 4476	624	BridgeAgent.exe	97
PID 624 wrote to memory of 4888	624	BridgeAgent.exe	99
PID 624 wrote to memory of 2116	624	BridgeAgent.exe	101
PID 624 wrote to memory of 4900	624	BridgeAgent.exe	103
PID 624 wrote to memory of 3512	624	BridgeAgent.exe	105
PID 624 wrote to memory of 640	624	BridgeAgent.exe	107
PID 624 wrote to memory of 2452	624	BridgeAgent.exe	112
PID 624 wrote to memory of 3220	624	BridgeAgent.exe	114
PID 624 wrote to memory of 632	624	BridgeAgent.exe	117
PID 624 wrote to memory of 3568	624	BridgeAgent.exe	119

C:\Users\Admin\AppData\Local\Temp\2026-09-18_722e946d22082045a78b7b5bdf9acf9b_akira_glassworm_icedid_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-18_722e946d22082045a78b7b5bdf9acf9b_akira_glassworm_icedid_rusty-stealer.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3584
- C:\Windows\system32\reg.exe
  "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
  2⤵
  - Adds Run key to start application
  - Modifies registry key
  PID:4160
- C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
  "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --supervisor
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:3956
- - C:\Windows\system32\reg.exe
    "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
    3⤵
    - Adds Run key to start application
    - Modifies registry key
    PID:4044
- - C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
    "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --runtime --supervisor-pid 3956
    3⤵
    - Executes dropped EXE
    - Suspicious use of WriteProcessMemory
    PID:624
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:2460
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      "powershell.exe" -NoLogo -NoProfile -NonInteractive -Command "$ErrorActionPreference='SilentlyContinue'; $exe=$env:BRIDGE_TRUST_EXE; $sig=Get-AuthenticodeSignature -LiteralPath $exe; $sigStatus=if($sig){[string]$sig.Status}else{'Unknown'}; $publisher=if($sig -and $sig.SignerCertificate){[string]$sig.SignerCertificate.Subject}else{''}; $mp=Get-MpComputerStatus; $tamper=if($null -ne $mp -and $null -ne $mp.IsTamperProtected){if([bool]$mp.IsTamperProtected){'Enabled'}else{'Disabled'}}else{'Unknown'}; $source='Local'; if(Test-Path 'HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender'){$source='MDM'}elseif(Test-Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender'){$source='Group Policy'}; $onboard=(Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows Advanced Threat Protection\Status' -Name OnboardingState -ErrorAction SilentlyContinue).OnboardingState; if($onboard -eq 1 -and $source -eq 'Local'){$source='Defender for Endpoint'}; $detection='Unknown'; if(Get-Command Get-MpThreatDetection -ErrorAction SilentlyContinue){$matches=@(Get-MpThreatDetection | Where-Object { (($_.Resources | Out-String) -like ('*'+$exe+'*')) });$detection=if($matches.Count -gt 0){'Detection observed'}else{'None observed'}}; [ordered]@{signature_status=$sigStatus;publisher=$publisher;tamper_protection=$tamper;management_source=$source;defender_detection=$detection}|ConvertTo-Json -Compress"
      4⤵
      Hide Artifacts: Ignore Process Interrupts
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:4476
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:4888
  - - C:\Windows\system32\reg.exe
      "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
      4⤵
      Adds Run key to start application
      Modifies registry key
      PID:2116
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:4900
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:3512
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:640
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:2452
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:3220
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:632
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:3568

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Hide Artifacts

T1564

Ignore Process Interrupts

T1564.011

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 4KB
SHA256 88bc3e5c481e71888277c71acdb292116fa846d1c4bd6c0faa4969b1cb439a6f
MD5 16ebf62aab314d453f8a372843507659
SHA1 695152d2501f757ff590c3911a5732da358dd124
SHA512 f83e12fdef3cb30df6b837ec9854ab3f026e44205f8b4778518b5e4ac513afeaa92d866227d05d41dd0263cc5930b119273de2a84f3b2d0f6fa576f9b434ef9a
SSDEEP 96:oRVOAwsoO7EncOSUVLIEed6I6sMzLJMs4YsnvbzhOsC21xD6nb:PAznwSUwsKJ1C6Eb
TLSH
T11781BC503DBAC2766C214226D5354F8CF720B60FAA66DF08E7B6970CD142F4D9BC549A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 4KB
SHA256 c18397b36dd80c181f98a399617e3289d6ef325b5154a78a2b82ebd723c02317
MD5 27f3215465f9e73d68bb48004e760eee
SHA1 075086fead93f372b2a2289b5a69a203541d3120
SHA512 110f49c8f54e558b68452359f4d0104dd9904a1461fe79eb10bd259ad126cece1d5c8ac2f8cc7632bcdb61e25d0f8f99bfb5a940c974c4b29abbc38808bc532a
SSDEEP 96:oRVOAwsoO7EncOSUVLIEed6I6sMzLJMs4YsnvbzhOsC21xD6n+a:PAznwSUwsKJ1C6E+a
TLSH
T10691BB5039BAC17668224226D5314F8CF721B60FAA67DF08E7B6970CD142F4D5F864AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 dd65b70b43b9f091caef03fef4e9789e27facfbea6d7105e5735fb71b929dcd4
MD5 e69d4b57f97106ba4580ac4d0a890a00
SHA1 7ace5e5e30d625506718f4c157c6d2bdb4b32ef3
SHA512 a9911e4285dc2e23dd36511a4e9cd033075908bf91712f7279681f30410a434b99dea0a4665421083c122d6d35057f03eeec7229c4500ac4cc71c2dd511d5dc1
TLSH
T13C219B6038BB837D1915512B982A8FCDF261B50EEF56DB40E3B2860C6552E0DAAC0599
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 a9f012dd046b2c026d8ee1d38abc6d4db09d43c72f049f513d1a9797ca874a3e
MD5 9f77da363c76e3b23bf662cced005c2f
SHA1 dca5ca61be23137cabf8649cb5022ec39e6a2e57
SHA512 e9717bd45659bf4e7f709158da9e9f8a630a34a3bfd627d0dd9501fe3f8aca27eef80e9c1fdaa7d3c29ef793445d282e2f78e5d9f96c04447d7e5af00eb3a880
TLSH
T12731A06039BBC3391D11412B993A4FCDF271B60EAE66DF44E3B6930CA252F0DABC0459
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 50e7ee94ddca857b3b465e887085373bc7b3c30060e56d848ae82c0b38a6c697
MD5 36ecf2753b3d7d6e20beffbafa06f132
SHA1 5dca49f21cd819ecc2540647deb62478baff7f16
SHA512 1e5149f4389b114ef75f8871e7bd4c5c3c70da611243b506f0fe02ed9b04b0ac2119e90949d253561cd67efa84be127b1935bb80db796a5c8ed46a429b44a767
TLSH
T11F41AE6039BA82391D11412B983A4FCCF371F60EAE67DF44E3B6930CA142F4DABC1459
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 713B
SHA256 c64e739ddb4a164f4792e99a54e654565d7e241a0823357d56f9d3b235acca83
MD5 8504c9f6e29469148fba431d790e995c
SHA1 b7b50a0ba3d9d0d202495c0d7f61740617078cb9
SHA512 34d7680e3470482ac9e0f8ba6ffbdcfc5b88d65c9c2e9e2ead55df9171acd74a1275dc2d8148cc1a068c7ad4c41d1bbed91f631644a8a6d30484f02e4d8a9b39
TLSH
T10D01C0A0387B833D1A15512B942E5FCDF631750EEF12DF54E3B0820C7552E0DEB80549
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 a990e0ea74c32f80c4d3c4b63dbb9a3443eda0c47109dde59db4c3e1513cf364
MD5 752407e54e53768c2414d9b8aa5371d4
SHA1 787b4add0675a413b6122456bf17b48d23a878d9
SHA512 223e19986c157506a54e2f55f1afa9dd01fb6d7886179d6d7123a1176981702544320f003131149a295dd90f962e11b4f55f13d98730867785dd4e405ae97d1a
TLSH
T124518E5039BA867A5C15422B98354FCCF371B60EAA66DF04E3B7930CE146F4DDBC1459
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 e68b5bb0f7934b8e92fc1d6a761e6b9961b33a001ec847aa3f321023017ec702
MD5 529775096cfe21ba4b33cd3b71f09e00
SHA1 4a63c0976dd72dda4b450a545812488fc2ef95d4
SHA512 8f5a0888cd2c11e94322e5b7b0acb8ed33b3f5451e1fd17a495b6cc2e85aebe7cb2a27da0027398cd037d10e8fdb77ec972175a87dd2863fe9a4f5325da32f63
TLSH
T166518D6039BA863A5C15422B98354FCCF371B60EAA66DF04E3B3930CE142F4DDBC1459
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 6ac4106d6366cd3201fa4527e1582c082832f91ee9682eee1388c7b2174a4a05
MD5 22fb7420e53c331542340f4bc42c1cfb
SHA1 5a64948bbf11f7e169c1a5996836c8dcde3dbeaf
SHA512 24e3aa494928b54330b0ac8373579a3aba53ddca655c42c4db6267ee6c88ae381058384b7fa4ce8ba1d1ce2917d91d51e4d54257bf41fc2cd1fb526e3c55c3ef
TLSH
T1CA517B5039BA863A5C26522B98354FCCF731B60EAA66EF44E3B3930CE146E4DDBC1459
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 3KB
SHA256 191648f20331488ef66cbeee7cf0cdb45b018733e92fd52ab982f42b6ceb191b
MD5 7d46855fb1e6ce8c627b8aa69895aeb4
SHA1 e463979a694a4ac4e3c754b3b0f1697516fdab65
SHA512 8b4fe9fb54c1aadc578996294b7719eb6ea29e580383d40d74c9a03e7430dc3dd4d07c2d096c1c6accb17206da041bf7782aefb3dbb5b3acebdac01191b7040e
TLSH
T14D519D5039BAC67A5C11422BD9354FCCF731B70EAA66EF04E3B2930CD142E4D9BC1859
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 3KB
SHA256 be351c0ae8e982b393fe9f45927a16cd88ab498c807e25d36de9ae5bfa7cb3a0
MD5 7013e26bb0d8fabf2a234eb691e3ce0c
SHA1 02b95846e70f15c2547f2b9807fd738bc73abdf5
SHA512 0a817463f4aa58d96af1a4061a6cff1659748c8a627ff2bac3350af0fab76c9a92bb2bd6f051d9b432d25b9ecb062837286681874366a93f948983042333c2d1
TLSH
T12071CE503DBAC2766C11422BD5354F8CF720B60EAA66DF08E7B6970CD142F4D9BC1899
MD5 SHA1 SHA512 TLSH

Submit Download

root-ca.crt

Path C:\Users\Admin\AppData\Local\Bridge\root-ca.crt
Size 619B
SHA256 f3918439d745270b39590511561a69c9642251b202879962c338b5f0eb3a9b4d
MD5 5ed1e4d67442c25f5b301f6d4fdd8c2e
SHA1 0b76843005fb24482dfcd9abe580db88d02e2015
SHA512 358cded895d2f4f11b0d12825f5766258ad733827b13283092d3b88e760e5f6b4ac511dab3f1711ee8f1ee4e1a891fcdbc0931ded3bcaac6eb34813735870a9b
TLSH
T1DFF00289475EB45D18F7D095D4B6C75DC199F040A90B30AB311300A5DF66AAF88993CB
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 48dc8e860769d46281da0b13d48a7710acd4d4d8ca1d43fc73a8afe81c96c1c0
MD5 3f606c91ef74713392dfd1e021f2e5bb
SHA1 3d6f33eb34b741116dda9c3f18e7227c0f1eecd1
SHA512 3ae0f93a04e1cc946ddbdcfafcb6f13c827132109c212ea7e57071dac7d32b3953ebf0b89af2390f85f9ee332aa68565e8ae67e2ef7c348e087f35b97811e9fa
TLSH
T10FB01221D3674CDC94F862C363B5A5A2815D4C5B98DA5F11F534CD42812AE4B154301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 f7b4f0d73ee8d882ba18445c8b757dc50c46296e505ab37f3b4f7e5142fccf2d
MD5 e082e5edff75cc10bc60661d723b52fc
SHA1 0d1d9ecdfad8dc77768febe9e422c8f448e365c8
SHA512 85033cf626bbfb5d4828a6899e0c17b6d43cf959691c4db124974b78e046e195471695ab125bf94a9293aaac62bb06504d7a6bc822c45d7e01f2eb3fb2126b56
TLSH
T13DB01221D3674CD8A4F8B2D363B2A563829D4C47C8DA4B10F534CD42C12BF4B154301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 0693740ce2edf3cc5dcc5a61dd9f5f628dbb879c94d07deb7c5aa65af9ebf586
MD5 1efc787da4f013f886f3c9334d66ed63
SHA1 9e2856f92cd65e1efd0684de7d1cbed7d7404684
SHA512 e9681d002efee2148226ce74475e6020cfc5effb6d1c8fa34a2f81caafd7c96aeb98cf57e87bd17f9f473a5a4044b183d49c5ec38178d128b434e72360dad9d3
TLSH
T197B01221E3674CD898FC63D3A3B1A592819D4D8788D65B12F574CE46811AE4B154301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 5c09fa96a2b3500fbe4747a25b7fa7f146c334790992c2f17d6b3537a3475ddb
MD5 99d361b47e9cac60e274c10e777cfd73
SHA1 84f237bbeb84b9615ccd8bb2cfe70879b1e3e7ee
SHA512 cb789b7cc3e2e5ae1e9876f08f6a9c8bbf0bc85f628d849568bb8e7920feaba6d174ee4539983e42ac95bf10e5a3cdb11800e35d20f6edce736f01b83ba0a7f9
TLSH
T1C9B01221D3774CE895F8B2C363B1A592829D4C47C8D64F11F534CD42C11EE0B194301E
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 d69e1f9dab8c061cec4763839c44776a09462068b2707d5667a8d0abc6760879
MD5 15dc7e9950fd9cf38be3c48487bd672b
SHA1 89c70cbc47b4a0b414f3c180251885397a51d753
SHA512 96f5587b1a8cf8193e6ceb10e95d00ee87fb5554c1609e64230ce0fac86778db67ae038e5d52d4ccbb04686cc67b39ed414b2c989a7d3e49eab144598f88a2ab
TLSH
T126B01221D36B4CE994FC62C267B2A552815D4C87C8D68B11F534CD42C16BE0B554301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 901eaa727ff458ea896e78d0840ad1b86219e981196aacb29da34fe126c59952
MD5 a482f6ec4c469986e9221eca6871071e
SHA1 d61477a309e1bb80c9b1ef6bb617106997f75797
SHA512 cc0fc3a40b88e5c014aa64c34f83e4fa10afd016e211a5ca50654248fe311f5f140f5e4b44f4e464cc0fccb594e06b218afa1696199a5a3cbb963be0f555f72d
TLSH
T1B7B01221D36B4DE894F872C367B2A553819D4C57C8D68B10F634CE42C55BE4F554301E
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 44c96c2c30552be731712a61d6eb1aa4ccbc3d6eb8db090de963f63d218f670f
MD5 580bc8ef7c2e753f48b0c7f647fee5b9
SHA1 ccdebe2801c03af951c6f0f505c0ef67ecbb6434
SHA512 42e420b74f1ad37bfe54b763bb51c3a30b902e61eb69e544bbe3689d619775e8be62b97e6f44a6aa7bab85b962c07ca456ec7e41b7f99a9f8767649e4fce08ea
TLSH
T1ABB01221D3674CDCE4F8B2C363B1A592829D4C4788DF4F11F534CD43811AE4B154301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 2b56f3ebe78525c722ecfb4badfb94451b9bfde91e29511e4e0cc040661e966c
MD5 895650fe34201a487e4b63312f269d32
SHA1 d6195eb16e3e08cfe41c8011eee32f327d5a73e8
SHA512 d093541045eb34ac266a40436f6094451def611cb824a898dbdf47eebd53ec6aea41860b52466ab8e7309370defe66907317ad5e5ae070054fe7419c16263fc4
TLSH
T129B01221D3674CD894F8B2C363B1A59285AD5C5788DE4F11F634CD42811AE4B154301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 a0c43cf030000031357f2561b0a6108e16d90d432082d88abfff1b09cd199b08
MD5 6530b477a2d95272e64d5bba5a4d783f
SHA1 5af6a5f4042f45a856b35f5fc1787390c7f20226
SHA512 bdc011acf372e79da70154c70ad0605be6ccd75faa929c4cbfcc06fdf40efc02ce68c34123f590c84ec9a9f6180f0b7e4681fa2847fa27111078f7318563d6f8
TLSH
T188B01262D3678CD894F872C763B1A593815D4C4BC8D64F11F534CD42813AE5F1A4301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 eab7b5fa5122fe20caf86a953a38df8204106fc9eafd03f2cb061c82fee49404
MD5 62a69a24e0b5a832408251a784d83254
SHA1 2601cc6e5c68a10378350bebe770ad7fea31fc5e
SHA512 bd1dc1d2c755561a37c7506caf0a823b06bc1576155dacb41512ceaf9f54e5129aedc973212399f056fa35cf65debb6d4b6d884428724b69ca16eacf7f2ad77d
TLSH
T180B01221E3674CDC95F8B2C363B5A592919D4D4788DA4F11F534CD42856AE0B154301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 c38d13cb8c69c527374c3b593aaa9975893c347fffb2c39df7c0356414ccd659
MD5 8bb3871c10680b8f6288dcb1921cb913
SHA1 bf971f3403cc36e446a119f8be0755cbc5c16874
SHA512 d085bb5fcbbabc0a51ba7ec122d3f68298ceb60708fc3ff250e9cdcf058b2b8530491becf627552313f6758f1974a4894970271443ef872a3cd4fe6b0f1d11e0
TLSH
T117B01221D3674CDCB4F862C373B5A592835E4C8788DA4F11FA34CD43812AE5B154301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 2372556225c21d4c35c9b7d8b64aa1cd2de16630d145e4f40236de96591040c5
MD5 103811ecdd43c74fe11edaa51e2609ba
SHA1 7b67d953b78bdced230a1bb23dac184ead405a6f
SHA512 6277cb06ac322912863923d28df316e318339fe72f2a7351292525dd4f8d5cc3c749b9bd2b5651f630bcc5a2ef65d859b650e427babdc70fa81d09d6f68ed85c
TLSH
T124B01221D7674CD894F862C363B1A592815D5D5788D68F11F934CD42812AE8B154301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 02987c6d8acfc2c66123f9cb1c45eca661b5c4a806f07acd8cb0328c41cbc4d0
MD5 0ca4984ed8208faa02fc08f30245cd3f
SHA1 b2ea517b2aef11e32a134629fe18542c2f3a7fdf
SHA512 88822698cb29fa0bcf20dbdc37e7f119ca5cd4453f8093f0412c9f5b09df73de2ef68734886542ab89fa6fd65d6c04b8787b0f6d41d07f4939911ec6f5f543cd
TLSH
T135B01221D3674CD894F862C373B1A592915D4D47C8D78F11F934CD42812AE4B154311D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 708b1a6d7606358ff5aed9001126eb638a0de630c2a19ba5b44a7e72d6ed0231
MD5 0d679507d081e3afa5311f725956a26f
SHA1 7041e2b5dd15c9ff85f0f3c598b559ade1fb6ea4
SHA512 9f00c7ef742c91c1f8a12c66997eeb865386d253ccd8f22d2daaa12cb2e0f300eca1a4e1a6bfe7c0da971acd7acb9fc93f3c593b2b693dd9094ea8b08886fbab
TLSH
T1DEB01221D3674CD894F8B2C767B5A5D281DD4C9788D64B11F634CD42811AE5B554302E
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 91e873f90cda754e7a09b714985a987a599ae9d65a295ef8a510d312f39b5a2c
MD5 62719e32e9c93faadd5169a0039b3ba0
SHA1 bfd0fec1c0f5690e2eb5126f992507459f850b65
SHA512 14a6dd74e02df56c8b9bc5a437c7fc27796a0d747227c9a482632cd45cbc14af47803610bdf30bfb00911d26b456de152a2e2adc2f2ce8017c944bb2748dcb46
TLSH
T1E4B01221D3A74CD995F8B2D7A3B1A5A281DD4C4788D65B21F534CD42811AF4B154301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 1192d647f94f3d675644ab5ec4cfb682909b90c7577269114aca22cd01d26f65
MD5 166e10d3488867624a55eee3b8d6c752
SHA1 56fbc76c70fbb0357e7f14587510c0889159fbaf
SHA512 0a03acae308fb33b0f50336d12539605d5f2c4aa4c3c2a897ed3537076345a0c94ee6ec9d78d1f7a3f61bb680314d6cb7368a1aea30da952a54d4c01dff8661b
TLSH
T19EB01235D3A74CD995FCB2D7A3B1E5A2819D4C4788D64B11F934CD46811AF4B154301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 085fc90af4c8e58add2b40da307e297736dbe1b49e76678fe93c423f9984bae0
MD5 074708a7cb002b0f06c3fba44cad8829
SHA1 1cae3a7265ca628e2cc419907e1a5afa1a8a8a76
SHA512 feb89fccede82617a920cb06d81f25b130916b0e8b2b6b62cbe0736f8448edeb53ff7acfb01b2a5c5984ccb8654f380b126f0442e2be9c83a44fee46d32a5584
TLSH
T181B01221D367CCD8D4FC62D363B1A996815D5C5788E64B10F534CD43C11AE0B1A4301E
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 41807afa597f04da2701c5fb316cc2fd9a97dba39c5b92198a0f7962257855b3
MD5 57a603791b6184f2aa5afc5a0810e661
SHA1 143145c9cc07a7786499dd24eef2def1088f6014
SHA512 2433d460356543b53e393c563b4873630965a5e0e4526f66d100d462f1b0b0ee6da1bcae8d610102b3620c8f46623e394cc58d6f9c44e2fe7d9eedeb7cdc54a3
TLSH
T14BB01231E7674CD894FC63D3A3B1E592815D4D8788D74B11F538CD4A815AE0B154301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 c2fd616e534358ca8b5be23735e7929267a0f66251677e67fb11d3078f625d57
MD5 4e4c35cabbad5e727545adb009786d95
SHA1 f7e0fe2483c6a57a1e5f35fa60610cda36e68da8
SHA512 c491a65eca9b571984ddc4436719f55856c487615465a6854f90171537ed7fc949735c3039b8175a75e1ed10e5ce74059f4eb35dde0f2e8d9dc9a23aec5acca6
TLSH
T1AEB01221D3674CE894FC63C363B1A592815D4D8798D64B11F534CD46811EE0B164301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 1a017e8ab86eafb0a6ab7adef1dd4115f93cec92dd28ea979af864d163d3d1dc
MD5 5bab38a715f13c6c2a48ffe22df2d5d7
SHA1 e0ef6a61416ac79b4188e51cf8da7223e28210a9
SHA512 fd384536229cd0fecc43957a3f142333381065e0ab68709c05e51e99b112a369205668e1f9b340447dae8fa06751a91b16241791ae8395660376978d2080c357
TLSH
T15BB01226D36B8CD894F862D3A3B1A59281DD8C57C8D64F20F534CE42811AF4F1B4301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 720456a76aee03ab51d7b705d642a41767d91e48c7fa69febe7af6d1cff92048
MD5 5b1b9759049aabf24271975239bc6e0b
SHA1 11708e6c13a685e178b829adf1263a33f99bd896
SHA512 ed76b3b8961c0d7f8505ffb5132dec4026e8454ba53dc4e81aee58fd43dd56cc0a23c6ad3eb6488b3c46969b128e90242a057c8a386bc3d4f49477480716a426
TLSH
T1B0B01221D3674CD894F8B2C373B1A592819D4C4788DF4F11F534CD42811BE4B164321D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 75a9473b485c598b981ab7f695921ad94b42753f4f17c35e069e8710672309e9
MD5 0300482560ce541214e22c2c0563108d
SHA1 e28a538d2cd483b9d5c361bbb1b01df44cb53d37
SHA512 3e571314f0a8339b09750d21c1a1e28bcf4d283e21cfb34c6a30a9dc7cfb3ee6dae6319a3dbd9dc538b45eb2dfb95ef8ca0eddbc03d0761dffd125988307020c
TLSH
T1D8B01221E3674CD894F8F3C363B6A592819E4D4788D64B11F534CD42811AE4B154711D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 8535013a0d1f33d3cc55d050f1ca6dfa2cbdcb2f5f61e7dfe33f50d7c4fc834a
MD5 97d4937a0e5f22f77d634a6b7433de02
SHA1 58bf3ba2fc07094eeb9e18b68f7c19f8b852fe08
SHA512 a21ce2d86ec5d988441560e7121c8b7d5a29d799f3702a63590b9d7fdb6b9d622fced7fd5c4f78815b8351e6258f455183f84be94b6824a51d17c20c7178c27c
TLSH
T158B01221D3A74CD894F8A3C363B1A593815E4C4788D64F11F534CD42812AE4B154711E
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 13dd8723aa97d96a9bc13bf796d80b355927d10130953da44eab07bcf0cbe856
MD5 8d671de2314bb8df5da2535418a69da4
SHA1 84c8c018d9190f8d8f4d85ebfeb8224fcef0538b
SHA512 2cd42ef44a06360387d92dce103810004502f840c0685f1c7bb7fc64120af61b8db6a7eba4bbd34d2ec58481f30bcfcfae28fd879299b2be3383542b85593326
TLSH
T10AB01221E3A74CE994FC62CB67B1A592819D4C8788D64B11F534CD46811AE0B954301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 29c377ee74290e93a88488e26192057389567ec06e427d58a91298c4082fc33a
MD5 81672dc41d11b6fe9b634377e3f0cb0f
SHA1 bbaa2424ba99c75df6664cfcd05033715fc52748
SHA512 12307d6e670edf0e4c37e99900223a3c5e6a7a6c0533952ce9a547d2925e55b622a0a7b646aeac6946db313b50a7e0c665e1f05679400145f11e3cb3577a5ef6
TLSH
T168B01221D36B8CD899F8B2C763B1A5A3829D4C4788DA4B11F534CD42811AE0B154302D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 ec187c2fbc97ef3b3fe9cd159b1a6750186204f69b224d5aa2bcfea7c06abdf8
MD5 973034e7563025cc1d9e396d99cd729e
SHA1 15131f2c0de290369b3d80c5afbe3c145b2f6922
SHA512 906285d5eca5592fb57766672be59e756814f14384a145cc5c7b9add7ef32e9b438c8344216e35bbe94d4b1c1fc2c4700dd270a1cc951788785532aa1335f5cf
TLSH
T178B01221D36B8CD894F862E363B1A6A2819E8C5788D64F11F534CE42851AF4F174311E
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 91d68bedc43802a57ff45624ef80a4ba9ba569dd48bca37301f4c07c5dccb8bf
MD5 6b96f9d1c9c5ba3b2e1991b737cafd02
SHA1 a8d6a23c6c1490b0cab0ca874e856525cf0dc51e
SHA512 6610a031b2d77a047e78c89355f9625ecc5b7c49856b44cd1a48a6ecde5e3eaf8995cad535782d37e04bfec482e25f160fcde378a09aced003944ab49dc9e74e
TLSH
T1A4B01221D36B8CD894F862D363B2AAA2815D4C6798DA5B10F534CD42811AE4B164311D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 4ae32a5cff690cd0031ffcbf5dc91977b7f4b2df3b9b05cc2def51d877a6449d
MD5 1d53c5f0a826c8ef533e95c60ce9b317
SHA1 14620384fa7f851d314864725e4bd4b6d0d1a699
SHA512 8833bbe09644c6b31a81c131fe56d82fc947641c20523422752034e681448f8675325532c790659ca7636b9ff056997e8deffc5bc4a4651b220b61af6b90f822
TLSH
T170B01221D36B8CD8A8F862D3A3B2B992819D5C578CD64B10F535CD42811AE8F164741D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 119B
SHA256 cff49e4ffb20f8b65c50853b2abbabbb950b6ec686933c44c784764be0c7dd7f
MD5 455f62c263c7e4fda2dbd36a0584e65a
SHA1 f6a7c85d3a9c531d0a03cc13d3aa840f18bc1574
SHA512 7d9328077ab2f1a17873673abb9595f1e59689e03a1b5da8bc75f5e92c67e25be63a3a44932c0aef43ac012c068e250e86be4d857601f8bb00dbf950d2787859
TLSH
T1DFB01221D3678CD8D5F862D373B1B592819D8CA788E64F10F534CE43811AE0F264301E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 b080680b5547d254c77f9532c6196184a243256cc8b2bcf579c9906d59d1e25d
MD5 c3bcd6b4e08c5c8756b04fe6e90d2207
SHA1 f668584447ca86b80f2eda13d5e047da490f0134
SHA512 8e20b889fc3169c7ffc0840af6e4a230944b4f2d2610c29f98663e47091086e3e7b4aad6cea58a10092163679984b1165bd29a3f1ad9244fa27c2476585a32ca
TLSH
T142B09B21E21B499D445521971195A782415D8499455557156714C84084569158A4340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 3e8730424bfea75e6c45659a62ea9008318cdb70d4c77e331512be2f9081919a
MD5 ac85270868d3429831e40e8604bf945d
SHA1 e0c4e77df1f5d9c2e880c020269c283c9123d905
SHA512 580b347a5869608aefaa682e492f17fc76ad161f953ab6ebb4a05783d2f68b0341779b4871faad06acd0ea1635862ed68d8c9e726002e48c31f8859fbb20ca65
TLSH
T15CB09B21E21B49984858259711D56742405D8489486557156614C44088569154A4340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 116B
SHA256 2d5a0fdf4815689d81aa66b4763c0d0ba32b38dc1a75c628333597c6fe68b38c
MD5 ad3530f054f035b303415302d8b46427
SHA1 cc270cd215834e5e54f43c1b328bcecf50f536a1
SHA512 82d8a1bc4f9a13b33a8324c7e23258652a0b5fce4834cb08dd7bb87f9bdf4dcc295f0ed63aa1058e19ed3ade808b8be3903163781b4d196a631ce9f67d9a46a8
TLSH
T15DB01212F3EB4CECC55835E262B97A43804D44CEC996AB50B514CC90C45BD0AD94700C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 e5690c1c25bec7546f931a1b9c90d613f9c55c7f630f907d1771211cdf775b90
MD5 79fb50c2235d0b11576c3e56ca7eb17e
SHA1 989dad1f4722001696f1a265ae6a065bf6954d46
SHA512 e297a024e0d14dae98cb1179c80244f3863e0b025ad9ed6c6ac9ddbb1695b9591bbb05850ab462cc932326f997ed445af84ede4205e29aa902739e14386b0553
TLSH
T104B09B11E15F4A985495219615997742505D8489849557556624C444CD669158A4340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 42eb413250bb4ff3fef7cccd09999ad2fde5dc0283e149fe695c85f0493c6e71
MD5 7109aefde120292ea8020116b832430b
SHA1 03ab6943404238accdf2d91ae2756636258d1c58
SHA512 ff9c91cd9b50bded0836b29ccdb1e81affb9a9f3cdffa434424ae6f9313362c574441df29fa4201cad4517c544ea3e8938e151b7ee64803e4e2b1c43ca166d58
TLSH
T16EB09B11E21F499C4455219711956742415D84DD445557156624C84485579194B4340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 431e31075ebe48dc72c555b254851f0b0f9bfcc9521e0749a2fc9a17141be169
MD5 34a3fe86f6e2b96634006bccf5530864
SHA1 f3af6d7bb44c9ba11906982b77122054cd3a0e95
SHA512 8785d84a77ee8cf73a3a3784f2c36f91be28d2c7adaa02c386fcc024c9a31561385c68d37a6947bd820d80493a6f48f8b8c8c62d18f8874d587cabe9dbd418dd
TLSH
T1AAB09B11E11F49984454219715956742405D94C9845557556614C940C4769158A4740C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 da358f5ea9f59418f3f3ae775fe8a06a38ed5fc2506b9a59b598fd2feae06d45
MD5 237022bec60f440ff63c5e7f996a6c20
SHA1 d0ea0b8938cf343b51cb774bc6f3d9595cb29965
SHA512 79913e4ca648069f07072e14aa3660af701d798797664cb2c256749a03c2b6025b323d68ad7ff7074f24f7324bdddd9fcc3cef90af6460401013b36fd4ad4574
TLSH
T1A8B09B11E21B4999445421D711957B42405D8499459557156624C44485569158A4340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 64f4bd6cd22f10f89f0b04b4c626a53747c2ce3098efd940dc1cdaceeb8fd64b
MD5 27ab01fec405bcd29303293e3ec0efd8
SHA1 92f0340e22b84487fd26d85b646cd5c796acfdbf
SHA512 a19692a83194cdd4d41eac5c6c2dbb84ce737f7236a70586948623883180d759cddea63ff610be94c66fd0e0ad4769d380c16d773a585aecd622dc85b96297d3
TLSH
T10DB09B11E25F49984494259751946782405E848954655715A714C84084579159A4340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 ac836d5cac9ffb1dd6e7bfa3f06391f122c1971947518ba79e6db952fadc0e68
MD5 8ce18720749a065ef8c13f1b1c4943ab
SHA1 628d26e76e388e3d6e2df3a9aaa78dc20d124fd2
SHA512 0722006087bee0872a9ee663c711ad053e6add19cbdea24e98d1b47d9bfc9c9d0c42324764c7a1c7f2e1d2c6590c33c5f9c7a8100a2c5a83e65003ed353e005b
TLSH
T153B09B11E31B499C4498259711996742405E848A445557156714C84089569154A4340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 de1d3058fc670572a0fd21f5b987b03623962085c85a1dc4bd84048412c98812
MD5 1a778994762e149d00c273fd7df1389a
SHA1 6a7788c99c796e5cbb593d22dcbe8fb46420c814
SHA512 d4e389b44e9f2fc32cc165f245b04ba11144344b9d9cf4533b1af9f90886bf8dd5363fdefbe5c955247b8459e53a55f08531a729eb72517698ed51ac05e7aac1
TLSH
T15EB09B11E21B499C44D42297119C6742405D848944555715A714C84084579158B4340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 b678de3459e948c7b4b493c137c717242666622fc62c807e63c4b469cad9072b
MD5 c87602962310bd31088d2780f206e3b4
SHA1 b0a6eb434b0b34e0a81abba4d72ea2c2cc17edf9
SHA512 97c846f0529d9150d7839da83152f47199c143641970f3fa1fe56f0e145d6024bda1da756b24f092c98ed623b21a430f026bceecf3b7132b517bca7609fb9c9d
TLSH
T150B09B21E21B49984454259752947742805D8489445657156614C54485569158A4340D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 bf9be40b7c2deea3cb68b2592d1d8d80a9521c207added8c263d958bb19268a9
MD5 c0b2a1fef16cc937b1f58f78f9c35620
SHA1 980fc09170aba320df97a50d07877402f2a2f548
SHA512 440c8e19d03754674ba02cae0dc87773f43d422ec18d1c11ec632773cf46931acfcd8e5a35035b39b9d136273860a545d72880cd67f4482b7b3671a5b5bde27b
TLSH
T15AB09B51E21B4998445422975194A742405D84DA549557556614C4408476D158A4740C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 9553e803c2fb0a66ff5e6a88a19e2784938bae8a8aabf91a209345235c553a13
MD5 b555c069a74e26811a06c4dbe0712e89
SHA1 b1903f5da37dca0ae7203a85aaaf7a138ac7d21a
SHA512 9943df7595de217a90f009b50b9018e6c6b25bbee47f3eb2b3f97a212db16559db5b3323211160a1170c07ae5b8953de9cce072545dfa0f8c7adabf9067cd7e5
TLSH
T1CFB09222E32B4A98989836DB16A96B82809F84CA88A65726A614C880C856A198A4340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 6ba335a29ad8c67fa573a3da8193c944bde2c9822769544ffe7fcc836f1fedc0
MD5 21b6d9b93ac2213511a5528390cf2148
SHA1 a8b53a5a07a7e9f835e7544b1b94e7033589d88b
SHA512 34fa56a9fc9f56d4029aff077747d94de45937980befb5101f4f02997443e3af3a694f97bd9d1428c78bba9c65f3e2add2178951a6d008130b437741cc0b6536
TLSH
T196B09B11E25B49984454219752996742405D8489445557166614C9408557A154B4340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 54b74d8dbdd4e746e8034789824a01991f7647453a79747a9e75feae8e2a1dbd
MD5 44c0d7fc1986af1cfe6567b39cb728bd
SHA1 bcd1648b454d79f1bfc13bc213d0543d0a2ab939
SHA512 00a25a772065aaa72210723e86e6d973ecd54392f30189b979ebddcd0eb7f24be4f66fe762912ea4f00926bd2bdc0a6a037b681923f232edde8eaec182a51ce1
TLSH
T1DFB09B11E31B4998449423975299A782805D84CA449557157614C5408566D154E4740C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 5af4666cece09a05ade5427d758f31e4ccd23223e2905db5cf21a38e7d1122bf
MD5 54afaac960664fe0ac36b0908670ab66
SHA1 3af1f1b93738f366d3d834ad11746f35acf71ede
SHA512 297c5532b021c2c161f668db41f5b77225c55541f1ef1465c4d2d8e88e0bea12692727cd5c1e5f23338dbc049df8c8dde2ba028aca4dc10d5568738b6289ddf4
TLSH
T18BB09B11E15B4D98445825E757946742405DC499449557156714C84084469154B4740C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 f7a394f4c9912a683c26461608e3bb0a0df05d6f9aa3da2d07916b7e804b385b
MD5 5f9fd63e8cd886d6cd842c2d331119e2
SHA1 c46a41ec04a0b5eb228a634379c17d8db2ad6c19
SHA512 f9e37bd8ac1173e5a37f4fcc6c58647f746751486c5f1412d506018eb13c60541e2060d0ffd58573bf665ad2152e2898385b5f7dc6ec2f8c1b9d203b7dc2382d
TLSH
T164B01411F31F4DDC445531D751D47743405DC4DD455557157714C444C457D15CF4340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 9207d8008fecb4f1c6f2f1f9495d2697fb092f910ecd2d89a11b766cc0c048b4
MD5 ee861953412f5ffcb1e235ffcab2257a
SHA1 c2d36ea1356885e1f8a5f50156708b3e5e197578
SHA512 3e25dbb3ce073bf19324302585d7826dd57627f4daa4444e5d89cbdbc745b543f76354ddbed455303a506512a7499273ae8a279a527e15943096c53a00c782dd
TLSH
T15EB09B11E25B49984854359711946782415DC48A49A657156614C8408456A158A4340D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 74a73fddcf26b228e386c6f65b2fd0afc2481f2b6652abe248352407bff10ed9
MD5 501c09d56ea4af768611965a2349e84a
SHA1 681a72ea80ef49177ff21ddc8f5e1c2a7c24d33c
SHA512 ad70b6399828e55b78d4b6a102a8755ce70b923012fcbecbb48f6978209c35b8f3db7cd8b95e6049ae9c1d220878875ff077cb4d0b76905890a41b5cb6f858b1
TLSH
T1C8B09B15E11B4AD8445435D752946742405D84D9445657156614C4808456D1D4B4340D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 c8b7faa698aeb4247c6915a13953f1148a44f3bc4b6392466d83cbf58aa49951
MD5 82681afb088e88f4f4e2d2a8084b083a
SHA1 e1e43edfcb8765686b530dc6f6197a8027b622ec
SHA512 28d6c5d7cd82648a7544bf96a9e61cc717e1044ffb71b63b84f26addcfc9f893d3c2ffa0811b8e58f22a8f5b781b624cbf2d2523c8c48770b84dd32b0b07a7ea
TLSH
T1B4B09222E22B4A988898369722A97B82809E848A88A65726A618C8808856A198E4340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 8e2eddf15a80602a227e5ef224113d1848673d8c385bbfbbb02313fe2252c265
MD5 ff51c4c467de03ea29ddca3a3dfd8e4d
SHA1 bd4d084a36771bfd8a1c04b1cdd1074f1bbc5819
SHA512 5c59c80ab80147a05d0af09d75d53739f33c78f2a29af19255fc79bebbe294b575706cc00d905295ec90d3dcd21c772aec6828ba8687199e3b0f9e7c97332201
TLSH
T158B01222F32F4EDD889836D712E97B83809FC4CE99B69726B724C880C857E198F4340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 7362253e27e404d0e39206caef2e4ae6f5f6a3269ccb517880767cfc51c55438
MD5 9902a78e46ad82145f87997007ce138c
SHA1 7c622ab82b6223d4516fc703966c048c22f9926a
SHA512 e3424167d06368af12dd34681d6126ed0100354db949def4bf9b991832b32f257136d9a15af57d421595253813ccba791803329804be975968cee9367dca5d3a
TLSH
T195B09B51E32B49984554259711946782409D84C944655715A614C85088569158A4340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 b6b262a7ccb0c5861cc4b1ca43ac9045fe6f8d35070f37616db32cb513aa862c
MD5 72caa97495814e650b970e72ed2b5d87
SHA1 82e28be160f76cf61fdff0c957c642bc3dd169d9
SHA512 dff364c41927ba3632e03b41f8f53e78a67892f482b25b8b9c2186cf998e619682068febe490a7e5b23961d63ca5585dac02938ef05fe82a82b476165711c48b
TLSH
T1D8B09B52E21B49984455259B11946782405D848944A55715A614C98088569158A4340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 1b03b438ae8ac253a1787b4dca9fa5165827121bb708906329329c58dbf6e6a2
MD5 c964a82a73bb59a706671575790b2891
SHA1 efee514dd9e01ca98de3ccda78abb92a755f9b3d
SHA512 e70586713b1a44c182330688d4227664e5ea2a5e9f6111abdef91018b22cfc40c720bf30d67174b38a76ca92293b6efb67dc33b81e0e007a2b5d0f04b9bc2688
TLSH
T159B09B51E21B4998445425D751A56753405E848944655715A714C44088569154A4340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 f62de94e08a4178e251b76fe698f08635f16b11cf4b216996e09af878acbb392
MD5 e95316f55f94eb9d8e5ea7e183e088f5
SHA1 09dc07cd72491c0adaa20b129db4d46e3ea81ff9
SHA512 0c10339860a26b9f3d861efe00913824189ff9b406e3ddbe338ba07111f03d99b688fd81eebd0de836554bc97b2b28dd1b0a81facb7dc2d59935b30eeb917812
TLSH
T130B09B26E11B4A98445425D7519C6742405D849D4C9557156614C84085569154B4340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 ea426974c4fecc170ca56add383683563e4fd42b9a15d70016077a07bcec09b9
MD5 dfd8d80238545c7217798aebb13e070d
SHA1 a685d252a56d497493552c039057f5677fa7d31b
SHA512 04d6f765ed539651d517b554ee5d958506eeb92ca7bd3529f8df7e568f6279e942982508cb688e86c318f15e3c3c743b1edc7630ffd5ea46329abd53a3172ebd
TLSH
T1FBB09222E22B4A9889A8269B16A86BC2809E948E88A65726A614CC80C856A19CA4340C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 ff62dd344caf3f32215eb61376d0487b45720f38f7c1e089db37ccc930a319ab
MD5 0c88107787006bebc7359c781d819da4
SHA1 6597ab3fd75e4bbca2869a2184e0115f95f970ed
SHA512 6013b2931efdb5eccba9caf092dc7225d9bacfdc503f39c8033108b75bca35fc1281c44f90c6b630cd2ad651f9075e05b1c992bd754a50c21fcf29a8bd6cc4f3
TLSH
T152B01222F22F8EDC889C36E713E87B83809EC4DE88A65725BB14C8C0C857E198F4340D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 122B
SHA256 5ce326734cc1738c71165262a36ecc1ee42159c0428ac84e34d73f232ebc1092
MD5 0a82ab115a23c9bdb4788e2f9683caae
SHA1 6c6fcd75ea1e431a56a4659e8b1c74011aa9edf8
SHA512 6406efaeb07852c1ed4f3b9e88180a61e74b87d92afa2542f6222eb137eb1e14d2c4e8e743db104938bfd26d5a3c71f26e77099cbb7cb3fa65e81bb5c9beb356
TLSH
T115B09B15E15B8A984454259722946783405D8499445557156614C48084569154B4340D
MD5 SHA1 SHA512 TLSH

Submit Download

BridgeAgent.exe

Path C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
Size 6.4MB
SHA256 50fdd8477244d8b3a59aa81bb2020ad2aad38d557039b36a38f6a8a74f87a969
MD5 722e946d22082045a78b7b5bdf9acf9b
SHA1 0d5b68ad9a01774739da97d504c9507bfbb57f2b
SHA512 14e5736e791c8c9c610d6b483cbb37db53ca8c82614a96e58eed423d028a99efa95f9815b3fb194a0f7ca9615c00569efc7c18d93697dc9f688f3a195c59c0fc
SSDEEP 98304:KHL3w0WMOPQ2p+COJx5C/YDX6XC7nzw54:m0BOoy
TLSH
T1C4663B11BA6B94BCD557C8B483068A239E2130DF1B26BAFF418486393F69BF11B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_j5nhnacv.gdq.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_j5nhnacv.gdq.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

memory/4476-92-0x000002047CEE0000-0x000002047CF02000-memory.dmp

Download

memory/4476-100-0x000002047F7F0000-0x000002047F9B2000-memory.dmp

Download

memory/4476-91-0x000002047CFD0000-0x000002047CFE0000-memory.dmp

Download

memory/4476-101-0x0000020400000000-0x0000020400528000-memory.dmp

Download

memory/4476-104-0x000002047F4B0000-0x000002047F61A000-memory.dmp

Download

memory/4476-90-0x000002047CFD0000-0x000002047CFE0000-memory.dmp

Download