bridgeagent | 50fdd8477244d8b3a59aa81bb2020ad2aad38d557039b36a38f6a8a74f87a969

Analysis

max time kernel
150s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/09/2026, 04:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-09-18_722e946d22082045a78b7b5bdf9acf9b_akira_glassworm_icedid_rusty-stealer.exe
Size 6.4MB
Sample260918-etz29swdlf
SHA256 50fdd8477244d8b3a59aa81bb2020ad2aad38d557039b36a38f6a8a74f87a969
MD5 722e946d22082045a78b7b5bdf9acf9b
SHA1 0d5b68ad9a01774739da97d504c9507bfbb57f2b
SHA512 14e5736e791c8c9c610d6b483cbb37db53ca8c82614a96e58eed423d028a99efa95f9815b3fb194a0f7ca9615c00569efc7c18d93697dc9f688f3a195c59c0fc
SSDEEP 98304:KHL3w0WMOPQ2p+COJx5C/YDX6XC7nzw54:m0BOoy
TLSH
T1C4663B11BA6B94BCD557C8B483068A239E2130DF1B26BAFF418486393F69BF11B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

backdoor defense_evasion bridgeagent loader persistence

Malware Config

Extracted

Family

bridgeagent

91.92.33.73

Signatures

Family: BridgeAgent,ShadowHVNC
BridgeAgent aka ShadowHVNC is a Windows backdoor and loader written in Rust.
backdoor loader bridgeagent

Detects BridgeAgent aka ShadowHVNC loader 1 IoCs

resource	yara_rule
behavioral2/files/0x000d00000001c55e-19.dat	family_bridgeagent

Executes dropped EXE 2 IoCs

pid	Process
5412	BridgeAgent.exe
5360	BridgeAgent.exe

Adds Run key to start application 2 TTPs 3 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000\Software\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe

Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

Command interpreters often include specific commands/flags that ignore errors and other hangups.

defense_evasion

Ignore Process Interrupts

T1564.011

pid	Process
2940	powershell.exe

Modifies registry key 1 TTPs 3 IoCs

Modify Registry

T1112

pid	Process
1436	reg.exe
5824	reg.exe
5420	reg.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2940	powershell.exe
2940	powershell.exe

Suspicious use of AdjustPrivilegeToken 43 IoCs

description	pid	Process
Token: SeDebugPrivilege	2940	powershell.exe
Token: SeIncreaseQuotaPrivilege	2940	powershell.exe
Token: SeSecurityPrivilege	2940	powershell.exe
Token: SeTakeOwnershipPrivilege	2940	powershell.exe
Token: SeLoadDriverPrivilege	2940	powershell.exe
Token: SeSystemProfilePrivilege	2940	powershell.exe
Token: SeSystemtimePrivilege	2940	powershell.exe
Token: SeProfSingleProcessPrivilege	2940	powershell.exe
Token: SeIncBasePriorityPrivilege	2940	powershell.exe
Token: SeCreatePagefilePrivilege	2940	powershell.exe
Token: SeBackupPrivilege	2940	powershell.exe
Token: SeRestorePrivilege	2940	powershell.exe
Token: SeShutdownPrivilege	2940	powershell.exe
Token: SeDebugPrivilege	2940	powershell.exe
Token: SeSystemEnvironmentPrivilege	2940	powershell.exe
Token: SeRemoteShutdownPrivilege	2940	powershell.exe
Token: SeUndockPrivilege	2940	powershell.exe
Token: SeManageVolumePrivilege	2940	powershell.exe
Token: 33	2940	powershell.exe
Token: 34	2940	powershell.exe
Token: 35	2940	powershell.exe
Token: 36	2940	powershell.exe
Token: SeIncreaseQuotaPrivilege	2940	powershell.exe
Token: SeSecurityPrivilege	2940	powershell.exe
Token: SeTakeOwnershipPrivilege	2940	powershell.exe
Token: SeLoadDriverPrivilege	2940	powershell.exe
Token: SeSystemProfilePrivilege	2940	powershell.exe
Token: SeSystemtimePrivilege	2940	powershell.exe
Token: SeProfSingleProcessPrivilege	2940	powershell.exe
Token: SeIncBasePriorityPrivilege	2940	powershell.exe
Token: SeCreatePagefilePrivilege	2940	powershell.exe
Token: SeBackupPrivilege	2940	powershell.exe
Token: SeRestorePrivilege	2940	powershell.exe
Token: SeShutdownPrivilege	2940	powershell.exe
Token: SeDebugPrivilege	2940	powershell.exe
Token: SeSystemEnvironmentPrivilege	2940	powershell.exe
Token: SeRemoteShutdownPrivilege	2940	powershell.exe
Token: SeUndockPrivilege	2940	powershell.exe
Token: SeManageVolumePrivilege	2940	powershell.exe
Token: 33	2940	powershell.exe
Token: 34	2940	powershell.exe
Token: 35	2940	powershell.exe
Token: 36	2940	powershell.exe

Suspicious use of WriteProcessMemory 15 IoCs

description	pid	Process	procid_target
PID 1352 wrote to memory of 5420	1352	2026-09-18_722e946d22082045a78b7b5bdf9acf9b_akira_glassworm_icedid_rusty-stealer.exe	87
PID 1352 wrote to memory of 5412	1352	2026-09-18_722e946d22082045a78b7b5bdf9acf9b_akira_glassworm_icedid_rusty-stealer.exe	89
PID 5412 wrote to memory of 1436	5412	BridgeAgent.exe	90
PID 5412 wrote to memory of 5360	5412	BridgeAgent.exe	92
PID 5360 wrote to memory of 2556	5360	BridgeAgent.exe	93
PID 5360 wrote to memory of 2940	5360	BridgeAgent.exe	95
PID 5360 wrote to memory of 4988	5360	BridgeAgent.exe	98
PID 5360 wrote to memory of 5824	5360	BridgeAgent.exe	100
PID 5360 wrote to memory of 3076	5360	BridgeAgent.exe	102
PID 5360 wrote to memory of 2384	5360	BridgeAgent.exe	104
PID 5360 wrote to memory of 5980	5360	BridgeAgent.exe	106
PID 5360 wrote to memory of 1472	5360	BridgeAgent.exe	109
PID 5360 wrote to memory of 4740	5360	BridgeAgent.exe	111
PID 5360 wrote to memory of 5292	5360	BridgeAgent.exe	113
PID 5360 wrote to memory of 4156	5360	BridgeAgent.exe	115

C:\Users\Admin\AppData\Local\Temp\2026-09-18_722e946d22082045a78b7b5bdf9acf9b_akira_glassworm_icedid_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-18_722e946d22082045a78b7b5bdf9acf9b_akira_glassworm_icedid_rusty-stealer.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1352
- C:\Windows\system32\reg.exe
  "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
  2⤵
  - Adds Run key to start application
  - Modifies registry key
  PID:5420
- C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
  "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --supervisor
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:5412
- - C:\Windows\system32\reg.exe
    "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
    3⤵
    - Adds Run key to start application
    - Modifies registry key
    PID:1436
- - C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
    "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --runtime --supervisor-pid 5412
    3⤵
    - Executes dropped EXE
    - Suspicious use of WriteProcessMemory
    PID:5360
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:2556
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      "powershell.exe" -NoLogo -NoProfile -NonInteractive -Command "$ErrorActionPreference='SilentlyContinue'; $exe=$env:BRIDGE_TRUST_EXE; $sig=Get-AuthenticodeSignature -LiteralPath $exe; $sigStatus=if($sig){[string]$sig.Status}else{'Unknown'}; $publisher=if($sig -and $sig.SignerCertificate){[string]$sig.SignerCertificate.Subject}else{''}; $mp=Get-MpComputerStatus; $tamper=if($null -ne $mp -and $null -ne $mp.IsTamperProtected){if([bool]$mp.IsTamperProtected){'Enabled'}else{'Disabled'}}else{'Unknown'}; $source='Local'; if(Test-Path 'HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender'){$source='MDM'}elseif(Test-Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender'){$source='Group Policy'}; $onboard=(Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows Advanced Threat Protection\Status' -Name OnboardingState -ErrorAction SilentlyContinue).OnboardingState; if($onboard -eq 1 -and $source -eq 'Local'){$source='Defender for Endpoint'}; $detection='Unknown'; if(Get-Command Get-MpThreatDetection -ErrorAction SilentlyContinue){$matches=@(Get-MpThreatDetection | Where-Object { (($_.Resources | Out-String) -like ('*'+$exe+'*')) });$detection=if($matches.Count -gt 0){'Detection observed'}else{'None observed'}}; [ordered]@{signature_status=$sigStatus;publisher=$publisher;tamper_protection=$tamper;management_source=$source;defender_detection=$detection}|ConvertTo-Json -Compress"
      4⤵
      Hide Artifacts: Ignore Process Interrupts
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:2940
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:4988
  - - C:\Windows\system32\reg.exe
      "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
      4⤵
      Adds Run key to start application
      Modifies registry key
      PID:5824
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:3076
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:2384
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:5980
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:1472
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:4740
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:5292
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:4156

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Hide Artifacts

T1564

Ignore Process Interrupts

T1564.011

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 6KB
SHA256 f45701588b255b3ed9762e7120f9c5c82a517fedb00461b6f89ee5d7cd5bba8d
MD5 1c6b290cbb624836f9ffba167623705c
SHA1 ffd64cc8594be428cad250bd794a8f9364441948
SHA512 f8045fb21290aae364e4178ed93d2f1b50d4b85c8d4d62afb96335aba6991886f81933914ba84f2c8c19693b383d66ad59add9c2bb107b6649165d1273b47fff
SSDEEP 96:ozVzOvtsERO7KJcOBLH4Nbs3BsngCNhs8Q9FDvYPhCSsCEnT5xTYUaOIClGDKd:9O7cKOypcUQCETTTDnIRDKd
TLSH
T14FD1AD513CBAC1676C220622E2324F8CF220B31F5A6AEF0CF7FA5745D092F0C5B86599
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 9e0ddec5b463540458273393ce2a2fca8cb62639fe29a6aa5b71651bf2dfbc22
MD5 eb36fe8c779c0bb4ce8beb378d6e7c30
SHA1 e61953881a692255753ce5f0eb767236d4fbbeb6
SHA512 4069c2b17c1f0abb17045886943b0c0233135da8b8b434edffc48eb9b17e6861e6d08d05aec63f1c6c16a353156435a7c0f41fef0f94bd19c1eec3c4635e050c
TLSH
T14D21D02034BBC3B91815552B91368FCDD231B50DBF66DF40E3B2C6086143F0EAAC5995
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 1KB
SHA256 d7f25ba97e42f3fdfba7a688e05c73f2d67569b36ea82d4c52f96fcdd45cf4f4
MD5 a9e4ef216083e791a77881553eefe8af
SHA1 d78788878ea680ddc5a18ec5a08008e30bfcd1bb
SHA512 cefa39f0920e171eaa4c83027edad2bccd42719b5e54d9dc9f970bc52af6dc6991fc4fdf9cdb8705fb5c2ffefa340d319ba96a3256959fe2d807c8afcef7ad03
TLSH
T17C31A21035BAC3B52C11562B95368FCCE231B50EAA66DF40E3B6D7049183F0DABC5999
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 a1481d1c30091a70e3fbb02bf58ff9f905a35b77155c599b44f6c31425d96ad5
MD5 0df00b4dc76666fdc5308e21a8ab410b
SHA1 e8b6d37f948b63b333ccb491708aed4a8d63f86c
SHA512 a6fb1f86ea09162ab29f92f870d9b677321711267cf10cbf8eb490fbf66eeeab873e9a813b276146a701221cb5fab59c8bcc6c2764f99e178c36acdd52cb3010
TLSH
T17E517E1039BAC67A6C11422B95358FCCE721F50EAA76EF44F3B2D304D183E0DABC5959
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 713B
SHA256 752960fa0c5f9ebe2599588b116fed3e28c9cfe2062601bc181cfca2c66e2bc3
MD5 4b208683fa4a9e8402e5e8b9e27adc2c
SHA1 79745ec51a92a00aa985acae1a376df1718ed10a
SHA512 dc9e8070613fd7b60fcf6b3f818dea23012abc56d8373b1550b2dd5f7408e00605b0886062a22fbf8810e4b6c30278d5c2e76a12353c2bb1c20df06d28981345
TLSH
T18C01C020347B83791415562B90269FCDD631B90EEF26DB50D3B0C2086543E0EEB81D49
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 3KB
SHA256 bb85d6cfc8fdfae5137f49b2beddaccec7577466db47fd8b5d95bc54e92ce2e9
MD5 1ba081b24880d13a08f33f4ac8457b59
SHA1 5a18248a64597e5699ddc668ab7bcc8d23b78015
SHA512 66e845aec6b93465a175f5ef38a09b1dd73c7b1b7954b99e051cd2c74757a4ad59f8f3202d6cc9d547e2b85ab489a7222c2193dc756cee13af89316b46efc8e3
TLSH
T189517D1039BAC6776C12422BD5358FCCE721B60EAA76EF44F3B29704D182F0DABC5959
MD5 SHA1 SHA512 TLSH

Submit Download

root-ca.crt

Path C:\Users\Admin\AppData\Local\Bridge\root-ca.crt
Size 619B
SHA256 f3918439d745270b39590511561a69c9642251b202879962c338b5f0eb3a9b4d
MD5 5ed1e4d67442c25f5b301f6d4fdd8c2e
SHA1 0b76843005fb24482dfcd9abe580db88d02e2015
SHA512 358cded895d2f4f11b0d12825f5766258ad733827b13283092d3b88e760e5f6b4ac511dab3f1711ee8f1ee4e1a891fcdbc0931ded3bcaac6eb34813735870a9b
TLSH
T1DFF00289475EB45D18F7D095D4B6C75DC199F040A90B30AB311300A5DF66AAF88993CB
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 9528e4f43da3d7f48f0b50b250f5527d53fc4e1ded7c2487acd7202830f27316
MD5 280258095b2297d1f911b62f1bcadb22
SHA1 f36b3fc5871cc1a8ad3ea923183cc270012465cb
SHA512 55ea11f4c0c6e68358659ebc9af219a0b13b6d851295b30d192e3d4d91aed8b0cde169cf50ea0feffb8adecfc539921d3cd0da6af230162980dd874f940648a6
TLSH
T11AB09286CAEA886981E916C67ABA2456896D440A98638F28B6298840842B926998302D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 615c66070620196e6525b08308cf225cddf4c30051bf89ef45de484ebc74b2e7
MD5 51c825a350e419c31aaf64e66e7b9a7d
SHA1 e6dc400d9db4ff6cd3d2128662c0af1d5bc34133
SHA512 0339fc1a302f177513412c0348c61b2e7174d069876f15112b6a07073ea2eaf48f864ff86fe9c80b4bbc4881f74267908642e602b98c5b8c28d0b8f32aa98c41
TLSH
T19DB09286CBEA886981E852C767BA249A856D440AA8639F29B7298840841B925998302D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 fcb9664353c6a32766681ada6458334ed1559ea66d2cca5ca558b3ff04bb74d3
MD5 97674997c91f2752cdcc3b6a2e3540ac
SHA1 ec2317de509a389983a895c3f3df36c336770561
SHA512 ba77ecbb1e6d2dfd5d40e68238caf7549c709d7f4801e17892a2be54d395f7d3e64f312b560c029001407f90ed3150120e8ac6f2431230e1df270ad4fb900267
TLSH
T1F1B09286C7E6886981E912C726BA2496866E440A98638F29F6298845852B926998702D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 5eb5c58be1924ecee14873e4a62c3f490379a9549e007f8c007cdf693b83ded7
MD5 f1c34299475a0b00b8331f6fdeff515c
SHA1 42f3d0d5e008a2f08b5d66ab726fbed79b5efe0e
SHA512 d0427c321b2c107138204090ed7555e302f01ea3a2bae9d62bd8e2f39190f3b2e6d1491e6640a95fd47a3aafba217ef543d367c607ceca93151ef4d4c8657c91
TLSH
T123B09B45C6D6485981E812C626762555856D4415DC538F18B61584408517515954301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 4560a46fa354c5bc82366fd522aa255dc89f1bab3e8c2624612bcadd64c7ae8b
MD5 7f82fc9bd6756ba830047859faf363bf
SHA1 f23a1a4ca9b7b2586d6a1b0c25783ab8c7638da1
SHA512 a5d538b1bc6219418d61c7e8cc4e0ab8dd9a6782b053fd92e4c40057c40c951d79efc332de2d2c92304f3ebb80c141a1696794fd7d5b4e4d1b1d5d07778bfd8f
TLSH
T136B09286C7E6886982E912C736BA3496856D840A98638F29B6298840852BA259A8312D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 26423cc6ff434111171ad59d5d6a94d8ad722b06d5ef58aef2b2f32411903780
MD5 38324dcc463b093fe0390efe6cb211c7
SHA1 e668198b2cf91451d50556e3f029e2f3abf8a2ec
SHA512 a5610870d3d8a5e8ec75e9841710160d754d66ebef254c0d03975009c9cc902b5f692f311fcdb1a8151f877033c5b5e33c3539af2d233c40914b6a31488f6c2b
TLSH
T150B0228AC3E2882880EC02C322BA2082802C080A88A38F28B2388800802B800888302C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 fce7b4b2813e51fd2488d11f26b137ae1a2accb1a412ccb1ca3eaba5ba39d1f8
MD5 e181d166db08a7ac76a91c6a346559c4
SHA1 e6ff64b764e9b3933708187ded2579d8fa20ea8f
SHA512 c0d36a83b38ce8f06d67717f6168b6e246b190885f3e3c8e644b29a7e8cc84659c0cf5661cee771509041d4e4997f2eaf7873655329b33f476b67e4ce74babd8
TLSH
T15FB09B85C7D6486982E852C726792456856D440558534F19B7198C404417515554341D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 7245a423883ea3b8fb9cb06d0c054faf5c9bbf193529933bc516eb4ba1854a97
MD5 4bcca85a32f40b552d7c6fc012f9c9a0
SHA1 fb1a88bccb82051995288191d4a0205c43765770
SHA512 00f061cff07a9a50bc85b9a062382e4ae509efc421f56874bc5b7d94fb0180be04cdd9fc5f3daee66d147b9f2b72b74e44c09763cad081da41a8bcaa0316ac69
TLSH
T1B4B09B45C7D6486985E912C726752455856D440558635F19B61584448417515954301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 62f95ac89f28b1c0f9962427de812e34d86ca50c28c20b672ffabe2d75b826e2
MD5 ad8f1b5b013d348c73b2b1f9cca004bb
SHA1 695af888cf8af0b0b30395d82ac3f73089a602d3
SHA512 9ffe956f0a99a37f57ea1d4e1645da327ced7af0fd2cbf50fe10c4df5fb5ce1147718b3e11b827345d4f73bc2473c4a9f385b5919c04fbfb6e44dfa480068b87
TLSH
T1E8B09286C7E6886A81E81ACB26BA3496856D440AA8639F29BB298840891B915998312D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 675d0838bb22aee0ec8b55241487a7e44069803001b1d590f36ddeaf12c9207f
MD5 50a679b7b23f1da86d82f426135e4ab8
SHA1 138c63084e0a7b04498d9a125726fc1c1556bc2f
SHA512 69205831f650947ed46b042a526ed4df86a6f3e297efbb1ae557d85481c3a8720b21034239d9e2e044b3fb2519e1a6e4b4bac9a69f5aae3e5f5cf06d1b5188e6
TLSH
T138B09286C7EA886981E812C767BA2496856D440A98638F29B7298840852B925998302D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 32a11980c70e1b5efd8ba975a0e2467b3b8191f0548ef458c0500506cb371e13
MD5 a9a6e1a54f2072cc408e99f42e44eed8
SHA1 3c901ce2479018a4a9000a1c4ec2fac6b01825ab
SHA512 7cb923922b82b88ce0d81dc6dc0ba01be3921b90d6caac1103d5baaf869f8eebec924aa9b67513dd0dccee7a238924015112f80814ec56287abf57d5d25f7cbe
TLSH
T12EB09B45C7D6485581E812C726793455856D441959534F1DB71584504517515954301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 0b63d7f3c0a971edd7a1b2deb1a49b161c0af5ecfc01339c68d99f049231c567
MD5 39c8e621824d5b2bc92fa48d23764d3b
SHA1 b8b046ee02bc182c060f7bb31f4c13be490cd4c9
SHA512 affbf1affbc11bc4ba9b84c54afb37fd7a0fe8b4bd720f6dd203f236183c98cc89c976c37a045442fc0823a2674c4696fd98e4e3681655191896c2f4583f3c6e
TLSH
T1E7B09B45C7D6485581E852C726753455856D440958534F19B71584504517515954311D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 d452bb97725d35e38fa4e1e2f6f74627abb3a238da5cb38aa7cfb48819f6bd13
MD5 32bd63063586e97f75ba03c4a57a8bd2
SHA1 27a1425db66f0f3143ccc48170c205478c605e6c
SHA512 c7de7949896f027cffbf2d952c8f062e2ba895f2539aa4c86bb559a5fbdb4b0c1b91b96539968f8a77d9508a63d39780190b728d9d12d8300ff3e0d66663305f
TLSH
T1F4B09286C7E6886981EC12CB2BBA2496856D445AA9638F29BB298840841B915AA8342D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 aca2971adce60f6f1d06044d450dfa2740eff911102176ea566f833660ecb10f
MD5 1dcc2799c661cbf815cfa3f50dd1ec9e
SHA1 ab6016ec601beab5c5d606ce5a733ee1bf1b3d5f
SHA512 c09f51257ffdb859c8e107f87bf6e9880d927656bcfc582522891e7dc9f36a36a5371ebb95a3cf038f632515a387fc839129fd9ca90bafdfbbfa9c0a35992904
TLSH
T1E0B09B45C7D6586581F812C766756455856D441558634F19B62588404417915955301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 ee55559996052bfbe4b18adf121542214cfc03e5aa6f781ff258f6733843eacb
MD5 b748cd432aaa73ae38d8f01f9eb95718
SHA1 f1d81f74e1cead8a31e7cccb9f9154158b829f11
SHA512 50e109052f0083e477b423bbd36c817eaf0af6c5cec533f30ca410036305296aba56fcebfef5222968429e8701fa0e8ab219db272d1fa402cb9b85d10e612271
TLSH
T1E7B09286C7E68869C2E812DB26BA6896856D440AA9638F29FB298840841B915998302D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 c5f3ba68751e2565e91a82fe66f4bd8ead99e9303cd85967bce246bd318987e2
MD5 fcc3cec1ef835875290fd47f74463675
SHA1 de2f36fed1d7e8d75d948c470cec85a47c99399e
SHA512 5b050484fe97ac1839985784578c9fad0232fd7188b6d7b3361cd825c49db32d545b4a953f18345df47606f7269a062f7ccf3b677915c8577e18c9d1c1b6fa4e
TLSH
T15EB09B45C7D64855C1E816C726752895856D440698534F19B71584504527515594311D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 1801df7edc26cfbbacae0662ad81c0892f0d45326dbea1e69fb851bbe36d2501
MD5 659ded90e88bca3289fdf32b906959b1
SHA1 7e916368925aabf0a1cacba8941e87fac2762ed2
SHA512 fa742f1cb9b9ceded9bdcb80ac5baaf698c8e9a125255a1b35454491e7a2c9d3a51b5d87627b3498bd42b28f5c9b6508c0a1af8fdb2e692af7b3542fbf5231c4
TLSH
T132B09286C7E688A981FC52CB2ABA2496856D440A98638F29B72A8850852B915998302D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 ab2da1ec4456a279fbaf94f1339329cc928f8e4d4fea6d07cfc7d32b1e3c1c60
MD5 180d81bb1084fb50baebbe77528b7081
SHA1 89e454525da03da6bc5073c5c0ab60d040544ee4
SHA512 8d5b2181412eaf8a833c56620d4cd94313b1c2badd95c155bbafc4c1a4123643260410a100595ef81d75615160e60690fc3794ba340319a4978a3c3bbd7e6fb2
TLSH
T1BDB09B85C6D68855C1E812D726793455856D541598574F18B71588404417515554311D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 4f207efd061c06e1ca6c01e575d5d06575c171406af95f9a385a78d75170c29f
MD5 d7f63634d391dd6e44e473921d20b9ad
SHA1 d8569b0d0da9e5dacde7d58ff0b347a87cb53bed
SHA512 620270dfe217db7d0fa3fb01e40806ce884baaff7de6c688860b7baf033690a1c28de58d23c0244a04680533847ee8f877a419a227ac441794b2e5f8704faff0
TLSH
T189B09286C7E6887982E812CB36BA2896856D440AA8638F2DBB298840841B915998702D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 72f05967a3de6b63c9e3d5b6b8fff7f45212b8dc2e3c09ba21c83e7a1019e4ad
MD5 daf40b9d33947295a94236fe09dd2784
SHA1 754e9c7a1ec1de2d6e097f592e5d500503a20670
SHA512 f61997ecdd07155f67796f51cd63780fd265cf5cc0d0ddedffef835f0e1575aed73525968ca271aaa48981fac57a87ad6ff6f4d7ea88cc04d48b243e4b88c9e7
TLSH
T1C0B09B45C7D6486581E853C726752455856E441558534F19B71988444417515554311D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 a2a2156ccba48bebd93719e05016ff008d904e0cc0e6dcd9df834e438766a685
MD5 1fbb888486400541cd3a9a6d6ddadb42
SHA1 1489c7ee633ac9035328f8f737a4f7e4028f1e6d
SHA512 09f1faf25e27de1d38509dc60d5d3dabd7d95c6c1c9911e866e789799ae3a002714ce2709236234b88fd8b87ea25451e75c7bf303edfa07b7450b2c49a0e7e4d
TLSH
T187B09B55C6D68855C1E812D736792455856D44155C534F18B71584414457515554341D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 d454439d49151781bac7a2c3cabf5b619ce69f088ae4c7361524d1c2a35c8683
MD5 c58d37c66c823d02834825ec71a8ecad
SHA1 48ce3b6b0b062ae601dfd6599e6d21fde9d5bda5
SHA512 aa1d5d783738ae2a85fb1c42123358c4af4ce798030149c8e9680b18a549915a8c5665876003c8790f0199564c35ca512d36c2878da380b81ace754eb8fbf90b
TLSH
T179B09286CBE6886982E812DB26BA6496856D440A98639F29F72A8850852B915998302D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 28ebfbef4bb661248f28e7daae8847cddd4369d5071ab1a1541369902098cb9a
MD5 42a854a5201f9d26bac97a19f63371e0
SHA1 a553053300c2cfa46145a16919b53fc196b26081
SHA512 0f093ec6285efeb74e6292b014773dd303a087ceda8ef17dc69f7f95c31035356bf80ac01c8fe7926811f2d49ba3a992389991a352ae3a59ae581fbbcb64a8c2
TLSH
T1F3B09B45C7D64855C5E812CB27752455956D440598534F19B71684504527515954302D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 86fcaa6275f8a32c47de662f4c7c07875a453efa750728411637db2ae95acc4f
MD5 db0c8dac3ab94d8caea74124f71456c3
SHA1 42fd69c54e25935d2c68433b32bc8314978de72c
SHA512 8e740dfe03c4390a715e62afab7379db5286dfc7086bd763923a7d227cf0cf4bd556910cb18944712ba04f9e2e14736164ab177a12aad1c80238976cb1c6ab8d
TLSH
T126B09B85C6E68855C1E812D737792455856D541598534F1CB71584444417515564301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 8f81af8d287761b6775d9d348e6060a5d619733ab3aeed2a71e042c24a9b5b50
MD5 e042b041edcd810f527fe79409671906
SHA1 24efa6e8c93ada2f1402fcefccea17f12071ff5e
SHA512 6513df223ef8cc0bc5cf79efcc3812e7b893afd84746bc1a807dfa331d607069a70fa6b6aa365709fe1fbca496b239f8cfc70563533e496b31ac27c7a958b173
TLSH
T113B09B46C7D6486581E916C736752455856D44465C634F19B61584404417515D54301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 7937a35bc8449782f563ee21e4dfc52c7c30e9f714507ee257ec8e94685ad30a
MD5 7239ad8f132e34217db3b4e3f204fb3c
SHA1 60717dbabf799ca6e9fc0e540ac25f57da039b79
SHA512 bdae894af239e1c93629231d87da3bbc30a44bd20ac488cda2a8de89f04bab5b559d783206eb6f2869afdedeb41db24b6705ccc9591c7aa9de4a346483bf329a
TLSH
T108B09B55C6D6885581E812D72A753455856D44155C634F18B6158C404407515555351D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 d213d5ce38de0dc7d0e0c3f594c6937b331edf6159e8ef05070f9533370918ac
MD5 fdb7ac00b39df627a1a66df17b851075
SHA1 cc6b9179022933ebb928fe06e2175bbcfb52c0b0
SHA512 b05b9708e8f14ad22e51a727b1915906194451d6f069b37404e91eec7f77d8d0f2c74ef92bf725e7139bd18fc3bcdf05146adef4915c660042c2e8d00615a22b
TLSH
T129B09286C6E6886A85E812D726BA3496856D441A98638F28B6298845851B9259A8302E
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 542c4d42030268cd3c8788f918b1cab4d6bdab65315aec3b5b96f16b866c4176
MD5 8a91f916e0bd9d82da65028fcec85577
SHA1 ac84857cbc01e6d5442e091bd149e0c9e74aac3f
SHA512 2866aecf81edc2eab2ea4ff79fe2babeec0f48eb8a9ad2fbb465268c9b4fbb39b11a300bbc29f346c22d9d556638adb7f1b1e2fa0db41db7e2b78bf9bc321869
TLSH
T1DCB09286C6E7886981E813DB66BA249A856D441A98638F2CF72A8844840B9169A8302D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 ecd209ba17ec40af50460580b31eb7e848992ef08c4dda67e4ff25cef319e878
MD5 d00993fc4e37f22a2f4e01d7865bc8ee
SHA1 56035ba1d68e98b50ef39fa1ddef507064097624
SHA512 d9952b8f3dd58b47060bfafba282738a18cbd850542d8b494699eb264a706f66dd8a71aa578c5c137c42f536220b2308f3640d173952adf68f14a947d6c90920
TLSH
T184B09B55C6D68865C1E812D776792456856D44155C574F1CB71584404417515554301D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 91e401f10d5e9d3e63a43742a8b6a6a9ecbcb2c2baf8b03c10fa37732127893d
MD5 2a7113147e95195afc97c719b28b7be9
SHA1 445f751176f9aeeceae12fd5d3a9665e54c261f7
SHA512 539809c65855c29579ed11298ad7e5ad862c35c492d09af6b2afbe43ab2905f62cf60559868a1c3191690b35f1eef315e5e7f8db6635397ce882c691db30baee
TLSH
T19CB09B55C6D6895581EC12D727752455856D54155C534F18B71584405407515564301D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 117B
SHA256 bcf06b5d5e399c02729de8ad3f6742c1f34370db687e3d43997883d8e7be6384
MD5 01fe943d4ae23aa5ded128e8c6489a45
SHA1 a798e27bcc52a907206e1683c12433ceefac90fe
SHA512 8254a2094aea8ac49513b107526e8b5e66447b8a14d3ce66fcd4807a04a24292c0bfa6eeeaf0265eece1d8d2cda5d1e06921dc6e61e0000dd9265bd5fe83297b
TLSH
T1E2B012C2E2EF8C7880A836E35AE7AA02816D440FDE638F18F614CC80C41AD05C98300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 2040f5215298bf0db88cd879a3dd91318d6d96f80babc013c3282d787ae80e79
MD5 b54dadacfe5a091a354971e48fcba555
SHA1 ee770f925972e84fa6f79a0f5e20ce59ead02098
SHA512 d375e7875226fc45e745a81e4f119f1683dc055e4ec3b76eb5e7b866fb12de6ff2d91b7d0d1689979f8288b688357f362c24061605d0943b0b62b11e4dbb15fc
TLSH
T11EB09282EBAF8EB9C0B9A2D352AA2A46856D540A9D615B1DF608DC41C01A9169A8300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 b419509cd3f6aea595e5a14ca594a3213b4ea0a85e1ef176dc8a906769a59506
MD5 5f6e78d34d12ac43defd4334715c3fd1
SHA1 27d03225d84bda1f70b5e1a728966410772ce1ab
SHA512 1332ec5adf387ba742f39244c445abdd5388f541ee5d91b291ad83a15da0b6ef6410a5bbd947c70b66781aaaa349d48076a25770d69314cfc9055eb4380155d2
TLSH
T184B09296E7AF8879C0B9A29352AE295A866D940A9D615B1DF60CDC40801A916CA8300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 855452a867b48655d90301d52e68a272f576f55d3e3785ba5f277fbc24313e0e
MD5 fa24ebb61d59e3a64ce3f1b2a016dca1
SHA1 94602380e04c4fd32ffdf1ea8bd4d3172615cc08
SHA512 3091ee4642cbec26f696f766694be9c4917123785f23cf121a0ae191e2227fd68cc13bbf0f14adc70c976280296172364345e4129b3fe4fac98b8159daa2e1c1
TLSH
T1FFB09282E6AE8879C0B9A29256AB2916846D550ADD619B6CF608DC40C01A916CA8300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 192d1984274a44f3e5ae8a63eced6a62d4c2eb7da708dec16824b20b877f7a95
MD5 7ee0d7d1a648c57e57625134d1c276e1
SHA1 2aff587e7f4e9236d1f5d77d43cf4c5b95a288e2
SHA512 368ca15d85df8cae1ea8e80310c7f33efcc93a9c71374f61e3cc3031f1418f942ac6d2855c345d7b0f49e2163832fa2818849a81e4efce6ff7cb851d5766e178
TLSH
T1CCB09282E7AE8879C0B9A2D353AA6A46846D540E9A615B1DF618DC40802AA16CA8300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 0a82f6529c3c0f0843cc58f47698aabb0552445a2268fe9a5ed3c5f5c1f64f30
MD5 8fb007298cd7f3cbbcce803804e929df
SHA1 ab574548ad7bbef1c452c3b5d2bf92d0c0f6a0a3
SHA512 f078dfc13a164fcfbfaa3bbd36679bebcd76e8d51443b4bbbad8d45a0f6d4ffb7aca686cc31802aae74a34a18f9a17fa27f7badf495df7b2dc5aef1a354079d5
TLSH
T1BAB09282E7AE88B9C0B9A2D25AAB2946846D550ADDA19B18F608DC40C01A916CA8300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 e004bd7956b657126f65ede065b69a62cd7abfdef027265d07feb0189c2b10d6
MD5 61ea605698a29f2d4e3168bfd53492a4
SHA1 ecdf3f29de4aa1eca293d745a3443e2b9c15562a
SHA512 3f7ea23499afab19f250e02b107ad7fbd50c83c8da68986ba4b67c485349742f6ec37a0dbf03d41a74c3758ae4019ed1a386353447229ed9c266f27df7054dfa
TLSH
T1B4B09B86D76E8879C0F961D3525E1945455D54099D52571DF50CDC408419516854300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 62f09236476caca00e4083448477999cbbab9c7b01dd52a9e82d2cd493a7bdff
MD5 e71c91ab6c1fbdea8d3b684b19cfca69
SHA1 6807ec5781cf65e295d72bc9236f7aaa1ce8e778
SHA512 60b638251bb5ab38bbf0f7be88cea19891a6cec08efa5ff832f65c4eaa6b70fac3a644a6e19509e74cc51fd10c0029dbdafa4de386cfa59b905bcfc8aa950d09
TLSH
T17EB09282E7AE8C79C0B9A2D392AAA946886D594A99A15B1DF608DC40C02B9168A8310C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 e167198979cb78ade3dd6caf6fd4b97b7749eb291790ad7b1c539389bbe7bae5
MD5 e1ba53046b4d0af469013a7e0440dd62
SHA1 299f464c931742d7ba0f2978c45d209e6490493a
SHA512 f5e7e0b858fe9884caa960c9b50d0746b9397f615ce8e595246f3b0ee732dd8d2b5835eb67eab492baeebd93d91d4ddb7f472d75533e45f717f610d2b519d6ff
TLSH
T1BAB09282E7AE887DC4B9A29352AA2A46856D580A9D615B2DF608ED40801A9168A8300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 be0dd5354c21b14dc10275e307a8a6edbf84e14740630d04984f0d4e58777e45
MD5 d5aa44e82ba0ef33250dc80ae767dbd4
SHA1 82535b3b49c41aa8c26f35ebb4d40b7bc60b4b89
SHA512 441e57b3b809b864b2630d873dec4f00c8f9fdbc51f25a218c707f8f1ed0743604f2977091034188e30fe291b67789658f848ebf12279d3942de7ad0275779c8
TLSH
T1F3B09282E7EE8879C0B9A6D393AAA946846D540E99616B1DF648DD80822A9169A8300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 9480c0befa9c6b6f5036f6c038583187d8f0cd94822f88f07337a9e286279767
MD5 3e045394764a3a0d54537e387d2fe74d
SHA1 4759c8c8fb56a77b3d0299b4d55f2fc08985bab3
SHA512 6b4b9e6af17be86161f7d2aaa49413517a24fabb9378e4abce278a8701c2c8b347b306de439c0fe1aa6d1925a39da941881823e457e041a7b6fe982a66e69cf2
TLSH
T142B09282E7AE887AC0B9A3D356AE6946846E540AD961AB1DF608DC40802A91A8A8300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 1b0f54f6eda4d71db222f344c3c646c281e066dea6c72aa751235f7bd630ae3b
MD5 398fa98fc33c90b8261574bfd8a52bac
SHA1 9661cb1d5e6ff3d8e3d37a373c502a93cc3f84a7
SHA512 98f8a9d2c0f93896c33bb4da3152657c1f2bce7d4964b38336bd5bd69552387f9320d6bc887827b30c2fab2872bcc1840de58467c873792b5bcdfc4dbbbfdea4
TLSH
T142B09B81D7EE8875C0B951D3536A5945445D55099951571DF548DD408529556854300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 9eb016677ad403ce526a3e33fbd71b2df8835deb4ec508283332727b432fb36d
MD5 0aba923f231ed57bb33eca25d13d83f7
SHA1 2b5e1de22d40826ab9b70d98c36e8e9993c929e8
SHA512 1df5dafc7f903f4953d57f29a7db06984b6df0a3493dfbcdeb90d36dd1bc8a6f52ea9a4f2f8a8815d34f1a130d9c9147d561a2d03ba06c1eda91a46daa750992
TLSH
T14BB092C2E7AE8C79C0B9A2D352AA6946846D590A9E615B2DFA08DC40802A916CA8300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 2e0cf20360c0b8a97b4a4a72e2e97ee73cf31fc85f92edae32d6d1ebb2f33793
MD5 c58e30950481488fd8cf9a591efc2863
SHA1 cda55b6dd72379ab61a78ba9f3881f54ee8e0757
SHA512 bea1666defa69c32b8d9f5476241e01737fd4f5830c48a993e788b99bb84ac4a1c10bbe7f0330bcc980339be5fc0e6ef490e54cc341214bf5bc69c7017ad7a40
TLSH
T11BB09282E7AE88B9C0B9A2D353AA6946846E550AD9616B1DF608DC40802E9168A8320C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 715d33f7fd136d9e3707bdbf383f9ccfea3f3aa8ac763bc80df690d8512bf6d6
MD5 d98ed86ff77aae966bd83b4e99fb7709
SHA1 81ef2c8c005d06378d325f5348aba01ff8efa378
SHA512 51edc53dee13e67bf0ed3d8ef595204768f507ee3f4d813514d5ddf59efda1d33a6f5430f8509a117951a4b37fc74d9b8b8f014ab7a4902dc0a5149e32e545e1
TLSH
T1ADB09B81D75E8875C0FD52D3539A5945445D5849DD51571DF708DD408019915854300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 c9ed48e758e9b8dff98e3da9e804ccdfb50ac4c6c1bfd2121feffbc3a4685609
MD5 02281ac91d0e53d4b72cf0fc83fd4329
SHA1 07a794bbcd71bcfa4e1c2892aaeced64b530e290
SHA512 46ab7c6d3b37c8ad0b16945c501cad3445f9cd778ffab86541797357153b03673f2ddf8c3f157924f7ffd2d5c38e0ce53b5ceb37d5f0b88ac6272fad98983c65
TLSH
T127B09282EBAEC879C0B9A2D352AA6956846D550A99A25B1DFA08DC40802A9168A8350C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 780fb2102c310a73e47816183dc4bd0d78ac20426d1bdd9498837fa34ef57834
MD5 dcd9ce9d2cacae3fe84a78a7be7f9da1
SHA1 03cdf9341f063e3612a89fd9437d9a05901cbfa0
SHA512 aff761d4f69690474fdaa4ecc94fa0b9a59c5e0bb00ddf02552d5d196353111e01fa41cb8689223205931207ebbe232beaa7eba6ca65c91ce0e990022fb555f3
TLSH
T135B09292E7AE9879C0BDA2D356AA694685AD540A99615B1DF608DC40802A916CA8300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 37a387094a99c4100f418ce0ea8c4ad180439bfe9bb564d04eadb34cd427a7e0
MD5 ae990cc890475ddfc011b640d47889c9
SHA1 ee9d9a2ee093142351d583903b517e16efd8593a
SHA512 6c4b4f9f433ba3136df8ec5a3544f72e5c5cb58c9b79fd85fe75c219f30bd593145006d9791eb38c49326ea0c1d11e23b6573f79fd5194bf6be98b9cdb7c3ea1
TLSH
T170B09282E7AE8879C0B9AAD352AA6946846D550A99A25B1DFA08DD40802A91A9A8310C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 5af9b2f4fbec946bab8a007efc578fc202ec21fecf3f8d71882312575aa32606
MD5 2a86ec6aaa3bf64d6765e11f4e71e913
SHA1 5feb96667d55c7779675f2843fbd102848e61b79
SHA512 2a5330f0db465c32dc8ec1e89d4f89e10921ef94d07396c063c2b5d5428738fba381205f34d783b606daa5b67aa53c7a793ceba77fdc736c1c75bc3523fee971
TLSH
T1FDB092C2E7AE8879C0BDA2E352AA6946846D554A9D616B1DF658EC40802AA168A8300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 0e6fec5c49338dee8ea516527f337aaec97132bd5d6ee48c3553220e153460d3
MD5 f0192b19cb259743f5d32d7bc4dfcc9c
SHA1 bf3ff3447dfeea99463874b4e4f328b7ab58a35c
SHA512 a654974ed5fe625d9ee7c3977f67cb609f6d65473fda20b605c362db7f5b5abc361de4e45be41f8447247fef32eab1ba8005b61f7de5eb5fc8543f4db296c180
TLSH
T17DB09282E6AECC79C0B9A2A352AA2D46846D550A99A19B18F618EC40C01A9568A8310C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 bcdd4f6f827f65182fc36bceef712823fcce24aec73394637391f0ce745a84f6
MD5 7be4743b6576b8e2dc3df5725eff04af
SHA1 c73fa7407842a8987dd8edb8c59d3a8be68eea63
SHA512 7623dd0e0e14c745687194b1d19383d0b42c3cdff21470250423e29275b23eca06cb2e5a363c3647d6fe0738099fdd8333d98d63f8756daf72b788cd32695568
TLSH
T181B09282E7AE8879C0B9A2E352AA6946846E540AD9615B1DF608DC40802A9169A8310D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 fe710459f5d62976dd1a3c55ebde5b0016e53035d99d1aa992f9edc7b76410ea
MD5 ec560e1f4b3f82b7e3ee75f2dcd9bd5f
SHA1 460bb19c4ffc57a9c4a28c7c39080e1848969a3d
SHA512 17d99bcefb1fc11843ba49df8a0fbfa5c6542b87f26fe7ea93f108ea0eba953a6db92e7cfec0d7a88532099917ab3b07508926bca40859331e0c9e1442e773c9
TLSH
T137B092D2E7AF8879C4B9A2D352AA6946886D580E99625B1DF608EC40842A9168A8300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 fc11169b0373f23eae44e72a0816c5477c3ed41d9ecb721ac84c8b5e4258d369
MD5 b763e7392ccf7bc34b944e69a3fbbe96
SHA1 4248d67778fc36809bf803f689362a9b8a338589
SHA512 eb69f3b7ee5e0e6ab12b2f43853215b67beccaeba1575484b77a3534f57c3491ea20ebb83418e7148b2c46fc44e1566e668e24ea9ba0ca2c89fbbac6f31e801b
TLSH
T111B0928AE6AED979C0B9A6E392AA6946846D540A9D615B18F608DC40810AA268B8300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 42ae8c3d44b6d6914fcedcbb2a3ffb02a1b6f8dbd8899f344b7be57c9a62248d
MD5 c04e5ce732812fa81c73917b7293251b
SHA1 b5d506ebffcd32b85b7a564181a17b9aedbc86d8
SHA512 52396985e2c0b0a48276c869084d7ebc45d2616c72a76ef7124a5100807bf31792eecdbc69a3607208ac3ed648a317951c279a909c40ed6999168c4281aaee23
TLSH
T1D8B092C2E7AE8879C0B9A2D357AA6946846D550AD9625B1DF608EC40842AA168A8300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 a959e46c729a7ab6ab985229274a782279175cf727fda38a4629a1663bfccf39
MD5 fbd0cc1c863755a5706015b4fda099f3
SHA1 b20d53130006a93f47e9a6e45415d7361454046a
SHA512 fd602144cb7fa8cccd7fc862d95baf254537fb63919b4a31ad57a798d3db22679309d65c9a9a74f197c624d13d18a8fe5171641055ee2810153911431284e700
TLSH
T185B09282E7AE98BAC0B9A2D356AA6D4684AD550A99615B1DF608DC40812E916CA8300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 3721b54517b99e3382ce8c5616e8468c9a5dca5b345cd618f5cead414e681f9b
MD5 54054e5f96bdea423c289ac6c4bed488
SHA1 a916ebbe4d715b9d59e4fd03e73ca7793eb2082d
SHA512 7aab41779641e5ea2b4aa8dcd5e6f2f717bb4bfd004f60cba6bbe391bce15d6c0e2c7a4ccd59962b49cfbaa0b0f4a771536f037f20191a9331e617ca1473f436
TLSH
T182B09296E7AECA79C4B9A2A392AE2D86846D550A99A19B18F608DC40801A9168E8310C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 13212956433c5961a9d0f57f023a04e72865b3aef822426c626785e774a8a73a
MD5 6cf503abd3f715e7203b207549bb080e
SHA1 1272c5278a518c3520d51510f95a781ccc0642ae
SHA512 7c0c00c2575232910ac37ea6a83a9b28b922733df763cb59045cb5be3657c20b1626a6d6ad5d170edf138c7ffb7d38bf81ca22c09af750b77e18b4a1b88f85e1
TLSH
T1EFB09B85D69EC975C0B955A3535A1945445D540999515718F708DC408419515864300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 6644e38432c9a689e31b4c31c6e869bec1fcab21b10be48d2c01fe6d0a7044b3
MD5 2a9fd4d5dde1ff90abcdfc701b610379
SHA1 b91b9ef978ed16a47a528c88fb87146efdb241eb
SHA512 405384d319057c19d0c222d0bad01260a3c7608129e5b40cd645a7021e3c8ac45b0ae50da2e9cf67a8200812e2358c667ce313b6d00d7b8229fb589d980aeb81
TLSH
T19AB092C2E6AEC879C0B9A6E352AA2946846D540A99625B18FA08DC80801A9168A8300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 de617dc6a77aa812648f66ca715750492e38ad23682dec6d6dc4ce5a7c2f5a26
MD5 2b736313e54c75fcbd448850ee108399
SHA1 8feddc37ba25d1a1c968d03cdbfb7e71310cb8e3
SHA512 1801573f3d0eadb6aef5008546c7cbed6dc3a7ce010f8d68c6dd627c4494bae539c6e513c4e2857684b0a608dad129b6ffd6e39a77be63ae52d04b66a37b349e
TLSH
T1A4B092C2E6AEC879C0B9A6E392AA2986846E540A9D655B18FA08DC40810E9568A8300C
MD5 SHA1 SHA512 TLSH

Submit Download

BridgeAgent.exe

Path C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
Size 6.4MB
SHA256 50fdd8477244d8b3a59aa81bb2020ad2aad38d557039b36a38f6a8a74f87a969
MD5 722e946d22082045a78b7b5bdf9acf9b
SHA1 0d5b68ad9a01774739da97d504c9507bfbb57f2b
SHA512 14e5736e791c8c9c610d6b483cbb37db53ca8c82614a96e58eed423d028a99efa95f9815b3fb194a0f7ca9615c00569efc7c18d93697dc9f688f3a195c59c0fc
SSDEEP 98304:KHL3w0WMOPQ2p+COJx5C/YDX6XC7nzw54:m0BOoy
TLSH
T1C4663B11BA6B94BCD557C8B483068A239E2130DF1B26BAFF418486393F69BF11B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2940-99-0x000001FB0DAA0000-0x000001FB0E444000-memory.dmp

Download

memory/2940-93-0x000001FB26A60000-0x000001FB26B12000-memory.dmp

Download

memory/2940-94-0x000001FB26B20000-0x000001FB26B2A000-memory.dmp

Download

memory/2940-92-0x000001FB26A40000-0x000001FB26A5E000-memory.dmp

Download

memory/2940-95-0x000001FB26DA0000-0x000001FB26DBE000-memory.dmp

Download

memory/2940-89-0x000001FB26660000-0x000001FB26682000-memory.dmp

Download

memory/2940-96-0x000001FB26F50000-0x000001FB27112000-memory.dmp

Download

memory/2940-97-0x000001FB27650000-0x000001FB27B78000-memory.dmp

Download