bridgeagent | 901315b7a1368a1f824330f46afc8a5448eeb08dda2e0d31aea4a89d1731f4a8

Analysis

max time kernel
150s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/11/2026, 10:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-11-09_c531126e755d6a84fd71988296c0bf23_akira_glassworm_icedid_rusty-stealer.exe
Size 7.5MB
Sample261110-mxsrcsh15v
SHA256 901315b7a1368a1f824330f46afc8a5448eeb08dda2e0d31aea4a89d1731f4a8
MD5 c531126e755d6a84fd71988296c0bf23
SHA1 769aaf695f46ce1acf351a427228edba7794a4d1
SHA512 1ba9e01aca377d1c5c279128ab4ab716e4401008b8c2be1fff6e442b0abbe5636239a29f1ae6e9bcaf3b9de11c162a1f10b7824eb325b71ec95ddf9ba3334952
SSDEEP 98304:MFN56U5URbY8J8TAn8C2N/irGLM9n46x:AX6PBdp
TLSH
T112862951BA6B58ACD597C8B483468A239E2130DB0B36B9FF01C486393F69BF05B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

backdoor defense_evasion discovery bridgeagent loader persistence

Malware Config

Extracted

Family

bridgeagent

94.26.90.104

Signatures

Family: BridgeAgent,ShadowHVNC
BridgeAgent aka ShadowHVNC is a Windows backdoor and loader written in Rust.
backdoor loader bridgeagent

Detects BridgeAgent aka ShadowHVNC loader 1 IoCs

resource	yara_rule
behavioral1/files/0x000700000002445e-32.dat	family_bridgeagent

Executes dropped EXE 2 IoCs

pid	Process
4064	BridgeAgent.exe
4344	BridgeAgent.exe

Adds Run key to start application 2 TTPs 3 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BridgeAgent = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Bridge\\BridgeAgent.exe\" --supervisor"	reg.exe

Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

Command interpreters often include specific commands/flags that ignore errors and other hangups.

defense_evasion

Ignore Process Interrupts

T1564.011

pid	Process
3952	powershell.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	BridgeAgent.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	BridgeAgent.exe

Modifies registry key 1 TTPs 15 IoCs

Modify Registry

T1112

pid	Process
4460	reg.exe
1432	reg.exe
752	reg.exe
992	reg.exe
1116	reg.exe
2100	reg.exe
3212	reg.exe
3372	reg.exe
1236	reg.exe
3044	reg.exe
2932	reg.exe
1060	reg.exe
3008	reg.exe
1812	reg.exe
1884	reg.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
4344	BridgeAgent.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
3952	powershell.exe
3952	powershell.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4344	BridgeAgent.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3952	powershell.exe

Suspicious use of SetWindowsHookEx 64 IoCs

pid	Process
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe
4344	BridgeAgent.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 5036 wrote to memory of 1432	5036	2026-11-09_c531126e755d6a84fd71988296c0bf23_akira_glassworm_icedid_rusty-stealer.exe	85
PID 5036 wrote to memory of 1060	5036	2026-11-09_c531126e755d6a84fd71988296c0bf23_akira_glassworm_icedid_rusty-stealer.exe	87
PID 5036 wrote to memory of 752	5036	2026-11-09_c531126e755d6a84fd71988296c0bf23_akira_glassworm_icedid_rusty-stealer.exe	89
PID 5036 wrote to memory of 3372	5036	2026-11-09_c531126e755d6a84fd71988296c0bf23_akira_glassworm_icedid_rusty-stealer.exe	91
PID 5036 wrote to memory of 992	5036	2026-11-09_c531126e755d6a84fd71988296c0bf23_akira_glassworm_icedid_rusty-stealer.exe	93
PID 5036 wrote to memory of 4064	5036	2026-11-09_c531126e755d6a84fd71988296c0bf23_akira_glassworm_icedid_rusty-stealer.exe	95
PID 4064 wrote to memory of 1236	4064	BridgeAgent.exe	96
PID 4064 wrote to memory of 1116	4064	BridgeAgent.exe	98
PID 4064 wrote to memory of 2100	4064	BridgeAgent.exe	100
PID 4064 wrote to memory of 2932	4064	BridgeAgent.exe	102
PID 4064 wrote to memory of 3044	4064	BridgeAgent.exe	104
PID 4064 wrote to memory of 4344	4064	BridgeAgent.exe	106
PID 4344 wrote to memory of 3708	4344	BridgeAgent.exe	107
PID 4344 wrote to memory of 3952	4344	BridgeAgent.exe	109
PID 4344 wrote to memory of 456	4344	BridgeAgent.exe	113
PID 4344 wrote to memory of 1884	4344	BridgeAgent.exe	115
PID 4344 wrote to memory of 3008	4344	BridgeAgent.exe	117
PID 4344 wrote to memory of 4460	4344	BridgeAgent.exe	119
PID 4344 wrote to memory of 3212	4344	BridgeAgent.exe	121
PID 4344 wrote to memory of 1812	4344	BridgeAgent.exe	123
PID 4344 wrote to memory of 3132	4344	BridgeAgent.exe	125
PID 4344 wrote to memory of 436	4344	BridgeAgent.exe	127
PID 4344 wrote to memory of 992	4344	BridgeAgent.exe	129
PID 4344 wrote to memory of 4520	4344	BridgeAgent.exe	138
PID 4344 wrote to memory of 4464	4344	BridgeAgent.exe	140
PID 4344 wrote to memory of 556	4344	BridgeAgent.exe	142
PID 4344 wrote to memory of 4180	4344	BridgeAgent.exe	144

C:\Users\Admin\AppData\Local\Temp\2026-11-09_c531126e755d6a84fd71988296c0bf23_akira_glassworm_icedid_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-09_c531126e755d6a84fd71988296c0bf23_akira_glassworm_icedid_rusty-stealer.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5036
- C:\Windows\system32\reg.exe
  "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
  2⤵
  - Adds Run key to start application
  - Modifies registry key
  PID:1432
- C:\Windows\system32\reg.exe
  "reg.exe" ADD HKCU\Software\Google\Chrome\NativeMessagingHosts\com.bridge.work_activity /ve /t REG_SZ /d C:\Users\Admin\AppData\Local\Bridge\native-messaging\com.bridge.work_activity.chromium.json /f
  2⤵
  - Modifies registry key
  PID:1060
- C:\Windows\system32\reg.exe
  "reg.exe" ADD HKCU\Software\Microsoft\Edge\NativeMessagingHosts\com.bridge.work_activity /ve /t REG_SZ /d C:\Users\Admin\AppData\Local\Bridge\native-messaging\com.bridge.work_activity.chromium.json /f
  2⤵
  - Modifies registry key
  PID:752
- C:\Windows\system32\reg.exe
  "reg.exe" ADD HKCU\Software\Chromium\NativeMessagingHosts\com.bridge.work_activity /ve /t REG_SZ /d C:\Users\Admin\AppData\Local\Bridge\native-messaging\com.bridge.work_activity.chromium.json /f
  2⤵
  - Modifies registry key
  PID:3372
- C:\Windows\system32\reg.exe
  "reg.exe" ADD HKCU\Software\Mozilla\NativeMessagingHosts\com.bridge.work_activity /ve /t REG_SZ /d C:\Users\Admin\AppData\Local\Bridge\native-messaging\com.bridge.work_activity.firefox.json /f
  2⤵
  - Modifies registry key
  PID:992
- C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
  "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --supervisor
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:4064
- - C:\Windows\system32\reg.exe
    "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
    3⤵
    - Adds Run key to start application
    - Modifies registry key
    PID:1236
- - C:\Windows\system32\reg.exe
    "reg.exe" ADD HKCU\Software\Google\Chrome\NativeMessagingHosts\com.bridge.work_activity /ve /t REG_SZ /d C:\Users\Admin\AppData\Local\Bridge\native-messaging\com.bridge.work_activity.chromium.json /f
    3⤵
    - Modifies registry key
    PID:1116
- - C:\Windows\system32\reg.exe
    "reg.exe" ADD HKCU\Software\Microsoft\Edge\NativeMessagingHosts\com.bridge.work_activity /ve /t REG_SZ /d C:\Users\Admin\AppData\Local\Bridge\native-messaging\com.bridge.work_activity.chromium.json /f
    3⤵
    - Modifies registry key
    PID:2100
- - C:\Windows\system32\reg.exe
    "reg.exe" ADD HKCU\Software\Chromium\NativeMessagingHosts\com.bridge.work_activity /ve /t REG_SZ /d C:\Users\Admin\AppData\Local\Bridge\native-messaging\com.bridge.work_activity.chromium.json /f
    3⤵
    - Modifies registry key
    PID:2932
- - C:\Windows\system32\reg.exe
    "reg.exe" ADD HKCU\Software\Mozilla\NativeMessagingHosts\com.bridge.work_activity /ve /t REG_SZ /d C:\Users\Admin\AppData\Local\Bridge\native-messaging\com.bridge.work_activity.firefox.json /f
    3⤵
    - Modifies registry key
    PID:3044
- - C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
    "C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe" --runtime --supervisor-pid 4064
    3⤵
    - Executes dropped EXE
    - Reads the TCP/IP host and domain name from the registry
    - Suspicious behavior: AddClipboardFormatListener
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: GetForegroundWindowSpam
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:4344
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:3708
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      "powershell.exe" -NoLogo -NoProfile -NonInteractive -Command "$ErrorActionPreference='SilentlyContinue'; $exe=$env:BRIDGE_TRUST_EXE; $sig=Get-AuthenticodeSignature -LiteralPath $exe; $sigStatus=if($sig){[string]$sig.Status}else{'Unknown'}; $publisher=if($sig -and $sig.SignerCertificate){[string]$sig.SignerCertificate.Subject}else{''}; $mp=Get-MpComputerStatus; $tamper=if($null -ne $mp -and $null -ne $mp.IsTamperProtected){if([bool]$mp.IsTamperProtected){'Enabled'}else{'Disabled'}}else{'Unknown'}; $source='Local'; if(Test-Path 'HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Defender'){$source='MDM'}elseif(Test-Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender'){$source='Group Policy'}; $onboard=(Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows Advanced Threat Protection\Status' -Name OnboardingState -ErrorAction SilentlyContinue).OnboardingState; if($onboard -eq 1 -and $source -eq 'Local'){$source='Defender for Endpoint'}; $detection='Unknown'; if(Get-Command Get-MpThreatDetection -ErrorAction SilentlyContinue){$matches=@(Get-MpThreatDetection | Where-Object { (($_.Resources | Out-String) -like ('*'+$exe+'*')) });$detection=if($matches.Count -gt 0){'Detection observed'}else{'None observed'}}; [ordered]@{signature_status=$sigStatus;publisher=$publisher;tamper_protection=$tamper;management_source=$source;defender_detection=$detection}|ConvertTo-Json -Compress"
      4⤵
      Hide Artifacts: Ignore Process Interrupts
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:3952
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:456
  - - C:\Windows\system32\reg.exe
      "reg.exe" ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v BridgeAgent /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe\" --supervisor" /f
      4⤵
      Adds Run key to start application
      Modifies registry key
      PID:1884
  - - C:\Windows\system32\reg.exe
      "reg.exe" ADD HKCU\Software\Google\Chrome\NativeMessagingHosts\com.bridge.work_activity /ve /t REG_SZ /d C:\Users\Admin\AppData\Local\Bridge\native-messaging\com.bridge.work_activity.chromium.json /f
      4⤵
      Modifies registry key
      PID:3008
  - - C:\Windows\system32\reg.exe
      "reg.exe" ADD HKCU\Software\Microsoft\Edge\NativeMessagingHosts\com.bridge.work_activity /ve /t REG_SZ /d C:\Users\Admin\AppData\Local\Bridge\native-messaging\com.bridge.work_activity.chromium.json /f
      4⤵
      Modifies registry key
      PID:4460
  - - C:\Windows\system32\reg.exe
      "reg.exe" ADD HKCU\Software\Chromium\NativeMessagingHosts\com.bridge.work_activity /ve /t REG_SZ /d C:\Users\Admin\AppData\Local\Bridge\native-messaging\com.bridge.work_activity.chromium.json /f
      4⤵
      Modifies registry key
      PID:3212
  - - C:\Windows\system32\reg.exe
      "reg.exe" ADD HKCU\Software\Mozilla\NativeMessagingHosts\com.bridge.work_activity /ve /t REG_SZ /d C:\Users\Admin\AppData\Local\Bridge\native-messaging\com.bridge.work_activity.firefox.json /f
      4⤵
      Modifies registry key
      PID:1812
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:3132
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:436
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:992
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:4520
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:4464
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:556
  - - C:\Windows\system32\hostname.exe
      "hostname.exe"
      4⤵
      PID:4180

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Hide Artifacts

T1564

Ignore Process Interrupts

T1564.011

Modify Registry

T1112

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 4KB
SHA256 029b538bdc06946882f92b520a9698fd1fb850f94cfaec4a5462eeb62bba41fc
MD5 f03371f85b057bbd311fcc724cf25db6
SHA1 160723d083fd663878bf2a2c6a670176d32a60f0
SHA512 7f329d6dc8048fe979620bb55e26ddde659313ba54a4ef5f5fa6659ff988ae4ff51879e6f855364346d5b9a3b83fc0645e44599188022df12a01a2942c69baa4
SSDEEP 96:onxCrfVRdqWXnMsFBRd7hlhxcRdqf0dt2s4tsdd/L0rHSXksr2s4tsIYsnhrPlXL:ixSfrdqWXHF3d1Lwdqf03dtdOyPrdtsn
TLSH
T11A91C000B9ACC03726D5012B653DECD5FE68603DA7812E8CF325F59C4295F6DBCDA262
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 395B
SHA256 36553f1d535ececd380a8c10e0d50a7f42aef859e2fbb30872919cbcb6708785
MD5 fe46727aaa96d4a2dc9ee515e35bc568
SHA1 2ae29ca37b23cc772662d2867b8b8be4a030d589
SHA512 4f0f84556aed29377dbb721536011053f9df293a4afc4dd02c69e4c03ce56aa74f1469016550e1996c16cf60192c0f0e7705b2dff481b2832f3c1a28293d565d
TLSH
T178E0F844F10881B223810243A03CBCEBDE38447D93A2099C2380EE860881F6EBCDE221
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 e7edea06c0d5149492f077550cb5074d675b1e72d9be23270be9b644d7612aa0
MD5 f8c8d9b6b434008ba47e0c21ee306634
SHA1 df645e734201d974bdf047bf7f10adf64a35ede4
SHA512 cb97cb35236277bfe0164b0622745e60ccad397c35b0c5eb11925353c9ca87a1010256594d91eec8d3f90a20b49534b7a5bac9375b81505c7f3bb41138b9f039
TLSH
T15741E000B5ACC17A27C5002B643EEC99FD75643CBB911F5CE369D29C4281F6EBCCA262
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 2KB
SHA256 4cbc23a3c6e1df0f348e12d6218756ec84efe7243f39cc1bb3b3fb1dedc90697
MD5 66eba36d5ac6a05df4a92b7d7f4ee88b
SHA1 dac7fc830e4adfebf8a76757c466158d3b20df25
SHA512 220f54fecbea6b53de4ee5f69feb9d550affe6db438d1c19b4cfb22c1fbc9a967586b24e35c4df18c566e5bd853b77f939b31aa9be83767104f9d8c259872eab
TLSH
T1E751F204B6ACC07A26C5402B753EECC5FDA5A53CAB811F5CE369E15C4285F6DBCCA362
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 3KB
SHA256 fe31f5fd79dc7b6d5fe4c7502bb5046b78090600a550ae26059a6fc0c3b5a397
MD5 ded3a8374dce83edc3b40f571500a56f
SHA1 80223289f5bf3f247f54f0498c2fd71a3235ae39
SHA512 9538be8503a8231b30aeddd9f0193dfd3284cda6ebca4a2a0cc3c90cc4f3a065f9e8fbf43d98b57d1062a5bf1ab880ef484d530c8770203a8bc43db3d2361c19
TLSH
T10C61E004B5ACC07A26C5412B753EECC5FDA4A53CAB851F9CE325E59C42C1F5DBCCA262
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 3KB
SHA256 50897512631746e191f2d89e1b8dde7a3575ee2b17483f656091f214ac8c3195
MD5 16acceec4b2cf766215c72bc30f46e1e
SHA1 b96368dab20b3d45261dd4db50a3d148c6532868
SHA512 7bb401388b0f8d28606448cdffd242bbec539e05c2bdc1a656ccbdb52cf5a090bf15a1627bd315423706ba50d8e3cebf76f3a833844cdbc3728a13a5d62db524
TLSH
T1EE71C004B9ACC07A26C5412B753EECC5FDA4A53DAB851F8CE325F15C4281F6DBCCA262
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 933B
SHA256 bc868eb771a7eb2ed2edaccca27ec54f3ed843c573c9b5337944d76c97f36752
MD5 4a95d16711cbbc01afe7aa329cc66df3
SHA1 90995ab45cf16b35adb234a760cfecd33c96351a
SHA512 b8b2e77246fd41abaf939251f8cbdf223c947182848a9d7aa7f3b15854736f06f0829c496bc59db0d113c43dbbb62296ccd5b69b833f9ae8486c21ef791f26fb
TLSH
T1E011BA00B599C17923C5012B543EFC9AED71643CAF951B4C9365D68C4592F2ABCCA222
MD5 SHA1 SHA512 TLSH

Submit Download

bridge-agent.log

Path C:\Users\Admin\AppData\Local\Bridge\logs\bridge-agent.log
Size 3KB
SHA256 169a3a40f34ac168b8e12828f56042106301ea430db9a8edff2d270cc48e4310
MD5 e229162857909a5693993bbe45e6d2f9
SHA1 eafbb6659f44f6bfdb4d29d2e7dbfc9361bd3ad2
SHA512 c3b7895a9ae7ce7bc5cd4b68892e63e23cad568501cb3a1b6be4c632372f117612d281958c7f1026a3d504d2d1504714214241d441eb6c89644cd882367c4d11
TLSH
T15E81B004B9ACC03B26C5412B643EECD5FD64A13DAB851E8CF325F59C4285F6DBCCA262
MD5 SHA1 SHA512 TLSH

Submit Download

.com.bridge.work_activity.firefox.json.new-tBzfZEBC

Path C:\Users\Admin\AppData\Local\Bridge\native-messaging\.com.bridge.work_activity.firefox.json.new-tBzfZEBC
Size 242B
SHA256 888a4313621908714b42e739ca0203e0bd00c01417131fcc7890df03c7c0794c
MD5 e103a2d78ea5f7f4f357f5dd90fc9bd1
SHA1 e77fcbe9879e30a260c06719b3241f195278ef3c
SHA512 c159196f37c8a908ffe4c2167010c9f41413f544e36cd67a81c90033904b071df8ebedc9350acbb030cb3eb89082382a2209c0d730138264df92ae7c7f4320d3
TLSH
T130D09700681DBE388C8B03345C218E8AE168408DF7C80BA0FE42112CCA54FEC801BE2F
MD5 SHA1 SHA512 TLSH

Submit Download

com.bridge.work_activity.chromium.json

Path C:\Users\Admin\AppData\Local\Bridge\native-messaging\com.bridge.work_activity.chromium.json
Size 258B
SHA256 e44447c440811e0cf30ee46404d95464157dc3da5ccf08c7b50c43f046111441
MD5 290547b748dc394630eb7339de3d87df
SHA1 cf137c57628577cdde6b58a6d65b13f0fac0e23c
SHA512 a347f31f2ed6e1571e9817ba83f79a3ce2736477407b4e4eda3814f17514044c841d24f5e50444fee3a1f508f77a50c50c8442160a13f24d7f63a0fa1840be92
TLSH
T166D095045944B53C9C4B0F2074229E47E16C534DFBC41750FD42431C8B52F944017A3F
MD5 SHA1 SHA512 TLSH

Submit Download

root-ca.crt

Path C:\Users\Admin\AppData\Local\Bridge\root-ca.crt
Size 623B
SHA256 957e1ad45d3406539e1c84b5a8f5af76aafc758e5f4ad7c2cad74bca1cf2e780
MD5 ce1800df33717ccea6efb438cba5f03d
SHA1 8f15aeb2da1d97e48147fb064e738cc500149b44
SHA512 3e5bffa62faa6cf8eab3c2084b03c5952432a54942f1c23cc16a6869c70729aefc2bd7c93243c99954cc860b4ffef778a4187cd02f0f26748794ad0830040c48
TLSH
T131F0029A9F114D4CF05BE024F8B2E318CD46C1C7A05BF576A57900085144FA05CFE17D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 9038ec0b7b67a0aaadac28aa480257a842f909f3559389d6cea9015e5ac2f2b4
MD5 76b74f68c0d1a9cd29701aeed8ef55c4
SHA1 b256fb9c5ac28ddb1bc67d6fa222d42cb2f1b793
SHA512 c21940fd2b5a1ed7c0187dbf824518b4f2b7afc946b53a49b8f8087d2a97b1beb0b2e6b29737bd99548c942d8189f580f055c77268322f69352659e8774f74e2
TLSH
T1D7B09226C7A648AA89F841D262B87843966E5046A892166DE62AA4A4811A84661C706D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 b0281420744ee32ab9adca897b825888c898081d74e2dcf3d3c78b693e7d0214
MD5 199a77a97e09c835e23a140c0008d69f
SHA1 a1d4df2bea69bd1f0451b5504669975d679a5b81
SHA512 4f4de41afdad8e32da81bdabe659ae14348c0d6ebff989fced8b814f2aa950a4f8e0cbcd54d1301f49d096d6e05bc507d46e0f0b1ad99ac3321fc97d9fed5fe0
TLSH
T163B02232C3A208E288F800E222B03803820E0002A8C20A2CE828A02080AA88220C300C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 b3298adc587c6f6e088000352a45d35796d79c67e004d29c95353cad448a3217
MD5 b15f3c8a75a2c2b20d4d656d83d52d56
SHA1 f80d488e600bc773c0368545ba03ba6566a5f7f1
SHA512 72007a4b1d45c9a921b575047e5f9be3640901e8e2cc202c6a36ad48990cba8b861a169e85e1f7b17184e0f21238ea0d0f9ba01433704b93ee64b7591272554d
TLSH
T125B01236C7B748EA89FC41D263B47943976E5046F8D3077DF929E470C12B84661CB01D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 08182f9e2eda56b8efde1d1c6e2d8f99e51680e1096a19cad6739663554b0752
MD5 6cd575157af06924764f57dd53ba5e33
SHA1 b6058b99ccc89ab87775504bc6aa76e223c53367
SHA512 e5c50cdc86a20247b4f054251df5d881b474ee68028195c31c1f0513a43432c45e3407f3495b3dcca2bd1a8707d6a66e756d4a1753ca16b38072b6197799adb7
TLSH
T1E7B01236CBB748E689FC42D273B83943976E5146F8D3076DF52EE461C12B84665C701D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 b86cd7fdb329403a20c02b41b9f2897d21bbe5c9d5890d7e14673a32b396830d
MD5 1d290bd6e6d534037615e3dd224af7a2
SHA1 01cd57742d78c7e66079b89b6d7491fd1c449c1b
SHA512 1b49ef0d61b453254e8e55e265070f2158d8e25391918ff5d21fa2ddb3e6388b0be5f9206f4cdf04f814d66d00324257852a47e07b63031caf589dcde6f4858e
TLSH
T171B02222C3A288A288F800C222B03803A20E0002E8820A2CE028A020802A80220C300C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 3c13f3b3c384cef1d869e1e5ba3b39ecf909e488e9c25e66e309254b739f2888
MD5 158b8642a58892c88b3df690c3b415bd
SHA1 d714db5d760b68f0fada1adeb77fa668c049e820
SHA512 3a135ce24bd171e879d07e8c550077bf168b6a6f034e3fbc5115884a59aa335537a02182f2fe04ee6e86dad47a080ec957e612080f88797c6dccf2247de9727d
TLSH
T12FB02232C3B308EAC8FC00C223B03883830E0002F8E3032CF028E030C00B80A20C320C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 2c77d860d6f49ab3d123fbc6c1fa076d04f8ecefc4d48a5dd87c6572dca827d9
MD5 d13e0e3f96072052b62ec4ec8bba265d
SHA1 c4881cd71030a98f72081a4e0e2c04127e46d74a
SHA512 5a926a66e668045ff45e1b405982c0fd7362550f8cdb416fac1fc85dd3ea36af068c9dd2b68468b70b6941569069c375030818f06249ff8b34890c9516950462
TLSH
T17EB09266C7A648A689F851E266B43883965E504AA8934A6DE529A860812A84662C701D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 57769e82ee6950729c73d15038fe4e6253a9fe0bbea800730dd2d25d2f6805e5
MD5 f8549188da4e5c304fe453b99c232e23
SHA1 270804277e2d145ab5899130fb421dfe0ac59de5
SHA512 e48b7d14d27056cebb611b4b6092363cf49d5bcd2977e2fda22605f509293e7e5f8ac6234ae8a12bdf886ab6674f24b74b76160ca3ed4c7e9d4896bcad0cb354
TLSH
T158B09276C7A648AA89F841D262B4B843965E5046A8D2066DE929A964811B88662C701D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 2787fbe5e400f752452c035902ac177ff60a905f0c081d9ae28deb5231489d85
MD5 4497bf080c7d01c7ad56929d51d155a4
SHA1 9743cd5c0e271abbc8c2000dfee0284414b4b0bf
SHA512 b9fcbde1b6f18fff543174d5e241bbe3394da37aa45f7a22cf2b091436a02b827b52945e545a1b5672da3d1b3f5f1ab860fc4276fcb7557fce2f0a1b3dc4f715
TLSH
T1C3B09226C7A658AA89F841D262BA3853965E5046A8A2866DE529B460811A84A61CB01D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 99f8d3a511e8da05c78ebfa55b39f486dc90e85ae9adf94bdedea91b17a92ae2
MD5 0131f527758751275bddb5e6699c1062
SHA1 dc263b5fe660ee0d7910f2a7b095ea0f37d20cc9
SHA512 89c6feac0dc9e7fbea642e51f513af64d637bfc3351b425447bd960faec8655352769c755faa6aabb44a716f0cccca498a0e1ac70a4f171ab64a5fbd1e376fbc
TLSH
T1D6B02222C3A208E288F800C222B03883820E000AA882022CE028A02080AA88220C300C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 617edfb37ad9c385b7ef57babe41c7e35ca7111173e3e8ddbc82d74d96e7adfa
MD5 13fa2256920ef9cfb7f0f6bdc96c452a
SHA1 145d583c59a930cac4ae48d30ce736c42526540e
SHA512 5eff54fac2a577a24109d67326fd032740134cb3bcc7a2f634369680e2c67b1bf4befb8d4e9c789187141cea4e5da8cb6031f46ef5f24aa349a4ec20147e516c
TLSH
T124B09236C7A649AA89F841D262B53843965E9046A896466DE529A470812A84661C701D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 2d94b5cf0a479199e8ea3dc8a92213b47ffe6694aeda803446eaa6516ab493d0
MD5 b76e6c9a47ba0b6e05cd4d29ddb62da1
SHA1 5df615b261bdc624eb67066539fb8ce200c9d182
SHA512 d443a48f6685b7ca0069d10e3a276d234caa13fcddba7fb075c212e9f28c750ddfcf8161b35a302af532d06c6b651e03a4eb9744022a5623a0d14eddeca96661
TLSH
T13EB02232C3B388E288FC00C223B03C03832E0002F8E3032CF028E030C02B80220CB00C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 383e51aa5d6fbd605a7c574e413e813e9cfdf5addaabab4628cc577271417adf
MD5 0fde8ebcee55321761372074099efe89
SHA1 0c0fca217bb1b0834ac77b047fab17b5a50f83cb
SHA512 4a0348c7a6be039608c7e935fff229ca1ddb3a9776939b22c6e9ffad7c32c4a89fc990819ad8042dec157b2689215a968021cff7903a17637dd30d5e06e96cc1
TLSH
T171B02232C3F308EA88FC00C223B03803A3AE8002F8C3032CF028E0B0C00B80220C300C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 45cef79eb4f1360eea57d90553ce126731e28a64e050b8449cfe4a90c84a3c83
MD5 ebae98b2b7719fc3692ded2818eff611
SHA1 a1939166c968f319c7b8d8180a2b4ea7538c826a
SHA512 79fc31090e04188e48da0f7d11373fa0e32161bbf84a41ed49de05846df9e249d18036ead10180c752c6d6b50a6ce472702d72c4d80aa632158a70ccd7fbf068
TLSH
T118B02222C3A288A288FC00C222B23803820E0202A8A2022CE028A0A0800A80A20CB00E
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 cae4508c074df376314ce43b380c933b5695d3642dedc68a69be66499f03aeed
MD5 c09971fdcbb59c53e873c3c152ea5fb1
SHA1 bf9c71c569062ef5e6f1930fe8ea9d1c9bef9b0b
SHA512 fc837fe1dd7c22d39e481fc00537b00d4a363de225b4b55c7aef89bf50c4e8e7eebe237795ed275ed8f397ee9b52f2cc85f44bf1caed39dac17a4f8916a0fecf
TLSH
T19AB02223C3A208AA88F880C222B03803820E0002A883022CE028A820800A80222C300C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 cc2b664b307ecf0b25942ae7b62494583e26eb1ceb587e252f3d2d23ac2cdd1f
MD5 c8c5dbd2b841d8d30ed0a9b82b824943
SHA1 8cd4845a56fa6103b86847ea180411434128d7bb
SHA512 cef460ea64fb0e67b1c5ff2b0265ef0cf1ed61ef46fb10b8d975788278d202807aa5d2be3bc3044bc57e384c8553c6cd757c7b1139f1d5744622634462639e68
TLSH
T1F2B02222C3A208A288F800C222B83803820E0002A882222CE228A020802A80220C300C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 c04da1b79273d82b3565f543154a75d9067d08e859fecbfd427e0c486dfc8760
MD5 b44bc4a0d3afe5e1668e6a58b72d0be6
SHA1 c812bb733f701d42a7b2194319c8a15f502c5c63
SHA512 f301c4577bc9e4b4ec1cd6ca93cba1bde4584b8e7f04f0019b3f055c89fdfa92e447c6fbf951f8a9eb9039e3991369663c5fc8886ff93f692ef3664ffd371109
TLSH
T12CB01236C7B748EA89FC41D267B43843976F5146F8E3076DF629F8A0C11B84665C705D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 3539592953e8c0a0044456de6772a32ac4d52488cd4e440024426549101b0407
MD5 d2f0bc58ade1585c197e678356b545d3
SHA1 cec734262b678c046d91701c46c91e8c47eb42d0
SHA512 f6b2fa48d232632310d0a36392503f8621c714fecbc9f92706ffa2cfe23a8b94eabce96bd05db83186eaea0ba799be65c632d414b4158e6ddc8799cc01b191d2
TLSH
T134B01236C7B748E689FC41D267B43847976E5146F8D3077DF929E470C12B84661C705D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 9bc2b1dfca604beb85ec539b17b6dedddab91c241d3b73675803ab621f10a05b
MD5 a7d48b928ad1af5aad3bcb8b43f4f6c2
SHA1 1090e84febfb12c1050d238a2fe1bb0ee3f72ae8
SHA512 5d5be1a295421327283bd177cce1bea632a64c03b25b7dce99fe3e7f22c0f4ae552219c97f726e9a2dbe3d2944dee8c45f19f56ce170a3c95e7c0705ca8bc888
TLSH
T127B0926AC7A648A689F841D662B43843975E5046A8960A6EE529E460C16A84662C701D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 5cf8446f0f82d2f43628cce427b19b4edcb1ee0c16afe89ab050ba342794b892
MD5 dbb6c7ec5d9609797083f18a3b0bf4a2
SHA1 6dd642d890eac8557d55db816b614ef067f6fde0
SHA512 aad5c0d8225488f2daa3bab0addf3484463836403ee4dcd93679fdd50de62dc9d2dd6bf2cf2e772e03b8127a748176596e17a82c1f8cdb70715391f1a0cc0e4b
TLSH
T1CAB09226D7BA48AA89F841D262B47843966E5046A892066DE529A860811A84A65C705D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 2748b4eb25a9d01ee36fa242e36ace25ae59c022025b477d2efe9253f6f53f2b
MD5 872896ed4cba618c56c4bb8ecaf38099
SHA1 964ca0f2617ef22aee784f50e1e9cc20cc07d6a4
SHA512 5560d1710c446f4066ac167d8943441db642a672c2d91fe36d71f10f8cef9e303a41de2635b040693dd762a3bbb8813379516e7ce4e61fe2f8788fc31bb2013f
TLSH
T125B02222C3A208EA88F880E222B03803820E0002A88A0A2CE028A020800A80220C302C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 e1cdeac591baa86834a903f79e926d4defbe339647ac650abe849bba0397bf91
MD5 704bd96e5e6328c2e606545c23f372a7
SHA1 da5a1c6773318e391011e7ea4514f1650c67c096
SHA512 2eaa78ce2ab3f18441c37162f577c7ad4275e73a53d4fff48c98baeadb8ace1ef58ed2dfd41af455bacb9cdb768706a79223a25e04d535a4049ad9f27e93954b
TLSH
T162B02223C3B208A288FC80C222B03803820E0002B882022CE028A820802A88222C302C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 9030646b271186d8cfcb9258e09c35a64c026e8f8a29c69ff28020d87eddd141
MD5 2159c1f2fa26c881c59c3eeb78151781
SHA1 dbee2a5b732f212a68ed7346010fba1e742bff6c
SHA512 912d726aacf7c5e549630caa912bb3273f6f46b1dcf34d41e0ef4cd11b29960f4b5fa755d24518c8f467ceb49d334097e68d1917c5473754bc302c5179b737aa
TLSH
T12DB02232C3A288AA88F800C222B03803820E0002B883022EE028A020C00A80222C300C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 0c6130bbbb0831f1e48ac8babef5c171e00643c8d26e2d95ab80e21361f84991
MD5 48826d1ad552c783afdd7bbc3f0107f4
SHA1 b813bcd04104dd1c121956ce550815dc0db0a451
SHA512 5b524dd89544b0ce9f5b23b7d46c6697b066113571ae5aa560753c0992c65223d6a10843e2c4ece063d10864de8ff8df0569d67345d6572cd8832e586e61c713
TLSH
T1DFB02222C3A208AA88F800C222B83803822E8002A8A3022CE028A820800A80220CB00C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 ae72669a134fc6f45087b1e9bdb5ef9f0593c0c86ad2c34278d391d92bda9d32
MD5 05ea7109184696c71461ec1d2918d816
SHA1 9c2591611d8482d81284b40a39cfa6b1749b3959
SHA512 b1c1f09184a8baf525753c491044df1c9161f53add6115565cf416ed7d490c5179b3a8c17575b3cbee408e2cf03efdda9c07f59b43c2ca8ac3a2d2b57bcdff9c
TLSH
T199B09226C7A648AA89F851D262B47843966E5046A892166DE529A4A0811A84661CB05D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 63644f22a9aa2a05f611680a8986c4474e11454b27546921ef1a7242d7b47354
MD5 b2bfbffb60f4834baaccdec9cfe5e97f
SHA1 486727709907bd584379d33610e7488c0e8dd307
SHA512 56a68e8970fdfcbee339517d4903253d0502ea8356d7238c8b336b235fa4eb16ea7626860e5586fc52f2912257c11cbefc6999177fad5a14e6a5bb806ac5b092
TLSH
T16FB02232C3B308E288FC00C223B03803832F0002F8C3032CF228F020C00B88220C300C
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 023c46e1583a32bdb6a79aaa6565afc80f2c4c7bac4856879dc67095e9e5acf4
MD5 35a4e8a67002637b3a64ca1e19e0342f
SHA1 23ccb3ee925892a677a9ae3931328cc368c01bb0
SHA512 ca12bff6e6b176f3d3658536686605bf5b4abb2ccc5c0541feee143b1acd85c83fc1c684a07bb10e10bf806d8598a060593b1493f6df6cec0374f389368aeb41
TLSH
T172B09226C7BA48E689FC41D262B43843966E6146A8E2266DE529A4A1811A88661C702D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 1678f088e9707ee8e9f45d3c0a6f8fc564e1c2aa73e949edf35432c4cd1e122b
MD5 c7ff5a42993884e0d855a4349ddf6736
SHA1 c31373fe9ce2267b975bb089cc812f700a2e3ec4
SHA512 127a926a5b8c411abfdd90f4ef9ab713023f92db4e26336c7276012066c96eb8265fe4cfbda12830c855a330f83f3b1065bafdee82665ebf6d4ea8edb394e8f8
TLSH
T17AB01236C7B748E68DFC41D663B43843A7AE5146F8D3176DF529F460C11B84661C701D
MD5 SHA1 SHA512 TLSH

Submit Download

runtime.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\runtime.heartbeat.json
Size 120B
SHA256 1a2e5c206fee41035ad9ee515271c4997207838867616578848be7f435823395
MD5 46b6845610069314adb1f05bca89347f
SHA1 a830c4b07ed3021bf89649926e7fea4c2f81919e
SHA512 a533d4d8e207d30afe4d05755001662377cb2689a80bfbb3b65332f4c7ab34e6d404b9f6b6a541a271c550a664351208609e2bd62f5bd287cbf1300fd4f109cc
TLSH
T123B09226C7B648A689FC41E262B43843A65E5046A8E20A6EE529A4A1812A84662C702E
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f1688849a6964b71c90732d9473955bec380c8a41f06acea92492d14b57189e7
MD5 8082f8713c2cd4a60d67e57824588b2a
SHA1 318b445f2b60c3a7e9912bb05fa48d1f6d757685
SHA512 c294e99ec3e1259d8868faf3fb358787255c6bb867035b501472505c0e8eddc35914beb45c5ad4297e34e08b214747f00e730d05fecc112016b4a11e1855b8b8
TLSH
T181B09262E26A48A994A811BB22F82E03828E528A9A5262B9F619F841D24A416828300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 9fd9911260ea29ebfd08d45d3d2f217824032490703ef3ee3918f0289502d5ae
MD5 3ed3b7a6487d1387b22794d553c234ea
SHA1 e4d588b8863d4ddcf017e2556c44c28e5366e979
SHA512 8c9605a881b1735082e209e2d117f194e6ab95c6bf0be7da658976e58241c7a16ef53d2ba851fda0c2685410c94c538afb395d1a7c8ca1554e40377299893e3e
TLSH
T143B09222E26A48A994B811AB12F86E02828E520999525279E519E441D58A815828300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 c22d962df10e7324a3a94b1babc40b766ff135bbf771ac2ba03d627dd03400e5
MD5 af6334f6734d1a04777759a4d7e4f407
SHA1 3526f7b640f79aaf6ca42230175cceba944f2f5a
SHA512 959f1009723e02779b14db7480c5ec53f1e0613fbbe5b9795da8dc0fbab73c1ce9403ead2097d2d889933254a9f4612b6659ef2976c179affcfba24eceaefc70
TLSH
T1B6B09232E26A88AA94A811EB22F86E42828E560999526279EA19E441D14A415828300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 247a48fa3c6b1c54feb417e07e76e22e337a52bc1f419c7f7cb02dc4fec82306
MD5 72d238141c475ea7079a53b88a7e12d7
SHA1 8ab86d710fa0bcbfe435bee1cb27114091c18f75
SHA512 7c87f20d1fa0641aa6c416adceb51324a9ddbed0cf419e3f57941831b932489588e8c6dcb2fb978f26d96198ce560ec2162e4e7dfa377c28d2c6887106465757
TLSH
T176B09222E26A5CA994A819BB22F82E02828E521A99565279E519E441D14B41582C300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f0355265b2c24cbcd3f6cc6a914d6d72a69e8b56f4132c1c06a535362534dcba
MD5 7c9eca6833dbaf0acbb2fa98a53a9a35
SHA1 68d005a31ea07276409404c5211b81eeedcf19ba
SHA512 1ff22f4279d00994dc4fa14609654cb7592d63d8a741f23e35f0fc8a95b69ffa78d6f259938dd8597653c56a32834329d62489c72d73c58ec60dd299edf56dc1
TLSH
T12CB02222E22A08A888A800AB02F82E02828E020888022238E208E000C00B000828300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 6bd1f307bad255b21264507ef8a648b3faafc3aec46036ff3a31e9b4d0eb5209
MD5 04bd181d7928bfbfa08d742c57eedd0d
SHA1 7bfb6d55901d81c402565fdc75a8e756ac2ebe94
SHA512 4d0a09217afbe8691cb3ec6d05ffdb87854b36e61656293954f078bfeab0e1607825df1877a1c27f52272d2e61fca31c0ba7e4366d1216489950238abd170cd7
TLSH
T15BB09232E26A48A994A811AB12F86E03828E520D9952527DE929E841D54A455828300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 533378a221ef62cc14516816672dc7c03a8d6333246617313ab6d9acfb2ff6c3
MD5 65252714b51c4375401577baf4a817ea
SHA1 45f1e2b328c2ceb8f00f608e02c2b8113f7c3372
SHA512 ad8d9d2015ecd5c62026fd3a14e88104f5c303f84fc9a9d0cb50328206bd5cd5f11f46715970af711b339150b21fb7f2900d3540f60d5e8c770034f7713e5116
TLSH
T1B6B09222E26A58A9A4B821EB16F82E02828E524A99526279E619E441D54A415868300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 f5c7f37778b4c852738844125f55b33afc587ed20fab6d5f35473b6222c951cf
MD5 6e24a95d6417b50115273dd61fbeae68
SHA1 6b9305ea19bc1f1a06f100a29dcf060cbb9c8a7d
SHA512 169df3af1d76135d4e0e27394d1e5c829270a763108bbeaa82d1870fd86d1ac75cdc67562a33bd280ee6a44121ec7280400e1acae5f5e3eaf7dd4ef0d8b1b03e
TLSH
T15FB09222F26E4DA9A4A815AB12F82E42828E520A99525279E519E841E54A415868300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 c46d4d86551ea143c5726757169904579f69507beb229083c854428d63f81e09
MD5 a9c179937eb9fbcffaa772289a1975c0
SHA1 ff96d231b054294d0df68b5762543819e2873fff
SHA512 43c2adcb61286117f766a3d298eb98e2e9b9acde0ee34463f2fead9cb078083bd352be5284f7b8b933e48158d510f08ce75e3cb36012175f8512499140827c72
TLSH
T1C0B09262F26A98B995B822AB12FA3E52828E520999925279E519E441D14A41A828700D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 59dbe38840d11114d13e16e2244c298d12d86b5e2a5303e24e46c534cbeec575
MD5 7217dff46e95c1a9ffa0730f42aa8488
SHA1 eb9b49cf753fc5b8e21fabee24a7e5c9b5cf7131
SHA512 8c20d6dbe8298d68ea91b8a6361bac010091119d9a6b7ff4c955d3e4d8c976b984d77ca2b96aff35f0649ef49d58fcb8877100f6cbe136b60fc2625ca4b89b38
TLSH
T10AB09222F26E48AA94B821AB12F93E42928E520D999292B9E519E441D18A41582C300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 9c92761ffd49f36173c16dcb1e5f7ff730f3c278ac0edbf63ef82aaf53a9a1b3
MD5 3036806dba09ab2454d3fad04b07863a
SHA1 f28c8a8d69f4747972328d0b60cb4af55de437de
SHA512 3cda893eacf81bb7071102f936e63ca826bf893abe21956b036c57121604b7145063e0a429a272f25783f9a3010e69a53c87f9a429bb0cd2c7aa09d2011835f1
TLSH
T16AB09262E26A49AAD6B811AB12FA3E02828E520D99529279E519E541E18A416828300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 76abbf5e82180b2965bca865fece6aab45608490c2b2c620e97ca5c9be108fc1
MD5 e20a2ed4dfe19a0169b96cc0e74a4258
SHA1 03d01e0ac456b39e81bcd21a0359de246f70437f
SHA512 58692e069aea3a1f8021960867f5fd4c8b5799904957e5f05abaa4c420efe7b2716acb6707b064116bbb3d6d785921ab378f1371df646c2b16057374b8ab2d90
TLSH
T1B8B09222E36A58A994A851AB16F82E02829E520AD9526279E629F441E24A415828300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 80bc81090af16e45164b4a4964ea1ae85cc160641ff126790f15e173e3af9ff3
MD5 77dd875cca5378012fa64c76c4c208d5
SHA1 32cf595c73e33a7f87bb9dee572ab33e036cbe49
SHA512 20d0dc584c43db35366646078f140f99cc4f38f5a3e6cdec0ed8fdc86e0fe09d2ab653a6b7a51bb8fb1e7d1fa123dcb144201b43a8095346b4860f751e3b2bdc
TLSH
T1DFB09222E26A48A994A811AB12F82E03829E520A99525379F519E841D14A415828300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 117B
SHA256 9d95aa3d85f2d503048c88753268268ae2a8914ab15b9f576aad497bd9012c23
MD5 7e7ee50c16c2206bd5c5080a645ea9a4
SHA1 019c0b1e763486363f75a824c5ee31fdee68ebdf
SHA512 346e651646ed627a73c9c5b7f917542f7c2a5bb2ab5d44bd206974a91b66cd9bbc8e68d56f6ca87e349a514d0fa8f652b999dd9ce04b926f0e3a0d66577b0525
TLSH
T1DDB01222E36B49A9857929F2D2BA3F13974E401E9D51D7ADF704F440C51B429D2C700C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 58dea08b23ee2258f5f9eab8dcbe55f08d9a1bf04bd4ca6e9dd0b57ffd5dc5f1
MD5 b6d38de54292a532ae7be89a672e29cd
SHA1 7756f158f80d7ade2577d63a6202cb7c950c8bf7
SHA512 159781c8da1f06c15904aa34a9852740779a5e07ea86b9db67360ce01cbbce69bab3f8f199fb40075d266764fe8f73180d4fdd1a902390e13dc4b3cff11e6c26
TLSH
T1ADB09222E26A49B994B851AB12F92E42868E520D99529279E529E941D94A455828300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 118a01654282d3eb9dedb5ec0fda11240a7cb77ce97d4c93ab171fdcb10d5197
MD5 9c6935368ffd010fc2b26361384d98c6
SHA1 6117b72555213862b75708e384452c9368fbd955
SHA512 ea48c827369e76e4f9e4906d8c2d291db8766fe05bd21652c4ea6424d3d2beb2fe024e416ec25a50848c9f16dbdcb93f44b07c571c5dc0fcacc2e16abf885ff3
TLSH
T186B09232E36A4CA994A811AB12F86E02828E522A99526279E619E841D14A415828704D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 23efea6e52d664653d84609f1b40c97fa2914bda284ae95ae64e1a36afce8a87
MD5 60912e90af0fc4c341d7c40a35afadad
SHA1 a4d45c184e35d88c7069286f05e98cc59c6c8645
SHA512 0b499eeffedb40c81e4ae9a85d4c21574d4d388b15a4f42ab07dc5fa793e302bb7e4de6103311f02afd3151cc59fcf0d65ecf71949e20dc2209311e44ab85b2b
TLSH
T161B09222E36A48A9A5A811AB12F83E02828E921A99525279E519E841D14A495928304D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 b5e2dc90997d3cb69c702e4dc642fc1444c9bbff41e811a868dc583156337435
MD5 5008a86a130926ae5b7952288501659d
SHA1 562dfe40ec45164b4be3cd9e6f1eb76573d7ca24
SHA512 e2f22cd7158d3684346a37a96ba13b86c0c3d958c19f2415301e33ee0e47f8b14808252c28314cff927c8341b60d2b1f0fb5bffafde9079e774b887d7765d309
TLSH
T1E8B09222E26A48AA94A815AB62F82E82828E5209995252B9E519E441D18A41582C301D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 438da82789e0385331b18f76b573f2c5ce51c32514cb0687261b4c029fea75cc
MD5 f630bd822e990678b824f01310d362aa
SHA1 ca0420ab0b2fad07ad1a53bfbc0c40d3c6b005fc
SHA512 a13ef78d791c2236cd1820334046ae7742fcec54737f216787f4b73de4ed269b158d6a05f0272dcdec54db59875f15481937e4fe8bf54e3eaa263a1ca645ee4a
TLSH
T186B09222E26B48B994A811AB12F83E02829E521B99A29279E51AE481E14A425828301D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 59a6b65fdff2edfb5cc7a3caa290eb453a67d45d976eb9a7f3fa3681ccf4209b
MD5 cb40e26994ff66d9c32add4f68dca4d1
SHA1 8ebdf4388c619d381f50d48d6ba595c1e8429e11
SHA512 460eac68af1b4304f81e15320bf8ffaa41f20325667d89d497a28b5c281df8fd8adc2f8200313c2d8b5de8bc8cf18ff60c1b734e98e97d618d437f34ac27a39d
TLSH
T185B09222F26A4CB994B911AB22F92E02828E521999529279E619E841D24A419828300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 503c8887f5311fe782d625f17594e79ce6f359147932c084bfeeb0fc23fe88b9
MD5 dd866ac4f05db9f8ae4b377eb6f801f6
SHA1 b736ef4cdf7a7e1c140bdcd6ef7ca88d9c7560d7
SHA512 646338b7e7f75798e9c262f098155015487383dd1c6ce0c4c2471c8bf57c7c351be5b82c2afbf29cbfb00b0d44593d5e1c7f6714c6dd6814d979119df9c65fe0
TLSH
T146B09222F26A48A9D4A811AF12F82E02828E520A99525279E61AE491D28A626868300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 7740f1369ec51eb6d570d6a3ba5ca35b29cc041d927ead9b1ea365e2566aa1ba
MD5 0c514a63b719c254c27b356b2946741c
SHA1 f57b2b79ecbd1ec8d02d42eecbccd104d101aca3
SHA512 828c2d2e9f2c552f48ae45682ca7057ce8ae46cdcba6e269c77dc64f5ed551d4c15cbdcec1eaca42a7027dcddcb1d7b1e3464f5cd52c04eef6e450f10041d393
TLSH
T18BB02222E22A0CA880A820EB02F82E02828E020888020238E008E800C00A0288A8300C
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 0c982041065401d42eb46309b1218afdc8ebb814eaaf6ccd08d982b3a89fab39
MD5 bcb54ac28db466782530e301ca02f03e
SHA1 3d03eb0ee906ea1a333623638971fbbb9751e0e9
SHA512 bb5ce550a75dbb3912ff91d534159ca66282ad691d495dec9c7bdb90f5ad43287827cd9e179a9057f8b47702721eccd0f2f8744140294bd38b85e8776f7c9d33
TLSH
T15FB09222E2AA48A9A5A829AB26F86E02828E520A99525379E919E442E14A45582C300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 7fec10c17dde3ce5fd8c631c1ac97d7f5b91ee8d117044cae853bd4535ff8239
MD5 13f7d4720190d6b8151601bce0ef8966
SHA1 458824066ec65f6f3a3927f250b1926066a34bd5
SHA512 3592f0e998b0c828960b1a80341a4f0c36208714db13a6053f31f5f99cfa4e97320e5d1b4bc5c4dd4a334b033df59a3928d884e915afb90e2597beb8433e3b64
TLSH
T11CB09222F26A48A994A811AB12F82E02828E560E9952A279EA19E441D18A515838300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 1498e23c903fb734d62235053527666739fb59e4f39a204b5678551c3e1b42bb
MD5 24820d9a91b22cdb321ca71f5d384112
SHA1 3a12eb4fc0ded24e424f1fdcf577bb92c647d293
SHA512 ac3174253050826ec9b19436474544452731a426470d7376897669acb3096af556dc6f2b4c0d84744ee8bbf01fd61a4f6a7baf34cb57c5261d0d354f28e4bc75
TLSH
T1DAB09232E26E48A9E4A811AB12F87E42828E520B99526279E619E441D14A415868300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 08c8aefc6cbce454c4f791d8c6fca0e42d017955b77d8cc9cdd0eda94a6ca24f
MD5 46246b22ace569caa3be2e10db356811
SHA1 fa08a1690a50a096d9b1a080ce496f5f29c5d26f
SHA512 6221ba92314a9513b3dc5cf5945c44e0588927f5857fa07eae55b403044e0380cb58c20bca2cc0e1cba740f16e188a30d3ba6b2cb59a42484cbc7989653ffcc3
TLSH
T18EB09222E3AA58A994A825AB16F86E02828E52099952627DEA19E941D14A42582D300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 be1d417af1b3681b22982101bdac035387a993fdcc21e74d55253f7f81356897
MD5 64784481c12014f275295e8e671a0a9a
SHA1 0c170b401f609438ade272872e900df55461b947
SHA512 d8892397ee4ddc3b51fdb019a1d952bc679ed97af733c76d0037b6acceaec689032689189fee9adb0eb09db4c76a4427530d239e946aadfd7bb4c93f06d22915
TLSH
T1F0B09B31E25E486594A411A711F52E02428E510A55515279E515D541D546415418300D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 b1df3c3df4960303c31089ae0f203656f91a379eafb6e16cc03b86a60d46bc36
MD5 9cdc054d74fc566199419ccb415b8be8
SHA1 0374e9e2b4a9d26144ab38b0ee86f13ebd4eeca2
SHA512 750558cce75b52df15617fc07b3a481f8b9dafba2c704db01953d1107f9614087e9808522feb2812ccd94ce5635e5ae7fd91fce3253bb2eef55a90255f159a80
TLSH
T1C5B09232E2AA48B999AD15AF12F83E03928E524AA9625379E929E441E14A525828301D
MD5 SHA1 SHA512 TLSH

Submit Download

supervisor.heartbeat.json

Path C:\Users\Admin\AppData\Local\Bridge\supervisor.heartbeat.json
Size 123B
SHA256 72bb30ba303cfe2d7a655ff1f5d01d7676b39ec4de572f70e51b7794799067e9
MD5 f41cfb3271829bdcbe31200f7fa7ac91
SHA1 a0a3d456f1c4865078f87356030cc7cceaf733a3
SHA512 6b25d4ece4e965b2f768c6e29e32cfcd309cd70786e68ea47e37f1e881a7f9885c8fdfcfb0d5ce48887599d4f77edd46e9217f14be1b5bccc591553bfbbbb97e
TLSH
T1DBB09232E26A48B995A915AB16F83E03829E520B99A29279E519E451E14A415828301D
MD5 SHA1 SHA512 TLSH

Submit Download

BridgeAgent.exe

Path C:\Users\Admin\AppData\Local\Programs\Bridge\BridgeAgent.exe
Size 7.5MB
SHA256 901315b7a1368a1f824330f46afc8a5448eeb08dda2e0d31aea4a89d1731f4a8
MD5 c531126e755d6a84fd71988296c0bf23
SHA1 769aaf695f46ce1acf351a427228edba7794a4d1
SHA512 1ba9e01aca377d1c5c279128ab4ab716e4401008b8c2be1fff6e442b0abbe5636239a29f1ae6e9bcaf3b9de11c162a1f10b7824eb325b71ec95ddf9ba3334952
SSDEEP 98304:MFN56U5URbY8J8TAn8C2N/irGLM9n46x:AX6PBdp
TLSH
T112862951BA6B58ACD597C8B483468A239E2130DB0B36B9FF01C486393F69BF05B3D754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_4jvh4jum.ztl.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_4jvh4jum.ztl.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3952-126-0x00000281C8BD0000-0x00000281C8D92000-memory.dmp

Download

memory/3952-123-0x00000281C8610000-0x00000281C8632000-memory.dmp

Download

memory/3952-127-0x00000281C92D0000-0x00000281C97F8000-memory.dmp

Download