Analysis

  • max time kernel
    39s
  • max time network
    185s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    10/06/2023, 15:28

General

  • Target

    Scratch-For-Discord-Setup-2.0.1.exe

  • Size

    123.5MB

  • MD5

    712f12c4f18810b71af80f80fbda71df

  • SHA1

    0a873caad717990d02262d5ae17cc0b263f0c9c8

  • SHA256

    01937c2b4144b89190b8757b84bbe979469af4ac1d464c52085bef628feaaedc

  • SHA512

    cbf6df9062ecf5d33d8db769a63726f37d09e9d46425ae815a42e42b46a303fcf4d2ce42093e89d209705a924ec25daf360aa6ea18fac87169254e24a59872b4

  • SSDEEP

    3145728:0c7lWjoqjr+ZH3QcevQ7lWjH0atcWmTUDKl/4dtiIHR:37Bqjr+ZHAceI7a7mi9uIHR

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 18 IoCs
  • Unexpected DNS network traffic destination 2 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Looks up external IP address via web service 3 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Scratch-For-Discord-Setup-2.0.1.exe
    "C:\Users\Admin\AppData\Local\Temp\Scratch-For-Discord-Setup-2.0.1.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:316
  • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe
    "C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    PID:1740
    • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe
      "C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe" --type=gpu-process --field-trial-handle=1004,14216945477091410320,7202321040455199517,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --user-data-dir="C:\Users\Admin\AppData\Roaming\scratch-for-discord" --gpu-preferences=UAAAAAAAAADgAAAIAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1112 /prefetch:2
      2⤵
        PID:1324
      • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe
        "C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1004,14216945477091410320,7202321040455199517,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\scratch-for-discord" --mojo-platform-channel-handle=1332 /prefetch:8
        2⤵
          PID:432
        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe
          "C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\scratch-for-discord" --app-path="C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\resources\app.asar" --no-sandbox --no-zygote --field-trial-handle=1004,14216945477091410320,7202321040455199517,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=3 --mojo-platform-channel-handle=1424 /prefetch:1
          2⤵
            PID:280
          • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe
            "C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe" --type=gpu-process --field-trial-handle=1004,14216945477091410320,7202321040455199517,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --user-data-dir="C:\Users\Admin\AppData\Roaming\scratch-for-discord" --gpu-preferences=UAAAAAAAAADgAAAIAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1112 /prefetch:2
            2⤵
              PID:2512
            • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe
              "C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\scratch-for-discord" --app-path="C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\resources\app.asar" --no-sandbox --no-zygote --field-trial-handle=1004,14216945477091410320,7202321040455199517,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=1348 /prefetch:1
              2⤵
                PID:2780
            • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe
              "C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe"
              1⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:1728
              • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe
                "C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe" --type=gpu-process --field-trial-handle=928,15154538830147233603,2822454413202970268,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --user-data-dir="C:\Users\Admin\AppData\Roaming\scratch-for-discord" --gpu-preferences=UAAAAAAAAADgAAAIAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=936 /prefetch:2
                2⤵
                  PID:1776
              • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe
                "C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe"
                1⤵
                  PID:1040
                  • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe
                    "C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe" --type=gpu-process --field-trial-handle=1088,18082543947981709934,3737587891773176974,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --user-data-dir="C:\Users\Admin\AppData\Roaming\scratch-for-discord" --gpu-preferences=UAAAAAAAAADgAAAIAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1096 /prefetch:2
                    2⤵
                      PID:2348

                  Network

                        MITRE ATT&CK Enterprise v6

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\D3DCompiler_47.dll

                          Filesize

                          4.3MB

                          MD5

                          7641e39b7da4077084d2afe7c31032e0

                          SHA1

                          2256644f69435ff2fee76deb04d918083960d1eb

                          SHA256

                          44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47

                          SHA512

                          8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          134.1MB

                          MD5

                          f7c61c91d4fd2599ca3392d8fc79803b

                          SHA1

                          85adcc0e8edaf2b9f07fc9b403af96390808e508

                          SHA256

                          cbeee5e074cdf8c1c39f3db8a6d073027d0df7e167ce7ce6bd2dcc0f8dd14d73

                          SHA512

                          358acc2a1a1c837dd69e512371395d0344a4446d9549e5eb7e3ab7c60ccb1dd665a784148ca8ba33d0735aa7024382398cd8f915e75b86fa81efd3fa211d6ce4

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          123.7MB

                          MD5

                          804805d0b3b9a0fd0e6940c3a5c9631b

                          SHA1

                          caad856929b05d4e27ce8adb7046a2b6e3df6c73

                          SHA256

                          665ba2af6b4aefb59e9d861c20bad318696a3d45bb52d5c73f1648ba57025fae

                          SHA512

                          34de9c5ca360f0572900820a65e379da82292f5d6bd2ea8008c7a89061f2d48898262b202276ac4d044a63e77d8534c875cebb4196ee23c8f775c274fd60d386

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          54.8MB

                          MD5

                          3d864daf1ec6acbe7ba4917ede109b6e

                          SHA1

                          bd4de3439d62c6ba4d7d00e1925e44e94ce9cc72

                          SHA256

                          8d090c75150e760f2d7906eb381c9fb6353ac599d35e088b0eda82e2c779aef5

                          SHA512

                          312abe4d60f5f9fcb71b3819250330218e4a6976f353a6247bc6d0d5d0f2305f3c88aa710b7e35c8a61b8df123c2647c412edf26d0c2b520a2097386c0d12fde

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          56.6MB

                          MD5

                          de581a35d97d2c636b043bebce520cdf

                          SHA1

                          53462ec05101854f1c6e993d174b55ffc612358b

                          SHA256

                          907f923ceff66b9b86d330bcfbf91ae7ad578463b117d9b4c6bb83e0210ea8df

                          SHA512

                          66f8bf82edb62446cdd5b032f1d12836aced7540b80f5bde1eea830149b3326928e146032201b9fcb47cc3c83e3a5118ce4f4bf74cf172093765cf807b9f151f

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          109.1MB

                          MD5

                          56ec6c43a3f80b411afea8014697a78f

                          SHA1

                          ab0bee200f21297fc33f8d1c50aa340ac615a86a

                          SHA256

                          c925ee5a4b96a668fff6e4e2e3c335532be55dab9de06ca8a8e0b1c96918441d

                          SHA512

                          950f195929d23fc37f0d518b9f7b54fda5016d0209ccdf63154f214aac164a6e43b9c2818c0096f2361ebca4c29df3776ce4c1cc0c424372f40ff33662b4eee5

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          108.8MB

                          MD5

                          fd0649fb02f18acf8e23c81df79dc41b

                          SHA1

                          46c5ec94fe8086517d36736861da397b72f48ef4

                          SHA256

                          b3a7b8284c4f9e09434ca68f37c054588c007036f019af8154d03ccaba2e3819

                          SHA512

                          12cca09cd5504364b51b8d5c75ca68b71b3b73eb9dd47a10bc3dbe98bf312bdfceca8045aca0f9612cadeca5b2c35ea6c0a47f3308ba2b81dfe0c591d3f986ee

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          106.7MB

                          MD5

                          fcaa7ec2b0eae02cb97984f0d535875c

                          SHA1

                          e307cf6460c3577e51aa1b12745e5c964000e265

                          SHA256

                          6998ce38b2aa3dcc56b0f93a5593ed49a688c88439ac633499069a3de317555a

                          SHA512

                          f8d4d6d301765eec0fecd074a876550cccdde8139465ce1130c21eac15cf0dcc54cfc404e771f0b7d08951d4acfef1560f9ecb101e4d11868bee7d41c8770202

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          99.0MB

                          MD5

                          2b619696cac354c703e0421ba1c54bde

                          SHA1

                          ec7a42fa1e85f71a1bce4b0b3108854319a206de

                          SHA256

                          0ce3baf8e3a74c78406d149e30d03a334ea6684cdb29f22172d081b398159932

                          SHA512

                          5a6d98d7740a94bbddde628c524c3629a30336b69bde1cef0c4faddc4d4c32127ad9f4dddef56d91fe7949ef7fea5a7697edd5ba5a5a083eec0ddc3f6daea500

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          93.8MB

                          MD5

                          4b0d5cf411dd175b877fd8f978064f61

                          SHA1

                          faa0b57bf76f4d28359bc7245d816fee17e93e16

                          SHA256

                          786cbeb0c643a113afe7e07c4c4484569212d115143e7b1b1eb25bc717552f92

                          SHA512

                          6535ed8e78802ae59448349829e64b69d929ea64249e0ee692cee90e715ac9d06b29e5e4616560b3529fe5a70b681026919f72a384922ed9f1e8a8f5bd73a08b

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          53.8MB

                          MD5

                          ed2dad3710a6fd59e58185c3fc19db31

                          SHA1

                          9e50ecbc53c4dc8e0446fec7b07dc9046f4435f8

                          SHA256

                          e568ef2a55d61322f965dde64682f40f5dce0bf81fc2707ea520d31cb387daca

                          SHA512

                          0f29e067cfe14550f32c3d42db2166ddc5feb577cfb52f2614947a2a1c8aca5fc6a3081202f201a1d8c1d73cecf9c882e8fb8f3f4655486ad96345afeb16664b

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          39.8MB

                          MD5

                          05d021397bfbdd16deaca263f6ff4de6

                          SHA1

                          a4de98f26bacb73c62f40b88ab4ef14b91e37bca

                          SHA256

                          581a3ef17684f2eb92e1bfc9467986b0c101d605f50a7c5b475ca8d23a8e3d11

                          SHA512

                          361d58c17b1130bb6a05b26e3bff17bf7a8cc560eab19f8b600445f56b19fe57cf474cca1cf2de246cb31abc1bf06b1c515172775eac168240805ca9cbea74d4

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          38.5MB

                          MD5

                          1ab08fdd49938b1e5699edc90b1c77e5

                          SHA1

                          44850e1c56822c92a3dbb9a0131eba5b295ccdf5

                          SHA256

                          3f0e4c6fc0c4da03e7f3d25d499d90ba012f7d7ced4a16a82e0347fa9ce58a31

                          SHA512

                          33e91adb2cab966f8c8e22a419a3af927ff8031f45eb8a192d58c48074f2a8fabe5a1819aeacb9b5f84df0d5ddddd1e06edf282adb572b909067798049ab6c3b

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\chrome_100_percent.pak

                          Filesize

                          138KB

                          MD5

                          0fd0a948532d8c353c7227ae69ed7800

                          SHA1

                          c6679bfb70a212b6bc570cbdf3685946f8f9464c

                          SHA256

                          69a3916ed3a28cd5467b32474a3da1c639d059abbe78525a3466aa8b24c722bf

                          SHA512

                          0ee0d16ed2afd7ebd405dbe372c58fd3a38bb2074abc384f2c534545e62dfe26986b16df1266c5807a373e296fe810554c480b5175218192ffacd6942e3e2b27

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\chrome_200_percent.pak

                          Filesize

                          202KB

                          MD5

                          1014a2ee8ee705c5a1a56cda9a8e72ee

                          SHA1

                          5492561fb293955f30e95a5f3413a14bca512c30

                          SHA256

                          ed8afe63f5fc494fd00727e665f7f281600b09b4f4690fa15053a252754e9d57

                          SHA512

                          ac414855c2c1d6f17a898418a76cce49ad025d24c90c30e71ad966e0fd6b7286acf456e9f5a6636fd16368bc1a0e8b90031e9df439b3c7cd5e1e18b24a32c508

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\ffmpeg.dll

                          Filesize

                          2.6MB

                          MD5

                          c567e4acf580710c9901d170ad81c1a0

                          SHA1

                          d8c5bcb0f451799faa5d913af1bb54912f6ccadc

                          SHA256

                          9a9dbddd93f9929885e92cac2ed5b4f314a6394d3a2d69aa6c229a457b6cd5f1

                          SHA512

                          1e72c76e6fe65cf247ae55d0b7239591e41ec81b0c3df55b1c934b5e7243ef284effdad62db74805036b7f26df6f512786f64fb178be6f96d2697150216f962c

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\icudtl.dat

                          Filesize

                          9.7MB

                          MD5

                          224ba45e00bbbb237b34f0facbb550bf

                          SHA1

                          1b0f81da88149d9c610a8edf55f8f12a87ca67de

                          SHA256

                          8dee674ccd2387c14f01b746779c104e383d57b36c2bdc8e419c470a3d5ffadc

                          SHA512

                          c04d271288dd2eff89d91e31829586706eba95ffbab0b75c2d202a4037e66a4e2205e8a37ecf15116302c51239b1826064ed4670a3346439470b260aba0ea784

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\libegl.dll

                          Filesize

                          431KB

                          MD5

                          ca5a6578789328bc4fbfce520eefbd43

                          SHA1

                          793044f0f3aba7025c40b686ec5e1337bbfaf087

                          SHA256

                          63f329f484611bc034e78df9fa04ccfce8191edd345df0809031250f9409c574

                          SHA512

                          1f5ba5f6b6a3cfbfdb532a3414be829e342bc834a23599cd19cd896b638f6b8e5961ea52117225cfc494ee59c71b84497b1570b9560bcfe1ac982001689361b7

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\libglesv2.dll

                          Filesize

                          7.5MB

                          MD5

                          9fd6decc7f9c7e1b3408ed858c2fbb61

                          SHA1

                          d862755c9ca49d2118f56486a0a0cb6568953d63

                          SHA256

                          efaa59479ef864ad054207b4647cad5dc331473b5205b7f2abf82e515d000789

                          SHA512

                          14362c4c9fca931f5a781326ba6d1d243a4751ba32bd0b4be3124813de512631c757ea31deca518265339fa139a33afc396ce9108a7963ab58c4b42cfcc925b6

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\locales\en-US.pak

                          Filesize

                          95KB

                          MD5

                          214e2b52108bbde227209a00664d30a5

                          SHA1

                          e2ac97090a3935c8aa7aa466e87b67216284b150

                          SHA256

                          1673652b703771ef352123869e86130c9cb7c027987753313b4c555a52992bab

                          SHA512

                          9029402daea1cbe0790f9d53adc6940c1e483930cf24b3a130a42d6f2682f7c2d6833f2cd52f2417009c3655fed6a648b42659729af3c745eaa6c5e8e2b5bb9e

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\resources.pak

                          Filesize

                          5.6MB

                          MD5

                          1f46000d6ae1277ee4e97bfe4f457a89

                          SHA1

                          6597e91194f785e117b15dd8e6538fef75d9b7db

                          SHA256

                          6251353228a758cd9e747492a38b302acb9f16c80b234c6e5a79b23d0b369f92

                          SHA512

                          1049b09e600157226ec232c610d150a7a414c99623cc4e3ae112543c39315a7c2d56e47932714a1280420df2dbbfafd3ba50961e79a8b01b73d3c20234155323

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\resources\app-update.yml

                          Filesize

                          123B

                          MD5

                          40b109c3b8495cfa95f4e7e9df476c2f

                          SHA1

                          b807853fa2ccc0f35e61aced8aad2fd1a8f2258a

                          SHA256

                          f0286d39904794d448b7b162a47d43d074372bf51786572261467a013fbe4520

                          SHA512

                          efc215af552aa2b489c47fd025989078d3ab19f83382a0c4436412a711bb0e794e04ac604fac431163fc1e9f7ded34721ff8cf72fa803fbd4699f5be62b33ab9

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\resources\app.asar

                          Filesize

                          27.0MB

                          MD5

                          d2e8e6624f490f7055251201322b279d

                          SHA1

                          1c5a0f14359230f7bbb05609e1676080646f5eaa

                          SHA256

                          b95ae531105c269dbc48206c935246d63e8f368aad7afd0dcbd5292a7003d310

                          SHA512

                          70b744523f3b22b64707ecf01a1a0437d74c7df2c9cf23b391d220708a8d5dfbfe22f1a700af5ff3242c73e8c85a121311df2d0f201bae52c875cf62f19b0b2d

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\v8_context_snapshot.bin

                          Filesize

                          160KB

                          MD5

                          0f913247501a017fdf0b1f640a793d34

                          SHA1

                          daf26456a8045fa1080074e992ef43690604fb68

                          SHA256

                          9cc3c86088867f6e822c370439e7c7707e0429a82007d1b1440bcabc229e717a

                          SHA512

                          9d9837e9a9979f9c73ed71dcc9bca88494e733028157f6d122250a3dee8c0a2199f2860fca1799e3c0b565181b52293f14bc019706ba96fa6da391827b428317

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\vk_swiftshader.dll

                          Filesize

                          4.3MB

                          MD5

                          969b0125f67847aec77d703697cbc6e9

                          SHA1

                          669baba1909cf4b4692f93f5ae6918fa71adf6d3

                          SHA256

                          5b123b8d7c6f136be9c058475e769aee6c1232dff08661312f171eb9a7b41026

                          SHA512

                          ad9403d3fe6f7df3dd5e5747b800cf32f069aec8138d2b532b639f35dc67849e2d3fce2a77eb02bee5d7a7ba00e26e8a0333a9c0399faaa9e05f43bb1a74eddd

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\vk_swiftshader_icd.json

                          Filesize

                          106B

                          MD5

                          8642dd3a87e2de6e991fae08458e302b

                          SHA1

                          9c06735c31cec00600fd763a92f8112d085bd12a

                          SHA256

                          32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

                          SHA512

                          f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

                        • C:\Users\Admin\AppData\Local\Programs\Scratch For Discord\vulkan-1.dll

                          Filesize

                          715KB

                          MD5

                          7b2248e5c046f031b873a52c32c1a4a4

                          SHA1

                          00f08b2cff5c40f8831aa4c26f7a95705e7b6eea

                          SHA256

                          22cc1b963e82d200d160772facc26017694320d998c0fc81c78046433666765b

                          SHA512

                          f527174c89c2c9cd75aefb943ca3e2286f2c3f21aca727d8de1b8384f2a6c33112f67aa6900366d9d76af308b1caf97b16b9ea9cf91183ae854b4c38bbe31fa4

                        • C:\Users\Admin\AppData\Local\Temp\nst23C8.tmp\StdUtils.dll

                          Filesize

                          100KB

                          MD5

                          c6a6e03f77c313b267498515488c5740

                          SHA1

                          3d49fc2784b9450962ed6b82b46e9c3c957d7c15

                          SHA256

                          b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

                          SHA512

                          9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

                        • C:\Users\Admin\AppData\Local\Temp\nst23C8.tmp\System.dll

                          Filesize

                          12KB

                          MD5

                          0d7ad4f45dc6f5aa87f606d0331c6901

                          SHA1

                          48df0911f0484cbe2a8cdd5362140b63c41ee457

                          SHA256

                          3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

                          SHA512

                          c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

                        • C:\Users\Admin\AppData\Local\Temp\nst23C8.tmp\UAC.dll

                          Filesize

                          14KB

                          MD5

                          adb29e6b186daa765dc750128649b63d

                          SHA1

                          160cbdc4cb0ac2c142d361df138c537aa7e708c9

                          SHA256

                          2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

                          SHA512

                          b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

                        • C:\Users\Admin\AppData\Local\Temp\nst23C8.tmp\WinShell.dll

                          Filesize

                          3KB

                          MD5

                          1cc7c37b7e0c8cd8bf04b6cc283e1e56

                          SHA1

                          0b9519763be6625bd5abce175dcc59c96d100d4c

                          SHA256

                          9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                          SHA512

                          7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

                        • C:\Users\Admin\AppData\Local\Temp\nst23C8.tmp\nsDialogs.dll

                          Filesize

                          9KB

                          MD5

                          466179e1c8ee8a1ff5e4427dbb6c4a01

                          SHA1

                          eb607467009074278e4bd50c7eab400e95ae48f7

                          SHA256

                          1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172

                          SHA512

                          7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817

                        • C:\Users\Admin\AppData\Local\Temp\nst23C8.tmp\nsProcess.dll

                          Filesize

                          4KB

                          MD5

                          f0438a894f3a7e01a4aae8d1b5dd0289

                          SHA1

                          b058e3fcfb7b550041da16bf10d8837024c38bf6

                          SHA256

                          30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11

                          SHA512

                          f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

                        • C:\Users\Admin\AppData\Local\Temp\nst23C8.tmp\nsis7z.dll

                          Filesize

                          424KB

                          MD5

                          80e44ce4895304c6a3a831310fbf8cd0

                          SHA1

                          36bd49ae21c460be5753a904b4501f1abca53508

                          SHA256

                          b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

                          SHA512

                          c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

                        • C:\Users\Admin\AppData\Roaming\7301b110-8ca9-49d8-a58b-26661495d15a.tmp

                          Filesize

                          199B

                          MD5

                          8ba2b242ceff9eb5e0d0306397c660dc

                          SHA1

                          50f2ad7d037565b60c8ccad84faf730a732611e1

                          SHA256

                          1d42907143931a59017d18bf5a8e490efe49c2a0e8c1a8cc463b0931113e1729

                          SHA512

                          0c14bc0cc4e2ff4e801cc5b517684d5e81bd6e60cfa452e44e7c8628e8f60806e636b5e07f5f4587080d144aef3761a5dcd217fd5b3d43d98123ea04292fb0cc

                        • C:\Users\Admin\AppData\Roaming\scratch-for-discord\.scratchfordiscord.config.s4d.dat

                          Filesize

                          177B

                          MD5

                          8ac33d661788d47c78a04cc9e764aff8

                          SHA1

                          ea30a70a015c22b6a0e8681874ca71cc5716dd06

                          SHA256

                          84f73bf01ba751444d65a1680a311dfdf9ab4ee8a438a921d60284dc2ebff540

                          SHA512

                          4d3f4d91b4a3149b22b7f163f740837ff5fa3b94b18c83d0110d7394e0f6cac972f0106481eeaf0af254922c7e01e5b86c0035cd8f367c8e1a4a82185c385d07

                        • C:\Users\Admin\AppData\Roaming\scratch-for-discord\FontLookupTableCache\font_unique_name_table.pb

                          Filesize

                          125KB

                          MD5

                          8d051ee9db1741a0147dec95dffbe4ad

                          SHA1

                          ecd0217768aa73f268105b151aaa7665adeab2d1

                          SHA256

                          a4bf8b6d7d3b4d5dd2ada60faae91560a02ed55193b5e8637d52bcfc933b1b07

                          SHA512

                          f0fb7f51a9da0276d865e6810f63b17ef24ee367dee82ebce454dd304d505f0eda39585466f092f446f8ecdd08d3bd3c9d7dfd2b89291ba2b82804952ac1c918

                        • C:\Users\Admin\AppData\Roaming\scratch-for-discord\Local State

                          Filesize

                          389B

                          MD5

                          cb302f886a9d1d1f5865e01a73734ba4

                          SHA1

                          579b35d2968d3bc7c67ae6d4b4d86ce77e4cba48

                          SHA256

                          f68a96885e1fb64c409a93cbc2580166b07621e539642335e66344c926b223af

                          SHA512

                          6386fa10a7c1b2e74947b00bf25adc93df9552919c5fe49931b2aaa355b1ed9e15cfb9d10ce05ef9fed62b67d986996d932a103474e5b2bf49584600ac2f7e72

                        • C:\Users\Admin\AppData\Roaming\scratch-for-discord\Network Persistent State

                          Filesize

                          64B

                          MD5

                          30c3067d39a63cb3b178409dc953c2ef

                          SHA1

                          46f3dbec7acd4de1738207b556afde398fdd8702

                          SHA256

                          91d04cebf9751137a4b2ae458a533c659d8378a6923d6a35abdeaf413a952f78

                          SHA512

                          4fc3eac1c97126ae203f87d1f5d8d3388f5ecf76921374a32b1e021861fc15d9e97b9dcaff695b209c1b88c99165716b9d00ba4ebca446471b5971746596b0d3

                        • C:\Users\Admin\AppData\Roaming\scratch-for-discord\Preferences~RF6cf789.TMP

                          Filesize

                          57B

                          MD5

                          58127c59cb9e1da127904c341d15372b

                          SHA1

                          62445484661d8036ce9788baeaba31d204e9a5fc

                          SHA256

                          be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de

                          SHA512

                          8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a

                        • C:\Users\Admin\AppData\Roaming\scratch-for-discord\Session Storage\CURRENT

                          Filesize

                          16B

                          MD5

                          46295cac801e5d4857d09837238a6394

                          SHA1

                          44e0fa1b517dbf802b18faf0785eeea6ac51594b

                          SHA256

                          0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                          SHA512

                          8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          134.1MB

                          MD5

                          f7c61c91d4fd2599ca3392d8fc79803b

                          SHA1

                          85adcc0e8edaf2b9f07fc9b403af96390808e508

                          SHA256

                          cbeee5e074cdf8c1c39f3db8a6d073027d0df7e167ce7ce6bd2dcc0f8dd14d73

                          SHA512

                          358acc2a1a1c837dd69e512371395d0344a4446d9549e5eb7e3ab7c60ccb1dd665a784148ca8ba33d0735aa7024382398cd8f915e75b86fa81efd3fa211d6ce4

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          134.1MB

                          MD5

                          f7c61c91d4fd2599ca3392d8fc79803b

                          SHA1

                          85adcc0e8edaf2b9f07fc9b403af96390808e508

                          SHA256

                          cbeee5e074cdf8c1c39f3db8a6d073027d0df7e167ce7ce6bd2dcc0f8dd14d73

                          SHA512

                          358acc2a1a1c837dd69e512371395d0344a4446d9549e5eb7e3ab7c60ccb1dd665a784148ca8ba33d0735aa7024382398cd8f915e75b86fa81efd3fa211d6ce4

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          134.1MB

                          MD5

                          f7c61c91d4fd2599ca3392d8fc79803b

                          SHA1

                          85adcc0e8edaf2b9f07fc9b403af96390808e508

                          SHA256

                          cbeee5e074cdf8c1c39f3db8a6d073027d0df7e167ce7ce6bd2dcc0f8dd14d73

                          SHA512

                          358acc2a1a1c837dd69e512371395d0344a4446d9549e5eb7e3ab7c60ccb1dd665a784148ca8ba33d0735aa7024382398cd8f915e75b86fa81efd3fa211d6ce4

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          134.1MB

                          MD5

                          f7c61c91d4fd2599ca3392d8fc79803b

                          SHA1

                          85adcc0e8edaf2b9f07fc9b403af96390808e508

                          SHA256

                          cbeee5e074cdf8c1c39f3db8a6d073027d0df7e167ce7ce6bd2dcc0f8dd14d73

                          SHA512

                          358acc2a1a1c837dd69e512371395d0344a4446d9549e5eb7e3ab7c60ccb1dd665a784148ca8ba33d0735aa7024382398cd8f915e75b86fa81efd3fa211d6ce4

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          67.9MB

                          MD5

                          f5dcca838267b9097bdf8130c73a534d

                          SHA1

                          22dde386051cdf551bbb7b4aec860a8b4cf0e421

                          SHA256

                          225816624651bd00096972ccdf45c720bfd53271cf35cde84e0e9b3798766f7f

                          SHA512

                          cf04788ace0ebf412321c41f7ebf4151a14cbab426e56408b08855a2a5a6b74e2ec4817ca47bbde7c4bd61a0264662af4cb9e4f473afc7dca07ca8ed2de76c76

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          61.0MB

                          MD5

                          964464b049e5b509a58d3260c9726da4

                          SHA1

                          a6ccefaac3929806da9613bafe1437824331512e

                          SHA256

                          a41bd1f2a2393dc514a9cd4a39539b7fdaaddb9c0e050f10d85a7dc91d5def3e

                          SHA512

                          26549a9855879292760577c9f37586a39f1ac9b1497436f3035d9f46d4ac0a2a226ca5386123bfc3dbe9b30a21cf754f8dd93388481ee3377cdab2f907cd830f

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          68.8MB

                          MD5

                          33e3f8a5dd5bdb94995fc2bfd02ad005

                          SHA1

                          6caac9064396c837386e3080754512545d2410be

                          SHA256

                          fa6661f890c476f2565e0ebb3a951ebd26e1f2e07c16077245f91a5831113eae

                          SHA512

                          1df44328bf451d6b102679635e9f67aadc5584dd34a6f860dcb3f1dde07defe6e7690b52579f8d183b7aaab6a97f279ac1a2423d748de208c9ad7428d52eab44

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          69.0MB

                          MD5

                          e807cf1ca5386ac672c94638ac9953a4

                          SHA1

                          e9f11e9eca43d3a2f29d169ba9196e88ba10240d

                          SHA256

                          bb5aed7991c9589976dabd4e9763626f5d8e73e33d778aa38c85a1653cd69f92

                          SHA512

                          4de0357d318dac2213162bc8fd15d6fd95d6f4b800c9491b6c5b4e1773c914018022a01ae97e10fe59cd47455085e538898ee3fc5c743702973e64183f1e170a

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          106.6MB

                          MD5

                          5e7c64e242e08995e21c7b9e6359c27a

                          SHA1

                          4336e6904e347b56f07850696958e47983581461

                          SHA256

                          9d36e6a2087ea33d26aba5ac9c4f6d1cf5a7decc8359b2aef50a7fd87cce8691

                          SHA512

                          14bcc7cc225238909072cbe1d9f107bd155cf38745169adf6d397b2e73340c18c5f606b8ef519adda187f261be2d00ca74b43e5cb0a5fb31751c659c283e963d

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\Scratch For Discord.exe

                          Filesize

                          44.5MB

                          MD5

                          8c4e2bdcb9e30b60858f014e19d0a98c

                          SHA1

                          0b548463c05b4e130836aa09e9e258dda54e54ac

                          SHA256

                          1becd20915815dd91695c74f84550cd4f65e98e7e921de753778a71b85ec68a2

                          SHA512

                          d948853db740e4321c9dc2e30adedbb49f089021ff2601d2547bf4063304a273f98bea0da82803c3058e80fea48e08e77df537f4c63717522c7a4db4d7a7d9cc

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\d3dcompiler_47.dll

                          Filesize

                          4.3MB

                          MD5

                          7641e39b7da4077084d2afe7c31032e0

                          SHA1

                          2256644f69435ff2fee76deb04d918083960d1eb

                          SHA256

                          44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47

                          SHA512

                          8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\d3dcompiler_47.dll

                          Filesize

                          4.3MB

                          MD5

                          7641e39b7da4077084d2afe7c31032e0

                          SHA1

                          2256644f69435ff2fee76deb04d918083960d1eb

                          SHA256

                          44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47

                          SHA512

                          8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\ffmpeg.dll

                          Filesize

                          2.6MB

                          MD5

                          c567e4acf580710c9901d170ad81c1a0

                          SHA1

                          d8c5bcb0f451799faa5d913af1bb54912f6ccadc

                          SHA256

                          9a9dbddd93f9929885e92cac2ed5b4f314a6394d3a2d69aa6c229a457b6cd5f1

                          SHA512

                          1e72c76e6fe65cf247ae55d0b7239591e41ec81b0c3df55b1c934b5e7243ef284effdad62db74805036b7f26df6f512786f64fb178be6f96d2697150216f962c

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\ffmpeg.dll

                          Filesize

                          2.6MB

                          MD5

                          c567e4acf580710c9901d170ad81c1a0

                          SHA1

                          d8c5bcb0f451799faa5d913af1bb54912f6ccadc

                          SHA256

                          9a9dbddd93f9929885e92cac2ed5b4f314a6394d3a2d69aa6c229a457b6cd5f1

                          SHA512

                          1e72c76e6fe65cf247ae55d0b7239591e41ec81b0c3df55b1c934b5e7243ef284effdad62db74805036b7f26df6f512786f64fb178be6f96d2697150216f962c

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\ffmpeg.dll

                          Filesize

                          2.6MB

                          MD5

                          c567e4acf580710c9901d170ad81c1a0

                          SHA1

                          d8c5bcb0f451799faa5d913af1bb54912f6ccadc

                          SHA256

                          9a9dbddd93f9929885e92cac2ed5b4f314a6394d3a2d69aa6c229a457b6cd5f1

                          SHA512

                          1e72c76e6fe65cf247ae55d0b7239591e41ec81b0c3df55b1c934b5e7243ef284effdad62db74805036b7f26df6f512786f64fb178be6f96d2697150216f962c

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\ffmpeg.dll

                          Filesize

                          2.6MB

                          MD5

                          c567e4acf580710c9901d170ad81c1a0

                          SHA1

                          d8c5bcb0f451799faa5d913af1bb54912f6ccadc

                          SHA256

                          9a9dbddd93f9929885e92cac2ed5b4f314a6394d3a2d69aa6c229a457b6cd5f1

                          SHA512

                          1e72c76e6fe65cf247ae55d0b7239591e41ec81b0c3df55b1c934b5e7243ef284effdad62db74805036b7f26df6f512786f64fb178be6f96d2697150216f962c

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\ffmpeg.dll

                          Filesize

                          2.6MB

                          MD5

                          c567e4acf580710c9901d170ad81c1a0

                          SHA1

                          d8c5bcb0f451799faa5d913af1bb54912f6ccadc

                          SHA256

                          9a9dbddd93f9929885e92cac2ed5b4f314a6394d3a2d69aa6c229a457b6cd5f1

                          SHA512

                          1e72c76e6fe65cf247ae55d0b7239591e41ec81b0c3df55b1c934b5e7243ef284effdad62db74805036b7f26df6f512786f64fb178be6f96d2697150216f962c

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\ffmpeg.dll

                          Filesize

                          2.6MB

                          MD5

                          c567e4acf580710c9901d170ad81c1a0

                          SHA1

                          d8c5bcb0f451799faa5d913af1bb54912f6ccadc

                          SHA256

                          9a9dbddd93f9929885e92cac2ed5b4f314a6394d3a2d69aa6c229a457b6cd5f1

                          SHA512

                          1e72c76e6fe65cf247ae55d0b7239591e41ec81b0c3df55b1c934b5e7243ef284effdad62db74805036b7f26df6f512786f64fb178be6f96d2697150216f962c

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\ffmpeg.dll

                          Filesize

                          2.6MB

                          MD5

                          c567e4acf580710c9901d170ad81c1a0

                          SHA1

                          d8c5bcb0f451799faa5d913af1bb54912f6ccadc

                          SHA256

                          9a9dbddd93f9929885e92cac2ed5b4f314a6394d3a2d69aa6c229a457b6cd5f1

                          SHA512

                          1e72c76e6fe65cf247ae55d0b7239591e41ec81b0c3df55b1c934b5e7243ef284effdad62db74805036b7f26df6f512786f64fb178be6f96d2697150216f962c

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\ffmpeg.dll

                          Filesize

                          2.6MB

                          MD5

                          c567e4acf580710c9901d170ad81c1a0

                          SHA1

                          d8c5bcb0f451799faa5d913af1bb54912f6ccadc

                          SHA256

                          9a9dbddd93f9929885e92cac2ed5b4f314a6394d3a2d69aa6c229a457b6cd5f1

                          SHA512

                          1e72c76e6fe65cf247ae55d0b7239591e41ec81b0c3df55b1c934b5e7243ef284effdad62db74805036b7f26df6f512786f64fb178be6f96d2697150216f962c

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\ffmpeg.dll

                          Filesize

                          2.6MB

                          MD5

                          c567e4acf580710c9901d170ad81c1a0

                          SHA1

                          d8c5bcb0f451799faa5d913af1bb54912f6ccadc

                          SHA256

                          9a9dbddd93f9929885e92cac2ed5b4f314a6394d3a2d69aa6c229a457b6cd5f1

                          SHA512

                          1e72c76e6fe65cf247ae55d0b7239591e41ec81b0c3df55b1c934b5e7243ef284effdad62db74805036b7f26df6f512786f64fb178be6f96d2697150216f962c

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\libEGL.dll

                          Filesize

                          431KB

                          MD5

                          ca5a6578789328bc4fbfce520eefbd43

                          SHA1

                          793044f0f3aba7025c40b686ec5e1337bbfaf087

                          SHA256

                          63f329f484611bc034e78df9fa04ccfce8191edd345df0809031250f9409c574

                          SHA512

                          1f5ba5f6b6a3cfbfdb532a3414be829e342bc834a23599cd19cd896b638f6b8e5961ea52117225cfc494ee59c71b84497b1570b9560bcfe1ac982001689361b7

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\libEGL.dll

                          Filesize

                          431KB

                          MD5

                          ca5a6578789328bc4fbfce520eefbd43

                          SHA1

                          793044f0f3aba7025c40b686ec5e1337bbfaf087

                          SHA256

                          63f329f484611bc034e78df9fa04ccfce8191edd345df0809031250f9409c574

                          SHA512

                          1f5ba5f6b6a3cfbfdb532a3414be829e342bc834a23599cd19cd896b638f6b8e5961ea52117225cfc494ee59c71b84497b1570b9560bcfe1ac982001689361b7

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\libGLESv2.dll

                          Filesize

                          7.5MB

                          MD5

                          9fd6decc7f9c7e1b3408ed858c2fbb61

                          SHA1

                          d862755c9ca49d2118f56486a0a0cb6568953d63

                          SHA256

                          efaa59479ef864ad054207b4647cad5dc331473b5205b7f2abf82e515d000789

                          SHA512

                          14362c4c9fca931f5a781326ba6d1d243a4751ba32bd0b4be3124813de512631c757ea31deca518265339fa139a33afc396ce9108a7963ab58c4b42cfcc925b6

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\libGLESv2.dll

                          Filesize

                          7.5MB

                          MD5

                          9fd6decc7f9c7e1b3408ed858c2fbb61

                          SHA1

                          d862755c9ca49d2118f56486a0a0cb6568953d63

                          SHA256

                          efaa59479ef864ad054207b4647cad5dc331473b5205b7f2abf82e515d000789

                          SHA512

                          14362c4c9fca931f5a781326ba6d1d243a4751ba32bd0b4be3124813de512631c757ea31deca518265339fa139a33afc396ce9108a7963ab58c4b42cfcc925b6

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\vk_swiftshader.dll

                          Filesize

                          4.3MB

                          MD5

                          969b0125f67847aec77d703697cbc6e9

                          SHA1

                          669baba1909cf4b4692f93f5ae6918fa71adf6d3

                          SHA256

                          5b123b8d7c6f136be9c058475e769aee6c1232dff08661312f171eb9a7b41026

                          SHA512

                          ad9403d3fe6f7df3dd5e5747b800cf32f069aec8138d2b532b639f35dc67849e2d3fce2a77eb02bee5d7a7ba00e26e8a0333a9c0399faaa9e05f43bb1a74eddd

                        • \Users\Admin\AppData\Local\Programs\Scratch For Discord\vulkan-1.dll

                          Filesize

                          715KB

                          MD5

                          7b2248e5c046f031b873a52c32c1a4a4

                          SHA1

                          00f08b2cff5c40f8831aa4c26f7a95705e7b6eea

                          SHA256

                          22cc1b963e82d200d160772facc26017694320d998c0fc81c78046433666765b

                          SHA512

                          f527174c89c2c9cd75aefb943ca3e2286f2c3f21aca727d8de1b8384f2a6c33112f67aa6900366d9d76af308b1caf97b16b9ea9cf91183ae854b4c38bbe31fa4

                        • \Users\Admin\AppData\Local\Temp\nst23C8.tmp\StdUtils.dll

                          Filesize

                          100KB

                          MD5

                          c6a6e03f77c313b267498515488c5740

                          SHA1

                          3d49fc2784b9450962ed6b82b46e9c3c957d7c15

                          SHA256

                          b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

                          SHA512

                          9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

                        • \Users\Admin\AppData\Local\Temp\nst23C8.tmp\System.dll

                          Filesize

                          12KB

                          MD5

                          0d7ad4f45dc6f5aa87f606d0331c6901

                          SHA1

                          48df0911f0484cbe2a8cdd5362140b63c41ee457

                          SHA256

                          3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

                          SHA512

                          c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

                        • \Users\Admin\AppData\Local\Temp\nst23C8.tmp\UAC.dll

                          Filesize

                          14KB

                          MD5

                          adb29e6b186daa765dc750128649b63d

                          SHA1

                          160cbdc4cb0ac2c142d361df138c537aa7e708c9

                          SHA256

                          2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

                          SHA512

                          b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

                        • \Users\Admin\AppData\Local\Temp\nst23C8.tmp\WinShell.dll

                          Filesize

                          3KB

                          MD5

                          1cc7c37b7e0c8cd8bf04b6cc283e1e56

                          SHA1

                          0b9519763be6625bd5abce175dcc59c96d100d4c

                          SHA256

                          9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                          SHA512

                          7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

                        • \Users\Admin\AppData\Local\Temp\nst23C8.tmp\WinShell.dll

                          Filesize

                          3KB

                          MD5

                          1cc7c37b7e0c8cd8bf04b6cc283e1e56

                          SHA1

                          0b9519763be6625bd5abce175dcc59c96d100d4c

                          SHA256

                          9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                          SHA512

                          7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

                        • \Users\Admin\AppData\Local\Temp\nst23C8.tmp\nsDialogs.dll

                          Filesize

                          9KB

                          MD5

                          466179e1c8ee8a1ff5e4427dbb6c4a01

                          SHA1

                          eb607467009074278e4bd50c7eab400e95ae48f7

                          SHA256

                          1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172

                          SHA512

                          7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817

                        • \Users\Admin\AppData\Local\Temp\nst23C8.tmp\nsProcess.dll

                          Filesize

                          4KB

                          MD5

                          f0438a894f3a7e01a4aae8d1b5dd0289

                          SHA1

                          b058e3fcfb7b550041da16bf10d8837024c38bf6

                          SHA256

                          30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11

                          SHA512

                          f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

                        • \Users\Admin\AppData\Local\Temp\nst23C8.tmp\nsis7z.dll

                          Filesize

                          424KB

                          MD5

                          80e44ce4895304c6a3a831310fbf8cd0

                          SHA1

                          36bd49ae21c460be5753a904b4501f1abca53508

                          SHA256

                          b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

                          SHA512

                          c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

                        • memory/316-270-0x0000000002960000-0x0000000002962000-memory.dmp

                          Filesize

                          8KB

                        • memory/1324-381-0x0000000004890000-0x0000000005628000-memory.dmp

                          Filesize

                          13.6MB

                        • memory/1324-308-0x0000000000060000-0x0000000000061000-memory.dmp

                          Filesize

                          4KB

                        • memory/1324-343-0x0000000077370000-0x0000000077371000-memory.dmp

                          Filesize

                          4KB

                        • memory/1740-370-0x0000000000A80000-0x0000000000A81000-memory.dmp

                          Filesize

                          4KB