Analysis

  • max time kernel
    143s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/07/2023, 08:30

General

  • Target

    DiscordSetup.exe

  • Size

    91.1MB

  • MD5

    e566828b19ea32efd096d427f1350c08

  • SHA1

    cf4f02f6613059942da0c32356db5ac1dce43b56

  • SHA256

    e4521f4f089eb7993188901318b2823c9f5293193ffe7cc6d85921c76ac372f7

  • SHA512

    4044d03d755525b2ad893318f270458b10b6e52455fe35717a1db5a6bfbc0c5cd4d6fd5d18813f9d1efe76f5f90edb6de96fd8e7a7e15057c713faf341bcfc79

  • SSDEEP

    1572864:WnKEvGyXi+aPcu1n0ckUoJr0p03kRPoNnn+d3MGpHKmLYj/:TyXBoDn0lO03kRPh3bpHEj/

Malware Config

Signatures

  • Reads local data of messenger clients 2 TTPs

    Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

  • Adds Run key to start application 2 TTPs 2 IoCs
  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Executes dropped EXE 12 IoCs
  • Loads dropped DLL 21 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 11 IoCs
  • Modifies registry key 1 TTPs 5 IoCs
  • Suspicious behavior: EnumeratesProcesses 20 IoCs
  • Suspicious use of AdjustPrivilegeToken 15 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DiscordSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\DiscordSetup.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2312
    • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
      "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2496
      • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe
        "C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe" --squirrel-install 1.0.9013
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:2172
        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe
          C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\discord /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\discord\Crashpad --url=https://sentry.io/api/146342/minidump/?sentry_key=384ce4413de74fe0be270abe03b2b35a "--annotation=_companyName=Discord Inc." --annotation=_productName=Discord --annotation=_version=1.0.9013 --annotation=plat=Win32 --annotation=prod=Electron --annotation=ver=22.3.2 --initial-client-data=0x4b8,0x4bc,0x4c0,0x4b4,0x4c4,0x812ff78,0x812ff88,0x812ff94
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3212
        • C:\Users\Admin\AppData\Local\Discord\Update.exe
          C:\Users\Admin\AppData\Local\Discord\Update.exe --createShortcut Discord.exe --setupIcon C:\Users\Admin\AppData\Local\Discord\app.ico
          4⤵
          • Executes dropped EXE
          PID:224
        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe
          "C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1688 --field-trial-handle=1912,i,6122103090614995275,15535178649925031558,131072 --disable-features=HardwareMediaKeyHandling,MediaSessionService,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4688
        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe
          "C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --mojo-platform-channel-handle=2156 --field-trial-handle=1912,i,6122103090614995275,15535178649925031558,131072 --disable-features=HardwareMediaKeyHandling,MediaSessionService,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4492
        • C:\Windows\SysWOW64\reg.exe
          C:\Windows\System32\reg.exe add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Discord /d "\"C:\Users\Admin\AppData\Local\Discord\Update.exe\" --processStart Discord.exe" /f
          4⤵
          • Adds Run key to start application
          • Modifies registry key
          PID:1352
      • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe
        "C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe" --squirrel-firstrun
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:408
        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe
          C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\discord /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\discord\Crashpad --url=https://sentry.io/api/146342/minidump/?sentry_key=384ce4413de74fe0be270abe03b2b35a "--annotation=_companyName=Discord Inc." --annotation=_productName=Discord --annotation=_version=1.0.9013 --annotation=plat=Win32 --annotation=prod=Electron --annotation=ver=22.3.2 --initial-client-data=0x4a0,0x4a4,0x4a8,0x49c,0x4ac,0x812ff78,0x812ff88,0x812ff94
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2988
        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe
          "C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1584 --field-trial-handle=1760,i,16105683380203464675,17846950487349630970,131072 --disable-features=HardwareMediaKeyHandling,MediaSessionService,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4236
        • C:\Windows\SysWOW64\reg.exe
          C:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord /ve /d "URL:Discord Protocol" /f
          4⤵
          • Modifies registry class
          • Modifies registry key
          PID:4560
        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe
          "C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --mojo-platform-channel-handle=2424 --field-trial-handle=1760,i,16105683380203464675,17846950487349630970,131072 --disable-features=HardwareMediaKeyHandling,MediaSessionService,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1776
        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe
          "C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --app-user-model-id=com.squirrel.Discord.Discord --app-path="C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2664 --field-trial-handle=1760,i,16105683380203464675,17846950487349630970,131072 --disable-features=HardwareMediaKeyHandling,MediaSessionService,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1140
        • C:\Windows\SysWOW64\reg.exe
          C:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord /v "URL Protocol" /f
          4⤵
          • Modifies registry class
          • Modifies registry key
          PID:4832
        • C:\Windows\SysWOW64\reg.exe
          C:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord\DefaultIcon /ve /d "\"C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe\",-1" /f
          4⤵
          • Modifies registry class
          • Modifies registry key
          PID:1804
        • C:\Windows\SysWOW64\reg.exe
          C:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord\shell\open\command /ve /d "\"C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe\" --url -- \"%1\"" /f
          4⤵
          • Modifies registry class
          • Modifies registry key
          PID:1692
        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe
          "C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --mojo-platform-channel-handle=3024 --field-trial-handle=1760,i,16105683380203464675,17846950487349630970,131072 --disable-features=HardwareMediaKeyHandling,MediaSessionService,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4528

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Discord\Update.exe

          Filesize

          1.5MB

          MD5

          0baeac29996d82b96e7599e8ffb35376

          SHA1

          647154e3e84cfb3160cacef05137d61a70329189

          SHA256

          0ddb31c14fa6ec35e0caaf85f23423d3dc33fb30d6dfdcb7361694de4d7e2ad9

          SHA512

          a0f578e269cae62732e90647fa0c51225a8db6859f73c2db0e44cd91a1beb2676899239dba7d826976436148773e79f2ce92feb817520c9f7ca8a0ab3ea65615

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\D3DCompiler_47.dll

          Filesize

          3.9MB

          MD5

          3b4647bcb9feb591c2c05d1a606ed988

          SHA1

          b42c59f96fb069fd49009dfd94550a7764e6c97c

          SHA256

          35773c397036b368c1e75d4e0d62c36d98139ebe74e42c1ff7be71c6b5a19fd7

          SHA512

          00cd443b36f53985212ac43b44f56c18bf70e25119bbf9c59d05e2358ff45254b957f1ec63fc70fb57b1726fd8f76ccfad8103c67454b817a4f183f9122e3f50

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe

          Filesize

          130.3MB

          MD5

          0c6891f8c5638f646b927500c6f6323b

          SHA1

          33dedf5af77f04e268d9d9aefdfb02478eb849bd

          SHA256

          f4764bfcd3e2d42a69c5858cf2b2a17ff80ebfe36337d3cdea4207c24eed0b40

          SHA512

          eadb706f80771f96e4444cfbb695833e7a673d14c236c40153b21bb8c92abcee50ee283b855552e78f4d820e9284b1112776f67ec89a2005792e8584881102b6

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe

          Filesize

          130.3MB

          MD5

          0c6891f8c5638f646b927500c6f6323b

          SHA1

          33dedf5af77f04e268d9d9aefdfb02478eb849bd

          SHA256

          f4764bfcd3e2d42a69c5858cf2b2a17ff80ebfe36337d3cdea4207c24eed0b40

          SHA512

          eadb706f80771f96e4444cfbb695833e7a673d14c236c40153b21bb8c92abcee50ee283b855552e78f4d820e9284b1112776f67ec89a2005792e8584881102b6

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe

          Filesize

          130.3MB

          MD5

          0c6891f8c5638f646b927500c6f6323b

          SHA1

          33dedf5af77f04e268d9d9aefdfb02478eb849bd

          SHA256

          f4764bfcd3e2d42a69c5858cf2b2a17ff80ebfe36337d3cdea4207c24eed0b40

          SHA512

          eadb706f80771f96e4444cfbb695833e7a673d14c236c40153b21bb8c92abcee50ee283b855552e78f4d820e9284b1112776f67ec89a2005792e8584881102b6

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe

          Filesize

          130.3MB

          MD5

          0c6891f8c5638f646b927500c6f6323b

          SHA1

          33dedf5af77f04e268d9d9aefdfb02478eb849bd

          SHA256

          f4764bfcd3e2d42a69c5858cf2b2a17ff80ebfe36337d3cdea4207c24eed0b40

          SHA512

          eadb706f80771f96e4444cfbb695833e7a673d14c236c40153b21bb8c92abcee50ee283b855552e78f4d820e9284b1112776f67ec89a2005792e8584881102b6

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe

          Filesize

          130.3MB

          MD5

          0c6891f8c5638f646b927500c6f6323b

          SHA1

          33dedf5af77f04e268d9d9aefdfb02478eb849bd

          SHA256

          f4764bfcd3e2d42a69c5858cf2b2a17ff80ebfe36337d3cdea4207c24eed0b40

          SHA512

          eadb706f80771f96e4444cfbb695833e7a673d14c236c40153b21bb8c92abcee50ee283b855552e78f4d820e9284b1112776f67ec89a2005792e8584881102b6

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe

          Filesize

          130.3MB

          MD5

          0c6891f8c5638f646b927500c6f6323b

          SHA1

          33dedf5af77f04e268d9d9aefdfb02478eb849bd

          SHA256

          f4764bfcd3e2d42a69c5858cf2b2a17ff80ebfe36337d3cdea4207c24eed0b40

          SHA512

          eadb706f80771f96e4444cfbb695833e7a673d14c236c40153b21bb8c92abcee50ee283b855552e78f4d820e9284b1112776f67ec89a2005792e8584881102b6

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe

          Filesize

          130.3MB

          MD5

          0c6891f8c5638f646b927500c6f6323b

          SHA1

          33dedf5af77f04e268d9d9aefdfb02478eb849bd

          SHA256

          f4764bfcd3e2d42a69c5858cf2b2a17ff80ebfe36337d3cdea4207c24eed0b40

          SHA512

          eadb706f80771f96e4444cfbb695833e7a673d14c236c40153b21bb8c92abcee50ee283b855552e78f4d820e9284b1112776f67ec89a2005792e8584881102b6

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe

          Filesize

          130.3MB

          MD5

          0c6891f8c5638f646b927500c6f6323b

          SHA1

          33dedf5af77f04e268d9d9aefdfb02478eb849bd

          SHA256

          f4764bfcd3e2d42a69c5858cf2b2a17ff80ebfe36337d3cdea4207c24eed0b40

          SHA512

          eadb706f80771f96e4444cfbb695833e7a673d14c236c40153b21bb8c92abcee50ee283b855552e78f4d820e9284b1112776f67ec89a2005792e8584881102b6

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe

          Filesize

          130.3MB

          MD5

          0c6891f8c5638f646b927500c6f6323b

          SHA1

          33dedf5af77f04e268d9d9aefdfb02478eb849bd

          SHA256

          f4764bfcd3e2d42a69c5858cf2b2a17ff80ebfe36337d3cdea4207c24eed0b40

          SHA512

          eadb706f80771f96e4444cfbb695833e7a673d14c236c40153b21bb8c92abcee50ee283b855552e78f4d820e9284b1112776f67ec89a2005792e8584881102b6

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\Discord.exe

          Filesize

          130.3MB

          MD5

          0c6891f8c5638f646b927500c6f6323b

          SHA1

          33dedf5af77f04e268d9d9aefdfb02478eb849bd

          SHA256

          f4764bfcd3e2d42a69c5858cf2b2a17ff80ebfe36337d3cdea4207c24eed0b40

          SHA512

          eadb706f80771f96e4444cfbb695833e7a673d14c236c40153b21bb8c92abcee50ee283b855552e78f4d820e9284b1112776f67ec89a2005792e8584881102b6

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\app.ico

          Filesize

          278KB

          MD5

          084f9bc0136f779f82bea88b5c38a358

          SHA1

          64f210b7888e5474c3aabcb602d895d58929b451

          SHA256

          dfcea1bea8a924252d507d0316d8cf38efc61cf1314e47dca3eb723f47d5fe43

          SHA512

          65bccb3e1d4849b61c68716831578300b20dcaf1cbc155512edbc6d73dccbaf6e5495d4f95d089ee496f8e080057b7097a628cc104fa8eaad8da866891d9e3eb

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\chrome_100_percent.pak

          Filesize

          126KB

          MD5

          d31f3439e2a3f7bee4ddd26f46a2b83f

          SHA1

          c5a26f86eb119ae364c5bf707bebed7e871fc214

          SHA256

          9f79f46ca911543ead096a5ee28a34bf1fbe56ec9ba956032a6a2892b254857e

          SHA512

          aa27c97bf5581eb3f5e88f112df8bfb6a5283ce44eb13fbc41855008f84fb5b111dfe0616c310c3642b7f8ac99623d7c217aecc353f54f4d8f7042840099abc5

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\chrome_200_percent.pak

          Filesize

          175KB

          MD5

          5604b67e3f03ab2741f910a250c91137

          SHA1

          a4bb15ac7914c22575f1051a29c448f215fe027f

          SHA256

          1408387e87cb5308530def6ce57bdc4e0abbbaa9e70f687fd6c3a02a56a0536c

          SHA512

          5e6f875068792e862b1fc8bb7b340ac0f1f4c51e53e50be81a5af8575ca3591f4e7eb9239890178b17c5a8ff4ebb23719190d7db0bd8a9aa6dcb4308ffa9a34d

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\d3dcompiler_47.dll

          Filesize

          3.9MB

          MD5

          3b4647bcb9feb591c2c05d1a606ed988

          SHA1

          b42c59f96fb069fd49009dfd94550a7764e6c97c

          SHA256

          35773c397036b368c1e75d4e0d62c36d98139ebe74e42c1ff7be71c6b5a19fd7

          SHA512

          00cd443b36f53985212ac43b44f56c18bf70e25119bbf9c59d05e2358ff45254b957f1ec63fc70fb57b1726fd8f76ccfad8103c67454b817a4f183f9122e3f50

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\d3dcompiler_47.dll

          Filesize

          3.9MB

          MD5

          3b4647bcb9feb591c2c05d1a606ed988

          SHA1

          b42c59f96fb069fd49009dfd94550a7764e6c97c

          SHA256

          35773c397036b368c1e75d4e0d62c36d98139ebe74e42c1ff7be71c6b5a19fd7

          SHA512

          00cd443b36f53985212ac43b44f56c18bf70e25119bbf9c59d05e2358ff45254b957f1ec63fc70fb57b1726fd8f76ccfad8103c67454b817a4f183f9122e3f50

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\ffmpeg.dll

          Filesize

          3.1MB

          MD5

          8967377c84abc455f2b20b58d8af0dc3

          SHA1

          45fa04d5c3e521aa56d1fa8a6a542a8f153cd3c3

          SHA256

          d47c33052d7cb7ca7b8267339020541446ffda074a6d7c99b7fe7ed615931154

          SHA512

          41f84bb538999d8337eae893c05d8c56fbdd2fb59c43f410647a95f31ee89e787c8fdefc8b396200b9e3d526e6e30c9ea82010677ba61948f50efbb045dcd50b

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\ffmpeg.dll

          Filesize

          3.1MB

          MD5

          8967377c84abc455f2b20b58d8af0dc3

          SHA1

          45fa04d5c3e521aa56d1fa8a6a542a8f153cd3c3

          SHA256

          d47c33052d7cb7ca7b8267339020541446ffda074a6d7c99b7fe7ed615931154

          SHA512

          41f84bb538999d8337eae893c05d8c56fbdd2fb59c43f410647a95f31ee89e787c8fdefc8b396200b9e3d526e6e30c9ea82010677ba61948f50efbb045dcd50b

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\ffmpeg.dll

          Filesize

          3.1MB

          MD5

          8967377c84abc455f2b20b58d8af0dc3

          SHA1

          45fa04d5c3e521aa56d1fa8a6a542a8f153cd3c3

          SHA256

          d47c33052d7cb7ca7b8267339020541446ffda074a6d7c99b7fe7ed615931154

          SHA512

          41f84bb538999d8337eae893c05d8c56fbdd2fb59c43f410647a95f31ee89e787c8fdefc8b396200b9e3d526e6e30c9ea82010677ba61948f50efbb045dcd50b

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\ffmpeg.dll

          Filesize

          3.1MB

          MD5

          8967377c84abc455f2b20b58d8af0dc3

          SHA1

          45fa04d5c3e521aa56d1fa8a6a542a8f153cd3c3

          SHA256

          d47c33052d7cb7ca7b8267339020541446ffda074a6d7c99b7fe7ed615931154

          SHA512

          41f84bb538999d8337eae893c05d8c56fbdd2fb59c43f410647a95f31ee89e787c8fdefc8b396200b9e3d526e6e30c9ea82010677ba61948f50efbb045dcd50b

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\ffmpeg.dll

          Filesize

          3.1MB

          MD5

          8967377c84abc455f2b20b58d8af0dc3

          SHA1

          45fa04d5c3e521aa56d1fa8a6a542a8f153cd3c3

          SHA256

          d47c33052d7cb7ca7b8267339020541446ffda074a6d7c99b7fe7ed615931154

          SHA512

          41f84bb538999d8337eae893c05d8c56fbdd2fb59c43f410647a95f31ee89e787c8fdefc8b396200b9e3d526e6e30c9ea82010677ba61948f50efbb045dcd50b

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\ffmpeg.dll

          Filesize

          3.1MB

          MD5

          8967377c84abc455f2b20b58d8af0dc3

          SHA1

          45fa04d5c3e521aa56d1fa8a6a542a8f153cd3c3

          SHA256

          d47c33052d7cb7ca7b8267339020541446ffda074a6d7c99b7fe7ed615931154

          SHA512

          41f84bb538999d8337eae893c05d8c56fbdd2fb59c43f410647a95f31ee89e787c8fdefc8b396200b9e3d526e6e30c9ea82010677ba61948f50efbb045dcd50b

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\ffmpeg.dll

          Filesize

          3.1MB

          MD5

          8967377c84abc455f2b20b58d8af0dc3

          SHA1

          45fa04d5c3e521aa56d1fa8a6a542a8f153cd3c3

          SHA256

          d47c33052d7cb7ca7b8267339020541446ffda074a6d7c99b7fe7ed615931154

          SHA512

          41f84bb538999d8337eae893c05d8c56fbdd2fb59c43f410647a95f31ee89e787c8fdefc8b396200b9e3d526e6e30c9ea82010677ba61948f50efbb045dcd50b

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\ffmpeg.dll

          Filesize

          3.1MB

          MD5

          8967377c84abc455f2b20b58d8af0dc3

          SHA1

          45fa04d5c3e521aa56d1fa8a6a542a8f153cd3c3

          SHA256

          d47c33052d7cb7ca7b8267339020541446ffda074a6d7c99b7fe7ed615931154

          SHA512

          41f84bb538999d8337eae893c05d8c56fbdd2fb59c43f410647a95f31ee89e787c8fdefc8b396200b9e3d526e6e30c9ea82010677ba61948f50efbb045dcd50b

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\ffmpeg.dll

          Filesize

          3.1MB

          MD5

          8967377c84abc455f2b20b58d8af0dc3

          SHA1

          45fa04d5c3e521aa56d1fa8a6a542a8f153cd3c3

          SHA256

          d47c33052d7cb7ca7b8267339020541446ffda074a6d7c99b7fe7ed615931154

          SHA512

          41f84bb538999d8337eae893c05d8c56fbdd2fb59c43f410647a95f31ee89e787c8fdefc8b396200b9e3d526e6e30c9ea82010677ba61948f50efbb045dcd50b

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\icudtl.dat

          Filesize

          10.0MB

          MD5

          76bef9b8bb32e1e54fe1054c97b84a10

          SHA1

          05dfea2a3afeda799ab01bb7fbce628cacd596f4

          SHA256

          97b978a19edd4746e9a44d9a44bb4bc519e127a203c247837ec0922f573449e3

          SHA512

          7330df8129e7a0b7b3655498b2593321595ec29445ea193c8f473c593590f5701eb7125ff6e5cde970c54765f9565fa51c2c54af6e2127f582ab45efa7a3a0f6

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\installer.db

          Filesize

          24KB

          MD5

          2f716958a432465e7cf46dcfe6844845

          SHA1

          d88b0aff9fece923bd71105f57fe17f0327c6628

          SHA256

          c611642500f4e78b8ab3bffa383bfc8eb7c5efa62246530cc6e94235c7463a83

          SHA512

          86486477e7c25a775bf9d0e0db74262daf30083442c8fc36bcf7ae94be4eccdd49744c45997eecd7b6f54fa346969777146da75c0473cb5a45697a86e1dcd466

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\libEGL.dll

          Filesize

          394KB

          MD5

          b1e94d2c5465efd8364c50864d753d47

          SHA1

          7bdca5b487b0b782c8942e2655b1934562af5307

          SHA256

          e28676cc24662a0dca7264af64a629769398cb6856c4b015c4139ad35846d635

          SHA512

          4fc7abbd8a397eca852fedd30a8f442f39c2ab6b978585f596acb0f58c34c0014d4561245f0a6ffac191a2ca7a65a5e1d2d4c2af348fd9c651074a2e96beaf96

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\libEGL.dll

          Filesize

          394KB

          MD5

          b1e94d2c5465efd8364c50864d753d47

          SHA1

          7bdca5b487b0b782c8942e2655b1934562af5307

          SHA256

          e28676cc24662a0dca7264af64a629769398cb6856c4b015c4139ad35846d635

          SHA512

          4fc7abbd8a397eca852fedd30a8f442f39c2ab6b978585f596acb0f58c34c0014d4561245f0a6ffac191a2ca7a65a5e1d2d4c2af348fd9c651074a2e96beaf96

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\libGLESv2.dll

          Filesize

          6.4MB

          MD5

          d10aa3388c04ed6c28c0e280a050e83b

          SHA1

          4c53a9657f11fe3412f4ae810628955437e2e2ac

          SHA256

          13dc4387ac9b6abb2c638637f16eb4b553e4f7b9a167644cb21d46a816fdf805

          SHA512

          221ef26ba7586550a4a97583fbf648e3c358a1de3e9718101a7c3e2a8e0e83eae17fe6647d1d3ac32911763fec4f0a5262a7239f5ad11ce6c8ac6d14be877dc7

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\libGLESv2.dll

          Filesize

          6.4MB

          MD5

          d10aa3388c04ed6c28c0e280a050e83b

          SHA1

          4c53a9657f11fe3412f4ae810628955437e2e2ac

          SHA256

          13dc4387ac9b6abb2c638637f16eb4b553e4f7b9a167644cb21d46a816fdf805

          SHA512

          221ef26ba7586550a4a97583fbf648e3c358a1de3e9718101a7c3e2a8e0e83eae17fe6647d1d3ac32911763fec4f0a5262a7239f5ad11ce6c8ac6d14be877dc7

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\libegl.dll

          Filesize

          394KB

          MD5

          b1e94d2c5465efd8364c50864d753d47

          SHA1

          7bdca5b487b0b782c8942e2655b1934562af5307

          SHA256

          e28676cc24662a0dca7264af64a629769398cb6856c4b015c4139ad35846d635

          SHA512

          4fc7abbd8a397eca852fedd30a8f442f39c2ab6b978585f596acb0f58c34c0014d4561245f0a6ffac191a2ca7a65a5e1d2d4c2af348fd9c651074a2e96beaf96

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\libglesv2.dll

          Filesize

          6.4MB

          MD5

          d10aa3388c04ed6c28c0e280a050e83b

          SHA1

          4c53a9657f11fe3412f4ae810628955437e2e2ac

          SHA256

          13dc4387ac9b6abb2c638637f16eb4b553e4f7b9a167644cb21d46a816fdf805

          SHA512

          221ef26ba7586550a4a97583fbf648e3c358a1de3e9718101a7c3e2a8e0e83eae17fe6647d1d3ac32911763fec4f0a5262a7239f5ad11ce6c8ac6d14be877dc7

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\locales\en-US.pak

          Filesize

          313KB

          MD5

          3f6f4b2c2f24e3893882cdaa1ccfe1a3

          SHA1

          b021cca30e774e0b91ee21b5beb030fea646098f

          SHA256

          bb165eaa51456b52fcbdf7639ee727280e335a1f6b4cfb91afc45222895b564f

          SHA512

          bd80ddaa87f41cde20527ff34817d98605f11b30a291e129478712ebebe47956dbd49a317d3eeb223adf736c34750b59b68ad9d646c661474ad69866d5a53c5c

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\resources.pak

          Filesize

          5.1MB

          MD5

          7fd8c5f2e763aa919775b9dccac733de

          SHA1

          0192874c667b10b9da77e97b9897e794121f4e5c

          SHA256

          5cffe876882d9f5acf5e2dbc5629b0083a2d3c87e7f57c0992ea5a4c720bf38a

          SHA512

          977881e62fb96130f9a042b015e7e22ad4ae5ec63b6a73946783d63dd983b8edca021cd6d822ce51828451b2a94c4a20584802b495feaa863aaf6b2660643ff5

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\resources\app.asar

          Filesize

          4.6MB

          MD5

          601c17da36e2291f43925ef313b338d4

          SHA1

          cbcc577b9640c02bd0342387ed280b0bfb9f68d7

          SHA256

          c9389005bbe6e9321bc3771f96f900c881196b9266cc5f8330c987b78b4b2609

          SHA512

          e7faaf0446ce7403fce90a2d15a3a2dee50b2f244c19f25c48d68fcfdf264559d964e421f9f884f443f242dce6256a0d888d42a8835c35511fbb88d7220066d7

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\resources\build_info.json

          Filesize

          85B

          MD5

          c80c4f7cde5a7207861dc9509792629c

          SHA1

          fcd0d8b3dcf21c1fd4ae26f46496294a0ccbcd1e

          SHA256

          9f57e7a708998fd5b0dde9bd4102c446cf428d99ba74b58fab5e1f74b21c1d0f

          SHA512

          f1702ac91f2ab1962651634ff7a13625f6dfa136b46fc3e2da5d03f8a2186b0991313596311583ab6206ec7ba68761d7cb7bd51eeffb8204c44b6bee291303b0

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\updater.node

          Filesize

          3.3MB

          MD5

          31a4d87a2327cea4c3d8a8bbbff1d934

          SHA1

          3730bbfc250005938e3413f40ff8cd89c55e7067

          SHA256

          6b9803eec2bfef277dd1243a13ea3edad1c160317ca99b7388ea38847ba033ba

          SHA512

          bd879ad8bea61974045bc8f49389ee8f7d86142d6f440d935b1f91e7b24b54ff125efe418f9410b3a9ed85aa285bea15b7fe101229efefc99e6d272340dfc08d

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\updater.node

          Filesize

          3.3MB

          MD5

          31a4d87a2327cea4c3d8a8bbbff1d934

          SHA1

          3730bbfc250005938e3413f40ff8cd89c55e7067

          SHA256

          6b9803eec2bfef277dd1243a13ea3edad1c160317ca99b7388ea38847ba033ba

          SHA512

          bd879ad8bea61974045bc8f49389ee8f7d86142d6f440d935b1f91e7b24b54ff125efe418f9410b3a9ed85aa285bea15b7fe101229efefc99e6d272340dfc08d

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\v8_context_snapshot.bin

          Filesize

          585KB

          MD5

          b59edfc69aba2f4c433d5b0861d9ac31

          SHA1

          a2adeb4d3b45170351d1c8ba0dafde71fe35b9c7

          SHA256

          82c3df9c5e8f300b1af7b1d070163b43648a762acff0ce78f801382d9cd58d16

          SHA512

          b737160e99b6baa6f960316a223b47690335372ee2d9bf0331e331041dd2e8f727805377ee673e3ace494af01914d301b7e27c5fe5f6642ee5d08afa5442f8f9

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\vk_swiftshader.dll

          Filesize

          4.3MB

          MD5

          ead6d1beae6064f66863d9008ebcce13

          SHA1

          1a5118000490e4887e1fc16fc4c0ff1594a022c9

          SHA256

          370c32dca7ff5105972b62d4185384b0d19f361d5e51454931779ab639b88e11

          SHA512

          4e059cb97877b2872717aed09eb14f3be9709506e95277c349429906fcad72ab206e096219806a4d868c247eca06a5e79d3fc7773fcd2811886c1654f9215452

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\vk_swiftshader.dll

          Filesize

          4.3MB

          MD5

          ead6d1beae6064f66863d9008ebcce13

          SHA1

          1a5118000490e4887e1fc16fc4c0ff1594a022c9

          SHA256

          370c32dca7ff5105972b62d4185384b0d19f361d5e51454931779ab639b88e11

          SHA512

          4e059cb97877b2872717aed09eb14f3be9709506e95277c349429906fcad72ab206e096219806a4d868c247eca06a5e79d3fc7773fcd2811886c1654f9215452

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\vk_swiftshader.dll

          Filesize

          4.3MB

          MD5

          ead6d1beae6064f66863d9008ebcce13

          SHA1

          1a5118000490e4887e1fc16fc4c0ff1594a022c9

          SHA256

          370c32dca7ff5105972b62d4185384b0d19f361d5e51454931779ab639b88e11

          SHA512

          4e059cb97877b2872717aed09eb14f3be9709506e95277c349429906fcad72ab206e096219806a4d868c247eca06a5e79d3fc7773fcd2811886c1654f9215452

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\vk_swiftshader_icd.json

          Filesize

          106B

          MD5

          8642dd3a87e2de6e991fae08458e302b

          SHA1

          9c06735c31cec00600fd763a92f8112d085bd12a

          SHA256

          32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

          SHA512

          f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\vulkan-1.dll

          Filesize

          793KB

          MD5

          6e972756958434d3fdc85c995ab21422

          SHA1

          b0321f9a2de3c79b2bca4a5397099c4ece3872b4

          SHA256

          74c69ddcab52c35291f3580ff8907dba6862419404aad67c0051c799ebdcc77f

          SHA512

          c41b3bbfdf9a5f918656071d44c1ef3dc337ec1f31a95739d598da09d4f94d9f489c2273dad32cf99f5d535ba91e7a830954d6c98fa11b8360c905a3f901bab3

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\vulkan-1.dll

          Filesize

          793KB

          MD5

          6e972756958434d3fdc85c995ab21422

          SHA1

          b0321f9a2de3c79b2bca4a5397099c4ece3872b4

          SHA256

          74c69ddcab52c35291f3580ff8907dba6862419404aad67c0051c799ebdcc77f

          SHA512

          c41b3bbfdf9a5f918656071d44c1ef3dc337ec1f31a95739d598da09d4f94d9f489c2273dad32cf99f5d535ba91e7a830954d6c98fa11b8360c905a3f901bab3

        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9013\vulkan-1.dll

          Filesize

          793KB

          MD5

          6e972756958434d3fdc85c995ab21422

          SHA1

          b0321f9a2de3c79b2bca4a5397099c4ece3872b4

          SHA256

          74c69ddcab52c35291f3580ff8907dba6862419404aad67c0051c799ebdcc77f

          SHA512

          c41b3bbfdf9a5f918656071d44c1ef3dc337ec1f31a95739d598da09d4f94d9f489c2273dad32cf99f5d535ba91e7a830954d6c98fa11b8360c905a3f901bab3

        • C:\Users\Admin\AppData\Local\Discord\app.ico

          Filesize

          278KB

          MD5

          084f9bc0136f779f82bea88b5c38a358

          SHA1

          64f210b7888e5474c3aabcb602d895d58929b451

          SHA256

          dfcea1bea8a924252d507d0316d8cf38efc61cf1314e47dca3eb723f47d5fe43

          SHA512

          65bccb3e1d4849b61c68716831578300b20dcaf1cbc155512edbc6d73dccbaf6e5495d4f95d089ee496f8e080057b7097a628cc104fa8eaad8da866891d9e3eb

        • C:\Users\Admin\AppData\Local\Discord\app.ico

          Filesize

          278KB

          MD5

          084f9bc0136f779f82bea88b5c38a358

          SHA1

          64f210b7888e5474c3aabcb602d895d58929b451

          SHA256

          dfcea1bea8a924252d507d0316d8cf38efc61cf1314e47dca3eb723f47d5fe43

          SHA512

          65bccb3e1d4849b61c68716831578300b20dcaf1cbc155512edbc6d73dccbaf6e5495d4f95d089ee496f8e080057b7097a628cc104fa8eaad8da866891d9e3eb

        • C:\Users\Admin\AppData\Local\Discord\packages\Discord-1.0.9013-full.nupkg

          Filesize

          90.2MB

          MD5

          62ae8da110ba3b8634d00cbcbb436ff4

          SHA1

          a73292eb7b261d649c969f36d802562f1b65752e

          SHA256

          fc49f3a87706894cb6ea1252ae8e0806d3f439ab14e458e30fb4438534672adc

          SHA512

          1538d46cafd5cde728acbf8d527cac471992ed967cb0f2f9c3fd51c636ac5adc45bb278eb8e181456b5aa81fda6b4b1691ec3cee8d64c9f1bb28d26806bc1e0d

        • C:\Users\Admin\AppData\Local\Discord\packages\RELEASES

          Filesize

          80B

          MD5

          d634439696544cf2b474a1177f99f3bb

          SHA1

          77e448b51ffb7928b9bb794fed6a976df8bf50f4

          SHA256

          b48098fab12e9cfb5fe016c64cd22d089eacc4b942202745a5a9fb756b7d8aaf

          SHA512

          a76558119c3eeaf120b27653af2b275e960fb10e1c094cd9b0fd5ca37fb84febb3e3ae7946d8ad9a97677d32a634b397d3b9cc1ec58dbb0dfd9ff14adfe4230d

        • C:\Users\Admin\AppData\Local\Discord\packages\RELEASES

          Filesize

          80B

          MD5

          d634439696544cf2b474a1177f99f3bb

          SHA1

          77e448b51ffb7928b9bb794fed6a976df8bf50f4

          SHA256

          b48098fab12e9cfb5fe016c64cd22d089eacc4b942202745a5a9fb756b7d8aaf

          SHA512

          a76558119c3eeaf120b27653af2b275e960fb10e1c094cd9b0fd5ca37fb84febb3e3ae7946d8ad9a97677d32a634b397d3b9cc1ec58dbb0dfd9ff14adfe4230d

        • C:\Users\Admin\AppData\Local\Discord\update.exe

          Filesize

          1.5MB

          MD5

          0baeac29996d82b96e7599e8ffb35376

          SHA1

          647154e3e84cfb3160cacef05137d61a70329189

          SHA256

          0ddb31c14fa6ec35e0caaf85f23423d3dc33fb30d6dfdcb7361694de4d7e2ad9

          SHA512

          a0f578e269cae62732e90647fa0c51225a8db6859f73c2db0e44cd91a1beb2676899239dba7d826976436148773e79f2ce92feb817520c9f7ca8a0ab3ea65615

        • C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Update.exe.log

          Filesize

          1KB

          MD5

          6eb96c16eb677b6a8c1df381a0497a1a

          SHA1

          d4596baadc2d4bee89d57e1718ab30c0b7d563ec

          SHA256

          e96331392d474ca0fbc51036c7d55aa3a37aae6b074d50ebd106a277b0cb4097

          SHA512

          3d472d56ceb73a3df3f65eff6af088b3a81ab553153cbda925091500a6543cf83e84872f2bc81f218deddecd8f3c9868d784c2fe08ece95f915138becaecfb0b

        • C:\Users\Admin\AppData\Local\SquirrelTemp\Discord-1.0.9013-full.nupkg

          Filesize

          90.2MB

          MD5

          62ae8da110ba3b8634d00cbcbb436ff4

          SHA1

          a73292eb7b261d649c969f36d802562f1b65752e

          SHA256

          fc49f3a87706894cb6ea1252ae8e0806d3f439ab14e458e30fb4438534672adc

          SHA512

          1538d46cafd5cde728acbf8d527cac471992ed967cb0f2f9c3fd51c636ac5adc45bb278eb8e181456b5aa81fda6b4b1691ec3cee8d64c9f1bb28d26806bc1e0d

        • C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES

          Filesize

          80B

          MD5

          d634439696544cf2b474a1177f99f3bb

          SHA1

          77e448b51ffb7928b9bb794fed6a976df8bf50f4

          SHA256

          b48098fab12e9cfb5fe016c64cd22d089eacc4b942202745a5a9fb756b7d8aaf

          SHA512

          a76558119c3eeaf120b27653af2b275e960fb10e1c094cd9b0fd5ca37fb84febb3e3ae7946d8ad9a97677d32a634b397d3b9cc1ec58dbb0dfd9ff14adfe4230d

        • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe

          Filesize

          1.5MB

          MD5

          0baeac29996d82b96e7599e8ffb35376

          SHA1

          647154e3e84cfb3160cacef05137d61a70329189

          SHA256

          0ddb31c14fa6ec35e0caaf85f23423d3dc33fb30d6dfdcb7361694de4d7e2ad9

          SHA512

          a0f578e269cae62732e90647fa0c51225a8db6859f73c2db0e44cd91a1beb2676899239dba7d826976436148773e79f2ce92feb817520c9f7ca8a0ab3ea65615

        • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe

          Filesize

          1.5MB

          MD5

          0baeac29996d82b96e7599e8ffb35376

          SHA1

          647154e3e84cfb3160cacef05137d61a70329189

          SHA256

          0ddb31c14fa6ec35e0caaf85f23423d3dc33fb30d6dfdcb7361694de4d7e2ad9

          SHA512

          a0f578e269cae62732e90647fa0c51225a8db6859f73c2db0e44cd91a1beb2676899239dba7d826976436148773e79f2ce92feb817520c9f7ca8a0ab3ea65615

        • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

          Filesize

          2B

          MD5

          f3b25701fe362ec84616a93a45ce9998

          SHA1

          d62636d8caec13f04e28442a0a6fa1afeb024bbb

          SHA256

          b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

          SHA512

          98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

        • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc\Discord.lnk

          Filesize

          2KB

          MD5

          3c1d55505cafbc5c6e3ec4d5b19f2601

          SHA1

          18c293ca1533cb8ddadf8438f40dd78b449b86b8

          SHA256

          6821d0dd753ab6f6760b4e5b5dd257e3ebcf166c6e6470c1ffd143e8ad7b8942

          SHA512

          26b6f0479be00bb800f6aee87dc871a4469b8fc481a3ee3f8f60a6e82377aa9a6606b9cb311a47639d00def13818f1df2d7bdf4bfc07366a7d179ecf8abf70cb

        • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc\Discord.lnk

          Filesize

          2KB

          MD5

          e9db1b92e3392421a89c235082f00079

          SHA1

          e69331a9902d433588635199754c479a46fd71b0

          SHA256

          66f555933d5d39cb0da420b9111c7d8077cacb0c0759154cdc993aabadd45288

          SHA512

          ef9e48faee8b360d2c716f7f5326ae44065d01796e797bf275939454cfba90f91df938802048f7e907acb6480f11ce28e53bc9e17fb38977cef40c7968d1bea1

        • C:\Users\Admin\AppData\Roaming\discord\Crashpad\settings.dat

          Filesize

          40B

          MD5

          3f44c4da92e85a12b8c2d5a1d4e74dbe

          SHA1

          07953d20271e6f7d655a508378fbe4937d89417b

          SHA256

          627f4cfc521d17c40c74b3af1df13e0fed3f2206a87308a8448f2993396857bd

          SHA512

          3dd3f38f972c77becb9fc7be8dd3db4cd2a6ecb1c541384afbf30b856deb5c6bb9031ac654d8599bd9c9a0c704b6a0b4bcbbc1d9bfcc696df1dbb87cabf7c743

        • C:\Users\Admin\AppData\Roaming\discord\Local State

          Filesize

          389B

          MD5

          8ff5764bf01936c91824a62a1277fe0e

          SHA1

          b3134a7c8adb0b66a6b265c581c8462997376f0f

          SHA256

          4cad1826da1739ee159fef459b05e998a3f2244b77944116532b764a08c326e8

          SHA512

          e9068fbe96ef53916316abddfcac9875983ad0b5145cca32b12e5f66ebcff069c22aa3fee86ead1e858b7bc2850ac0ce84d367c705d54ca1fe2b5297ebdce355

        • C:\Users\Admin\Desktop\Discord.lnk

          Filesize

          2KB

          MD5

          61e2573b05c2b5c1eb86e4db120b48d8

          SHA1

          da40ccc051ac54f1289c6579d052122e30f305f3

          SHA256

          949c7bb96185c6c23d1545d51906a4487d456fa591334321be8bb6276b3fa96b

          SHA512

          89896c184b17fd2ad260740aef69d83c0d6077b302a786dd81a8a774674ad21ea7666adb3a15e3009357ba74d074db22fe6b494ba3167c02cbfc0b34fbf7036b

        • C:\Users\Admin\Desktop\Discord.lnk

          Filesize

          2KB

          MD5

          61e2573b05c2b5c1eb86e4db120b48d8

          SHA1

          da40ccc051ac54f1289c6579d052122e30f305f3

          SHA256

          949c7bb96185c6c23d1545d51906a4487d456fa591334321be8bb6276b3fa96b

          SHA512

          89896c184b17fd2ad260740aef69d83c0d6077b302a786dd81a8a774674ad21ea7666adb3a15e3009357ba74d074db22fe6b494ba3167c02cbfc0b34fbf7036b

        • memory/224-352-0x00000000056B0000-0x00000000056C0000-memory.dmp

          Filesize

          64KB

        • memory/224-349-0x0000000005510000-0x0000000005530000-memory.dmp

          Filesize

          128KB

        • memory/2496-258-0x00000000084B0000-0x00000000084BE000-memory.dmp

          Filesize

          56KB

        • memory/2496-319-0x00000000056B0000-0x00000000056C0000-memory.dmp

          Filesize

          64KB

        • memory/2496-176-0x0000000005DC0000-0x0000000005DC8000-memory.dmp

          Filesize

          32KB

        • memory/2496-247-0x00000000084F0000-0x0000000008528000-memory.dmp

          Filesize

          224KB

        • memory/2496-143-0x00000000056B0000-0x00000000056C0000-memory.dmp

          Filesize

          64KB

        • memory/2496-142-0x0000000000B60000-0x0000000000CD6000-memory.dmp

          Filesize

          1.5MB

        • memory/2496-392-0x000000000A870000-0x000000000A902000-memory.dmp

          Filesize

          584KB