Overview

overview

7

Static

static

1

Discord.exe

windows10-2004-x64

7

Discord.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    151s
  • max time network
    159s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/07/2026, 11:29

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Discord.exe
  • Size 114.7MB
  • Sample260702-nlv8saft2k
  • SHA256 15d9d67eac66a2bb93cd69121e2499c65a4c2c306f5f006462c2e807a9421018
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoverypersistencespywarestealer

Malware Config

Signatures

  • Reads local data of messenger clients 2 TTPs

    Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    spywarestealer
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Drops file in Windows directory 19 IoCs
  • Executes dropped EXE 27 IoCs
  • Loads dropped DLL 32 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 36 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 48 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 34 IoCs
  • Modifies registry key 1 TTPs 15 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 10 IoCs
  • Suspicious use of SendNotifyMessage 3 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Discord.exe
    "C:\Users\Admin\AppData\Local\Temp\Discord.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3700
    • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
      "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:1568
      • C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe
        "C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe" --squirrel-install 1.0.9191
        3⤵
        • Executes dropped EXE
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:3592
        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe
          C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\discord /prefetch:4 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\discord\Crashpad --url=https://f.a.k/e --annotation=_productName=discord --annotation=_version=1.0.9191 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=35.1.5 --initial-client-data=0x4d8,0x4dc,0x4e0,0x4d4,0x4e4,0x7ff63c5a5064,0x7ff63c5a5070,0x7ff63c5a5080
          4⤵
          • Executes dropped EXE
          PID:296
        • C:\Users\Admin\AppData\Local\Discord\Update.exe
          C:\Users\Admin\AppData\Local\Discord\Update.exe --createShortcut Discord.exe --setupIcon C:\Users\Admin\AppData\Local\Discord\app.ico
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:1836
        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe
          "C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1824,i,8115532614285771007,4867616207499117761,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1820 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1632
        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe
          "C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --field-trial-handle=1824,i,8115532614285771007,4867616207499117761,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:11
          4⤵
          • Executes dropped EXE
          PID:4848
        • C:\Windows\System32\reg.exe
          C:\Windows\System32\reg.exe add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Discord /d "\"C:\Users\Admin\AppData\Local\Discord\Update.exe\" --processStart Discord.exe" /f
          4⤵
          • Adds Run key to start application
          • Modifies registry key
          PID:3132
        • C:\Windows\System32\reg.exe
          C:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord /ve /d "URL:Discord Protocol" /f
          4⤵
          • Modifies registry class
          • Modifies registry key
          PID:5048
        • C:\Windows\System32\reg.exe
          C:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord /v "URL Protocol" /f
          4⤵
          • Modifies registry class
          • Modifies registry key
          PID:3204
        • C:\Windows\System32\reg.exe
          C:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord\DefaultIcon /ve /d "\"C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe\",-1" /f
          4⤵
          • Modifies registry class
          • Modifies registry key
          PID:1732
        • C:\Windows\System32\reg.exe
          C:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord\shell\open\command /ve /d "\"C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe\" --url -- \"%1\"" /f
          4⤵
          • Modifies registry class
          • Modifies registry key
          PID:2176
  • C:\Users\Admin\AppData\Local\Discord\Update.exe
    "C:\Users\Admin\AppData\Local\Discord\Update.exe" --processStart Discord.exe
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3260
    • C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe
      "C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe"
      2⤵
      • Drops file in Windows directory
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4268
      • C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe
        C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\discord /prefetch:4 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\discord\Crashpad --url=https://f.a.k/e --annotation=_productName=discord --annotation=_version=1.0.9191 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=35.1.5 --initial-client-data=0x494,0x498,0x4d4,0x490,0x4dc,0x7ff63c5a5064,0x7ff63c5a5070,0x7ff63c5a5080
        3⤵
        • Executes dropped EXE
        PID:4932
      • C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe
        "C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1848,i,5889447940234936699,1023970584420006838,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1844 /prefetch:2
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:1212
      • C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe
        "C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --secure-schemes=disclip,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=disclip,sentry-ipc --field-trial-handle=1848,i,5889447940234936699,1023970584420006838,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2096 /prefetch:11
        3⤵
        • Executes dropped EXE
        PID:5676
      • C:\Windows\System32\reg.exe
        C:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord /ve /d "URL:Discord Protocol" /f
        3⤵
        • Modifies registry class
        • Modifies registry key
        PID:5140
      • C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe
        "C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --secure-schemes=disclip,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=disclip,sentry-ipc --app-user-model-id=com.squirrel.Discord.Discord --app-path="C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\resources\app.asar" --no-sandbox --no-zygote --autoplay-policy=no-user-gesture-required --disable-background-timer-throttling --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1848,i,5889447940234936699,1023970584420006838,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2864 /prefetch:1
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:2836
      • C:\Windows\System32\reg.exe
        C:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord /v "URL Protocol" /f
        3⤵
        • Modifies registry class
        • Modifies registry key
        PID:3468
      • C:\Windows\System32\reg.exe
        C:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord\DefaultIcon /ve /d "\"C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe\",-1" /f
        3⤵
        • Modifies registry class
        • Modifies registry key
        PID:4548
      • C:\Windows\System32\reg.exe
        C:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord\shell\open\command /ve /d "\"C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe\" --url -- \"%1\"" /f
        3⤵
        • Modifies registry class
        • Modifies registry key
        PID:3444
      • C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe
        "C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --secure-schemes=disclip,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=disclip,sentry-ipc --field-trial-handle=1848,i,5889447940234936699,1023970584420006838,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3864 /prefetch:14
        3⤵
        • Executes dropped EXE
        PID:2588
      • C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe
        "C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\Discord.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --secure-schemes=disclip,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=disclip,sentry-ipc --field-trial-handle=1848,i,5889447940234936699,1023970584420006838,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2972 /prefetch:14
        3⤵
        • Executes dropped EXE
        PID:5540
      • C:\Windows\System32\reg.exe
        C:\Windows\System32\reg.exe query HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Discord
        3⤵
        • Modifies registry key
        PID:3524
      • C:\Windows\System32\reg.exe
        C:\Windows\System32\reg.exe add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Discord /d "\"C:\Users\Admin\AppData\Local\Discord\Update.exe\" --processStart Discord.exe" /f
        3⤵
        • Adds Run key to start application
        • Modifies registry key
        PID:2996
      • C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\Discord.exe
        C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\Discord.exe
        3⤵
        • Drops file in Windows directory
        • Executes dropped EXE
        • Loads dropped DLL
        • Checks processor information in registry
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of WriteProcessMemory
        PID:5012
        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\Discord.exe
          C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\Discord.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\discord /prefetch:4 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\discord\Crashpad --url=https://f.a.k/e --annotation=_productName=discord --annotation=_version=1.0.9244 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=37.6.0 --initial-client-data=0x4bc,0x4c0,0x4c4,0x4b8,0x4c8,0x7ff667e2c074,0x7ff667e2c080,0x7ff667e2c090
          4⤵
          • Executes dropped EXE
          PID:2940
        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\Discord.exe
          "C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\Discord.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1824,i,9346544531440722467,17308760549428193877,262144 --enable-features=DocumentPolicyIncludeJSCallStacksInCrashReports,EnableTransparentHwndEnlargement --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,ScreenAIOCREnabled,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1800 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:612
        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\Discord.exe
          "C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\Discord.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --standard-schemes=disclip --secure-schemes=disclip,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=disclip,sentry-ipc --streaming-schemes=disclip --field-trial-handle=1824,i,9346544531440722467,17308760549428193877,262144 --enable-features=DocumentPolicyIncludeJSCallStacksInCrashReports,EnableTransparentHwndEnlargement --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,ScreenAIOCREnabled,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2100 /prefetch:11
          4⤵
          • Executes dropped EXE
          PID:1176
        • C:\Windows\System32\reg.exe
          C:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord /ve /d "URL:Discord Protocol" /f
          4⤵
          • Modifies registry class
          • Modifies registry key
          PID:1860
        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\Discord.exe
          "C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\Discord.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --standard-schemes=disclip --secure-schemes=disclip,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=disclip,sentry-ipc --streaming-schemes=disclip --app-user-model-id=com.squirrel.Discord.Discord --app-path="C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\resources\app.asar" --no-sandbox --no-zygote --autoplay-policy=no-user-gesture-required --disable-background-timer-throttling --enable-h264-mf --enable-h264-mf-zero-copy --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1824,i,9346544531440722467,17308760549428193877,262144 --enable-features=DocumentPolicyIncludeJSCallStacksInCrashReports,EnableTransparentHwndEnlargement --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,ScreenAIOCREnabled,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2848 --splash-media-format=webm /prefetch:1
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2712
        • C:\Windows\System32\reg.exe
          C:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord /v "URL Protocol" /f
          4⤵
          • Modifies registry class
          • Modifies registry key
          PID:5096
        • C:\Windows\System32\reg.exe
          C:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord\DefaultIcon /ve /d "\"C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\Discord.exe\",-1" /f
          4⤵
          • Modifies registry class
          • Modifies registry key
          PID:5844
        • C:\Windows\System32\reg.exe
          C:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord\shell\open\command /ve /d "\"C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\Discord.exe\" --url -- \"%1\"" /f
          4⤵
          • Modifies registry class
          • Modifies registry key
          PID:1552
        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\Discord.exe
          "C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\Discord.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --standard-schemes=disclip --secure-schemes=disclip,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=disclip,sentry-ipc --streaming-schemes=disclip --app-user-model-id=com.squirrel.Discord.Discord --app-path="C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\resources\app.asar" --no-sandbox --no-zygote --enable-blink-features=EnumerateDevices,AudioOutputDevices --autoplay-policy=no-user-gesture-required --disable-background-timer-throttling --enable-h264-mf --enable-h264-mf-zero-copy --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=1824,i,9346544531440722467,17308760549428193877,262144 --enable-features=DocumentPolicyIncludeJSCallStacksInCrashReports,EnableTransparentHwndEnlargement --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,ScreenAIOCREnabled,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3876 --enable-node-leakage-in-renderers /prefetch:1
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:204
        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\Discord.exe
          "C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\Discord.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --standard-schemes=disclip --secure-schemes=disclip,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=disclip,sentry-ipc --streaming-schemes=disclip --app-user-model-id=com.squirrel.Discord.Discord --app-path="C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\resources\app.asar" --no-sandbox --no-zygote --enable-blink-features=EnumerateDevices,AudioOutputDevices --autoplay-policy=no-user-gesture-required --disable-background-timer-throttling --enable-h264-mf --enable-h264-mf-zero-copy --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=1824,i,9346544531440722467,17308760549428193877,262144 --enable-features=DocumentPolicyIncludeJSCallStacksInCrashReports,EnableTransparentHwndEnlargement --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,ScreenAIOCREnabled,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3852 --enable-node-leakage-in-renderers /prefetch:1
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Checks SCSI registry key(s)
          • Checks processor information in registry
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of WriteProcessMemory
          PID:5400
          • C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\modules\discord_voice-1\discord_voice\gpu_encoder_helper.exe
            "\\?\C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\modules\discord_voice-1\discord_voice\gpu_encoder_helper.exe" nvidia
            5⤵
            • Executes dropped EXE
            PID:5616
          • C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\modules\discord_voice-1\discord_voice\gpu_encoder_helper.exe
            "\\?\C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\modules\discord_voice-1\discord_voice\gpu_encoder_helper.exe" amd
            5⤵
            • Executes dropped EXE
            PID:2888
          • C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\modules\discord_voice-1\discord_voice\gpu_encoder_helper.exe
            "\\?\C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\modules\discord_voice-1\discord_voice\gpu_encoder_helper.exe" intel
            5⤵
            • Executes dropped EXE
            PID:4832
          • C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\modules\discord_voice-1\discord_voice\gpu_encoder_helper.exe
            "\\?\C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\modules\discord_voice-1\discord_voice\gpu_encoder_helper.exe" windows-media-foundation
            5⤵
            • Executes dropped EXE
            • Modifies registry class
            PID:1836
        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\Discord.exe
          "C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\Discord.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --standard-schemes=disclip --secure-schemes=disclip,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=disclip,sentry-ipc --streaming-schemes=disclip --field-trial-handle=1824,i,9346544531440722467,17308760549428193877,262144 --enable-features=DocumentPolicyIncludeJSCallStacksInCrashReports,EnableTransparentHwndEnlargement --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,ScreenAIOCREnabled,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:14
          4⤵
          • Executes dropped EXE
          • Modifies registry class
          PID:4688
        • C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\Discord.exe
          "C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\Discord.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --standard-schemes=disclip --secure-schemes=disclip,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=disclip,sentry-ipc --streaming-schemes=disclip --field-trial-handle=1824,i,9346544531440722467,17308760549428193877,262144 --enable-features=DocumentPolicyIncludeJSCallStacksInCrashReports,EnableTransparentHwndEnlargement --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,ScreenAIOCREnabled,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4068 /prefetch:12
          4⤵
          • Executes dropped EXE
          PID:2168
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discordapp.com/handoff?rpc=6463&key=c7c20aa4-3677-4817-b866-9640c3d2a5e1
          4⤵
          • Drops file in Windows directory
          • Enumerates system info in registry
          • Modifies data under HKEY_USERS
          • Modifies registry class
          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:3764
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x300,0x7ff8b2bdc188,0x7ff8b2bdc194,0x7ff8b2bdc1a0
            5⤵
              PID:2888
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,3741301512206453117,7911035254218467061,262144 --field-trial-handle=2372,i,1957659224667458280,8480441642695852284,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:2
              5⤵
                PID:5096
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,4388124995532120695,17154051174222672426,524288 --field-trial-handle=2372,i,1957659224667458280,8480441642695852284,262144 --variations-seed-version --mojo-platform-channel-handle=2424 /prefetch:11
                5⤵
                • System Time Discovery
                PID:6084
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2568,i,13235313049851804446,580068906631865278,524288 --field-trial-handle=2372,i,1957659224667458280,8480441642695852284,262144 --variations-seed-version --mojo-platform-channel-handle=3248 /prefetch:13
                5⤵
                  PID:1020
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,1235202655539127360,6381442751055382303,2097152 --field-trial-handle=2372,i,1957659224667458280,8480441642695852284,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
                  5⤵
                    PID:4772
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3612,i,1529150637170975082,7671521056871554266,2097152 --field-trial-handle=2372,i,1957659224667458280,8480441642695852284,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
                    5⤵
                      PID:2896
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4324,i,7482654778947245347,5464570305071023135,2097152 --field-trial-handle=2372,i,1957659224667458280,8480441642695852284,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:1
                      5⤵
                        PID:4808
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4348,i,13381331727190917405,10100770685960512986,2097152 --field-trial-handle=2372,i,1957659224667458280,8480441642695852284,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:9
                        5⤵
                          PID:1900
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,17861100584351239900,13709679612004448509,524288 --field-trial-handle=2372,i,1957659224667458280,8480441642695852284,262144 --variations-seed-version --mojo-platform-channel-handle=3792 /prefetch:14
                          5⤵
                            PID:3284
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5500,i,6127233002331984096,12786435590741181243,2097152 --field-trial-handle=2372,i,1957659224667458280,8480441642695852284,262144 --variations-seed-version --mojo-platform-channel-handle=3752 /prefetch:1
                            5⤵
                              PID:2372
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3612,i,16997231902806752857,7442725734188088107,524288 --field-trial-handle=2372,i,1957659224667458280,8480441642695852284,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:14
                              5⤵
                                PID:3284
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3568,i,4656777674689908941,195990920847039743,524288 --field-trial-handle=2372,i,1957659224667458280,8480441642695852284,262144 --variations-seed-version --mojo-platform-channel-handle=5568 /prefetch:14
                                5⤵
                                  PID:4648
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6420,i,13033856858374792552,631547211694747404,524288 --field-trial-handle=2372,i,1957659224667458280,8480441642695852284,262144 --variations-seed-version --mojo-platform-channel-handle=6444 /prefetch:14
                                  5⤵
                                  • Modifies registry class
                                  PID:7140
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6416,i,157259342750084828,15501002594507638945,524288 --field-trial-handle=2372,i,1957659224667458280,8480441642695852284,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:12
                                  5⤵
                                    PID:7148
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6636,i,9926311079210491721,13022371606492500490,524288 --field-trial-handle=2372,i,1957659224667458280,8480441642695852284,262144 --variations-seed-version --mojo-platform-channel-handle=6660 /prefetch:14
                                    5⤵
                                      PID:1640
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6636,i,9926311079210491721,13022371606492500490,524288 --field-trial-handle=2372,i,1957659224667458280,8480441642695852284,262144 --variations-seed-version --mojo-platform-channel-handle=6660 /prefetch:14
                                      5⤵
                                        PID:6240
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6836,i,16946108831000276416,271434320410406206,524288 --field-trial-handle=2372,i,1957659224667458280,8480441642695852284,262144 --variations-seed-version --mojo-platform-channel-handle=6968 /prefetch:14
                                        5⤵
                                          PID:6544
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
                                          5⤵
                                            PID:7088
                                  • C:\Windows\system32\AUDIODG.EXE
                                    C:\Windows\system32\AUDIODG.EXE 0x00000000000004C4 0x00000000000004CC
                                    1⤵
                                      PID:792
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                      1⤵
                                        PID:3540
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                        1⤵
                                        • Drops file in Windows directory
                                        • Enumerates system info in registry
                                        • Modifies data under HKEY_USERS
                                        • Modifies registry class
                                        PID:6784
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2e4,0x7ff8b2bdc188,0x7ff8b2bdc194,0x7ff8b2bdc1a0
                                          2⤵
                                            PID:7104
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2144,i,9843179542241293300,15332824157952184584,524288 --field-trial-handle=2380,i,12954806126413032077,16801897783454123430,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:11
                                            2⤵
                                            • System Time Discovery
                                            PID:6568
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1884,i,3260264146142023156,8853342958771459673,262144 --field-trial-handle=2380,i,12954806126413032077,16801897783454123430,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:2
                                            2⤵
                                              PID:6312
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2652,i,5426885669893018209,2442364372118654214,524288 --field-trial-handle=2380,i,12954806126413032077,16801897783454123430,262144 --variations-seed-version --mojo-platform-channel-handle=2672 /prefetch:13
                                              2⤵
                                                PID:6436
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4316,i,5080112283973755076,10690352870591193074,524288 --field-trial-handle=2380,i,12954806126413032077,16801897783454123430,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:14
                                                2⤵
                                                  PID:468
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4316,i,5080112283973755076,10690352870591193074,524288 --field-trial-handle=2380,i,12954806126413032077,16801897783454123430,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:14
                                                  2⤵
                                                    PID:6264
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4772,i,11266577728260719420,2152409922352084382,524288 --field-trial-handle=2380,i,12954806126413032077,16801897783454123430,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:14
                                                    2⤵
                                                      PID:5808
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4776,i,15423778878238153056,7970795108872503066,524288 --field-trial-handle=2380,i,12954806126413032077,16801897783454123430,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:14
                                                      2⤵
                                                        PID:6220
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,5623138631251676504,12976565219184638190,524288 --field-trial-handle=2380,i,12954806126413032077,16801897783454123430,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:14
                                                        2⤵
                                                          PID:6612
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1232,i,3133640454490505378,17632592307821243517,524288 --field-trial-handle=2380,i,12954806126413032077,16801897783454123430,262144 --variations-seed-version --mojo-platform-channel-handle=1236 /prefetch:14
                                                          2⤵
                                                            PID:3516
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1368,i,13770385815711190797,9848745798257476576,524288 --field-trial-handle=2380,i,12954806126413032077,16801897783454123430,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:14
                                                            2⤵
                                                              PID:5708
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1308,i,1314211502324895595,302459920119886864,524288 --field-trial-handle=2380,i,12954806126413032077,16801897783454123430,262144 --variations-seed-version --mojo-platform-channel-handle=4916 /prefetch:14
                                                              2⤵
                                                                PID:2024
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4788,i,15096620134922527121,8064380928063532487,524288 --field-trial-handle=2380,i,12954806126413032077,16801897783454123430,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:14
                                                                2⤵
                                                                  PID:7000
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,7927479153898835956,14292544893366322496,524288 --field-trial-handle=2380,i,12954806126413032077,16801897783454123430,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:14
                                                                  2⤵
                                                                    PID:1232
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                  1⤵
                                                                    PID:6472
                                                                  • C:\Windows\system32\svchost.exe
                                                                    C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                    1⤵
                                                                      PID:7152

                                                                    Network

                                                                          MITRE ATT&CK Enterprise v16

                                                                          Replay Monitor

                                                                          Loading Replay Monitor...

                                                                          Downloads

                                                                          SquirrelSetup.log
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\SquirrelSetup.log
                                                                          • Size 4KB
                                                                          • SHA256 618a3d6af0bbf95cd39ea22f89d3a13e2d6ba7550c15e50fcbee4056518ce1d5
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          D3DCompiler_47.dll
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\D3DCompiler_47.dll
                                                                          • Size 4.5MB
                                                                          • SHA256 3e64d99cde651491afb4cbdfbb2ba5fda38c7e70b211cf8d3f022b8cfee8f9b8
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          app.ico
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\app.ico
                                                                          • Size 278KB
                                                                          • SHA256 dfcea1bea8a924252d507d0316d8cf38efc61cf1314e47dca3eb723f47d5fe43
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          chrome_100_percent.pak
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\chrome_100_percent.pak
                                                                          • Size 144KB
                                                                          • SHA256 6ce0ccf6a0cc4ea8be11262d168a344bc3ee78a4a6365d755ffb5570bc48d6d5
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          chrome_200_percent.pak
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\chrome_200_percent.pak
                                                                          • Size 215KB
                                                                          • SHA256 68e92cde2557d68eddcf8df21ce4d1ef7a85581fb28cd5ab93db20812217e073
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          icudtl.dat
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\icudtl.dat
                                                                          • Size 10.0MB
                                                                          • SHA256 a9f6072e858ea29cb66501847856d403c862f23d03cac2656d1e0fa2865fdc7b
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          libegl.dll
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\libegl.dll
                                                                          • Size 492KB
                                                                          • SHA256 3499bc83ea145267b9861deb6319e350d8a96453851fd71ed921981315b3fcc7
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          libglesv2.dll
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\libglesv2.dll
                                                                          • Size 7.7MB
                                                                          • SHA256 7059189772ad2e6d402a6cd305f4ed5ed701c9409fb5c2b944d396808d8d6794
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          en-US.pak
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\locales\en-US.pak
                                                                          • Size 484KB
                                                                          • SHA256 6893de9d9c58b2cfb52892463d6621263d9482dcf236b3943d58e0ef45046215
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          resources.pak
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\resources.pak
                                                                          • Size 5.5MB
                                                                          • SHA256 f69e94d81032199318ef2f22c92b23bad302610249bed0c9756c924ef3efd81e
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          app.asar
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\resources\app.asar
                                                                          • Size 7.5MB
                                                                          • SHA256 c2617cbecb12bd58b9e0e3c8081348bd0019de2d729013df6e00342a9d3ed2a3
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          build_info.json
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\resources\build_info.json
                                                                          • Size 83B
                                                                          • SHA256 f230503d783acfe7d45fcf23b55c120074fafdb67a45e984d252678a3b9a4e0a
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          updater.node
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\updater.node
                                                                          • Size 4.3MB
                                                                          • SHA256 316f79afdaa372afe7eea177e9682f73b84f4ddce136af4dc63471d40e8799f3
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          v8_context_snapshot.bin
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\v8_context_snapshot.bin
                                                                          • Size 685KB
                                                                          • SHA256 462919f1b49c9e913042f9e9a738e9510884d5920a426a8a5f1b188e28c4da91
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          vk_swiftshader.dll
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\vk_swiftshader.dll
                                                                          • Size 5.3MB
                                                                          • SHA256 b97d65e26af4115846c3907c3d7f2daef84905afe23380759725dab38d651468
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          vk_swiftshader_icd.json
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\vk_swiftshader_icd.json
                                                                          • Size 106B
                                                                          • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          vulkan-1.dll
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9191\vulkan-1.dll
                                                                          • Size 893KB
                                                                          • SHA256 9cb6cc2fa75b38c4dd95f4061993e12072b5c9dad038f263579d6bcf80ddf815
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          package.json
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\modules\discord_spellcheck-1\discord_spellcheck\package.json
                                                                          • Size 25B
                                                                          • SHA256 4f35fd6a3f2046e09ecc02576752378eeb7cd7b48db490d3358111c27e808866
                                                                          • MD5 SHA1 SHA512
                                                                          Submit Download

                                                                          gpu_encoder_helper.exe
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9244\modules\discord_voice-1\discord_voice\gpu_encoder_helper.exe
                                                                          • Size 888KB
                                                                          • SHA256 29cd9e52333ec80254c89af0062f22f3d4c9cc3c8698f70b586728b73825c02b
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          3afb1f36bbc0f4e211ece00b2a442add761645c2d67cc75bf04b8eff734b3daa
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\download\3afb1f36bbc0f4e211ece00b2a442add761645c2d67cc75bf04b8eff734b3daa
                                                                          • Size 265KB
                                                                          • SHA256 3afb1f36bbc0f4e211ece00b2a442add761645c2d67cc75bf04b8eff734b3daa
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          42a55b8c46c0d252750d54750af69f32817ca5988da8dacfa5536d8e212892f6
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\download\42a55b8c46c0d252750d54750af69f32817ca5988da8dacfa5536d8e212892f6
                                                                          • Size 316KB
                                                                          • SHA256 42a55b8c46c0d252750d54750af69f32817ca5988da8dacfa5536d8e212892f6
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          4982225c1b849d6fb50fda2f0ea1940e259b1a1cfc65eb0d2d1d017303489740
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\download\4982225c1b849d6fb50fda2f0ea1940e259b1a1cfc65eb0d2d1d017303489740
                                                                          • Size 511KB
                                                                          • SHA256 4982225c1b849d6fb50fda2f0ea1940e259b1a1cfc65eb0d2d1d017303489740
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          4cf6fab95c5970e76302f281af7a47ed4a6404ff357dda75ae3d9c6295f12f76
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\download\4cf6fab95c5970e76302f281af7a47ed4a6404ff357dda75ae3d9c6295f12f76
                                                                          • Size 1.4MB
                                                                          • SHA256 4cf6fab95c5970e76302f281af7a47ed4a6404ff357dda75ae3d9c6295f12f76
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          50087829ed1e3dd6486b011857b46eba6c586bae51c35adf06c249f848b4823b
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\download\50087829ed1e3dd6486b011857b46eba6c586bae51c35adf06c249f848b4823b
                                                                          • Size 1.6MB
                                                                          • SHA256 50087829ed1e3dd6486b011857b46eba6c586bae51c35adf06c249f848b4823b
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          5820d7e4d62ec179f2adc24520f29e241ac8862c7ca35a7d9c745f88d6aa096f
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\download\5820d7e4d62ec179f2adc24520f29e241ac8862c7ca35a7d9c745f88d6aa096f
                                                                          • Size 8.7MB
                                                                          • SHA256 5820d7e4d62ec179f2adc24520f29e241ac8862c7ca35a7d9c745f88d6aa096f
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          69e01115cecc97faf1112dbd86b08eb644058ccab1fc252b86a2922461c52626
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\download\69e01115cecc97faf1112dbd86b08eb644058ccab1fc252b86a2922461c52626
                                                                          • Size 20KB
                                                                          • SHA256 69e01115cecc97faf1112dbd86b08eb644058ccab1fc252b86a2922461c52626
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          a2f04c5347f6e1e3c70f15f8fe046b81deb4cdc80f68d2e28ac656dfc5258536
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\download\a2f04c5347f6e1e3c70f15f8fe046b81deb4cdc80f68d2e28ac656dfc5258536
                                                                          • Size 29KB
                                                                          • SHA256 a2f04c5347f6e1e3c70f15f8fe046b81deb4cdc80f68d2e28ac656dfc5258536
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          a3c429ab7ae687b4d013058566a06890228629525eb132a17bb6d7d3008a1f76
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\download\a3c429ab7ae687b4d013058566a06890228629525eb132a17bb6d7d3008a1f76
                                                                          • Size 27.1MB
                                                                          • SHA256 a3c429ab7ae687b4d013058566a06890228629525eb132a17bb6d7d3008a1f76
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          d5ec5de811dfa31a4f3b88b6c9a242751f77d6f084d476d181b4a18a0e0e7115
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\download\d5ec5de811dfa31a4f3b88b6c9a242751f77d6f084d476d181b4a18a0e0e7115
                                                                          • Size 409KB
                                                                          • SHA256 d5ec5de811dfa31a4f3b88b6c9a242751f77d6f084d476d181b4a18a0e0e7115
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          e12c3ec9a14597d278aaa0f00927b0f4062cb1c1cec9b4f7433b286b032bbaba
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\download\e12c3ec9a14597d278aaa0f00927b0f4062cb1c1cec9b4f7433b286b032bbaba
                                                                          • Size 222KB
                                                                          • SHA256 e12c3ec9a14597d278aaa0f00927b0f4062cb1c1cec9b4f7433b286b032bbaba
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          e7973d44cb15e206e9dbcb875037ad5120cab251cb36b7caa636ddc527b8492b
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\download\e7973d44cb15e206e9dbcb875037ad5120cab251cb36b7caa636ddc527b8492b
                                                                          • Size 1.6MB
                                                                          • SHA256 e7973d44cb15e206e9dbcb875037ad5120cab251cb36b7caa636ddc527b8492b
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          installer.db
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\installer.db
                                                                          • Size 280KB
                                                                          • SHA256 928ae19b8ad98a1474c8431cebff47ea838ecb8938d73278c0fe68b01245ea1b
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          RELEASES
                                                                          • Path C:\Users\Admin\AppData\Local\Discord\packages\RELEASES
                                                                          • Size 73B
                                                                          • SHA256 5b05dd57d6267487818ac42794cd7339700982c0d72749e3a21025f8f876addb
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          blocklist
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                          • Size 105KB
                                                                          • SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          settings.dat
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                          • Size 280B
                                                                          • SHA256 3a958178f477b8cf0f18d83e0835916167b3eaf95d859728b647bc0100a82efc
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          settings.dat
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                          • Size 280B
                                                                          • SHA256 48b0127c48894e5c8e42b14bcc7f6b1f91ca5d97355f42d22391fb602568bb1d
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          settings.dat
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                          • Size 280B
                                                                          • SHA256 569069a5a567b10ad5204858dbca774ad8379d6fc45071f0ec7047a97bf83ab3
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          settings.dat
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                          • Size 280B
                                                                          • SHA256 52ddb5a5cec7ebfd1b0880b29c10be5b8af550a81b6eed6ff289d9b440ae0a3d
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          0be7a49b-d0ed-4a68-ac6d-fa2feb0a385b.tmp
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0be7a49b-d0ed-4a68-ac6d-fa2feb0a385b.tmp
                                                                          • Size 1B
                                                                          • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                          • MD5 SHA1 SHA512
                                                                          Submit Download

                                                                          BookmarkMergedSurfaceOrdering
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                          • Size 6B
                                                                          • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                          • MD5 SHA1 SHA512
                                                                          Submit Download

                                                                          the-real-index
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                          • Size 4KB
                                                                          • SHA256 2d897d72408248c48470df3b239c7792943140926bca7a7efa7485a29881ca22
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          SiteList-Enterprise.json
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                          • Size 2B
                                                                          • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                          • MD5 SHA1 SHA512
                                                                          Submit Download

                                                                          Edge Profile.ico
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                          • Size 70KB
                                                                          • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          HubApps
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                          • Size 106KB
                                                                          • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          Network Persistent State
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                          • Size 3KB
                                                                          • SHA256 ffbc69e8500ffbd1e5e025e12db774e5064a5ec362b313092b2b9cbbcb778a10
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          Network Persistent State
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                          • Size 3KB
                                                                          • SHA256 636d57816bc1f353d4b87b77402777ef1a6a636915fe6c3f04f3c7e36ce5207a
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          Sdch Dictionaries
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                          • Size 40B
                                                                          • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                          • MD5 SHA1 SHA512
                                                                          Submit Download

                                                                          Preferences
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                          • Size 15KB
                                                                          • SHA256 49f710ce042b476f2938538e06eee02bc2c0515c46e6662d2e7053bdadf6ff39
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          Preferences
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                          • Size 15KB
                                                                          • SHA256 918a3a2b4dc7fe55fc86465e7e7376e9cad7cbe75f2b018bdcbf36db28f031a4
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          Secure Preferences
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                          • Size 30KB
                                                                          • SHA256 89d9ae1a4352f7c56fed2347b1241b21ca81c43bb085dc4d686736f8076dc4c2
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          index.txt
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
                                                                          • Size 226B
                                                                          • SHA256 6825db76be1e7de4d26092937042433f67273aa97c8f3d43c91921d2adb6331b
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          index.txt
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
                                                                          • Size 233B
                                                                          • SHA256 9cb37653d8a428a673b3985db53702a156eca96c4d285a345422609a7d87f482
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          index.txt~RFe59f17a.TMP
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe59f17a.TMP
                                                                          • Size 138B
                                                                          • SHA256 ccb18f33b897c919c832138971c7e27e25d261540457741685eb946c23687717
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          sync_diagnostic.log
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                          • Size 4KB
                                                                          • SHA256 3cc5494c5674965b7b385efd397b2c13577cc31a5dab7a39d68008df9fd47f94
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          e92a1f7c-906b-49db-a253-08335db67129.tmp
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e92a1f7c-906b-49db-a253-08335db67129.tmp
                                                                          • Size 414B
                                                                          • SHA256 eae45fc9a9336bede6d094f37cbf9a91fbc76c01e083cd056cee0d567948ee62
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          OperationConfig
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                          • Size 22KB
                                                                          • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          OperationConfig~RFe5aec74.TMP
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5aec74.TMP
                                                                          • Size 3KB
                                                                          • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          Local State
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                          • Size 61KB
                                                                          • SHA256 07b7e58517bee3f0756de43f41cdc86cc0b2a15076ac37a5f0dff834f3caec4a
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          Local State
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                          • Size 37KB
                                                                          • SHA256 fbdd35e7152931b33dcc2548ff151b88ad2d3b6e381649e4d4af50522c458852
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          Local State
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                          • Size 35KB
                                                                          • SHA256 271510e316ebe334ff082e55186c13708a31aeaa1bc9304763b4a2c261e1b24b
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          Local State
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                          • Size 41KB
                                                                          • SHA256 d3b1256d2985e7e4544f6377890ead273af786cbcb977eb3e886ca500b02ce41
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          Local State
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                          • Size 38KB
                                                                          • SHA256 4713d44dbeb91732c6d52e098bde52a6f7dddadb74650e07d50f2303f55677b9
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          metadata.json
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                          • Size 132B
                                                                          • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          b00c00be-feeb-4a26-8dea-adc31e065f5d.tmp
                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b00c00be-feeb-4a26-8dea-adc31e065f5d.tmp
                                                                          • Size 13B
                                                                          • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                          • MD5 SHA1 SHA512
                                                                          Submit Download

                                                                          RELEASES
                                                                          • Path C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES
                                                                          • Size 81B
                                                                          • SHA256 385deb2ed987d025f4dd235624bd1de0afaa609cea907ce524a9e785f0ce9b0e
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          Update.exe
                                                                          • Path C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
                                                                          • Size 1.4MB
                                                                          • SHA256 7e5231d5862b30c35ccad81fc4b1a2c5bc3ce25a63482f456ffe6d1ef71aa3fa
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          4e6f6912-56a5-464d-92e2-758fad977bde.tmp
                                                                          • Path C:\Users\Admin\AppData\Local\Temp\4e6f6912-56a5-464d-92e2-758fad977bde.tmp
                                                                          • Size 10KB
                                                                          • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          content_new.js
                                                                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6784_24140525\CRX_INSTALL\content_new.js
                                                                          • Size 10KB
                                                                          • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          default.exc
                                                                          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
                                                                          • Size 2B
                                                                          • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                          • MD5 SHA1 SHA512
                                                                          Submit Download

                                                                          the-real-index
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\Code Cache\js\index-dir\the-real-index
                                                                          • Size 4KB
                                                                          • SHA256 8a54612191343ffadad73f8a6dced01bfbf1119e6fcac39bdf458ce9ee09824a
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          settings.dat
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\Crashpad\settings.dat
                                                                          • Size 40B
                                                                          • SHA256 7ce4b1f6ab4fa8200a61df2d2dbdd1ae7e1fbad20c99e3709cbd2a49289aa01f
                                                                          • MD5 SHA1 SHA512
                                                                          Submit Download

                                                                          data_0
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\GPUCache\data_0
                                                                          • Size 8KB
                                                                          • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                          • MD5 SHA1 SHA512 SSDEEP
                                                                          Submit Download

                                                                          data_1
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\GPUCache\data_1
                                                                          • Size 264KB
                                                                          • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                          • MD5 SHA1 SHA512 SSDEEP
                                                                          Submit Download

                                                                          data_2
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\GPUCache\data_2
                                                                          • Size 8KB
                                                                          • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                          • MD5 SHA1 SHA512 SSDEEP
                                                                          Submit Download

                                                                          data_3
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\GPUCache\data_3
                                                                          • Size 8KB
                                                                          • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                          • MD5 SHA1 SHA512 SSDEEP
                                                                          Submit Download

                                                                          Local State
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\Local State
                                                                          • Size 434B
                                                                          • SHA256 431a787b34e4fc5d64198cc8f70dc980b9e7f6a8346dc8879ea7a0df004ce101
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          Local State
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\Local State
                                                                          • Size 989B
                                                                          • SHA256 7cd38d1d8620c265ea1ebb97d59a72fd96dfe577576abe0a9841a577e2ab0f07
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          CURRENT
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\Local Storage\leveldb\CURRENT
                                                                          • Size 16B
                                                                          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                          • MD5 SHA1 SHA512
                                                                          Submit Download

                                                                          LOG
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\Local Storage\leveldb\LOG
                                                                          • Size 247B
                                                                          • SHA256 f404056f6ebe9fe39ee0cda41b67a92269507f82567b648148c8bfaeecf089f3
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          MANIFEST-000001
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\Local Storage\leveldb\MANIFEST-000001
                                                                          • Size 41B
                                                                          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                          • MD5 SHA1 SHA512
                                                                          Submit Download

                                                                          Network Persistent State
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\Network\Network Persistent State
                                                                          • Size 111B
                                                                          • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          Network Persistent State
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\Network\Network Persistent State
                                                                          • Size 461B
                                                                          • SHA256 55d23308b3efce7f36be874a09a90df884ab1a4efd5d7d501fdd0c11f218146a
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          Trust Tokens
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\Network\Trust Tokens
                                                                          • Size 36KB
                                                                          • SHA256 19e1e0d60dc0a70455014fec98b5e4b73e93a80651600368745ab0d4a49c9529
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          Preferences
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\Preferences
                                                                          • Size 208B
                                                                          • SHA256 86229d36b6f878a03dd45c92b54095cba1120cb70103b731460ff4858fd0183b
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          Preferences
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\Preferences
                                                                          • Size 57B
                                                                          • SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          index.txt
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\Service Worker\CacheStorage\63fc7e4cfcc88165b53fe27bdbf48bdde7611b44\index.txt
                                                                          • Size 239B
                                                                          • SHA256 c2a64fa37768d3ba5785ec2ceee6c51cb3b3b3b82a5a2e21784c79c5db81c891
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          index.txt
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\Service Worker\CacheStorage\63fc7e4cfcc88165b53fe27bdbf48bdde7611b44\index.txt
                                                                          • Size 232B
                                                                          • SHA256 619d73c757772ac4a7d3952f3ed33549710843d7ede7fefd5fdbc4b66d0b2709
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          index.txt~RFe59b1c2.TMP
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\Service Worker\CacheStorage\63fc7e4cfcc88165b53fe27bdbf48bdde7611b44\index.txt~RFe59b1c2.TMP
                                                                          • Size 144B
                                                                          • SHA256 e2e264911c000fbd110676ce20098f542dd35408716335d091fb288b34a91ff7
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          index
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\Shared Dictionary\cache\index
                                                                          • Size 24B
                                                                          • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                          • MD5 SHA1 SHA512
                                                                          Submit Download

                                                                          the-real-index
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\Shared Dictionary\cache\index-dir\the-real-index
                                                                          • Size 48B
                                                                          • SHA256 4726c0b705a14f259a5d9b711db1962030949e036b90dfbd1d11828c007e8126
                                                                          • MD5 SHA1 SHA512
                                                                          Submit Download

                                                                          db
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\Shared Dictionary\db
                                                                          • Size 44KB
                                                                          • SHA256 f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          neifaoindggfcjicffkgpmnlppeffabd_1.c900ba9a2d8318263fd43782ee6fd5fb50bad78bf0eb2c972b5922c458af45ed
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\component_crx_cache\neifaoindggfcjicffkgpmnlppeffabd_1.c900ba9a2d8318263fd43782ee6fd5fb50bad78bf0eb2c972b5922c458af45ed
                                                                          • Size 1.1MB
                                                                          • SHA256 c900ba9a2d8318263fd43782ee6fd5fb50bad78bf0eb2c972b5922c458af45ed
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          oimompecagnajdejgnnjijobebaeigek_1.7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\component_crx_cache\oimompecagnajdejgnnjijobebaeigek_1.7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
                                                                          • Size 21.6MB
                                                                          • SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          renderer_js.log
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\logs\renderer_js.log
                                                                          • Size 11KB
                                                                          • SHA256 1e1c7d35a6dd4b609458e3948d413afa20f1acab26caf5250ef8f417f293ce8d
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          7_2_2026__12_30_34_PM_GMT_1-0-events.log
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\module_data\crashlogs\7_2_2026__12_30_34_PM_GMT_1-0-events.log
                                                                          • Size 260B
                                                                          • SHA256 c6f8876ce59107ea7ed5118d64ed4171b5d010746999cf8cda2902eff0ebd95e
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          queue.json
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\sentry\queue\queue.json
                                                                          • Size 2B
                                                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                          • MD5 SHA1 SHA512
                                                                          Submit Download

                                                                          scope_v3.json
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\sentry\scope_v3.json
                                                                          • Size 13KB
                                                                          • SHA256 30349077cc6848853f6e17cfc838953cfd429f11eb3f36fec34583e523c30427
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                          Submit Download

                                                                          scope_v3.json
                                                                          • Path C:\Users\Admin\AppData\Roaming\discord\sentry\scope_v3.json
                                                                          • Size 1KB
                                                                          • SHA256 ace4b084c5bc5de4e7de23c5dd3dbae827b5fa66625d08b7be7e2e536c642410
                                                                          • MD5 SHA1 SHA512 TLSH
                                                                          Submit Download

                                                                          memory/1568-194-0x0000000008F70000-0x0000000008FAE000-memory.dmp
                                                                          Download

                                                                          memory/1568-195-0x0000000008F50000-0x0000000008F5E000-memory.dmp
                                                                          Download

                                                                          memory/1568-11-0x0000000000520000-0x0000000000696000-memory.dmp
                                                                          Download

                                                                          memory/1568-193-0x00000000086D0000-0x00000000086D8000-memory.dmp
                                                                          Download

                                                                          memory/1836-246-0x0000000005550000-0x0000000005570000-memory.dmp
                                                                          Download

                                                                          memory/2588-420-0x000002D7EC810000-0x000002D7EC83F000-memory.dmp
                                                                          Download

                                                                          memory/2588-421-0x000002D7ECDA0000-0x000002D7ECE73000-memory.dmp
                                                                          Download

                                                                          memory/2588-404-0x00007FF8D99E0000-0x00007FF8D99E1000-memory.dmp
                                                                          Download

                                                                          memory/2588-405-0x00007FF8D9730000-0x00007FF8D9731000-memory.dmp
                                                                          Download

                                                                          memory/5540-1090-0x00000242A8E70000-0x00000242A8F43000-memory.dmp
                                                                          Download

                                                                          memory/5540-1089-0x00000242A8E10000-0x00000242A8E3F000-memory.dmp
                                                                          Download