6ec063f19205e61cec74f50596d15aa429ab3b92d3531e83f63984ced64d466a

Analysis

user interaction
yes
max time kernel
42s
max time network
44s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/09/2026, 12:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
discord-quest-completer.exe
Size 16.5MB
Sample260905-pegmgsdf97
SHA256 6ec063f19205e61cec74f50596d15aa429ab3b92d3531e83f63984ced64d466a
MD5 a3b6f91a30892bbfb90093bda3f64131
SHA1 e7bbbfd2b76222e8deb24a3acfc4f7272d3c13eb
SHA512 937df57e35bfba183782ea7c1e168fb09c6f1bd605051f3d347322ebf8bfc72e0a026bf361e2a3082939437e12237093373012da745f77886d1c2f3b3357d3f7
SSDEEP 98304:J+a26rUc3ES+BiuWlVlSjEuGqOIcgWGWb1dyktRaN4yOIrdgjmu+PEvfGnfqk1y3:J+orUc3EcHuGIcIkVm4fmfrnPEj
TLSH
T12C0707257B5BA9ADC09BC4B483474A725A3170CB0B35B9FF44C492382F69BF42F38659
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	discord-quest-completer.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134330840967395753"	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
944	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2804	discord-quest-completer.exe
2804	discord-quest-completer.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2804 wrote to memory of 944	2804	discord-quest-completer.exe	88
PID 944 wrote to memory of 4856	944	msedgewebview2.exe	89
PID 944 wrote to memory of 3584	944	msedgewebview2.exe	90
PID 944 wrote to memory of 3584	944	msedgewebview2.exe	90
PID 944 wrote to memory of 3584	944	msedgewebview2.exe	90
PID 944 wrote to memory of 596	944	msedgewebview2.exe	91
PID 944 wrote to memory of 1184	944	msedgewebview2.exe	92
PID 944 wrote to memory of 1184	944	msedgewebview2.exe	92
PID 944 wrote to memory of 3260	944	msedgewebview2.exe	93
PID 944 wrote to memory of 3260	944	msedgewebview2.exe	93
PID 944 wrote to memory of 3260	944	msedgewebview2.exe	93

C:\Users\Admin\AppData\Local\Temp\discord-quest-completer.exe
"C:\Users\Admin\AppData\Local\Temp\discord-quest-completer.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2804
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=discord-quest-completer.exe --webview-exe-version=25.10.7 --user-data-dir="C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=2804.4704.17455113360122273019
  2⤵
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:944
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffabf5ab078,0x7ffabf5ab084,0x7ffabf5ab090
    3⤵
    PID:4856
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView" --webview-exe-name=discord-quest-completer.exe --webview-exe-version=25.10.7 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1692,i,9871464148008313014,12355195582223793847,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1696 /prefetch:2
    3⤵
    PID:3584
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView" --webview-exe-name=discord-quest-completer.exe --webview-exe-version=25.10.7 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2028,i,9871464148008313014,12355195582223793847,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2044 /prefetch:3
    3⤵
    PID:596
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView" --webview-exe-name=discord-quest-completer.exe --webview-exe-version=25.10.7 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2376,i,9871464148008313014,12355195582223793847,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:8
    3⤵
    PID:1184
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView" --webview-exe-name=discord-quest-completer.exe --webview-exe-version=25.10.7 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3652,i,9871464148008313014,12355195582223793847,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
    3⤵
    PID:3260

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

89b21b29-305d-4466-b07a-b7a3f8f847b1.tmp

Path C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView\89b21b29-305d-4466-b07a-b7a3f8f847b1.tmp
Size 3KB
SHA256 323b37aab7ee4df30c2850a8a2c6156e885f1786b3985f95066408937a666dfb
MD5 02a645d855cdc040bb846a9c90ec4187
SHA1 9d42f80d3fb1f8bf6d6ee0ef95bbfad13443213b
SHA512 8c7af3c1c8842dd2678338a5cd8d494ab58ea43d47f6b41194686a3cecf18bde6fa763cc8462250829fb58116327e51fbd27bace09ea4e8f1ea9f9100f6e3e3c
TLSH
T15B718476A964AA378EF39E41B8852F26FA661137D5D12F98D5EC0F0D02DB3D82302C17
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 84d4ef1d5e405c3f3acd540095fe8dc6ab1ad409e2a65283980e28b1343767ad
MD5 03e525970493f5fd204de5b2a4bf41d0
SHA1 537f4708fc1eff328ffff079c0d26e8fd94f80c9
SHA512 22cd74eefe4498e41404ac97e1464a9441e3c7b57149da6d77c7de28283b3118665bfe68b422bed02660a43a81bf0fba8123b1a115660567c8853ea066f9be56
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 287eecd2e52e5b3acb8a7df6aae3f40b655c24516749b49bc27474ed0fc08319
MD5 fd7d5f2dc7f9a9ed2b3f3ac7a8a17ca6
SHA1 e73f17cbae947f35451cba20662e6a323ab44b5d
SHA512 b184935d5302532bf902dd1dbb2e1225a8c8c1971e063457d03a89f08acf8e2a90c0cc3e52aa3b990aecd277206994904080dc4cf8f0dae841af52fe2c537e8b
TLSH
T1EED01212F3210274C0102033044265082C02D21F80094004A42C9A1D1A048504F13C42
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 820f637004a86c3dceead9560398aa175d879ca9db13cfcb10603017a633860c
MD5 c7cb495c040888337dde7dc446132bec
SHA1 e0e710522ed8a8063b7f18b0a13fb5b40e17d13e
SHA512 eddde8138e3ed25dd7eac7a1a4f7b1d92126d6882b25275143b522d1ec2e95e18b334bbf2e098a8e1490bf819b987638ce1b2e9f3bee7e967cc39687cae0d41b
TLSH
T1E5B002148505D906F34123F125E336C379317C7C83E78B5192DCCAF9961EB94DB41546
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58587b.TMP

Path C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe58587b.TMP
Size 48B
SHA256 04714bef9a061703bfee7f0fd998c4ee27e53ed1735c1df29ae2689527417d31
MD5 498fb31528389c7829f556fd0c573189
SHA1 9d096d07c14fbaa510ac9ce6706c9a4215eea7ac
SHA512 7cd704730bd239799b048fe86c64be02583c1bbec378aaaabe40c3d397182066e585f2183196b11b4cc528bb8b0cd8708858fd3ddaddf2b89068eefb2f81585b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView\Default\Extension Rules\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView\Default\Extension Scripts\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView\Default\Preferences
Size 6KB
SHA256 78e3db6433cc55e140819df10486750596f1c3fbacf0c4aab327b3eb0813aae2
MD5 3235675a8e9f485494926fccd90a6726
SHA1 594661bbf6c22dca0e61c74a46e7a8c7f0bd7797
SHA512 c358c8d0ddae9d53f1689b67e5f386f3082c76b16ee016ea06ba76ffb0895e6cd2c0b0ee00c6338edc02b3eab514f720cd6be9ac66a714efbb894c5fcf87006f
SSDEEP 96:stR05+2ngb9PffqZ8i0vhEXktBm/7qx+WVHMSm+uecJKvMFHdQj6+gZNuMOB:stR0ARfCZ8pa6E/S+WiTKvqdH3NuMC
TLSH
T162E1A6025E2879778CC7E6197A35BF16E2F6506361D50E98EBFC861C09E67CC630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe58a0ee.TMP

Path C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView\Default\Preferences~RFe58a0ee.TMP
Size 6KB
SHA256 f3838dc4369d1796155ac6b8f9c72ea43d0cd16f2e8506bac5e2fd07bf1130ce
MD5 9cf5445335cd555ef459e333c667609e
SHA1 bad9728a55be4e4e8d065d1390a894e6f32a64cf
SHA512 54f8617009c13c4397cea116faf908e85bfa9af24528a0063c80e376b0a6941c87b1f95b2eb6f8fe2c14e900d6f00244ff0db8a939847c6143e5a42c7a49aace
SSDEEP 96:stR05+2ngb9HffqZ8i0vhEXktBm/7qx+WVHMSm+uecJ0X11idQj6+gkuMEB:stR0AJfCZ8pa6E/S+WiT0X1wdHiuM8
TLSH
T1B6D1C8025E6879778CC7E6197A35BF16E2FA206261D40E98EBFC861C09D67CC6307D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView\Local State
Size 1KB
SHA256 1f0ac41a305af2ce1fc03dc15b38e405e5171b45994269116cf02676168b4f22
MD5 34e103a6f3cb436cae7f42e8e9f0f94a
SHA1 c7c94d20f7982c416b4c51375cdddebc1ed64278
SHA512 3d84fe63830be9d5972dc592a9c64ddc035fbb7e8dbca870941cf8719e486bfbe5cb78e9d0cc6623d3e266649f33bf9a43c19a5e03e2d4cc5e73e21cf6af168e
TLSH
T1A33165B1A0806B72ED939A827541AE7BBD31013BC1514E44A1ED0B5D43E77DCA526C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView\Local State
Size 2KB
SHA256 53e869f9141e4ed67bb07efd6d5734b9b811c0cea4bf59120d3e0755ed56fdd9
MD5 cc95863145248994da26dbef0b537d5b
SHA1 2f6c6a0c40c67877cbb8841333fd463fa4b79bc3
SHA512 04811540446b71e57c21700cce4d4009bbe57347a2530f682d232bf65b6ecb8bc67c44f29a4c16fe4dc808247e3802ca9dae85fb780cad290fd8759f41cfd25c
TLSH
T12E5184727804AA77CDE39A45B9492E37EE36117785A11F9095DD0B0D42DB79C2702C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView\Local State
Size 16KB
SHA256 cdb9ba2abde5c4a019d97e43a7828166f0e3bd84c6c97ab107425796555cf17a
MD5 faaff19aadab2fa5fe3cac78fa122f5c
SHA1 f99420b11b10a76dda6e95ae19d1a30f3c3251e6
SHA512 619d03fb084ea108373a25f3c56b0217f86bde3b8123f064106225a7b417f73147523a8013cdb70a287a738bef61898a8ee5a2f1cd701e76eafcfb91aeb9dcaf
SSDEEP 384:zv+aQikB+z/xvxjg/qhEFNb7mhlk+69zg:y/UxvxjgC+TmrJ6Fg
TLSH
T124729E2B61683A3399F3E945794C0B9FDBB594B380C16EA849ED5F0E07CB3D81702D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe5801d0.TMP

Path C:\Users\Admin\AppData\Local\me.markterence.discordquestcompleter\EBWebView\Local State~RFe5801d0.TMP
Size 1KB
SHA256 bcb42a07e6a303f17c679f68ed16ba82c366270a1fa350ac98cc9f43b25e3dfb
MD5 ebaa06bfb90730b9960a95299e568bc3
SHA1 561736665d8c761de6c372d3b02a7fe6e55e2e94
SHA512 e0bd216d13268d530f29c52b7e22f97651e449ba58bab445dca190e4a8483b3b7f0b8e47143ecb4c0a16cdfca1b6c589108f931bb50f18b57ba3bce83ba17a13
TLSH
T15F2135B2D0846B72ED979D827541AE9B7D21013B81514E08E1DD075E53D7AECA527C33
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1184-85-0x00007FFADA400000-0x00007FFADA401000-memory.dmp

Download

memory/1184-84-0x00007FFADB330000-0x00007FFADB331000-memory.dmp

Download

memory/3260-138-0x00007FFADA6C0000-0x00007FFADA6C1000-memory.dmp

Download

memory/3584-25-0x00007FFADA6C0000-0x00007FFADA6C1000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads