Suspicious Discord Restart Through Update.exe ProcessStart

Daniel Jeremiah@daniyyell

•updated Jun 21, 2026•0•0•1

Detects Discord Update.exe launching Discord through the processStart switch when started by an unusual parent. This behavior is indicative of potential malware, such as VVS Stealer, which might replace Discord core files and then use this method to load injected JavaScript into a fresh application session.