Application

Telegram Desktop tdata

Telegram Desktop tdata directories can contain encrypted local session and account artifacts.

Metadata

  • id: application.telegram-desktop-tdata
  • category: application
  • sensitivity: critical
  • subcategory: telegram
  • artifact types: session, configuration
  • tags: telegram, session

Path Matchers

PathKindPlatforms
%APPDATA%\Telegram Desktop\tdata\directorywindows
$HOME/Library/Application Support/Telegram Desktop/tdata/directorymacos

Credential Types

  • session-token

Impact

  • credential_access

References

On this page