Analysis date (UTC): 3 April 2026, 21:05Analysis environment: Windows 10 Pro, build 19044, x64

discord-worm.exe

MD5:46FC5C34939A13AD2B692F3020B0DA07
SHA1:969351C7EAD07F2A76AE2EB47684913C3AC117A2
SHA256:4F6DD56971BBE92D47FBB9F80E6F32EAA3E4CE01EE70E1C8B116477CF28193D6

Analysis result

Behavior activities

MALICIOUS

Steals credentials from Web Browsers

  • discord-worm.exe (PID: 5616)

SUSPICIOUS

Possible stealing of messenger data

  • discord-worm.exe (PID: 5616)

INFO

Checks supported languages

  • discord-worm.exe (PID: 5616)

Create files in a temporary directory

  • discord-worm.exe (PID: 5616)

Reads Environment values

  • discord-worm.exe (PID: 5616)

Threats

No threats detected

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN