: Security platforms like Joe Sandbox and MalwareBazaar flag it as a Trojan/Spyware with malicious intent .
: Analysis reports show the process modifying Chrome extension folders, reading Outlook installation paths, and dropping new executables—all typical behaviors of a "grabber" tool . Recommended Actions Lunar_Builder.exe
: You can use a tool like the ANY.RUN interactive sandbox to view technical reports of its activity if you tokengrabber · GitHub Topics : Security platforms like Joe Sandbox and MalwareBazaar
is identified as a malicious executable, frequently associated with spyware and information-stealing Trojans such as MercurialGrabber . : It is designed to "grab" sensitive information,
: It is designed to "grab" sensitive information, including Discord tokens, browser cookies, saved passwords, and login details for platforms like Roblox .
If you have encountered this file, it is highly recommended to and to remove it from your system immediately. Key Risk Indicators
: If you have already executed the file, change your passwords immediately for your email, banking, and social accounts (especially Discord and gaming platforms), and enable Two-Factor Authentication (2FA) where possible.