Mercurial Grabber infostealer (adminapp.exe) with Discord webhook exfiltration
Detects the Mercurial Grabber infostealer dropped by a fake GTA6 installer (adminapp.exe) based on Discord webhook exfiltration artifacts, specific targeted string patterns, or known file hash.
YARA

