5e9707399af5bb25ce2f164913a50d59c2f70004a01502e8fe7ff355b1054b7a

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
user interaction
yes
max time kernel
899s
max time network
465s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/10/2026, 09:52

Target
GrandV-Launcher-windows-x64.exe
Size 12.5MB
Sample261017-lwd15sdw21
SHA256 5e9707399af5bb25ce2f164913a50d59c2f70004a01502e8fe7ff355b1054b7a
MD5 ba2926a5dc5d10dab254b6e89265e3b7
SHA1 384af0cec7be10d60365f7af4c781ba25142df6e
SHA512 dfc101af7be1bdad06151c3b2002e06560c6a81cece12f1c59342c56adcf845251f91531c1a4b76f41322e57ba8eb7e5bf543d1b8a5b546f6a4455c39ded0f17
SSDEEP 98304:LgZpecIvmhgi8FSuWpmZQdd0Uyb49PLWx3bZJGFYfGFYVF+61Sp7t:Fk8gMo0UoSPL6JcYcmF
TLSH
T12DD66B127A5B99ADC15AC470934686736E2270CB0B35B9FF45C496383EBAAF05F3C358
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3900	GrandV-Launcher-windows-x64.exe

C:\Users\Admin\AppData\Local\Temp\GrandV-Launcher-windows-x64.exe
"C:\Users\Admin\AppData\Local\Temp\GrandV-Launcher-windows-x64.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:3900

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1188

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4992

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:2132