bf72d8edfbb3026d2ae72717dffc9b90e46d2d45c01dcd0625b2768062b18318

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/08/2026, 08:12

Target
RegisterAmsUrlHandler.exe
Size 5KB
Sample260819-j39ehszfmg
SHA256 bf72d8edfbb3026d2ae72717dffc9b90e46d2d45c01dcd0625b2768062b18318
MD5 5207dbf9b08b1341a649d5184dadda2d
SHA1 e6fadc1dfff58a66b03fed24165e9a3bfea5cff4
SHA512 26722cee694564e1dfd3479da62e64f5ff4015fa72d21bd4eb18f610abc069167b60fbf83ec2138e29910b237339c4872470880e871a866dc24a69492af200f7
SSDEEP 96:J/AVEG6ct1MgUTE4rERvGyBJLk40A3lMb:BAMaMgUY4rwvG2Lk40A3l4
TLSH
T126C1541697FC8327EAF75B31ADB74B415636F9108D23DB4F45849B0A7C32A109A32F62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies registry class 9 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\automobilista\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\AutomobilistaWebLauncher.exe\" \"%1\""	RegisterAmsUrlHandler.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\automobilista\DefaultIcon	RegisterAmsUrlHandler.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\automobilista\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\AMS.exe\""	RegisterAmsUrlHandler.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\automobilista\URL Protocol	RegisterAmsUrlHandler.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\automobilista\shell	RegisterAmsUrlHandler.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\automobilista\shell\open	RegisterAmsUrlHandler.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\automobilista	RegisterAmsUrlHandler.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\automobilista\ = "URL:automobilista Protocol"	RegisterAmsUrlHandler.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\automobilista\shell\open\command	RegisterAmsUrlHandler.exe

C:\Users\Admin\AppData\Local\Temp\RegisterAmsUrlHandler.exe
"C:\Users\Admin\AppData\Local\Temp\RegisterAmsUrlHandler.exe"
1⤵
- Modifies registry class
PID:3460

memory/3460-0-0x00007FFEBECE5000-0x00007FFEBECE6000-memory.dmp

Download

memory/3460-1-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp

Download

memory/3460-3-0x00007FFEBEA30000-0x00007FFEBF3D1000-memory.dmp

Download