Overview

overview

3

Static

static

1

URLScan

urlscan

1

https://track.pstmrk...

windows10-2004-x64

3

Analysis

  • user interaction
    yes
  • max time kernel
    0s
  • max time network
    44s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    25/09/2026, 07:51

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    https://track.pstmrk.it/3s/1educator.com/conference/osha-2026-regulatory-updates-and-compliance-changes-deregulation-and-enforcement-updates/h9E6AQ/REDIAQ/AQ/07cfa592-9df4-4e44-9911-d938b5a61d56/1/YZU9AIsRZw
  • Sample260925-jp8wtscb39
Score
3/10
discovery

Malware Config

Signatures

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Enumerates system info in registry 2 TTPs 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://track.pstmrk.it/3s/1educator.com/conference/osha-2026-regulatory-updates-and-compliance-changes-deregulation-and-enforcement-updates/h9E6AQ/REDIAQ/AQ/07cfa592-9df4-4e44-9911-d938b5a61d56/1/YZU9AIsRZw
    1⤵
    • Enumerates system info in registry
    • Suspicious use of WriteProcessMemory
    PID:1020
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffd2e2ac188,0x7ffd2e2ac194,0x7ffd2e2ac1a0
      2⤵
        PID:3460
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,14929877349886793034,1037024031261588525,524288 --field-trial-handle=2072,i,4048828037184769785,10666808235170080658,262144 --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:3
        2⤵
        • System Time Discovery
        PID:3224
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,4819257381214899499,9439073649811321118,262144 --field-trial-handle=2072,i,4048828037184769785,10666808235170080658,262144 --variations-seed-version --mojo-platform-channel-handle=2060 /prefetch:2
        2⤵
          PID:4012
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2584,i,3942368741360758709,11861875229993311375,524288 --field-trial-handle=2072,i,4048828037184769785,10666808235170080658,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:8
          2⤵
            PID:1928
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,5249803099025901365,11377441926439953629,2097152 --field-trial-handle=2072,i,4048828037184769785,10666808235170080658,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
            2⤵
              PID:3756
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,11562135507231359698,16367141558819407549,2097152 --field-trial-handle=2072,i,4048828037184769785,10666808235170080658,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
              2⤵
                PID:3924
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,17561301961024580237,16129891950949145665,2097152 --field-trial-handle=2072,i,4048828037184769785,10666808235170080658,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
                2⤵
                  PID:1896
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,13711051442992731569,7118899839691498063,2097152 --field-trial-handle=2072,i,4048828037184769785,10666808235170080658,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:2
                  2⤵
                    PID:3040
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3596,i,15290116965748345323,13695934853885003417,2097152 --field-trial-handle=2072,i,4048828037184769785,10666808235170080658,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:1
                    2⤵
                      PID:1728
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3524,i,7170048589808769149,6874466925611307567,524288 --field-trial-handle=2072,i,4048828037184769785,10666808235170080658,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:8
                      2⤵
                        PID:3564
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3516,i,6782412749140017842,4433791428766793591,524288 --field-trial-handle=2072,i,4048828037184769785,10666808235170080658,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:8
                        2⤵
                          PID:4932
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,9989258779284003204,5060864481222541888,524288 --field-trial-handle=2072,i,4048828037184769785,10666808235170080658,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
                          2⤵
                            PID:4572
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,9989258779284003204,5060864481222541888,524288 --field-trial-handle=2072,i,4048828037184769785,10666808235170080658,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
                            2⤵
                              PID:2436
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,3653542526370080892,14538833747382393947,524288 --field-trial-handle=2072,i,4048828037184769785,10666808235170080658,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
                              2⤵
                                PID:2212
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4564,i,13803390188499150411,5471809367192302078,524288 --field-trial-handle=2072,i,4048828037184769785,10666808235170080658,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:8
                                2⤵
                                  PID:3792
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,1041846927298363987,8955342800173520076,524288 --field-trial-handle=2072,i,4048828037184769785,10666808235170080658,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:8
                                  2⤵
                                    PID:540
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,2237843954493745623,18277426177963209095,524288 --field-trial-handle=2072,i,4048828037184769785,10666808235170080658,262144 --variations-seed-version --mojo-platform-channel-handle=4572 /prefetch:8
                                    2⤵
                                      PID:3832
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                    1⤵
                                      PID:3020

                                    Network

                                          MITRE ATT&CK Enterprise v16

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads

                                          blocklist
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                          • Size 105KB
                                          • SHA256 21916bd4ff5d8352c56dee6a81be174493beaf79015a1cd73bf87d3641937777
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          settings.dat
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                          • Size 280B
                                          • SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
                                          • MD5 SHA1 SHA512 TLSH
                                          Submit Download

                                          BookmarkMergedSurfaceOrdering
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                          • Size 6B
                                          • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                          • MD5 SHA1 SHA512
                                          Submit Download

                                          the-real-index
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                          • Size 2KB
                                          • SHA256 d7e6a0d62ec21731a368fef7eff19cb509ecb5c4f176ac882201a79e89909b5e
                                          • MD5 SHA1 SHA512 TLSH
                                          Submit Download

                                          SiteList-Enterprise.json
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                          • Size 2B
                                          • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                          • MD5 SHA1 SHA512
                                          Submit Download

                                          Edge Profile.ico
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                          • Size 70KB
                                          • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          Network Persistent State
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                          • Size 111B
                                          • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                          • MD5 SHA1 SHA512 TLSH
                                          Submit Download

                                          bdd38aeb-b754-470d-ae8f-a0436567691b.tmp
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bdd38aeb-b754-470d-ae8f-a0436567691b.tmp
                                          • Size 2B
                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                          • MD5 SHA1 SHA512
                                          Submit Download

                                          Preferences
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                          • Size 9KB
                                          • SHA256 3a8c34b67ebc72d9caf1d7cc41a7f715664d08f973d2126e1d5269601753d5d2
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          Preferences
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                          • Size 10KB
                                          • SHA256 b3ff13f7d6cdffa441a5a1bb8e6b8de447bf4a74995102b69a768f069f83e8af
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          Preferences
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                          • Size 10KB
                                          • SHA256 9ebee5df3a8f1fa71cce331ad5dee964899385a985679940858c60af228b8fca
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          Preferences
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                          • Size 10KB
                                          • SHA256 9638c3a1ff672889014c3c3caf54ac78d4c7ccf179b21177703ca44730ba5ac1
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          Secure Preferences
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                          • Size 27KB
                                          • SHA256 1c3e42df120877128200c7ef0127e9655133cec472203bced75e1082e4e77b63
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          sync_diagnostic.log
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                          • Size 4KB
                                          • SHA256 0a8fa69cad3a797e6fff8fe28a63c3f18ad9d8c756d7f0323b78d5000548e35b
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          78edd06d-c8bf-4233-9214-7789375d87ed.tmp
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\78edd06d-c8bf-4233-9214-7789375d87ed.tmp
                                          • Size 22KB
                                          • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          Local State
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                          • Size 18KB
                                          • SHA256 0a84edcc829e97b1da1f55855d64c0aa861116f9e25066408b30d8ee7cd5af4d
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          Local State
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                          • Size 18KB
                                          • SHA256 b3eab449ecc72f118d8e1960cc4a4142d0f9cb14b2ef9c9970f7a46310af5ce8
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          Local State
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                          • Size 8KB
                                          • SHA256 025ecaf74e1a553ca8e1826531c2db930483faf95d9e9b7aa6289e10b64aadd1
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          Local State
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                          • Size 8KB
                                          • SHA256 f0effa7aca014ab33db486bb0a2b7a40c9870767b646b38c2b59c340af87fb4f
                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                          Submit Download

                                          12ea02a4-caaf-49c2-a265-922a29b28338.tmp
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\12ea02a4-caaf-49c2-a265-922a29b28338.tmp
                                          • Size 13B
                                          • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                          • MD5 SHA1 SHA512
                                          Submit Download

                                          5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                          • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                          • Size 2KB
                                          • SHA256 c1939c816a394c7a356c623b553da96b45e99f823852fd43767508a08ac1ba59
                                          • MD5 SHA1 SHA512 TLSH
                                          Submit Download