Windows Analysis Report
https://pancake-swap-liquidity.pages.dev/

Overview

General Information

Sample URL:	https://pancake-swap-liquidity.pages.dev/
Analysis ID:	1500178
Infos:

Errors URL not reachable

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Stores files to the Windows start menu directory

Classification

Signatures

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://pancake-swap-liquidity.pages.dev/	Avira URL Cloud: detection malicious, Label: phishing
Source: https://pancake-swap-liquidity.pages.dev/	SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: https://pancake-swap-liquidity.pages.dev/ba2609255ff14686.css	Avira URL Cloud: Label: phishing
Source: https://pancake-swap-liquidity.pages.dev/56.png	Avira URL Cloud: Label: phishing
Source: https://pancake-swap-liquidity.pages.dev/info-strip-logo.png	Avira URL Cloud: Label: phishing
Source: https://pancake-swap-liquidity.pages.dev/0399162c-e243-49b9-8e99-2c12a444953b.js	Avira URL Cloud: Label: phishing
Source: https://pancake-swap-liquidity.pages.dev/css2.css	Avira URL Cloud: Label: phishing
Source: https://pancake-swap-liquidity.pages.dev/help.png	Avira URL Cloud: Label: phishing
Source: https://pancake-swap-liquidity.pages.dev/0x0E09FaBB73Bd3Ade0a17ECC321fD13a19e81cE82.png	Avira URL Cloud: Label: phishing

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: pancake-swap-liquidity.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ba2609255ff14686.css HTTP/1.1Host: pancake-swap-liquidity.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pancake-swap-liquidity.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css2.css HTTP/1.1Host: pancake-swap-liquidity.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pancake-swap-liquidity.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0399162c-e243-49b9-8e99-2c12a444953b.js HTTP/1.1Host: pancake-swap-liquidity.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pancake-swap-liquidity.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /info-strip-logo.png HTTP/1.1Host: pancake-swap-liquidity.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pancake-swap-liquidity.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /56.png HTTP/1.1Host: pancake-swap-liquidity.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pancake-swap-liquidity.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0x0E09FaBB73Bd3Ade0a17ECC321fD13a19e81cE82.png HTTP/1.1Host: pancake-swap-liquidity.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pancake-swap-liquidity.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /help.png HTTP/1.1Host: pancake-swap-liquidity.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pancake-swap-liquidity.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /56.png HTTP/1.1Host: pancake-swap-liquidity.pages.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /info-strip-logo.png HTTP/1.1Host: pancake-swap-liquidity.pages.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0x0E09FaBB73Bd3Ade0a17ECC321fD13a19e81cE82.png HTTP/1.1Host: pancake-swap-liquidity.pages.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /help.png HTTP/1.1Host: pancake-swap-liquidity.pages.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0399162c-e243-49b9-8e99-2c12a444953b.js HTTP/1.1Host: pancake-swap-liquidity.pages.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: pancake-swap-liquidity.pages.dev
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=PPgrQcl7IShD8Tv8dOpUUOmMJ6RSzQ9TP0WCl94lYP%2BWSi1zatCldJLJ0DJAM4YM1ZoYKqYAt7S%2BKpZq%2F15Rz9rSTH0EmszrIEsaBFd4Qd3Qt%2B%2FUjyAnc7WX9MorrehhmMRGrgtrXSeE7hQe0i2u8vAE2Q%3D%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 441Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723

Source: classification engine

Classification label: mal56.win@16/25@8/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1956,i,10833788595056424208,14511305179055321857,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pancake-swap-liquidity.pages.dev/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1956,i,10833788595056424208,14511305179055321857,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.96.3	pancake-swap-liquidity.pages.dev	European Union	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

Contacted Domains

Name	IP	Active
a.nel.cloudflare.com	35.190.80.1	true
www.google.com	216.58.206.68	true
pancake-swap-liquidity.pages.dev	188.114.96.3	true
fp2e7a.wpc.phicdn.net	192.229.221.95	true

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://pancake-swap-liquidity.pages.dev/info-strip-logo.png	true	Avira URL Cloud: phishing	unknown
https://pancake-swap-liquidity.pages.dev/56.png	true	Avira URL Cloud: phishing	unknown
https://pancake-swap-liquidity.pages.dev/ba2609255ff14686.css	true	Avira URL Cloud: phishing	unknown
https://pancake-swap-liquidity.pages.dev/	true		unknown
https://a.nel.cloudflare.com/report/v4?s=PPgrQcl7IShD8Tv8dOpUUOmMJ6RSzQ9TP0WCl94lYP%2BWSi1zatCldJLJ0DJAM4YM1ZoYKqYAt7S%2BKpZq%2F15Rz9rSTH0EmszrIEsaBFd4Qd3Qt%2B%2FUjyAnc7WX9MorrehhmMRGrgtrXSeE7hQe0i2u8vAE2Q%3D%3D	false	Avira URL Cloud: safe	unknown
https://pancake-swap-liquidity.pages.dev/0399162c-e243-49b9-8e99-2c12a444953b.js	true	Avira URL Cloud: phishing	unknown
https://pancake-swap-liquidity.pages.dev/css2.css	true	Avira URL Cloud: phishing	unknown
https://pancake-swap-liquidity.pages.dev/0x0E09FaBB73Bd3Ade0a17ECC321fD13a19e81cE82.png	true	Avira URL Cloud: phishing	unknown
https://pancake-swap-liquidity.pages.dev/help.png	true	Avira URL Cloud: phishing	unknown

ID:	1500178
Product:	CloudBasic
Start time:	00:44:29
Start date:	28.08.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Aug 27 21:45:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	C9495C23EDD9F823B3A72803B7200CB1	7559C4619E29DF6D00343429C33122DE47AD9EB6	DA75A1BBB06DC820943D09643712D60A481DDB62730F47CDBFD0486D5A18FD2D
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Aug 27 21:45:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	AF040EEAB71F0DAD007FEB40AC86320B	3FEFDEB59DD5A71F38D030B5FBCF9A05664AB705	72009EDAC7983C13F49E12285B70214512A7CBF0BBBA2182CD4EF7C3525FD122
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	28636B8098B58469CDD7EFE2B4785588	B39DD2C4E84C77E2E7651B591BA2710B34CBBB2A	791A0F4E7EA3DDB4E990103485A814F0DDA0B5D0247A8BA01424E4780D332FC2
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Aug 27 21:45:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	CB55AC302F02B9B152A9EDE9DFA9ADBF	DB8BE0F76600923480770840C499407BE9B8C32B	9934AE05EDC8047F08EE9759999199036F5E63AB1F75B70803AAEC6464070957
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Aug 27 21:45:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	99ED88C03ACC02A3438C8CDB33A1898E	1BDA3BB7A6B873081E47952DE7E49065D1DA58D6	D3EB826D7416EC69B5CB04C616F27F2A8E7D0409678007D7FC08823E094FAC08
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Aug 27 21:45:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	F11C79AB7F3EC75ED994D86111BDE147	A4F03A1A7BDB0CFE81A4AD7963A5770DE1A50837	7850C6FF666C578E1F7FAACB7132323297FF240BBD63D923B0B40A9863F532E1
Chrome Cache Entry: 57	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced	EB10FE924875D72C7BDF59668E2EF25A	63D5F23E126D4E3360E070BB8FE43FD8927AEC3B	1899010A096BFF4DC2316639A20E08EECC42390CEB6667A433C89AC48C0E6D60
Chrome Cache Entry: 58	PNG image data, 48 x 48, 8-bit colormap, non-interlaced	241DDCD7FF9541B1839703882D91D404	5B6ADA17F54077B5E020D91AF0C8EBE99B06BB88	8B7F54E9045D2BECA6B4D124B97C84B9C2E84D14C709B6F3B160FAE209FF08E0
Chrome Cache Entry: 59	ASCII text, with very long lines (65536), with no line terminators	391FA13A022FC6BD0B9DD69EAD44597E	2842B4A5F965891A6D8C36A2F1A89684BA0AC9C3	8A2E940D940C0602C2690619C40B6259F8E808E518BDD284AF7A65D9D1FEE8EA
Chrome Cache Entry: 60	PNG image data, 320 x 224, 8-bit colormap, non-interlaced	F20FE15A3893FDBB7408F92FEEE60384	D8C75CD09D91D3D135E8D1B71A732F0172CA1EFA	46A6ECCE89CF4EE636BB9B2A9E625406F268CE9739E6284E8BC6235D21CBB22F
Chrome Cache Entry: 61	PNG image data, 350 x 162, 8-bit/color RGBA, non-interlaced	233AA0BB762C5FA332381628D1D45BAA	A36E5695F62B2A6E4F4E44BBBC2D3037BF39BA65	59F9A6B4EA3F61B223F76A0244DD6373BAF1657893CFAEC1938ED6CB2F1D16B4
Chrome Cache Entry: 62	ASCII text	60ED58FCEAA501E37B2B2CC404786C42	88C716492827357C387B8428EBFFD02BEF26CBAA	2500F03FAA752DAA00FD72A17C9D64F25790AAC02507F6C22C21F7F3512122AF
Chrome Cache Entry: 63	PNG image data, 320 x 224, 8-bit colormap, non-interlaced	F20FE15A3893FDBB7408F92FEEE60384	D8C75CD09D91D3D135E8D1B71A732F0172CA1EFA	46A6ECCE89CF4EE636BB9B2A9E625406F268CE9739E6284E8BC6235D21CBB22F
Chrome Cache Entry: 64	ASCII text, with very long lines (65536), with no line terminators	391FA13A022FC6BD0B9DD69EAD44597E	2842B4A5F965891A6D8C36A2F1A89684BA0AC9C3	8A2E940D940C0602C2690619C40B6259F8E808E518BDD284AF7A65D9D1FEE8EA
Chrome Cache Entry: 65	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced	EB10FE924875D72C7BDF59668E2EF25A	63D5F23E126D4E3360E070BB8FE43FD8927AEC3B	1899010A096BFF4DC2316639A20E08EECC42390CEB6667A433C89AC48C0E6D60
Chrome Cache Entry: 66	ASCII text, with very long lines (65536), with no line terminators	33DAF029A869EA377C5F0A45988E5D0C	21D85035FB026646E8531C64477CE83C34136995	D2ACE7E7CF9DFDADC22EF20E0A9B3EABE578151D010F015C4C9CBA4A0F8D4E7B
Chrome Cache Entry: 67	PNG image data, 350 x 162, 8-bit/color RGBA, non-interlaced	233AA0BB762C5FA332381628D1D45BAA	A36E5695F62B2A6E4F4E44BBBC2D3037BF39BA65	59F9A6B4EA3F61B223F76A0244DD6373BAF1657893CFAEC1938ED6CB2F1D16B4
Chrome Cache Entry: 68	PNG image data, 48 x 48, 8-bit colormap, non-interlaced	241DDCD7FF9541B1839703882D91D404	5B6ADA17F54077B5E020D91AF0C8EBE99B06BB88	8B7F54E9045D2BECA6B4D124B97C84B9C2E84D14C709B6F3B160FAE209FF08E0

Windows Analysis Report
https://pancake-swap-liquidity.pages.dev/

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://pancake-swap-liquidity.pages.dev/

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://pancake-swap-liquidity.pages.dev/