Edit tour

Windows Analysis Report
https://multiresolvedevpad.firebaseapp.com/

Overview

General Information

Sample URL:	https://multiresolvedevpad.firebaseapp.com/
Analysis ID:	1604805
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body with high number of embedded images detected

HTML title does not match URL

Suricata IDS alerts with low severity for network traffic

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2344 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2260 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=2016,i,8884915002066612192,3580248782477765363,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6560 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://multiresolvedevpad.firebaseapp.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET PHISHING Possible Phish - Mirrored Website Comment Observed

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-02T00:45:57.100557+0100	2018302	1	A Network Trojan was detected	199.36.158.100	443	192.168.2.4	49742	TCP
2025-02-02T00:45:59.485712+0100	2018302	1	A Network Trojan was detected	199.36.158.100	443	192.168.2.4	49763	TCP
2025-02-02T00:45:59.671943+0100	2018302	1	A Network Trojan was detected	199.36.158.100	443	192.168.2.4	49765	TCP
2025-02-02T00:46:00.076792+0100	2018302	1	A Network Trojan was detected	199.36.158.100	443	192.168.2.4	49769	TCP
2025-02-02T00:46:00.269087+0100	2018302	1	A Network Trojan was detected	199.36.158.100	443	192.168.2.4	49772	TCP
2025-02-02T00:46:00.300549+0100	2018302	1	A Network Trojan was detected	199.36.158.100	443	192.168.2.4	49774	TCP
2025-02-02T00:46:01.061277+0100	2018302	1	A Network Trojan was detected	199.36.158.100	443	192.168.2.4	49779	TCP
2025-02-02T00:46:04.023980+0100	2018302	1	A Network Trojan was detected	199.36.158.100	443	192.168.2.4	49807	TCP
2025-02-02T00:46:04.727123+0100	2018302	1	A Network Trojan was detected	199.36.158.100	443	192.168.2.4	49809	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://multiresolvedevpad.firebaseapp.com/

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://multiresolvedevpad.firebaseapp.com/walletpage/images/crypto.png	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/asset/font/fa-brands-401.html	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/walletpage/images/pocketfi%20wallet.jpeg	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/walletpage/images/wallet.io.png	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/walletpage/images/Binance.png	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/asset/js/jquery.min.js	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/walletpage/images/midas.png	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/walletpage/images/tokenary.png	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/walletpage/images/mathwallet.jpeg	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/asset/images/backgroup-secsion/validated.html	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/walletpage/wallet/bootstrap.min.css	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/asset/js/wow.min.js	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/walletpage/images/alpha.jpeg	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/walletpage/assets/samurai.jpeg	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/walletpage/images/bitkeep.jpeg	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/asset/font/fa-solid-902.html	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/walletpage/images/coin98.jpg	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/walletpage/images/infinito.png	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/walletpage/images/rainbow.jpeg	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/walletpage/images/alice.png	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/walletpage/images/ontology.jpeg	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/asset/icon/preload.html	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/asset/js/count-down.js	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/walletpage/style/walletpage.css	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/asset/css/animate.css	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/walletpage/images/authereum.png	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/walletpage/images/dcent.png	Avira URL Cloud: Label: phishing
Source: https://multiresolvedevpad.firebaseapp.com/asset/css/jquery.fancybox.min.css	Avira URL Cloud: Label: phishing

Source: https://multiresolvedevpad.firebaseapp.com/

HTTP Parser: Number of links: 0

Source: https://multiresolvedevpad.firebaseapp.com/walletpage/walletpage.html

HTTP Parser: Total embedded image size: 32576

Source: https://multiresolvedevpad.firebaseapp.com/

HTTP Parser: Title: Decentralized Launchpad does not match URL

Source: https://multiresolvedevpad.firebaseapp.com/asset/js/moralis.js

HTTP Parser: /** * moralis javascript sdk v0.0.134 * * the source tree of this library can be found at * https://github.com/moralisweb3/moralis-js-sdk */(function(f){if(typeof exports==="object"&&typeof module!=="undefined"){module.exports=f()}else if(typeof define==="function"&&define.amd){define([],f)}else{var g;if(typeof window!=="undefined"){g=window}else if(typeof global!=="undefined"){g=global}else if(typeof self!=="undefined"){g=self}else{g=this}g.moralis = f()}})(function(){var define,module,exports;return (function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new error("cannot find module '"+i+"'");throw a.code="module_not_found",a}var p=n[i]={exports:{}};e[i][0].call(p.exports,function(r){var n=e[i][1][r];return o(n||r)},p,p.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}return r})()({1:[function(_dereq_,module,exports){"use...

Source: https://multiresolvedevpad.firebaseapp.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://multiresolvedevpad.firebaseapp.com/	HTTP Parser: No <meta name="copyright".. found

Source: Network traffic	Suricata IDS: 2018302 - Severity 1 - ET PHISHING Possible Phish - Mirrored Website Comment Observed : 199.36.158.100:443 -> 192.168.2.4:49765
Source: Network traffic	Suricata IDS: 2018302 - Severity 1 - ET PHISHING Possible Phish - Mirrored Website Comment Observed : 199.36.158.100:443 -> 192.168.2.4:49763
Source: Network traffic	Suricata IDS: 2018302 - Severity 1 - ET PHISHING Possible Phish - Mirrored Website Comment Observed : 199.36.158.100:443 -> 192.168.2.4:49772
Source: Network traffic	Suricata IDS: 2018302 - Severity 1 - ET PHISHING Possible Phish - Mirrored Website Comment Observed : 199.36.158.100:443 -> 192.168.2.4:49742
Source: Network traffic	Suricata IDS: 2018302 - Severity 1 - ET PHISHING Possible Phish - Mirrored Website Comment Observed : 199.36.158.100:443 -> 192.168.2.4:49779
Source: Network traffic	Suricata IDS: 2018302 - Severity 1 - ET PHISHING Possible Phish - Mirrored Website Comment Observed : 199.36.158.100:443 -> 192.168.2.4:49807
Source: Network traffic	Suricata IDS: 2018302 - Severity 1 - ET PHISHING Possible Phish - Mirrored Website Comment Observed : 199.36.158.100:443 -> 192.168.2.4:49774
Source: Network traffic	Suricata IDS: 2018302 - Severity 1 - ET PHISHING Possible Phish - Mirrored Website Comment Observed : 199.36.158.100:443 -> 192.168.2.4:49809
Source: Network traffic	Suricata IDS: 2018302 - Severity 1 - ET PHISHING Possible Phish - Mirrored Website Comment Observed : 199.36.158.100:443 -> 192.168.2.4:49769

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_261.2.dr, chromecache_377.2.dr	String found in binary or memory: !function(o){o.fn.YouTubePopUp=function(e){var u=o.extend({autoplay:1},e);o(this).on("click",function(e){var a=o(this).attr("href");if(a.match(/(youtube.com)/))var p="v=",t=1;if(a.match(/(youtu.be)/)\|\|a.match(/(vimeo.com\/)+[0-9]/))p="http://innovationplans.com/",t=3;if(a.match(/(vimeo.com\/)+[a-zA-Z]/))p="http://innovationplans.com/",t=5;var i=a.split(p)[t].replace(/(&)+(.*)/,"");if(a.match(/(youtu.be)/)\|\|a.match(/(youtube.com)/))var c="https://www.youtube.com/embed/"+i+"?autoplay="+u.autoplay;if(a.match(/(vimeo.com\/)+[0-9]/)\|\|a.match(/(vimeo.com\/)+[a-zA-Z]/))c="https://player.vimeo.com/video/"+i+"?autoplay="+u.autoplay;o("body").append('<div class="YouTubePopUp-Wrap YouTubePopUp-animation"><div class="YouTubePopUp-Content"><span class="YouTubePopUp-Close"></span><iframe src="'+c+'" allowfullscreen></iframe></div></div>'),o(".YouTubePopUp-Wrap").hasClass("YouTubePopUp-animation")&&setTimeout(function(){o(".YouTubePopUp-Wrap").removeClass("YouTubePopUp-animation")},600),o(".YouTubePopUp-Wrap, .YouTubePopUp-Close").click(function(){o(".YouTubePopUp-Wrap").addClass("YouTubePopUp-Hide").delay(515).queue(function(){o(this).remove()})}),e.preventDefault()}),o(document).keyup(function(e){27==e.keyCode&&o(".YouTubePopUp-Wrap, .YouTubePopUp-Close").click()})}}(jQuery); equals www.youtube.com (Youtube)
Source: chromecache_261.2.dr, chromecache_377.2.dr	String found in binary or memory: <style> .fluid-width-video-wrapper { width: 100%; position: relative; padding: 0; } .fluid-width-video-wrapper iframe, .fluid-width-video-wrapper object, .fluid-width-video-wrapper embed { position: absolute; top: 0; left: 0; width: 100%; height: 100%; } </style>";i.parentNode.insertBefore(r,i);if(t){e.extend(n,t)}return this.each(function(){var t=["iframe[src='player.vimeo.com']","iframe[src='www.youtube.com']","iframe[src='www.youtube-nocookie.com']","iframe[src='www.kickstarter.com']","object","embed"];if(n.customSelector){t.push(n.customSelector)}var r=e(this).find(t.join(","));r.each(function(){var t=e(this);if(this.tagName.toLowerCase()==="embed"&&t.parent("object").length\|\|t.parent(".fluid-width-video-wrapper").length){return}var n=this.tagName.toLowerCase()==="object"\|\|t.attr("height")&&!isNaN(parseInt(t.attr("height"),10))?parseInt(t.attr("height"),10):t.height(),r=!isNaN(parseInt(t.attr("width"),10))?parseInt(t.attr("width"),10):t.width(),i=n/r;if(!t.attr("id")){var s="fitvid"+Math.floor(Math.random()999999);t.attr("id",s)}t.wrap('<div class="fluid-width-video-wrapper"></div>').parent(".fluid-width-video-wrapper").css("padding-top",i100+"%");t.removeAttr("height").removeAttr("width")})})}})(jQuery); equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: multiresolvedevpad.firebaseapp.com
Source: global traffic	DNS traffic detected: DNS query: kit.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: ka-f.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: syncwallet.online
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: ethereum-magicians.org
Source: global traffic	DNS traffic detected: DNS query: miro.medium.com
Source: global traffic	DNS traffic detected: DNS query: dvh1deh6tagwk.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: play-lh.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: 58253638-files.gitbook.io
Source: global traffic	DNS traffic detected: DNS query: imagedelivery.net
Source: global traffic	DNS traffic detected: DNS query: i.ibb.co
Source: global traffic	DNS traffic detected: DNS query: cryptologos.cc
Source: global traffic	DNS traffic detected: DNS query: bitcoin-trading.io
Source: global traffic	DNS traffic detected: DNS query: cdn.dribbble.com
Source: global traffic	DNS traffic detected: DNS query: pbs.twimg.com
Source: global traffic	DNS traffic detected: DNS query: walletscrutiny.com
Source: global traffic	DNS traffic detected: DNS query: bittrust.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: avatars.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: keyring.app
Source: global traffic	DNS traffic detected: DNS query: oss-us-cdn.maiziqianbao.net

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 1808Cache-Control: max-age=3600Content-Type: text/html; charset=utf-8Etag: "6537619fa0edb6a05c3fa83265461172fea2307ecff34424f323310c8c8eb4be"Last-Modified: Wed, 08 Jan 2025 22:54:42 GMTStrict-Transport-Security: max-age=31556926; includeSubDomains; preloadAccept-Ranges: bytesDate: Sat, 01 Feb 2025 23:46:14 GMTX-Served-By: cache-ewr-kewr1740055-EWRX-Cache: MISSX-Cache-Hits: 0X-Timer: S1738453574.307861,VS0,VE100Vary: x-fh-requested-host, accept-encodingalt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 1808Cache-Control: max-age=3600Content-Type: text/html; charset=utf-8Etag: "6537619fa0edb6a05c3fa83265461172fea2307ecff34424f323310c8c8eb4be"Last-Modified: Wed, 08 Jan 2025 22:54:42 GMTStrict-Transport-Security: max-age=31556926; includeSubDomains; preloadAccept-Ranges: bytesDate: Sat, 01 Feb 2025 23:46:14 GMTX-Served-By: cache-ewr-kewr1740046-EWRX-Cache: MISSX-Cache-Hits: 0X-Timer: S1738453574.305753,VS0,VE101Vary: x-fh-requested-host, accept-encodingalt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=2016,i,8884915002066612192,3580248782477765363,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://multiresolvedevpad.firebaseapp.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=2016,i,8884915002066612192,3580248782477765363,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Deobfuscate/Decode Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://multiresolvedevpad.firebaseapp.com/walletpage/images/crypto.png	100%	Avira URL Cloud	phishing
https://multiresolvedevpad.firebaseapp.com/asset/font/fa-brands-401.html	100%	Avira URL Cloud	phishing
https://multiresolvedevpad.firebaseapp.com/walletpage/images/pocketfi%20wallet.jpeg	100%	Avira URL Cloud	phishing
https://tc39.es/ecma262/#sec-tointeger	0%	Avira URL Cloud	safe
https://ethereum-magicians.org/uploads/default/original/1X/e726391f66eb7da7a0ed7d780b4df5e8e2416a17.	0%	Avira URL Cloud	safe
https://multiresolvedevpad.firebaseapp.com/walletpage/images/wallet.io.png	100%	Avira URL Cloud	phishing
https://multiresolvedevpad.firebaseapp.com/walletpage/images/Binance.png	100%	Avira URL Cloud	phishing
https://docs.parseplatform.org/js/guide/#linking-users	0%	Avira URL Cloud	safe
https://multiresolvedevpad.firebaseapp.com/asset/js/jquery.min.js	100%	Avira URL Cloud	phishing
https://speedy-nodes-nyc.moralis.io/WalletConnect/fantom/mainnet	0%	Avira URL Cloud	safe
https://multiresolvedevpad.firebaseapp.com/walletpage/images/midas.png	100%	Avira URL Cloud	phishing
https://tc39.es/ecma262/#sec-symbol.iterator	0%	Avira URL Cloud	safe
https://formsubmit.co/ajax/spifffaya19	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-function.prototype.bind	0%	Avira URL Cloud	safe
https://multiresolvedevpad.firebaseapp.com/walletpage/images/tokenary.png	100%	Avira URL Cloud	phishing
https://multiresolvedevpad.firebaseapp.com/walletpage/images/mathwallet.jpeg	100%	Avira URL Cloud	phishing
https://tc39.es/ecma262/#sec-symbol.match	0%	Avira URL Cloud	safe
https://multiresolvedevpad.firebaseapp.com/asset/images/backgroup-secsion/validated.html	100%	Avira URL Cloud	phishing
https://tc39.es/ecma262/#sec-array.prototype.reduceright	0%	Avira URL Cloud	safe
https://multiresolvedevpad.firebaseapp.com/walletpage/wallet/bootstrap.min.css	100%	Avira URL Cloud	phishing
https://multiresolvedevpad.firebaseapp.com/asset/js/wow.min.js	100%	Avira URL Cloud	phishing
https://58253638-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/spaces%2F-MCCsloxVgbn9ByBE-nP%	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-symbol.for	0%	Avira URL Cloud	safe
https://keyring.app/wp-content/uploads/2021/11/LOGO-KEYRING-PRO-2.png	0%	Avira URL Cloud	safe
https://multiresolvedevpad.firebaseapp.com/walletpage/images/alpha.jpeg	100%	Avira URL Cloud	phishing
https://speedy-nodes-nyc.moralis.io/WalletConnect/eth/goerli	0%	Avira URL Cloud	safe
https://gateway.elrond.com	0%	Avira URL Cloud	safe
http://www.ianlunn.co.uk/plugins/jquery-parallax/	0%	Avira URL Cloud	safe
https://speedy-nodes-nyc.moralis.io/WalletConnect/eth/kovan	0%	Avira URL Cloud	safe
https://multiresolvedevpad.firebaseapp.com/walletpage/assets/samurai.jpeg	100%	Avira URL Cloud	phishing
https://multiresolvedevpad.firebaseapp.com/walletpage/images/bitkeep.jpeg	100%	Avira URL Cloud	phishing
https://dev-apygate.online/font/fa-light-300.html	0%	Avira URL Cloud	safe
https://multiresolvedevpad.firebaseapp.com/asset/font/fa-solid-902.html	100%	Avira URL Cloud	phishing
https://multiresolvedevpad.firebaseapp.com/walletpage/images/coin98.jpg	100%	Avira URL Cloud	phishing
https://tc39.es/ecma262/#sec-promise.prototype.finally	0%	Avira URL Cloud	safe
https://multiresolvedevpad.firebaseapp.com/walletpage/images/infinito.png	100%	Avira URL Cloud	phishing
https://multiresolvedevpad.firebaseapp.com/walletpage/images/rainbow.jpeg	100%	Avira URL Cloud	phishing
https://tc39.es/ecma262/#sec-map-objects	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-symbol.asynciterator	0%	Avira URL Cloud	safe
https://bugs.webkit.org/show_bug.cgi?id=200829	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-json-	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-symbol.tostringtag	0%	Avira URL Cloud	safe
https://multiresolvedevpad.firebaseapp.com/walletpage/images/alice.png	100%	Avira URL Cloud	phishing
https://multiresolvedevpad.firebaseapp.com/walletpage/images/ontology.jpeg	100%	Avira URL Cloud	phishing
https://multiresolvedevpad.firebaseapp.com/asset/icon/preload.html	100%	Avira URL Cloud	phishing
https://multiresolvedevpad.firebaseapp.com/asset/js/count-down.js	100%	Avira URL Cloud	phishing
https://tc39.es/ecma262/#sec-symbol.unscopables	0%	Avira URL Cloud	safe
https://multiresolvedevpad.firebaseapp.com/walletpage/style/walletpage.css	100%	Avira URL Cloud	phishing
https://oss-us-cdn.maiziqianbao.net/Chain_logo/W51673860963.jpg	0%	Avira URL Cloud	safe
https://multiresolvedevpad.firebaseapp.com/asset/css/animate.css	100%	Avira URL Cloud	phishing
https://multiresolvedevpad.firebaseapp.com/walletpage/images/authereum.png	100%	Avira URL Cloud	phishing
https://tc39.es/ecma262/#sec-symbol.split	0%	Avira URL Cloud	safe
https://multiresolvedevpad.firebaseapp.com/walletpage/images/dcent.png	100%	Avira URL Cloud	phishing
https://multiresolvedevpad.firebaseapp.com/asset/css/jquery.fancybox.min.css	100%	Avira URL Cloud	phishing

Name	IP	Active	Malicious	Reputation
kit.fontawesome.com.cdn.cloudflare.net	104.18.40.68	true	false	high
jsdelivr.map.fastly.net	151.101.1.229	true	false	high
58253638-files.gitbook.io	104.18.40.47	true	false	unknown
cdn.jsdelivr.net.cdn.cloudflare.net	104.18.187.31	true	false	high
ka-f.fontawesome.com.cdn.cloudflare.net	104.21.26.223	true	false	high
avatars.githubusercontent.com	185.199.109.133	true	false	high
multiresolvedevpad.firebaseapp.com	199.36.158.100	true	false	unknown
ethereum-magicians.org	184.169.209.62	true	false	unknown
i.ibb.co	91.134.9.160	true	false	high
s3-w.us-east-1.amazonaws.com	52.217.101.236	true	false	high
imagedelivery.net	104.18.2.36	true	false	high
code.jquery.com	151.101.130.137	true	false	high
walletscrutiny.com	188.226.251.49	true	false	unknown
oss-us-cdn.maiziqianbao.net.a.lahuashanbx.com	47.246.46.210	true	false	unknown
dualstack.twimg.twitter.map.fastly.net	146.75.120.159	true	false	high
bitcoin-trading.io	104.21.80.1	true	false	unknown
keyring.app	172.67.156.39	true	false	unknown
play-lh.googleusercontent.com	142.250.186.86	true	false	high
d2veqsckdanvln.cloudfront.net	13.32.99.69	true	false	unknown
www.google.com	142.250.186.68	true	false	high
dvh1deh6tagwk.cloudfront.net	18.245.62.182	true	false	unknown
cryptologos.cc	172.67.188.157	true	false	high
miro.medium.com	162.159.153.4	true	false	high
syncwallet.online	unknown	unknown	false	unknown
ka-f.fontawesome.com	unknown	unknown	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
kit.fontawesome.com	unknown	unknown	false	high
pbs.twimg.com	unknown	unknown	false	high
oss-us-cdn.maiziqianbao.net	unknown	unknown	false	unknown
cdn.dribbble.com	unknown	unknown	false	high
bittrust.s3.amazonaws.com	unknown	unknown	false	unknown

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/css/style.css HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://multiresolvedevpad.firebaseapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/js/jquery.min.js HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://multiresolvedevpad.firebaseapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/css/ntfs.css HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://multiresolvedevpad.firebaseapp.com/asset/css/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/css/shortcodes.css HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://multiresolvedevpad.firebaseapp.com/asset/css/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/css/responsive.css HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://multiresolvedevpad.firebaseapp.com/asset/css/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/css/animate.css HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://multiresolvedevpad.firebaseapp.com/asset/css/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/css/jquery.fancybox.min.css HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://multiresolvedevpad.firebaseapp.com/asset/css/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/css/font-awesome.css HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://multiresolvedevpad.firebaseapp.com/asset/css/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/css/swiper-bundle.min.css HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://multiresolvedevpad.firebaseapp.com/asset/css/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/css/bootstrap.css HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://multiresolvedevpad.firebaseapp.com/asset/css/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/images/backgroup-secsion/bg-gradient1.html HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://multiresolvedevpad.firebaseapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/js/jquery.min.js HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/images/backgroup-secsion/bg-gradient2.html HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://multiresolvedevpad.firebaseapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/images/backgroup-secsion/bg-gradient3.html HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://multiresolvedevpad.firebaseapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/js/jquery.easing.js HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://multiresolvedevpad.firebaseapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/js/bootstrap.min.js HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://multiresolvedevpad.firebaseapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/images/backgroup-secsion/bg-gradient1.html HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/font/nfts.ttf HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://multiresolvedevpad.firebaseapp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://multiresolvedevpad.firebaseapp.com/asset/css/ntfs.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/images/backgroup-secsion/bg-gradient2.html HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/font/fa-brands-401.html HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://multiresolvedevpad.firebaseapp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://multiresolvedevpad.firebaseapp.com/asset/css/font-awesome.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/font/fa-solid-901.html HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://multiresolvedevpad.firebaseapp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://multiresolvedevpad.firebaseapp.com/asset/css/font-awesome.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/images/backgroup-secsion/bg-gradient3.html HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/images/backgroup-secsion/img_bg_page_title.html HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://multiresolvedevpad.firebaseapp.com/asset/css/shortcodes.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/js/jquery.easing.js HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/font/fa-brands-402.html HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://multiresolvedevpad.firebaseapp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://multiresolvedevpad.firebaseapp.com/asset/css/font-awesome.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/font/fa-solid-902.html HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://multiresolvedevpad.firebaseapp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://multiresolvedevpad.firebaseapp.com/asset/css/font-awesome.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/icon/preload.html HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://multiresolvedevpad.firebaseapp.com/asset/css/shortcodes.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/font/fa-brands-403.html HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://multiresolvedevpad.firebaseapp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://multiresolvedevpad.firebaseapp.com/asset/css/font-awesome.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/js/wow.min.js HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://multiresolvedevpad.firebaseapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/js/bootstrap.min.js HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/images/backgroup-secsion/img_bg_page_title.html HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/js/plugin.js HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://multiresolvedevpad.firebaseapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/font/fa-solid-903.html HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://multiresolvedevpad.firebaseapp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://multiresolvedevpad.firebaseapp.com/asset/css/font-awesome.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/icon/preload.html HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/js/shortcodes.js HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://multiresolvedevpad.firebaseapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/js/main.js HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://multiresolvedevpad.firebaseapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/images/backgroup-secsion/validated.html HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://multiresolvedevpad.firebaseapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/js/count-down.js HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://multiresolvedevpad.firebaseapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/js/wow.min.js HTTP/1.1Host: multiresolvedevpad.firebaseapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
172.64.147.188	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.156.39	keyring.app	United States	13335	CLOUDFLARENETUS	false
188.226.251.49	walletscrutiny.com	European Union	14061	DIGITALOCEAN-ASNUS	false
104.18.3.36	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.187.31	cdn.jsdelivr.net.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
172.217.16.214	unknown	United States	15169	GOOGLEUS	false
104.18.40.47	58253638-files.gitbook.io	United States	13335	CLOUDFLARENETUS	false
146.75.120.159	dualstack.twimg.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
104.18.40.68	kit.fontawesome.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
13.32.99.69	d2veqsckdanvln.cloudfront.net	United States	16509	AMAZON-02US	false
104.21.80.1	bitcoin-trading.io	United States	13335	CLOUDFLARENETUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
162.159.153.4	miro.medium.com	United States	13335	CLOUDFLARENETUS	false
162.159.152.4	unknown	United States	13335	CLOUDFLARENETUS	false
185.199.109.133	avatars.githubusercontent.com	Netherlands	54113	FASTLYUS	false
52.217.237.1	unknown	United States	16509	AMAZON-02US	false
172.64.147.209	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.188.157	cryptologos.cc	United States	13335	CLOUDFLARENETUS	false
104.21.26.223	ka-f.fontawesome.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
151.101.1.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
52.217.101.236	s3-w.us-east-1.amazonaws.com	United States	16509	AMAZON-02US	false
104.18.2.36	imagedelivery.net	United States	13335	CLOUDFLARENETUS	false
104.21.92.70	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.139.119	unknown	United States	13335	CLOUDFLARENETUS	false
47.246.46.210	oss-us-cdn.maiziqianbao.net.a.lahuashanbx.com	United States	24429	TAOBAOZhejiangTaobaoNetworkCoLtdCN	false
13.32.99.13	unknown	United States	16509	AMAZON-02US	false
199.36.158.100	multiresolvedevpad.firebaseapp.com	United States	15169	GOOGLEUS	false
91.134.10.127	unknown	France	16276	OVHFR	false
184.169.209.62	ethereum-magicians.org	United States	16509	AMAZON-02US	false
91.134.9.160	i.ibb.co	France	16276	OVHFR	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.245.62.182	dvh1deh6tagwk.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.186.86	play-lh.googleusercontent.com	United States	15169	GOOGLEUS	false
18.245.62.184	unknown	United States	16509	AMAZON-02US	false

IP
192.168.2.4
192.168.2.5

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1604805
Start date and time:	2025-02-02 00:44:53 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://multiresolvedevpad.firebaseapp.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@16/433@89/37
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Name	Malicious	Antivirus Detection	Reputation
https://multiresolvedevpad.firebaseapp.com/walletpage/images/crypto.png	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/walletpage/images/wallet.io.png	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/asset/js/jquery.min.js	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/asset/font/fa-brands-401.html	false	Avira URL Cloud: phishing	unknown
https://ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-brands-400.woff2	false		high
https://multiresolvedevpad.firebaseapp.com/walletpage/images/pocketfi%20wallet.jpeg	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/walletpage/images/Binance.png	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/walletpage/images/midas.png	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/walletpage/images/mathwallet.jpeg	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/walletpage/walletpage.html	true		unknown
https://ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=78d167673c	false		high
https://multiresolvedevpad.firebaseapp.com/walletpage/wallet/bootstrap.min.css	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/asset/images/backgroup-secsion/validated.html	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/walletpage/images/tokenary.png	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/asset/js/wow.min.js	false	Avira URL Cloud: phishing	unknown
https://keyring.app/wp-content/uploads/2021/11/LOGO-KEYRING-PRO-2.png	false	Avira URL Cloud: safe	unknown
https://multiresolvedevpad.firebaseapp.com/walletpage/images/alpha.jpeg	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/walletpage/assets/samurai.jpeg	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/walletpage/images/bitkeep.jpeg	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/walletpage/images/rainbow.jpeg	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/asset/font/fa-solid-902.html	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/walletpage/images/infinito.png	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/walletpage/images/coin98.jpg	false	Avira URL Cloud: phishing	unknown
https://oss-us-cdn.maiziqianbao.net/Chain_logo/W51673860963.jpg	false	Avira URL Cloud: safe	unknown
https://multiresolvedevpad.firebaseapp.com/walletpage/style/walletpage.css	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/asset/icon/preload.html	false	Avira URL Cloud: phishing	unknown
https://imagedelivery.net/_aTEfDRm7z3tKgu9JhfeKA/2972bbf8-0891-414a-f63c-8d3bcf661d00/lg	false		high
https://multiresolvedevpad.firebaseapp.com/walletpage/images/alice.png	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/asset/js/count-down.js	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/walletpage/images/ontology.jpeg	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/asset/css/animate.css	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/walletpage/images/authereum.png	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/asset/css/jquery.fancybox.min.css	false	Avira URL Cloud: phishing	unknown
https://multiresolvedevpad.firebaseapp.com/walletpage/images/dcent.png	false	Avira URL Cloud: phishing	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mozilla/rhino/issues/346	chromecache_152.2.dr, chromecache_298.2.dr	false		high
https://tc39.es/ecma262/#sec-object.prototype.tostring	chromecache_152.2.dr, chromecache_298.2.dr	false		high
https://tc39.es/ecma262/#sec-arrayspeciescreate	chromecache_152.2.dr, chromecache_298.2.dr	false		high
https://speedy-nodes-nyc.moralis.io/WalletConnect/fantom/mainnet	chromecache_152.2.dr, chromecache_298.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-tointeger	chromecache_152.2.dr, chromecache_298.2.dr	false	Avira URL Cloud: safe	unknown
https://docs.parseplatform.org/js/guide/#linking-users	chromecache_152.2.dr, chromecache_298.2.dr	false	Avira URL Cloud: safe	unknown
https://ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-brands-400.woff)	chromecache_142.2.dr	false		high
https://github.com/thumbsupep/proposal-upsert	chromecache_152.2.dr, chromecache_298.2.dr	false		high
https://swiperjs.com	chromecache_185.2.dr, chromecache_210.2.dr, chromecache_214.2.dr	false		high
https://ethereum-magicians.org/uploads/default/original/1X/e726391f66eb7da7a0ed7d780b4df5e8e2416a17.	chromecache_142.2.dr	false	Avira URL Cloud: safe	unknown
https://formsubmit.co/ajax/spifffaya19	chromecache_142.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_261.2.dr, chromecache_377.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_372.2.dr, chromecache_111.2.dr, chromecache_374.2.dr, chromecache_320.2.dr	false		high
https://tc39.es/ecma262/#sec-function.prototype.bind	chromecache_152.2.dr, chromecache_298.2.dr	false	Avira URL Cloud: safe	unknown
https://ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-v4deprecations.woff2)	chromecache_142.2.dr	false		high
https://github.com/es-shims/es5-shim/issues/150	chromecache_152.2.dr, chromecache_298.2.dr	false		high
https://tc39.es/ecma262/#sec-symbol.match	chromecache_152.2.dr, chromecache_298.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.values	chromecache_152.2.dr, chromecache_298.2.dr	false		high
https://tc39.es/ecma262/#sec-symbol.iterator	chromecache_152.2.dr, chromecache_298.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/tc39/proposal-observable	chromecache_152.2.dr, chromecache_298.2.dr	false		high
https://tc39.es/ecma262/#sec-parseint-string-radix	chromecache_152.2.dr, chromecache_298.2.dr	false		high
https://tc39.es/ecma262/#sec-string.prototype.includes	chromecache_152.2.dr, chromecache_298.2.dr	false		high
https://tc39.es/ecma262/#sec-array.prototype.map	chromecache_298.2.dr	false		high
https://tc39.es/ecma262/#sec-array.prototype-	chromecache_298.2.dr	false		high
https://ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.ttf)	chromecache_142.2.dr	false		high
https://tc39.es/ecma262/#sec-array.prototype.reduceright	chromecache_152.2.dr, chromecache_298.2.dr	false	Avira URL Cloud: safe	unknown
http://www.ianlunn.co.uk/plugins/jquery-parallax/	chromecache_261.2.dr, chromecache_377.2.dr	false	Avira URL Cloud: safe	unknown
https://58253638-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/spaces%2F-MCCsloxVgbn9ByBE-nP%	chromecache_142.2.dr	false	Avira URL Cloud: safe	unknown
https://gateway.elrond.com	chromecache_152.2.dr, chromecache_298.2.dr	false	Avira URL Cloud: safe	unknown
https://speedy-nodes-nyc.moralis.io/WalletConnect/eth/kovan	chromecache_152.2.dr, chromecache_298.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.foreach	chromecache_298.2.dr	false		high
https://tc39.es/ecma262/#sec-string.prototype.trimstart	chromecache_152.2.dr, chromecache_298.2.dr	false		high
https://tc39.es/ecma262/#sec-symbol.for	chromecache_152.2.dr, chromecache_298.2.dr	false	Avira URL Cloud: safe	unknown
https://speedy-nodes-nyc.moralis.io/WalletConnect/eth/goerli	chromecache_152.2.dr, chromecache_298.2.dr	false	Avira URL Cloud: safe	unknown
https://ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-regular-400.woff2)	chromecache_142.2.dr	false		high
https://tc39.es/ecma262/#sec-createunmappedargumentsobject	chromecache_152.2.dr, chromecache_298.2.dr	false		high
https://code.google.com/p/v8/issues/detail?id=687	chromecache_152.2.dr, chromecache_298.2.dr	false		high
https://dev-apygate.online/font/fa-light-300.html	chromecache_337.2.dr	false	Avira URL Cloud: safe	unknown
http://url.spec.whatwg.org/#urlutils	chromecache_152.2.dr, chromecache_298.2.dr	false		high
https://fontawesome.com/license/free	chromecache_162.2.dr, chromecache_212.2.dr, chromecache_142.2.dr, chromecache_300.2.dr, chromecache_266.2.dr, chromecache_176.2.dr, chromecache_225.2.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=200829	chromecache_152.2.dr, chromecache_298.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-symbol.asynciterator	chromecache_152.2.dr, chromecache_298.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-promise.prototype.finally	chromecache_152.2.dr, chromecache_298.2.dr	false	Avira URL Cloud: safe	unknown
http://daneden.me/animate	chromecache_211.2.dr, chromecache_186.2.dr	false		high
https://tc39.es/ecma262/#sec-map-objects	chromecache_152.2.dr, chromecache_298.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-object.keys	chromecache_152.2.dr, chromecache_298.2.dr	false		high
https://tc39.es/ecma262/#sec-array.prototype.entries	chromecache_152.2.dr, chromecache_298.2.dr	false		high
https://html.spec.whatwg.org/multipage/timers-and-user-prompts.html#dom-setinterval	chromecache_152.2.dr, chromecache_298.2.dr	false		high
https://tc39.es/ecma262/#sec-json-	chromecache_152.2.dr, chromecache_298.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-symbol.unscopables	chromecache_152.2.dr, chromecache_298.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.every	chromecache_298.2.dr	false		high
https://tc39.es/ecma262/#sec-toprimitive	chromecache_152.2.dr, chromecache_298.2.dr	false		high
https://tc39.es/ecma262/#sec-symbol.tostringtag	chromecache_152.2.dr, chromecache_298.2.dr	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com/)	chromecache_372.2.dr, chromecache_380.2.dr, chromecache_111.2.dr, chromecache_374.2.dr, chromecache_320.2.dr, chromecache_256.2.dr	false		high
http://gsgd.co.uk/sandbox/jquery/easing/	chromecache_218.2.dr, chromecache_261.2.dr, chromecache_113.2.dr, chromecache_377.2.dr	false		high
https://bugs.chromium.org/p/v8/issues/detail?id=3175#c4	chromecache_152.2.dr, chromecache_298.2.dr	false		high
https://tc39.es/ecma262/#sec-object.getownpropertynames	chromecache_298.2.dr	false		high
https://tc39.es/ecma262/#sec-object.create	chromecache_298.2.dr	false		high
https://tc39.es/ecma262/#sec-isarray	chromecache_152.2.dr, chromecache_298.2.dr	false		high
https://ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-v4deprecations.woff)	chromecache_142.2.dr	false		high
https://ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.eot);	chromecache_142.2.dr	false		high
https://tc39.es/ecma262/#sec-symbol.split	chromecache_152.2.dr, chromecache_298.2.dr	false	Avira URL Cloud: safe	unknown
https://ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-brands-400.svg#fontawesome)	chromecache_142.2.dr	false		high
https://tc39.es/ecma262/#sec-array.prototype.includes	chromecache_298.2.dr	false		high
https://tc39.es/ecma262/#sec-object.setprototypeof	chromecache_152.2.dr, chromecache_298.2.dr	false		high
https://tc39.es/ecma262/#sec-string.prototype.trim	chromecache_152.2.dr, chromecache_298.2.dr	false		high

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8385), with CRLF line terminators
Category:	downloaded
Size (bytes):	8418
Entropy (8bit):	5.107797581372829
Encrypted:	false
SSDEEP:	96:DrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqb8:Dry9PVfIFrlAJROVEEdos+eatzHILo9
MD5:	26C59121499FC81E65176E9C82771D7E
SHA1:	A4279F01EE8D4BFB52CD5B020800F8818C920830
SHA-256:	68B19DF39D933CFB185659A2B4CB7DF7FD69C638DE68C2E70F219758143209D8
SHA-512:	EC94F7F2ECA03B59F80474EFB91435277BF0491ADFEB481CEA62CAC90C86B80223FC5C7EEE653E6855A33E12845AB4ABAB5426F29C84E2A1E5F005330EF3C7C1
Malicious:	false
Reputation:	low
URL:	https://multiresolvedevpad.firebaseapp.com/walletpage/script/wow/wow.min.js
Preview:	/! WOW - v1.1.3 - 2016-05-06.. Copyright (c) 2016 Matthieu Aussaguel;*/(function(){var a,b,c,d,e,f=function(a,b){return function(){return a.apply(b,arguments)}},g=[].indexOf\|\|function(a){for(var b=0,c=this.length;c>b;b++)if(b in this&&this[b]===a)return b;return-1};b=function(){function a(){}return a.prototype.extend=function(a,b){var c,d;for(c in b)d=b[c],null==a[c]&&(a[c]=d);return a},a.prototype.isMobile=function(a){return/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(a)},a.prototype.createEvent=function(a,b,c,d){var e;return null==b&&(b=!1),null==c&&(c=!1),null==d&&(d=null),null!=document.createEvent?(e=document.createEvent("CustomEvent"),e.initCustomEvent(a,b,c,d)):null!=document.createEventObject?(e=document.createEventObject(),e.eventType=a):e.eventName=a,e},a.prototype.emitEvent=function(a,b){return null!=a.dispatchEvent?a.dispatchEvent(b):b in(null!=a)?a[b]():"on"+b in(null!=a)?a["on"+b]():void 0},a.prototype.addEvent=function(a,b,c){return null!=a.add

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://multiresolvedevpad.firebaseapp.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Windows Analysis Report
https://multiresolvedevpad.firebaseapp.com/