Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Chrome Cache Entry: 64
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 65
|
ASCII text
|
dropped
|
||
|
Chrome Cache Entry: 66
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 67
|
PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 68
|
ASCII text, with very long lines (25572), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 69
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 70
|
ASCII text, with very long lines (32077)
|
dropped
|
||
|
Chrome Cache Entry: 71
|
PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 72
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 73
|
exported SGML document, ASCII text, with very long lines (54037), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 74
|
JSON data
|
dropped
|
||
|
Chrome Cache Entry: 75
|
PNG image data, 130 x 40, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 76
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 77
|
PNG image data, 32 x 33, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 78
|
PNG image data, 130 x 40, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 79
|
PNG image data, 32 x 33, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 80
|
ASCII text, with very long lines (25572), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 81
|
exported SGML document, ASCII text, with very long lines (54037), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 82
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 83
|
Web Open Font Format (Version 2), TrueType, length 30181, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 84
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 85
|
ASCII text, with very long lines (32077)
|
downloaded
|
||
|
Chrome Cache Entry: 86
|
Web Open Font Format (Version 2), TrueType, length 31429, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 87
|
ASCII text, with very long lines (65536), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 88
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 89
|
ASCII text, with very long lines (65288)
|
downloaded
|
||
|
Chrome Cache Entry: 90
|
ASCII text, with very long lines (3922), with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 91
|
ASCII text, with very long lines (3922), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 92
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 93
|
PNG image data, 16 x 17, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 94
|
PNG image data, 16 x 17, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 95
|
ASCII text, with very long lines (65288)
|
dropped
|
There are 23 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=2008,i,17722577437020892909,13340447660738643618,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ortto.app/-/a/fleetparq/ZwJnC-deAI5UvWjbKvQgz785Bg51rUnwXpqSgA?rg=eu"
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://ortto.app/-/a/fleetparq/ZwJnC-deAI5UvWjbKvQgz785Bg51rUnwXpqSgA?rg=eu
|
|||
|
https://cdnjs.cloudflare.com/polyfill/v3/polyfill.min.js?version=3.111.0&features=Array.prototype.flat%2CArray.prototype.flatMap%2CIntersectionObserver%2CIntl.PluralRules%2CIntl.PluralRules.~locale.en%2CResizeObserver%2CURLSearchParams%2CObject.fromEntries
|
104.17.25.14
|
||
|
https://s.ortto-prod.com/asset-manager/master/v1407/dist/1.bundle.js
|
13.224.189.65
|
||
|
https://s.ortto-prod.com/error.png
|
13.224.189.65
|
||
|
http://www.apache.org/licenses/LICENSE-2.0
|
unknown
|
||
|
https://s.ortto-prod.com/asset-manager/master/v1407/dist/NeueHaasGrotTextRound-55Roman-Web.cd2e66fdee191ad57ad1f40b6c151abb.woff2
|
13.224.189.65
|
||
|
https://s.ortto-prod.com/asset-manager/master/v1407/dist/
|
unknown
|
||
|
https://s.ortto-prod.com/favicon/favicon-32x32.png
|
13.224.189.65
|
||
|
https://evilmartians.com/chronicles/postcss-8-plugin-migration
|
unknown
|
||
|
https://assets-api-eu.ortto.app/-/assets/shared/get?r=0.265703340259259
|
18.153.165.95
|
||
|
https://www.w3ctech.com/topic/2226
|
unknown
|
||
|
https://s.ortto-prod.com/asset-manager/master/v1407/dist/vendors~asset-manager-modals.bundle.js
|
13.224.189.65
|
||
|
https://s.ortto-prod.com/ortto-logo.png
|
13.224.189.65
|
||
|
https://s.ortto-prod.com/asset-manager/master/v1407/dist/vendor.bundle.js
|
13.224.189.65
|
||
|
https://s.ortto-prod.com/asset-manager/master/v1407/dist/NeueHaasGrotTextRound-75Bold-Web.95b4c95f18f032429e5952e0c9fad413.woff2
|
13.224.189.65
|
||
|
https://help.ortto.com/user/latest/profile-accounts-and-plans/managing-data-retention.html#youve-rea
|
unknown
|
||
|
https://s.ortto-prod.com/asset-manager/master/v1407/dist/polyfill.bundle.js
|
13.224.189.65
|
||
|
https://s.ortto-prod.com/asset-manager/master/v1407/dist/2.bundle.js
|
13.224.189.65
|
||
|
https://s.ortto-prod.com/favicon/favicon-16x16.png
|
13.224.189.65
|
||
|
https://feross.org/opensource
|
unknown
|
||
|
https://code.jquery.com/jquery-1.12.4.min.js
|
151.101.194.137
|
||
|
https://t.ortto.com/-/widgets/get
|
3.136.207.21
|
||
|
https://github.com/jonschlinkert/is-plain-object
|
unknown
|
||
|
https://cdnjs.cloudflare.com/polyfill/v3/polyfill.min.js?version=3.111.0&features=
|
unknown
|
||
|
https://s.ortto-prod.com/asset-manager/master/v1407/dist/asset-manager-modals.bundle.js
|
13.224.189.65
|
||
|
https://t.ortto.com/app.js
|
3.136.207.21
|
||
|
https://help.ortto.com/user/latest/campaigns/managing/#preview-text
|
unknown
|
||
|
http://feross.org
|
unknown
|
||
|
https://s.ortto-prod.com/asset-manager/master/v1407/dist/autopilot.bundle.js
|
13.224.189.65
|
||
|
https://t.ortto.com/-/events/page-event
|
3.136.207.21
|
There are 19 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
bg.microsoft.map.fastly.net
|
199.232.214.172
|
||
|
s.ortto-prod.com
|
13.224.189.65
|
||
|
code.jquery.com
|
151.101.194.137
|
||
|
ortto.app
|
18.244.18.6
|
||
|
cdnjs.cloudflare.com
|
104.17.25.14
|
||
|
s-part-0017.t-0009.t-msedge.net
|
13.107.246.45
|
||
|
www.google.com
|
142.250.186.132
|
||
|
assets-api-eu.ortto.app
|
18.153.165.95
|
||
|
3831746129.cld73.com
|
3.136.207.21
|
||
|
fp2e7a.wpc.phicdn.net
|
192.229.221.95
|
||
|
s-part-0032.t-0009.t-msedge.net
|
13.107.246.60
|
||
|
t.ortto.com
|
unknown
|
There are 2 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
18.153.165.95
|
assets-api-eu.ortto.app
|
United States
|
||
|
192.168.2.4
|
unknown
|
unknown
|
||
|
13.224.189.56
|
unknown
|
United States
|
||
|
13.224.189.65
|
s.ortto-prod.com
|
United States
|
||
|
18.244.18.6
|
ortto.app
|
United States
|
||
|
3.136.207.21
|
3831746129.cld73.com
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
151.101.66.137
|
unknown
|
United States
|
||
|
142.250.186.132
|
www.google.com
|
United States
|
||
|
151.101.194.137
|
code.jquery.com
|
United States
|
||
|
104.17.25.14
|
cdnjs.cloudflare.com
|
United States
|
There are 1 hidden IPs, click here to show them.
DOM / HTML
|
URL
|
Malicious
|
|
|---|---|---|
|
https://ortto.app/-/a/fleetparq/ZwJnC-deAI5UvWjbKvQgz785Bg51rUnwXpqSgA?rg=eu
|