Report Overview

  1. Visited public
    2024-12-17 22:56:12
    Tags
  2. URL

    toolslib.net/downloads/finish/1-adwcleaner/1004/get/aB5LYC0e2Bsu1pbKKWw72lbiH8CBB1pu/adwcleaner_7.0.0.0.exe

  3. Finishing URL

    toolslib.net/downloads/finish/1-adwcleaner/next

  4. IP / ASN
    104.21.32.1

    #13335 CLOUDFLARENET

    Title
    Want to discover other projects? - AdwCleaner - ToolsLib
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
toolslib.net4650692014-05-062014-05-162024-12-17
privacy.gatekeeperconsent.comunknown2023-03-072023-03-142024-12-12
bshr.ezodn.comunknown2020-04-222023-05-102024-12-12
static.cloudflareinsights.com12942019-08-302019-09-242024-12-11
go.ezodn.com83802020-04-222020-04-242024-12-12
download.toolslib.net4941232014-05-062017-10-102023-10-27
g.ezodn.com579192020-04-222020-05-192024-12-14
content.toolslib.netunknown2014-05-062017-10-122024-12-17
the.gatekeeperconsent.comunknown2023-03-072023-03-102024-12-12

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumdownload.toolslib.net/download/file/1/1004?s=C65yzIslorWql3gSNaL698Uj5YuRvxa8Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen

OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    download.toolslib.net/download/file/1/1004?s=C65yzIslorWql3gSNaL698Uj5YuRvxa8

  2. IP

    104.21.48.1

  3. ASN

    #13335 CLOUDFLARENET

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows, 6 sections

    Size

    8.2 MB (8162248 bytes)

  2. Hash

    c651234ae25e4843105cbc50fe2ba124

    731449cf4bf201f6fc15d5b77e3ce8105923a4b0

    Detections

    AnalyzerVerdictAlert
    YARAhub by abuse.chmalware
    Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen

JavaScript (64)

HTTP Transactions (77)

URLIPResponseSize
toolslib.net/assets/custom/fonts/OpenSans-Light-webfont.woff
104.21.48.1200 OK22 kB
toolslib.net/assets/custom/fonts/OpenSans-Semibold-webfont.woff
104.21.48.1200 OK23 kB
toolslib.net/assets/custom/fonts/OpenSans-Regular-webfont.woff
104.21.48.1200 OK23 kB
toolslib.net/assets/custom/img/patterns/lighter_bg.webp
104.21.48.1200 OK23 kB
toolslib.net/assets/custom/fonts/OpenSans-Bold-webfont.woff
104.21.48.1200 OK31 kB
toolslib.net/assets/old-vendor/bootstrap/dist/fonts/glyphicons-halflings-regular.woff2
104.21.48.1200 OK30 kB
download.toolslib.net/download/file/1/1004?s=C65yzIslorWql3gSNaL698Uj5YuRvxa8
104.21.48.1200 OK8.2 MB
toolslib.net/cdn-cgi/rum?
104.21.48.1204 No Content0 B
g.ezodn.com/cmp/v2/v.js?v=4
104.21.87.79200 OK1.3 kB
toolslib.net/downloads/finish/1-adwcleaner/next
104.21.48.1200 OK25 kB
content.toolslib.net/content/img/1-logos/800b8885-0975-5d30-abac-281984be1eb1.png?s=89c96fa78a66001a3eb1151d13b8ed62
104.21.48.1200 OK24 kB
toolslib.net/assets/custom/fonts/OpenSans-Light-webfont.woff
104.21.48.1200 OK41 kB
privacy.gatekeeperconsent.com/tcf2_stub.js
172.67.199.186200 OK3.8 kB
toolslib.net/assets/custom/fonts/OpenSans-Bold-webfont.woff
104.21.48.1200 OK38 kB
toolslib.net/assets/custom/img/patterns/lighter_bg.webp
104.21.48.1200 OK21 kB
toolslib.net/detroitchicago/raleigh.js?gcb=195-0&cb=8
104.21.48.1200 OK2.8 kB
toolslib.net/detroitchicago/augusta.js?cb=49
104.21.48.1200 OK2.6 kB
toolslib.net/assets/old-vendor/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
104.21.48.1200 OK77 kB
content.toolslib.net/content/img/1-logos/2482fdba-d1b3-5741-8991-aaa98f7e0a3f.png?s=7eaf1330ddbd2e0bbc5ebb43b4483edb
104.21.48.1200 OK6.2 kB
bshr.ezodn.com/?bf=30000&dc=23058280356%7C1254144
172.67.142.121200 OK9.1 kB
toolslib.net/assets/cache/886e06e.js?1710701773
104.21.48.1200 OK160 kB
toolslib.net/tardisrocinante/vitals.js?gcb=0&cb=5
104.21.48.1200 OK11 kB
toolslib.net/detroitchicago/greenoaks.gif?orig=0&ds=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
104.21.48.1204 No Content0 B
the.gatekeeperconsent.com/v2/config.json?domain=toolslib.net&changeLogId=604462&cb=295
172.67.199.186200 OK17 kB
toolslib.net/detroitchicago/tuscon.js?gcb=0&cb=14
104.21.48.1200 OK7.0 kB
the.gatekeeperconsent.com/v2/cmp.js?v=295
172.67.199.186200 OK154 kB
the.gatekeeperconsent.com/cmp/gvl.json?v=9&lang=en
172.67.199.186200 OK658 kB
go.ezodn.com/hb/dall.js?cb=195-0-111
104.21.87.79200 OK725 kB
toolslib.net/detroitchicago/boise.js?gcb=195-0&cb=5
104.21.48.1200 OK824 B
toolslib.net/detroitchicago/reportads.js?gcb=195-0&cb=5
104.21.48.1200 OK5.1 kB
toolslib.net/assets/custom/img/toolslib.png
104.21.48.1200 OK1.7 kB
toolslib.net/assets/cache/5273102.css?1730644844
104.21.48.1200 OK168 kB
content.toolslib.net/content/img/1-logos/2383a444-1544-5a07-956d-b79d9a010395.png?s=90457c0c6eab28f73a7e389f698b67a6
104.21.48.1200 OK12 kB
toolslib.net/porpoiseant/et.js?gcb=195-0&cb=3
104.21.48.1200 OK1.5 kB
toolslib.net/beardeddragon/drake.js?gcb=0&cb=67bf6a5e9d
104.21.48.1200 OK4.3 kB
toolslib.net/edmontonalberta/calgary.js?cb=ffddf23fe8
104.21.48.1200 OK5.3 kB
content.toolslib.net/content/img/1-logos/f02e3331-1824-5ec3-aeab-8fb0c1e0442b.png?s=993890aceb16f6c5eacc7f4cadc5023a
104.21.48.1200 OK2.1 kB
go.ezodn.com/detroitchicago/indy.js?cb=19&gcb=0
172.67.142.121200 OK144 kB
toolslib.net/assets/old-vendor/jquery-timeago/locales/jquery.timeago.en.js
104.21.48.1200 OK778 B
bshr.ezodn.com/?bf=30000&dc=23058280356%7C1254144
172.67.142.121200 OK0 B
toolslib.net/detroitchicago/kenai.js?gcb=0&cb=ab267b8ef5
104.21.48.1200 OK7.1 kB
content.toolslib.net/content/img/1-logos/c78e0ed1-fc15-5d3b-8f89-271cbaf89a92.png?s=2f794c7b22004ff81b6a0b48947c330a
104.21.48.1200 OK15 kB
toolslib.net/detroitchicago/overlandpark.js?gcb=195-0&cb=ca5e4c8a46
104.21.48.1200 OK986 B
toolslib.net/parsonsmaize/mulvane.js?gcb=195-0&cb=c630b8b861
104.21.48.1200 OK1.0 kB
toolslib.net/porpoiseant/jellyfish.js?a=a&cb=17&dcb=195-0&shcb=34
104.21.48.1200 OK38 kB
toolslib.net/porpoiseant/nmash.js?bv=431
104.21.48.1200 OK66 kB
toolslib.net/detroitchicago/reno.js?gcb=195-0&cb=3
104.21.48.1200 OK1.4 kB
go.ezodn.com/detroitchicago/audins.js?cb=3
172.67.142.121200 OK516 B
static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
104.16.80.73200 OK20 kB
toolslib.net/assets/custom/img/flags16.png
104.21.48.1200 OK24 kB
content.toolslib.net/content/img/1-logos/0e4622aa-ee29-5978-9ef5-57f7f5d51540.png?s=700422ef8607558f523701d702639489
104.21.48.1200 OK1.9 kB
the.gatekeeperconsent.com/cmp/v2/main_modal_firstpage?domain=toolslib.net&region=default&lang=en-US&cb=295&changeLogId=604462
172.67.199.186200 OK0 B
toolslib.net/ezais/analytics?cb=1
104.21.48.1200 OK7.6 kB
toolslib.net/detroitchicago/wichita.js?gcb=195-0&cb=9f9286e31b
104.21.48.1200 OK2.3 kB
toolslib.net/parsonsmaize/olathe.js?gcb=195-0&cb=26
104.21.48.1200 OK2.2 kB
toolslib.net/ezoic/anchorfix.js?cb=27
104.21.48.1200 OK1.5 kB
go.ezodn.com/porpoiseant/ezadloadamzn.js?gcb=195-0&cb=489
172.67.142.121200 OK1.4 kB
content.toolslib.net/content/img/1-logos/82e19b19-c528-5910-9017-88cc481ae7c7.png?s=04076c85b3208b0f47938eda74e640f8
104.21.48.1200 OK7.9 kB
toolslib.net/parsonsmaize/chanute.js?a=a&cb=15&dcb=195-0&shcb=34
104.21.48.1200 OK20 kB
toolslib.net/detroitchicago/imp.gif
104.21.48.1200 OK43 B
go.ezodn.com/porpoiseant/ezadloadhb.js?gcb=195-0&cb=489
172.67.142.121200 OK25 kB
toolslib.net/detroitchicago/vista.js?gcb=195-0&cb=296945a885
104.21.48.1200 OK705 B
go.ezodn.com/utilcave_com/ezoicbwa.png
172.67.142.121200 OK1.3 kB
go.ezodn.com/utilcave_com/ezoic.png
172.67.142.121200 OK1.4 kB
toolslib.net/parsonsmaize/abilene.js?gcb=195-0&cb=0db397a922
104.21.48.1200 OK11 kB
content.toolslib.net/content/img/1-logos/6b0ebb7a-9979-55cc-8625-5c3da224d93c.png?s=60be450cd2c1250ddcbdf5d5d20a7b2a
104.21.48.1200 OK7.9 kB
toolslib.net/detroitchicago/kenai.js?gcb=0&cb=ab267b8ef5
104.21.48.1200 OK7.1 kB
toolslib.net/detroitchicago/sidebarwall.js?gcb=0&cb=22
104.21.48.1200 OK9.0 kB
toolslib.net/detroitchicago/portland.js?gcb=0&cb=26d81a39bd
104.21.48.1200 OK64 kB
content.toolslib.net/content/img/1-logos/3fa2bf2b-ed8e-5fe2-98f2-b5a86a71d217.gif?s=830a6c579c71bb61ba54d7e8f5bfb736
104.21.48.1200 OK737 B
toolslib.net/assets/custom/img/favicon.png
104.21.48.1200 OK6.1 kB
the.gatekeeperconsent.com/cmp/v2/main_modal_firstpage?domain=toolslib.net&region=default&lang=en-US&cb=295&changeLogId=604462
172.67.199.186200 OK22 kB
toolslib.net/porpoiseant/banger.js?cb=195-0&bv=431&PageSpeed=off
104.21.48.1200 OK57 kB
toolslib.net/ezais/dynamic?cb=1
104.21.48.1200 OK88 kB
toolslib.net/assets/cache/df499a3.css?1730644845
104.21.48.1200 OK40 kB
toolslib.net/assets/custom/img/apple_touch_icon.png
104.21.48.1200 OK12 kB
toolslib.net/detroitchicago/birmingham.js?gcb=195-0&cb=539c47377c
104.21.48.1200 OK752 B