Report - rossware.net/FontInstaller.zip

Report Overview

Visited public
2025-04-15 13:23:42
Tags
URL
rossware.net/FontInstaller.zip
Finishing URL
about:privatebrowsing
IP / ASN
52.26.197.232
#16509 AMAZON-02
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
rossware.net	unknown	2000-06-02	2014-08-14	2025-04-13	498 B	1.4 MB	54.203.186.90

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
rossware.net/FontInstaller.zip
IP
54.203.186.90
ASN
#16509 AMAZON-02

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.4 MB (1403435 bytes)
Hash
2d32e7c57705254ffbe240ccc4857ffa
241e493fcd4be159614af8afd694ba59afb64742
e6935f9fee714bfdc545d4243d5bb25b301ba7f73c81d58237eda6e611eccde8

Archive (3)

Filename

Md5

File type

setup.exe

a77a5e80020273ff0f6eea3990c76cb6

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

SETUP.LST

f8d0019673a6a2fc8d285970162260ec

Generic INItialization configuration [Bootstrap Files]

FontInstaller.CAB

1a63314824b0499641a8449ba524dba9

Microsoft Cabinet archive data, many, 1343658 bytes, 11 files, at 0x1830 last modified Sun, Jan 01 2009 15:51:22 +A "FontInstaller.exe" last modified Sun, Apr 13 2008 16:12:00 +A "msvbvm60.dll", flags 0x4, ID 11941, number 1, extra bytes 6144 in head, 85 datablocks, 0x1 compression

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	rossware.net/FontInstaller.zip	54.203.186.90	200 OK	1.4 MB
URL User Request GET rossware.net/FontInstaller.zip IP 54.203.186.90:443 ASN #16509 AMAZON-02 Certificate IssuerAmazon Subjectrossware.net Fingerprint89:EE:B3:53:45:A9:A5:6B:87:BB:DD:86:B8:7A:EA:93:96:93:FC:32 ValiditySun, 26 Jan 2025 00:00:00 GMT - Tue, 24 Feb 2026 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 1.4 MB (1403435 bytes) Hash 2d32e7c57705254ffbe240ccc4857ffa 241e493fcd4be159614af8afd694ba59afb64742 e6935f9fee714bfdc545d4243d5bb25b301ba7f73c81d58237eda6e611eccde8 HTTP Headers `GET /FontInstaller.zip HTTP/1.1 Host: rossware.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Tue, 15 Apr 2025 13:23:20 GMT content-type: application/zip content-length: 1403435 server: Apache/2.4.58 (Amazon Linux) last-modified: Mon, 11 Mar 2024 16:37:28 GMT etag: "156a2b-61365283d6200" accept-ranges: bytes X-Firefox-Spdy: h2`

rossware.net/FontInstaller.zip

54.203.186.90

200 OK

1.4 MB

URL User Request GET
rossware.net/FontInstaller.zip
IP
54.203.186.90:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subjectrossware.net
Fingerprint89:EE:B3:53:45:A9:A5:6B:87:BB:DD:86:B8:7A:EA:93:96:93:FC:32
ValiditySun, 26 Jan 2025 00:00:00 GMT - Tue, 24 Feb 2026 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.4 MB (1403435 bytes)
Hash
2d32e7c57705254ffbe240ccc4857ffa
241e493fcd4be159614af8afd694ba59afb64742
e6935f9fee714bfdc545d4243d5bb25b301ba7f73c81d58237eda6e611eccde8

HTTP Headers

GET /FontInstaller.zip HTTP/1.1
Host: rossware.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 15 Apr 2025 13:23:20 GMT
content-type: application/zip
content-length: 1403435
server: Apache/2.4.58 (Amazon Linux)
last-modified: Mon, 11 Mar 2024 16:37:28 GMT
etag: "156a2b-61365283d6200"
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (3)

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers