Report - down.wttx.ltd/mp_tools/SM2258XT_B17A_PKGS0708A_FWS0628A0

Report Overview

Submitted URL
down.wttx.ltd/mp_tools/SM2258XT_B17A_PKGS0708A_FWS0628A0_usbdev.ru.zip
IP
74.48.211.242
ASN
#35916 MULTA-ASN1
Submitted
2024-05-10 10:42:35
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
down.wttx.ltd	unknown	2018-11-09	2020-03-08	2023-10-31	524 B	2.0 MB	74.48.211.242
aus5.mozilla.org	2548	1998-01-24	2015-10-27	2024-05-09	512 B	6.5 kB	35.244.181.201

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
down.wttx.ltd/mp_tools/SM2258XT_B17A_PKGS0708A_FWS0628A0_usbdev.ru.zip
IP
74.48.211.242
ASN
#35916 MULTA-ASN1

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
2.0 MB (1956191 bytes)
Hash
c560c26df7df976b659cb93a87ba2ed4
770f986479e9b8e96c769169a9a550c85ec1b6b1
cfc26e7b6e5a9237c12600ac9899c0036d02b3a94737790de73ae3b6ed529220

Archive (51)

Filename

Md5

File type

Default.ini

ce53364a71daa768dd8ad29da548ce11

Generic INItialization configuration [CopyCmpPattern]

default.ini

9e17eb7a9a4c1003495e281af994bda1

Microsoft Windows Autorun file

SWPtest.dll

48be8261f9f87200718486e07d75ab42

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 7 sections

DriveSettingTable.bin

a557a929e1486273c81596aea4b016b9

data

MPINFO_Final.bin

9474f61dcb06837450df73d5c1e2233a

tar archive (V7), file MPINFO, gid , size , seconds

MP_CIDtable.bin

2581e5225a425267ace55c6830c8ccf7

data

MP_IDtable.bin

66e92ff6b158dd097f98a3efddc9ec68

data

New_ISP.bin

574461bd70940440ec76eb5a38a049d9

data

ErrorCode.txt

45dbb50ea4fe6a630cc4dd3582b5bb9b

ASCII text, with CRLF line terminators

FWTag.SET

3f594cdaae7a246e8afa8785bf7eaeb2

ASCII text, with CRLF line terminators

CIDtable.bin

98f4569293e8c60bf07ca085176fa270

data

DgISP_FlashCmd.bin

0c25641b7768a0d6bbc22dd007f84b16

data

DgISP_ReadBadInfo.bin

fd79cf377e9570ce59525b9f4ed141eb

data

DgISP_ReadDistribution.bin

43ac7b58ee58ba9b6bec80a7d95a7321

data

DgISP_TlcWriCmd.bin

34597bc8ef7efd74377cfaf6a37370eb

data

DgISP_TranLba2Pba.bin

783d04516efc623a87cb6564d2172a95

data

DgISP_VendorCmd.bin

39506035144e483b24705363d1108ed6

data

MainTag.bin

27a813dd3f7b32e72111a52f46cb2409

Motorola S-Record; binary data in text format

IDtable.bin

044ef11d115cf989a199337cb7e8b6b6

data

ISP2258.bin

1f82ef46ad95a4be6f7e9c9610d7977c

data

ISP2258RDT.bin

cedc7fc4fe7a59ac927b01a9c28b3185

data

MPISP2258_ROMDEBUG.bin

ca5d11a8e5bc6eddd47782938e9af8e0

data

BootISP2258.bin

6b9734f20da93c473c179682ade324cb

data

MPINFO.bin

7ed46a9812345d8ba5e114cd188239e3

ASCII text, with no line terminators

MPISP2258.bin

14ba003740aba956847340ef72112c7d

data

Flash.SET

41920667a2225a9a6abeed4cfe7e627e

ASCII text, with CRLF line terminators

BootISP.bin

6b9734f20da93c473c179682ade324cb

data

FlashID.bin

ea51913dc30dbdcab58e7ad488441ddf

data

ISP.bin

574461bd70940440ec76eb5a38a049d9

data

Microcode.flu

120f2f129055d9fdf4226abc572d60e7

data

MPCID.bin

4c1d493c825d8aa8e1872dda8d0f9ac5

data

MPDrvSet.bin

a557a929e1486273c81596aea4b016b9

data

MPID.bin

66e92ff6b158dd097f98a3efddc9ec68

data

MPINFO.bin

9474f61dcb06837450df73d5c1e2233a

tar archive (V7), file MPINFO, gid , size , seconds

MPISP.bin

14ba003740aba956847340ef72112c7d

data

ParamTable.bin

090166784c6156f69ae63142676d2275

data

SeedTable.bin

88dc04daaacfe6de24f59e9d274097d3

data

name.txt

1be617c7c192f6909d224a7a2e6e122c

data

SM2258XTMPToolS0618B.exe

d2526b6a9f89d985b7c63688b317d2c4

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

StrongPageTable.bin

9eb5e8ffadeef2da9a5f49ac3a829c86

data

TLCSeedTable1Z.bin

88dc04daaacfe6de24f59e9d274097d3

data

Arg.set

9cb297a9fcb6c919887063b6a2aee376

Generic INItialization configuration [CopyCmpSetting]

ErrorCode_CHS.txt

d9ada559d6711c56eb9290afdd414ce2

ISO-8859 text, with CRLF line terminators

ErrorCode_CHT.txt

ce0861d5f00f312458e5903546f183f0

ISO-8859 text, with CRLF line terminators

ErrorCode_ENG.txt

26c2eb879435bced0709b2d4fb3b863f

ASCII text, with CRLF line terminators

Language_CHS.ini

b8bbbd3d9ef82474d628cfca3dac2808

Generic INItialization configuration [MPModeDlg]

Language_CHT.ini

2337f04891386bf294821b36c4800d25

Generic INItialization configuration [MPModeDlg]

Language_ENG.ini

0c0bdccba83af3200759f61eabbb2c9c

Generic INItialization configuration [MPModeDlg]

Setting.set

3bc3e107dfd496e33be79b31856f8632

Generic INItialization configuration [FUNCTION]

SMIPortMappingEx.dll

31b35389336f1631a231c68bb05e764e

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

SMIPortMappingEx.ini

dd96af094a405f263459d8f188b25d36

Generic INItialization configuration [PortMapping]

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	down.wttx.ltd/mp_tools/SM2258XT_B17A_PKGS0708A_FWS0628A0_usbdev.ru.zip	74.48.211.242	200 OK	2.0 MB
URL User Request GET HTTP/2 down.wttx.ltd/mp_tools/SM2258XT_B17A_PKGS0708A_FWS0628A0_usbdev.ru.zip IP 74.48.211.242:443 ASN #35916 MULTA-ASN1 Certificate IssuerLet's Encrypt Subjectdown.wttx.ltd Fingerprint1A:8E:FF:D8:F9:AC:19:B0:CE:4F:FB:7D:42:54:9F:B8:32:ED:0C:2F ValiditySun, 28 Apr 2024 13:36:07 GMT - Sat, 27 Jul 2024 13:36:06 GMT File type Zip archive data, at least v2.0 to extract, compression method=store Size 2.0 MB (1956191 bytes) Hash c560c26df7df976b659cb93a87ba2ed4 770f986479e9b8e96c769169a9a550c85ec1b6b1 cfc26e7b6e5a9237c12600ac9899c0036d02b3a94737790de73ae3b6ed529220 HTTP Headers GET /mp_tools/SM2258XT_B17A_PKGS0708A_FWS0628A0_usbdev.ru.zip HTTP/1.1 Host: down.wttx.ltd User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx date: Fri, 10 May 2024 10:42:19 GMT content-type: application/zip content-length: 1956191 last-modified: Thu, 25 Jun 2020 11:12:09 GMT etag: "5ef48689-1dd95f" accept-ranges: bytes X-Firefox-Spdy: h2`

	aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml	35.244.181.201		5.8 kB
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP 35.244.181.201:0 ASN #396982 GOOGLE-CLOUD-PLATFORM File type gzip compressed data, max speed, from Unix Size 5.8 kB (5759 bytes) Hash aa33725c2d0a3d1c2f9c878d64914807 6e83d13ec860384a977738b04ff0891a01ab519a fe412eadb3dc9820ec6cab7cb62349be057c509e34f7e2de6d23b28eacc98bfd HTTP Headers `GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1 Host: aus5.mozilla.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Cache-Control: no-cache Pragma: no-cache Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK server: nginx date: Fri, 10 May 2024 10:42:28 GMT content-type: text/xml; charset=utf-8 vary: Accept-Encoding rule-id: unknown rule-data-version: unknown content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=ySL6cdYRCU6Icf-1eyZEWtllB0ZFKEd7L3WN8Plon3G-MDaU0IqzzgdfePeJKfw6t4Khe_tiaCnlVHpf38g1tn94NyfIlFxVIyAOTd_JRMO3JX7zKC-WKiz01e12hY_4 strict-transport-security: max-age=31536000; x-content-type-options: nosniff content-security-policy: default-src 'none'; frame-ancestors 'none' x-proxy-cache-status: MISS content-encoding: gzip via: 1.1 google cache-control: public,max-age=90 alt-svc: clear X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (51)

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers