Report - down.wttx.ltd/mp_tools/SM2259XT2_KIOXIA-F1ZMLC_PKGV1212A

Report Overview

Submitted URL
down.wttx.ltd/mp_tools/SM2259XT2_KIOXIA-F1ZMLC_PKGV1212A_FWV1207A0.zip
IP
74.48.211.242
ASN
#35916 MULTA-ASN1
Submitted
2024-05-10 10:42:03
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
down.wttx.ltd	unknown	2018-11-09	2020-03-08	2023-10-31	524 B	2.8 MB	74.48.211.242

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
down.wttx.ltd/mp_tools/SM2259XT2_KIOXIA-F1ZMLC_PKGV1212A_FWV1207A0.zip
IP
74.48.211.242
ASN
#35916 MULTA-ASN1

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
2.8 MB (2778178 bytes)
Hash
14813a183281c5abcd9c5e6a8e632072
33e14a47d3f99faee9ab932e308f66ec554490a9
448d95d129ecb35438d87fcded8388e1f7903359a7349de49d4f6e65d4177a24

Archive (57)

Filename

Md5

File type

Default.ini

7c7411b60c69816b7150035fb8e85b2c

Generic INItialization configuration [CopyCmpPattern]

default.ini

472ee185f7968ec0bd93a64fa8812fde

Microsoft Windows Autorun file

SWPtest.dll

03dc4ee93a696d9dddc9d6935f9d50be

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 7 sections

SWPtest.lib

7546b126cca5f1343c855c1436c45ab4

Microsoft Visual C/OMF library, page size 16, at 0 dictionary with 0 block (FFLAG=0xa) 1st entry INSVC.obj in page 0, 2nd record "SWPtest.dll", 3rd record COMMENT Preserved class=0xfb

SWPtest.tds

b726f51d8b6697b9100d2a8b2cd44164

data

DriveSettingTable.bin

97b6038f42d02d011ae2975ceb0c3d7d

data

MPINFO_Final.bin

c7097c2b5cce823daf4691057d3f5c65

tar archive (V7), file MPINFO, gid 59XT2 1, seconds

MP_CIDtable.bin

f2667082bc06ebc838b043c761b5aa4e

data

MP_IDtable.bin

4624697fd53931ea42ef68183d4fab03

data

New_ISP.bin

e5fd67abbc4605e3720a9d199f7b9278

data

ErrorCode.txt

45dbb50ea4fe6a630cc4dd3582b5bb9b

ASCII text, with CRLF line terminators

FWTag.SET

0602e83653753d756d345a905c3bab26

ISO-8859 text, with CRLF line terminators

CIDtable.bin

021c524257e0c75154cce4dfc8d10ffe

data

DgISP_FlashCmd.bin

83746d83442417c483e3e792c0c1ba10

data

DgISP_ReadBadInfo.bin

887117456e09bd19def81ed205420a29

data

DgISP_ReadDistribution.bin

133070f5e3029e846a72809d6e459b80

data

DgISP_TlcWriCmd.bin

807bae5935cd6463b158c6a0ce6b5fe7

data

DgISP_TranLba2Pba.bin

b60464533fcfb89f7f5a129dccf80efb

data

DgISP_VendorCmd.bin

09d22f92628cad7b2d04fb765f26f19c

data

MainTag.bin

d60ea6b863b1d1ab54dd1d9d0895a8db

ASCII text, with no line terminators

IDtable.bin

044ef11d115cf989a199337cb7e8b6b6

data

ISP2259.bin

5e261105c56a9cea70bbeb3e2a11242a

data

ISP2259RDT.bin

bfee2a121ca01177ad42fd32581ade36

data

MPISP2259_ROMDEBUG.bin

cd7c19c9520c531016883c66e0d84e9d

data

MPINFO.bin

7ed46a9812345d8ba5e114cd188239e3

ASCII text, with no line terminators

MPISP2259.bin

8ae20cf9954638bf4a4add8935eb4c9a

data

BootISP2259.bin

85bfd63350297c777fb6d817330b5e36

data

Flash.SET

ff1bc5c9eac2fafd7c0a0cf3785416c4

ASCII text, with very long lines (305), with CRLF line terminators

BootISP.bin

85bfd63350297c777fb6d817330b5e36

data

FlashID.bin

1ca0f66c8276fbccf2fb277308319fb4

OpenPGP Public Key

ISP.bin

e5fd67abbc4605e3720a9d199f7b9278

data

Microcode.flu

27f893b7178b27c603cf5a041f331232

data

MPCID.bin

b8d786c0ffd82e036a7b3e497c1b9620

data

MPDrvSet.bin

97b6038f42d02d011ae2975ceb0c3d7d

data

MPID.bin

4624697fd53931ea42ef68183d4fab03

data

MPINFO.bin

c7097c2b5cce823daf4691057d3f5c65

tar archive (V7), file MPINFO, gid 59XT2 1, seconds

MPISP.bin

8ae20cf9954638bf4a4add8935eb4c9a

data

ParamTable.bin

fea3e03d850db63284fed924cbcd17a8

data

SeedTable.bin

abf36b240ec726004f70380ebbbfa4eb

data

name.txt

cc03752c25409cdbfaa2cfab60dc9d19

data

SM2258XTMPToolV1209A.exe

03dfa276430c0b63b9a438d937c944ea

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

Note.txt

856080d4b3c79e8767a38752a725f54b

ASCII text, with CRLF line terminators

RR01.bin

15a43faa553b1c8af151766dfcc93461

data

RR02.bin

1482572ad0062103c5ea56648bfdcb4a

data

RR03.bin

2c1dec425cc361edc3b0f4cde98fdc38

data

StrongPageTable.bin

9eb5e8ffadeef2da9a5f49ac3a829c86

data

TLCSeedTable1Z.bin

abf36b240ec726004f70380ebbbfa4eb

data

Arg.set

9cb297a9fcb6c919887063b6a2aee376

Generic INItialization configuration [CopyCmpSetting]

ErrorCode_CHS.txt

989aea19cdb2561952fde7d925a85ce1

ISO-8859 text, with CRLF line terminators

ErrorCode_CHT.txt

8097fbb58e6cf25b44244b132620da72

ISO-8859 text, with CRLF line terminators

ErrorCode_ENG.txt

358d124bc2e464715a58c3bc49c94fbf

ASCII text, with CRLF line terminators

Language_CHS.ini

a264e4f153b690753eb8acc9e4bd30d2

Generic INItialization configuration [MPModeDlg]

Language_CHT.ini

917bf98f8565045cf260759fcfac698b

Generic INItialization configuration [MPModeDlg]

Language_ENG.ini

00c46168d84c3d15c50ac43c9241d545

Generic INItialization configuration [MPModeDlg]

Setting.set

3e9edfc7cfe6fbc20669d99765c039c4

Generic INItialization configuration [FUNCTION]

SMIPortMappingEx.dll

dca39b01fee8f88851ed909b1fe10792

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

SMIPortMappingEx.ini

69ba9f57f20950979e3c7169ad519f58

Generic INItialization configuration [PortMapping]

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_stackstrings

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	down.wttx.ltd/mp_tools/SM2259XT2_KIOXIA-F1ZMLC_PKGV1212A_FWV1207A0.zip	74.48.211.242	200 OK	2.8 MB
URL User Request GET HTTP/2 down.wttx.ltd/mp_tools/SM2259XT2_KIOXIA-F1ZMLC_PKGV1212A_FWV1207A0.zip IP 74.48.211.242:443 ASN #35916 MULTA-ASN1 Certificate IssuerLet's Encrypt Subjectdown.wttx.ltd Fingerprint1A:8E:FF:D8:F9:AC:19:B0:CE:4F:FB:7D:42:54:9F:B8:32:ED:0C:2F ValiditySun, 28 Apr 2024 13:36:07 GMT - Sat, 27 Jul 2024 13:36:06 GMT File type Zip archive data, at least v2.0 to extract, compression method=store Size 2.8 MB (2778178 bytes) Hash 14813a183281c5abcd9c5e6a8e632072 33e14a47d3f99faee9ab932e308f66ec554490a9 448d95d129ecb35438d87fcded8388e1f7903359a7349de49d4f6e65d4177a24 HTTP Headers GET /mp_tools/SM2259XT2_KIOXIA-F1ZMLC_PKGV1212A_FWV1207A0.zip HTTP/1.1 Host: down.wttx.ltd User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx date: Fri, 10 May 2024 10:41:46 GMT content-type: application/zip content-length: 2778178 last-modified: Mon, 06 May 2024 13:13:33 GMT etag: "6638d77d-2a6442" accept-ranges: bytes X-Firefox-Spdy: h2`

down.wttx.ltd/mp_tools/SM2259XT2_KIOXIA-F1ZMLC_PKGV1212A_FWV1207A0.zip

74.48.211.242

200 OK

2.8 MB

URL User Request GET HTTP/2
down.wttx.ltd/mp_tools/SM2259XT2_KIOXIA-F1ZMLC_PKGV1212A_FWV1207A0.zip
IP
74.48.211.242:443
ASN
#35916 MULTA-ASN1

Certificate
IssuerLet's Encrypt
Subjectdown.wttx.ltd
Fingerprint1A:8E:FF:D8:F9:AC:19:B0:CE:4F:FB:7D:42:54:9F:B8:32:ED:0C:2F
ValiditySun, 28 Apr 2024 13:36:07 GMT - Sat, 27 Jul 2024 13:36:06 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
2.8 MB (2778178 bytes)
Hash
14813a183281c5abcd9c5e6a8e632072
33e14a47d3f99faee9ab932e308f66ec554490a9
448d95d129ecb35438d87fcded8388e1f7903359a7349de49d4f6e65d4177a24

HTTP Headers

GET /mp_tools/SM2259XT2_KIOXIA-F1ZMLC_PKGV1212A_FWV1207A0.zip HTTP/1.1
Host: down.wttx.ltd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 10:41:46 GMT
content-type: application/zip
content-length: 2778178
last-modified: Mon, 06 May 2024 13:13:33 GMT
etag: "6638d77d-2a6442"
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (57)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers