Report - down.wttx.ltd/mp_tools/SM2259XT2_TSB-FBiCS4_PKGU1026A

Report Overview

Submitted URL
down.wttx.ltd/mp_tools/SM2259XT2_TSB-FBiCS4_PKGU1026A_FWU0916A0.zip
IP
74.48.211.242
ASN
#35916 MULTA-ASN1
Submitted
2024-05-10 10:42:27
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
down.wttx.ltd	unknown	2018-11-09	2020-03-08	2023-10-31	521 B	2.6 MB	74.48.211.242

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
down.wttx.ltd/mp_tools/SM2259XT2_TSB-FBiCS4_PKGU1026A_FWU0916A0.zip
IP
74.48.211.242
ASN
#35916 MULTA-ASN1

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
2.6 MB (2553553 bytes)
Hash
f8d00f0a8b794f9f068b110d8f003838
f59e7fb8f717a7a5da7c3e3555706b5260e5150b
ee739ba2b50a2c1ec4e838f944b50b19fa56f6846a05b68b06a746713c4e1909

Archive (134)

Filename

Md5

File type

Default.ini

b1ed5d7a02e7767d38df32df426449f9

Generic INItialization configuration [CopyCmpPattern]

SWPtest.dll

23869973222e6b47230536858791ad42

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 7 sections

DriveSettingTable.bin

352eac61d177a7b3850cf337d6f77eb7

data

MPINFO_Final.bin

5a3298c54516cb4a9781bb9aef9c62e3

tar archive (V7), file MPINFO, gid iba Bic, size , seconds

MP_CIDtable.bin

93e5b593a1aa14036ec9b14f7c15aba9

data

MP_IDtable.bin

e272c7c3f3e3d7faf907aca026b0a88c

data

New_ISP.bin

2f4ad0d6e40bb284df03fe27d32a5b76

data

ErrorCode.txt

45dbb50ea4fe6a630cc4dd3582b5bb9b

ASCII text, with CRLF line terminators

CIDtable.bin

e6cbecab8ff69e90ac6a5dc62a704fc9

data

DgISP_FlashCmd.bin

b2be87318ba3b08f2ce86647e254319f

data

DgISP_ReadBadInfo.bin

ed02b1653029a042cd0830c1a8bdef57

data

DgISP_ReadDistribution.bin

6efd728fad9601e7ad021e0d6a710437

data

DgISP_TlcWriCmd.bin

43692cedd73f6121417d1693ced2b86f

data

DgISP_TranLba2Pba.bin

10c120d2261a818c5dd7d10edb66525f

data

DgISP_VendorCmd.bin

0c5af58fb9df600c5537ba1da214092a

data

MainTag.bin

a2285a47f7bc95c884cb97bd25f1750e

ASCII text, with no line terminators

IDtable.bin

4faa1ea8c382de40e1be80ab6e18426d

data

ISP2259.bin

89ad861e4d8d270dfb4b125ffadab010

data

ISP2259RDT.bin

76158f6b27ba5028df7639c0b64acb9d

data

MPISP2259_ROMDEBUG.bin

b9c2c90af3cc105eb77cd10140697fc0

data

BootISP2259.bin

2d6059e9884a3b4016c9be6033e8002d

data

MPINFO.bin

7ed46a9812345d8ba5e114cd188239e3

ASCII text, with no line terminators

MPISP2259.bin

2e47bba9da1450b49ea887e600f72b34

data

BootISP2259.bin

2d6059e9884a3b4016c9be6033e8002d

data

FWTag.SET

de7a4577676ae00ee3758ecd66cee4e4

ASCII text, with CRLF line terminators

Flash.SET

35df3d35d6137470dbdb7554eefc4ea3

Generic INItialization configuration [END]

Setting.set

df56fcbbb7d107a7c4cdcf1c5bd99793

Generic INItialization configuration [FUNCTION]

Setting.set

b0a4fad34c047c44639349984debf5c1

Generic INItialization configuration [FUNCTION]

Setting.set

878025cec297b57ec8186d5e03560cd8

Generic INItialization configuration [FUNCTION]

Setting.set

461d5fc4bfddb3a7c237f5a454b657ba

Generic INItialization configuration [FUNCTION]

Setting.set

a94491073ff8fab3e635a539ebe22fed

Generic INItialization configuration [FUNCTION]

Setting.set

783cc5524700fa571211f33516061abc

Generic INItialization configuration [FUNCTION]

Setting.set

9b667dbc9930265a2a28717ad4fde7de

Generic INItialization configuration [FUNCTION]

Setting.set

9fb5ca52c84409a23da8369db2dc00e4

Generic INItialization configuration [FUNCTION]

Setting.set

95c0dab6338cd6fa4ccb3878b76b4676

Generic INItialization configuration [FUNCTION]

Setting.set

284ee399b2fadcfdb066ebe3addf419c

Generic INItialization configuration [FUNCTION]

Setting.set

284ee399b2fadcfdb066ebe3addf419c

Generic INItialization configuration [FUNCTION]

Setting.set

4c110b4d1efad266ac54abfac47b8ca2

Generic INItialization configuration [FUNCTION]

Setting.set

4c110b4d1efad266ac54abfac47b8ca2

Generic INItialization configuration [FUNCTION]

Setting.set

8886cd5932adb4548b417ff19665dd45

Generic INItialization configuration [FUNCTION]

Setting.set

78b83e9b3d132b4fa085248d0f22d0d4

Generic INItialization configuration [FUNCTION]

Setting.set

4924106a03e93e4f02af6f383886fc5f

Generic INItialization configuration [FUNCTION]

Setting.set

c0b0548828f6db9a8e8ef5b7ff8ac36f

Generic INItialization configuration [FUNCTION]

Setting.set

fa84900ec3a8cdb00e37a0b9333ef18a

Generic INItialization configuration [FUNCTION]

Setting.set

fa84900ec3a8cdb00e37a0b9333ef18a

Generic INItialization configuration [FUNCTION]

Setting.set

85fed7d96c685d15dbf2c68431c5603f

Generic INItialization configuration [FUNCTION]

Setting.set

36f4bde7db4d61774860901461556ce5

Generic INItialization configuration [FUNCTION]

Setting.set

31d5311234ae5ee79e989954f056cf79

Generic INItialization configuration [FUNCTION]

Setting.set

e9a3e83ae5971d537729ea6e2ff2a2b0

Generic INItialization configuration [FUNCTION]

Setting.set

5d5af9b8cfe3792417ac672b02701acf

Generic INItialization configuration [FUNCTION]

Setting.set

29df287b28fe155cf337fa787c089f6c

Generic INItialization configuration [FUNCTION]

Setting.set

40456f6d250c8c83e821fc771c68f56b

Generic INItialization configuration [FUNCTION]

Setting.set

e787bd12387b5ca3a2866a43b11b3a1e

Generic INItialization configuration [FUNCTION]

Setting.set

12b9be5b8ee8fb92a4a6e476792dc6a7

Generic INItialization configuration [FUNCTION]

Setting.set

9dc201bafb5decea2701da54b29746c8

Generic INItialization configuration [FUNCTION]

Setting.set

c336b2711541f131dc35195215b8e32f

Generic INItialization configuration [FUNCTION]

desktop.ini

7477e03b38b2523344a71c0d8ef13c03

Windows desktop.ini

Setting.set

5d1ada90ba45caab61cb7b47ef15244f

Generic INItialization configuration [FUNCTION]

Setting.set

5d1ada90ba45caab61cb7b47ef15244f

Generic INItialization configuration [FUNCTION]

Setting.set

c2d2c22f7a97e8d59720be8481791cc6

Generic INItialization configuration [FUNCTION]

desktop.ini

7477e03b38b2523344a71c0d8ef13c03

Windows desktop.ini

Setting.set

94399f88ccfa7877bf25cdf196af20e9

Generic INItialization configuration [FUNCTION]

Setting.set

64d015c6a9d219324821dcd75b4c8194

Generic INItialization configuration [FUNCTION]

desktop.ini

7477e03b38b2523344a71c0d8ef13c03

Windows desktop.ini

Setting.set

5c11f8eafe499e49575b5a4c6ff31370

Generic INItialization configuration [FUNCTION]

Setting.set

10e34b3703e6ddee25bda394e2c05507

Generic INItialization configuration [FUNCTION]

desktop.ini

7477e03b38b2523344a71c0d8ef13c03

Windows desktop.ini

Setting.set

ad6b8318bf14780d279cd8d5764af219

Generic INItialization configuration [FUNCTION]

Setting.set

7bc11c57009372d065fe0698ac07dcb7

Generic INItialization configuration [FUNCTION]

Setting.set

350f1a800778431a3344ea446a9cf49a

Generic INItialization configuration [FUNCTION]

Setting.set

13417b9f0acd0be805ac7aa9597c77e2

Generic INItialization configuration [FUNCTION]

desktop.ini

6475543d4e333f363434edb1710126a0

Windows desktop.ini

Setting.set

3b35685fd3e89ee24f30e3183bcf348b

Generic INItialization configuration [FUNCTION]

Setting.set

c00c3bd5479ad2ac75eb419c82415970

Generic INItialization configuration [FUNCTION]

Setting.set

49dffb5dc06fa8496d8501b2ddb6d30c

Generic INItialization configuration [FUNCTION]

desktop.ini

bae7b6844f7053a75db3e78e915009b1

Windows desktop.ini

Setting.set

83d9bf327d1e24f833394976222740a1

Generic INItialization configuration [FUNCTION]

Setting.set

faefdcb5096c6255d42efd43827d5335

Generic INItialization configuration [FUNCTION]

Setting.set

8db07ffb785537398c048d4fcb2ec530

Generic INItialization configuration [FUNCTION]

Setting.set

0f0db5fb8ae5ad4b007ddcaed475a7cd

Generic INItialization configuration [FUNCTION]

Setting.set

10dcad7cf793281c7b1535537d24706e

Generic INItialization configuration [FUNCTION]

Setting.set

934077caf5513587b2b1cd6e2e3d02a3

Generic INItialization configuration [FUNCTION]

Setting.set

2c751f8fb7e16d2eead0ce9d271ffec3

Generic INItialization configuration [FUNCTION]

Setting.set

64f0135c16a7f3dd93ccdbb28132bfaa

Generic INItialization configuration [FUNCTION]

Setting.set

e04680ec258a4883741d8223aaafc33d

Generic INItialization configuration [FUNCTION]

Setting.set

250f96ab775193056916ccee6d487f27

Generic INItialization configuration [FUNCTION]

Setting.set

35f8a9aa6d39f7c293b8ee9f859d0523

Generic INItialization configuration [FUNCTION]

Setting.set

5d86ddde864614a4bde1a00fd774ad42

Generic INItialization configuration [FUNCTION]

Setting.set

18d4c2b9cdc06675812f9e40d8d6ffb2

Generic INItialization configuration [FUNCTION]

Setting.set

18d4c2b9cdc06675812f9e40d8d6ffb2

Generic INItialization configuration [FUNCTION]

Setting.set

18d4c2b9cdc06675812f9e40d8d6ffb2

Generic INItialization configuration [FUNCTION]

Setting.set

c0cf9f10d2b1c5511a43d2792c89bf6b

Generic INItialization configuration [FUNCTION]

desktop.ini

7477e03b38b2523344a71c0d8ef13c03

Windows desktop.ini

Setting.set

f859adc327baa26f7041606315079eac

Generic INItialization configuration [FUNCTION]

Setting.set

c5f9c13bf4fb6df65d735f98ff908723

Generic INItialization configuration [FUNCTION]

Setting.set

d5a37cdba84c41a8616f28478893aef8

Generic INItialization configuration [FUNCTION]

Setting.set

caa3b50e5ac52a51d0f6bff1ad2b6f06

Generic INItialization configuration [FUNCTION]

Setting.set

7f57fad3f7046c20ba9e49bf7b2febb6

Generic INItialization configuration [FUNCTION]

Setting.set

96db2337365ff2d9b864d2a031c0a136

Generic INItialization configuration [FUNCTION]

Setting.set

def09be306c8c0858c3139362d30f3b4

Generic INItialization configuration [FUNCTION]

Setting.set

f974333fdfd6ba401748874af2334c0e

Generic INItialization configuration [FUNCTION]

Setting.set

fdb7f2316d7b552895a3af5c8c3215db

Generic INItialization configuration [FUNCTION]

desktop.ini

7477e03b38b2523344a71c0d8ef13c03

Windows desktop.ini

Setting.set

cd755ced46ec28fc5fb434b6d2525d93

Generic INItialization configuration [FUNCTION]

Setting.set

593429ce19d4cee746190288218c52e3

Generic INItialization configuration [FUNCTION]

Setting.set

963d011bb42059a42038e4b90fd8a13a

Generic INItialization configuration [FUNCTION]

BootISP.bin

2d6059e9884a3b4016c9be6033e8002d

data

FlashID.bin

3f10fa38b981cc97acee4c93fd6a3f47

OpenPGP Public Key

ISP.bin

2f4ad0d6e40bb284df03fe27d32a5b76

data

MPCID.bin

93e5b593a1aa14036ec9b14f7c15aba9

data

MPDrvSet.bin

352eac61d177a7b3850cf337d6f77eb7

data

MPID.bin

e272c7c3f3e3d7faf907aca026b0a88c

data

MPINFO.bin

5a3298c54516cb4a9781bb9aef9c62e3

tar archive (V7), file MPINFO, gid iba Bic, size , seconds

MPISP.bin

2e47bba9da1450b49ea887e600f72b34

data

Microcode.flu

f880a52584279ed8c45e1c8a17487371

data

ParamTable.bin

42a9902890acfb5dce22ad9ee6e4fca6

data

SeedTable.bin

abf36b240ec726004f70380ebbbfa4eb

data

SM2258XTMPToolU0906A.exe

8fafe42b52f9efdc5656660770307928

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

RR01.bin

15a43faa553b1c8af151766dfcc93461

data

RR02.bin

1482572ad0062103c5ea56648bfdcb4a

data

RR03.bin

2c1dec425cc361edc3b0f4cde98fdc38

data

StrongPageTable.bin

9eb5e8ffadeef2da9a5f49ac3a829c86

data

TLCSeedTable1Z.bin

abf36b240ec726004f70380ebbbfa4eb

data

Arg.set

9cb297a9fcb6c919887063b6a2aee376

Generic INItialization configuration [CopyCmpSetting]

ErrorCode_CHS.txt

989aea19cdb2561952fde7d925a85ce1

ISO-8859 text, with CRLF line terminators

ErrorCode_CHT.txt

8097fbb58e6cf25b44244b132620da72

ISO-8859 text, with CRLF line terminators

ErrorCode_ENG.txt

358d124bc2e464715a58c3bc49c94fbf

ASCII text, with CRLF line terminators

Language_CHS.ini

a264e4f153b690753eb8acc9e4bd30d2

Generic INItialization configuration [MPModeDlg]

Language_CHT.ini

917bf98f8565045cf260759fcfac698b

Generic INItialization configuration [MPModeDlg]

Language_ENG.ini

00c46168d84c3d15c50ac43c9241d545

Generic INItialization configuration [MPModeDlg]

SMIPortMappingEx.dll

c07e13a5ef2d241a24cf0d5a5ba9da40

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

SMIPortMappingEx.ini

bb94dfbd8c50856c30ceecd1c3fc3cc2

Generic INItialization configuration [PortMapping]

Setting.set

9b187d72dec863f93f583a2a0309a6e9

Generic INItialization configuration [FUNCTION]

default.ini

c75b6896f61219a80f8a9f6670fa5044

Microsoft Windows Autorun file

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_stackstrings

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	down.wttx.ltd/mp_tools/SM2259XT2_TSB-FBiCS4_PKGU1026A_FWU0916A0.zip	74.48.211.242	200 OK	2.6 MB
URL User Request GET HTTP/2 down.wttx.ltd/mp_tools/SM2259XT2_TSB-FBiCS4_PKGU1026A_FWU0916A0.zip IP 74.48.211.242:443 ASN #35916 MULTA-ASN1 Certificate IssuerLet's Encrypt Subjectdown.wttx.ltd Fingerprint1A:8E:FF:D8:F9:AC:19:B0:CE:4F:FB:7D:42:54:9F:B8:32:ED:0C:2F ValiditySun, 28 Apr 2024 13:36:07 GMT - Sat, 27 Jul 2024 13:36:06 GMT File type Zip archive data, at least v2.0 to extract, compression method=store Size 2.6 MB (2553553 bytes) Hash f8d00f0a8b794f9f068b110d8f003838 f59e7fb8f717a7a5da7c3e3555706b5260e5150b ee739ba2b50a2c1ec4e838f944b50b19fa56f6846a05b68b06a746713c4e1909 HTTP Headers GET /mp_tools/SM2259XT2_TSB-FBiCS4_PKGU1026A_FWU0916A0.zip HTTP/1.1 Host: down.wttx.ltd User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx date: Fri, 10 May 2024 10:42:08 GMT content-type: application/zip content-length: 2553553 last-modified: Fri, 05 Apr 2024 05:55:27 GMT etag: "660f924f-26f6d1" accept-ranges: bytes X-Firefox-Spdy: h2`

down.wttx.ltd/mp_tools/SM2259XT2_TSB-FBiCS4_PKGU1026A_FWU0916A0.zip

74.48.211.242

200 OK

2.6 MB

URL User Request GET HTTP/2
down.wttx.ltd/mp_tools/SM2259XT2_TSB-FBiCS4_PKGU1026A_FWU0916A0.zip
IP
74.48.211.242:443
ASN
#35916 MULTA-ASN1

Certificate
IssuerLet's Encrypt
Subjectdown.wttx.ltd
Fingerprint1A:8E:FF:D8:F9:AC:19:B0:CE:4F:FB:7D:42:54:9F:B8:32:ED:0C:2F
ValiditySun, 28 Apr 2024 13:36:07 GMT - Sat, 27 Jul 2024 13:36:06 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
2.6 MB (2553553 bytes)
Hash
f8d00f0a8b794f9f068b110d8f003838
f59e7fb8f717a7a5da7c3e3555706b5260e5150b
ee739ba2b50a2c1ec4e838f944b50b19fa56f6846a05b68b06a746713c4e1909

HTTP Headers

GET /mp_tools/SM2259XT2_TSB-FBiCS4_PKGU1026A_FWU0916A0.zip HTTP/1.1
Host: down.wttx.ltd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 10:42:08 GMT
content-type: application/zip
content-length: 2553553
last-modified: Fri, 05 Apr 2024 05:55:27 GMT
etag: "660f924f-26f6d1"
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (134)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers