download.nxzsoftware.cn/go/computer-management_5983.exe?track[utm_source]=seo&track[utm_medium]=seo&track[realMedium]=seo&track[cross_end_id]=-LyP4be7B42T9sbA&track[type]=2&track[page]=https://www.nxzsoftware.cn/mac-data/&track[sid]=118/
117.21.178.222302 Moved Temporarily 221 B URL User Request GET HTTP/1.1 download.nxzsoftware.cn/go/computer-management_5983.exe?track[utm_source]=seo&track[utm_medium]=seo&track[realMedium]=seo&track[cross_end_id]=-LyP4be7B42T9sbA&track[type]=2&track[page]=https://www.nxzsoftware.cn/mac-data/&track[sid]=118/
IP 117.21.178.222:443
ASN #139201 Jiangxi Jiujiang IDC
Certificate IssuerDigiCert Inc
Subjectdownload.nxzsoftware.cn
FingerprintEC:68:6F:92:EB:B6:EE:58:E4:EE:C4:1D:15:D7:3F:1D:E5:D5:B4:0C
ValidityThu, 18 May 2023 00:00:00 GMT - Fri, 17 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash de892df7d0306b279823c1669e6fa7c0
2e61db1776c9110a62a848159d94ef050c80bc07
ec4ffe25f0a8dad25083be5f2bdf1614f75f8fcb8141a44f1de202ec202e4e46
GET /go/computer-management_5983.exe?track[utm_source]=seo&track[utm_medium]=seo&track[realMedium]=seo&track[cross_end_id]=-LyP4be7B42T9sbA&track[type]=2&track[page]=https://www.nxzsoftware.cn/mac-data/&track[sid]=118/ HTTP/1.1
Host: download.nxzsoftware.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: Tengine
Content-Type: text/html
Content-Length: 221
Connection: keep-alive
Date: Sat, 26 Aug 2023 01:10:13 GMT
Location: https://go.nxzsoftware.cn/go?c=download&a=track&name=computer-management_5983.exe&back_url=https://download.nxzsoftware.cn/downloads/computer-management.exe
Ali-Swift-Global-Savetime: 1693012213
Via: cache23.l2cn3055[87,87,302-0,M], cache66.l2cn3055[89,0], kunlun8.cn5263[0,0,302-0,H], kunlun8.cn5263[3,0]
Age: 13626
X-Cache: HIT TCP_MEM_HIT dirn:10:27092116
X-Swift-SaveTime: Sat, 26 Aug 2023 01:10:13 GMT
X-Swift-CacheTime: 172800
Accept-Ranges: bytes
Timing-Allow-Origin: *
EagleId: 7515b28916930258394756872e
download.nxzsoftware.cn/downloads/computer-management.exe
117.21.178.222200 OK 2.7 MB URL User Request GET HTTP/1.1 download.nxzsoftware.cn/downloads/computer-management.exe
IP 117.21.178.222:443
ASN #139201 Jiangxi Jiujiang IDC
Certificate IssuerDigiCert Inc
Subjectdownload.nxzsoftware.cn
FingerprintEC:68:6F:92:EB:B6:EE:58:E4:EE:C4:1D:15:D7:3F:1D:E5:D5:B4:0C
ValidityThu, 18 May 2023 00:00:00 GMT - Fri, 17 May 2024 23:59:59 GMT
File type PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed\012- data
Size 2.7 MB (2747656 bytes)
Hash 1414ffe8eed2854c4629db82ddf29c48
06d759bf5a2703132d615cf995d427c02f039183
55b27bc56ef27970a397e06daf126aba94ea3b19aa8de069c3d98ecb77a1ad81
Analyzer Verdict Alert VirusTotal suspicious
GET /downloads/computer-management.exe HTTP/1.1
Host: download.nxzsoftware.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/octet-stream
Content-Length: 2747656
Connection: keep-alive
Date: Sat, 26 Aug 2023 01:10:14 GMT
Last-Modified: Mon, 26 Jun 2023 02:14:26 GMT
ETag: "6498f482-29ed08"
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1693012214
Via: cache53.l2cn3055[84,115,304-0,M], cache68.l2cn3055[117,0], kunlun3.cn5263[0,0,200-0,H], kunlun8.cn5263[7,0]
Age: 13626
X-Cache: HIT TCP_MEM_HIT dirn:9:92787901
X-Swift-SaveTime: Sat, 26 Aug 2023 01:10:14 GMT
X-Swift-CacheTime: 172800
Timing-Allow-Origin: *
EagleId: 7515b28916930258407612025e
go.nxzsoftware.cn/go?c=download&a=track&name=computer-management_5983.exe&back_url=https://download.nxzsoftware.cn/downloads/computer-management.exe
104.18.14.116302 Found 2.7 MB URL User Request GET HTTP/2 go.nxzsoftware.cn/go?c=download&a=track&name=computer-management_5983.exe&back_url=https://download.nxzsoftware.cn/downloads/computer-management.exe
IP 104.18.14.116:443
Certificate IssuerLet's Encrypt
Subjectnxzsoftware.cn
Fingerprint36:25:67:A1:D7:0E:DC:A6:2E:DF:F5:D6:92:D8:E7:F4:C3:4B:67:C7
ValidityThu, 03 Aug 2023 06:27:09 GMT - Wed, 01 Nov 2023 06:27:08 GMT
Size 2.7 MB (2747656 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go?c=download&a=track&name=computer-management_5983.exe&back_url=https://download.nxzsoftware.cn/downloads/computer-management.exe HTTP/1.1
Host: go.nxzsoftware.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 26 Aug 2023 04:57:20 GMT
content-type: text/html; charset=UTF-8
location: https://download.nxzsoftware.cn/downloads/computer-management.exe
x-powered-by: PHP/7.2.34
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6InczK0FzK2ZIdVZETkYzRlBQekFINHc9PSIsInZhbHVlIjoibis4YVJ3WWxQUGNYZHJ2QThodjkxVVdBSXREN09NQzVEYm05VXdFbzFocjhHbWZxK1FtU0pmRGx4Q1lxS0hMM1ZNY1A5TkxhMm8rdzYxcHVGRU1FWElGdlp2WEZKNXRwVGgyREY4citFRlZKV1FiZTE1WlBTWjkrazBDU2ZDVVgiLCJtYWMiOiI5YmRjYTgxNTg5OWMxZDczOTAzNWJmOTAwODdlZGFkZTQ4MTVjZjhhNTA3MjIzM2VkOTM2ODU3YjRiY2NkMjQ5In0%3D; expires=Sat, 26-Aug-2023 06:57:20 GMT; Max-Age=7200; path=/
laravel_session=eyJpdiI6Imp1NTRmeEJUWkhZWmdqRzViU2Ruamc9PSIsInZhbHVlIjoiRERpVFwveHNwOEVDZzNBRjREM093TEVYTWlNcnlGdkdPeVVRZGE0NDk5WUVmbEVGTnhscmZxWXMxMTVYQ1M3dmZscWFIXC81blNkcmdwV0JNd3NzeFpHRzh2Y2hLUUxLd3dyckVTS0VBdDJFXC9pWUMyN1BxV2FDRWo0Rk9DdHJyN0YiLCJtYWMiOiJkZmMwYjhiZGFiNDc1NzE3MDg1NzU2Y2M1MTJlODQ5YWEzMzQ2NmI5N2I5ZTA4YmU0MDdiOGU4NDZhMmU0ZTZiIn0%3D; expires=Sat, 26-Aug-2023 06:57:20 GMT; Max-Age=7200; path=/; httponly
x-envoy-upstream-service-time: 222
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fc97e4a7da4b4ff-OSL
X-Firefox-Spdy: h2