{
	"id": "dd5f1333-83a6-43fd-bfc0-5306b6b6cbc4",
	"created_at": "2026-04-06T00:17:56.239091Z",
	"updated_at": "2026-04-10T03:36:48.086144Z",
	"deleted_at": null,
	"sha1_hash": "3545d5d39d51143416ae4a8ed074103752d3b2e5",
	"title": "libzip",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 69523,
	"plain_text": "libzip\r\nArchived: 2026-04-05 14:59:42 UTC\r\nA C Library for Reading, Creating, and Modifying Zip Archives\r\nWhy Use libzip?\r\nlibzip has been continuously developed since 2005. It is efficient, small, and flexible. It is usable on Linux,\r\nmacOS, and Windows and many other operating systems.\r\nThe main design criteria are:\r\nMaintain a stable API without breaking backwards compatibility.\r\nDo not create corrupt files, even in case of errors.\r\nDo not delete data.\r\nBe efficient.\r\nIt supports the following features:\r\nReading archives and file data from files or memory buffers\r\nReverting unsaved changes\r\nZip64 large archives\r\nDeflate, bzip2, LZMA, and zstd compression\r\nWinzip AES and legacy PKWARE encryption\r\nThe BSD license used for libzip allows its use in commercial products.\r\nWho Uses libzip?\r\nlibzip is used in major open source projects like KDE, Chromium, ImageMagick, and VeraCrypt.\r\nCommercial products using libzip include Lightroom from Adobe and the Kobo eReader.\r\nThere are also bindings for other programming languages: Python, Ruby, Lua, PHP, and others.\r\nThere is a more complete list of projects.\r\nGetting Started\r\nMost Linux and other Unix distributions include libzip in their package distributions, it is usually called libzip\r\nor libzip-dev .\r\nOn macOS, it is included in both Homebrew and Mac Ports.\r\nhttps://libzip.org/\r\nPage 1 of 2\n\nOn Windows, it is in vcpkg.\r\nA list of available packages can be found on Repology.\r\nFor building and installing libzip from source, see the INSTALL file.\r\nUsing libzip\r\nlibzip is fully documented via man pages. HTML versions of the man pages are on libzip.org and in the man\r\ndirectory. You can start with libzip(3), which lists all others. Example source code is in the examples and src\r\nsubdirectories.\r\nIf you have developed an application using libzip, you can find out about API changes and how to adapt your code\r\nfor them in the included file API-CHANGES.\r\nStaying in Touch\r\nMore information and the latest version can always be found on libzip.org. The official repository is at GitHub.\r\nIf you want to reach the authors in private, use info@libzip.org.\r\nCurrent version is 1.11.4, released on May 23, 2025.\r\nin repositories 53\r\nbuild passing\r\n \r\nbuild failing\r\n \r\ncoverity passed\r\n \r\noossss--ffuuzzzz ffuuzzzziinngg\r\nSource: https://libzip.org/\r\nhttps://libzip.org/\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"references": [
		"https://libzip.org/"
	],
	"report_names": [
		"libzip.org"
	],
	"threat_actors": [
		{
			"id": "9f101d9c-05ea-48b9-b6f1-168cd6d06d12",
			"created_at": "2023-01-06T13:46:39.396409Z",
			"updated_at": "2026-04-10T02:00:03.312816Z",
			"deleted_at": null,
			"main_name": "Earth Lusca",
			"aliases": [
				"CHROMIUM",
				"ControlX",
				"TAG-22",
				"BRONZE UNIVERSITY",
				"AQUATIC PANDA",
				"RedHotel",
				"Charcoal Typhoon",
				"Red Scylla",
				"Red Dev 10",
				"BountyGlad"
			],
			"source_name": "MISPGALAXY:Earth Lusca",
			"tools": [
				"RouterGod",
				"SprySOCKS",
				"ShadowPad",
				"POISONPLUG",
				"Barlaiy",
				"Spyder",
				"FunnySwitch"
			],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "18a7b52d-a1cd-43a3-8982-7324e3e676b7",
			"created_at": "2025-08-07T02:03:24.688416Z",
			"updated_at": "2026-04-10T02:00:03.734754Z",
			"deleted_at": null,
			"main_name": "BRONZE UNIVERSITY",
			"aliases": [
				"Aquatic Panda",
				"Aquatic Panda ",
				"CHROMIUM",
				"CHROMIUM ",
				"Charcoal Typhoon",
				"Charcoal Typhoon ",
				"Earth Lusca",
				"Earth Lusca ",
				"FISHMONGER ",
				"Red Dev 10",
				"Red Dev 10 ",
				"Red Scylla",
				"Red Scylla ",
				"RedHotel",
				"RedHotel ",
				"Tag-22",
				"Tag-22 "
			],
			"source_name": "Secureworks:BRONZE UNIVERSITY",
			"tools": [
				"Cobalt Strike",
				"Fishmaster",
				"FunnySwitch",
				"Spyder",
				"njRAT"
			],
			"source_id": "Secureworks",
			"reports": null
		},
		{
			"id": "6abcc917-035c-4e9b-a53f-eaee636749c3",
			"created_at": "2022-10-25T16:07:23.565337Z",
			"updated_at": "2026-04-10T02:00:04.668393Z",
			"deleted_at": null,
			"main_name": "Earth Lusca",
			"aliases": [
				"Bronze University",
				"Charcoal Typhoon",
				"Chromium",
				"G1006",
				"Red Dev 10",
				"Red Scylla"
			],
			"source_name": "ETDA:Earth Lusca",
			"tools": [
				"Agentemis",
				"AntSword",
				"BIOPASS",
				"BIOPASS RAT",
				"BadPotato",
				"Behinder",
				"BleDoor",
				"Cobalt Strike",
				"CobaltStrike",
				"Doraemon",
				"FRP",
				"Fast Reverse Proxy",
				"FunnySwitch",
				"HUC Port Banner Scanner",
				"KTLVdoor",
				"Mimikatz",
				"NBTscan",
				"POISONPLUG.SHADOW",
				"PipeMon",
				"RbDoor",
				"RibDoor",
				"RouterGod",
				"SAMRID",
				"ShadowPad Winnti",
				"SprySOCKS",
				"WinRAR",
				"Winnti",
				"XShellGhost",
				"cobeacon",
				"fscan",
				"lcx",
				"nbtscan"
			],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "d53593c3-2819-4af3-bf16-0c39edc64920",
			"created_at": "2022-10-27T08:27:13.212301Z",
			"updated_at": "2026-04-10T02:00:05.272802Z",
			"deleted_at": null,
			"main_name": "Earth Lusca",
			"aliases": [
				"Earth Lusca",
				"TAG-22",
				"Charcoal Typhoon",
				"CHROMIUM",
				"ControlX"
			],
			"source_name": "MITRE:Earth Lusca",
			"tools": [
				"Mimikatz",
				"PowerSploit",
				"Tasklist",
				"certutil",
				"Cobalt Strike",
				"Winnti for Linux",
				"Nltest",
				"NBTscan",
				"ShadowPad"
			],
			"source_id": "MITRE",
			"reports": null
		}
	],
	"ts_created_at": 1775434676,
	"ts_updated_at": 1775792208,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/3545d5d39d51143416ae4a8ed074103752d3b2e5.pdf",
		"text": "https://archive.orkl.eu/3545d5d39d51143416ae4a8ed074103752d3b2e5.txt",
		"img": "https://archive.orkl.eu/3545d5d39d51143416ae4a8ed074103752d3b2e5.jpg"
	}
}