Report - theaviary.me/Zip-Bomb/Zip%20Bomb%20Files/42-old.zip

Report Overview

Visited public
2025-03-08 14:34:54
Tags
URL
theaviary.me/Zip-Bomb/Zip%20Bomb%20Files/42-old.zip
Finishing URL
about:privatebrowsing
IP / ASN
185.199.109.153
#54113 FASTLY
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

0

Threat Detection Systems

18

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
theaviary.me	unknown	2021-04-06	2021-04-06	2024-03-17	519 B	43 kB	185.199.108.153

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
theaviary.me/Zip-Bomb/Zip%20Bomb%20Files/42-old.zip
IP
185.199.108.153
ASN
#54113 FASTLY

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
42 kB (42374 bytes)
Hash
d9050d6ba1e86a0decc9262dd8f3038d
1c403526e3a858775c88d113df46ecea85269964
db6981082063dbb4bac89d27c41fbeb86d9e4a97b36661c0945b77a6b9bb0948

Archive (16)

Filename

Md5

File type

lib 3.zip

0a76bd3e26768bba68aca3d210997069

Zip archive data, at least v2.0 to extract, compression method=deflate

lib 1.zip

0a76bd3e26768bba68aca3d210997069

Zip archive data, at least v2.0 to extract, compression method=deflate

lib 2.zip

0a76bd3e26768bba68aca3d210997069

Zip archive data, at least v2.0 to extract, compression method=deflate

lib 0.zip

0a76bd3e26768bba68aca3d210997069

Zip archive data, at least v2.0 to extract, compression method=deflate

lib 4.zip

0a76bd3e26768bba68aca3d210997069

Zip archive data, at least v2.0 to extract, compression method=deflate

lib 5.zip

0a76bd3e26768bba68aca3d210997069

Zip archive data, at least v2.0 to extract, compression method=deflate

lib 6.zip

0a76bd3e26768bba68aca3d210997069

Zip archive data, at least v2.0 to extract, compression method=deflate

lib 7.zip

0a76bd3e26768bba68aca3d210997069

Zip archive data, at least v2.0 to extract, compression method=deflate

lib 8.zip

0a76bd3e26768bba68aca3d210997069

Zip archive data, at least v2.0 to extract, compression method=deflate

lib 9.zip

0a76bd3e26768bba68aca3d210997069

Zip archive data, at least v2.0 to extract, compression method=deflate

lib a.zip

0a76bd3e26768bba68aca3d210997069

Zip archive data, at least v2.0 to extract, compression method=deflate

lib b.zip

0a76bd3e26768bba68aca3d210997069

Zip archive data, at least v2.0 to extract, compression method=deflate

lib c.zip

0a76bd3e26768bba68aca3d210997069

Zip archive data, at least v2.0 to extract, compression method=deflate

lib d.zip

0a76bd3e26768bba68aca3d210997069

Zip archive data, at least v2.0 to extract, compression method=deflate

lib e.zip

0a76bd3e26768bba68aca3d210997069

Zip archive data, at least v2.0 to extract, compression method=deflate

lib f.zip

0a76bd3e26768bba68aca3d210997069

Zip archive data, at least v2.0 to extract, compression method=deflate

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 37/60
ClamAV	malicious	Win.Trojan.ArcBomb-2

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

theaviary.me/Zip-Bomb/Zip%20Bomb%20Files/42-old.zip

185.199.108.153

200 OK

42 kB

URL User Request GET
theaviary.me/Zip-Bomb/Zip%20Bomb%20Files/42-old.zip
IP
185.199.108.153:443
ASN
#54113 FASTLY

Certificate
IssuerLet's Encrypt
Subjecttheaviary.me
Fingerprint30:08:A4:2B:C6:73:15:D3:B1:14:5E:74:AB:1A:26:5B:23:F4:2F:FB
ValiditySun, 02 Mar 2025 14:50:07 GMT - Sat, 31 May 2025 14:50:06 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
42 kB (42374 bytes)
Hash
d9050d6ba1e86a0decc9262dd8f3038d
1c403526e3a858775c88d113df46ecea85269964
db6981082063dbb4bac89d27c41fbeb86d9e4a97b36661c0945b77a6b9bb0948

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 37/60
ClamAV	malicious	Win.Trojan.ArcBomb-2

HTTP Headers

GET /Zip-Bomb/Zip%20Bomb%20Files/42-old.zip HTTP/1.1
Host: theaviary.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: GitHub.com
content-type: application/zip
x-origin-cache: HIT
last-modified: Mon, 12 Feb 2024 03:47:44 GMT
access-control-allow-origin: *
etag: "65c994e0-a586"
expires: Sat, 08 Mar 2025 14:44:34 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: BF92:AAAB1:3F1B016:3F9DD72:67CC5578
accept-ranges: bytes
age: 0
date: Sat, 08 Mar 2025 14:34:34 GMT
via: 1.1 varnish
x-served-by: cache-osl6524-OSL
x-cache: MISS
x-cache-hits: 0
x-timer: S1741444475.598869,VS0,VE117
vary: Accept-Encoding
x-fastly-request-id: 248fad2d73880e89511eca070ad0a779398cc6ec
content-length: 42374
X-Firefox-Spdy: h2