| Key | Value |
|---|---|
| FileName | usr/lib/python3.8/site-packages/plaso/formatters/__pycache__/winjob.cpython-38.pyc |
| FileSize | 2110 |
| MD5 | A28A4DEA41F125FCD97582323DB8BB5E |
| SHA-1 | 0097FBD9FDDF2C3FE863D07C7A2CC8D8BEA34863 |
| SHA-256 | BE688D673DA4B503CCFBE22733E32F8B8955DF5E9CE1F9AD2CC152FFCEF8A3E5 |
| SSDEEP | 48:Iq/Av3tcr1XZBrM/yl3KfJMdxIXzaWjuUeu0uCSmo9yHeA5G:IwA2i2aBUx42QKoCo |
| TLSH | T12E418747D5063865E8DBA5FEE1D541C0CEAC72B34BA06537FA8D08085F07A45E1A37D2 |
| tar:gname | root |
| tar:uname | root |
| hashlookup:parent-total | 1 |
| hashlookup:trust | 55 |
The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | http://mirror.math.princeton.edu/pub/blackarch/blackarch/os//aarch64//python-plaso-20200227-2-aarch64.pkg.tar.zst |
| MD5 | 9788CB98654D5C534FD80438BDED64EC |
| SHA-1 | DF837C1F10DF7CFBFB06C299AA26950206105579 |
| SHA-256 | 65A983054195C6267AD9F0607E2EAF0E5C75FB6E4C36ACF7D1078ACAE3C095ED |
| SSDEEP | 98304:nR0QKvnuIitsZH+h2U/0GkgEYlv7jgo29uF4f7PYf:nR0Q5Ii8H+h2H/gEYlDjgoFF44 |
| TLSH | T1BAE533EFFACE19F6E79E77537AC10378C0428CA5420E4164022977B69C6B985ED813B7 |