| Key | Value |
|---|---|
| FileName | usr/lib/python3.8/site-packages/plaso/storage/__pycache__/file_interface.cpython-38.pyc |
| FileSize | 34931 |
| MD5 | 00CDF272F7D910F31F107B34856CD40C |
| SHA-1 | 00A1F3D2ABE91C738484D5714ADCE542AA21D671 |
| SHA-256 | 91FF446AC5CBD705F700FEB5B9C284684B5A07CEDB44B6C21AB12549F151D798 |
| SSDEEP | 384:HtVepgzgV4IbeuyIB5+xPOGhcPV+KkVp8pGVr6RkiZuhTKUG4SPF4Bgu9mz1H1fR:HtU6zNIyuy2Act+jp8p8rSKHSk9WH1fR |
| TLSH | T1A8F230D556411E33FD91F7BCA2C8A2D0DB30C577A22E4221345EC86EFF8E49887A15E9 |
| tar:gname | root |
| tar:uname | root |
| hashlookup:parent-total | 1 |
| hashlookup:trust | 55 |
The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | http://mirror.math.princeton.edu/pub/blackarch/blackarch/os//aarch64//python-plaso-20200227-2-aarch64.pkg.tar.zst |
| MD5 | 9788CB98654D5C534FD80438BDED64EC |
| SHA-1 | DF837C1F10DF7CFBFB06C299AA26950206105579 |
| SHA-256 | 65A983054195C6267AD9F0607E2EAF0E5C75FB6E4C36ACF7D1078ACAE3C095ED |
| SSDEEP | 98304:nR0QKvnuIitsZH+h2U/0GkgEYlv7jgo29uF4f7PYf:nR0Q5Ii8H+h2H/gEYlDjgoFF44 |
| TLSH | T1BAE533EFFACE19F6E79E77537AC10378C0428CA5420E4164022977B69C6B985ED813B7 |