Key | Value |
---|---|
FileName | usr/lib/python3.9/site-packages/plaso/containers/__pycache__/windows_events.cpython-39.opt-1.pyc |
FileSize | 3099 |
MD5 | 442287A6BB43BD5573F699FFB772A205 |
SHA-1 | 00F2A66B83BE3EF6BB3B234E70D6C1C555340E5C |
SHA-256 | 6EB20383AADF37236A80BFBFB0F5721AB080217AFAA3593AAB692D6A310EAA74 |
SSDEEP | 96:2/glPsxjAqS7YOIFv0LphdT9STlq4y0aFD:2WSaTIMhdgxg |
TLSH | T12B5175840D912A73FE59E3BCC7091B480242B8D7022B612D31DCCDAA2F5D9D795B26CD |
tar:gname | root |
tar:uname | root |
hashlookup:parent-total | 1 |
hashlookup:trust | 55 |
The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
FileName | http://mirror.math.princeton.edu/pub/blackarch/blackarch/os//x86_64//python-plaso-20200227-2-x86_64.pkg.tar.zst |
MD5 | 094390A1BE742CAF7720A8043256CB46 |
SHA-1 | AB6F00F8B1FF064728DF975B2BF03CB4396891D4 |
SHA-256 | E73B9329D42321F5A736F357B904DBCF431DD15364D2D7F450479515CC0E4F69 |
SSDEEP | 49152:jw4OsLlsahS7lLFx4Sg6AnfcM+UIMzvMmatmQ:jHdxLhMN74Sg6MfV3at/ |
TLSH | T1509533BC70B07ED694B73EC9C3653AE271C7F1F692A7E41B7D2461246039C292BB4A11 |