| Key | Value |
|---|---|
| FileName | usr/lib/python2.7/site-packages/plaso/parsers/shared/shell_items.pyo |
| FileSize | 6150 |
| MD5 | B5322B333573ADC86156BE1FBB1C4C2C |
| SHA-1 | 0273CF5F2446C758410AF16AEC9C233EC1C4E6C9 |
| SHA-256 | AF7E7EF0E976881DEC9273A4BDE1D7FAD09435820D6888BEA605EFBB7E18B568 |
| SSDEEP | 96:pERxjfVDtywjSs2l+ldk2wvkBG4xVctaPsEKq1yGJOENL6dd9JNPKim:pEPjNEYG+ldWvkE4x1BKq7Oqa9/Tm |
| TLSH | T172C17781B2A951AFC2946775A9740AD38CB6F0B7E241674233ECE4743FDA3A5C03B380 |
| tar:gname | root |
| tar:uname | root |
| hashlookup:parent-total | 1 |
| hashlookup:trust | 55 |
The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | http://mirror.math.princeton.edu/pub/blackarch/blackarch/os//x86_64//python2-plaso-20191203-1-x86_64.pkg.tar.xz |
| MD5 | 861A80E96FC6B3EE2194D19059D64A09 |
| SHA-1 | E817155A72B68564076C130B41B9F91E0FD9A2B6 |
| SHA-256 | F6F4A7CB0CD22127EC5F7DB8C0440B0E61DD36D4A849E89F1C99A6E63C9923E8 |
| SSDEEP | 49152:1gtxN1TLXTaS46cmmCFV1D/YK2e/XB4xFvxeU:1yxN1TLBDB/YKdvBEvxeU |
| TLSH | T128853370F30976BEB9824AC239BF0532A6645212706F5D57E6A03DAAF51034B36C63FD |