| Key | Value |
|---|---|
| FileName | usr/lib/python2.7/site-packages/plaso/preprocessors/linux.pyo |
| FileSize | 10302 |
| MD5 | 9C2294026BA5C98A1DE19A4F024443EA |
| SHA-1 | 02F19A3BE673A7DBFBC462DE285ED2359ABA1706 |
| SHA-256 | 8120E49EDF6DA700413F05DAFB55B5A1188DF5C9188A5FBDC8314572081746F9 |
| SSDEEP | 192:O9op2eidMW9Ls3Ij4rGbIq5CdIvdfrwI1o4qojNv7S22Ic88B:OyNCLs4c60q5CKtrL1o4fxv7SZN88B |
| TLSH | T108222150AAEC8A93C590067090E456539E68F1BBA34053257BFCF03C6FC91A6D67BFC6 |
| tar:gname | root |
| tar:uname | root |
| hashlookup:parent-total | 1 |
| hashlookup:trust | 55 |
The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | http://mirror.math.princeton.edu/pub/blackarch/blackarch/os//x86_64//python2-plaso-20191203-1-x86_64.pkg.tar.xz |
| MD5 | 861A80E96FC6B3EE2194D19059D64A09 |
| SHA-1 | E817155A72B68564076C130B41B9F91E0FD9A2B6 |
| SHA-256 | F6F4A7CB0CD22127EC5F7DB8C0440B0E61DD36D4A849E89F1C99A6E63C9923E8 |
| SSDEEP | 49152:1gtxN1TLXTaS46cmmCFV1D/YK2e/XB4xFvxeU:1yxN1TLBDB/YKdvBEvxeU |
| TLSH | T128853370F30976BEB9824AC239BF0532A6645212706F5D57E6A03DAAF51034B36C63FD |