| Key | Value |
|---|---|
| FileName | usr/lib/python3.9/site-packages/pypykatz/commons/winapi/local/__pycache__/ntdll.cpython-39.pyc |
| FileSize | 730 |
| MD5 | 26BBD9B20F88AEFCF51EF00139CE1540 |
| SHA-1 | 04353BF7239F5A33DCEED5C9E8CA5E2304DBED73 |
| SHA-256 | 70AED6A266DC96B017B7379A9F16D935660378AA1F8B4D190684A3A16BF493B3 |
| SSDEEP | 12:w743oahbW11QkJw7GEP4Jfswt90XX7eKcTUEKiczr4P1Q3FdqHBaOEkC:bC7QkJw7GEMkwt90XLeKc0iSs9Q3PqwZ |
| TLSH | T19101DD8ECEBDD4A7FAA4FAB899F6331E04A505F3515DC1071B18A2A70C4CEF008F5448 |
| tar:gname | root |
| tar:uname | root |
| hashlookup:parent-total | 1 |
| hashlookup:trust | 55 |
The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | http://mirror.math.princeton.edu/pub/blackarch/blackarch/os//x86_64//python-pypykatz-0.5.2-1-any.pkg.tar.zst |
| MD5 | EC86AC2D669B9DB6E239FB7926F0AA70 |
| SHA-1 | AD9ABB022DA9554DAE7C5F16748AD7A576F05E5C |
| SHA-256 | F4EFD55722983505BA5B58ACED1D6C4F08972537ACE01BC27E4263F1C51E67C0 |
| SSDEEP | 12288:+d8LAdDoGFIxCZOC3iRxoa5RlUKB1b6iercyMLmMzZ6HHF1DXxL:C8kbcH2iToKReierKN0zDd |
| TLSH | T19DB423B40FC697E10F598A7B23DD5D6A81E7D141134B92005FFC6522B2274CE94EBE2B |