| Key | Value |
|---|---|
| FileName | ./usr/lib/python2.7/dist-packages/dff/modules/connector/ewf/_EWF.so |
| FileSize | 145840 |
| MD5 | 73E970E5ED6093ED37B14D82E9C50CF8 |
| SHA-1 | 066B1901F2CD66A49BD34B21B9251A9B75B40CB5 |
| SHA-256 | 4E324E7A6D2E14776C2AE76DE9F798F756B30FBA9B48BB2BD5865E6B1D546CFC |
| SSDEEP | 3072:vHRC3ZtkhIQjdQ6HmznmbvFSNb4O52QDUDubvUEjA69s:5C3ZtkhIQjdLbvcb478UDubvh |
| TLSH | T1FEE3190DFA8C9C63ED4AE73DDE8F8B17B103984D92D5D2D3792A835867835498B7E408 |
| hashlookup:parent-total | 1 |
| hashlookup:trust | 55 |
The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileSize | 4123730 |
| MD5 | 3C78CACF6035C35DDF8468AFA38960A8 |
| PackageDescription | Powerful, efficient and modular digital forensic framework DFF is a powerful open source tool with a flexible module system which will help you in your digital forensics works, including files recovery due to error or crash, evidence research and analysis, etc. . The modules allows you to examine the layout of disk images, devices and other media, to identify partitions, search for files using name, attributes, files magic etc. Files can also be analyzed or extracted using file analysis modules. . The source code is written in C++ and Python, allowing performances and great extensibility, and provides both graphical and command line interface. |
| PackageMaintainer | Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com> |
| PackageName | dff |
| PackageSection | admin |
| PackageVersion | 1.3.0+dfsg.1-4.1build2 |
| SHA-1 | BDE0ED7B55A6A642C7596FF512CFC789ED1B8531 |
| SHA-256 | B4C80386143E3021D8D9E09800B1CB9F324E410656B990D76F3B8D42393FBE9E |