| Key | Value |
|---|---|
| FileSize | 56388 |
| MD5 | 5322B93AF8902F94A9BFCF50BEEE3E5D |
| PackageDescription | Portable Executable (PE) parsing module for Python pefile is a Python module to read and work with Portable Executable (PE) files. Most of the information in the PE header is accessible, as well as all the sections, section information and data. . All the basic PE file structures are available with their default names as attributes of the returned instance. . Processed elements such as the import table are made available with lowercase names, to differentiate them from the upper case basic structure names. . pefile has been tested against the limits of valid PE headers; that is, Windows malware. Lots of packed malware attempt to abuse the format beyond its standard use. . Some of the tasks that pefile makes possible are: * Modifying and writing back to the PE image * Header inspection * Section analysis * Retrieving data * Warnings for suspicious and malformed values * Packer detection with PEiD signatures * PEiD signature generation |
| PackageMaintainer | Hilko Bengen <bengen@debian.org> |
| PackageName | python3-pefile |
| PackageSection | python |
| PackageVersion | 2019.4.18-1.1 |
| SHA-1 | 083D134A746DDF47A2C37E5DC288DBF0A192BAA2 |
| SHA-256 | D8FB32BE8275F88EBBC54BEE310E4719D4AED9615B68050C1C0B5CCD41BD8135 |
| hashlookup:children-total | 14 |
| hashlookup:trust | 50 |
The searched file hash includes 14 children files known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | ./usr/lib/python3/dist-packages/ordlookup/__init__.py |
| FileSize | 954 |
| MD5 | E17D74737C1E24848F9CFB08D55282B8 |
| RDS:package_id | 294806 |
| SHA-1 | 89793AA2608E568EAE3D2F61B994DB2A6655C306 |
| SHA-256 | ACF7D434337D6BF2CA6FCBEE1B85C3D8741EDEB76006F1085A2450738855FFCF |
| SSDEEP | 24:1R2mrHJF6zQhU8mFHWy+/iKJ5OwbgAs2vrl6LPpZYieoY7gn:P9rHizQYFHWLVJ5OCPs2J6DpZU1Mn |
| TLSH | T13611D4A92C967C43831181D918CBB2015B5D26373A1A293AFDDD61657F40F29D4B076A |
| insert-timestamp | 1696438392.7312539 |
| source | db.sqlite |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/python3-pefile/changelog.Debian.gz |
| FileSize | 1264 |
| MD5 | A381BEC83B44FD1CCC995AD78CF90102 |
| SHA-1 | 37882CDCE3CE6EC462C2D8AACBB58E55FBC6392C |
| SHA-256 | 17C0DE7012E79D15C86A46C432EF02B5D5B9C0C549884D2D05595DABB4DB1947 |
| SSDEEP | 24:XcSG1BGJcQM08AvqU6wT+UWeOYJWRbZeuYpbYFd2+F+QMXuCqn:Xc71QJcQM6vqZwT+UEY22Kz2+ieCqn |
| TLSH | T19621E7875F280017DFC15192E2E2609FCB280EA7A6AB4D383F4D0327A89207A55A1775 |
| Key | Value |
|---|---|
| CRC32 | DA71A17E |
| FileName | ./usr/lib/python3/dist-packages/ordlookup/oleaut32.py |
| FileSize | 10877 |
| MD5 | ABDF2B55B1AA7AA9292EA64272D99491 |
| OpSystemCode | 362 |
| ProductCode | 163709 |
| RDS:package_id | 294806 |
| SHA-1 | 3D3FE51AEBFC34A360CEF937513FD435081769EF |
| SHA-256 | 554457CB6728CF39F1323427E7B63DFBBA842B68F85C76F9F8ED744C05F7FDBC |
| SSDEEP | 192:nDtorZkEn+6tga3Ghwp/Lw+ARklyAfEOPA/sJn4POOtyOlTp6ecwQvyaAmMpBkLh:nRo6m+6tga3GhwRLw+ARkAfSxJnLOrl4 |
| SpecialCode | |
| TLSH | T13322ACB9A80E48C84F6DE9901F5CD58A5811AB77CC30B409BA89DC8D4F4C9DC66FD1FA |
| db | nsrl_modern_rds |
| insert-timestamp | 1696438392.6854737 |
| source | db.sqlite |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | ./usr/lib/python3/dist-packages/pefile.py |
| FileSize | 230141 |
| MD5 | A0E95542585D27BBC78F83C34F705C8D |
| RDS:package_id | 222721 |
| SHA-1 | 2B7DB28D2C7676F4C06E8A32A0AEE080EA80A802 |
| SHA-256 | B6230D57B9AE594D919580F66C7A28CA26BBC227B4D88D2E96C084BBFACADDA7 |
| SSDEEP | 6144:SCWxp4zVvKbzA6OMLgitFEuAoV/DYiIglKb6rDEH:SCq4zpKtD+Nx |
| TLSH | T1EB24D623B92126A29293986E48DBE0035765744B059C643CBDFC81542FA85BCDBF3FF9 |
| insert-timestamp | 1727040926.379533 |
| source | RDS.db |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| CRC32 | F2621C42 |
| FileName | snap-hashlookup-import/lib/python3.6/site-packages/pefile-2022.5.30.dist-info/top_level.txt |
| FileSize | 25 |
| MD5 | DC5F0DFE2194FB970D0A6A91B0F9B170 |
| OpSystemCode | 362 |
| ProductCode | 163709 |
| RDS:package_id | 304063 |
| SHA-1 | A7B4A27413A312D8B74FCDD82954951E251F87F5 |
| SHA-256 | 7BF125792B9950E40A7171C92ECDAC49E1A4C46E0E6608542DC09CFEFEA441BA |
| SHA-512 | B90028F6A4058220677261D933690FFF7630501EBF2ACDD3234243B280EA973DD7BD281D5A7D515BC7A7009C76B2A57DC74100EBD35C5EBEC1DE5E6B5280938A |
| SSDEEP | 3:sKAkAQR7n:sKGkn |
| SpecialCode | |
| TLSH | |
| db | nsrl_modern_rds |
| insert-timestamp | 1762443985.4726129 |
| mimetype | text/plain |
| source | snap:SC6TII5ojBXqoHT62SI2u4uFnwbHDzMb_2 |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| CRC32 | 32D70693 |
| FileName | ./usr/share/gcc-4.6/python/libstdcxx/__init__.py |
| FileSize | 1 |
| MD5 | 68B329DA9893E34099C7D8AD5CB9C940 |
| OpSystemCode | 362 |
| ProductCode | 623 |
| RDS:package_id | 304063 |
| SHA-1 | ADC83B19E793491B1C6EA0FD8B46CD9F32E592FC |
| SHA-256 | 01BA4719C80B6FE911B091A7C05124B64EEECE964E09C058EF8F9805DACA546B |
| SHA-512 | BE688838CA8686E5C90689BF2AB585CEF1137C999B48C70B92F67A5C34DC15697B5D11C982ED6D71BE1E1E7F7B4E0733884AA97C3F7A339A8ED03577CF74BE09 |
| SSDEEP | 3:v:v |
| SpecialCode | |
| TLSH | |
| db | nsrl_legacy |
| insert-timestamp | 1763484313.4919622 |
| mimetype | application/octet-stream |
| nsrl-sha256 | rds241-sha256.zip |
| source | snap:cOhcnGRuLnrE191PeBJfVqxy4SchgsIV_2 |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/python3-pefile/README.gz |
| FileSize | 2605 |
| MD5 | 7A31D9FC524B537F66C8C64FA706B268 |
| SHA-1 | C2AB948BAEF606F6E3A83E9718D6ACEFDF12AA72 |
| SHA-256 | 77BE1CE84ED668997FF45EB124DF15599FB4E67A7917518F76C79D6B1B3B435A |
| SSDEEP | 48:XZhZ8oU+2J1/mzs/dHBDxb4CC3eO/I7bDGjRa83e9CVhEGYKSiUduDCzDSqdPsl:pAK2JysFhDOCG/k6aQe9viUduDHsPE |
| TLSH | T1BB513C0AA451DDED5FBCAF909C8B15BCB303083E8316A9C858E0DEC8F3951D822E478D |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/python3-pefile/README.Debian |
| FileSize | 330 |
| MD5 | 21B045F3BC1F1E9BBBA0DDCF7C546A3F |
| RDS:package_id | 304063 |
| SHA-1 | 6D116E829F3A55A697B2FCAC7C72B4F8608C8FCD |
| SHA-256 | 4CBAE2CF68D616C86C9163EFAD683D2EA1D5A19B2BEDDCD62CA883116CCC80DA |
| SSDEEP | 6:fxFQFqm1cLFyZLkW0gKgouuDA3FFv2cmRrOhAgs4CAANpGz4arP8dwhd3Y6:JFFyZLfbBo30F8cmFOq4ZZhdT |
| TLSH | T1E4E0EBCE3E913A9288C3F20230FF2004CF2EE42725438094E81ACA08BF44806B30F9C4 |
| insert-timestamp | 1751766800.6553576 |
| source | RDS_2025.03.1_android.db |
| Key | Value |
|---|---|
| CRC32 | D5E04E34 |
| FileName | ./usr/lib/python3/dist-packages/ordlookup/ws2_32.py |
| FileSize | 3266 |
| MD5 | 54EC359B34DEA6DD37B2DAA78A8E3381 |
| OpSystemCode | 362 |
| ProductCode | 163709 |
| RDS:package_id | 294806 |
| SHA-1 | 255BA3DFD1D9DAD5998118F4E3103720755725AE |
| SHA-256 | C3FB9BAEAC37F472CECC61F1F7946D7E135CB40E8DE152C429AE6316E761D74C |
| SSDEEP | 96:rU5xJSfm5iYc5Hf8zeHv6dcPm9edoCrnzyy:eSfmJc53gcPm9SoCrney |
| SpecialCode | |
| TLSH | T10A61273845458BA81FCDBF476C5E544E4804163F9F227866FB9A098A4FAEC2C71BD623 |
| db | nsrl_modern_rds |
| insert-timestamp | 1696438392.5768983 |
| source | db.sqlite |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | ./usr/lib/python3/dist-packages/pefile-2019.4.18.egg-info/PKG-INFO |
| FileSize | 1446 |
| MD5 | E65EF1C2CB27F95ACD3B75E312517AEB |
| SHA-1 | C7BC77DADA3FF8A4E6A4FD3ABCBFD5D72D323112 |
| SHA-256 | 67065E2E1B0CC419E96CF3E4FDE0FE51DD085E7BDD08678E60DEFC215723DB8E |
| SSDEEP | 24:DHEIcdVE5qp2XGbWYoGw/PX++fHFLjCXgKRzPP4gQ6kQIF3A13g:DHEIcYI2XthGw/PXFdAnb4/QIO13g |
| TLSH | T1EE3156C774C07DE54DDB89DDE10CC7559C5AC642CA9E98A830BE000DAF06922D1BE5BD |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/python3-pefile/copyright |
| FileSize | 2638 |
| MD5 | 9BF5D30A716281317ED8EF6A6FF8A753 |
| RDS:package_id | 304063 |
| SHA-1 | BA859ABDA699BF30D5C202DC9217EFC0D37D49A4 |
| SHA-256 | CABE2CD6C09C2F32633F11B2E561B15542DF469EA917F06D00717855DE3D4607 |
| SSDEEP | 48:olOYrYJ0rYJ1DP4a2r43lSrj32sBEtIz3tolHZeyoyvHqonxtn:o4YrYJ0rYJ1T53orj3NlKl5zrdjn |
| TLSH | T1C151978B214087B74AC013803956A9C9F25B903E3B7A9405286EA345DF1B92F55F7494 |
| insert-timestamp | 1751766800.6572556 |
| source | RDS_2025.03.1_android.db |
| Key | Value |
|---|---|
| CRC32 | 00000000 |
| FileName | ./usr/src/gcc-10/debian/rules.parameters |
| FileSize | 0 |
| MD5 | D41D8CD98F00B204E9800998ECF8427E |
| OpSystemCode | 362 |
| ProductCode | 15758 |
| RDS:package_id | 304062 |
| SHA-1 | DA39A3EE5E6B4B0D3255BFEF95601890AFD80709 |
| SHA-256 | E3B0C44298FC1C149AFBF4C8996FB92427AE41E4649B934CA495991B7852B855 |
| SHA-512 | CF83E1357EEFB8BDF1542850D66D8007D620E4050B5715DC83F4A921D36CE9CE47D0D13C5D85F2B0FF8318D2877EEC2F63B931BD47417A81A538327AF927DA3E |
| SSDEEP | 3:: |
| SpecialCode | |
| TLSH | |
| db | nsrl_legacy |
| insert-timestamp | 1763484319.2628374 |
| mimetype | inode/x-empty |
| source | snap:cOhcnGRuLnrE191PeBJfVqxy4SchgsIV_2 |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | ./usr/lib/python3/dist-packages/peutils.py |
| FileSize | 18205 |
| MD5 | 2C9C9FF6958CFB1422138CB1DDC82CD2 |
| RDS:package_id | 222721 |
| SHA-1 | 7D522B2BE1412A9AC40569C05EFA522BC5E36542 |
| SHA-256 | 312BB8B4F26EBA661BA2544BD8A1FA5714ECED618C712A0F2D6133A200F4F33A |
| SSDEEP | 192:7w7kH4a3TEuiQHoMT11Tuo2kcg2ojCOy2oh7zlZqQjwMiuueYzJgHvG8zYgUgK:7cC4a3guiDMP6rkb2ojy2opjP7Ydazsr |
| TLSH | T1C182336EF504222D829354B69C8B80A56F26B8EB11D0143CBDFDD2583F5873497F1AFA |
| insert-timestamp | 1727040923.5729363 |
| source | RDS.db |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/python3-pefile/examples/pefile-match |
| FileSize | 1195 |
| MD5 | 8F2F1BDB1399E8C90C9BCD9523DBE515 |
| RDS:package_id | 304063 |
| SHA-1 | 81118A190DC70795E69BD9FD2DF08D6225A66C8F |
| SHA-256 | D57A634F512C64FAA82B97E6D2511436B7990995F32A9135BAB3E569B1DF5465 |
| SSDEEP | 12:HuV2FyaAw5jcjbs1KXN4EkKIlK2D4lmKio6te04973VotodPzQGNtfIoAXHC2aQm:OqLlcUkXNIXsLihefZotUvf0aqzNyYij |
| TLSH | T16F217BA78C093410CFC78B5DC986D8D2260ABCF749157038F8DC4555DF88D595BECEA8 |
| insert-timestamp | 1751766800.6533427 |
| source | RDS_2025.03.1_android.db |