Key | Value |
---|---|
MD5 | 4BDF26AEA1A173286544217560B85974 |
PackageArch | noarch |
PackageDescription | Python tools to analyze security characteristics of MS Office and OLE files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), for Malware Analysis and Incident Response (DFIR) |
PackageName | python38-oletools |
PackageRelease | 10.12 |
PackageVersion | 0.60 |
SHA-1 | 10D6E9720604ACC3E766E284A06DFEB8EDBCA964 |
SHA-256 | A95E3373E1BBA08B1AE6574D2D5C4B57A04A8AE39B4596154D9A3A12B7A54C67 |
hashlookup:children-total | 208 |
hashlookup:trust | 50 |
The searched file hash includes 208 children files known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
FileName | ./usr/lib/python3.8/site-packages/oletools/thirdparty/xxxswf/__pycache__/__init__.cpython-38.pyc |
FileSize | 162 |
MD5 | 5AF75EE23EA9DE4DBC73E520EB7BB8A1 |
SHA-1 | 0167432688077BE17CF4E786ED1573294C0165F7 |
SHA-256 | A90D6F369DF69920FD35DC40CFE521AEE64E7B16DD735375C91D222D88C4657E |
SSDEEP | 3:UW+Lbl/Uleh/wZWeiKQhG9YAKWMmoWrzoW45LDh6KMRRkcTit:X+vt8eh/wcG9YvLorK5LDh6XRD6 |
TLSH | T11EC08C00C62086D3E96EFD362000931840C2DCB2A697409B3A0452452C092200C22500 |
Key | Value |
---|---|
FileName | ./usr/lib/python3.6/site-packages/oletools/msodde.py |
FileSize | 45421 |
MD5 | B7ADBEC61823ECDB1BF566ECEB5F566A |
SHA-1 | 0346E791606981401051E87BA28B08FEE31EADA6 |
SHA-256 | 9D46BDE57EC6647989D1399DD48B7237E8BD262F80E237A0AA30729D2F48ED1A |
SSDEEP | 768:wNqT8cAR/R+AieLyQEbYSA1HFtRRywwPjXFMopxjecBZM5a40EBRCjVdVFJRj2jN:w6/ARlqgtRRywwPjXhBZM5ajkCZTRj4N |
TLSH | T1BC131B229DE620190A71C249AD17EB52F708C12BCE554613FB6CA35C3F7971492FEE2A |
Key | Value |
---|---|
FileName | ./usr/lib/python3.6/site-packages/oletools/oleid.py |
FileSize | 23657 |
MD5 | 086A1DDA963B2F528BC15949929FE716 |
SHA-1 | 0461804BD4D902E8C4D13473B02F739E48B71BC0 |
SHA-256 | F6F0A5634188308787CA6C668257134FF52FEFE0F180511D47B6D78C55272EB3 |
SSDEEP | 384:SWzrMNtNqjFW/FkVXB1hdHhwW5vANl0LZaK54owDgAXFeXxHmbmALMWdMrmHIMQR:SWzUq5W/Fkb1hxhwW5I4EoHAXXmAL9vE |
TLSH | T155B2C6628D84160B0772E86A0966E585F719831B571624523EBCC2543F30BA6C7FFFAD |
Key | Value |
---|---|
FileName | ./usr/lib/python3.6/site-packages/oletools/doc/Install.html |
FileSize | 6346 |
MD5 | 34242FD9BA3EE4A621E48D0F59C32532 |
SHA-1 | 05D6AED54E40237E421E7D55A1D21F40B88748AA |
SHA-256 | 974CC0FA6F08BA51C70908958F3F9BE3DA80DADAF5D711865A9D8D5BC94B8B12 |
SSDEEP | 96:YbPBjBgxAZZ741CfmZ9eMVV9exzE/iRL9o9exzE9cCNGJ+7uCTc9l+7IaQqdU5:oPxL7qBZgMVVgAiLagxCwM97DQqd2 |
TLSH | T1A0D1A61BE2E45A762BD043BCD88B3279775F409E762318D434AF9707A701E27492A3D7 |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | ./usr/lib/python3.6/site-packages/oletools/common/log_helper/__init__.py |
FileSize | 109 |
MD5 | 19DD3C521288E578D3DBFC75FC07E593 |
RDS:package_id | 294806 |
SHA-1 | 0841C82B95C6F71E6E088CF5CF03065045B2DCAF |
SHA-256 | 36165E37ED5137EC561D815BFA27E15001C20FA1AEBC34B8310156E6D226AC3D |
SSDEEP | 3:1LYBmTAa/FEMy7tormAy4voi6gDFo+CrN1:1L6g47to+WDyj |
TLSH | T150B0113CCE8F208008C08083028CB00FC288C82CFBB8C0232B0E838B20B080A2330C08 |
insert-timestamp | 1696437345.3382552 |
source | db.sqlite |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | usr/lib/python3.12/site-packages/oletools-0.60.2-py3.12.egg-info/top_level.txt |
FileSize | 9 |
MD5 | E1328C49604367F16736F85DCD058326 |
RDS:package_id | 294806 |
SHA-1 | 084414AC8CDF7742AF82A7E2E3348A7C2503B7C8 |
SHA-256 | 6D2A30D7D019799DFFA4F33BFA78CD492E6D07D2E961D7E1325CCB7BCB83A2B4 |
SSDEEP | 3:9A:y |
TLSH | |
insert-timestamp | 1696437815.8937707 |
source | db.sqlite |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | ./usr/lib/python3.8/site-packages/oletools/__pycache__/pyxswf.cpython-38.pyc |
FileSize | 3592 |
MD5 | 4F693262F4E24E23915934999FC71B33 |
SHA-1 | 0A3AEBD8C4C76783DDDC74C9A2FD3FC9CDB505B7 |
SHA-256 | A8E7B6F5BAF120A4DE981C72CA06CF6B3DFD5BD9E5A3DF8DD0152B7D9CCA8F5B |
SSDEEP | 96:lT+V45dE4wXKS/rgSAPAAFsAjVBV+pJY/w/OIIkD:lKV2mXKwyA4skJiIg |
TLSH | T12771D7978FC36230BE8258B0FAA706D8A368414A727154F1DA49C31E79052192B779D4 |
Key | Value |
---|---|
FileName | ./usr/lib/python3.6/site-packages/oletools/rtfobj.py |
FileSize | 51181 |
MD5 | A44B77C436BFA23B96776AC5132BC0FD |
SHA-1 | 0A953F0BC6F4AA3B0D75656BFB5BC623227BD6E4 |
SHA-256 | 70357A00A64352D82E0C2BD494F5FB335674DE6E6B1F8B67E4A9722A5B9C8659 |
SSDEEP | 768:PK+lqhj7yV10hGldj9TtbBPJUE+G6JK+u1XskkhfXYbs:PfqhXyV1gG3ZtbBPEKFskkFXYo |
TLSH | T1B933D8219D4E561602B385DD58A99A46E31DD30B215670137ABCEE402F3CB30A6FADFF |
Key | Value |
---|---|
FileName | ./usr/lib/python3.6/site-packages/oletools/ooxml.py |
FileSize | 28819 |
MD5 | A8F9EB89BFBBA757FEEC87A66022D453 |
SHA-1 | 0ABF43B19CBF33626ACD76EC290C5E3728F1C15E |
SHA-256 | FA803913F78FEA2B972FC01E03E58827B9A4DCED581B7AEA1E8E05EE31312175 |
SSDEEP | 384:RNtNqFNJzO+ieKhxGxFRAc+Wl400Mgk8e/SJGANjEUmouTDzl:PqFNJzO/eKhxQRABWl5We/SYMyRTDZ |
TLSH | T1D9D2A5679D5A61610772C46DAE83F012F30942676D5B6223B8ECE2183FB161181FEFEC |
Key | Value |
---|---|
CRC32 | 7039A23D |
FileName | usr/lib/python3.12/site-packages/oletools/doc/olemap2.png |
FileSize | 67563 |
MD5 | AA5DEA1E23FBF5ED354C5FD4A47D5D9D |
OpSystemCode | 362 |
ProductCode | 163709 |
RDS:package_id | 294806 |
SHA-1 | 0C2ACF97CD6E74B5BB210D366B3BD3864D8A890B |
SHA-256 | 820690E6CCE5EC65D3638F3F942AF27D9841BD37FE10A31C48505C055B94B5E4 |
SSDEEP | 1536:9jlWM0XDD0/lhdfg/jgLT10UNLctyz56CP6/HWIHrmmhcH0Y:9jlWMmvolhwjOT1GcR6FLuUY |
SpecialCode | |
TLSH | T17063E0FADD8CEE505BE178E1D81C7BE79D2A1A75F39F226A1962C0BD09D1C082349F14 |
db | nsrl_modern_rds |
insert-timestamp | 1696437344.7439036 |
source | db.sqlite |
tar:gname | root |
tar:uname | root |