| Key | Value |
|---|---|
| CRC32 | D24A9BD0 |
| FileName | pmap |
| FileSize | 13792 |
| MD5 | 86B2ACA42AA3DD8DE38AFBF4E955DC54 |
| OpSystemCode | {'MfgCode': '1006', 'OpSystemCode': '362', 'OpSystemName': 'TBD', 'OpSystemVersion': 'none'} |
| ProductCode | {'ApplicationType': 'Forensic Toolkit', 'Language': 'Multilanguage', 'MfgCode': '1722', 'OpSystemCode': '928', 'ProductCode': '187171', 'ProductName': 'Caine Linux 32-bit', 'ProductVersion': '2.5'} |
| SHA-1 | 174EDE6AE9FD5364F2E229D2DD21D6725059B99C |
| SHA-256 | 2EB6EBA5CE5013BB48BC262FD59403520C3C8A5C991E98C149A68806A7D109D4 |
| SSDEEP | 192:fy0yzXmXboy4U9Zd5HDcJehjeYlwuvjGyzDXymEtQaRlG4Tnvew:fy0kCb0M9DcJeMYlwuvjJ3Xy3RG4TWw |
| SpecialCode | |
| TLSH | T19152A507E527D972E161D33C0187D63F1639E020AF53EEE7B18C2DE54A6AA8C461FB12 |
| db | nsrl_modern_rds |
| insert-timestamp | 1646986895.0726323 |
| source | NSRL |
| hashlookup:parent-total | 1 |
| hashlookup:trust | 55 |
The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileSize | 229522 |
| MD5 | 410E017A7206141CCA8E4F15D11EC467 |
| PackageDescription | /proc file system utilities These are utilities to browse the /proc filesystem, which is not a real file system but a way for the kernel to provide information about the status of entries in its process table. (e.g. running, stopped or "zombie") Both command line and full screen utilities are provided. Ncurses is needed for the full screen utilities. More information can be found at procps website http://procps.sf.net/ . This package includes the following utilities: top, uptime, tload, free, vmstat, watch, skill, pmap, pgrep, slabtop and pwdx. |
| PackageMaintainer | Ubuntu Core Developers <ubuntu-devel-discuss@lists.ubuntu.com> |
| PackageName | procps |
| PackageSection | admin |
| PackageVersion | 1:3.2.8-1ubuntu4 |
| SHA-1 | FF5620B8B2A25C17EC2645043815FDC4338288DE |
| SHA-256 | AA8A7634B5159E01E03D58D9802F4EFEBA662DD543A3EECBE195C28E6ED5CCCC |