Key | Value |
---|---|
FileSize | 11454480 |
MD5 | FDC878552A0212845AEE55D0C892B3F0 |
PackageDescription | Powerful, efficient and modular digital forensic framework DFF is a simple but powerful open source tool with a flexible module system which will help you in your digital forensics works, including files recovery due to error or crash, evidence research and analysis, etc. The source code is written in C++ and Python, allowing performances and great extensibility. |
PackageMaintainer | Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com> |
PackageName | dff |
PackageSection | admin |
PackageVersion | 1.2.0+dfsg.1-1 |
SHA-1 | 51B29BCF31025ED0A151D2BBE80C9160934262DB |
SHA-256 | 574219D995E600702DD38FDA29E912029E69AD4D396E34F449C1A39ABA1F29B1 |
hashlookup:children-total | 357 |
hashlookup:trust | 50 |
The searched file hash includes 357 children files known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
CRC32 | 0520AA57 |
FileName | find.py |
FileSize | 14772 |
MD5 | 4A11D45F23AB4DA2209ED9ED4A4218B3 |
OpSystemCode | 362 |
ProductCode | 13792 |
SHA-1 | 020BC371BB99093DD21668828745C82ACB38F0D4 |
SHA-256 | E64B9388B0F486FB39AA5579F7FCF398467537A1DBCDA690B571C180A8EA7388 |
SSDEEP | 96:tEumemcIRVPs8CBP6XInnGxDb83ChEXRF3ydAgH5CA7U3q1odn586ZoYBV1+Debi:tEuLmsvPfSf3hEBNym1dnvi |
SpecialCode | |
TLSH | T1EE62412894511871EA13885DF9EAD007273ABE4399096438F9FD96A57F06938C1F4FFC |
db | nsrl_modern_rds |
insert-timestamp | 1646978603.316221 |
source | NSRL |
Key | Value |
---|---|
CRC32 | 6E576D29 |
FileName | __init__.py |
FileSize | 686 |
MD5 | 7CF8DA753B12E8BD45D539DDC8C4CF1B |
OpSystemCode | 362 |
ProductCode | 13792 |
SHA-1 | 024F7274A9CCA11D2E9EF4283177D9AB7F1F0777 |
SHA-256 | 1DFDDCF705789B3B3A1EF61A2A0FA5B565F3DED5F3EF1927266A0B3DA88E1675 |
SSDEEP | 12:0dE3fWEs/viYKaed0HywOXS8Ct9YaRJEoSsJVUYY:6R/niLp0H8XSvh1SsJmR |
SpecialCode | |
TLSH | T1AE01F439FB20C53314808BC6FB468FC5E24E4A2067DCFC161459C0554248E2D61AE5ED |
db | nsrl_modern_rds |
insert-timestamp | 1646978701.0819125 |
source | NSRL |
Key | Value |
---|---|
FileName | ./usr/lib/python2.7/dist-packages/dff/modules/connector/fuse/_FUSE.so |
FileSize | 74860 |
MD5 | A632DC5BF8E1BAB5E036D76FE5649F7D |
SHA-1 | 031B4B291C42E119619C4B8152E6D8416CD215C0 |
SHA-256 | 2A1090DE90C1311F9D69556DCA7F372B7D6AB78327432F0A575EE80BBF5336AF |
SSDEEP | 1536:qZGUtDxWnlZXI2zaE+MmlWLJryUkU6abcp:S9tkldBaE+MOWLJ5kU3cp |
TLSH | T1D2730B02771E8803D2FB1FB4507F5B92C30EC9C49AA6648B605DA71C75B6E3A4E06BDD |
Key | Value |
---|---|
FileName | ./usr/share/pyshared/dff/api/search/libsearch.py |
FileSize | 11009 |
MD5 | A00F64F6D8343E425D2AAE3D88639039 |
SHA-1 | 04C6B1CA90152F33ECE2AA450A81714692A4210B |
SHA-256 | 429BAD015F739E93AD9F2924A0ECE4C42EEE84BCA33421536B46D96CD2449A01 |
SSDEEP | 192:9oqJUiqwCQB8JHv8q9wRITwJ1FfSKYwZwuwqwWwswVwFwVw/wqHqwpxwAwRwWwDV:9oqaxM6kdfFWgLb5rWW+E3HqYxB0nirJ |
TLSH | T1AC32E257C869DC26963FC17888936466BA081C9351D8147CBDBC7BB8BF33C2587E588D |
Key | Value |
---|---|
FileName | ./usr/share/pyshared/dff/ui/gui/resources/ui_output.py |
FileSize | 1281 |
MD5 | 258CD4CF81B7D5D552098C1AE279E3A4 |
SHA-1 | 04FE41CD57C507FA9AB9EA6F4B95D13B279EB31F |
SHA-256 | 56C9F3C1FACAF6805D8CDF7A3D02F2A0C18EB613185C2EDFD48F8A0283580D0A |
SSDEEP | 24:l4T7bIJhlK+rLLnuVZtQ2WLRmme+Jzmhbto69dPXzjV3bNGVWjnK67C7on:O7ornaZtQ2Wlmm56bljmAH |
TLSH | T1A12121213980B29B5B5309D3670E7F8DF51AB44BFAF05C94B07CCE75DF5906211C52A5 |
Key | Value |
---|---|
CRC32 | BF021295 |
FileName | __init__.py |
FileSize | 648 |
MD5 | 24CC72B8746785F1DFE72B8D972C7FDB |
OpSystemCode | 362 |
ProductCode | 13792 |
SHA-1 | 05758A55ADC08A6CB0BE7449928DDD2ED9D6CB55 |
SHA-256 | 1538BC18A09BE3578297CA8A072CB77071F282DBB64B16E2FC986F34122F47F1 |
SSDEEP | 12:0dE3fWEs/viYKaed0HywOXS8CDSAFYP9Yq6deRJ1n:6R/niLp0H8XSnSEmr6w9n |
SpecialCode | |
TLSH | T15FF09E1A7650853225015BC7EB578FC6A34E8E2066D8BC065455C046839192DA6DA2ED |
db | nsrl_modern_rds |
insert-timestamp | 1646979809.1941512 |
source | NSRL |
Key | Value |
---|---|
CRC32 | 0599ADB2 |
FileName | complete_raw_input.py |
FileSize | 8463 |
MD5 | 50F10B462C9B22A295F49778584E3B5D |
OpSystemCode | 362 |
ProductCode | 13792 |
SHA-1 | 0585CC28EAB6DD448D4D7B5BC9D0AF86FFB80E74 |
SHA-256 | 7902AB9FA75C45457BF43C4C0342D090F66E8F1C77164487D9747B085B3E2BE3 |
SSDEEP | 96:uEumLzYJR+7Q/eZB719ANCMzx8+hb7huM5lm0McmTxJbWzk576bre4FU7Xdc:uEuY0JwZvis0MJTFB6Xe4FUbdc |
SpecialCode | |
TLSH | T1C80221112A285831D347C92AA997B8472A1FBD93190CD434FCFC80D46FA266483F5EF6 |
db | nsrl_modern_rds |
insert-timestamp | 1646979831.429575 |
source | NSRL |
Key | Value |
---|---|
FileName | ./usr/share/pyshared/dff/ui/gui/resources/ui_evidencedialog.py |
FileSize | 6610 |
MD5 | F82ABCC389B6FB94B7F5841503BB7700 |
SHA-1 | 06B0698CFAA69DB119E98C881D6B6B6EE9944D3B |
SHA-256 | 8465D72E3BC62858B13117D3835856C4996E1AD3096630CBBC4C0139DD6DBF43 |
SSDEEP | 96:KkvnaTdUzbqHR97oK0B7x3U/B4/R7cB8sHax46meTjQ/tlablqrEvv4v4L2LK:fvn+K8RWK0D3UqOla4deTjQFsbEQvAvg |
TLSH | T15BD1B0A02058F6971F8BAD634A052F4BED0E780FA6AD5498F4BCC1654FB446A01C7DFD |
Key | Value |
---|---|
CRC32 | 43B8B838 |
FileName | ./usr/lib/python2.7/dist-packages/dff/modules/ram/volatility/memory_plugins/example1.py |
FileSize | 4347 |
MD5 | C26FAC5A2748D87AAB7D7A139FA1B3B2 |
OpSystemCode | 362 |
ProductCode | 13792 |
SHA-1 | 078F8DC20BF579095AF4962DFDE64EBCB62448F2 |
SHA-256 | CA74C7A453BFCDFB0B716076B031BDEF4B715315E83E8F172DCD25DD349AB269 |
SSDEEP | 48:HYyUjoSoZXlnXZFYOJRx7qfRu3B7Bhlwq7x65PpMsVUvUoIOn1qPzlBNQaz3HBY1:PlTPJdhlv4ZpMsxin1qPz5Qaz3HBY1 |
SpecialCode | |
TLSH | T1EA918205997CD07A40E7069A78C3D0CAD3DED79742046BA83D2DD2584F52E3982B7EE5 |
db | nsrl_modern_rds |
insert-timestamp | 1646980554.7894726 |
source | NSRL |
Key | Value |
---|---|
CRC32 | 8C5ECC59 |
FileName | string.py |
FileSize | 2619 |
MD5 | BABC2311AAC513BC468AACCD54D509BB |
OpSystemCode | 362 |
ProductCode | 13792 |
SHA-1 | 07ABAA328CCBE152D6408D4F447715694EA62BFA |
SHA-256 | 7E7304DE1EC51E490E07F030B37861A11A0B87D650F8765211A6F7A657448A22 |
SSDEEP | 48:iJcLp0mvXVAANmiGhBenPgTkAOj6QQiCnzm3PdsM:igumPmAKBent7JCnzmaM |
SpecialCode | |
TLSH | T1E551E026290689514647EE27E4D7DE47E70F6907A93CB8A0B8FE91000F51475C1E5EF9 |
db | nsrl_modern_rds |
insert-timestamp | 1646980594.4889178 |
source | NSRL |