| Key | Value |
|---|---|
| CRC32 | 7A585CD9 |
| FileName | drm.so |
| FileSize | 34704 |
| MD5 | 768BA7854448A66A59BFBC2812622760 |
| OpSystemCode | {'MfgCode': '1006', 'OpSystemCode': '362', 'OpSystemName': 'TBD', 'OpSystemVersion': 'none'} |
| ProductCode | {'ApplicationType': 'Forensic', 'Language': 'Multilanguage', 'MfgCode': '1722', 'OpSystemCode': '928', 'ProductCode': '187172', 'ProductName': 'Caine Linux 32-bit', 'ProductVersion': '2.0'} |
| SHA-1 | 5A423FC14A44839DF8F04A4F65F5D8D2C5FFAAC5 |
| SHA-256 | 97CF5074D5D98953CEDF9AF71D0D7EFA13DA806A251EC80D3208BB5B68175750 |
| SSDEEP | 384:6XyaDJBNnEN1D7sggTjNltlCH8TJATQANjXgrdm3ELm9LoOMb0gD4cMF:Iya9CsfTRlHCccQANkrd29LoDbJDDMF |
| SpecialCode | |
| TLSH | T161F2FA5FAD4E42F8D0A25D719043B51FAF32624BC84FDB4B96282E24E43394FAB1C265 |
| db | nsrl_modern_rds |
| insert-timestamp | 1647011504.4728558 |
| nsrl-sha256 | rds241-sha256.zip |
| source | NSRL |
| hashlookup:parent-total | 2 |
| hashlookup:trust | 60 |
The searched file hash is included in 2 parent files which include package known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileSize | 114826 |
| MD5 | BDC98FDE063ED362819EE956F92C84FD |
| PackageDescription | graphical boot animation and logger - main package Plymouth is an application that runs very early in the boot process (even before the root filesystem is mounted!) that provides a graphical boot animation while the boot process happens in the background. |
| PackageMaintainer | Ubuntu Core Developers <ubuntu-devel-discuss@lists.ubuntu.com> |
| PackageName | plymouth |
| PackageSection | x11 |
| PackageVersion | 0.8.2-2ubuntu2.2 |
| SHA-1 | 879EF667F3D4DAA424E3B5D8EA80187E7EF007D2 |
| SHA-256 | 127D16AEB4884B33BD71F614B8AB0A587506031D3A247EF762B8FDBFB8F92089 |
| Key | Value |
|---|---|
| FileSize | 114246 |
| MD5 | DBC30C15A1DA421D826E17375EAD41CB |
| PackageDescription | graphical boot animation and logger - main package Plymouth is an application that runs very early in the boot process (even before the root filesystem is mounted!) that provides a graphical boot animation while the boot process happens in the background. |
| PackageMaintainer | Ubuntu Core Developers <ubuntu-devel-discuss@lists.ubuntu.com> |
| PackageName | plymouth |
| PackageSection | x11 |
| PackageVersion | 0.8.2-2ubuntu2 |
| SHA-1 | 4F7AFD3F37D6CFF98C20C1C662220138016625E6 |
| SHA-256 | AD466CD3784A75E84FA3A54AB85F6F54ED21331B4CB6C86EFBC73CC4B0A6FC16 |