Key | Value |
---|---|
FileSize | 11464430 |
MD5 | 83118E96135358113FB1AE8A31AB4218 |
PackageDescription | Powerful, efficient and modular digital forensic framework DFF is a simple but powerful open source tool with a flexible module system which will help you in your digital forensics works, including files recovery due to error or crash, evidence research and analysis, etc. The source code is written in C++ and Python, allowing performances and great extensibility. |
PackageMaintainer | Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com> |
PackageName | dff |
PackageSection | admin |
PackageVersion | 1.2.0+dfsg.1-1 |
SHA-1 | A357D606716F1307FF67048EF2727A8CF667E08A |
SHA-256 | 131BE4929CD7228C3CF13BA9697C092AE94344A4970E1C9120B2555412BBB09D |
hashlookup:children-total | 357 |
hashlookup:trust | 50 |
The searched file hash includes 357 children files known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
CRC32 | 0520AA57 |
FileName | find.py |
FileSize | 14772 |
MD5 | 4A11D45F23AB4DA2209ED9ED4A4218B3 |
OpSystemCode | 362 |
ProductCode | 13792 |
SHA-1 | 020BC371BB99093DD21668828745C82ACB38F0D4 |
SHA-256 | E64B9388B0F486FB39AA5579F7FCF398467537A1DBCDA690B571C180A8EA7388 |
SSDEEP | 96:tEumemcIRVPs8CBP6XInnGxDb83ChEXRF3ydAgH5CA7U3q1odn586ZoYBV1+Debi:tEuLmsvPfSf3hEBNym1dnvi |
SpecialCode | |
TLSH | T1EE62412894511871EA13885DF9EAD007273ABE4399096438F9FD96A57F06938C1F4FFC |
db | nsrl_modern_rds |
insert-timestamp | 1646978603.316221 |
source | NSRL |
Key | Value |
---|---|
CRC32 | 6E576D29 |
FileName | __init__.py |
FileSize | 686 |
MD5 | 7CF8DA753B12E8BD45D539DDC8C4CF1B |
OpSystemCode | 362 |
ProductCode | 13792 |
SHA-1 | 024F7274A9CCA11D2E9EF4283177D9AB7F1F0777 |
SHA-256 | 1DFDDCF705789B3B3A1EF61A2A0FA5B565F3DED5F3EF1927266A0B3DA88E1675 |
SSDEEP | 12:0dE3fWEs/viYKaed0HywOXS8Ct9YaRJEoSsJVUYY:6R/niLp0H8XSvh1SsJmR |
SpecialCode | |
TLSH | T1AE01F439FB20C53314808BC6FB468FC5E24E4A2067DCFC161459C0554248E2D61AE5ED |
db | nsrl_modern_rds |
insert-timestamp | 1646978701.0819125 |
source | NSRL |
Key | Value |
---|---|
FileName | ./usr/lib/python2.7/dist-packages/dff/modules/search/carver/_CARVER.so |
FileSize | 247344 |
MD5 | FC731F4E83F4AA95D06346706F4D812C |
SHA-1 | 02E7F75E5AEC53F103C52612F59D18BD2D1A5A49 |
SHA-256 | 6A769863A4266814C31C8E242D6BCA6D7DD8FF94031A2FE4B0FA1AB675646B47 |
SSDEEP | 3072:P2/wz0v4Hoyi2E99YoC7OJe2PSccsZvf5sp71ZQ29Qf7jAfUktpqqdW:PAwz0v4HoGEP37TJKjZQF7jMU6q9 |
TLSH | T194343A1FE95214FCCCFAC235C8D745396761F54883302A1A16DDEAB71F52B228B2D39A |
Key | Value |
---|---|
FileName | ./usr/share/pyshared/dff/ui/gui/resources/ui_devicesdialog.py |
FileSize | 6450 |
MD5 | 4AE03702A5507255096D2CC253B36642 |
SHA-1 | 0482C6B67E2B95EBDA1617A1654B6EC6C0F5C66A |
SHA-256 | 13AF68A25A674EA193C0C20F151B06AD7EC74816F15D6358FB0BF615C1B7E5D2 |
SSDEEP | 192:Fn+QRZRQZH/13oYmgbhYVZMNvNzhhy+gncnOP1rbGAfeTjQ0v8ve:vKho+toeAncu3feTM0EW |
TLSH | T150D17D001229B590578BED6399163997AD0F140FE62CF096F5ADC0E1EFE823542E2DFE |
Key | Value |
---|---|
FileName | ./usr/share/pyshared/dff/api/search/libsearch.py |
FileSize | 11009 |
MD5 | A00F64F6D8343E425D2AAE3D88639039 |
SHA-1 | 04C6B1CA90152F33ECE2AA450A81714692A4210B |
SHA-256 | 429BAD015F739E93AD9F2924A0ECE4C42EEE84BCA33421536B46D96CD2449A01 |
SSDEEP | 192:9oqJUiqwCQB8JHv8q9wRITwJ1FfSKYwZwuwqwWwswVwFwVw/wqHqwpxwAwRwWwDV:9oqaxM6kdfFWgLb5rWW+E3HqYxB0nirJ |
TLSH | T1AC32E257C869DC26963FC17888936466BA081C9351D8147CBDBC7BB8BF33C2587E588D |
Key | Value |
---|---|
CRC32 | BF021295 |
FileName | __init__.py |
FileSize | 648 |
MD5 | 24CC72B8746785F1DFE72B8D972C7FDB |
OpSystemCode | 362 |
ProductCode | 13792 |
SHA-1 | 05758A55ADC08A6CB0BE7449928DDD2ED9D6CB55 |
SHA-256 | 1538BC18A09BE3578297CA8A072CB77071F282DBB64B16E2FC986F34122F47F1 |
SSDEEP | 12:0dE3fWEs/viYKaed0HywOXS8CDSAFYP9Yq6deRJ1n:6R/niLp0H8XSnSEmr6w9n |
SpecialCode | |
TLSH | T15FF09E1A7650853225015BC7EB578FC6A34E8E2066D8BC065455C046839192DA6DA2ED |
db | nsrl_modern_rds |
insert-timestamp | 1646979809.1941512 |
source | NSRL |
Key | Value |
---|---|
CRC32 | 0599ADB2 |
FileName | complete_raw_input.py |
FileSize | 8463 |
MD5 | 50F10B462C9B22A295F49778584E3B5D |
OpSystemCode | 362 |
ProductCode | 13792 |
SHA-1 | 0585CC28EAB6DD448D4D7B5BC9D0AF86FFB80E74 |
SHA-256 | 7902AB9FA75C45457BF43C4C0342D090F66E8F1C77164487D9747B085B3E2BE3 |
SSDEEP | 96:uEumLzYJR+7Q/eZB719ANCMzx8+hb7huM5lm0McmTxJbWzk576bre4FU7Xdc:uEuY0JwZvis0MJTFB6Xe4FUbdc |
SpecialCode | |
TLSH | T1C80221112A285831D347C92AA997B8472A1FBD93190CD434FCFC80D46FA266483F5EF6 |
db | nsrl_modern_rds |
insert-timestamp | 1646979831.429575 |
source | NSRL |
Key | Value |
---|---|
CRC32 | 43B8B838 |
FileName | ./usr/lib/python2.7/dist-packages/dff/modules/ram/volatility/memory_plugins/example1.py |
FileSize | 4347 |
MD5 | C26FAC5A2748D87AAB7D7A139FA1B3B2 |
OpSystemCode | 362 |
ProductCode | 13792 |
SHA-1 | 078F8DC20BF579095AF4962DFDE64EBCB62448F2 |
SHA-256 | CA74C7A453BFCDFB0B716076B031BDEF4B715315E83E8F172DCD25DD349AB269 |
SSDEEP | 48:HYyUjoSoZXlnXZFYOJRx7qfRu3B7Bhlwq7x65PpMsVUvUoIOn1qPzlBNQaz3HBY1:PlTPJdhlv4ZpMsxin1qPz5Qaz3HBY1 |
SpecialCode | |
TLSH | T1EA918205997CD07A40E7069A78C3D0CAD3DED79742046BA83D2DD2584F52E3982B7EE5 |
db | nsrl_modern_rds |
insert-timestamp | 1646980554.7894726 |
source | NSRL |
Key | Value |
---|---|
CRC32 | 8C5ECC59 |
FileName | string.py |
FileSize | 2619 |
MD5 | BABC2311AAC513BC468AACCD54D509BB |
OpSystemCode | 362 |
ProductCode | 13792 |
SHA-1 | 07ABAA328CCBE152D6408D4F447715694EA62BFA |
SHA-256 | 7E7304DE1EC51E490E07F030B37861A11A0B87D650F8765211A6F7A657448A22 |
SSDEEP | 48:iJcLp0mvXVAANmiGhBenPgTkAOj6QQiCnzm3PdsM:igumPmAKBent7JCnzmaM |
SpecialCode | |
TLSH | T1E551E026290689514647EE27E4D7DE47E70F6907A93CB8A0B8FE91000F51475C1E5EF9 |
db | nsrl_modern_rds |
insert-timestamp | 1646980594.4889178 |
source | NSRL |
Key | Value |
---|---|
CRC32 | F4AF110A |
FileName | ./usr/share/doc/dff-1.3.0/README.gz |
FileSize | 2238 |
MD5 | 3709B48962E4E04B554D590298AE1042 |
OpSystemCode | 362 |
ProductCode | 13792 |
SHA-1 | 07C5D9B937DF0EB7710A0D00100E7CFDDA8716AA |
SHA-256 | AC163CA6FA5433B833DDA5DBBFE56BA1561F76E88F53656DEFDEA854FACAA4B5 |
SSDEEP | 48:X7iJDg59rR3jeejK/AEa1v1KDk/tJhYHKyidCSt69z4NVQ:oA9rxjM/m1//tMHridahaQ |
SpecialCode | |
TLSH | T116411989B69B5F65BD1BEAEE60D614AC2ED0F402EA287AD16436018C7C1240BD2E3D45 |
db | nsrl_modern_rds |
insert-timestamp | 1646980632.8787453 |
source | NSRL |