Result for BA859ABDA699BF30D5C202DC9217EFC0D37D49A4

Query result

Key Value
FileNamecopyright
FileSize2638
MD59BF5D30A716281317ED8EF6A6FF8A753
RDS:package_id304063
SHA-1BA859ABDA699BF30D5C202DC9217EFC0D37D49A4
SHA-256CABE2CD6C09C2F32633F11B2E561B15542DF469EA917F06D00717855DE3D4607
SSDEEP48:olOYrYJ0rYJ1DP4a2r43lSrj32sBEtIz3tolHZeyoyvHqonxtn:o4YrYJ0rYJ1T53orj3NlKl5zrdjn
TLSHT1C151978B214087B74AC013803956A9C9F25B903E3B7A9405286EA345DF1B92F55F7494
insert-timestamp1712928771.4937367
sourcesqlite.db
hashlookup:parent-total4
hashlookup:trust70

Network graph view

Parents (Total: 4)

The searched file hash is included in 4 parent files which include package known and seen by metalookup. A sample is included below:

Key Value
FileSize56388
MD55322B93AF8902F94A9BFCF50BEEE3E5D
PackageDescriptionPortable Executable (PE) parsing module for Python pefile is a Python module to read and work with Portable Executable (PE) files. Most of the information in the PE header is accessible, as well as all the sections, section information and data. . All the basic PE file structures are available with their default names as attributes of the returned instance. . Processed elements such as the import table are made available with lowercase names, to differentiate them from the upper case basic structure names. . pefile has been tested against the limits of valid PE headers; that is, Windows malware. Lots of packed malware attempt to abuse the format beyond its standard use. . Some of the tasks that pefile makes possible are: * Modifying and writing back to the PE image * Header inspection * Section analysis * Retrieving data * Warnings for suspicious and malformed values * Packer detection with PEiD signatures * PEiD signature generation
PackageMaintainerHilko Bengen <bengen@debian.org>
PackageNamepython3-pefile
PackageSectionpython
PackageVersion2019.4.18-1.1
SHA-1083D134A746DDF47A2C37E5DC288DBF0A192BAA2
SHA-256D8FB32BE8275F88EBBC54BEE310E4719D4AED9615B68050C1C0B5CCD41BD8135
Key Value
FileSize57284
MD592786558E6023FEE7A94DF4A15726BDB
PackageDescriptionPortable Executable (PE) parsing module for Python pefile is a Python module to read and work with Portable Executable (PE) files. Most of the information in the PE header is accessible, as well as all the sections, section information and data. . All the basic PE file structures are available with their default names as attributes of the returned instance. . Processed elements such as the import table are made available with lowercase names, to differentiate them from the upper case basic structure names. . pefile has been tested against the limits of valid PE headers; that is, Windows malware. Lots of packed malware attempt to abuse the format beyond its standard use. . Some of the tasks that pefile makes possible are: * Modifying and writing back to the PE image * Header inspection * Section analysis * Retrieving data * Warnings for suspicious and malformed values * Packer detection with PEiD signatures * PEiD signature generation
PackageMaintainerUbuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
PackageNamepython3-pefile
PackageSectionpython
PackageVersion2021.5.24-1
SHA-1E5B70ACA4A2EDF29DD19468BBDCD4BCD482EF6A5
SHA-256748345115E2920B87A3ABF29BF2093E14E13305C7D01B8F6268856FC520D1749
Key Value
FileSize55936
MD568E13894212A483DE0BC7E2A112D3F1A
PackageDescriptionPortable Executable (PE) parsing module for Python pefile is a Python module to read and work with Portable Executable (PE) files. Most of the information in the PE header is accessible, as well as all the sections, section information and data. . All the basic PE file structures are available with their default names as attributes of the returned instance. . Processed elements such as the import table are made available with lowercase names, to differentiate them from the upper case basic structure names. . pefile has been tested against the limits of valid PE headers; that is, Windows malware. Lots of packed malware attempt to abuse the format beyond its standard use. . Some of the tasks that pefile makes possible are: * Modifying and writing back to the PE image * Header inspection * Section analysis * Retrieving data * Warnings for suspicious and malformed values * Packer detection with PEiD signatures * PEiD signature generation
PackageMaintainerUbuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
PackageNamepython3-pefile
PackageSectionpython
PackageVersion2019.4.18-1.1
SHA-138C855927B24C7BA33895BC6B8973E101B08A048
SHA-256524541253D4DFCD62059E9C02D4CCD7DD781ACD96573D7CF43473CAEE94ED078
Key Value
FileSize62908
MD5394AFF074C8A9A226B47255E6609D116
PackageDescriptionPortable Executable (PE) parsing module for Python pefile is a Python module to read and work with Portable Executable (PE) files. Most of the information in the PE header is accessible, as well as all the sections, section information and data. . All the basic PE file structures are available with their default names as attributes of the returned instance. . Processed elements such as the import table are made available with lowercase names, to differentiate them from the upper case basic structure names. . pefile has been tested against the limits of valid PE headers; that is, Windows malware. Lots of packed malware attempt to abuse the format beyond its standard use. . Some of the tasks that pefile makes possible are: * Modifying and writing back to the PE image * Header inspection * Section analysis * Retrieving data * Warnings for suspicious and malformed values * Packer detection with PEiD signatures * PEiD signature generation
PackageMaintainerHilko Bengen <bengen@debian.org>
PackageNamepython3-pefile
PackageSectionpython
PackageVersion2021.9.3-1
SHA-1C9C89717A41CB560838F93E16ACA2CAA1A4E974A
SHA-256A424EBECDFBA09087002885041DF7AA6DE50CE64FD26CE93121242CF830C8B12