Key | Value |
---|---|
FileSize | 11175504 |
MD5 | B18BC8BB4966E95DBB7EEAE0B23C5E2D |
PackageDescription | Powerful, efficient and modular digital forensic framework DFF is a simple but powerful open source tool with a flexible module system which will help you in your digital forensics works, including files recovery due to error or crash, evidence research and analysis, etc. The source code is written in C++ and Python, allowing performances and great extensibility. |
PackageMaintainer | Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com> |
PackageName | dff |
PackageSection | admin |
PackageVersion | 1.2.0+dfsg.1-1 |
SHA-1 | BBC2A1E7497516B6C4EABF4D050C95DC6518EC87 |
SHA-256 | 72B3592F627169354793A8FAD9CAD750CDB336164747C8C39FCBEA0386C3E3DD |
hashlookup:children-total | 357 |
hashlookup:trust | 50 |
The searched file hash includes 357 children files known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
FileName | ./usr/share/pyshared/dff/ui/gui/resources/ui_shell.py |
FileSize | 2487 |
MD5 | 1E762055F8FC7D6116D63C2932CCB6BA |
SHA-1 | 00B51711F99588041E640B0D6217896B665C150E |
SHA-256 | 5AB7C12C349AF1EF872E1A0383B56D6595CA076144F58E5A9362393B076ED85E |
SSDEEP | 48:O7twCrnaZtQ2Wrm0XyLVyLbyLoyL5HyLpkyL9ul9QcGVToWI:ErnaTb0XyZyPyEypy2yByQcGVQ |
TLSH | T17751C8949202BAA54797CD8E432D9CDAFF2E709FD661581A335DC0B49F682F359C881C |
Key | Value |
---|---|
CRC32 | 0520AA57 |
FileName | find.py |
FileSize | 14772 |
MD5 | 4A11D45F23AB4DA2209ED9ED4A4218B3 |
OpSystemCode | 362 |
ProductCode | 13792 |
SHA-1 | 020BC371BB99093DD21668828745C82ACB38F0D4 |
SHA-256 | E64B9388B0F486FB39AA5579F7FCF398467537A1DBCDA690B571C180A8EA7388 |
SSDEEP | 96:tEumemcIRVPs8CBP6XInnGxDb83ChEXRF3ydAgH5CA7U3q1odn586ZoYBV1+Debi:tEuLmsvPfSf3hEBNym1dnvi |
SpecialCode | |
TLSH | T1EE62412894511871EA13885DF9EAD007273ABE4399096438F9FD96A57F06938C1F4FFC |
db | nsrl_modern_rds |
insert-timestamp | 1646978603.316221 |
source | NSRL |
Key | Value |
---|---|
CRC32 | 6E576D29 |
FileName | __init__.py |
FileSize | 686 |
MD5 | 7CF8DA753B12E8BD45D539DDC8C4CF1B |
OpSystemCode | 362 |
ProductCode | 13792 |
SHA-1 | 024F7274A9CCA11D2E9EF4283177D9AB7F1F0777 |
SHA-256 | 1DFDDCF705789B3B3A1EF61A2A0FA5B565F3DED5F3EF1927266A0B3DA88E1675 |
SSDEEP | 12:0dE3fWEs/viYKaed0HywOXS8Ct9YaRJEoSsJVUYY:6R/niLp0H8XSvh1SsJmR |
SpecialCode | |
TLSH | T1AE01F439FB20C53314808BC6FB468FC5E24E4A2067DCFC161459C0554248E2D61AE5ED |
db | nsrl_modern_rds |
insert-timestamp | 1646978701.0819125 |
source | NSRL |
Key | Value |
---|---|
FileName | ./usr/share/pyshared/dff/ui/gui/resources/ui_is_file_or_folder.py |
FileSize | 1708 |
MD5 | ACAAD2E5311999320ABD5DAB3546B5C4 |
SHA-1 | 03256BD0ACFC5C561419649A01C272B530D34FCD |
SHA-256 | CA0A45E82135A19A14B523E1D30AF712E4D34B292D01743A9873A56D48F70FC0 |
SSDEEP | 48:O7V9rnaZtQ2WLT+zvmzQI6xmShSvm7APO5m5DaDeH+U:c9naTAzzOy5DL |
TLSH | T19E314C100011B1E50B57FE5343ED6E9AE90E744EFA3C746CB1BCC891ABBC5A512D6CE6 |
Key | Value |
---|---|
FileName | ./usr/lib/python2.7/dist-packages/dff/modules/fs/ntfs/_NTFS.so |
FileSize | 156996 |
MD5 | A886206E29010F18F192FE6A5818ACE2 |
SHA-1 | 0424FCDF6476EB013DC361D0022BDCC078BB1EB8 |
SHA-256 | A9D696D484B14F23FC4A2950EA4322060FC4B16B81F7907A2F21219224EFE3A7 |
SSDEEP | 3072:L8E7M7le4ekcGln8wFrar9HjUEueudlz7T1/ACTeMAUvSmjihobU5E+9G84mqLFL:L8E7M744ekcGln3Far9DUEueudlz7T1N |
TLSH | T1BBE37CF967858B33DCBB8BF8B0931E434534C0A96BD70F53685E9B35ED8A224563B190 |
Key | Value |
---|---|
FileName | ./usr/share/pyshared/dff/api/search/libsearch.py |
FileSize | 11009 |
MD5 | A00F64F6D8343E425D2AAE3D88639039 |
SHA-1 | 04C6B1CA90152F33ECE2AA450A81714692A4210B |
SHA-256 | 429BAD015F739E93AD9F2924A0ECE4C42EEE84BCA33421536B46D96CD2449A01 |
SSDEEP | 192:9oqJUiqwCQB8JHv8q9wRITwJ1FfSKYwZwuwqwWwswVwFwVw/wqHqwpxwAwRwWwDV:9oqaxM6kdfFWgLb5rWW+E3HqYxB0nirJ |
TLSH | T1AC32E257C869DC26963FC17888936466BA081C9351D8147CBDBC7BB8BF33C2587E588D |
Key | Value |
---|---|
CRC32 | BF021295 |
FileName | __init__.py |
FileSize | 648 |
MD5 | 24CC72B8746785F1DFE72B8D972C7FDB |
OpSystemCode | 362 |
ProductCode | 13792 |
SHA-1 | 05758A55ADC08A6CB0BE7449928DDD2ED9D6CB55 |
SHA-256 | 1538BC18A09BE3578297CA8A072CB77071F282DBB64B16E2FC986F34122F47F1 |
SSDEEP | 12:0dE3fWEs/viYKaed0HywOXS8CDSAFYP9Yq6deRJ1n:6R/niLp0H8XSnSEmr6w9n |
SpecialCode | |
TLSH | T15FF09E1A7650853225015BC7EB578FC6A34E8E2066D8BC065455C046839192DA6DA2ED |
db | nsrl_modern_rds |
insert-timestamp | 1646979809.1941512 |
source | NSRL |
Key | Value |
---|---|
CRC32 | 0599ADB2 |
FileName | complete_raw_input.py |
FileSize | 8463 |
MD5 | 50F10B462C9B22A295F49778584E3B5D |
OpSystemCode | 362 |
ProductCode | 13792 |
SHA-1 | 0585CC28EAB6DD448D4D7B5BC9D0AF86FFB80E74 |
SHA-256 | 7902AB9FA75C45457BF43C4C0342D090F66E8F1C77164487D9747B085B3E2BE3 |
SSDEEP | 96:uEumLzYJR+7Q/eZB719ANCMzx8+hb7huM5lm0McmTxJbWzk576bre4FU7Xdc:uEuY0JwZvis0MJTFB6Xe4FUbdc |
SpecialCode | |
TLSH | T1C80221112A285831D347C92AA997B8472A1FBD93190CD434FCFC80D46FA266483F5EF6 |
db | nsrl_modern_rds |
insert-timestamp | 1646979831.429575 |
source | NSRL |
Key | Value |
---|---|
CRC32 | 43B8B838 |
FileName | ./usr/lib/python2.7/dist-packages/dff/modules/ram/volatility/memory_plugins/example1.py |
FileSize | 4347 |
MD5 | C26FAC5A2748D87AAB7D7A139FA1B3B2 |
OpSystemCode | 362 |
ProductCode | 13792 |
SHA-1 | 078F8DC20BF579095AF4962DFDE64EBCB62448F2 |
SHA-256 | CA74C7A453BFCDFB0B716076B031BDEF4B715315E83E8F172DCD25DD349AB269 |
SSDEEP | 48:HYyUjoSoZXlnXZFYOJRx7qfRu3B7Bhlwq7x65PpMsVUvUoIOn1qPzlBNQaz3HBY1:PlTPJdhlv4ZpMsxin1qPz5Qaz3HBY1 |
SpecialCode | |
TLSH | T1EA918205997CD07A40E7069A78C3D0CAD3DED79742046BA83D2DD2584F52E3982B7EE5 |
db | nsrl_modern_rds |
insert-timestamp | 1646980554.7894726 |
source | NSRL |
Key | Value |
---|---|
CRC32 | 8C5ECC59 |
FileName | string.py |
FileSize | 2619 |
MD5 | BABC2311AAC513BC468AACCD54D509BB |
OpSystemCode | 362 |
ProductCode | 13792 |
SHA-1 | 07ABAA328CCBE152D6408D4F447715694EA62BFA |
SHA-256 | 7E7304DE1EC51E490E07F030B37861A11A0B87D650F8765211A6F7A657448A22 |
SSDEEP | 48:iJcLp0mvXVAANmiGhBenPgTkAOj6QQiCnzm3PdsM:igumPmAKBent7JCnzmaM |
SpecialCode | |
TLSH | T1E551E026290689514647EE27E4D7DE47E70F6907A93CB8A0B8FE91000F51475C1E5EF9 |
db | nsrl_modern_rds |
insert-timestamp | 1646980594.4889178 |
source | NSRL |