| Key | Value |
|---|---|
| MD5 | 23E6606E3C33A113CFF590601D980C02 |
| PackageArch | noarch |
| PackageDescription | The python-oletools is a package of python tools from Philippe Lagadec to analyze Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), such as Microsoft Office documents or Outlook messages, mainly for malware analysis, forensics and debugging. It is based on the olefile parser. See http://www.decalage.info/python/oletools for more info. Python3 version. |
| PackageMaintainer | Fedora Project |
| PackageName | python3-oletools |
| PackageRelease | 2.el8 |
| PackageVersion | 0.54.2 |
| SHA-1 | E50C321540FAC0CFCE07F3A29CFEAE4F0F96F4F1 |
| SHA-256 | 3BB6D8DF1C5D830EF489D0D3F5466846BF1B14BA8EDFC27A7AF7AA6C38D3A918 |
| hashlookup:children-total | 122 |
| hashlookup:trust | 50 |
The searched file hash includes 122 children files known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | ./usr/bin/olebrowse-3.6 |
| FileSize | 394 |
| MD5 | 38AA3805C7ED6ECF0EDA7D814A077E18 |
| SHA-1 | 012B7D5DF75E7B520D960367B832F4B81B7A2E13 |
| SHA-256 | 05EEE8811782CAC2695410A27C14DB8F122A04B5C655B30FE1DA3763A1950C33 |
| SSDEEP | 12:HYKuL/h02gxTh01zoi9VrCF2aGNM1m2SfVBh0jW+Ke:juLm20Tm1oAC0as/mjWhe |
| TLSH | T193E0225A89E0DDA049F205872534E471210B4EABAAC1A30CB1C8862ABBC03E50C38A78 |
| Key | Value |
|---|---|
| FileName | ./usr/lib/python3.6/site-packages/oletools/__pycache__/oleform.cpython-36.opt-1.pyc |
| FileSize | 16901 |
| MD5 | E19B280CFF4E6CF985F554B6265DEDA5 |
| SHA-1 | 037E2F92ED3011047295B96C74CC644B703CDA44 |
| SHA-256 | 2F643DBF95C17D8948B8C0E688C78F02E3F2099E5BD718EFCBDF56E8BB6E2BE7 |
| SSDEEP | 192:e1vcm1jJaZlE8DgHG3Eqw1LkI+4OLvHYYKvSOI9nQAKPmfiYHT36rGTEmnvU1XPA:XYjJd8JOkICvHYdKOIu/A65BNu |
| TLSH | T19F72C589A582BF2BFC51F3F4869F4A215679D63B3349C77B024CA9BADC445D00823E9C |
| Key | Value |
|---|---|
| FileName | ./usr/lib/python3.6/site-packages/oletools/__pycache__/ooxml.cpython-36.opt-1.pyc |
| FileSize | 18308 |
| MD5 | 7B180EE53B62CBDE45DC3D654B71DC1F |
| SHA-1 | 069D33B5EFB5E82DB15D4D672BB6DBF973106B1F |
| SHA-256 | 6FBB0D2C3F1D545CB3709BF4355C32A19A4E64329CA201DA4D74326EC60D225C |
| SSDEEP | 384:vIRF9Ad/WdTuABnjsEiQUNVwpLj/LO/OBq/mz96oICD6IZ7CNLZTQf11EhVIPQ7K:vUF9Ad/WdT1jncNVyLj/LO/OKmx6+Hc2 |
| TLSH | T129824CC365406A67FF52F1BC719253922720E0BFEE9892D170ACD2192F819645AF3BD8 |
| Key | Value |
|---|---|
| FileName | ./usr/lib/python3.6/site-packages/oletools/__pycache__/oleid.cpython-36.pyc |
| FileSize | 10783 |
| MD5 | 3D1B11D30F52281ABBADB4142933E8C2 |
| SHA-1 | 0714524E4AEAB8FFFF7BB32B43B47AAA958E54AB |
| SHA-256 | 7F84B50FD526C6CBFF4C3118BD479FB7C07A562D2E35E3D3FE5B996C05F5B14C |
| SSDEEP | 192:QFTUcmpmDXUApplQfUU48v0Hymr9EDIt+eR3mGZ4qUSDG:gnpYApUMGOymI8+O3mGGoG |
| TLSH | T11E22F8D6C5C00F17FE46F1F5499E57D9A661C29BB71CB21830CD80682F089D19BBB9AC |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/python36-oletools-0.54.2/README.md |
| FileSize | 12095 |
| MD5 | 63F165E2E149265D7657093686492669 |
| SHA-1 | 0714684EDEA178558648355E5D07DE02B2F598F9 |
| SHA-256 | 9A9F2C7FF288F8C1EB070D13CCCAEBA4C920E10A55A07DCA81E90CADC78004A0 |
| SSDEEP | 192:xS0QWROHZsqPOKuC3A1cj+msSCnJZBxenOrXcrRR3s3FKiYQHTL:xwW0ZN2KuCwHmbMJZTLrsrRB+FG6L |
| TLSH | T15B42D4B79FE0076E0F82C9C5B6C5E699F326501FF9E3689854AE8304731A47663BF214 |
| Key | Value |
|---|---|
| FileName | ./usr/lib/python3.6/site-packages/oletools-0.56-py3.6.egg-info/top_level.txt |
| FileSize | 9 |
| MD5 | E1328C49604367F16736F85DCD058326 |
| RDS:package_id | 294806 |
| SHA-1 | 084414AC8CDF7742AF82A7E2E3348A7C2503B7C8 |
| SHA-256 | 6D2A30D7D019799DFFA4F33BFA78CD492E6D07D2E961D7E1325CCB7BCB83A2B4 |
| SSDEEP | 3:9A:y |
| TLSH | |
| insert-timestamp | 1696437815.8937707 |
| source | db.sqlite |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | ./usr/lib/python3.6/site-packages/oletools/__pycache__/mraptor.cpython-36.pyc |
| FileSize | 11046 |
| MD5 | 8F3FCC9522AD713B0A17EC1608C3632C |
| SHA-1 | 097317C9D8168FC1F0B3CC2F85B9269093D1C214 |
| SHA-256 | A30EB84ADD7753938CDA93A7E513654423F654E1E92067A4C9AF98A9F8EEB387 |
| SSDEEP | 192:klCNP4g1NTkyfgpX9XPXe8X3G6UqOj6a9gwdDWCLfydPTAMciO2rpe86:R4gNTTgpX9XPXe8X3G61OjvbHLSTAMc1 |
| TLSH | T147321B6F07AB8A07F9F9FBB9D01E8759146111FE51246903B81CD51B29060C81EBE7AB |
| Key | Value |
|---|---|
| FileName | ./usr/lib/python3.6/site-packages/oletools/ooxml.py |
| FileSize | 25546 |
| MD5 | 32DF124A075B72050D10FFE2AD2F3CCA |
| SHA-1 | 0BD178FFC5749C17178FCEF2BA2553DA94B4586B |
| SHA-256 | 9A318AC9B18944AD6A33FC1096281F0D6A8424C7423D848EF7287CC484C21043 |
| SSDEEP | 384:QBTnDnLJHDKqbEWiUNVwfZuivdgl3RF7CNLZ18YuHfdM:QBTnDnlHDKHoNVuZuiv23vWG/dM |
| TLSH | T1DBB2B567E8956561874784BC99C3F0033719687B5D4B6674B8FCE2283FC1A2580FAFE8 |
| Key | Value |
|---|---|
| FileName | ./usr/lib/python3.6/site-packages/oletools/__pycache__/ppt_parser.cpython-36.pyc |
| FileSize | 40799 |
| MD5 | 2081DA5EC59047A199AB8A1448C5B3AE |
| SHA-1 | 0CACA0A54265ACF8A76699BF16673DE7A5053E33 |
| SHA-256 | 8FDEDC8452C10A5BD58F37571E501050EA3BBA0BB2DE212E830AFF987B79FA10 |
| SSDEEP | 384:BCw6gFg3a2pRt3w0yq1mP65bbuOlgPYlqBktPf6R6q888leuogrxi9GdN83GxCpl:fx29SgnE6uPfWxIM2ZiG |
| TLSH | T1FE03185A66C56E2AFE60F3BC8018A3B057A0523B770DE192364EC24D6F451D88E737DD |
| Key | Value |
|---|---|
| FileName | ./usr/bin/rtfobj-3.6 |
| FileSize | 388 |
| MD5 | 594823326277706891EECDA4429D5361 |
| SHA-1 | 0CB3456578E32057E08434B31584C94410DFB786 |
| SHA-256 | 99DF464F79392E87F27855A9B608A285ED1E79C40C386A4FB2F8409A48972DFB |
| SSDEEP | 12:HYKuL/h02IGh01zoi9VrCF2aGNM1m2SfVBh0jWkO:juLm2hm1oAC0as/mjWN |
| TLSH | T196E0D866C9E0DDA54EF201872534E471218B5EA76A91B20DB1CCCA6ABBC57E50C78A38 |