Result for E62D5FE047D41C7DCE6682A7C9B625227D19EF80

Query result

Key Value
FileName./usr/share/doc/python-pefile/README.gz
FileSize2504
MD595AA02A8AF3BB3618A4FE00D4FA8EBF4
SHA-1E62D5FE047D41C7DCE6682A7C9B625227D19EF80
SHA-256FE7F8FB3C67730A642D40FCFD31C1748C6909BA84E220EC8EFA815AE06193EC7
SSDEEP48:XW+h9M2/Va0n7rIHGUwVqK1ciJPDUP9/h/vO1J7AT6V7rspkkw/ejW:myM2/8qrCGBVqK5qP9J/vG1AT+kw/R
TLSHT1D1515C9764C41C578C3D07B0EEA1B5CC6111A0EDF214D568854A78DFFE2052B88DBC8B
hashlookup:parent-total1
hashlookup:trust55

Network graph view

Parents (Total: 1)

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key Value
FileSize54712
MD5C05AA587AFDEB74111116113F030011C
PackageDescriptionPortable Executable (PE) parsing module for Python pefile is a Python module to read and work with Portable Executable (PE) files. Most of the information in the PE header is accessible, as well as all the sections, section information and data. . All the basic PE file structures are available with their default names as attributes of the returned instance. . Processed elements such as the import table are made available with lowercase names, to differentiate them from the upper case basic structure names. . pefile has been tested against the limits of valid PE headers; that is, Windows malware. Lots of packed malware attempt to abuse the format beyond its standard use. . Some of the tasks that pefile makes possible are: * Modifying and writing back to the PE image * Header inspection * Section analysis * Retrieving data * Warnings for suspicious and malformed values * Packer detection with PEiD signatures * PEiD signature generation
PackageMaintainerUbuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
PackageNamepython-pefile
PackageSectionpython
PackageVersion2017.11.5-2
SHA-1707A95225D749B8683FC0E881A84C5E811E1356C
SHA-2566D07D98B659B643E1BD413272DFC52032C5966E012F37C094A5BA0F11DF8108D