Result for F1152CDE25D6973AB8F17F622974BC6BD4D1213C

Query result

Key	Value
FileSize	11422480
MD5	A5C2C50C29ACE3280528261FC87BE7EE
PackageDescription	Powerful, efficient and modular digital forensic framework DFF is a simple but powerful open source tool with a flexible module system which will help you in your digital forensics works, including files recovery due to error or crash, evidence research and analysis, etc. The source code is written in C++ and Python, allowing performances and great extensibility.
PackageMaintainer	Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
PackageName	dff
PackageSection	admin
PackageVersion	1.2.0+dfsg.1-1
SHA-1	F1152CDE25D6973AB8F17F622974BC6BD4D1213C
SHA-256	6A33504F53E42B318E69DDFFD564C070EFBC00F60C4544253243A4395370D14B
hashlookup:children-total	357
hashlookup:trust	50

Network graph view

Children (Total: 357)

The searched file hash includes 357 children files known and seen by metalookup. A sample is included below:

Key	Value
CRC32	0520AA57
FileName	find.py
FileSize	14772
MD5	4A11D45F23AB4DA2209ED9ED4A4218B3
OpSystemCode	362
ProductCode	13792
SHA-1	020BC371BB99093DD21668828745C82ACB38F0D4
SHA-256	E64B9388B0F486FB39AA5579F7FCF398467537A1DBCDA690B571C180A8EA7388
SSDEEP	96:tEumemcIRVPs8CBP6XInnGxDb83ChEXRF3ydAgH5CA7U3q1odn586ZoYBV1+Debi:tEuLmsvPfSf3hEBNym1dnvi
SpecialCode
TLSH	T1EE62412894511871EA13885DF9EAD007273ABE4399096438F9FD96A57F06938C1F4FFC
db	nsrl_modern_rds
insert-timestamp	1646978603.316221
source	NSRL

Key	Value
CRC32	6E576D29
FileName	__init__.py
FileSize	686
MD5	7CF8DA753B12E8BD45D539DDC8C4CF1B
OpSystemCode	362
ProductCode	13792
SHA-1	024F7274A9CCA11D2E9EF4283177D9AB7F1F0777
SHA-256	1DFDDCF705789B3B3A1EF61A2A0FA5B565F3DED5F3EF1927266A0B3DA88E1675
SSDEEP	12:0dE3fWEs/viYKaed0HywOXS8Ct9YaRJEoSsJVUYY:6R/niLp0H8XSvh1SsJmR
SpecialCode
TLSH	T1AE01F439FB20C53314808BC6FB468FC5E24E4A2067DCFC161459C0554248E2D61AE5ED
db	nsrl_modern_rds
insert-timestamp	1646978701.0819125
source	NSRL

Key	Value
FileName	./usr/share/pyshared/dff/api/search/libsearch.py
FileSize	11009
MD5	A00F64F6D8343E425D2AAE3D88639039
SHA-1	04C6B1CA90152F33ECE2AA450A81714692A4210B
SHA-256	429BAD015F739E93AD9F2924A0ECE4C42EEE84BCA33421536B46D96CD2449A01
SSDEEP	192:9oqJUiqwCQB8JHv8q9wRITwJ1FfSKYwZwuwqwWwswVwFwVw/wqHqwpxwAwRwWwDV:9oqaxM6kdfFWgLb5rWW+E3HqYxB0nirJ
TLSH	T1AC32E257C869DC26963FC17888936466BA081C9351D8147CBDBC7BB8BF33C2587E588D

Key	Value
FileName	./usr/lib/python2.7/dist-packages/dff/modules/volumes/partition/_PARTITION.so
FileSize	148932
MD5	F73F1BE19A591D717AE5C3EFF66B3330
SHA-1	056760886AB3337B3EFE5A6BEBA4E30F88831903
SHA-256	91F296BE3D9FEE3C049C48D075A24EB4861FAB5A29A99319247DB5114E3757A0
SSDEEP	3072:XYv3x5V2q1WD1yXH6jloXV0qQC8U78t4:U3p1IyXHomRv8U7M
TLSH	T133E31A45F6C784F2DD7749B4809BE32F8B61DA06C265C7A5EF4C5F0AD83364A0D1A3A8

Key	Value
CRC32	BF021295
FileName	__init__.py
FileSize	648
MD5	24CC72B8746785F1DFE72B8D972C7FDB
OpSystemCode	362
ProductCode	13792
SHA-1	05758A55ADC08A6CB0BE7449928DDD2ED9D6CB55
SHA-256	1538BC18A09BE3578297CA8A072CB77071F282DBB64B16E2FC986F34122F47F1
SSDEEP	12:0dE3fWEs/viYKaed0HywOXS8CDSAFYP9Yq6deRJ1n:6R/niLp0H8XSnSEmr6w9n
SpecialCode
TLSH	T15FF09E1A7650853225015BC7EB578FC6A34E8E2066D8BC065455C046839192DA6DA2ED
db	nsrl_modern_rds
insert-timestamp	1646979809.1941512
source	NSRL

Key	Value
CRC32	0599ADB2
FileName	complete_raw_input.py
FileSize	8463
MD5	50F10B462C9B22A295F49778584E3B5D
OpSystemCode	362
ProductCode	13792
SHA-1	0585CC28EAB6DD448D4D7B5BC9D0AF86FFB80E74
SHA-256	7902AB9FA75C45457BF43C4C0342D090F66E8F1C77164487D9747B085B3E2BE3
SSDEEP	96:uEumLzYJR+7Q/eZB719ANCMzx8+hb7huM5lm0McmTxJbWzk576bre4FU7Xdc:uEuY0JwZvis0MJTFB6Xe4FUbdc
SpecialCode
TLSH	T1C80221112A285831D347C92AA997B8472A1FBD93190CD434FCFC80D46FA266483F5EF6
db	nsrl_modern_rds
insert-timestamp	1646979831.429575
source	NSRL

Key	Value
FileName	./usr/lib/python2.7/dist-packages/dff/api/datatype/_libdatatype.so
FileSize	219804
MD5	570859994C2AE028D791ADB507D4A369
SHA-1	070EED9CB993B678B3E6E836DA3345CBE9B4B842
SHA-256	CA2189177F003BBABA4964A41D7387A4E244566AE300558B9766F2ACBB7F2DE6
SSDEEP	6144:FpGr6Hm9prQI7AXHU1ngFaS47pYZgeBPHRTqeSUEO:JHRaS47qZgSP9qNO
TLSH	T1E624199AF5C75CF2D97B46B580DBD23F8B51C101CAA1C6A4F68EAF18EC63C132619391

Key	Value
CRC32	43B8B838
FileName	./usr/lib/python2.7/dist-packages/dff/modules/ram/volatility/memory_plugins/example1.py
FileSize	4347
MD5	C26FAC5A2748D87AAB7D7A139FA1B3B2
OpSystemCode	362
ProductCode	13792
SHA-1	078F8DC20BF579095AF4962DFDE64EBCB62448F2
SHA-256	CA74C7A453BFCDFB0B716076B031BDEF4B715315E83E8F172DCD25DD349AB269
SSDEEP	48:HYyUjoSoZXlnXZFYOJRx7qfRu3B7Bhlwq7x65PpMsVUvUoIOn1qPzlBNQaz3HBY1:PlTPJdhlv4ZpMsxin1qPz5Qaz3HBY1
SpecialCode
TLSH	T1EA918205997CD07A40E7069A78C3D0CAD3DED79742046BA83D2DD2584F52E3982B7EE5
db	nsrl_modern_rds
insert-timestamp	1646980554.7894726
source	NSRL

Key	Value
CRC32	8C5ECC59
FileName	string.py
FileSize	2619
MD5	BABC2311AAC513BC468AACCD54D509BB
OpSystemCode	362
ProductCode	13792
SHA-1	07ABAA328CCBE152D6408D4F447715694EA62BFA
SHA-256	7E7304DE1EC51E490E07F030B37861A11A0B87D650F8765211A6F7A657448A22
SSDEEP	48:iJcLp0mvXVAANmiGhBenPgTkAOj6QQiCnzm3PdsM:igumPmAKBent7JCnzmaM
SpecialCode
TLSH	T1E551E026290689514647EE27E4D7DE47E70F6907A93CB8A0B8FE91000F51475C1E5EF9
db	nsrl_modern_rds
insert-timestamp	1646980594.4889178
source	NSRL

Key	Value
CRC32	F4AF110A
FileName	./usr/share/doc/dff-1.3.0/README.gz
FileSize	2238
MD5	3709B48962E4E04B554D590298AE1042
OpSystemCode	362
ProductCode	13792
SHA-1	07C5D9B937DF0EB7710A0D00100E7CFDDA8716AA
SHA-256	AC163CA6FA5433B833DDA5DBBFE56BA1561F76E88F53656DEFDEA854FACAA4B5
SSDEEP	48:X7iJDg59rR3jeejK/AEa1v1KDk/tJhYHKyidCSt69z4NVQ:oA9rxjM/m1//tMHridahaQ
SpecialCode
TLSH	T116411989B69B5F65BD1BEAEE60D614AC2ED0F402EA287AD16436018C7C1240BD2E3D45
db	nsrl_modern_rds
insert-timestamp	1646980632.8787453
source	NSRL