| Key | Value |
|---|---|
| FileSize | 141582 |
| MD5 | B08426409C234820EB0E9F3CFFBD4A1E |
| PackageDescription | VMcore extraction tool This program is used to extract a subset of the memory available either via /dev/mem or /proc/vmcore (for crashdumps). It is used to get memory images without extra uneeded information (zero pages, userspace programs, etc). |
| PackageMaintainer | Louis Bouchard <louis.bouchard@ubuntu.com> |
| PackageName | makedumpfile |
| PackageSection | devel |
| PackageVersion | 1:1.5.8-4ubuntu1 |
| SHA-1 | CF9F6EB367AD2018C9D3BEBADD96D21F090BE4F5 |
| SHA-256 | BB147048D32342388A4F316925888EC90D3D323130F44C87196D56C089AE4C24 |
| hashlookup:children-total | 6 |
| hashlookup:trust | 50 |
The searched file hash includes 6 children files known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/makedumpfile/copyright |
| FileSize | 975 |
| MD5 | 18284B66E661AF3F1A27039B49A552A9 |
| SHA-1 | 17417ADA00C64F1C3E5D218E425358957BF83652 |
| SHA-256 | 3B5A30AC95C8B6E5A60001602653A95CCF996BA2BD3969274F36E7AF56D5CE20 |
| SSDEEP | 24:0XLHCnfmcgceodrRjZ2OCgZnu2XpmF+yA+w9:eLHC+cgceeBZCN2YFnw9 |
| TLSH | T15111216D41AC616BF7120A93EA8998CCE23F79A8306F4883F45DB54C66234F07250D6C |
| Key | Value |
|---|---|
| FileName | ./usr/bin/makedumpfile |
| FileSize | 383196 |
| MD5 | 0C7D7E4F2BA4416E9AE37A6E14099866 |
| SHA-1 | 5964044C43D82FDA691C223A77399EAE0F084BD6 |
| SHA-256 | 0B1AA791C08FAC88A581008E2312CAC8AB2685527E9B4522AEE4D06F7ED0BE60 |
| SSDEEP | 6144:64kCMx+q5Y4uVcF9PKOy0U/hzV3oYutfNU0EpwycFbvLn3qkC1oUQbiJWIWBbabT:64kCMx+34UzQiKbvjoQrEBN |
| TLSH | T1DC841845E69289B1D6538FF4319AF71334633687B153F4FB7ACD2F68B935180E60A228 |
| Key | Value |
|---|---|
| CRC32 | 157D1382 |
| FileName | ./usr/bin/makedumpfile-R.pl |
| FileSize | 4947 |
| MD5 | 7234BDBC3D27FDAF9314AEE2603B04D9 |
| OpSystemCode | 362 |
| ProductCode | 17406 |
| RDS:package_id | 293682 |
| SHA-1 | 2FFD8114E8A68A173B82772FA96BCB763F2ABA1A |
| SHA-256 | 0C009476DA63ED89D200D41F8B078943954FCE87AB4EF18E9875EB3283DC497C |
| SSDEEP | 96:pzfS0akGFkXzw70tQnjpCrA7eSGwUrA8C/D8pv2F:FfvaTFmw70tQnj8rA7e5rA8C/D8x2F |
| SpecialCode | |
| TLSH | T1BCA19487F7A1C106790360A5AA04C1EF8ABCBAF54C5A4CF71529847833A8C7DC2F7D66 |
| db | nsrl_modern_rds |
| insert-timestamp | 1678948496.405303 |
| source | RDS.db |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/makedumpfile/changelog.Debian.gz |
| FileSize | 3094 |
| MD5 | BB2902F0CABCC90FE6500AC120662886 |
| SHA-1 | 252411B09130E4A58ADF02620C26EB6C16B18B8C |
| SHA-256 | CF41D8EA8F8E315D31A5A7D3AE3EAE999835F586C8DB61B9D1943D88F75BA36B |
| SSDEEP | 48:X+oVyHRWMv2k20iIz+xpq+EmYTauAyIrxHo3GLcgO4begXqM8ZzknOYvKl:OoVK+/czjuuAycXcqVaZ1Wv4 |
| TLSH | T15F513CE9404F9487066FED8980CF01F9731914E9D6B98EAC3D98652EAF125D01773B2E |
| Key | Value |
|---|---|
| CRC32 | E01723A8 |
| FileName | makedumpfile.8.gz |
| FileSize | 6638 |
| MD5 | 1910F4DC79B365179BD373C11472B7F4 |
| OpSystemCode | 362 |
| ProductCode | 17393 |
| SHA-1 | C89526B93E4BA56481FCE176BA115252A67BB6A4 |
| SHA-256 | 83B9316F0FCEB6E03FADCFDA6126983057A9AF9CB8B7407BF8BE982A4E461DD6 |
| SSDEEP | 192:/oHHZdTiGw3aT4cNKmNYYla2GRzVl1FqbMlf7:/oHH3g3z8Xnw5FwM17 |
| SpecialCode | |
| TLSH | T141D19F7ED976002D6F5979C32579D40E72EAE101DE54FBFA78F3621A0839EA1C4B0364 |
| db | nsrl_modern_rds |
| insert-timestamp | 1647050414.1377678 |
| source | NSRL |
| Key | Value |
|---|---|
| CRC32 | 492DB86E |
| FileName | makedumpfile.conf.5.gz |
| FileSize | 3999 |
| MD5 | 927A689312573C1CEFDD4AC5839AD5D1 |
| OpSystemCode | 362 |
| ProductCode | 17393 |
| SHA-1 | 8FC1B54AAF211CFF9CE3E9625AFC939A10CF6553 |
| SHA-256 | 7F8ADDEBE890DE7210E8F05D77B5395594445E8E61DA4EE25DBDE06210528EB8 |
| SSDEEP | 96:8gQ9Jo1rIrtbty0qDEc0cyW/1wrfycbk5t1TpoH6sH+ID/z:8h9IIhI0qD89iefyxT47D/z |
| SpecialCode | |
| TLSH | T116817DF93992B05E0CE56C98F7B53A2333F50D15D06B3BB66363CC497621BC406A8AD0 |
| db | nsrl_modern_rds |
| insert-timestamp | 1647029997.8195193 |
| source | NSRL |