On the 29th May 2021, v3.3.0 was released for Windows, OSX and Linux. This included the Linux version in the form of a compiled binary, and a Debian package.

A user kindly reported to me that the Debian package worked fine except that the libewf library file was not copied to the correct path, meaning the EWF (E01 forensic images) hashing capability that is new to v3.3.0 did not work unless the user manually messed around creating the path manually. As a result I have adjusted the Makefile of the project, and rebuilt the Debian package again. This obviously generates new hash values so I have re-zipped it, re-hashed it, and re-uploaded it. You can find the new package HERE.

If you are one of the 112 users who downloaded the first Debian package between 29th May 2021 and 7th June 2021, please consider uninstalling quickhash using the following syntax :

sudo dpkg -r quickhash

and then downloading the new version and installing that. Once you do, the ability to hash E01 forensic images should be possible.  This is especially true for any of the maintainers of Linux based forensic CD’s, who should update this for certain, given they are often used for forensics.

As a reinforcement of the message : there is no issues or problems with the original package for most Linux users. It just did not copy the libewf-Linux-x64.so file to the right place, meaning any Linux users who wanted to utilise this new forensics feature will not be able to, unless they use the new package. The new package should fix the path issue by creating and copying the library file into a “libs/x64” subfolder.

This note comes with my apologies for any inconvenience. Sometimes I miss things.

Thanks