Result for ABD1EB3D5C05871F1BA789A3087099E4B972565E

Query result

Key Value
FileName./usr/lib/prelude-lml/pcre.so
FileSize38780
MD53133ACDC00A29D582C4D854227792EF4
SHA-1ABD1EB3D5C05871F1BA789A3087099E4B972565E
SHA-256BAA538247448E1A09590B67C8BBDAD48DC4570D8545A79FA1B2DF6315D4934B9
SSDEEP768:JQDbca/wiAcHiwCfTRlHCcn3QmqcfDLZiPkI9d7l+LmxQcWwnpvZ:Ica/wiAcCwCtXngmTFykO9lBxQbG
TLSHT1E203195BF786D4B0F69246F54B47C269E131810A9253F2B1FA08739EF4B13249E3A23D
hashlookup:parent-total1
hashlookup:trust55

Network graph view

Parents (Total: 1)

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key Value
MD5A622128195D306C97A04E1B4BC7831F4
PackageArchi586
PackageDescriptionThe Prelude Log Monitoring Lackey (LML) is the host-based sensor program part of the Prelude SIEM suite. It can act as a centralized log collector for local or remote systems, or as a simple log analyzer (such as swatch). It can run as a network server listening on a syslog port or analyze log files. It supports logfiles in the BSD syslog format and is able to analyze any logfile by using the PCRE library. It can apply logfile-specific analysis through plugins such as PAX. It can send an alert to the Prelude Manager when a suspicious log entry is detected.
PackageMaintainerdaviddavid <daviddavid>
PackageNameprelude-lml
PackageRelease1.mga7
PackageVersion5.0.0
SHA-1EA29C9847B9E1162AADDC99BD7D84FE3BF21F7B3
SHA-25642AF1BA6AB07F65C2163177543C2492A5523FB68CDBF3B2C165C1B72C1F7790E