Result for E0A679D0708CDDD042A4506EE8E3A3ABD25BE84C

Query result

Key Value
FileName./usr/lib/x86_64-linux-gnu/prelude-lml/pcre.so
FileSize43504
MD557F1580D4A1B0CCA5C006638FE3174B2
SHA-1E0A679D0708CDDD042A4506EE8E3A3ABD25BE84C
SHA-256F9A45BD4B127FF966A248CCB2A4F9815209F1E0C5F1580C13DD816BC328B6227
SSDEEP768:mqGc0TAcAQQoZhJR5BpxZhJR5Bpxs0ckMU8Es0ckMU8Es0ckMU8Es0ckMU8EP3/I:mqGc0TAcBIMbrPRG/xiIHtArId7vN
TLSHT1A413E80FB0914CBCC4D4A171CA9BD6226931B0589531162FAF4093BD2EF76359BBBD72
hashlookup:parent-total1
hashlookup:trust55

Network graph view

Parents (Total: 1)

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key Value
FileSize82496
MD543D3D1E677D34B8B3F09B1B9294504C2
PackageDescriptionSecurity Information and Events Management System [ Log Agent ] The Prelude Log Monitoring Lackey (LML) is the host-based sensor program part of the Prelude SIEM suite. It can act as a centralized log collector for local or remote systems, or as a simple log analyzer (such as swatch). It can run as a network server listening on a syslog port or analyze log files. It supports logfiles in the BSD syslog format and is able to analyze any logfile by using the PCRE library. It can apply logfile-specific analysis through plugins such as PAX. It can send an alert to the Prelude Manager when a suspicious log entry is detected.
PackageMaintainerUbuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
PackageNameprelude-lml
PackageSectionadmin
PackageVersion5.2.0-2
SHA-191609F1AB67590ABD21F6E001EC28938622BB7AE
SHA-2569E3DA3636244F3724A0A235453DF659AE41E94E1E917DD585154858ED8E5D8B0