Query result

Key	Value
FileSize	1208190
MD5	EAA73AD60DBEA27FBDC27423125AACDF
PackageDescription	Data integrity and host intrusion alert system Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected on memory using steganography. . Main features * Complete integrity check + uses cryptographic checksums of files to detect modifications, + can find rogue SUID executables anywhere on disk, and * Centralized monitoring + native support for logging to a central server via encrypted and authenticated connections * Tamper resistance + database and configuration files can be signed + logfile entries and e-mail reports are signed + support for stealth operation
PackageMaintainer	Javier Fernández-Sanguino Peña <jfs@debian.org>
PackageName	samhain
PackageSection	admin
PackageVersion	4.1.4-2+b1
SHA-1	03DC37D8A8E7B148741765882383B822391D19EE
SHA-256	D7DBBD581A3A8A3DDB2A7829B5AAB13FB19B8600EACD252E3BE20A40CA3DF8B2
hashlookup:children-total	267
hashlookup:trust	50

Network graph view

The searched file hash includes 267 children files known and seen by metalookup. A sample is included below:

Key	Value
CRC32	ED411D32
FileName	./usr/share/xml/docbook/stylesheet/suse-ns/flyer/images/callouts/3.svg
FileSize	1067
MD5	2826467C386668C96B28864C42B3745B
OpSystemCode	362
ProductCode	17075
RDS:package_id	302124
SHA-1	0051494D8CF6F899FB49B4A71CF607E69FC68901
SHA-256	AEE9CFDCE84F534199885405D90F980D294FFF3AD065DA380C8696A992BA40CD
SHA-512	421F599E72AF50898E114C4B8D738CB4158D1E3487A3471ACFE5A1520B4FDD2C45EBD46B1F14C465E09FD66D6AE026DFF24168EAF23E6B0B551517169AD51C79
SSDEEP	24:2d8nArsrCpViArUqgIL9oPadRPsZRgX2PH:c8nArsrOEArUqvqSdhDk
SpecialCode
TLSH	T1681112498B4FD41CB1D0C671877137E7333555E8738A15B4E3872D3EB22A9946710EB8
db	nsrl_legacy
insert-timestamp	1728243985.9164813
mimetype	image/svg+xml
nsrl-sha256	rds241-sha256.zip
source	snap:wequGIeqkgIkU8TkAMvejZtOFx9AIu0W_7
tar:gname	root
tar:uname	root

Key	Value
FileName	./usr/share/doc/samhain/manual.html/stylesheet-images/callouts/12.png
FileSize	438
MD5	085052EB8D59BF02899B216E36127318
SHA-1	0135BC25CF8E36327B59AAF5391A8EDA664D418E
SHA-256	2A86193BABE39359A52BF6C0CA17002E158A6DA4883DBA99263DD0BB09094FC7
SSDEEP	6:6v/lhPkW9EJihH7vdQg9sMEdUjH/aGZymRmjwLTsOVmaaJ0LFobL1g1uZhX1Geup:6v/78wEkbvdQnZWvymRmSvmREo/jhX10
TLSH	T1F1F0ABC9D5C5C91ADA1A337B2521604D86B382175007222A740A5D2508BEB7F8C6FD11

Key	Value
CRC32	37CB884A
FileName	./usr/share/xml/docbook/stylesheet/docbook-xsl/images/colorsvg/important.svg
FileSize	19817
MD5	4D37B2FA7BF8EE3230F6A195C5720270
OpSystemCode	362
ProductCode	12601
RDS:package_id	302124
SHA-1	01473124ABDA665FFACF62D37F3E893B8BB2765E
SHA-256	A257F75F5A635B0D322BB588BC5E37DF8E173CD735EED2FFFAA4BAA84451873F
SHA-512	6ED7A69D5AB271F758142BB048EA41C5D1954FF87B984585E7ADD08C53EA9BE73F28A05B51592E24793685352F67EFC49AA978ECD1FB21D50DAB6B15E075D1E9
SSDEEP	192:GGga+9RF3e9YMRAuUQOaqXyiZpWpjDeZZ:GGDIzMRYQOvLDSXU
SpecialCode
TLSH	T13E92D787330C9D7CFA3204B9E72532B3606B855535A475A48AF320798A2B34D6E7BCDD
db	nsrl_legacy
insert-timestamp	1728243986.1102931
mimetype	image/svg+xml
source	snap:wequGIeqkgIkU8TkAMvejZtOFx9AIu0W_7
tar:gname	root
tar:uname	root

Key	Value
CRC32	3BD43F4B
FileName	./usr/share/xml/docbook/stylesheet/docbook-xsl/images/colorsvg/warning.svg
FileSize	17106
MD5	DE574DF7981BCB720860BE71EEBC610F
OpSystemCode	362
ProductCode	12601
RDS:package_id	302124
SHA-1	01D3B322C9D0B41ACBA2394D6B635172135D5FA0
SHA-256	F95A3F6043822840D8E64BA811BE6EC29C7CBB01E728B17DAD5163B35894643C
SHA-512	F73C4AA177C2A3E77DFE02FD31EC6F7A5A52B0812EE837B58047068AFE1905688CD954DD7AF0C1E4FC42F9DB172E3634C7F56FE63C396438E192EE38AB511E9B
SSDEEP	192:GGwP8cyTKsF4RRPZCMJgG71oG7ioVmi8iYSGsFWd4+p1Y:GGwP8cgFABCnG7mG7i4mRiYSGuN
SpecialCode
TLSH	T1B4721FD73B5897ECEA0048EEA13024CB32D7FC8978D06446D2C134567C5BAFE5EB496A
db	nsrl_legacy
insert-timestamp	1728243986.0429413
mimetype	image/svg+xml
source	snap:wequGIeqkgIkU8TkAMvejZtOFx9AIu0W_7
tar:gname	root
tar:uname	root

Key	Value
CRC32	128C30C7
FileName	./usr/share/xml/docbook/stylesheet/suse-ns/flyer/images/callouts/14.svg
FileSize	906
MD5	821B4B1BFEBD42F747465153006EEF8F
OpSystemCode	362
ProductCode	17075
RDS:package_id	302124
SHA-1	0283713C0F75AEB9FF524268CECBCCEA3C76A735
SHA-256	D1FAE5D438C33909D34190CE684E1F646420C7CAFD402008A6B251E1B0910E76
SHA-512	E18008E287B2F8AD6465836439D526710586A6BF0E1F77F5363D38F5FDF3115D41AA48BC49ED6DE3AE279C256F8407414E6028FF6EA4B0532079DC411F4B834C
SSDEEP	24:2d8nArsrCpViArUqgIL9oWE1oAsPpVhQO93:c8nArsrOEArUqvqWjA2hQE3
SpecialCode
TLSH	T1FD114401DF098C2E60119360C3B566D723307CE8A38A69B9F21B6D39B7295541905DFC
db	nsrl_legacy
insert-timestamp	1728243986.0281203
mimetype	image/svg+xml
nsrl-sha256	rds241-sha256.zip
source	snap:wequGIeqkgIkU8TkAMvejZtOFx9AIu0W_7
tar:gname	root
tar:uname	root

Key	Value
CRC32	457AF023
FileName	./usr/share/xml/docbook/stylesheet/docbook-xsl/images/home.png
FileSize	271
MD5	E829AF9457BA497BA3048A8EDF2C0E08
OpSystemCode	362
ProductCode	187169
RDS:package_id	182052
SHA-1	059754331DCCDA04688D1199B27F670DB25CF37A
SHA-256	1E1A1876A4DC9824979CC1774182196F0FE1549C2A6C9353D713B63299F6E093
SSDEEP	6:6v/lhP0wNtqMQyw/OaR7dgaxO9gIwkZiK5JDFkHiKml0bp:6v/7sjZ/OJ6SNZAHtS01
SpecialCode
TLSH	T174D0EBE483404C37EDC853290238A3A1ADB4C078CAE3BAEE1A5600626C9000BC2E4342
db	nsrl_modern_rds
insert-timestamp	1679425035.0732164
source	RDS.db
tar:gname	root
tar:uname	root

Key	Value
CRC32	87764A20
FileName	./usr/share/xml/docbook/stylesheet/suse-ns/flyer/images/next.svg
FileSize	1040
MD5	3496D53341C155149EFA3175C8B2AD83
OpSystemCode	362
ProductCode	17075
RDS:package_id	302124
SHA-1	06DA3A4241F97E05DB8F2E90EAA61F64C47B9384
SHA-256	167D09A5417B3A8260DDFAB304BC348DD5301E1016DA20DFA23D75EBE1C7547A
SHA-512	4E34472D6BB196F3C5FE41393BD994AC32DBDD864C9AFCF9C089C34294591108923059089A2716A90763E71ADB571E10A6274C7D94FF6D04C0BE14B2161CE7B6
SSDEEP	24:2dVJ0LrFYgiwbA8Qx1ZZ6ROd5NbsHhPiHRvEROd5NbsHhPiH4VKZ9X:cVJurFXWd1SOd/MFiHyOd/MFiH40T
SpecialCode
TLSH	T18411AF1543488F6E829E8231E768F9C6E066ECC7668074F033471222F9B8AE42C5A4FC
db	nsrl_legacy
insert-timestamp	1728243985.4671736
mimetype	image/svg+xml
nsrl-sha256	rds241-sha256.zip
source	snap:wequGIeqkgIkU8TkAMvejZtOFx9AIu0W_7
tar:gname	root
tar:uname	root

Key	Value
FileName	./etc/logrotate.d/samhain
FileSize	556
MD5	AA5A1154B3F381D4A4B3B1C3636045D2
SHA-1	07928FC7EE79297F8B9F86ACD6E7FC1B78427689
SHA-256	C24FBD85C18242B674EFF005BB6188ECE4BD7DA345B42B072F71F19C0928A08F
SSDEEP	6:EJInHaFNaIlMvdNQ2FFUZtefWAW717nRYnKSzBmFlMB1FxXMJLQAW71ynmOePFVW:gIaOdNd/U2fHW4zBylA56W4mLICzbW
TLSH	T1ADF0E54D26413E213BE0C82E4D3B9A8922434077ED661D2279CDF7A6DF4F15472A4365

Key	Value
CRC32	0CD829C3
FileName	./usr/share/xml/docbook/stylesheet/docbook-xsl/images/callouts/7.gif
FileSize	907
MD5	3B65F2E2286842F3DF086D355ACEB01B
OpSystemCode	362
ProductCode	17075
RDS:package_id	302124
SHA-1	079D7BD2561BC0D4921DC3842071D6BFE8CAA68B
SHA-256	3A3F2E5FA85BCA0E33C9FE947820658177AE754EB212782F863BC1D55119357B
SHA-512	87ECAC60EC60558770E5BB489F6486401370B54B84EBA13C55D67BAB5311B6B708F94E15C85BA42137F98E7B0BDFA4D4C05D327EED041BB165CD7B8F1C21ED69
SSDEEP	24:HIIsQAQ8Ic44Yo4bo4Y4ofXQLo4LoXgMXI7gAgXIL115qdO:HI3nfXP3nfXfX/HXPX/HXa1P
SpecialCode
TLSH	T10A1163D0E2B8D5132CF1967899C08F62CC84295428631F8DF6AB24846649F592E6D23E
db	nsrl_legacy
insert-timestamp	1728243985.7453668
mimetype	image/gif
nsrl-sha256	rds241-sha256.zip
source	snap:wequGIeqkgIkU8TkAMvejZtOFx9AIu0W_7
tar:gname	root
tar:uname	root

Key	Value
FileName	./usr/share/doc/samhain/changelog.gz
FileSize	39774
MD5	C0F780E583E57472C98F94EB84FAEE64
SHA-1	08DE27869831103994D1A2E39EA1A0A09C41C17B
SHA-256	55A84BBAD8AF36AF17A976D839D2F17D99C7E9356288751C204E1AD81557F744
SSDEEP	768:BuCM4GCDSVGoNbNwQjAtBLK/H0/GjWqelGEd8ygbe63/Td+:ZGfV1BNpUtBLj3q+GPJbe63/TI
TLSH	T1DA03F196567B14BFD181B2A2F7FD034AB722A5624640B4D40FE587DB076E0D3A3CCB86