| Key | Value |
|---|---|
| MD5 | E03AB7FDF544D07F6EDDD8D795AAD3FC |
| PackageArch | x86_64 |
| PackageDescription | Prelude-LML is a log analyser that allows Prelude to collect and analyze information from all kind of applications emitting logs or syslog messages in order to detect suspicious activities and transform them into Prelude-IDMEF alerts. Prelude-LML handles events generated by a large set of applications |
| PackageMaintainer | https://bugs.opensuse.org |
| PackageName | prelude-lml |
| PackageRelease | lp152.2.3 |
| PackageVersion | 5.1.0 |
| SHA-1 | 13B2116B6FA0A9C00FA7762C4498E2C00B82E7DC |
| SHA-256 | 024C08961994BF74143F12A0EAC04B3877169EA3B272F6B02DAA375A4ABBD62A |
| hashlookup:children-total | 12 |
| hashlookup:trust | 50 |
The searched file hash includes 12 children files known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/prelude-lml/HACKING.README |
| FileSize | 756 |
| MD5 | 1475976CC703D5CACF83483486774A0B |
| SHA-1 | 2FCBA98BFEAFCEA21E12CAD85F979583F9B51DA0 |
| SHA-256 | 1DB2E6985C825EB5742271954E017E2F8DDEE0A11A022EDDA6F9A00C19F7846C |
| SSDEEP | 12:hBe+oVOrqLRh1y4AvoInFbyE0MevyCmFQMl9Kr1yAHkxbpfgtthcAkU5tDWg2:XywrqLvw49IxM5yCmFjqNHkxNEeAvW |
| TLSH | T19D01D01EF26C62A4198105E17682E3F2660F41DACB324432E257D4C533BBA7E853F5DD |
| Key | Value |
|---|---|
| FileName | ./usr/lib64/prelude-lml/debug.so |
| FileSize | 10408 |
| MD5 | B9F710859795620F56904BC51DA41017 |
| SHA-1 | 30410F2F597E4F852B916E8D5469C7F1F928C8CC |
| SHA-256 | 2CCFE439E73B94E6794EF76C7C6B5D6CF9251411AA6D48005CBA82F73535D0E1 |
| SSDEEP | 96:RWxAJpBWBc+97t4NHv/ULB8fgDm3P4nMFl/4n6BbeuuR+iVvIAJsC5wM:RWxmp8qNEL2Cm3Anmlgn6BiMiqAJs |
| TLSH | T1E522B70FA2B4877FD494033480FB497036B0A495D77283277664A1787E927AC4B779AF |
| Key | Value |
|---|---|
| FileName | ./usr/lib/systemd/system/prelude-lml.service |
| FileSize | 184 |
| MD5 | 0C94BB2412116D6989F201D2E1D78FDD |
| SHA-1 | 9EEEBFCCDD311F33C67F9AD1DD9952DF0963E49D |
| SHA-256 | B767B68E401D49A4AE8633CFEA039FE4ACF3543BCA64202BFD0F27C0A005E9C2 |
| SSDEEP | 3:zMZa7+rUSXABlRVGKRy6tafKlEXC0FrBv3AXjQJAXTMzdK+aQ9sHSv2rSkQmWA18:z8tU6wlzGKRyFClEXN5aXjyADMzdK+ac |
| TLSH | T16BC02201F55024F18C2B1A67CF6243D405254145DF8AF4203AA1286825D098A40200A8 |
| Key | Value |
|---|---|
| FileName | ./usr/bin/prelude-lml |
| FileSize | 137472 |
| MD5 | 23745AA3AB55CB96F4020C7B8EB0F52B |
| SHA-1 | 8D491951D26FFCE164869183EF833C4D32E94A78 |
| SHA-256 | 4E169445C07042A692775A7581340E94E43497562D83A4EFEFEF16AA1B2196CE |
| SSDEEP | 3072:vd8Nt/LW3rhoynZy+0Wlib6++NoF8r4fml:vIwrX8+0I+Mnr |
| TLSH | T178D34B6B729154BCC5C5CA7086ABE2613AB0B444D3222B3F394497742E12F6C1F1FB76 |
| Key | Value |
|---|---|
| FileName | ./etc/prelude-lml/plugins.rules |
| FileSize | 836 |
| MD5 | 446480A94DE7E09917ACD9C48361234B |
| SHA-1 | CCC52AC2BE9F8DCFFA54115CD8F46FC7995DC8D5 |
| SHA-256 | 6E009A53AD344BD1563EA2A2B79A8D3F53886948567979355EA3FCCD2C3F6BF9 |
| SSDEEP | 24:SslZ+0CJBxd1ayS3EPSR0LSjTWdEkoF7lS5EPgLRSaAgm:S++0CJBX1ayS3yS+LSncEnS5ygLqgm |
| TLSH | T172014C1F878D253101E584E23099E1D9462AD2D9ABF0E091F7DE855C6B3497E51A9D40 |
| tar:gname | bin |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | ./etc/prelude-lml/prelude-lml.conf |
| FileSize | 7189 |
| MD5 | 7CEA0E04485A5FC93D356A9901557F6D |
| SHA-1 | 70722B676CB9E4BB421B8D66BD6C14DA2A858210 |
| SHA-256 | C7D6DEB93E9807498760E0624CED010B4552501A7B2F380E4D2FA7C5615E00F5 |
| SSDEEP | 192:mKqkehijEnNmfiZiMyB0Xus6vzGogpcNadlO25e:mkSmUUsWiOP |
| TLSH | T1ADE17566D24D772713CF07A150AED1DDDB3D904D6F63201262DD98683200E7892FBBE5 |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/prelude-lml/README |
| FileSize | 1728 |
| MD5 | 05E12D515E6B5F984C8B880E9A9D5009 |
| SHA-1 | E187FDE5A267DC18E07A31E90A4738422A14958F |
| SHA-256 | 64826052D54C20F3E93CCE7E6BDC00D2BCBE96D6E850C1955C5D06EEE6BB9FEF |
| SSDEEP | 24:yAwdzTaLVNECo7w5QlXlunfy1XICIrYKZQaIJkt8MswCHJfVKcDwaq+ygXA:kwECo7Hlua1XtKZQ3kt8DXJfVsP |
| TLSH | T16A3116FFA2687270734525C87216E4F7CB6375AFA26025B1BCDC84D5632A39C4132B85 |
| Key | Value |
|---|---|
| FileName | ./usr/lib/tmpfiles.d/prelude-lml.conf |
| FileSize | 34 |
| MD5 | AF758F6271D4CBAC4C9842C3087E015F |
| SHA-1 | 25D770E9CAC73A12FB213E5562AB4A3C3E3A7D01 |
| SHA-256 | 9A6660A59E058E6A0C996D4773093F02C8905D7047440D685174C91E59F3B14B |
| SSDEEP | 3:kQe4VjP3HJ:kQldP3HJ |
| TLSH |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/packages/prelude-lml/NEWS |
| FileSize | 30688 |
| MD5 | 2CD3446B86A4749D4F228A535379E4FC |
| SHA-1 | A903CF9D0C489AA3E1E7836C6C933B10102742A2 |
| SHA-256 | 17216942151D59E9A5BB2DD41F3051D94A36E7FC2BFAF29F06DD16F28C2BCA3B |
| SSDEEP | 384:nPK/o951i9ipVVMebv4r9zOXIgMRbEmY/ZzzA+g6ha5FTjTzl+xcJYUDD7a4EW:nS/e6ipVBy9CXI5FEmazzA+gMg9Kqau |
| TLSH | T17DD2E9A3B66832271A521DBAD1CA82D3EF6C786FD353B5A435CD45883F01470D2F6A98 |
| Key | Value |
|---|---|
| CRC32 | 4E46F4A1 |
| FileName | ./usr/share/cmake/Templates/fedora/gpl-2.0.txt |
| FileSize | 18092 |
| KnownMalicious | malshare.com |
| MD5 | B234EE4D69F5FCE4486A80FDAF4A4263 |
| OpSystemCode | 362 |
| ProductCode | 15109 |
| RDS:package_id | 313212 |
| SHA-1 | 4CC77B90AF91E615A64AE04893FDFFA7939DB84C |
| SHA-256 | 8177F97513213526DF2CF6184D8FF986C675AFB514D4E68A404010521B880643 |
| SHA-512 | AEE80B1F9F7F4A8A00DCF6E6CE6C41988DCAEDC4DE19D9D04460CBFB05D99829FFE8F9D038468EABBFBA4D65B38E8DBEF5ECF5EB8A1B891D9839CDA6C48EE957 |
| SSDEEP | 384:ghUwi5rpL676yV12rPd34ZomzM2FR+dWF7jUI:gmFWixMFzMdm7jUI |
| SpecialCode | |
| TLSH | T13A82A42E770443F205C202A16A4F68DFA32AD5B9723E1155386DC15E236FE35C3BFA99 |
| db | nsrl_legacy |
| insert-timestamp | 1728991626.679368 |
| mimetype | text/plain |
| nsrl-sha256 | rds241-sha256.zip |
| source | snap:MmD5jWldYNMNgb2rFFht3FNKGJx1FLLV_613 |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| CRC32 | E19D9AD2 |
| FileName | ./usr/sbin/rcznc |
| FileSize | 7 |
| MD5 | AAABF0D39951F3E6C3E8A7911DF524C2 |
| OpSystemCode | 362 |
| ProductCode | 183711 |
| RDS:package_id | 263811 |
| SHA-1 | 4CF5BC59BEE9E1C44C6254B5F84E7F066BD8E5FE |
| SHA-256 | 9DF6B026A8C6C26E3C3ACD2370A16E93FFFDC0015FF5BD879218788025DB0280 |
| SSDEEP | 3:jg:jg |
| SpecialCode | |
| TLSH | |
| db | nsrl_modern_rds |
| insert-timestamp | 1654961073.836576 |
| source | modern.db |
| Key | Value |
|---|---|
| FileName | ./usr/lib64/prelude-lml/pcre.so |
| FileSize | 35992 |
| MD5 | FF2EB52F4654FAF22B86408CF97CB58A |
| SHA-1 | C1B8E9E11CED0A9EE4F0CF20AB7CBC2DE99DDB1A |
| SHA-256 | D2A8556BFFFC8855AD99DF7AB4E7B5427D479E2E25F748D70F69EAFF1221F073 |
| SSDEEP | 768:0cE/G7HXVFFludXhfUkhsKF3XZFXUwyqhjgxPS1+Q8rp:0cE/G7HXywcnZaKhjWPSy |
| TLSH | T1A5F26B4FB39588FCC8D48770C9A79766BD703045E301962B7644A7B85A52F384B2FE36 |