Result for 1868F1D044C576B61EA21663D3DC948663FEF219

Query result

Key Value
FileName./usr/sbin/kmsgsd
FileSize19120
MD51CCB8C63DA521F8A0BF5182AA973ECEB
SHA-11868F1D044C576B61EA21663D3DC948663FEF219
SHA-2565FC926763377E1122CAC67C10506B15B1140547E4B094F723B3E791F0E1B4CD6
SSDEEP384:nBAIBqjnTqpfpKcfurSQ7JMQmMlpQxYuSGjLlaPjj2gKYG9D:FBqjnGpfpKcmrS0JMlxYupjLlaPjj2gg
TLSHT135829946AF500EE7C4C7CD35095E936616FDDCCBA2C1636BB95C89942B039197CDB8C8
hashlookup:parent-total1
hashlookup:trust55

Network graph view

Parents (Total: 1)

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key Value
FileSize178924
MD58B3492541567A764178B10AA5ECE4628
PackageDescriptionPort Scan Attack Detector PSAD is a collection of four lightweight system daemons (in Perl and C) designed to work with iptables to detect port scans. It features: * a set of highly configurable danger thresholds (with sensible defaults provided); * verbose alert messages that include the source, destination, scanned port range, beginning and end times, TCP flags, and corresponding Nmap options; * reverse DNS information; * alerts via email; * automatic blocking of offending IP addresses via dynamic firewall configuration. . When combined with fwsnort and the iptables string match extension, PSAD is capable of detecting many attacks described in the Snort rule set that involve application layer data.
PackageMaintainerThiago Andrade Marques <andrade@debian.org>
PackageNamepsad
PackageSectionadmin
PackageVersion2.4.6-2
SHA-1CC94DC06717CBD7974C4C585E8AAE79A6F00CECF
SHA-256041ADF217985517DF5C5FDA216791DF003AEAF0FED6D14C5F46AF7F72BD8F602