Result for 1C7A35E672ADE8B032F322DACFE97E89D53C3313

Query result

Key Value
FileName./usr/sbin/kmsgsd
FileSize18512
MD532960890E3F1B2C5DADA48C4DDAFBCEB
SHA-11C7A35E672ADE8B032F322DACFE97E89D53C3313
SHA-25603AF8CB44E4FCC952DE7A9575C8E0A42D9C23D4D756F5E2477DA39AA042FF4E8
SSDEEP384:26Req/Jjiy6oxyEfTuACkIEeanBTPPY31QmTykoI:N/JB6ox7qAC5oBMQMgI
TLSHT11D82D7D66B71C8EAE8F53776525F827A537B2936B782460C3F8DD30C5B927001A22B71
hashlookup:parent-total1
hashlookup:trust55

Network graph view

Parents (Total: 1)

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key Value
FileSize177356
MD508389DBF6C2D52B763549F433D4ABFCD
PackageDescriptionPort Scan Attack Detector PSAD is a collection of four lightweight system daemons (in Perl and C) designed to work with iptables to detect port scans. It features: * a set of highly configurable danger thresholds (with sensible defaults provided); * verbose alert messages that include the source, destination, scanned port range, beginning and end times, TCP flags, and corresponding Nmap options; * reverse DNS information; * alerts via email; * automatic blocking of offending IP addresses via dynamic firewall configuration. . When combined with fwsnort and the iptables string match extension, PSAD is capable of detecting many attacks described in the Snort rule set that involve application layer data.
PackageMaintainerThiago Andrade Marques <andrade@debian.org>
PackageNamepsad
PackageSectionadmin
PackageVersion2.4.6-2
SHA-10C9C3223B7B46C9815773895DA0D52CF8CA37681
SHA-256F53F592525684FBCDEABD81862B4A316DA100AE98E508518E108647AC0607434