Query result

Key	Value
MD5	63FFA27A6C973956A6EC83D5FAF2E13F
PackageArch	s390x
PackageDescription	The Prelude Log Monitoring Lackey (LML) is the host-based sensor program part of the Prelude SIEM suite. It can act as a centralized log collector for local or remote systems, or as a simple log analyzer (such as swatch). It can run as a network server listening on a syslog port or analyze log files. It supports log files in the BSD syslog format and is able to analyze any log file by using the PCRE library. It can apply log file specific analysis through plugins such as PAX. It can send an alert to the Prelude Manager when a suspicious log entry is detected.
PackageMaintainer	Fedora Project
PackageName	prelude-lml
PackageRelease	1.el8
PackageVersion	5.2.0
SHA-1	1E3037182A1686E0A9F6B43A32F6E7D685DC42DF
SHA-256	C93FBF834C7ECA87B9672A275372120059F14D47B8A3B82C27F94E68F2D530F0
hashlookup:children-total	13
hashlookup:trust	50

Network graph view

The searched file hash includes 13 children files known and seen by metalookup. A sample is included below:

Key	Value
FileName	./usr/lib/.build-id/73/008682bbfd6717f853ba56336beb17af7dcfeb
FileSize	42
MD5	83A09CC9E1318FF663FAEC349DE2E924
SHA-1	399C3DD3056EBF404749B476C5E081C9A83DB1B0
SHA-256	A1B883781E6908127CA0C76C01EDAACF7B37590C88EFE0D023C4E638F7059C29
SSDEEP	3:gCD/i3BEN:X/eEN
TLSH

Key	Value
FileName	./etc/prelude-lml/plugins.rules
FileSize	836
MD5	446480A94DE7E09917ACD9C48361234B
SHA-1	CCC52AC2BE9F8DCFFA54115CD8F46FC7995DC8D5
SHA-256	6E009A53AD344BD1563EA2A2B79A8D3F53886948567979355EA3FCCD2C3F6BF9
SSDEEP	24:SslZ+0CJBxd1ayS3EPSR0LSjTWdEkoF7lS5EPgLRSaAgm:S++0CJBX1ayS3yS+LSncEnS5ygLqgm
TLSH	T172014C1F878D253101E584E23099E1D9462AD2D9ABF0E091F7DE855C6B3497E51A9D40
tar:gname	bin
tar:uname	root

Key	Value
FileName	./usr/lib/systemd/system/prelude-lml.service
FileSize	138
MD5	6418C224E5053F6383BDB625BB5AB03F
SHA-1	213258946530DD5C99AD5F1030A6620935523DE7
SHA-256	1BF3E17E9BF20FD5E70A41860F89C56381512EBBC3487F767031422136046939
SSDEEP	3:zMZa7+rUSXABlRVGmDMzdK+aQmMSv2rSkQmWA1+DRvn:z8tU6wlzGmDMzdK+aBJcLQmWA4Rv
TLSH	T14DC02B25F440B0B1980B2EABCE3247A849104648EF8CF4207AB2142D06C450A94300BD

Key	Value
FileName	./usr/lib64/prelude-lml/pcre.so
FileSize	41328
MD5	F5BE82CA141809E9AA2F3509201F0989
SHA-1	145810F2F2D2DCB64CC656BA84BECAA69DAC66E4
SHA-256	1518FED819A2DDEACA80DAE433A015A6F72941ED262CAEA8364BE0316F4D3C9A
SSDEEP	768:q+cu/GEAcT5NkJA/kdyDrPOKPJLrW3Z9zU662NoJ5qiaQ:Rcu/GEAcTzkJAM8PXPJLSJ9Mxa
TLSH	T11303F78B7A298999C0F07AB2D5AFDBB4923B7536B7C45908FF6CC31908D37105E76820

Key	Value
FileName	./usr/share/doc/packages/prelude-lml/HACKING.README
FileSize	780
MD5	CE979EC4C4C9FD55949BA6867F0EB356
SHA-1	2D6ACFF0197B79132F46DBE5FAFAC14975C0E1F0
SHA-256	5CE75927A9FE75588107C5E2A7BF5979807A22A5AA9F21DFB3EB7497F9FB6DDB
SSDEEP	12:hBe+oVOrqLRh15X2voInFi2yE0MevyCmFQMl9Kr1yAHkxbpfgtthcAkU5tDWg2:XywrqLvzHIE2M5yCmFjqNHkxNEeAvW
TLSH	T13E01F11EF36C62A8254609917282E3F6A20F41DACB214431E116D4C533BAA7E853F5DD

Key	Value
FileName	./usr/lib/tmpfiles.d/prelude-lml.conf
FileSize	36
MD5	6E1EE4B44ECA83D673275BFBAAC16AEE
SHA-1	6DB5DE0E9DCA111560CF6026AFE4E1D873F90E62
SHA-256	65B86C577B7A26A43656ACC949EF66D04844AA7EF114CF8428019DD33D182953
SSDEEP	3:kQe4VjP3HWn:kQldP3HW
TLSH

Key	Value
FileName	./usr/sbin/prelude-lml
FileSize	146224
MD5	732809F047C46F5EEFC118FFA2B486B2
SHA-1	57D5D78CBE5C9EA2074D362B086832AF198B7BE0
SHA-256	6F2B8BA02BA27CD0907C2328B6F2EC7BB703A77B89396AA062AB5B7F6B168DEB
SSDEEP	1536:L0ql55BV08rOw4+vrx/ia76wvsGfBUki63O6Hk2dm7ZzGuSJmS3Ez5N:oCbbLtiaBvYa3OKk2U1zhQE
TLSH	T1ADE34B877E2A99A7C0F1AB75806F9BB1937B7979BBC44908BB6CC3190C537044B356B0

Key	Value
FileName	./usr/lib64/prelude-lml/debug.so
FileSize	11376
MD5	65D734504223A3DDC3F8543109085DA9
SHA-1	BCF502B07D0BA49BD5CAE74EA9FCA0C95466F936
SHA-256	2686A4CD2A70EED5D5428F5832CD2A217EC970FEC997658FAA546B13C6827897
SSDEEP	96:4V5BWBcy9YnjNNv5XwCcNGWU36uRqreGi4EW+9zEVqXnp4Vmu8+DDO3:g8YjvZw7sWU3Dcre347
TLSH	T1FF32865A6F3589AFC4F8577040EF83B4A336A945B39A874ABB5CC7502D53720CF22E91

Key	Value
FileName	./etc/prelude-lml/prelude-lml.conf
FileSize	7191
MD5	9F413DD828C3D401762CECA4E2CFC919
SHA-1	3200F3F42A0E4F69CADCE4AF0D8E14A8675C0503
SHA-256	FC654F5231D96AEB077CD59B575F729FD8BCE12F7D216BD4316727488150E851
SSDEEP	192:mKqkehijEnNUiMyB0Xus6vzGogpcNadGSO25e:mkSkUsW+OP
TLSH	T12DE17566D24D363B13CF13A150AEE2DD9B3D904D6E73302162DD98687201E7892FBBE5

Key	Value
FileName	./usr/share/doc/packages/prelude-lml/README
FileSize	1742
MD5	A5924B09DE4B82B6F15A5BE943CA79F2
SHA-1	CBF9D34C6A6077CE6250E1E681663EBFF1E19795
SHA-256	E36B8D95200965696F8FB79B0338C070E7A370B6B52F1227F7187AC201B3B4E0
SSDEEP	24:ykwdzTaLVNECo7w5QlXlunfy1XICIrYKZQgDnJkt8MswCHJfVKcDwaq+ygXA:SwECo7Hlua1XtKZQg1kt8DXJfVsP
TLSH	T1AE3116FFA2687270734525C87216E0FBCBA375AEE2602571FC9C94D5632A39C4236B85

Key	Value
CRC32	4E46F4A1
FileName	./usr/share/cmake/Templates/fedora/gpl-2.0.txt
FileSize	18092
KnownMalicious	malshare.com
MD5	B234EE4D69F5FCE4486A80FDAF4A4263
OpSystemCode	362
ProductCode	15109
RDS:package_id	313212
SHA-1	4CC77B90AF91E615A64AE04893FDFFA7939DB84C
SHA-256	8177F97513213526DF2CF6184D8FF986C675AFB514D4E68A404010521B880643
SHA-512	AEE80B1F9F7F4A8A00DCF6E6CE6C41988DCAEDC4DE19D9D04460CBFB05D99829FFE8F9D038468EABBFBA4D65B38E8DBEF5ECF5EB8A1B891D9839CDA6C48EE957
SSDEEP	384:ghUwi5rpL676yV12rPd34ZomzM2FR+dWF7jUI:gmFWixMFzMdm7jUI
SpecialCode
TLSH	T13A82A42E770443F205C202A16A4F68DFA32AD5B9723E1155386DC15E236FE35C3BFA99
db	nsrl_legacy
insert-timestamp	1728991626.679368
mimetype	text/plain
nsrl-sha256	rds241-sha256.zip
source	snap:MmD5jWldYNMNgb2rFFht3FNKGJx1FLLV_613
tar:gname	root
tar:uname	root

Key	Value
FileName	./usr/lib/.build-id/63/02b6bfc25846d647ba4dec993ff3f4dd83ed58
FileSize	32
MD5	5E93B0CD1DA9245551389EFF574F33AD
SHA-1	AD0C142622AB684C99FF78FF69DF971427E5E5BF
SHA-256	38BEDF3DAE95EA1618C2076D21DAA4468A8F3E85C5C777CC68A612ADED4C6F78
SSDEEP	3:gCD2MI:X2R
TLSH

Key	Value
FileName	./usr/lib/.build-id/85/756436b74653da9e36a9552b78efe60cc7b787
FileSize	41
MD5	20CAD69C5CC986874FF1A1934FAC0645
SHA-1	05B3907EC4C0AC1EF88F6CADD58D2BBE08E3CE6E
SHA-256	4D14A20139E1BC210FBDDE16BCA08EFCD629D767F6BCF0FD12D6A50EDDDDFD83
SSDEEP	3:gCD/i3VwKn:X/KwK
TLSH