Query result

Key	Value
MD5	3E8EACE68B9589655AE64942CA819FD4
PackageArch	aarch64
PackageDescription	The Prelude Log Monitoring Lackey (LML) is the host-based sensor program part of the Prelude SIEM suite. It can act as a centralized log collector for local or remote systems, or as a simple log analyzer (such as swatch). It can run as a network server listening on a syslog port or analyze log files. It supports log files in the BSD syslog format and is able to analyze any log file by using the PCRE library. It can apply log file specific analysis through plugins such as PAX. It can send an alert to the Prelude Manager when a suspicious log entry is detected.
PackageMaintainer	Fedora Project
PackageName	prelude-lml
PackageRelease	2.el8
PackageVersion	5.1.0
SHA-1	1F2B166D864C45E105476A5A999DA201476F8E84
SHA-256	C2F488BBFC2BCCFCDA88B4AD550B4C0CD04AF61986156B6FE3CCF4ACE1AA3B9C
hashlookup:children-total	13
hashlookup:trust	50

Network graph view

The searched file hash includes 13 children files known and seen by metalookup. A sample is included below:

Key	Value
FileName	./usr/share/doc/prelude-lml/HACKING.README
FileSize	756
MD5	1475976CC703D5CACF83483486774A0B
SHA-1	2FCBA98BFEAFCEA21E12CAD85F979583F9B51DA0
SHA-256	1DB2E6985C825EB5742271954E017E2F8DDEE0A11A022EDDA6F9A00C19F7846C
SSDEEP	12:hBe+oVOrqLRh1y4AvoInFbyE0MevyCmFQMl9Kr1yAHkxbpfgtthcAkU5tDWg2:XywrqLvw49IxM5yCmFjqNHkxNEeAvW
TLSH	T19D01D01EF26C62A4198105E17682E3F2660F41DACB324432E257D4C533BBA7E853F5DD

Key	Value
FileName	./usr/lib64/prelude-lml/debug.so
FileSize	69016
MD5	A5BF425B1D39D48DAB9EEFD238EE6E88
SHA-1	13A9F1AF3E2521093B99F0BEA08D840CF3B9B8C0
SHA-256	F981803A9AC71CEB56304D1F79644F15248D97550E4471F5798751A8032A32E8
SSDEEP	96:mwb08BWBcd9qtvloZ2dRfIaYrf9UP9g/FTO4+XCWRsDx+DDzAkMOVpQE:ZY88nttoZp9Ug/F2XDRgIrAkM3
TLSH	T15A638756BB89953FC598C33440FA87E0F732E55A429287837D0882AC3FC57695E738DA

Key	Value
FileName	./usr/lib/.build-id/73/008682bbfd6717f853ba56336beb17af7dcfeb
FileSize	42
MD5	83A09CC9E1318FF663FAEC349DE2E924
SHA-1	399C3DD3056EBF404749B476C5E081C9A83DB1B0
SHA-256	A1B883781E6908127CA0C76C01EDAACF7B37590C88EFE0D023C4E638F7059C29
SSDEEP	3:gCD/i3BEN:X/eEN
TLSH

Key	Value
FileName	./usr/sbin/prelude-lml
FileSize	148952
MD5	6D9C312C8312A77B0119F0B0F4BFE4A7
SHA-1	9C48BEBE2F882A3A7782B06DE756BC5F36171E93
SHA-256	5288A2C53C3723CEAC0A6694D49EF2C789D468E802FD4D30EECAA6B3C5568E7E
SSDEEP	1536:/j1bpkAnV5jV08L0Cxz1pIQv2oUGiKAS2KHej8aTY5KLs7sXyDSfKvaqb7/vSc6:/ZVkOtJEQvdT1ejW4LugfGX3HS
TLSH	T1D0E33A5ABA0F2867E6C9C735C68BCB20B636D08CD3E151C3354A83BC56E26DD8EB5D44

Key	Value
FileName	./etc/prelude-lml/plugins.rules
FileSize	836
MD5	446480A94DE7E09917ACD9C48361234B
SHA-1	CCC52AC2BE9F8DCFFA54115CD8F46FC7995DC8D5
SHA-256	6E009A53AD344BD1563EA2A2B79A8D3F53886948567979355EA3FCCD2C3F6BF9
SSDEEP	24:SslZ+0CJBxd1ayS3EPSR0LSjTWdEkoF7lS5EPgLRSaAgm:S++0CJBX1ayS3yS+LSncEnS5ygLqgm
TLSH	T172014C1F878D253101E584E23099E1D9462AD2D9ABF0E091F7DE855C6B3497E51A9D40
tar:gname	bin
tar:uname	root

Key	Value
FileName	./usr/lib/systemd/system/prelude-lml.service
FileSize	138
MD5	6418C224E5053F6383BDB625BB5AB03F
SHA-1	213258946530DD5C99AD5F1030A6620935523DE7
SHA-256	1BF3E17E9BF20FD5E70A41860F89C56381512EBBC3487F767031422136046939
SSDEEP	3:zMZa7+rUSXABlRVGmDMzdK+aQmMSv2rSkQmWA1+DRvn:z8tU6wlzGmDMzdK+aBJcLQmWA4Rv
TLSH	T14DC02B25F440B0B1980B2EABCE3247A849104648EF8CF4207AB2142D06C450A94300BD

Key	Value
FileName	./etc/prelude-lml/prelude-lml.conf
FileSize	6976
MD5	F5183E2F0F05CC917DECDC23F1954FC8
SHA-1	AD3DE09C3934AB13B43FF7EA82F10826BCA92B4D
SHA-256	700BD25142068064FD3B9417CC5928C0CDBD21A9E96F822E8AA7ABE5E4297DCA
SSDEEP	192:mKqkehijEnNUiMyB0Xus6vzGogpcNadlO25e:mkSkUsWiOP
TLSH	T182E17466D24D3A3B13CF07A150AEE1DDDB3D904D6E63241262DD98683201E7892FBBE5

Key	Value
FileName	./usr/lib64/prelude-lml/pcre.so
FileSize	71104
MD5	84E34813ED5F0DAE6CDB2681CD277509
SHA-1	60104C4F7F5A8273556736E625A944921E2B6109
SHA-256	F4F635E3A2D8B57BFCACB27716C149CDD46DE0BD9F0BFEF75A31294925DEF0F3
SSDEEP	1536:eUcT/tTeKS5gKvOVczC5QeVcDCJQ3290L6xok3Gd0KX4qOYZvWuMMAuDK1U1:eUcT/teKklOYIuMMAuDK1U1
TLSH	T19163EA2AF60D987FD585D3744BC7A294F333904B937292F3F50C836C2A861998E769C9

Key	Value
FileName	./usr/share/doc/prelude-lml/README
FileSize	1728
MD5	05E12D515E6B5F984C8B880E9A9D5009
SHA-1	E187FDE5A267DC18E07A31E90A4738422A14958F
SHA-256	64826052D54C20F3E93CCE7E6BDC00D2BCBE96D6E850C1955C5D06EEE6BB9FEF
SSDEEP	24:yAwdzTaLVNECo7w5QlXlunfy1XICIrYKZQaIJkt8MswCHJfVKcDwaq+ygXA:kwECo7Hlua1XtKZQ3kt8DXJfVsP
TLSH	T16A3116FFA2687270734525C87216E4F7CB6375AFA26025B1BCDC84D5632A39C4132B85

Key	Value
FileName	./usr/lib/tmpfiles.d/prelude-lml.conf
FileSize	36
MD5	6E1EE4B44ECA83D673275BFBAAC16AEE
SHA-1	6DB5DE0E9DCA111560CF6026AFE4E1D873F90E62
SHA-256	65B86C577B7A26A43656ACC949EF66D04844AA7EF114CF8428019DD33D182953
SSDEEP	3:kQe4VjP3HWn:kQldP3HW
TLSH

Key	Value
CRC32	4E46F4A1
FileName	./usr/share/cmake/Templates/fedora/gpl-2.0.txt
FileSize	18092
KnownMalicious	malshare.com
MD5	B234EE4D69F5FCE4486A80FDAF4A4263
OpSystemCode	362
ProductCode	15109
RDS:package_id	313212
SHA-1	4CC77B90AF91E615A64AE04893FDFFA7939DB84C
SHA-256	8177F97513213526DF2CF6184D8FF986C675AFB514D4E68A404010521B880643
SHA-512	AEE80B1F9F7F4A8A00DCF6E6CE6C41988DCAEDC4DE19D9D04460CBFB05D99829FFE8F9D038468EABBFBA4D65B38E8DBEF5ECF5EB8A1B891D9839CDA6C48EE957
SSDEEP	384:ghUwi5rpL676yV12rPd34ZomzM2FR+dWF7jUI:gmFWixMFzMdm7jUI
SpecialCode
TLSH	T13A82A42E770443F205C202A16A4F68DFA32AD5B9723E1155386DC15E236FE35C3BFA99
db	nsrl_legacy
insert-timestamp	1728991626.679368
mimetype	text/plain
nsrl-sha256	rds241-sha256.zip
source	snap:MmD5jWldYNMNgb2rFFht3FNKGJx1FLLV_613
tar:gname	root
tar:uname	root

Key	Value
FileName	./usr/lib/.build-id/63/02b6bfc25846d647ba4dec993ff3f4dd83ed58
FileSize	32
MD5	5E93B0CD1DA9245551389EFF574F33AD
SHA-1	AD0C142622AB684C99FF78FF69DF971427E5E5BF
SHA-256	38BEDF3DAE95EA1618C2076D21DAA4468A8F3E85C5C777CC68A612ADED4C6F78
SSDEEP	3:gCD2MI:X2R
TLSH

Key	Value
FileName	./usr/lib/.build-id/85/756436b74653da9e36a9552b78efe60cc7b787
FileSize	41
MD5	20CAD69C5CC986874FF1A1934FAC0645
SHA-1	05B3907EC4C0AC1EF88F6CADD58D2BBE08E3CE6E
SHA-256	4D14A20139E1BC210FBDDE16BCA08EFCD629D767F6BCF0FD12D6A50EDDDDFD83
SSDEEP	3:gCD/i3VwKn:X/KwK
TLSH