Result for 3863C98A21BB71179F690E4A69F95328061B0EF6

Query result

Key Value
FileName./usr/sbin/kmsgsd
FileSize21988
MD54FA9EFB66C7F4FD21CB58EFF88CE12D8
SHA-13863C98A21BB71179F690E4A69F95328061B0EF6
SHA-256037EF1A329ACFCB6F250AC59AA649B90349C87A0D21C7E3295297F8ED5EDC817
SSDEEP384:w6jR4yaggTjYx13N1ejS17P9mrRDCvOFRaTYQzbbbbor8m:D4FfTkn3NE0L9mrZ3FgU8
TLSHT18BA2E75ABE5ACDF6E1C306B6060B436E15315496A753E3AAFF0D271837312047E2A23F
hashlookup:parent-total1
hashlookup:trust55

Network graph view

Parents (Total: 1)

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key Value
FileSize179464
MD5D54CC53F6A8C017184B65349A222E3D5
PackageDescriptionPort Scan Attack Detector PSAD is a collection of four lightweight system daemons (in Perl and C) designed to work with iptables to detect port scans. It features: * a set of highly configurable danger thresholds (with sensible defaults provided); * verbose alert messages that include the source, destination, scanned port range, beginning and end times, TCP flags, and corresponding Nmap options; * reverse DNS information; * alerts via email; * automatic blocking of offending IP addresses via dynamic firewall configuration. . When combined with fwsnort and the iptables string match extension, PSAD is capable of detecting many attacks described in the Snort rule set that involve application layer data.
PackageMaintainerThiago Andrade Marques <andrade@debian.org>
PackageNamepsad
PackageSectionadmin
PackageVersion2.4.6-2
SHA-1FCB5C861F9213A500F184CF0E3EBD91A670E43E2
SHA-2565D907BB066DB0CF2A843CCBA5491AF74ABAAFC0EA28BA99621BA5B03D5B60E93