Result for 3EF20E2C9DEA54E4C0DD29D108F61CE3DEBA6CE4

Query result

Key Value
FileName./usr/lib/aarch64-linux-gnu/prelude-lml/pcre.so
FileSize39160
MD5102D9B0190819A41B4CBE394AFC6E831
SHA-13EF20E2C9DEA54E4C0DD29D108F61CE3DEBA6CE4
SHA-256392682BD7B2C0C71997FF3D85FBD7588A0146D4EF069B7666E30D3F11CF73D81
SSDEEP768:opGcETeKr1nf0IIEl5cd2exS/pE4nJZAtzBdR3:opGcETeK5nf55cBxN4nJZAFHR3
TLSHT18003081FF60C9867D996E3749AAA4BA0B3375048D15397D27A36C36C6F8A18C8DF140A
hashlookup:parent-total1
hashlookup:trust55

Network graph view

Parents (Total: 1)

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key Value
FileSize219160
MD55349F52785A22ED02E035ED3725F08C2
PackageDescriptionSecurity Information and Events Management System [ Log Agent ] The Prelude Log Monitoring Lackey (LML) is the host-based sensor program part of the Prelude SIEM suite. It can act as a centralized log collector for local or remote systems, or as a simple log analyzer (such as swatch). It can run as a network server listening on a syslog port or analyze log files. It supports logfiles in the BSD syslog format and is able to analyze any logfile by using the PCRE library. It can apply logfile-specific analysis through plugins such as PAX. It can send an alert to the Prelude Manager when a suspicious log entry is detected.
PackageMaintainerPierre Chifflier <pollux@debian.org>
PackageNameprelude-lml
PackageSectionadmin
PackageVersion5.2.0-2
SHA-1CBB867283EA1FA5A9F6C44ACD78989BAF7EBAF11
SHA-25640C55F4F66EC40D7F8BDB18D5CF56A794C6FB6A634EBD738F56EBC3B12B72B3F