Key | Value |
---|---|
FileName | http://dl-cdn.alpinelinux.org/alpine/latest-stable//main//x86//audit-4.0.1-r0.apk |
MD5 | AB1C6D7476A185BAB88F869B54A832CB |
SHA-1 | CBD210B19441B4F43B885B0F9734246BB259FF4C |
SHA-256 | FE78C98F29357E3E0E5B796A2DF12B0080D570CDBC77AB74D65D76E907308208 |
SSDEEP | 6144:6AMJMy3uEJ/3MfqrCEQO2lwYWgP7N2FWHG2k+:6dJV3MyWEbRF5P+ |
TLSH | T1091423EE6A3BF0C0F7C11E96803F2116ED6689451358D17CACBDCB2C69464BAA1217B2 |
hashlookup:children-total | 59 |
hashlookup:trust | 50 |
The searched file hash includes 59 children files known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
FileName | usr/share/audit-rules/30-ospp-v42-2-modify-success.rules |
FileSize | 826 |
MD5 | F583259AD73E913DB48A76E8A0C24863 |
RDS:package_id | 294718 |
SHA-1 | 0035557B33B9BBB564FB1DE550BA031D49C37F30 |
SHA-256 | CAEB9A7F4BB77AB89027F11789E02EB6E9B4F2FC4346EEAEA25EFE1730D83FE6 |
SSDEEP | 12:j3toeuFecEIWyb0FeVEIWyb0FecwIwWyb0FeVwIwWyb0FeHAWyb0Fe3MAWybE:j2gczWKVzWKcwLWKVwLWKgWK3rWT |
TLSH | T15001D29342B430F05F6B43A3C864DEB83405471E93635DC5D186E9D9DD1943ABEC390E |
insert-timestamp | 1696439445.0774827 |
source | db.sqlite |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | etc/audit/audisp-remote.conf |
FileSize | 751 |
MD5 | 6B9A1CDD94C4BBD6412277D53D88B219 |
RDS:package_id | 288579 |
SHA-1 | 00D79C5DD2DB86433D421826135FEF137DC5A0E4 |
SHA-256 | C4DD732801EA45BCDC85CB8BCB1171E82DAF1FB100CFDED9521D8F6CF685FFF4 |
SSDEEP | 12:LzAKRDoWZ3wPHt073ebjM5KhdlFRRZxd9YqXEfv+BkwBZHmdEmMDADAkw42dKZri:1onP+DebLht/103+mwb+6b+Zr+ppHptz |
TLSH | T1DD01B87820FA3C331CB76989F1A2FA8703B9701434CC10047367D1A41DAD6F8DB175A2 |
insert-timestamp | 1670547901.3677263 |
source | modern.db |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | usr/share/audit-rules/README-rules |
FileSize | 1421 |
MD5 | 6405EBAE48BB89AF7FF7DF3385F1448E |
RDS:package_id | 294718 |
SHA-1 | 148ACBDD22A8BF666CA5A3E284E4AC9EBF910926 |
SHA-256 | 00E0926039F166A9F8D5B0B825E33358C7F2C1CCC6F86067BA2F684C26D13F95 |
SSDEEP | 24:zPopzNwKFwInXYhOOayvCEAqH/JuNLcoY1awOdzXxLmEZ:UxFJXYhfLAC7ONXxLZ |
TLSH | T125210F1B67899B2A408333DAFECE12D9AF1581BD5368A530549F001EBE5177915F39D0 |
insert-timestamp | 1696439444.1184876 |
source | db.sqlite |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | usr/share/audit-rules/30-ospp-v42-3-access-failed.rules |
FileSize | 625 |
MD5 | 852D1A243E59DD5961F3D9F5C5592BAC |
RDS:package_id | 294718 |
SHA-1 | 149781B05552A0CDA6C6159984F21EE76540A154 |
SHA-256 | 74AA84E36882DD5F1BC4F1953B938FC6425A00D28D0C36232B16A5AEADC7B413 |
SSDEEP | 12:jEttqOQYENLFecOr9DeFeVOr9DeFecOm9DeFeVOm9D+:jkqO3JcOr9nVOr9ncOm9nVOm9K |
TLSH | T1BEF096DFC33434744A0A179789B54FBDF808511D533359CAC68416C1FE514B52AC2EAD |
insert-timestamp | 1696439445.0373838 |
source | db.sqlite |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
CRC32 | 1770520E |
FileName | usr/share/audit-rules/10-base-config.rules |
FileSize | 244 |
MD5 | DEF45A38095C1C16EA919317B8020A83 |
OpSystemCode | 362 |
ProductCode | 214118 |
RDS:package_id | 294718 |
SHA-1 | 17C157514A3D87C906A6C830DF30C7FF3966C798 |
SHA-256 | 54C2CEBDAADFB928F7327CC066218E38743F0FF94D02FE162A7A415E148D23A8 |
SSDEEP | 6:jO2/q9RjRiNChQYF9FxNVYKAtOFPQYmFnNGd:jOuqHIQGYF9Lx+OQBgd |
SpecialCode | |
TLSH | T117D0A72D87B4B571095E03DF6A4673F39E6D214DA5603019208F683B458739FC53BA92 |
db | nsrl_modern_rds |
insert-timestamp | 1696439445.5309117 |
source | db.sqlite |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | etc/audit/plugins.d/syslog.conf |
FileSize | 525 |
MD5 | 64AFBBCB5ED0C15AEC305CA4A45E28E9 |
SHA-1 | 19DDE704F3D23358F36E4D5D8B59BA79E00DC3D5 |
SHA-256 | 23FB7F923EE15BA3185872C9E74B566C978A7BBCC18FB61B0FF5D4EB628FE355 |
SSDEEP | 12:q1AKRNcA5yxfAun+jxqupDoBuM33nLS+eyeRABYm/1Dfwv:qb5yxfAmK/U3LS+/fBYE1Ev |
TLSH | T136F08B77A268767509485B859A8BD2A2056A2BEA3138306260DE08AC1224EE592B7EC5 |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | etc/audit/plugins.d/filter.conf |
FileSize | 623 |
MD5 | 0B51A1EB31645D2D4ACEB430E48A76B0 |
SHA-1 | 23A133C75DC2A5C72BA4AC67E30A2838F2F71E9A |
SHA-256 | 653557ED83B35136025C1617DDE873D26DBADC817F25C10F4B79E88CAE5218B7 |
SSDEEP | 12:LV6X7gPWSl80xCc5ySXzR9oigrp5RTh37xinNRWai1rJOmdy5Wtj5:pCmNC0ySXzRWlp/hLcmai1MLo |
TLSH | T1CDF00C71F48F632000A71223FA1181A34B8C10CB52AC686071EEC81E871FCB0C737A59 |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
CRC32 | 3A7C8B00 |
FileName | ./usr/share/doc/auditd/examples/rules/20-dont-audit.rules |
FileSize | 516 |
MD5 | D934C2422C817C2B77642AD46BB84235 |
OpSystemCode | 362 |
ProductCode | 214118 |
RDS:package_id | 298595 |
SHA-1 | 25A33F84D427058145AB35E26BA4BEEA6678743E |
SHA-256 | DA083A4565D649A86F0FA56D1ED0B686BA78DA80A24B290924B9DA9FF30743D4 |
SSDEEP | 12:jLuJLLgf2WycHLrq5Az3RmNTF71KXdKlhkqw/Cpr:jLmLLgb7Lrq5AUYIUqqCl |
SpecialCode | |
TLSH | T162F00E216264F1314AAF23842F0D4DC90B2885A17B1136CC70A98E2AB533179F6C4EFD |
db | nsrl_modern_rds |
insert-timestamp | 1696458478.5309615 |
source | db.sqlite |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | usr/bin/aulast |
FileSize | 17700 |
MD5 | 02960E0961985B6E96B7374AF5BA70C0 |
SHA-1 | 265EE848D5748936CF42AC3D20C72944895B351E |
SHA-256 | 5B80AC05CCE93782F686338C6D5E8EB89FEEB0C054798F56A732C7A263DB9923 |
SSDEEP | 384:Z/lzufVggTjgCM0bGghQTZCgnFWrNXfWYSgpFZmZ:Z/duNfTpTbNNX57FZm |
TLSH | T18B82C65BFF42C476E591623C444B62286230CC1A9797C353FB1A2A3CAD56248C7AF73D |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
CRC32 | 7D420886 |
FileName | ./usr/share/doc/auditd/examples/rules/43-module-load.rules |
FileSize | 398 |
MD5 | 1DAC93C49AAB896D66DB0D4854C8E1F8 |
OpSystemCode | 362 |
ProductCode | 214118 |
RDS:package_id | 298595 |
SHA-1 | 290F56FD1F6FD3DD381283BFB3DF395090875DA8 |
SHA-256 | 88FE75A3BCB807FAD74CD020E6E04347F7DBD3EF16DE314C0C6A976CDDE0DDA0 |
SSDEEP | 12:jL14TZaLimblFeIvSSft7HFeRvSSft7HFelsftoJHFengsftoJB:jLIoL7WOft7AFft7AaftoJAnLftoJB |
SpecialCode | |
TLSH | T19EE06DAE82F798774DAF33A7F55812098DECB5DD21223E8880CD09D48D22836C1C326A |
db | nsrl_modern_rds |
insert-timestamp | 1696458478.1482227 |
source | db.sqlite |
tar:gname | root |
tar:uname | root |