Query result

Key	Value
MD5	353A659468B62453D0432BE345849E08
PackageArch	x86_64
PackageDescription	The Prelude Log Monitoring Lackey (LML) is the host-based sensor program part of the Prelude SIEM suite. It can act as a centralized log collector for local or remote systems, or as a simple log analyzer (such as swatch). It can run as a network server listening on a syslog port or analyze log files. It supports logfiles in the BSD syslog format and is able to analyze any logfile by using the PCRE library. It can apply logfile-specific analysis through plugins such as PAX. It can send an alert to the Prelude Manager when a suspicious log entry is detected.
PackageMaintainer	luigiwalser <luigiwalser>
PackageName	prelude-lml
PackageRelease	2.mga8
PackageVersion	5.2.0
SHA-1	D7EA730644ABBBD554CDE591169D502EEB1CAC41
SHA-256	50EC01EADE7D053929AF2A6DBFF5406457DF8A9F961075199C9EB833EA36E443
hashlookup:children-total	15
hashlookup:trust	50

Network graph view

The searched file hash includes 15 children files known and seen by metalookup. A sample is included below:

Key	Value
FileName	./usr/lib/.build-id/73/008682bbfd6717f853ba56336beb17af7dcfeb
FileSize	42
MD5	83A09CC9E1318FF663FAEC349DE2E924
SHA-1	399C3DD3056EBF404749B476C5E081C9A83DB1B0
SHA-256	A1B883781E6908127CA0C76C01EDAACF7B37590C88EFE0D023C4E638F7059C29
SSDEEP	3:gCD/i3BEN:X/eEN
TLSH

Key	Value
FileName	./etc/rc.d/init.d/prelude-lml
FileSize	1356
MD5	F37EBF9D3EFA954629F54C42F758B519
SHA-1	F1E5A2D6E6BDA5458F3D3723EA0BCD10AB7C41E8
SHA-256	317DF5AAA76C2B228B7141F74781454BBD3D42138A2589DCF6520CEBA85741AF
SSDEEP	24:F/Cvr+MbWqswPIuJ6yMb/MbPNqRIJq/EHOx20Tv7GPrJuZ94WDjK:FqDUNwwE66N+MHOhTCOTjK
TLSH	T1A32111F73034B9318D2F0A98C49DE7F92D31A10F81A3FCFAA03A66D1108919A85B8875

Key	Value
FileName	./usr/lib64/prelude-lml/debug.so
FileSize	15376
MD5	7CF68BEA07D791CA52805943F332EC52
SHA-1	0F614AFE1208E123D8A1F5D3F97A7EEC87064ADE
SHA-256	5D2C8AEC99D300C0991691CEEC845A3816A43E60E70DAA750C2963788C7515B2
SSDEEP	96:RReQNaXBWBcO97buN6zoz41ZQO3S8YddxggDmK6Cd+DUXviBpqI+iVv4Jo5k:RRA8oN6zh1Z+lxDXNUUXq7qfi
TLSH	T1CF62E94F6364CA7FC69C02B080A742B02276B950E77243277E2466741D5335CDF679EE

Key	Value
FileName	./usr/share/doc/packages/prelude-lml/NEWS
FileSize	31061
MD5	85B8445552C67AD410134D4E0C752101
SHA-1	E4B5A542C525561450711F7278BC05699264D725
SHA-256	0B8685A1B42DCC25D7D295A8EE7A6300520E43BA74BB44096D72C52707042D43
SSDEEP	384:xrPK/o951i9ipVVMebv4r9zOXIgMRbEmY/ZzzA+g6ha5FTjTzl+xcJYUDD7a4EW:ZS/e6ipVBy9CXI5FEmazzA+gMg9Kqau
TLSH	T1A5D2E8A2B66833261A521DBAD1CA81D3EF7C786FD353B5A039CD45C83F01471D2F6A98

Key	Value
FileName	./etc/prelude-lml/plugins.rules
FileSize	836
MD5	446480A94DE7E09917ACD9C48361234B
SHA-1	CCC52AC2BE9F8DCFFA54115CD8F46FC7995DC8D5
SHA-256	6E009A53AD344BD1563EA2A2B79A8D3F53886948567979355EA3FCCD2C3F6BF9
SSDEEP	24:SslZ+0CJBxd1ayS3EPSR0LSjTWdEkoF7lS5EPgLRSaAgm:S++0CJBX1ayS3yS+LSncEnS5ygLqgm
TLSH	T172014C1F878D253101E584E23099E1D9462AD2D9ABF0E091F7DE855C6B3497E51A9D40
tar:gname	bin
tar:uname	root

Key	Value
FileName	./usr/share/doc/packages/prelude-lml/HACKING.README
FileSize	780
MD5	CE979EC4C4C9FD55949BA6867F0EB356
SHA-1	2D6ACFF0197B79132F46DBE5FAFAC14975C0E1F0
SHA-256	5CE75927A9FE75588107C5E2A7BF5979807A22A5AA9F21DFB3EB7497F9FB6DDB
SSDEEP	12:hBe+oVOrqLRh15X2voInFi2yE0MevyCmFQMl9Kr1yAHkxbpfgtthcAkU5tDWg2:XywrqLvzHIE2M5yCmFjqNHkxNEeAvW
TLSH	T13E01F11EF36C62A8254609917282E3F6A20F41DACB214431E116D4C533BAA7E853F5DD

Key	Value
FileName	./usr/lib/.build-id/63/02b6bfc25846d647ba4dec993ff3f4dd83ed58
FileSize	32
MD5	5E93B0CD1DA9245551389EFF574F33AD
SHA-1	AD0C142622AB684C99FF78FF69DF971427E5E5BF
SHA-256	38BEDF3DAE95EA1618C2076D21DAA4468A8F3E85C5C777CC68A612ADED4C6F78
SSDEEP	3:gCD2MI:X2R
TLSH

Key	Value
FileName	./usr/share/doc/packages/prelude-lml/README
FileSize	1742
MD5	A5924B09DE4B82B6F15A5BE943CA79F2
SHA-1	CBF9D34C6A6077CE6250E1E681663EBFF1E19795
SHA-256	E36B8D95200965696F8FB79B0338C070E7A370B6B52F1227F7187AC201B3B4E0
SSDEEP	24:ykwdzTaLVNECo7w5QlXlunfy1XICIrYKZQgDnJkt8MswCHJfVKcDwaq+ygXA:SwECo7Hlua1XtKZQg1kt8DXJfVsP
TLSH	T1AE3116FFA2687270734525C87216E0FBCBA375AEE2602571FC9C94D5632A39C4236B85

Key	Value
FileName	./etc/prelude-lml/prelude-lml.conf
FileSize	7191
MD5	9F413DD828C3D401762CECA4E2CFC919
SHA-1	3200F3F42A0E4F69CADCE4AF0D8E14A8675C0503
SHA-256	FC654F5231D96AEB077CD59B575F729FD8BCE12F7D216BD4316727488150E851
SSDEEP	192:mKqkehijEnNUiMyB0Xus6vzGogpcNadGSO25e:mkSkUsW+OP
TLSH	T12DE17566D24D363B13CF13A150AEE2DD9B3D904D6E73302162DD98687201E7892FBBE5

Key	Value
CRC32	4E46F4A1
FileName	./usr/share/cmake/Templates/fedora/gpl-2.0.txt
FileSize	18092
KnownMalicious	malshare.com
MD5	B234EE4D69F5FCE4486A80FDAF4A4263
OpSystemCode	362
ProductCode	15109
RDS:package_id	313212
SHA-1	4CC77B90AF91E615A64AE04893FDFFA7939DB84C
SHA-256	8177F97513213526DF2CF6184D8FF986C675AFB514D4E68A404010521B880643
SHA-512	AEE80B1F9F7F4A8A00DCF6E6CE6C41988DCAEDC4DE19D9D04460CBFB05D99829FFE8F9D038468EABBFBA4D65B38E8DBEF5ECF5EB8A1B891D9839CDA6C48EE957
SSDEEP	384:ghUwi5rpL676yV12rPd34ZomzM2FR+dWF7jUI:gmFWixMFzMdm7jUI
SpecialCode
TLSH	T13A82A42E770443F205C202A16A4F68DFA32AD5B9723E1155386DC15E236FE35C3BFA99
db	nsrl_legacy
insert-timestamp	1728991626.679368
mimetype	text/plain
nsrl-sha256	rds241-sha256.zip
source	snap:MmD5jWldYNMNgb2rFFht3FNKGJx1FLLV_613
tar:gname	root
tar:uname	root

Key	Value
FileName	./usr/share/doc/prelude-lml-devel/ChangeLog
FileSize	771768
MD5	83C8AA0A95497A11ED226358F445FAE6
SHA-1	937A27D61489121D4D9BFB59944AD48017AFDD2F
SHA-256	5193D5C7D963831CBEAD5B77EA8EB9119BCE8BCC84B17AB7AF748898199D2509
SSDEEP	6144:Hg9tZYmUQdDwhi0dps2aj5UnQX7fJUDSdLnD76H/1TslUWBIpzB+KgQg:A9tZYmUQdDwFMbVUU7fJUDenD7QCBI9g
TLSH	T11DF44ED79E3E25132175E3B385A06092BE4BF2DF6325A4B8397DB1C4DF0971412BEA09

Key	Value
FileName	./usr/lib/.build-id/85/756436b74653da9e36a9552b78efe60cc7b787
FileSize	41
MD5	20CAD69C5CC986874FF1A1934FAC0645
SHA-1	05B3907EC4C0AC1EF88F6CADD58D2BBE08E3CE6E
SHA-256	4D14A20139E1BC210FBDDE16BCA08EFCD629D767F6BCF0FD12D6A50EDDDDFD83
SSDEEP	3:gCD/i3VwKn:X/KwK
TLSH

Key	Value
FileName	./usr/lib64/prelude-lml/pcre.so
FileSize	41448
MD5	17EA3FB6653CAD5E13740CD2B94944E9
SHA-1	8B4EC49C328745BC9D65D08369A810B20528B6C5
SHA-256	2A58A8E142E8F81BECA03517BA0DD7503515DE700E93AEC2C662A4D8B31D4EC0
SSDEEP	768:F9iqGcWTAc3BlN4OhDs2L1wF2dbwUCu0eRbRNmflLdfU913:PiqGcWTAc7NaF2d8Up0QtN8LdfU913
TLSH	T195134C5BB1D149BCC5D88170CEA7D932A9707005E7606E6EB940937C1E92B34CB2FE76

Key	Value
FileName	./usr/share/doc/prelude-lml/AUTHORS
FileSize	114
MD5	CF3E49FA50248D0A0C89D6BF622736A3
SHA-1	FE9280DEC27F2D0D2AD673B55345C7574355FBF0
SHA-256	EC48BA539A4569DC26AF5D609E14ECB759A63231760E2ABB7D920A0BA1D5A811
SSDEEP	3:L2UorMXR9D9Vf0S4FQXMqKEL1pz0tYMKn:L2UorMB9T4+MqKEh+YMKn
TLSH	T144B012ED2138B05B7F43984C5265D4E79DD33DEAC17080D77A30F4D107740515428381

Key	Value
FileName	./usr/sbin/prelude-lml
FileSize	132408
MD5	1B17AC3D38C017181C157736395AE123
SHA-1	725C9D5850168B30D4A604BB41C5D0C22A39BC66
SHA-256	5F493F0300209F50DA64450E23D988BB8D458130F1B92ABE5BC2762C061FC9FA
SSDEEP	3072:DsATZOJ2SDpD7H+fiXDUb+2gnMFNLzqNp:DH9ApD+AUbrhNnqNp
TLSH	T18DD35C4B32D08DFDC5C0C970C5E792616A72F428E621673B3542A7782E1AF286E5FB35