| Key | Value |
|---|---|
| FileName | usr/share/bcc/tools/doc/execsnoop_example.txt |
| FileSize | 6787 |
| MD5 | 52C107246A80AB5514F0F1377EA6597D |
| SHA-1 | 07AAD253DF7C7397A611A48A2FEADAF605D05265 |
| SHA-256 | EA1C06774C61270ABB205C00FC3C8ECDCF96F8A807384A108027F2A021F695C9 |
| SSDEEP | 96:JdmMZG8c2egAVSVYeV064JJx1ffR7p/DCJm2c+BUw0QsaCgCoFM0H9Vz:eMZG8e9VCYu03bx1ffXOKDwXsDjS |
| TLSH | T15AE19802F5CFB2F86D5278632958D9490AA272157E01F24578BD46C16B17BCEF3EBA0C |
| tar:gname | root |
| tar:uname | root |
| hashlookup:parent-total | 2 |
| hashlookup:trust | 60 |
The searched file hash is included in 2 parent files which include package known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | http://dl-cdn.alpinelinux.org/alpine/latest-stable//community//armv7//bcc-doc-0.32.0-r0.apk |
| MD5 | 02BD0C378F01FE14DD7F4F6E831CC14E |
| SHA-1 | 2EC713A75F1C978A50622CAB7C567DC44CF85E84 |
| SHA-256 | 5CAAA998866FE9E63F4AB68CCC23A3126E2350D4895FB344000E0006E196E7A7 |
| SSDEEP | 6144:wKNHkw57VagCE2MQfKmjJ7x7QwF7chzFb1amlZ6+mD/xXgF9SxoKFRPkDEE:1KwZorfz7x7QhzFxu3+/SxvFRPSEE |
| TLSH | T141842380A34846ED6DA3ABDE215057CE07131DD88B4B37A801B96F9B58CFDECBD4741A |
| Key | Value |
|---|---|
| FileName | http://dl-cdn.alpinelinux.org/alpine/latest-stable//community//armhf//bcc-doc-0.32.0-r0.apk |
| MD5 | 37F427347009EF2E41B4976C3C848B22 |
| SHA-1 | 8106997D5A90C752DCB3844B415602312035F5DA |
| SHA-256 | 7D9755DD6338DAD72622F81B19928E4F0590A8E92C3755FDF18CD92B8F4EA140 |
| SSDEEP | 6144:4KNHkw57VagCE2MQfKmjJ7x7QwF7chzFb1amlZ6+mD/xXgF9SxoKFRPkDEE:tKwZorfz7x7QhzFxu3+/SxvFRPSEE |
| TLSH | T103842380A70846ED6DA3ABDF215057CE07132DD88B4A37A801B96F9B58CFDEC7D4741A |