Query result

Key	Value
FileName	usr/lib/sudo/sudo_intercept.so
FileSize	46888
MD5	898792D2C249D9710A122C9195110BB3
SHA-1	44F58F759D62F4902CBD3FC2D813A4D133B7B0D9
SHA-256	E2596821076217BD779A499B7945949A92B0BDC59452D39B3E327889E0BC2A14
SSDEEP	768:bxMY///N9O87dQ1TTog9hSnhnzGWQN0FboKTC2XP:tMY//18H1v99Mnhq4xf
TLSH	T1F523D887AA29C999C5B02B31D1AF86B492773D3615D41A1CBB9CF72D3CB37609A35C30
tar:gname	root
tar:uname	root
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileName	http://dl-cdn.alpinelinux.org/alpine/latest-stable//community//s390x//sudo-1.9.15_p5-r0.apk
MD5	3200E133A510DDC8CABD0B855D548FDA
SHA-1	FA559EA0CD7B655A33E4EDFEF0D82291FBEB7605
SHA-256	E531B2E4BD9C8F451674651AA44B175DCA936BFECE9E713582D19189409B81D6
SSDEEP	12288:cbWxxD+fwdyiMNl1a6KDz3jAlI1CFhdlBaBiiVojtTXEGuaCtsxJW5sqgqV7IXlV:kWxxqYdwlszfjAlI8FhdlBPMo1XEGunK
TLSH	T15CF433073573C521659A07CAD88D86EDEDBEFE7DF135B88A62DB97072D060D2842C4E2