Query result

Key	Value
FileName	usr/lib/sudo/sudo_intercept.so
FileSize	29920
MD5	65FE5DAADEDD75C843DE600EBB803E1F
SHA-1	52B05314E4F7FD6E63827419E539736CE9D01AD4
SHA-256	F01AAECB3F466C77555274BF26BB5CA056D774ACF3A8D4CAA524F552C01298AE
SSDEEP	384:LNpTHXH3oO/ZFjEmeGlTE8XL67na+8bBuOEUrDvKmaIv2+Wmb5Y1Fu:z33oOxFjbfR4alMUf7rPWmb5Y1k
TLSH	T138D249C7E2DBEC1FC4C246BCBC0F1F00922DE4819695CB0B671491E63A9196DFAA57C1
tar:gname	root
tar:uname	root
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileName	http://dl-cdn.alpinelinux.org/alpine/latest-stable//community//armv7//sudo-1.9.17_p1-r0.apk
MD5	C5A4F96651F176ABEAAA8FEA1C5E8CBB
SHA-1	8A9281330E8B9A9022394D8C4279F2C22757B253
SHA-256	F73AB1DD88FDFC63981776A713758843AD62F21F6A627F54B2231870A64C78C1
SSDEEP	12288:kRgu3YbcS7684RRwospiRCe0/7AAxxI6pV0fe7saOh2kOqQI/:oMz76zDwooiRC3ZKfeYHV
TLSH	T15CF423B5479B51DBB50FB5E320D971CB937BBC68186F0381A238B6B007A298D215D73E