Query result

Key	Value
FileName	usr/lib/sudo/sudo_intercept.so
FileSize	42172
MD5	1F9A43F48FC94C53DF52D8D150607C76
SHA-1	8EAC7161345E2B875B9D9C1182D2E98A32AE1CD4
SHA-256	522F48264959DA1A0C9BD025695482B6D2E645409A982B8B220E6000DB8669B4
SSDEEP	768:qwXBBQwTyd9uXQILQ5e925OvcgsXysOmK6AQMk7ThUeSTfd0:qwRqwTzsq6ysqEttU
TLSH	T1FE13E7EAA1469BAAC6916571F18F4724736343ADC3DFB30745300A342FD266F8F27A25
tar:gname	root
tar:uname	root
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileName	http://dl-cdn.alpinelinux.org/alpine/latest-stable//community//armhf//sudo-1.9.10-r0.apk
MD5	C43F523ED9F6D268E81CE6D4A7F62646
SHA-1	D5F874A6215BD953400F28CF72E4D4651BDB1B22
SHA-256	49C38E405587AF3D1770C7573411A7D427433F148A5806F39F7118BAF0093C3B
SSDEEP	24576:3Cr1h1CT8HQ9o3X5lT7jdBGAHmO4igGhrgBIgt+Wr:y1CXon7TP/GAHZn2BrJr
TLSH	T15E0533CA2CFEE82CCD411D137C61B40297DE2A9903415B002F7D58BF9AD6BDD5A1BA4B