Query result

Key	Value
FileName	./usr/bin/kshark-record
FileSize	18256
MD5	5AF41CE011B00FA98E81FB6E3B686CC3
SHA-1	00DFB50E89C747967E58C3FBAE748AE34B51C7ED
SHA-256	56C2DF01B0A2D69AC4149AEFDBB210F8737E043B7CAEC66010AFB5B209A1DA54
SSDEEP	384:YHekCE9IrErMEwHjbjc0aaaPaCvOOLOaI0kCCnEnG:+t5IBjoaaPaCvOOLOaImCe
TLSH	T1D582A5CF7B97C623DCD02831B25747907E26A899D3D35303D52CA31459929FF4EA2B98
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileSize	3510764
MD5	3B52DA3B9E1449ACACE5E716C9B393E2
PackageDescription	Utilities for graphically analyzing function tracing in the kernel. Data for analysis may be generated by the trace-cmd utility.
PackageMaintainer	Sudip Mukherjee <sudipm.mukherjee@gmail.com>
PackageName	kernelshark
PackageSection	devel
PackageVersion	2.9.1-1~bpo10+1
SHA-1	2DDD4B65076C8EA2380EF4692EA708F526067445
SHA-256	7F844B7C0256A08F6382294D3C1618B38009D9A4765BF5C819DEA19063B24B65