Query result

Key	Value
FileName	./usr/lib/security/pam_nologin.so
FileSize	6416
MD5	804217053C5691413E006467E94267F4
SHA-1	02C6478892B8D089613E24112E662FAB8ACE30D5
SHA-256	8F809A193987CCC38E574973D80595DFE0765F57BD481EF0B347E171209BB925
SSDEEP	96:uGo5lzBWBP8uV4Ub7WX3QwzdQyOC49C/nzIhF06wDZWorSrzB2hiZloN+3jE/z7J:zo7z8p8uSUbyX3QwzqyOCfLzgorSBoC
TLSH	T180D1F707FE86CBF1C0E70738819FD75E5572D9115613D723A6083A593C37B9C9C1196A
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
MD5	73926CC0C75E866E1D60BAE2E425A55C
PackageArch	i686
PackageDescription	PAM (Pluggable Authentication Modules) is a system security tool that allows system administrators to set authentication policy without having to recompile programs that handle authentication.
PackageMaintainer	CentOS BuildSystem <http://bugs.centos.org>
PackageName	pam
PackageRelease	23.el7
PackageVersion	1.1.8
SHA-1	A72B9CB6EDA58938962301D24562C7FECF8B495C
SHA-256	AB6061BCB1E13D2B28972581724D3159E2CE6F714D1036C5B757CEF8C925FF55