Query result

Key	Value
FileName	./usr/lib/traceevent_5.10/plugins/plugin_sched_switch.so
FileSize	9600
MD5	00702CF7760E31C68218D491834FE30C
SHA-1	0A3B75959432858D3E6AAB3F54F0121615278E53
SHA-256	1494627805BE06C24F65CA5AF4CD90900E625B8153A7D9E8EB9C2B4EBD70854E
SSDEEP	48:ltDlVqFyzr8f+uUHSWgIQ5Qew/JE3QLc+MWdx7EJglYF:ltDlVqFWfSWFAPwhEgLc+noJhF
TLSH	T1E612425BFB28D4D7DC744734CA8B97B6A7FB7AB272C28752F75CA3180D2520096B0522
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileSize	1601396
MD5	7F04A39D105141A5F1705A09CC2BC1B2
PackageDescription	Performance analysis tools for Linux 5.10 This package contains the 'perf' performance analysis tools for Linux kernel version 5.10. . The linux-base package contains a 'perf' command which will invoke the appropriate version for the running kernel.
PackageMaintainer	Debian Kernel Team <debian-kernel@lists.debian.org>
PackageName	linux-perf-5.10
PackageSection	devel
PackageVersion	5.10.46-4~bpo10+1
SHA-1	91478896C2AA809C7B0C357B735E426F37E9A562
SHA-256	7D3E70514756C7060D87C45645A92B6944A8850FF49664ABDB276BFEF805E650