Query result

Key	Value
FileName	./usr/lib/trace-cmd/plugins/plugin_kmem.so
FileSize	4512
MD5	0241490A78F9306DEB019DA102D68A3C
SHA-1	0F5633DA0059261189F19D34AFC700EAFA5CBE3B
SHA-256	3FA5F168ABF745FE3201C8C6E6F7A4A7A97DBEA73646AF3BA07128C4B0E8E608
SSDEEP	48:b0ExVNrs+b5RhQjpHYzjERGNXqGN9Rbytzc+6hJygI3dgnY6A1cH:VnvKjFYAI6Y9xytzc+o1YglA14
TLSH	T18A91FFDEBB4C9E62D5E40F35C4DB43D2273AE495A901AB03D60C62B83C875D84F8A9C9
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileSize	232168
MD5	9F657505DF5957E24FCCA62C9DF2A1A0
PackageDescription	Utility for retrieving and analyzing function tracing in the kernel This package contains the trace-cmd utility. Trace-cmd makes it easy to retrieve and analyze function traces from the Linux kernel while it is running.
PackageMaintainer	Sudip Mukherjee <sudipm.mukherjee@gmail.com>
PackageName	trace-cmd
PackageSection	devel
PackageVersion	2.9.1-1~bpo10+1
SHA-1	F29A211AB2EB13E77AB9C38761676120EDFACC15
SHA-256	3527FB304C386B707E902838F310EF20273B3B33C3103990D00C06DDB4BE713A