Query result

Key	Value
FileName	./usr/lib/trace-cmd/plugins/plugin_sched_switch.so
FileSize	6072
MD5	2C0C8BC6C0EAF57B5AFBD37995F61CA1
SHA-1	16B92BE99EF229B90D9E9BB178E8493AEC664993
SHA-256	2BA362E2BF8FC3EA0EFAC931527596E16C29C1E858107AD53F8DD68673D6473E
SSDEEP	96:YDDj40MSPnG/uZ13tzki40GUsN5PDDs6d7QF2QrZgXP:eDjD+2ZPz54G6lsiKP
TLSH	T102C173A3EB084F03E8E54F35899F42712B7EE98925014763EE4CE5B87C462C86E8564F
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileSize	232168
MD5	9F657505DF5957E24FCCA62C9DF2A1A0
PackageDescription	Utility for retrieving and analyzing function tracing in the kernel This package contains the trace-cmd utility. Trace-cmd makes it easy to retrieve and analyze function traces from the Linux kernel while it is running.
PackageMaintainer	Sudip Mukherjee <sudipm.mukherjee@gmail.com>
PackageName	trace-cmd
PackageSection	devel
PackageVersion	2.9.1-1~bpo10+1
SHA-1	F29A211AB2EB13E77AB9C38761676120EDFACC15
SHA-256	3527FB304C386B707E902838F310EF20273B3B33C3103990D00C06DDB4BE713A