Query result

Key	Value
FileName	./usr/lib/trace-cmd/plugins/plugin_sched_switch.so
FileSize	13368
MD5	FBBFD498F265DAD5641DC698AB652C30
SHA-1	1FEE07BCC6AD525255D18EF012E656C41DD3CB21
SHA-256	72EB42A09FF256C522967B8ED24DBECEC4DF038DDCDF5DDDDBEE6D4A89C880B9
SSDEEP	192:EyjiPX33D5ij6Y+qNUvjm02amGamSamC7j0xS+x/2JH0+e+Z+e+bqv:KfD5irxGS02pGpSpC7jqS+x/2JHzFYF
TLSH	T1BE5292A2B785DDB7F2D142389ACB832236B04A13A1D3DB73BB4913C43DD44C49DA6312
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileSize	270200
MD5	CF42D58E5FE113C3DD21AF2B92FDB0C6
PackageDescription	Utility for retrieving and analyzing function tracing in the kernel This package contains the trace-cmd utility. Trace-cmd makes it easy to retrieve and analyze function traces from the Linux kernel while it is running.
PackageMaintainer	Sudip Mukherjee <sudipm.mukherjee@gmail.com>
PackageName	trace-cmd
PackageSection	devel
PackageVersion	2.9.1-1~bpo10+1
SHA-1	04E1DCB365DCAE77E1E9CF4B9BD8AAC66DFD0F8E
SHA-256	962A517C8C71B6BA77EC76FEF6F1BE5262EF9AB34D1396F867795972F9FC9D5D