Query result

Key	Value
FileName	./usr/lib/trace-cmd/plugins/plugin_function.so
FileSize	5608
MD5	68A0EE5EC962F17F8C3BAF181A72F13B
SHA-1	222E8F80670296648EB557D56AD628DE443B7E40
SHA-256	EF52EA26B5A027CF742C0888187D2BA13BCB67BA03EAEB27E07792797BB9C3D6
SSDEEP	96:s/wguDYUtpxwaOwDEpGnxi1S4pDopU2xXf6SpkU6TKb:swg+YUxwaOcnowiDop3Xf6SqtK
TLSH	T1ADC185477B449EA2C0DACDB4496F430227FECAC979C693239218D9841E93B5C2877C9D
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileSize	273576
MD5	A4E45433BD57993852464FA2DB65D195
PackageDescription	Utility for retrieving and analyzing function tracing in the kernel This package contains the trace-cmd utility. Trace-cmd makes it easy to retrieve and analyze function traces from the Linux kernel while it is running.
PackageMaintainer	Ubuntu Kernel Team <kernel-team@lists.ubuntu.com>
PackageName	trace-cmd
PackageSection	devel
PackageVersion	2.6.1-0.1
SHA-1	9D2279507CC67CF3307C0B878492876F818C4E40
SHA-256	8D8A979E1388794D22A3CB9F0670DF81E2E395810269E00C57869A6D7FABBDF7