Query result

Key	Value
FileName	./usr/lib/trace-cmd/plugins/plugin_kmem.so
FileSize	5036
MD5	0D19F83978A8D0E0BFFE2ADF83D07534
SHA-1	376C1342EBEC45AADD23D81E68A21C0AA5235552
SHA-256	0E81925556445E8851D7B63435228F039BA1AE798B917D50F2613828373C752E
SSDEEP	96:AxqHn9LR0EspXJomfmF/Z5uVa4oWwd+O+O+O+O+O+Wm+O+O+O+O+O+Qj3TWWwDKn:ug9LR0EspXB+F/Z5uVnoWwd+O+O+O+Ou
TLSH	T1ABA113D2775AED73F0614F3C864747E1D276839171D783B3FA88A7CA2821158CCA121B
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileSize	313540
MD5	D0B0A7958F960B5AD1D5189B88AD78B4
PackageDescription	Utility for retrieving and analyzing function tracing in the kernel This package contains the trace-cmd utility. Trace-cmd makes it easy to retrieve and analyze function traces from the Linux kernel while it is running.
PackageMaintainer	Ubuntu Kernel Team <kernel-team@lists.ubuntu.com>
PackageName	trace-cmd
PackageSection	devel
PackageVersion	2.6-0.1+deb9u1
SHA-1	2C2C5A95B84DC82ADEAAB6865CDADC0E138DC9D2
SHA-256	7278E11A1ACB366A237CDC3A84D6F2FA66A919F98CB04EFD91F4B4C72F8AC71E