Query result

Key	Value
FileName	./usr/lib/trace-cmd/plugins/plugin_sched_switch.so
FileSize	13856
MD5	D6A622F0C32E740B1956B59730BEA0C3
SHA-1	3AFA2CC57886E7615A46332B89ECCC1520F69890
SHA-256	2E4B54EACE5EA935BDD31A0AA17C565F349E1B478907D4C462A4F09F2DC163AE
SSDEEP	96:RvoYCDIjzHXuoF/hFaiAXMCYiJxqYA+n+VbodZUzb:RZYIjzRv7EbqY/4
TLSH	T1FB5293C7F7898077C2484A3482EB032175F6B6A013826B7F3690A3381D62794AE37E46
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileSize	248772
MD5	0F0610D83826FD23B474958172E37D5C
PackageDescription	Utility for retrieving and analyzing function tracing in the kernel This package contains the trace-cmd utility. Trace-cmd makes it easy to retrieve and analyze function traces from the Linux kernel while it is running.
PackageMaintainer	Sudip Mukherjee <sudipm.mukherjee@gmail.com>
PackageName	trace-cmd
PackageSection	devel
PackageVersion	2.9.1-1~bpo10+1
SHA-1	A6A8961AC2E8BA6180572AA271BC404ACFFD975F
SHA-256	B881E27644915BD5C0928BFD9D0CA6E26C00FA39932085E3BD2777F364ADF0E4