Query result

Key	Value
CRC32	324E0DA4
FileName	runlevel
FileSize	9516
MD5	CD2798A5A355F5890DE8FB3F068F7325
OpSystemCode	{'MfgCode': '1006', 'OpSystemCode': '362', 'OpSystemName': 'TBD', 'OpSystemVersion': 'none'}
ProductCode	{'ApplicationType': 'Forensic Toolkit', 'Language': 'Multilanguage', 'MfgCode': '1722', 'OpSystemCode': '928', 'ProductCode': '187171', 'ProductName': 'Caine Linux 32-bit', 'ProductVersion': '2.5'}
SHA-1	028C8437B6CD831BAF318E2ACC5A8DB8FB83C5F8
SHA-256	A870561AA73A5EA4A50836604AA0ED8D0207F0110CE19CA980304B86D989C991
SSDEEP	192:zdAPeWYLlUX3Qgc2Ew8O7gVqLW8QcDdWxtS0hASwalRCmQ:zO34MggTXTtB0Dwc5Q
SpecialCode
TLSH	T1FF12C6467983DA73C595023C1487633CC671C0A98F87C753F288B7986CBABD98B26376
db	nsrl_modern_rds
insert-timestamp	1646978785.9669921
source	NSRL
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileSize	288958
MD5	1705681C31EB190AE4CAA3730CA4426D
PackageDescription	event-based init daemon upstart is a replacement for the /sbin/init daemon which handles starting of tasks and services during boot, stopping them during shutdown and supervising them while the system is running.
PackageMaintainer	Scott James Remnant <scott@ubuntu.com>
PackageName	upstart
PackageSection	admin
PackageVersion	0.6.5-8
SHA-1	A028FA332306A0F78C9EB2940B08AD5D9CCC43E0
SHA-256	F308D437207BE980D0C547AE820B4131A6831D6387E9C270F349BBEDDA06167B