Query result

Key	Value
MD5	1ECC3C2B23992E9D4ED9AE9D12275ADC
PackageArch	x86_64
PackageDescription	BCC is a toolkit for creating efficient kernel tracing and manipulation programs, and includes several useful tools and examples. It makes use of extended BPF (Berkeley Packet Filters), formally known as eBPF, a new feature that was first added to Linux 3.15. BCC makes BPF programs easier to write, with kernel instrumentation in C (and includes a C wrapper around LLVM), and front-ends in Python and lua. It is suited for many tasks, including performance analysis and network traffic control.
PackageMaintainer	CentOS Buildsys <bugs@centos.org>
PackageName	bcc
PackageRelease	5.0.1.el8
PackageVersion	0.19.0
SHA-1	11FD665DC74B4D0405C7C334EFD4F3217234A42D
SHA-256	F1443F4A8684F1249F284D2003A55DD37FE1C4DC452E5B8C5944864E4472660E
hashlookup:children-total	8
hashlookup:trust	50

Network graph view

The searched file hash includes 8 children files known and seen by metalookup. A sample is included below:

Key	Value
FileName	./usr/lib64/libbcc.so.0.19.0
FileSize	3291240
MD5	7153A0250FBF06BD4BE8D590A5A3A0F7
SHA-1	F8AE3CC0CCF80F25DE4184452525B7DD5BF52015
SHA-256	5875746B3840D610D88E7D516698C07FE24405235DE98699324D75B5449F9C8B
SSDEEP	49152:3Xc3mFHQ4kCC0VN1437pyfyFTrM8iWsi0Mbd1dEN7ZM6snndEeu/dEZZVd2adEd3:n143Sy9p0uLg
TLSH	T148E52A0B76670CAAC998F9B0521ED6214A3034669135723B768849F13EC7E769F3F372

Key	Value
FileName	./usr/lib64/libbcc_bpf.so.0.19.0
FileSize	52304
MD5	7300A43DED9C0931D64B1F59366836BE
SHA-1	D4D366ECACC672C768CEE9351E198E77B3DED049
SHA-256	B7B88378EB4AF91242DB0CC272CDFC3C913A45D66B60AD5E9CF1FDB3D42E15AC
SSDEEP	768:bkYM6UyuSJIAYQog4wIAYQog4wIAYQoA54wIALjbzrD7TLjbzrD7TLjbzrD7TLj5:b46Uyd1DMsdolm7yDhS
TLSH	T1AA33F81BF652487DC1F4C73097DFCA72A876B0416436271B2B80E6383EA7A49677D9E0

Key	Value
FileName	./usr/share/doc/bcc/README.md
FileSize	21915
MD5	E500C34F1194173CD84C21C9578428A2
SHA-1	DAAB7FD078269EA4E9797A49C6F351FEA3E6E6DB
SHA-256	3ABB0B813946EF3E3C2C8D16A82EC38D6AF5C2B185E9DBFE8BA4FAA4DDB65AA2
SSDEEP	192:SATPCoQfVaeDWWtOu06xo4rlH7Yz6w45xLqFvyj2yFFGxFVVoTGpgeas4oK0UL0F:BDC7tDTBG6jLlFGxFXNpe4K0S0Yuaqf
TLSH	T1DEA20E86C37912A708D322AD414BD1DAF9F68C09E2800E7B72DC97C45F5D82BB1F5BA4

Key	Value
FileName	./usr/lib/.build-id/df/b62ff46a6a223e7b6f161394ef5ce4e8519930
FileSize	38
MD5	04ACFD7199D4998F0308A79352232330
SHA-1	253BDDAD93BF9CB967C73A8D85F1F0BC13CDA5F3
SHA-256	0D6827B151EFC79D9F493D960BCC550971E7670BBF7D70FCFFD0BC9E9201C490
SSDEEP	3:gCD/lV1V:X/tV
TLSH

Key	Value
FileName	./usr/lib/.build-id/e1/9b69987d3ae683296ebe0933b571e9f6874efe
FileSize	42
MD5	391C38B368994124DEF1FE230FC2C75D
SHA-1	6AE3B967B2DAF53B70B3B906231A6A51EEBF4628
SHA-256	87DA57F37041E3F6FB3E05BDB67C1FC565D759C30022F37AD67AAF1A66B1FF27
SSDEEP	3:gCD/0GKh1V:X/0b1V
TLSH

Key	Value
CRC32	55EC3BEE
FileName	./usr/share/go-1.14/src/cmd/vendor/github.com/google/pprof/third_party/d3flamegraph/LICENSE
FileSize	11357
KnownMalicious	malshare.com
MD5	E3FC50A88D0A364313DF4B21EF20C29E
OpSystemCode	362
ProductCode	227205
RDS:package_id	307744
SHA-1	92170CDC034B2FF819323FF670D3B7266C8BFFCD
SHA-256	B40930BBCF80744C86C46A12BC9DA056641D722716C378F5659B9E555EF833E1
SHA-512	389080B6132D3EAAE780648D6998390D8CC71908561BCE09578E27C542AA1A9F3122E01F640C5B01BEE73004C23AA4E9F2066FE5EE0CA2072C2420578B28D71F
SSDEEP	192:fU6G5KXSD9VYUKhu1JVF9hFGvV/QiGkS594drFjuHYx5dvTrLh3kTSEjz7HbHR:M9vlKM1zJlFvmNz5VrlkTS07Ht
SpecialCode
TLSH	T12232623FBA48037716C20162BB9764CBF21E903F3B552568354CC1681F6BA6543FB6EA
db	nsrl_android
insert-timestamp	1735818011.5425408
mimetype	text/plain
source	snap:NR0H6AclLOhWZTa2rEiyaNrtQUa9bJHK_4
tar:gname	root
tar:uname	root