Query result

Key	Value
FileName	./usr/bin/kernelshark
FileSize	265552
MD5	E5DE344B492D36B48B3B5E5F98DDD76D
SHA-1	1F335A21871D57F6CF52BA4FF9C95C25D54D993F
SHA-256	816B49F818611ADEC2A5F8BA63A85393CED320AF3A487DD0E695C6CE360C987B
SSDEEP	6144:5ErpnQax4JRGhNH6NMyk+yb4ruKpG23GhuTB+nkwclY+SyiqwQP/:5ErpnQayJQ6hk+o+uKpPDwnkwclBkQ
TLSH	T1ED441757F880DBABC5C11B39BB0D935972231B78E3CE7306E9045A343AE789F4539992
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileSize	1478764
MD5	25AF043F6A09C2841869A73C38F4776D
PackageDescription	Utilities for graphically analyzing function tracing in the kernel This package contains the kernelshark, trace-view, and trace-graph programs. Data for analysis may be generated by the trace-cmd utility.
PackageMaintainer	Ubuntu Kernel Team <kernel-team@lists.ubuntu.com>
PackageName	kernelshark
PackageSection	devel
PackageVersion	2.6-0.1+deb9u1
SHA-1	BB38BB877F22BA08A34AB13D93D105BB9CB6E5C5
SHA-256	D3027AF0E09044D6CEC7FEEE60106113AD2A0BEB68111A8D2A5B5F36212051F1