Query result

Key	Value
FileName	./usr/lib/trace-cmd/plugins/plugin_sched_switch.so
FileSize	9116
MD5	66E4727B510C5D4A315B611DA79B038B
SHA-1	31A46C54E0877564DF66172731A9B869E88E1AE8
SHA-256	9DC62C3ACD57EA0281DF756404A9D7A6F08A4A7E95CF59FCE60B1116A2273682
SSDEEP	192:0rKR0EOgX3gupNLmA+2am6am6am7dj8IcU7Hnn+O++n+O+T0:04BbpN6A+2p6p6p7djDcU7Hn+1++1
TLSH	T1E91272637385FC72F1654B3C8A8B477366754281B1C3C663FB85A7CDA89A1A09C21727
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileSize	295848
MD5	284A516F3F376F288AA53905EE346B3A
PackageDescription	Utility for retrieving and analyzing function tracing in the kernel This package contains the trace-cmd utility. Trace-cmd makes it easy to retrieve and analyze function traces from the Linux kernel while it is running.
PackageMaintainer	Ubuntu Kernel Team <kernel-team@lists.ubuntu.com>
PackageName	trace-cmd
PackageSection	devel
PackageVersion	2.5.3-1
SHA-1	DB594EB25BF7FD06ADF34CA0F92D3B493E231C1D
SHA-256	D39F398241D0DCC91D7D1B32E26A4D5F9EAB836726CA701E9BE60EAEA5D18E32