Query result

Key	Value
FileName	./usr/lib/trace-cmd/plugins/plugin_sched_switch.so
FileSize	5512
MD5	14CDEACDF13361178F70C952FB817374
SHA-1	3A4C6D9FFF2299C49C7A58F6BAA27E0A8EB0FDD1
SHA-256	FAE33A64DD93D74F4DDBA5995D4295520CE455D9B2A39C6E79DB24FA1938308C
SSDEEP	96:RDuYREEYs7Cjp4DmP85UM9Q16epggL6vT97fg+nDYnajS:RyYREEYEel8gLM7DYn
TLSH	T106B1C6477B904576CC0D4A34469F431112F9F6C44107273BA784FEB96D62790AE36A53
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileSize	298076
MD5	B6912F2FD1DBF0D7CE92831156839734
PackageDescription	Utility for retrieving and analyzing function tracing in the kernel This package contains the trace-cmd utility. Trace-cmd makes it easy to retrieve and analyze function traces from the Linux kernel while it is running.
PackageMaintainer	Ubuntu Kernel Team <kernel-team@lists.ubuntu.com>
PackageName	trace-cmd
PackageSection	devel
PackageVersion	2.6.1-0.1
SHA-1	4923989290CF0F38CC4338BD3B24619E9D2AED10
SHA-256	0B0C876837266AB00AE2C28258419A41EDE99EFF1455AF66F62DDDB5D10005C3