Query result

Key	Value
FileName	./usr/lib/trace-cmd/python/ctracecmd.so
FileSize	565716
MD5	9EB43F712ED53F809E14D3DEAECE7700
SHA-1	3AFEFC44730FF7DC14AF2C04BC0D91E07C219497
SHA-256	E4F042E4DEBB961999D328520709D5DB716FEF39C0245BC3E3AC93C66802AA7A
SSDEEP	12288:bdQhruUDJJwD+vurkRZeyhKaibhuuEiGu//M68chw5MUJOVJj2sKlV2oVb0VFl+J:beru+AD+QknzhKaibhuujGu//M68chwP
TLSH	T1D1C4EA45E64FFBF2F3F80EFE43A6AA61607086505247B9E1E68C7D7524335221F2E660
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileSize	250328
MD5	E7E577DDC55760ED202C485C257C9D30
PackageDescription	Utility for retrieving and analyzing function tracing in the kernel This package contains the trace-cmd utility. Trace-cmd makes it easy to retrieve and analyze function traces from the Linux kernel while it is running.
PackageMaintainer	Ubuntu Kernel Team <kernel-team@lists.ubuntu.com>
PackageName	trace-cmd
PackageSection	devel
PackageVersion	2.4.0-1
SHA-1	413B344CA3F06D1A861347C6B4EC3B82C47F6FFD
SHA-256	BBBA0362EDD68D8451039B2D82B2F5D44D5E59AFC5CC7323DD753498BB584BD9