Query result

Key	Value
FileName	./usr/lib/conntrack/ct_proto_sctp.so
FileSize	10192
MD5	EC72D3653A0A0EF4F3971BDD0BF52A55
SHA-1	10E99BFD82C4BEDA5AFBF7E19EA945E1AAAB4495
SHA-256	6AD3E9EF5F1BE60143EB36082AC900AED63542294E2F6F95CD1F8D51E1D22D8D
SSDEEP	96:AbjqEMpTmGqcoXKFwFQstBwJm/yBSBQ7n9K7Ymkoiti+qF8Qzyv8E8NDt8yRQ6A:oVMpTmTXKOFj7wJcCSBQr9K7NkUTe0m
TLSH	T1B12221D6AF129E7BC49E173A42DB1B643375E52D8B4383232734A2642E577491F122D2
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileSize	44800
MD5	1C095F531A4EACC0A1533333D38FB318
PackageDescription	Program to modify the conntrack tables conntrack is a userspace command line program targeted at system administrators. It enables them to view and manage the in-kernel connection tracking state table.
PackageMaintainer	Ubuntu MOTU Developers <ubuntu-motu@lists.ubuntu.com>
PackageName	conntrack
PackageSection	net
PackageVersion	1.00~beta2-1
SHA-1	6E34ABB002D28EEE3D4C77ABF879EFE298CE324E
SHA-256	460328D484771C1F7E9C1B4C6DF32DE01299E99839690F5DB8C76B3304450448