Query result

Key	Value
FileName	./usr/lib/x86_64-linux-gnu/conntrack-tools/ct_helper_sane.so
FileSize	14616
MD5	94E2A8CD510FEEB47FE78257849F3EDB
SHA-1	143A373C5B55FCD1E9E266919A39D7B4CAE844C5
SHA-256	86D86DC2420C0732163CD3C14199EDFF1157A6C9E693BCC6B79770B03C700841
SSDEEP	96:RhUTBWBUodTwCW5RB5RJhZxpGf1sIGwzXt/d8bipvQ+C69kGg:RI8iodTwXRB5RJhZxpGZGwzXPYiS
TLSH	T16762540BE760CE3EC5AC5774845B4630F2B7A464A77403272F64A2771DE32542AB7D46
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileSize	126452
MD5	E6138A646004E1B50DC028930B8D2001
PackageDescription	Connection tracking daemon Conntrackd can replicate the status of the connections that are currently being processed by your stateful firewall based on Linux. Conntrackd can also run as statistics daemon.
PackageMaintainer	Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
PackageName	conntrackd
PackageSection	net
PackageVersion	1:1.4.6-1
SHA-1	848D3E25A159F87252A3B7FEFD74C3C8B09C13D2
SHA-256	D6DAEB8CAB81CA3B201EC7F09283A4453E811B2B0CFF702DA8818F387E3B650A