Query result

Key	Value
FileName	./usr/sbin/ettercap
FileSize	390528
MD5	752219633AD51AAE62A120E38778E2F1
SHA-1	1BC18303458213605D7E29E4966653F47741A3C8
SHA-256	6A375285AF58D31A3622B4B2DCD111BB16206A681CC4A4203CA18D67383E7680
SSDEEP	6144:j+GYQ/c2+ENLRrVvVqrYAdjBM6J370lgAk9oXu17lrMDc:j+GYQQGLTEDVBB7dOu/4Dc
TLSH	T12D844A23A6BE5816C0D0957361F34333F2F66BD02069A60D3F5A2E6D0F6638425AB7F5
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileSize	201382
MD5	CF2E0C60890FBD4D536607252D25FAB6
PackageDescription	Multipurpose sniffer/interceptor/logger for switched LAN . This package includes gtk enabled version of ettercap. It also includes ncurses support.
PackageMaintainer	Murat Demirten <murat@debian.org>
PackageName	ettercap-gtk
PackageSection	net
PackageVersion	1:0.7.1-1
SHA-1	F6A2187472A185F08E0DE01FC9F162714ABB2812
SHA-256	7D7BDB02A9B35691A8D2803F0D9CBB36E9198BD547082FA2D6A53F2E3C249139