Query result

Key	Value
FileName	./usr/lib/arm-linux-gnueabihf/conntrack-tools/ct_helper_sane.so
FileSize	5740
MD5	57E18EC186E1DBBE01DE569C5C3E82B1
SHA-1	20614DF2B89E570FD6A6C0D66699EB869551397E
SHA-256	70D5F767F2513F7839AE2AF8949D46C5C63E317DBC52D40C1AAE79DD6112F02E
SSDEEP	48:GOa6eBWBbh7C+iKqo2TbG+PA435l/OmM/MSUWrxiZRSA2eVgV3Z5U:G16eBWB17+KqoT230UV0iz4YgpZ2
TLSH	T1A4C1964BF382AEF3C4A4D735445B0350232F84A5C64A6BB3DF0095A17E4B6F45A26E89
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileSize	101156
MD5	40D204948F50B93A0ECA4BC263B0BA81
PackageDescription	Connection tracking daemon Conntrackd can replicate the status of the connections that are currently being processed by your stateful firewall based on Linux. Conntrackd can also run as statistics daemon.
PackageMaintainer	Debian Netfilter Packaging Team <pkg-netfilter-team@lists.alioth.debian.org>
PackageName	conntrackd
PackageSection	net
PackageVersion	1:1.4.7-1+b2
SHA-1	BDC3C15A7506240B19D6A5AA7737BFFB75599025
SHA-256	E83D201620AE37F90A5B1F41F3ABFD946DBAFEBA2F929F95663A406A9135903F