Query result

Key	Value
FileName	./usr/lib/python2.7/dist-packages/_audit.arm-linux-gnueabi.so
FileSize	146104
MD5	5023376A1E637917008F1B074A14FB1F
SHA-1	2C05E209489DDE805B2C5E28BB031BA5EFF151B7
SHA-256	17ED9DA294E0AF36BB9B9E6282C0099A45940B8A928700456683835D45905E01
SSDEEP	1536:oOE0Rq01sT8DRHSZd5ltDaaltXyzvH+awYnZ5nhdQsuVp61X+2CuKDBKTiZgRFjo:oRlAlDRHSZd5fDtIzPc0nhdQxD6dS
TLSH	T104E3A58325F06EEAC4D9263BB77DDB197513F2A8D1CAA602CA50A3365B53C37861D70C
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileSize	66708
MD5	C4D92C433FE9BBC69C727574B7980E60
PackageDescription	Python bindings for security auditing The package contains the Python bindings for libaudit and libauparse, which are used to monitor systems for security related events. Python can be used to parse and process the security event messages.
PackageMaintainer	Laurent Bigonville <bigon@debian.org>
PackageName	python-audit
PackageSection	python
PackageVersion	1:2.8.3-1+b1
SHA-1	599C591B6E0A6E31C74AFA59A7ED5C651F3C8EAC
SHA-256	EAC452CDE98CBCF21277D77594926C2294B52CAEEA0FC33CABF145AE86210C73