Query result

Key	Value
FileName	./usr/lib/arm-linux-gnueabi/conntrack-tools/ct_helper_tftp.so
FileSize	5772
MD5	205A7A17395DEA7793C331E9E11A8152
SHA-1	3BC6F43D07DF41B66858BC4D40351E241172A3DA
SHA-256	084F371FB06EC1456F834428FEFCA4951D22C0D8FAEF1B455FBEACAD535FCE61
SSDEEP	48:uJO9amYqdZBWBImzwdCP/PPEaanznut0fv986RlFmldQItjEItjcA2WlzZ14ZRSK:I7mfrBWBImzwdCXXc80wQtRfz4EvkC
TLSH	T163C1508EF5E3CE33D8908574C1F74A943321CA80A6C54713EA4434666EDB2AE4DB3D8E
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileSize	105164
MD5	552B1090F4C1B9397663D8765383746B
PackageDescription	Connection tracking daemon Conntrackd can replicate the status of the connections that are currently being processed by your stateful firewall based on Linux. Conntrackd can also run as statistics daemon.
PackageMaintainer	Debian Netfilter Packaging Team <pkg-netfilter-team@lists.alioth.debian.org>
PackageName	conntrackd
PackageSection	net
PackageVersion	1:1.4.6-2
SHA-1	5D621F9FF0293BCFE50DE01AEDC0DCC5D4B2E428
SHA-256	F872C93460006FEC622BFFE330A787D0B23D963CBD03F9603745A39E4374530D