Query result

Key	Value
FileName	./usr/sbin/ettercap
FileSize	418732
MD5	820C4E23EEDEC513547078053869080E
SHA-1	9043880C89D3AE90CF7602D95C5428D42E3F104E
SHA-256	BA1EEEC8EF581423300763274EC711B0EF168E271C37D959600DE6E08175FD0E
SSDEEP	6144:3BQMvgujaZTFnbBz50cxx48mM5Dtz15RlVz7nueFfMwNJOyi85PTD3udNM:3BQG8BbJVxmMvt/mwNJOyXDgN
TLSH	T129942A82FB8F45F7D143457094B3B77F4B34CA268110C95EEE8C9D39EE2BA49521B298
hashlookup:parent-total	1
hashlookup:trust	55

Network graph view

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key	Value
FileSize	208262
MD5	66162E3FE2F41BF9C21B427D2A846ADF
PackageDescription	Multipurpose sniffer/interceptor/logger for switched LAN . This package includes gtk enabled version of ettercap. It also includes ncurses support.
PackageMaintainer	Murat Demirten <murat@debian.org>
PackageName	ettercap-gtk
PackageSection	net
PackageVersion	1:0.7.1-1
SHA-1	D5E99EC2D7E9CC8882D697F39956B12A69C9E148
SHA-256	61C46AA306CC2B31F66DCD973DCA423720AFEDCA3921A975248A8B98594F2FD9