Check install md5checksum hashes

I have a couple packages that have no receipts key, with only file type installs keys. This code will match existing packages in the repo for those. I understand matching on hashes may be tough for similar files (namely zero-byte files) which is why it also matches on path. May also want to match on package name, too.

My matching code is quick and dirty - I'm open to suggestion on improvement!