Result for 04B3C0C201A54C3A9F9F614D9185416B249C3CE9

Query result

Key Value
FileName./usr/bin/hivexsh
FileSize33520
MD5E05969D4F52F6E323060D781376E7107
SHA-104B3C0C201A54C3A9F9F614D9185416B249C3CE9
SHA-256373CCD0696620F9AE6D7147F9CD46F92A7BE6EB8B828AE2CB169119325456AE3
SSDEEP768:WTp4qb2+muWeGO2+muWeGO2+muWeGO2+muWeGOB5RJhZxpB5RJhZxpB5RJhZxpBe:WQ0R7xz
TLSHT183E2D80BB3510A7DCDD4E6319ADF89231871BC68EB31116F5A00B23A3CF672859BBE15
hashlookup:parent-total1
hashlookup:trust55

Network graph view

Parents (Total: 1)

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key Value
MD5D62CC1CEDF5F97ED18A167C11401455D
PackageArchx86_64
PackageDescriptionHive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' (in perl-hivex) lets you export and merge to the textual regedit format. 'hivexml' can be used to convert a hive file to a more useful XML format. In order to get access to the hive files themselves, you can copy them from a Windows machine. They are usually found in %systemroot%\system32\config. For virtual machines we recommend using libguestfs or guestfish to copy out these files. libguestfs also provides a useful high-level tool called 'virt-win-reg' (based on hivex technology) which can be used to query specific registry keys in an existing Windows VM. For OCaml bindings, see 'ocaml-hivex-devel'. For Perl bindings, see 'perl-hivex'. For Python 3 bindings, see 'python3-hivex'. For Ruby bindings, see 'ruby-hivex'.
PackageMaintainerCBS <cbs@centos.org>
PackageNamehivex
PackageRelease20.el8s
PackageVersion1.3.18
SHA-10F4A633AD7FE0D333E009841286BE1DE7BD10C52
SHA-256DDF393969E63BC6157C1CDD28381B64B1BFB689BE5AED8C66BEE3967656743BD