Key | Value |
---|---|
MD5 | DE9FD90524C06983BC3B185DD2ED6642 |
PackageArch | aarch64 |
PackageDescription | Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' (in perl-hivex) lets you export and merge to the textual regedit format. 'hivexml' can be used to convert a hive file to a more useful XML format. In order to get access to the hive files themselves, you can copy them from a Windows machine. They are usually found in %systemroot%\system32\config. For virtual machines we recommend using libguestfs or guestfish to copy out these files. libguestfs also provides a useful high-level tool called 'virt-win-reg' (based on hivex technology) which can be used to query specific registry keys in an existing Windows VM. For OCaml bindings, see 'ocaml-hivex-devel'. For Perl bindings, see 'perl-hivex'. For Python 3 bindings, see 'python3-hivex'. For Ruby bindings, see 'ruby-hivex'. |
PackageMaintainer | Fedora Project |
PackageName | hivex |
PackageRelease | 4.fc33.1 |
PackageVersion | 1.3.19 |
SHA-1 | 09980DB7114D6AD1602B60E8DE49EDBAF5C22126 |
SHA-256 | 5D6D5AE2A28A22F7F9BFAF7CDEDA4A4D8754C5F3D85965A4681F0C050792133E |
hashlookup:children-total | 34 |
hashlookup:trust | 50 |
The searched file hash includes 34 children files known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
FileName | ./usr/share/locale/fr/LC_MESSAGES/hivex.mo |
FileSize | 4620 |
MD5 | 6D4F4E3F4FFA08556E3D0C6A7E9C6284 |
SHA-1 | 0DDA67BCF6BA61BB2A27CFB908E1162FC0888C5D |
SHA-256 | 66B260B90D14F1492176D5E39A2005B298C11E92117E844B7368DDF0F891D58B |
SSDEEP | 96:ueGIkW+hG+KmJVdY1Uw0iqIozpzBIMV11tWlAVspUgIh3U92:VGlW0x1SOcFMP/Wlosq02 |
TLSH | T10591B6EED7C427ABEBC21176B74D9102D6148E588E5AE35419DCC346328C8BC48EA9DC |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | ./usr/share/locale/mr/LC_MESSAGES/hivex.mo |
FileSize | 5896 |
MD5 | FF0A61BE1307BC08BFF12BEC569E0F6F |
SHA-1 | 0DDA7E277D2EE821A792FAE12D956D0FCF2E3A3D |
SHA-256 | 413318F32835ED7571D9F44BAB27718BEE22CC0D21D1BA6BAE8DFA6D301964F5 |
SSDEEP | 96:udbyIkW+hG+KmJVdY1Uw0iqIdJSHApGvE6oBsdGw9vbyYve4i+Nlj+749X74eLiN:WylW0x1SOc+TEx62ejkwABcgIBGj |
TLSH | T125C1324CF37DF756CEFD78B927484E3685B811B4CBE642510898F2977C80CB801AE5AA |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | ./usr/share/locale/pt/LC_MESSAGES/hivex.mo |
FileSize | 4367 |
MD5 | 1AF95C490C60FFE8EFC80AE8C064E926 |
SHA-1 | 0E900A39EB27755761351184EAD36742C2144593 |
SHA-256 | 9695129AE0CF6E25996D25755C174038025A7B2B4D46F6FA8D20ACDCF7846F46 |
SSDEEP | 96:ujz3IkW+hG+KmJVdY1Uw0iqIeh8GXKzfFmMsPHoLAHLCKgl9y:ez3lW0x1SOcefKzfFDKHoLEMy |
TLSH | T13591F86A83403B57DBE713F6AB4EC20296450A989E62C1C21B8CD153B5C8AAC55FF0FC |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | ./usr/share/locale/ja/LC_MESSAGES/hivex.mo |
FileSize | 4998 |
MD5 | CB070B91ADBEBDB486CD2CD5002CB082 |
SHA-1 | 1723271CFFA7F631CEF43FDEBDA600669347A680 |
SHA-256 | 0E1FF4772C8385DC2C6BF5A9E04544F371D1E2BB418218D80F4C7C36CC93C3C7 |
SSDEEP | 96:uDLVIkW+hG+KmJVdY1Uw0iqIGiX6sG+78C12jdDMiBy6zFu:WVlW0x1SOcFNGlQ2jdIZ |
TLSH | T1FBA1942DD7C13AABCAE300B14A5D328176684C8DFE537332015EC0127990AAEE45E9FD |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | ./usr/share/locale/hu/LC_MESSAGES/hivex.mo |
FileSize | 4359 |
MD5 | 0037133C30C349524C56A90292F9CA58 |
SHA-1 | 29C603BCE19A7E4671A175EDD7031D225A33E762 |
SHA-256 | D03BCA6725A7008722DEDFC149F3BB8245FD444C96E502BA3D8694107D8DA4A7 |
SSDEEP | 96:uBsaIkW+hG+KmJVdY1Uw0iqI9XgAR81BBK4ErOoPezE6tJ+sYp8n:lalW0x1SOc9QPTBK48fYEcop8n |
TLSH | T11091E82947013B4BEBF703F6D35C9610518A06589F73BA72155D828731C09AD59FF0EE |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | ./usr/lib/.build-id/9d/3b06476a7626d783788572f5040e3b840134fc |
FileSize | 39 |
MD5 | F3447B2888C19D1D016974C141D1B1E4 |
SHA-1 | 2A93BA42A09E0D65396FAB804D795616C54B2A51 |
SHA-256 | EF078ACA786DC3E220EC9EF239D19566E2FD56CB65709C4EFA66224268CDDB43 |
SSDEEP | 3:gCD//hD:X/JD |
TLSH |
Key | Value |
---|---|
FileName | ./usr/share/doc/packages/hivex/README |
FileSize | 3186 |
MD5 | 32790F9B1CE0B21AB5FBEB97652D7345 |
RDS:package_id | 293685 |
SHA-1 | 3EA80DB40548E7E6B8E4D515D57B055BCFE050BD |
SHA-256 | 67221A953E2A6BF04CC63D63D28C8E19A62E06165222DF0A4933255381BDC96A |
SSDEEP | 48:t2lyXyvv18eGFxqqsfS2P/tL3hITBjvDoSox5vDrzGhN3/emvkdao8yXTfE6K+zv:oyXWKfBsfptLGvDKxYXPemByDM6K+zv |
TLSH | T11161C9366E69837367E0C6B0550EC2B2CB22D47E9A2F5592B57C404A7313EA065FC3F0 |
insert-timestamp | 1678963978.8035011 |
source | RDS.db |
Key | Value |
---|---|
FileName | ./usr/bin/hivexml |
FileSize | 69704 |
MD5 | C422FBD0492746E38C5AD4695740F92A |
SHA-1 | 3F03894523D0955CFCC25F077AB117CB493EA0E7 |
SHA-256 | ABB270E4A32A31EA72CD01076204A177159B13700616AFDEC3BF93E8A294AC6B |
SSDEEP | 768:+5wH2tkrqw32d0raxoW769lUP9hR+dfL6z0:+5wH2tkrqw32d0raxoW769lchEd+Q |
TLSH | T1E36319FCFBCDDB0FC6C653785AC68170723190ADE3169BA33448420A9E87B5C4DA969D |
Key | Value |
---|---|
FileName | ./usr/lib/.build-id/37/b163b412909ce056464db2f4a2c9518a222ac7 |
FileSize | 27 |
MD5 | 0F9A618F6434327C0CA5D3DEDFE667EC |
SHA-1 | 575172390BBB6E3DF11D633CBD419EB1B9B54E79 |
SHA-256 | 4ED5866F126E369E0C192CD2E1165BFF6FC63895046751AA669DB0DA2007AA37 |
SSDEEP | 3:gCDNfTAKJ:X1TAKJ |
TLSH |
Key | Value |
---|---|
CRC32 | D8D508F1 |
FileName | ./usr/lib64/libhivex.so.0 |
FileSize | 17 |
MD5 | 1C188DB0D174433E088998AC1AC46E09 |
OpSystemCode | 362 |
ProductCode | 183357 |
RDS:package_id | 222721 |
SHA-1 | 59A879F3C5F7B0A74DA1855A929ED9A0A6BE0362 |
SHA-256 | A1A7161FD991FD7DF8EE8E6A798A4AE610B3AD5C08929BC69CED04A83B57EB7C |
SSDEEP | 3:ENSahD:EMUD |
SpecialCode | |
TLSH | |
db | nsrl_modern_rds |
insert-timestamp | 1727040645.1441815 |
source | RDS.db |