Key | Value |
---|---|
MD5 | CD3D719204F3D1B93E775E4405B41E06 |
PackageArch | aarch64 |
PackageDescription | Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' lets you export and merge to the textual regedit format. 'hivexml' can be used to convert a hive file to a more useful XML format. In order to get access to the hive files themselves, you can copy them from a Windows machine. They are usually found in %systemroot%\system32\config. For virtual machines we recommend using libguestfs or guestfish to copy out these files. libguestfs also provides a useful high-level tool called 'virt-win-reg' (based on hivex technology) which can be used to query specific registry keys in an existing Windows VM. For OCaml bindings, see 'ocaml-hivex-devel'. For Perl bindings, see 'perl-hivex'. For Python bindings, see 'python-hivex'. For Ruby bindings, see 'ruby-hivex'. |
PackageMaintainer | Fedora Project |
PackageName | hivex |
PackageRelease | 5.fc22 |
PackageVersion | 1.3.11 |
SHA-1 | 0B0ADD155AFBE9FD2CD2297690D5937786C5B96F |
SHA-256 | E7CFA49F30E4D62FBADEE9931DF09B2DFF0C30DAC0449D461D1AE24F31E6510A |
hashlookup:children-total | 26 |
hashlookup:trust | 50 |
The searched file hash includes 26 children files known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
FileName | ./usr/share/locale/mr/LC_MESSAGES/hivex.mo |
FileSize | 6065 |
MD5 | 0208F6943E4063E85779990010F47E7C |
SHA-1 | 009899520411F09D6BF26E7ED706B6E0B7188142 |
SHA-256 | E7FEA2256C50A8DF0037398CE01C78BFCF82D17229591E07BDA36D49843D8333 |
SSDEEP | 96:7/H3kWXhG+KmJVdY1Uw0iqCyzwSHApGvE6oBsdGw3vbyYve4i+Nlj+749X74eLiN:gWxx1SOuyZTExC2ejkwABcgIBGj |
TLSH | T1EAC1134CF77DF756CEFD78B927584E3688B811B4CBE542520888F2977C80CB811AE59A |
Key | Value |
---|---|
FileName | ./usr/share/locale/ru/LC_MESSAGES/hivex.mo |
FileSize | 5463 |
MD5 | BF3870B70B8D5B8C86673D0DADF13F64 |
SHA-1 | 02EECFDB56ADA1ECA3C3F3A7F155B730D564234C |
SHA-256 | 6D7AF5FA4D71A6DACF9E65E20B854B13B93C7CD74ED64FD09C95C887667D0242 |
SSDEEP | 96:7/urkWXhG+KmJVdY1Uw0iqCyKrzQ9IZ65sgw2OLDGBkLo12+rx8TFxxgDnn:iQWxx1SOuyRPsgwFLamLo1PxAXxgDnn |
TLSH | T1FFB174114B893DAFD6567177CA08AA097DD704FD3FBA93501658996F30E2478873F28C |
Key | Value |
---|---|
FileName | ./usr/share/locale/fr/LC_MESSAGES/hivex.mo |
FileSize | 4762 |
MD5 | 134242DF5F5B18DAAFD9B0134DFDC600 |
SHA-1 | 11232F1202E648B1E2AB0F6CE1F5FCAADC303002 |
SHA-256 | C692FA7DEBE7C80F1CB2035D4CB8221D608CAE42A876F9516264EFDD47132900 |
SSDEEP | 96:7/f4YkWXhG+KmJVdY1Uw0iqCyU9qpzBIyV11tWlAVspUgIh3U92:T41Wxx1SOuyUlyP/Wlosq02 |
TLSH | T1FBA1C7EED7C427ABEBC21176B75DD102C6148E989E96E354199CC346328C8BC48EE9DC |
Key | Value |
---|---|
FileName | ./usr/share/locale/pt_BR/LC_MESSAGES/hivex.mo |
FileSize | 4378 |
MD5 | 179DDE013F2A5290CF3DE383014FB987 |
SHA-1 | 1179572A6A6BA287B750C9F1E72BEF24BBF60D2E |
SHA-256 | 494EE9E5B5807921AB2A4FEBA80139B99BB18FAE47BA58625AB8B931B17AFF4B |
SSDEEP | 96:rQvkWXhG+KmJVvUw0iqCy+CtxPdARWsAqCPNw:7Wxx1Uuy7bPyRWszt |
TLSH | T11C91A35E97401B97DFD303F5A74EC201A6990B985E92C192278CC153B9C8AA9556F0FC |
Key | Value |
---|---|
FileName | ./usr/share/locale/nl/LC_MESSAGES/hivex.mo |
FileSize | 4425 |
MD5 | B8AFE2DCCB5A3549D1E28624942F37B4 |
SHA-1 | 14C475E36161BF87CFB243FA6FA264345113A4FB |
SHA-256 | 4A2DD575D05B8124EEFE54ADE876EC62D4952E2FB9AA4E885E3313EE1E41E13F |
SSDEEP | 96:7/MRkWXhG+KmJVdY1Uw0iqCyVimlx00B8OgURYGmgx1Z9:4SWxx1SOuyIK5KvWp |
TLSH | T11491D74B8B802AAFCBD710F1E74DC2429584012C9EB6D265295CC5B279C0CBE52FF0DC |
Key | Value |
---|---|
FileName | ./usr/share/locale/hi/LC_MESSAGES/hivex.mo |
FileSize | 5571 |
MD5 | 1E7776A71A544DAC6B1607A894AD4DE4 |
SHA-1 | 14EC4A89113BA5FFA8C61719EA1711A6E3281A98 |
SHA-256 | 425FB4761A9B3332CFF5539007D6F4DE2C953521611153510ECEA29B4A8BAC8D |
SSDEEP | 96:7/RkikWXhG+KmJVdY1Uw0iqCyu8kWvdq+rMA+BCfhSRpv4aXY5av0Xv0bG+K2Ant:1CWxx1SOuygWvPeQhSRpffxGwQV |
TLSH | T146B1444CE7E977B6DEED34B6374C4633C4581678ABA642510998B3C7B980CB814BF1CA |
Key | Value |
---|---|
CRC32 | EA01DC1A |
FileName | usr/bin/hivexget |
FileSize | 1035 |
MD5 | 9A3D08CCB414EF5820F15E60ADD5FABA |
OpSystemCode | 362 |
ProductCode | 183705 |
SHA-1 | 224CCF0E3E7A7D7276A233F4F6194D4873EBEF1E |
SHA-256 | 48FEE0A09A84DE9F91687F2471B8CFBD59CE3152DE08E61268539F4D005499B3 |
SSDEEP | 24:oct2HSCUgiyUVOkHxHqTbV3oDq9e4IOJpWeu:onyzjyUjH0uqQ4IEMeu |
SpecialCode | |
TLSH | T17A11758D3081C3B6880402E83A0A61DEA12D579F6B6D1464700DE25EEF05FB655F26D8 |
db | nsrl_modern_rds |
insert-timestamp | 1646991339.9974313 |
source | NSRL |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | ./usr/share/locale/or/LC_MESSAGES/hivex.mo |
FileSize | 708 |
MD5 | 5C704BC561E7D9AF5F0F19BFF2794699 |
SHA-1 | 303538B1681059902E0AB1D5130198C005B1FFD7 |
SHA-256 | AC2BD9C15AB62CF2340984086D8542A3B51B42C4AD8ACFB182203956A1CB0E0A |
SSDEEP | 12:iCAuzk25UMAHAl68Oit0jDx9Unl5wn/0cQzlwxEXmBQWiOWOgD6HqqnagP+qhi:/Auz95UMew68Oit0jDx2l5+0c0qEXmGx |
TLSH | T1B5012340E8B48D10E6DC30F283C0C33832180695FADBE9C6390A55EA3FD6AFD05B9544 |
Key | Value |
---|---|
FileName | ./usr/share/locale/kn/LC_MESSAGES/hivex.mo |
FileSize | 6897 |
MD5 | D9D1A230878C70B983650C6E07E8F379 |
SHA-1 | 3CA2C899E0A334F108B05C139BFB58BB407F54E1 |
SHA-256 | A45766ECC1A83A8E188EFB8AD5F65216CD3333A2F4B45381AF68FBFE4D8325DF |
SSDEEP | 192:TYWxx1SOuyYBtLMGJcliKVqtp0fmkVkiqGM+mjNIHkmmZSUxmZLedF/U:TJxx1SPJB1ixqf0ukrMjjNIHkbTsFOFc |
TLSH | T1A3E163186EBA2D32EFD6107A659C652ECFF01BA1AC9603D2F09DC7407DA0C5A14CB4DD |
Key | Value |
---|---|
CRC32 | D8D508F1 |
FileName | ./usr/lib64/libhivex.so.0 |
FileSize | 17 |
MD5 | 1C188DB0D174433E088998AC1AC46E09 |
OpSystemCode | 362 |
ProductCode | 183357 |
RDS:package_id | 222721 |
SHA-1 | 59A879F3C5F7B0A74DA1855A929ED9A0A6BE0362 |
SHA-256 | A1A7161FD991FD7DF8EE8E6A798A4AE610B3AD5C08929BC69CED04A83B57EB7C |
SSDEEP | 3:ENSahD:EMUD |
SpecialCode | |
TLSH | |
db | nsrl_modern_rds |
insert-timestamp | 1727040645.1441815 |
source | RDS.db |