Result for 0DB7AD236878D6727C34761C391FD7FF691E65E2

Query result

Key Value
FileName./usr/bin/hivexml
FileSize20600
MD54FFB1001E5BB9E35AA6CBBD2FEB0B352
SHA-10DB7AD236878D6727C34761C391FD7FF691E65E2
SHA-2564C06251143399F850E7BBB377E69A2555C25A7E4379A15EC7D8027A601124CBB
SSDEEP384:8S+7qZccihc+/ENU+3y4L4xPeYyFDGxaf44G2m5blj9uFAo:WqZkhcQ23y4cgYyFDGxO4N2+bWy
TLSHT1F092C5A8BB67CEB7D142503806DF1A1534304417DA13D6A3E708A7BA79A63CC1F8637E
hashlookup:parent-total1
hashlookup:trust55

Network graph view

Parents (Total: 1)

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key Value
MD5234C76A2687B8BB2C104105297F70938
PackageArchi686
PackageDescriptionHive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' (in perl-hivex) lets you export and merge to the textual regedit format. 'hivexml' can be used to convert a hive file to a more useful XML format. In order to get access to the hive files themselves, you can copy them from a Windows machine. They are usually found in %systemroot%\system32\config. For virtual machines we recommend using libguestfs or guestfish to copy out these files. libguestfs also provides a useful high-level tool called 'virt-win-reg' (based on hivex technology) which can be used to query specific registry keys in an existing Windows VM. For OCaml bindings, see 'ocaml-hivex-devel'. For Perl bindings, see 'perl-hivex'. For Python 3 bindings, see 'python3-hivex'. For Ruby bindings, see 'ruby-hivex'.
PackageMaintainerCentOS Buildsys <bugs@centos.org>
PackageNamehivex
PackageRelease21.module_el8.4.0+885+5e18b468
PackageVersion1.3.18
SHA-12A1C878D876EE635FC372DC9D87AF6D2D1490D54
SHA-256420C6EBFDFD633F56956ED567F42C62C52B8A554608E23B6EE2C3C4423ED6459