Result for 0E6AAE5995528BFCCA8C90FE0ABC14C462E47B5D

Query result

Key Value
FileName./usr/bin/hivexsh
FileSize28272
MD5EC062E02CF3283E98C96521B9A1CE6DA
SHA-10E6AAE5995528BFCCA8C90FE0ABC14C462E47B5D
SHA-256F77A6EC78C3BCA2669FC51243F736F76932E777A8B0FF88A76D40B78E98A9718
SSDEEP384:58Jq6x7v+SsiUWAhrpNFJJxOOntLCVZnix19qVCdQPgBmjt:584k2SsiWtNxxHduNixOQdrBmj
TLSHT123C20992F6CD6CCBE18753BE850F5A50B223F568E75282F3232C436D274C78D5E6924A
hashlookup:parent-total1
hashlookup:trust55

Network graph view

Parents (Total: 1)

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key Value
MD569AD7067FF74194FAB5201C45333DA93
PackageArchaarch64
PackageDescriptionHive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' (in perl-hivex) lets you export and merge to the textual regedit format. 'hivexml' can be used to convert a hive file to a more useful XML format. In order to get access to the hive files themselves, you can copy them from a Windows machine. They are usually found in %systemroot%\system32\config. For virtual machines we recommend using libguestfs or guestfish to copy out these files. libguestfs also provides a useful high-level tool called 'virt-win-reg' (based on hivex technology) which can be used to query specific registry keys in an existing Windows VM. For OCaml bindings, see 'ocaml-hivex-devel'. For Perl bindings, see 'perl-hivex'. For Python 3 bindings, see 'python3-hivex'. For Ruby bindings, see 'ruby-hivex'.
PackageMaintainerumeabot <umeabot>
PackageNamehivex
PackageRelease7.mga9
PackageVersion1.3.21
SHA-12842649E1D763E8BE7CDE2846E715DC8D0A70FAF
SHA-2564C5C793E256B7CDC5C924C7038108B795A75FA2196656FBB29261BCD9E02D69E