| Key | Value |
|---|---|
| MD5 | D62CC1CEDF5F97ED18A167C11401455D |
| PackageArch | x86_64 |
| PackageDescription | Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' (in perl-hivex) lets you export and merge to the textual regedit format. 'hivexml' can be used to convert a hive file to a more useful XML format. In order to get access to the hive files themselves, you can copy them from a Windows machine. They are usually found in %systemroot%\system32\config. For virtual machines we recommend using libguestfs or guestfish to copy out these files. libguestfs also provides a useful high-level tool called 'virt-win-reg' (based on hivex technology) which can be used to query specific registry keys in an existing Windows VM. For OCaml bindings, see 'ocaml-hivex-devel'. For Perl bindings, see 'perl-hivex'. For Python 3 bindings, see 'python3-hivex'. For Ruby bindings, see 'ruby-hivex'. |
| PackageMaintainer | CBS <cbs@centos.org> |
| PackageName | hivex |
| PackageRelease | 20.el8s |
| PackageVersion | 1.3.18 |
| SHA-1 | 0F4A633AD7FE0D333E009841286BE1DE7BD10C52 |
| SHA-256 | DDF393969E63BC6157C1CDD28381B64B1BFB689BE5AED8C66BEE3967656743BD |
| hashlookup:children-total | 34 |
| hashlookup:trust | 50 |
The searched file hash includes 34 children files known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | ./usr/bin/hivexsh |
| FileSize | 33520 |
| MD5 | E05969D4F52F6E323060D781376E7107 |
| SHA-1 | 04B3C0C201A54C3A9F9F614D9185416B249C3CE9 |
| SHA-256 | 373CCD0696620F9AE6D7147F9CD46F92A7BE6EB8B828AE2CB169119325456AE3 |
| SSDEEP | 768:WTp4qb2+muWeGO2+muWeGO2+muWeGO2+muWeGOB5RJhZxpB5RJhZxpB5RJhZxpBe:WQ0R7xz |
| TLSH | T183E2D80BB3510A7DCDD4E6319ADF89231871BC68EB31116F5A00B23A3CF672859BBE15 |
| Key | Value |
|---|---|
| FileName | ./usr/share/locale/uk/LC_MESSAGES/hivex.mo |
| FileSize | 5878 |
| MD5 | 62CAB0BA590A9F6F805007605F408EF7 |
| SHA-1 | 0B8ACF82FE85AC3946DC18A214AFE5BB2CE9E631 |
| SHA-256 | 1A9CB480E37F5F3DD89B7A024F890CCD3ECDFFC13F51B2C51FE8A6F15426EAA3 |
| SSDEEP | 96:umV3sdIkW+hG+KmJVdY1Uw0iqIgzjtbV7sZG9ss0pTsxnwVqS0L77GiMYibFUOwP:XMlW0x1SOcg1Ndt0p4xwVqSwGiMY4FUx |
| TLSH | T129C153219B9828EFC226A1B7D50CB5047DDB00FE7FB283012268ADBF39D1058457D78D |
| Key | Value |
|---|---|
| FileName | ./usr/share/locale/hi/LC_MESSAGES/hivex.mo |
| FileSize | 5422 |
| MD5 | 4EA4326A25600E807EFD8BC79B1C4EDF |
| SHA-1 | 0C9D3D4F8D175139D4D26409B009F143219740DD |
| SHA-256 | 3EF4FECD5FBB46B157E8EE9ABF870215BB5F571B48612A9A1BD84D7C2F3A3D38 |
| SSDEEP | 96:u7IkW+hG+KmJVdY1Uw0iqIg0FkWvdqgA+BCfhSRpv4aXY5av0Xv0bG+K2AnmES4L:ClW0x1SOcgZWvBQhSRpffxGwQV |
| TLSH | T1DFB1644CD7E877B7DADD38B6374C4633C55816789BA642620998B3C7B980CB800BF1DA |
| Key | Value |
|---|---|
| FileName | ./usr/share/locale/gu/LC_MESSAGES/hivex.mo |
| FileSize | 4786 |
| MD5 | 6738768342601C054A251100789FA837 |
| SHA-1 | 0D0E06B78DF27EF5B713A8F0AF8028C3B4B20C17 |
| SHA-256 | 3D0A3D8DADE5C7989D0930D586B2C75EDA71CA63C755500E11F4AF299E9DB9F1 |
| SSDEEP | 96:z/akW9G+KGUw0iqIgTBAQorHLx9SlKGn6FU/BrPWv:z/rW9xecg9yrH1IlKobWv |
| TLSH | T14AA121C0C7A8A532EAD75F7A828D521092684747CD6A6300128DDD45A852CEE3EFE9CB |
| Key | Value |
|---|---|
| FileName | ./usr/share/man/man1/hivexsh.1.gz |
| FileSize | 5501 |
| MD5 | 02FF2FA5FFD10D728A343525A17CE015 |
| SHA-1 | 0F88A9FB82A9238B1991A204FC0CF7E88E7B3922 |
| SHA-256 | 42DD722B42300BA9D1113E274872C124028F624B7417813544F428F82ACDDA83 |
| SSDEEP | 96:tnpvyf94EEqAYKN8G/4FQwP9sJ0A/6RfdOWSMtkICzCyDV7DX00jANBJEDxkf7:t98gkNGAOGsJp/63OWSMtkICzCG2NoF2 |
| TLSH | T167B19FC4032A164652EBDA90D7D2FE41C77953FFB0075EA4166D4C35A2680CAFF0E169 |
| Key | Value |
|---|---|
| FileName | ./usr/share/locale/pt/LC_MESSAGES/hivex.mo |
| FileSize | 4408 |
| MD5 | F7C69909FF54B7482E6DF56C1F29E04A |
| SHA-1 | 14D4EB8E2A81827DB336ACBE2DFD065B59A42AF4 |
| SHA-256 | 2F6C38F1F99092B8CD10E1C3F62BDF375C16396DDAED2B9542EFEF3D10E404B8 |
| SSDEEP | 96:ujIxHIkW+hG+KmJVdY1Uw0iqIgqh8GXKzfFmMsPHoLAHLCKgl9y:gIxHlW0x1SOcgqfKzfFDKHoLEMy |
| TLSH | T12B91D86A87403B97DBA703F6A74EC20296464A989EA2C1C21B4DD143B5C46ED55FF0FC |
| Key | Value |
|---|---|
| FileName | ./usr/share/locale/ja/LC_MESSAGES/hivex.mo |
| FileSize | 5039 |
| MD5 | 51AD2023D303FEAFB4F0A4D465FFF1A1 |
| SHA-1 | 199D0EFF9D87744701DE6442710150E064CDA31A |
| SHA-256 | 96AFDAB675BD6D3FAC2094A0FB22229A94D58C3F2E89AD0BB0570AD862C8F9D5 |
| SSDEEP | 96:uqlIkW+hG+KmJVdY1Uw0iqIgaiX6sG+78C12jdDMiBy6zFu:fllW0x1SOcgpNGlQ2jdIZ |
| TLSH | T143A1942DD7C13E6BCBE301B14A5D328176644C8DFE637632055EC0227990AAEE45E9FD |
| Key | Value |
|---|---|
| FileName | ./usr/share/locale/zh_CN/LC_MESSAGES/hivex.mo |
| FileSize | 4079 |
| MD5 | CD02D12D4A3981CE2B296834ECF1BD87 |
| SHA-1 | 208BD20DC7CB2F3FD1F57B571B8AB8E4998EE4BB |
| SHA-256 | 01DB74002DA7C5CA6D5BFA2E8D6C4297801661075358F1A67BBEE3208714905B |
| SSDEEP | 96:u9dzaIkW+hG+KmJVdY1Uw0iqIgt2i12kYNt2yhqJa:glalW0x1SOcgspJQo |
| TLSH | T12381D955C7483F8BE7DB02F1874DC255569405789F9FA2A01EECC1DA39854A850FF8CD |
| Key | Value |
|---|---|
| CRC32 | EA01DC1A |
| FileName | usr/bin/hivexget |
| FileSize | 1035 |
| MD5 | 9A3D08CCB414EF5820F15E60ADD5FABA |
| OpSystemCode | 362 |
| ProductCode | 183705 |
| SHA-1 | 224CCF0E3E7A7D7276A233F4F6194D4873EBEF1E |
| SHA-256 | 48FEE0A09A84DE9F91687F2471B8CFBD59CE3152DE08E61268539F4D005499B3 |
| SSDEEP | 24:oct2HSCUgiyUVOkHxHqTbV3oDq9e4IOJpWeu:onyzjyUjH0uqQ4IEMeu |
| SpecialCode | |
| TLSH | T17A11758D3081C3B6880402E83A0A61DEA12D579F6B6D1464700DE25EEF05FB655F26D8 |
| db | nsrl_modern_rds |
| insert-timestamp | 1646991339.9974313 |
| source | NSRL |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | ./usr/lib/.build-id/9d/3b06476a7626d783788572f5040e3b840134fc |
| FileSize | 39 |
| MD5 | F3447B2888C19D1D016974C141D1B1E4 |
| SHA-1 | 2A93BA42A09E0D65396FAB804D795616C54B2A51 |
| SHA-256 | EF078ACA786DC3E220EC9EF239D19566E2FD56CB65709C4EFA66224268CDDB43 |
| SSDEEP | 3:gCD//hD:X/JD |
| TLSH |