Key | Value |
---|---|
FileName | ./usr/share/man/man1/hivexsh.1.gz |
FileSize | 5381 |
MD5 | 578570A2DC7A0E7ED8761459EE536E40 |
SHA-1 | 1696712C3BE14F1667E68D2B5812333C5AA280E6 |
SHA-256 | 44C125E54F4316CBB94C4B012606F96813AA3CC72F32C78AAB1C723CC5034590 |
SSDEEP | 96:ZJI0NC4k5nxRIgg5+4hAuaoh97VEkM6ig6JBpXq3fa+mUI1n:3XAfxg59hAVMp9M7gqrua+zI5 |
TLSH | T173B18E43BB1D88DAEFA33DA8D9E4ACE1932C65461C1A5A95F48DC4D6760F00D1C270AD |
hashlookup:parent-total | 2 |
hashlookup:trust | 60 |
The searched file hash is included in 2 parent files which include package known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
MD5 | 3396CF2C029FC230632609C1A82A84C3 |
PackageArch | aarch64 |
PackageDescription | Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' (in perl-hivex) lets you export and merge to the textual regedit format. 'hivexml' can be used to convert a hive file to a more useful XML format. In order to get access to the hive files themselves, you can copy them from a Windows machine. They are usually found in %systemroot%\system32\config. For virtual machines we recommend using libguestfs or guestfish to copy out these files. libguestfs also provides a useful high-level tool called 'virt-win-reg' (based on hivex technology) which can be used to query specific registry keys in an existing Windows VM. For OCaml bindings, see 'ocaml-hivex-devel'. For Perl bindings, see 'perl-hivex'. For Python bindings, see 'python-hivex'. For Ruby bindings, see 'ruby-hivex'. |
PackageMaintainer | Fedora Project |
PackageName | hivex |
PackageRelease | 4.fc24 |
PackageVersion | 1.3.13 |
SHA-1 | B3D34BD6FA8CCACD39DE4EF7CA7A128AAFFD1735 |
SHA-256 | 8F0937E2BAB882B629DCAAFF874A67C3E3504ECEE9583A7F2AE0F9181E9027F0 |
Key | Value |
---|---|
MD5 | D0452E4C11A52DD38C5B48AD650B3F11 |
PackageArch | ppc64 |
PackageDescription | Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' (in perl-hivex) lets you export and merge to the textual regedit format. 'hivexml' can be used to convert a hive file to a more useful XML format. In order to get access to the hive files themselves, you can copy them from a Windows machine. They are usually found in %systemroot%\system32\config. For virtual machines we recommend using libguestfs or guestfish to copy out these files. libguestfs also provides a useful high-level tool called 'virt-win-reg' (based on hivex technology) which can be used to query specific registry keys in an existing Windows VM. For OCaml bindings, see 'ocaml-hivex-devel'. For Perl bindings, see 'perl-hivex'. For Python bindings, see 'python-hivex'. For Ruby bindings, see 'ruby-hivex'. |
PackageMaintainer | Fedora Project |
PackageName | hivex |
PackageRelease | 4.fc24 |
PackageVersion | 1.3.13 |
SHA-1 | 9C764F38C818AA90772502E28200BB50833F78A4 |
SHA-256 | 372F79489F6C97821CF1AC250F138CADE79B534D9B12448EBB71C8186BF315A3 |