Result for 16BBF1D2699148F39D25A47CB207DF0CFD596152

Query result

Key Value
FileName./usr/bin/hivexml
FileSize24216
MD5CD18944C65DB30EB68016BF1EF6DDD2A
SHA-116BBF1D2699148F39D25A47CB207DF0CFD596152
SHA-256E0B568C6CA1E5794A03574D1F5B3718804831F593B0D83E648FE9261B3AC6C2F
SSDEEP192:G3btmC9njbyxqDcVDC4BqcYclO3AZSLk92vIRaDs15cbuNw6ZMLTVrNFrJcmfEPc:8boC9edQrPVzTwGF62BiXLHszkAmpk
TLSHT14FB2089B7966D676C88182701D3B10292833A7B4FF23752B384173763E47B9C8E4E974
hashlookup:parent-total1
hashlookup:trust55

Network graph view

Parents (Total: 1)

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key Value
MD53D77DE1E548F4B7F437D308E82D3B907
PackageArchx86_64
PackageDescriptionHive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' (in perl-hivex) lets you export and merge to the textual regedit format. 'hivexml' can be used to convert a hive file to a more useful XML format. In order to get access to the hive files themselves, you can copy them from a Windows machine. They are usually found in %systemroot%\system32\config. For virtual machines we recommend using libguestfs or guestfish to copy out these files. libguestfs also provides a useful high-level tool called 'virt-win-reg' (based on hivex technology) which can be used to query specific registry keys in an existing Windows VM. For OCaml bindings, see 'ocaml-hivex-devel'. For Perl bindings, see 'perl-hivex'. For Python 3 bindings, see 'python3-hivex'. For Ruby bindings, see 'ruby-hivex'.
PackageMaintainerumeabot <umeabot>
PackageNamehivex
PackageRelease7.mga9
PackageVersion1.3.21
SHA-16BF058DEB605DDC95B15FCFD2D5758706190852F
SHA-256FDE3D78D6AE27F9DA81ABC8824256E47B1124B4876056900699BA3B10293A45D