Key | Value |
---|---|
MD5 | E303BA3D27CAD514973ACE99806A1CD2 |
PackageArch | x86_64 |
PackageDescription | Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' (in perl-hivex) lets you export and merge to the textual regedit format. 'hivexml' can be used to convert a hive file to a more useful XML format. In order to get access to the hive files themselves, you can copy them from a Windows machine. They are usually found in %systemroot%\system32\config. For virtual machines we recommend using libguestfs or guestfish to copy out these files. libguestfs also provides a useful high-level tool called 'virt-win-reg' (based on hivex technology) which can be used to query specific registry keys in an existing Windows VM. For OCaml bindings, see 'ocaml-hivex-devel'. For Perl bindings, see 'perl-hivex'. For Python 3 bindings, see 'python3-hivex'. For Ruby bindings, see 'ruby-hivex'. |
PackageMaintainer | AlmaLinux Packaging Team <packager@almalinux.org> |
PackageName | hivex |
PackageRelease | 21.module_el8.5.0+2564+74ace547 |
PackageVersion | 1.3.18 |
SHA-1 | 264391847CDB9AAE34A9FB02DCB797E04FF08AAB |
SHA-256 | 3B83CEEBEAC75C3F6A5F245DB8037A9B27751727C94656743632F25D57B99590 |
hashlookup:children-total | 34 |
hashlookup:trust | 50 |
The searched file hash includes 34 children files known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
FileName | ./usr/share/locale/uk/LC_MESSAGES/hivex.mo |
FileSize | 5878 |
MD5 | 62CAB0BA590A9F6F805007605F408EF7 |
SHA-1 | 0B8ACF82FE85AC3946DC18A214AFE5BB2CE9E631 |
SHA-256 | 1A9CB480E37F5F3DD89B7A024F890CCD3ECDFFC13F51B2C51FE8A6F15426EAA3 |
SSDEEP | 96:umV3sdIkW+hG+KmJVdY1Uw0iqIgzjtbV7sZG9ss0pTsxnwVqS0L77GiMYibFUOwP:XMlW0x1SOcg1Ndt0p4xwVqSwGiMY4FUx |
TLSH | T129C153219B9828EFC226A1B7D50CB5047DDB00FE7FB283012268ADBF39D1058457D78D |
Key | Value |
---|---|
FileName | ./usr/share/locale/hi/LC_MESSAGES/hivex.mo |
FileSize | 5422 |
MD5 | 4EA4326A25600E807EFD8BC79B1C4EDF |
SHA-1 | 0C9D3D4F8D175139D4D26409B009F143219740DD |
SHA-256 | 3EF4FECD5FBB46B157E8EE9ABF870215BB5F571B48612A9A1BD84D7C2F3A3D38 |
SSDEEP | 96:u7IkW+hG+KmJVdY1Uw0iqIg0FkWvdqgA+BCfhSRpv4aXY5av0Xv0bG+K2AnmES4L:ClW0x1SOcgZWvBQhSRpffxGwQV |
TLSH | T1DFB1644CD7E877B7DADD38B6374C4633C55816789BA642620998B3C7B980CB800BF1DA |
Key | Value |
---|---|
FileName | ./usr/share/locale/gu/LC_MESSAGES/hivex.mo |
FileSize | 4786 |
MD5 | 6738768342601C054A251100789FA837 |
SHA-1 | 0D0E06B78DF27EF5B713A8F0AF8028C3B4B20C17 |
SHA-256 | 3D0A3D8DADE5C7989D0930D586B2C75EDA71CA63C755500E11F4AF299E9DB9F1 |
SSDEEP | 96:z/akW9G+KGUw0iqIgTBAQorHLx9SlKGn6FU/BrPWv:z/rW9xecg9yrH1IlKobWv |
TLSH | T14AA121C0C7A8A532EAD75F7A828D521092684747CD6A6300128DDD45A852CEE3EFE9CB |
Key | Value |
---|---|
FileName | ./usr/share/man/man1/hivexsh.1.gz |
FileSize | 5501 |
MD5 | 02FF2FA5FFD10D728A343525A17CE015 |
SHA-1 | 0F88A9FB82A9238B1991A204FC0CF7E88E7B3922 |
SHA-256 | 42DD722B42300BA9D1113E274872C124028F624B7417813544F428F82ACDDA83 |
SSDEEP | 96:tnpvyf94EEqAYKN8G/4FQwP9sJ0A/6RfdOWSMtkICzCyDV7DX00jANBJEDxkf7:t98gkNGAOGsJp/63OWSMtkICzCG2NoF2 |
TLSH | T167B19FC4032A164652EBDA90D7D2FE41C77953FFB0075EA4166D4C35A2680CAFF0E169 |
Key | Value |
---|---|
FileName | ./usr/share/locale/pt/LC_MESSAGES/hivex.mo |
FileSize | 4408 |
MD5 | F7C69909FF54B7482E6DF56C1F29E04A |
SHA-1 | 14D4EB8E2A81827DB336ACBE2DFD065B59A42AF4 |
SHA-256 | 2F6C38F1F99092B8CD10E1C3F62BDF375C16396DDAED2B9542EFEF3D10E404B8 |
SSDEEP | 96:ujIxHIkW+hG+KmJVdY1Uw0iqIgqh8GXKzfFmMsPHoLAHLCKgl9y:gIxHlW0x1SOcgqfKzfFDKHoLEMy |
TLSH | T12B91D86A87403B97DBA703F6A74EC20296464A989EA2C1C21B4DD143B5C46ED55FF0FC |
Key | Value |
---|---|
FileName | ./usr/share/locale/ja/LC_MESSAGES/hivex.mo |
FileSize | 5039 |
MD5 | 51AD2023D303FEAFB4F0A4D465FFF1A1 |
SHA-1 | 199D0EFF9D87744701DE6442710150E064CDA31A |
SHA-256 | 96AFDAB675BD6D3FAC2094A0FB22229A94D58C3F2E89AD0BB0570AD862C8F9D5 |
SSDEEP | 96:uqlIkW+hG+KmJVdY1Uw0iqIgaiX6sG+78C12jdDMiBy6zFu:fllW0x1SOcgpNGlQ2jdIZ |
TLSH | T143A1942DD7C13E6BCBE301B14A5D328176644C8DFE637632055EC0227990AAEE45E9FD |
Key | Value |
---|---|
FileName | ./usr/share/locale/zh_CN/LC_MESSAGES/hivex.mo |
FileSize | 4079 |
MD5 | CD02D12D4A3981CE2B296834ECF1BD87 |
SHA-1 | 208BD20DC7CB2F3FD1F57B571B8AB8E4998EE4BB |
SHA-256 | 01DB74002DA7C5CA6D5BFA2E8D6C4297801661075358F1A67BBEE3208714905B |
SSDEEP | 96:u9dzaIkW+hG+KmJVdY1Uw0iqIgt2i12kYNt2yhqJa:glalW0x1SOcgspJQo |
TLSH | T12381D955C7483F8BE7DB02F1874DC255569405789F9FA2A01EECC1DA39854A850FF8CD |
Key | Value |
---|---|
CRC32 | EA01DC1A |
FileName | usr/bin/hivexget |
FileSize | 1035 |
MD5 | 9A3D08CCB414EF5820F15E60ADD5FABA |
OpSystemCode | 362 |
ProductCode | 183705 |
SHA-1 | 224CCF0E3E7A7D7276A233F4F6194D4873EBEF1E |
SHA-256 | 48FEE0A09A84DE9F91687F2471B8CFBD59CE3152DE08E61268539F4D005499B3 |
SSDEEP | 24:oct2HSCUgiyUVOkHxHqTbV3oDq9e4IOJpWeu:onyzjyUjH0uqQ4IEMeu |
SpecialCode | |
TLSH | T17A11758D3081C3B6880402E83A0A61DEA12D579F6B6D1464700DE25EEF05FB655F26D8 |
db | nsrl_modern_rds |
insert-timestamp | 1646991339.9974313 |
source | NSRL |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | ./usr/lib/.build-id/9d/3b06476a7626d783788572f5040e3b840134fc |
FileSize | 39 |
MD5 | F3447B2888C19D1D016974C141D1B1E4 |
SHA-1 | 2A93BA42A09E0D65396FAB804D795616C54B2A51 |
SHA-256 | EF078ACA786DC3E220EC9EF239D19566E2FD56CB65709C4EFA66224268CDDB43 |
SSDEEP | 3:gCD//hD:X/JD |
TLSH |
Key | Value |
---|---|
FileName | ./usr/share/locale/or/LC_MESSAGES/hivex.mo |
FileSize | 570 |
MD5 | 844827CB825401A8C9764B27D1257644 |
SHA-1 | 387BD620727C3978DD389ABDD466B0365F8B3623 |
SHA-256 | 6AF65A1DF61F3C6862BF03EBA2EA83E5DA52251C4CF64E68754859D06ECEC7EA |
SSDEEP | 12:inXmAK8Zt0jDxe5KF//0cQzlwxEXmBQWiOW56cgD6HqJ:S2N8Zt0jDxe5A30c0qEXmG56aHs |
TLSH | T1E0F02040D8A84D11D05C32F143E0133422244B82EAEBE9D43C0FA1DA5FD637D01B6A92 |