Result for 3CE3ACD9A70F12DF7DF288F53DAF3178549DF050

Query result

Key Value
FileName./usr/bin/hivexsh
FileSize31808
MD5A8995FD7CA94356DE26FA242DBB7734B
SHA-13CE3ACD9A70F12DF7DF288F53DAF3178549DF050
SHA-256701FF272003D7CE1A890718539C60E1AC1FC943E003FA206D99BF32D9590C6ED
SSDEEP384:TWb82/9WLR5noJqobDKDyWaN9gPwNgaFwNTkxEB2CFFHbbnFsja/l19s:6b1sVonKDGgPwNgaFwNTkxorFsG/l1
TLSHT1CFE2B6D79636C2C6C9F53B3685AF65B1D6330C35BA9B1618739CFF2129B7B004A28670
hashlookup:parent-total1
hashlookup:trust55

Network graph view

Parents (Total: 1)

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key Value
MD5ED3030D740318B5DDD07E54233BF0BC0
PackageArchs390x
PackageDescriptionHive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' (in perl-hivex) lets you export and merge to the textual regedit format. 'hivexml' can be used to convert a hive file to a more useful XML format. In order to get access to the hive files themselves, you can copy them from a Windows machine. They are usually found in %systemroot%\system32\config. For virtual machines we recommend using libguestfs or guestfish to copy out these files. libguestfs also provides a useful high-level tool called 'virt-win-reg' (based on hivex technology) which can be used to query specific registry keys in an existing Windows VM. For OCaml bindings, see 'ocaml-hivex-devel'. For Perl bindings, see 'perl-hivex'. For Python bindings, see 'python-hivex'. For Ruby bindings, see 'ruby-hivex'.
PackageMaintainerFedora Project
PackageNamehivex
PackageRelease11.fc23
PackageVersion1.3.11
SHA-10C3DCC649B1851417E8614CB6106548647537FA6
SHA-256C00EBF232B0B6EF7BC65360753409A3824BBFAAC49D8472B5F329E3E7ADCB98B