Result for 3DC6E7DEFEE2BE28ED905CD497FB7149364D30FA

Query result

Key Value
FileName./usr/bin/hivexml
FileSize24540
MD5B21188BAB723D94814B22B8043CDA19B
SHA-13DC6E7DEFEE2BE28ED905CD497FB7149364D30FA
SHA-256FD2F7E04EA235A586889CD39DCD11060A6747AB43A4A559971522552FAD25A39
SSDEEP384:5ukwpQaUBlS0K5TPueQ4EcBbef99TX0i0Z5cey/AVZgl2UQq5//x:YpQ/ltwCfvEiJp/iw2UQq5/J
TLSHT1D5B20A2BB7440D46C6B82DB0242B77E4237CFA42B0B4784F571EA22794B59B50D1FFA9
hashlookup:parent-total1
hashlookup:trust55

Network graph view

Parents (Total: 1)

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key Value
MD560CBD43220658AB0CBA7E5232E106901
PackageArchppc
PackageDescriptionHive files are the undocumented binary blobs that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' lets you export and merge to the textual regedit format. 'hivexml' can be used to convert a hive file to a more useful XML format. In order to get access to the hive files themselves, you can copy them from a Windows machine. They are usually found in %systemroot%\system32\config. For virtual machines we recommend using libguestfs or guestfish to copy out these files. libguestfs also provides a useful high-level tool called 'virt-win-reg' (based on hivex technology) which can be used to query specific registry keys in an existing Windows VM. For Perl bindings, see 'perl-hivex'. For Python bindings, see 'python-hivex'.
PackageMaintainerFedora Project
PackageNamehivex
PackageRelease6.el5
PackageVersion1.3.5
SHA-145866C6D9CC1523FACF9DDDE1544A4A142ABF22A
SHA-256C8322B8F4A1A92310F8B9B6AE741F0355250BABB0CD52ABD8B29878C3A22F1D4