Key | Value |
---|---|
MD5 | 9582046796F96E43D74D6C412302EDE2 |
PackageArch | x86_64 |
PackageDescription | Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' (in perl-hivex) lets you export and merge to the textual regedit format. 'hivexml' can be used to convert a hive file to a more useful XML format. In order to get access to the hive files themselves, you can copy them from a Windows machine. They are usually found in %systemroot%\system32\config. For virtual machines we recommend using libguestfs or guestfish to copy out these files. libguestfs also provides a useful high-level tool called 'virt-win-reg' (based on hivex technology) which can be used to query specific registry keys in an existing Windows VM. For OCaml bindings, see 'ocaml-hivex-devel'. For Perl bindings, see 'perl-hivex'. For Python 3 bindings, see 'python3-hivex'. For Ruby bindings, see 'ruby-hivex'. |
PackageMaintainer | Fedora Project |
PackageName | hivex |
PackageRelease | 8.fc34 |
PackageVersion | 1.3.19 |
SHA-1 | 57D015EA3415D20E8FAEF0E144BC11C12AB0D1A1 |
SHA-256 | 9D6F9F0C962EF94EFA6C64C6862AF5625B5CBC75F020C4348E490C1A06C2AEC8 |
hashlookup:children-total | 34 |
hashlookup:trust | 50 |
The searched file hash includes 34 children files known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
FileName | ./usr/share/man/man1/hivexget.1.gz |
FileSize | 3093 |
MD5 | 18EF07C6CB22F836D02DC4E4FEB07A99 |
SHA-1 | 016238C53DEFDCA20824FA07F139E9EFC7AAAC4C |
SHA-256 | FC44B7DFFA6A08A38AEA0A3E4DC4F6DC36B1332F938FF79517B70DF46D3E7283 |
SSDEEP | 48:XWAs2azJGOovEz/+M2AeUTBYtI0eDlDKGX4CFbwIAQawknP34PxG6oD47llvF:GUaVGO5z28itLsUhoUzwknP34IM7fvF |
TLSH | T16A515D6017DD988CCBFB4A7A57A177166CD00876397BD4C80113B1EEDB1577E40A24E7 |
Key | Value |
---|---|
FileName | ./usr/share/locale/fr/LC_MESSAGES/hivex.mo |
FileSize | 4620 |
MD5 | 6D4F4E3F4FFA08556E3D0C6A7E9C6284 |
SHA-1 | 0DDA67BCF6BA61BB2A27CFB908E1162FC0888C5D |
SHA-256 | 66B260B90D14F1492176D5E39A2005B298C11E92117E844B7368DDF0F891D58B |
SSDEEP | 96:ueGIkW+hG+KmJVdY1Uw0iqIozpzBIMV11tWlAVspUgIh3U92:VGlW0x1SOcFMP/Wlosq02 |
TLSH | T10591B6EED7C427ABEBC21176B74D9102D6148E588E5AE35419DCC346328C8BC48EA9DC |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | ./usr/share/locale/mr/LC_MESSAGES/hivex.mo |
FileSize | 5896 |
MD5 | FF0A61BE1307BC08BFF12BEC569E0F6F |
SHA-1 | 0DDA7E277D2EE821A792FAE12D956D0FCF2E3A3D |
SHA-256 | 413318F32835ED7571D9F44BAB27718BEE22CC0D21D1BA6BAE8DFA6D301964F5 |
SSDEEP | 96:udbyIkW+hG+KmJVdY1Uw0iqIdJSHApGvE6oBsdGw9vbyYve4i+Nlj+749X74eLiN:WylW0x1SOc+TEx62ejkwABcgIBGj |
TLSH | T125C1324CF37DF756CEFD78B927484E3685B811B4CBE642510898F2977C80CB801AE5AA |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | ./usr/share/locale/pt/LC_MESSAGES/hivex.mo |
FileSize | 4367 |
MD5 | 1AF95C490C60FFE8EFC80AE8C064E926 |
SHA-1 | 0E900A39EB27755761351184EAD36742C2144593 |
SHA-256 | 9695129AE0CF6E25996D25755C174038025A7B2B4D46F6FA8D20ACDCF7846F46 |
SSDEEP | 96:ujz3IkW+hG+KmJVdY1Uw0iqIeh8GXKzfFmMsPHoLAHLCKgl9y:ez3lW0x1SOcefKzfFDKHoLEMy |
TLSH | T13591F86A83403B57DBE713F6AB4EC20296450A989E62C1C21B8CD153B5C8AAC55FF0FC |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | ./usr/share/locale/ja/LC_MESSAGES/hivex.mo |
FileSize | 4998 |
MD5 | CB070B91ADBEBDB486CD2CD5002CB082 |
SHA-1 | 1723271CFFA7F631CEF43FDEBDA600669347A680 |
SHA-256 | 0E1FF4772C8385DC2C6BF5A9E04544F371D1E2BB418218D80F4C7C36CC93C3C7 |
SSDEEP | 96:uDLVIkW+hG+KmJVdY1Uw0iqIGiX6sG+78C12jdDMiBy6zFu:WVlW0x1SOcFNGlQ2jdIZ |
TLSH | T1FBA1942DD7C13AABCAE300B14A5D328176684C8DFE537332015EC0127990AAEE45E9FD |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | ./usr/lib64/libhivex.so.0.0.0 |
FileSize | 57408 |
MD5 | 3269D922956C410209AA81CB2B90BEBF |
SHA-1 | 189D4C0F7CBAE915ACF6DBF8512C33BF19ADDA36 |
SHA-256 | DF435EEF3ADDB800D2E28CEEEFAC67CD5606872D4584A92C2B0FCB5D83FA9FC1 |
SSDEEP | 768:Ud/msZ3go5QoAYwIg4QoAYwIg4QoAYwIg4QoAYw7zrjbTLD7zrjbTLD7QMzKv6hj:UdusUKyh0lv7f3PSoSM |
TLSH | T18643072B759118B4D4C4D5B0C36F87123DB0F1859732337BA948AA253FADE7E4936B22 |
Key | Value |
---|---|
FileName | ./usr/share/locale/hu/LC_MESSAGES/hivex.mo |
FileSize | 4359 |
MD5 | 0037133C30C349524C56A90292F9CA58 |
SHA-1 | 29C603BCE19A7E4671A175EDD7031D225A33E762 |
SHA-256 | D03BCA6725A7008722DEDFC149F3BB8245FD444C96E502BA3D8694107D8DA4A7 |
SSDEEP | 96:uBsaIkW+hG+KmJVdY1Uw0iqI9XgAR81BBK4ErOoPezE6tJ+sYp8n:lalW0x1SOc9QPTBK48fYEcop8n |
TLSH | T11091E82947013B4BEBF703F6D35C9610518A06589F73BA72155D828731C09AD59FF0EE |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | ./usr/lib/.build-id/9d/3b06476a7626d783788572f5040e3b840134fc |
FileSize | 39 |
MD5 | F3447B2888C19D1D016974C141D1B1E4 |
SHA-1 | 2A93BA42A09E0D65396FAB804D795616C54B2A51 |
SHA-256 | EF078ACA786DC3E220EC9EF239D19566E2FD56CB65709C4EFA66224268CDDB43 |
SSDEEP | 3:gCD//hD:X/JD |
TLSH |
Key | Value |
---|---|
FileName | ./usr/share/doc/packages/hivex/README |
FileSize | 3186 |
MD5 | 32790F9B1CE0B21AB5FBEB97652D7345 |
RDS:package_id | 293685 |
SHA-1 | 3EA80DB40548E7E6B8E4D515D57B055BCFE050BD |
SHA-256 | 67221A953E2A6BF04CC63D63D28C8E19A62E06165222DF0A4933255381BDC96A |
SSDEEP | 48:t2lyXyvv18eGFxqqsfS2P/tL3hITBjvDoSox5vDrzGhN3/emvkdao8yXTfE6K+zv:oyXWKfBsfptLGvDKxYXPemByDM6K+zv |
TLSH | T11161C9366E69837367E0C6B0550EC2B2CB22D47E9A2F5592B57C404A7313EA065FC3F0 |
insert-timestamp | 1678963978.8035011 |
source | RDS.db |
Key | Value |
---|---|
FileName | ./usr/lib/.build-id/37/b163b412909ce056464db2f4a2c9518a222ac7 |
FileSize | 27 |
MD5 | 0F9A618F6434327C0CA5D3DEDFE667EC |
SHA-1 | 575172390BBB6E3DF11D633CBD419EB1B9B54E79 |
SHA-256 | 4ED5866F126E369E0C192CD2E1165BFF6FC63895046751AA669DB0DA2007AA37 |
SSDEEP | 3:gCDNfTAKJ:X1TAKJ |
TLSH |