Result for 7D1DE00DE66DE8A5EC433DC8A63EB0598CD01F01

Query result

Key Value
FileName./usr/bin/hivexml
FileSize69600
MD55C12FB05340C9B92484F582559FBD3EC
SHA-17D1DE00DE66DE8A5EC433DC8A63EB0598CD01F01
SHA-2568CE038420C364A52814158CBAA5DF9B016CC42A409D649497168033E8CB084A7
SSDEEP384:hZbqoE8rT1WhECQ9bpwHi//DoDGAIrvb97lrdYEpmDRCzPfTc:DBw4Nm4dEDAY
TLSHT19D6392EC7B95CA23C7580238E5921B3CE37C9D50D522754ABE0F936500F2A9D68BEBD1
hashlookup:parent-total1
hashlookup:trust55

Network graph view

Parents (Total: 1)

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key Value
MD5889D0E52C6753610ACDC14E131D8FB8E
PackageArchppc64
PackageDescriptionHive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' lets you export and merge to the textual regedit format. 'hivexml' can be used to convert a hive file to a more useful XML format. In order to get access to the hive files themselves, you can copy them from a Windows machine. They are usually found in %systemroot%\system32\config. For virtual machines we recommend using libguestfs or guestfish to copy out these files. libguestfs also provides a useful high-level tool called 'virt-win-reg' (based on hivex technology) which can be used to query specific registry keys in an existing Windows VM. For OCaml bindings, see 'ocaml-hivex-devel'. For Perl bindings, see 'perl-hivex'. For Python bindings, see 'python-hivex'. For Ruby bindings, see 'ruby-hivex'.
PackageMaintainerFedora Project
PackageNamehivex
PackageRelease3.fc20
PackageVersion1.3.8
SHA-1B4779E55D8A7BB1C98D2F31BFE3BBD094E12CF57
SHA-2568564ADEED2109348D3010C4F73CDB12F5C8DA4B3AD75CAF3C0EDBAC9FDDC8748