Key | Value |
---|---|
MD5 | 3396CF2C029FC230632609C1A82A84C3 |
PackageArch | aarch64 |
PackageDescription | Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' (in perl-hivex) lets you export and merge to the textual regedit format. 'hivexml' can be used to convert a hive file to a more useful XML format. In order to get access to the hive files themselves, you can copy them from a Windows machine. They are usually found in %systemroot%\system32\config. For virtual machines we recommend using libguestfs or guestfish to copy out these files. libguestfs also provides a useful high-level tool called 'virt-win-reg' (based on hivex technology) which can be used to query specific registry keys in an existing Windows VM. For OCaml bindings, see 'ocaml-hivex-devel'. For Perl bindings, see 'perl-hivex'. For Python bindings, see 'python-hivex'. For Ruby bindings, see 'ruby-hivex'. |
PackageMaintainer | Fedora Project |
PackageName | hivex |
PackageRelease | 4.fc24 |
PackageVersion | 1.3.13 |
SHA-1 | B3D34BD6FA8CCACD39DE4EF7CA7A128AAFFD1735 |
SHA-256 | 8F0937E2BAB882B629DCAAFF874A67C3E3504ECEE9583A7F2AE0F9181E9027F0 |
hashlookup:children-total | 31 |
hashlookup:trust | 50 |
The searched file hash includes 31 children files known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
FileName | ./usr/share/locale/pt_BR/LC_MESSAGES/hivex.mo |
FileSize | 4288 |
MD5 | 24A42B4F736E1DB44789505FA68EABAC |
SHA-1 | 0855227BC88011FB963B0DCBBBBEA533A581BE76 |
SHA-256 | 0DFDDFC109009512C8A64D17DB0A3C3F7BC018965B10651F226BDE6A517A3BD6 |
SSDEEP | 96:bYyUfnkW+hG+KmJVvUw0iqISt9rtxjdARWsAqCPNw:0iW0x1UcStNbjyRWszt |
TLSH | T1D891C51E87442B97DBC303F2A74EC201A6560B985EA3C1D2579DC152B8C8AAD19BF1FC |
Key | Value |
---|---|
FileName | ./usr/share/locale/ja/LC_MESSAGES/hivex.mo |
FileSize | 5039 |
MD5 | ACD3918C73D7830372F4ADA1C9BC6B13 |
SHA-1 | 115ADF5FE30FBC838DBD4F53A32AA657F3F690E4 |
SHA-256 | B9A5F052AF52F334E9DDDC7AD0EF762CBF2BEBD830CE5CA334EEEF3463E0EFBC |
SSDEEP | 96:uqlIkW+hG+KmJVdY1Uw0iqIStaiX6sG+78C12jdDMiBy6zFu:fllW0x1SOcStpNGlQ2jdIZ |
TLSH | T1F5A1942DD7C13E6BCBE301B14A5C228176644C8DFE637632059EC0227990AAEE45E9FD |
Key | Value |
---|---|
FileName | ./usr/share/man/man1/hivexsh.1.gz |
FileSize | 5381 |
MD5 | 578570A2DC7A0E7ED8761459EE536E40 |
SHA-1 | 1696712C3BE14F1667E68D2B5812333C5AA280E6 |
SHA-256 | 44C125E54F4316CBB94C4B012606F96813AA3CC72F32C78AAB1C723CC5034590 |
SSDEEP | 96:ZJI0NC4k5nxRIgg5+4hAuaoh97VEkM6ig6JBpXq3fa+mUI1n:3XAfxg59hAVMp9M7gqrua+zI5 |
TLSH | T173B18E43BB1D88DAEFA33DA8D9E4ACE1932C65461C1A5A95F48DC4D6760F00D1C270AD |
Key | Value |
---|---|
FileName | ./usr/share/locale/eu/LC_MESSAGES/hivex.mo |
FileSize | 616 |
MD5 | 2503C85F5ADE232B1EB2E927483ED2D8 |
SHA-1 | 19D0CBF93D096FCE88DB1B6DD2AB72A47B7EC5B9 |
SHA-256 | E0997C62782CA483E32B16DCB362379889BE3B7B9293810BA7BC48BFAB0D7F22 |
SSDEEP | 12:iQl+OEZt0jDxIdt57Ni/1JBfvPPLLWTAIhgbg5WXmBQWiOWC63KVx4:QZt0jDxIdt57k1PvuTRCbg5WXmGC6ab4 |
TLSH | T110F0E19089059002E30CB3B2B3B0CA04277A4B93B796FD583D4D10CA1BC633E115E67C |
Key | Value |
---|---|
FileName | ./usr/share/locale/de/LC_MESSAGES/hivex.mo |
FileSize | 1242 |
MD5 | BA03F70425440C027827B5E8D1BBD31F |
SHA-1 | 1B5AAE49D46FC60EE11B9F76282C2CF95404DC36 |
SHA-256 | CD1A00680F0D38351C4042A40C90F14501A29626527A59C06099D1BC85AFE2FC |
SSDEEP | 24:u0kfa2cH4/8psbjQHUpZt0jDxIdt57kcMYn2MRCzrUsXmGC6nKGasXJs8Rxqt8h5:uZa2cHq8QnIpIdt5fXn2MRCzwtOJVO45 |
TLSH | T1CA214104CE485A44C7DE72B763B6D30136EC8684FC87E5571A6A95AE7A8687A406C18C |
Key | Value |
---|---|
FileName | ./usr/share/locale/mr/LC_MESSAGES/hivex.mo |
FileSize | 5937 |
MD5 | D03E6DD9CED3031E82B2AEC2C0B2A63D |
SHA-1 | 1C203E5AA50E8E5D1BD0F2D6C09658BFD5E1B583 |
SHA-256 | D66028A3061A85734B5FE711398805ECE8E430241C787FA535A0C33EE5E91E1E |
SSDEEP | 96:uOaYIkW+hG+KmJVdY1Uw0iqISt5JSHApGvE6oBsdGw9vbyYve4i+Nlj+749X74eG:HlW0x1SOcSt6TEx62ejkwABcgIBGj |
TLSH | T10AC11F4DF37DF756CEFD78B927584E3685B811B4CBE542510888F2977C80CB801AE5AA |
Key | Value |
---|---|
CRC32 | EA01DC1A |
FileName | usr/bin/hivexget |
FileSize | 1035 |
MD5 | 9A3D08CCB414EF5820F15E60ADD5FABA |
OpSystemCode | 362 |
ProductCode | 183705 |
SHA-1 | 224CCF0E3E7A7D7276A233F4F6194D4873EBEF1E |
SHA-256 | 48FEE0A09A84DE9F91687F2471B8CFBD59CE3152DE08E61268539F4D005499B3 |
SSDEEP | 24:oct2HSCUgiyUVOkHxHqTbV3oDq9e4IOJpWeu:onyzjyUjH0uqQ4IEMeu |
SpecialCode | |
TLSH | T17A11758D3081C3B6880402E83A0A61DEA12D579F6B6D1464700DE25EEF05FB655F26D8 |
db | nsrl_modern_rds |
insert-timestamp | 1646991339.9974313 |
source | NSRL |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | ./usr/share/locale/hi/LC_MESSAGES/hivex.mo |
FileSize | 5422 |
MD5 | C36D5B3943040B34F6D9414C11B9CB56 |
SHA-1 | 29B858972A48E686C9CE3A92AD35B27A1DCF50A2 |
SHA-256 | 49F9AD76E302BBFA18D585224BF826CCF2ED0CC8853DBD70DB2917406A49CB45 |
SSDEEP | 96:u7IkW+hG+KmJVdY1Uw0iqISt0FkWvdqgA+BCfhSRpv4aXY5av0Xv0bG+K2AnmESC:ClW0x1SOcStZWvBQhSRpffxGwQV |
TLSH | T178B1654CD7E87777DADD38B6374C4533C55816789BA642520998B3C7B980C7800BF1DA |
Key | Value |
---|---|
FileName | ./usr/share/locale/ru/LC_MESSAGES/hivex.mo |
FileSize | 5318 |
MD5 | D98D4B801C2E6036DFB78A4926C3ED47 |
SHA-1 | 4AEBB3F347E5D3290A36FEBECC07E4456F16BB09 |
SHA-256 | 409C2D3B259AFEBFB3B4513FAC820B1E409F99B7349D991FFD08DD9138870F7C |
SSDEEP | 96:utIkW+hG+KmJVdY1Uw0iqISt4GzQ9I75sgw2OLDGBkLo12+rx8TFxxgDnn:ElW0x1SOcStAWsgwFLamLo1PxAXxgDnn |
TLSH | T141B183104B8839AFD25671B7CA08AA097DD704FE3FBB53501658986F34E2078863F28C |
Key | Value |
---|---|
FileName | ./usr/share/locale/sr/LC_MESSAGES/hivex.mo |
FileSize | 5276 |
MD5 | F100029C0734EB7D60E7E7E0FB049432 |
SHA-1 | 4F446B1EFDA97D679C931B8F43799C0DB0A5816F |
SHA-256 | EC6A3D89B8B44743C9B02CB292A67005FDA19D83FA60DD526AC8306814987BDF |
SSDEEP | 96:usUIkW+hG+KmJVdY1Uw0iqIStv3CxUFWidg8vpsuy8I:bUlW0x1SOcStvyx+rdgf/8I |
TLSH | T109B19562874939EFC605687BDA0CAA053DEA05FD7FF793911A1C596E35C00B8027E28E |