Result for C0B1B6574924F741E35504B075D99D89764D07C4

Query result

Key Value
MD598A2DC458C18CC5303BCF3842F96FB5A
PackageArchx86_64
PackageDescriptionHive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' lets you export and merge to the textual regedit format. 'hivexml' can be used to convert a hive file to a more useful XML format. In order to get access to the hive files themselves, you can copy them from a Windows machine. They are usually found in %systemroot%\system32\config. For virtual machines we recommend using libguestfs or guestfish to copy out these files. libguestfs also provides a useful high-level tool called 'virt-win-reg' (based on hivex technology) which can be used to query specific registry keys in an existing Windows VM. For OCaml bindings, see 'ocaml-hivex-devel'. For Perl bindings, see 'perl-hivex'. For Python bindings, see 'python-hivex'. For Ruby bindings, see 'ruby-hivex'.
PackageMaintainerCentOS BuildSystem <http://bugs.centos.org>
PackageNamehivex
PackageRelease6.11.el7_9
PackageVersion1.3.10
SHA-1C0B1B6574924F741E35504B075D99D89764D07C4
SHA-25659B2EAC344B965618BC03745E27BB5C92278B9FA7C3A6327C3F89FDDA6289A54
hashlookup:children-total26
hashlookup:trust50

Network graph view

Children (Total: 26)

The searched file hash includes 26 children files known and seen by metalookup. A sample is included below:

Key Value
CRC32EB79069A
FileName./usr/share/locale/nl/LC_MESSAGES/hivex.mo
FileSize4425
MD544142557847741CC8802CC08E6F0C4C1
OpSystemCode362
ProductCode183705
SHA-100C4E1752C70808ECD54244039F84F0C3988B33E
SHA-256DAAD1916CD08F3ADA61976B54537FB1DCD3B89D069B1E3524C14C1645F6C6085
SSDEEP96:7/MRkWXhG+KmJVdY1Uw0iqCAVimlx00B8OgURYGmgx1Z9:4SWxx1SOuAIK5KvWp
SpecialCode
TLSHT17E91D60B8B802A6FCBD710F2EB4DC282958401289EB6D2A5295CC57279C0CBE52FF0DC
dbnsrl_modern_rds
insert-timestamp1646978171.2557774
sourceNSRL
Key Value
CRC32088D0D8F
FileName./usr/share/locale/gu/LC_MESSAGES/hivex.mo
FileSize4942
MD582FF599ED6D54E590A0ED4B0DA409537
OpSystemCode362
ProductCode183705
SHA-1012DC7A4FE41B333AE01345E3AF29FB891FBFACA
SHA-256C4C8217E6A915E282A7E614906BAB0F421437C412B9D113C0F91AF534A11065B
SSDEEP96:LkW8G+KGUw0iqCAVWAKrworHLx9SlKGn6FU/BrPWv:wW8xeuAclr5rH1IlKobWv
SpecialCode
TLSHT112A100C0C7A8E532E6D75EBA838D421096685747CD6A6300128DDD45AD42CEE3FFE9CB
dbnsrl_modern_rds
insert-timestamp1646978302.6542115
sourceNSRL
Key Value
CRC328661CAE0
FileName./usr/share/locale/or/LC_MESSAGES/hivex.mo
FileSize708
MD56CB74E4C265EF4DAF23AB40E61C6820C
OpSystemCode362
ProductCode183705
SHA-1017530C504933DF803B59F53558A70E0F4ABAA3B
SHA-256D2E986A3E200CB51A3C55291FDF89BDCEFD8DC39ED2276281C97AE9D9E92EF61
SSDEEP12:iCAuzk25UMAHAl68Oit0jDx905wn/0cQzlwxEXmBQWiOWOgD6HqqnagP+qhi:/Auz95UMew68Oit0jDxC5+0c0qEXmGIU
SpecialCode
TLSHT1F0012340E8B48D10E6DC30F28380833832180695FADBE9CA2A0E54663FD6AFD05F9644
dbnsrl_modern_rds
insert-timestamp1646978396.4972832
sourceNSRL
Key Value
CRC32AB44852B
FileName./usr/share/locale/mr/LC_MESSAGES/hivex.mo
FileSize6065
MD5C004DA415D44938DC1D389336FA153AF
OpSystemCode362
ProductCode183705
SHA-105A1E58CA80FB4C8DEB12BB2E688DE4B1D02B46C
SHA-256D3CCB20C8BEAABBCA6A18EB67DE3E202BC7BA10F8C2A48684EFF01A94C680D43
SSDEEP96:7/H3kWXhG+KmJVdY1Uw0iqCAzwSHApGvE6oBsdGw3vbyYve4i+Nlj+749X74eLiN:gWxx1SOuAZTExC2ejkwABcgIBGj
SpecialCode
TLSHT1A2C1124CF37DF756CEFD78B927584E3688B811B4CBE542520888F2937C80CB811AE59A
dbnsrl_modern_rds
insert-timestamp1646979873.169192
sourceNSRL
Key Value
FileName./usr/share/man/man1/hivexget.1.gz
FileSize3096
MD524F4CD8D0C75D29FD3A5B8B427D39775
SHA-1168A8ADB4459F8D58AA968DEB3F6FF34626B7164
SHA-256180DE24C4D90EB0D5E8C213FBC54C6D5809A619E96169B768690173BD7E31433
SSDEEP48:XsQUxj2F0FVU5Ms/WAFPjluJSWs15fy78mUhmGiAyt+0CCvATUkEpk:zU5FyMZAF7AJkxy78nhmLAAXCvTUkmk
TLSHT13F515DDA50B3289260EA7F79B3B11D0887E582755375B435ED01241FDDC585E14FED8C
Key Value
CRC32C2D8C0BC
FileName./usr/share/locale/kn/LC_MESSAGES/hivex.mo
FileSize6897
MD57476935BC244B49FF92AA32746E35DF8
OpSystemCode362
ProductCode183705
SHA-12219F3C214D0C3A04B43E5375D161EA6544D86AC
SHA-2562EF01BFF214271FB202474DE8BB36B80FFCEAD79FB29773C7867134B3BDB19EF
SSDEEP192:TYWxx1SOuAYBtLMGJcliKVqtp0fmkVkiqGM+mjNIHkmmZSUxmZLedF/U:TJxx1SP3B1ixqf0ukrMjjNIHkbTsFOFc
SpecialCode
TLSHT13FE163186EBA2D32EFD6107A659C652ECFF01BA1AC9603D2F09DC7407DA0C5A14CB4DD
dbnsrl_modern_rds
insert-timestamp1646991275.1009681
sourceNSRL
Key Value
CRC32EA01DC1A
FileNameusr/bin/hivexget
FileSize1035
MD59A3D08CCB414EF5820F15E60ADD5FABA
OpSystemCode362
ProductCode183705
SHA-1224CCF0E3E7A7D7276A233F4F6194D4873EBEF1E
SHA-25648FEE0A09A84DE9F91687F2471B8CFBD59CE3152DE08E61268539F4D005499B3
SSDEEP24:oct2HSCUgiyUVOkHxHqTbV3oDq9e4IOJpWeu:onyzjyUjH0uqQ4IEMeu
SpecialCode
TLSHT17A11758D3081C3B6880402E83A0A61DEA12D579F6B6D1464700DE25EEF05FB655F26D8
dbnsrl_modern_rds
insert-timestamp1646991339.9974313
sourceNSRL
tar:gnameroot
tar:unameroot
Key Value
FileName./usr/bin/hivexml
FileSize20072
MD5CA8345DA4F08F4ECEB389E58E30AE233
SHA-129285388EF12091C184EB91E2346420B0F2695ED
SHA-2569A90BEE65EA2C84235F85882378F725C18B1582FFED85B01B56B8AE62D279CDB
SSDEEP192:G2u9w0OjFENlNF498Ge1bYogULGLyYMGQOHP3EWiHBYqV2XDDG4Q2S:cJNlNF4j5ogUEFMGQOfEWSBqZQ
TLSHT1AD92FA976AA386BEC67493700A1F417D2573A6F6FB116B2B144072367B07B4C0F0A937
Key Value
CRC327B9817D6
FileName./usr/share/locale/zh_CN/LC_MESSAGES/hivex.mo
FileSize4168
MD5B1D7A8A43A4EC37A2CC537A73843B845
OpSystemCode362
ProductCode183705
SHA-12B48BFD560234752FFA74D6C7E7D7A2900B2ECEE
SHA-256AA94876B93F1D5972BA16BF9D34AA046CCDAD53D805D7B0AC46DF79F7BC5813D
SSDEEP96:7/A5kWXhG+KmJVdY1Uw0iqCAxpi12kpNt2yhqJa:caWxx1SOuA7pSQo
SpecialCode
TLSHT18681E755CB842F8FEBEB01B0878DC256456405B8DF9BA2902EECC5D639818AC14FF9CC
dbnsrl_modern_rds
insert-timestamp1646994486.7114942
sourceNSRL
Key Value
CRC32D8D508F1
FileName./usr/lib64/libhivex.so.0
FileSize17
MD51C188DB0D174433E088998AC1AC46E09
OpSystemCode362
ProductCode183357
RDS:package_id222721
SHA-159A879F3C5F7B0A74DA1855A929ED9A0A6BE0362
SHA-256A1A7161FD991FD7DF8EE8E6A798A4AE610B3AD5C08929BC69CED04A83B57EB7C
SSDEEP3:ENSahD:EMUD
SpecialCode
TLSH
dbnsrl_modern_rds
insert-timestamp1727040645.1441815
sourceRDS.db