Key | Value |
---|---|
MD5 | 3369D938390E3F95B15E3E2AD958F0A8 |
PackageArch | aarch64 |
PackageDescription | Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' (in perl-hivex) lets you export and merge to the textual regedit format. 'hivexml' can be used to convert a hive file to a more useful XML format. In order to get access to the hive files themselves, you can copy them from a Windows machine. They are usually found in %systemroot%\system32\config. For virtual machines we recommend using libguestfs or guestfish to copy out these files. libguestfs also provides a useful high-level tool called 'virt-win-reg' (based on hivex technology) which can be used to query specific registry keys in an existing Windows VM. For OCaml bindings, see 'ocaml-hivex-devel'. For Perl bindings, see 'perl-hivex'. For Python 3 bindings, see 'python3-hivex'. For Ruby bindings, see 'ruby-hivex'. |
PackageMaintainer | umeabot <umeabot> |
PackageName | hivex |
PackageRelease | 7.mga9 |
PackageVersion | 1.3.21 |
SHA-1 | F77661274AD8DCFB8FE1E67FF5A113F5C1C5F3A2 |
SHA-256 | 12C83BB3C0384921B3E7DE03E62D6177371F2AD46F4F8520634D6F3761B343A9 |
hashlookup:children-total | 2 |
hashlookup:trust | 50 |
The searched file hash includes 2 children files known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
FileName | hivex.spec |
FileSize | 13335 |
MD5 | 3F0B5AC0B5F03115062B54AE16C5B0EC |
SHA-1 | EC63B7B99C0DA12996AF8C42C1DC5FA26CE5F63A |
SHA-256 | 774C2E7B4D2AF9A13DCC5E5B11FC364BDE2E955F589A189EE0F80618149890BF |
SSDEEP | 384:fm4H192vfmovrAex6i80S6zCzwuvdXVwcnN0/cMW7vPnrg58nLNGKGB:d40tp6Czwuv9mcnNX77m |
TLSH | T12B52A42212C4616176AF6DE3E5F46211E33ED17B35AF0064B2BF42C51B6722462FA0B7 |
Key | Value |
---|---|
FileName | hivex-1.3.21.tar.gz |
FileSize | 1729723 |
MD5 | 1B9168C6454BA21C469990D90E4B93B5 |
RDS:package_id | 293705 |
SHA-1 | 3D39D9210E92D809FC3D1E692FF27EE7E9FB0B4C |
SHA-256 | 9ACE3EF4A2FF2CA50A99BE068B60FB1FDBC9EAB8AF53E345E97CE75BA4B63B56 |
SSDEEP | 49152:5kjzsXmpp5RLRRUSQ8Dj3Nfx68K/XOEB3ozcni6AoB26:0kW1RRUS33NZlOea3E6 |
TLSH | T187852390BB4949C5A666E1B32B4381EFD34894C5197E6526F3FE1D0CA34C23A7DAF138 |
insert-timestamp | 1678968082.0398884 |
source | RDS.db |