Entry |
\\REGISTRY\\MACHINE\\HARDWARE |
Default
value |
Null |
Files |
Not strored on disk, this hive is
dynamically recreated at each startup and is
loaded into memory as volatile hive. |
Entry |
\\REGISTRY\\MACHINE\\SECURITY |
Default
value |
\\Device
\\Harddisk0 \\Partition0 \\WINNT \\system32
\\config \\SECURITY |
Files |
Security,
Security.log, Security.sav |
Entry |
\\REGISTRY\\MACHINE\\SOFTWARE |
Default
value |
\\Device \\Harddisk0
\\Partition0 \\WINNT \\system32 \\config
\\SOFTWARE |
Files |
Software, Software.log,
Software.sav |
Entry |
\\REGISTRY\\MACHINE\\SYSTEM |
Default
value |
\\Device
\\Harddisk0 \\Partition0 \\WINNT \\system32
\\config \\SYSTEM |
Files |
System,
System.alt, System.log, System.sav |
Entry |
\\REGISTRY\\USER\\.DEFAULT |
Default
value |
\\Device \\Harddisk0
\\Partition0 \\WINNT \\system32 \\config
\\DEFAULT |
Files |
Default, Default.log,
Default.sav, Default.log, Default.sav |
Entry |
\\REGISTRY\\MACHINE\\SAM |
Default
value |
\\Device
\\Harddisk0 \\Partition0 \\WINNT \\system32
\\config \\SAM |
Files |
Sam,
Sam.log, Sam.sav |
Entry |
\\REGISTRY\\USER\\SID |
Default
value |
\\Device \\Harddisk0
\\Partition0 \\WINNT \\system32 \\config \\NTUSER.DAT |
Files |
Ntuser.dat, Ntuser.dat.log |