Keys Open by Hive

Quick addendum: I thought it might also be fun to post how many keys were open in each hive (this is for xp-laptop-2005-07-04-1430.img -- and sorry for the huge amount of space, Blogger's auto-formatting seems to get confused around tables):














HiveKey Count
[...]a\Microsoft\Windows\UsrClass.dat1
[...]Settings\LocalService\NTUSER.DAT7
[...]WINDOWS\system32\config\SECURITY11
[...]1\WINDOWS\system32\config\system1122
[...]a\Microsoft\Windows\UsrClass.dat1
[...]ts and Settings\Sarah\NTUSER.DAT147
[...]a\Microsoft\Windows\UsrClass.dat1
[...]\WINDOWS\system32\config\default25
[...]ttings\NetworkService\NTUSER.DAT4
[...]ume1\WINDOWS\system32\config\SAM14
[NONAME]4
[NONAME]4
[...]WINDOWS\system32\config\software2657

Comments

Popular posts from this blog

Someone’s Been Messing With My Subnormals!

Decrypting LSA Secrets

SysKey and the SAM