Search notes:

Registry: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\hivelist

The values under this key list the hives that are loaded into the registry. Absent is \REGISTRY\A.
\REGISTRY\MACHINE\HARDWARE
\REGISTRY\MACHINE\SYSTEM \Device\HarddiskVolume2\Windows\System32\config\SYSTEM
\REGISTRY\MACHINE\SOFTWARE \Device\HarddiskVolume2\Windows\System32\config\SOFTWARE
\REGISTRY\MACHINE\SAM \Device\HarddiskVolume2\Windows\System32\config\SAM
\REGISTRY\USER\.DEFAULT \Device\HarddiskVolume2\Windows\System32\config\DEFAULT
\REGISTRY\MACHINE\SECURITY \Device\HarddiskVolume2\Windows\System32\config\SECURITY
\REGISTRY\USER\S-1-5-20 \Device\HarddiskVolume2\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
\REGISTRY\USER\S-1-5-19 \Device\HarddiskVolume2\Windows\ServiceProfiles\LocalService\NTUSER.DAT
\REGISTRY\MACHINE\BCD00000000 \Device\HarddiskVolume1\Boot\BCD
\REGISTRY\USER\S-1-5-21-141852115-1023286806-559936708-1002 \Device\HarddiskVolume2\Users\Rene\NTUSER.DAT
\REGISTRY\USER\S-1-5-21-141852115-1023286806-559936708-1002_Classes \Device\HarddiskVolume2\Users\Rene\AppData\Local\Microsoft\Windows\UsrClass.dat

Index