RegistryViewer is a free registry forensic analysis tool that can open raw Windows NT 5 Registry files (Windows 2000 or higher). The file structure is showed similar to the Windows Registry editor. Folders, keys and values can be searched and the values can displayed in hexadecimal form.
The Registry files can be opened per Drag & Drop. All Registry files ("SYSTEM", "SOFTWARE", "SAM", "NTUSER.DAT", "SECURITY", "USERDIFF" and "DEFAULT") are supported.
RegistryViewer doesn't show the Registry files of the running operating system.
To get information from the running system, you can use the application SystemReport
. To read important and commonly needed information from Registry files, e.g. information about the operating system, the users and user activities, the recently connected hardware or the recently used files, you can use the RegistryReport
Registry files from Windows NT 5 or higher for analyze
Support this application
- Catalan v1.3
- Spanish v1.3
- Greek v1.3
- Japanese v1.3
- Dutch v1.3
- Portuguese v1.0
- Russian v1.2
- Swedish v1.3
- Chinese trad. v1.1.1
The changelog for this application is available in the German version of this page only.