HKLM \ System -% windir% \ system32 \ config \ SYSTEM
HKLM \ Software -% windir% \ system32 \ config \ SOFTWARE
HKLM \ Segurança -% windir% \ system32 \ config \ SECURITY
HKLM \ Sam -% windir% \ system32 \ config \ SAM
HKEY_USERS.DEFAULT -% windir% \ system32 \ config \ Default
HKEY_USERS \ [SID] -% userprofile% \ Ntuser.dat
HKCU \ [SID] \ Software \ Classes -% userprofile% \ AppData \ Local \ Microsoft \ Windows \ Usrclass.dat