Windows NT Registry File (REGF)
From Forensics Wiki
Revision as of 14:02, 15 October 2010 by Joachim Metz
REGF has the following file signature:
hexadecimal: 72 65 67 66
The REGF basically consists of a set of hive bins. These hive bins contain cells that make up a hierarchy of keys and values.