OfflineRegistryView is a free and portable tool that allows you to view and extract data from Windows Registry files (such as SYSTEM, SOFTWARE, NTUSER.DAT) without needing to load the active registry of the operating system. It allows you to analyze registry hives from an offline system, such as those found in backups, external drives, or images of corrupted systems.
Main Features:
Offline hive viewing: Opens registry files (hives) from Windows systems without needing to load them into the current system.
Structured navigation: Displays the structure of keys, subkeys, and values of the registry in a graphical interface similar to the Windows Registry Editor (regedit).
Data export: Allows exporting keys and values to formats like .reg, text, or HTML for later analysis.
Detailed search: Offers search functionality to locate keys, values, or specific data within the hive.
Detailed information: Shows details like value type (REG_SZ, REG_DWORD, etc.), associated data, and timestamps when available.
Support for multiple hives: Can load multiple registry files simultaneously for comparison or analysis.
Lightweight and portable: Requires no installation and can be run from a USB drive.