Browse Tools Top 100
HVE CSV
File conversion

Convert HVE to CSV

Verified by Adam B.· reviewed by FE Editorial ·updated Aug 4, 2026
QUICK ANSWER
Is it possible to convert HVE to CSV?
Yes - HVE converts to CSV.

The fastest route is Eric Zimmerman's AmcacheParser (for Amcache.hve) or Registry Explorer, both of which write .csv directly. For arbitrary hives, RegRipper or a Python dumper can also emit CSV. Only the keys/values a given tool or plugin targets end up in the CSV - it is not a full byte-for-byte dump.

Also to CSV: DTA · XFDF · TSV

On this page

Tested on macOS, Windows & Linux
Last verified Sep 2026

More free converters

HEIC, PNG, WEBP, MP3 and more - every tool here is free.

Open the toolbox

Why convert HVE to CSV?

A .hve is a binary Windows Registry hive, which is unreadable in Excel, so investigators export the keys, values and timestamps to .CSV for filtering, sorting and reporting. The conversion is really a structured extraction: each row is a registry entry (path, value name, data, last-write time).

How to convert HVE to CSV

AmcacheParser

For an Amcache.hve, run AmcacheParser.exe -f Amcache.hve --csv C:\out. It writes several CSVs such as Amcache_UnassociatedFileEntries.csv.

Registry Explorer FREE

Load the hive, then use File then Export (or a bookmark/plugin) to save the current view or key set as a .csv.

RegRipper

Run a CSV-capable plugin, e.g. rip.exe -r NTUSER.DAT -p <plugin>, and redirect output; several plugins emit comma-separated rows.

dump-registry-hive.py OPEN-SOURCE

Didier Stevens' script dumps REG_SZ/REG_BINARY and other values to CSV by default: python dump-registry-hive.py hive.hve > out.csv.

About these formats

.HVE Windows Registry Hive File

A .hve file is a Windows Registry hive: a binary database that stores registry keys and values in the regf format. The one you are most likely to meet is Amcache.hve, a forensic artifact…

Open .HVE details →
.CSV Comma-Separated Values

A CSV file stores tabular data as plain text - one row per line, values separated by commas (or semicolons in European locales). Any spreadsheet opens it: Excel, Google Sheets, LibreOffice…

Open .CSV details →

Quality & what to watch

  • CSV captures only the keys, values and timestamps a tool or plugin extracts, not the entire hive structure or security descriptors.
  • Binary (REG_BINARY) values are flattened to hex/text and lose their native typing in a spreadsheet.
  • Different tools produce different columns and multiple files, so results are not interchangeable.

Frequently asked questions

Which tool is best for Amcache.hve to CSV?
Eric Zimmerman's AmcacheParser is purpose-built for it and writes ready-to-analyze CSVs with --csv.
Can I open a .hve directly in Excel?
No, it is a binary hive; you must parse it with a registry tool first and export the entries to .csv.
Does the CSV include every registry key?
Only the keys and values the chosen plugin or tool targets, plus their metadata - it is a selective extraction.
Do I need the hive mounted in Windows?
No, these forensic tools read the offline .hve file directly without loading it into the live registry.