Search notes:

%SYSTEMROOT%\System32\config

%SYSTEMROOT%\System32\config (whose path typically is C:\Windows\System32\config) stores among others the following registry hives (which are physical files):
These files are updated when a user logs in.

Index