Computersight -

Figure 1 Default Windows Security Accounts Manager (SAM) Database File Location

Image Source: Screen Shot by Author

The path to the Windows Security Accounts Manager (SAM) file’s default location is shown in the address bar of the above screen shot (C:WINDOWSsystem32config). If C is not the partition on which the Windows system passwords you wish to recover simply substitute the correct partition.

This SAM file (the highlighted file in the right pane in the above screen shot) contains the passwords associated with the users of this machine (localhost) and stores them as hashes rather than plain English. The default encryption algorithm that is generally used is the secure hash standard. Therefore; you will need a brute force password cracking tool such as LCP or Cain and Able to decrypt them.

Check out the following link for more about Windows password recovery Windows Password Recovery