Reading RegHive

[kencl]

Hi Folks,

I'm looking through the sandboxed file copies. I'm wondering is there a way to read the RegHive and RegHive.LOG files? I'd like to see what keys are being modified. Thanks.

[Guest10]

For sandboxed programs, while the RegHive files still exist, you can just look in the normal Registry under the key:
HKEY_USERS\Sandbox_(your name)_(sandbox name)
None of the normal Registry keys are being modified, unless you have told Sandboxie to allow access to that Registry key with the OpenKeyPath setting.
--
For programs that are actually installed into a sandbox folder, majoMo is developing SandboxDiff to provide a list of file and registry changes that a program makes when installed.