Where executable write the registry keys

With this method you can find where the installation setup or other executable write the registry keys. If use installation setup then rename application setup to unique name like sdf.exe or use default name instead.

Open:
Create two rules: Process Name is sdf.exe and
Operation is RegSetValue:
Apply the rule and launch sdf.exe. Complete the setup till end and now you get which registry keys the setup program writed. You can see registry path, type and data value:

No comments: