This is the command hivexget that can be run in the OnWorks free hosting provider using one of our multiple free online workstations such as Ubuntu Online, Fedora Online, Windows online emulator or MAC OS online emulator
PROGRAM:
NAME
hivexget - Get subkey from a Windows Registry binary "hive" file
SYNOPSIS
hivexget hivefile '\Path\To\SubKey'
hivexget hivefile '\Path\To\SubKey' name
NOTE
This is a low-level tool. For a more convenient way to navigate the Windows Registry in
Windows virtual machines, see virt-win-reg(1). For proper regedit formatting, use
hivexregedit(1).
DESCRIPTION
This program navigates through a Windows Registry binary "hive" file and extracts either
all the (key, value) data pairs stored in that subkey or just the single named data item.
In the first form:
hivexget hivefile '\Path\To\SubKey'
"hivefile" is some Windows Registry binary hive, and "\Path\To\Subkey" is a path within
that hive. NB the path is relative to the top of this hive, and is not the full path as
you would use in Windows (eg. "HKEY_LOCAL_MACHINE\SYSTEM" is not a valid path).
If the subkey exists, then the output lists all data pairs under this subkey, in a format
similar to "regedit" in Windows.
In the second form:
hivexget hivefile '\Path\To\SubKey' name
"hivefile" and path are as above. "name" is the name of the value of interest (use "@"
for the default value).
The corresponding data item is printed "raw" (ie. no processing or escaping) except:
1. If it's a string we will convert it from Windows UTF-16 to UTF-8, if this conversion
is possible. The string is printed with a single trailing newline.
2. If it's a multiple-string value, each string is printed on a separate line.
3. If it's a numeric value, it is printed as a decimal number.
Use hivexget online using onworks.net services
