I think the key is in converting the binary values from the IconStreams value into text. It contains the tool tip display text, which could tell you what dropbox is doing. Here is one I found in vbs that at least displays the text. Just not sure how to convert it to kix.

 Code:
const HKEY_CURRENT_USER = &H80000001

Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\default:StdRegProv")

strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Explorer\TrayNotify"
strValueName = "IconStreams"

oReg.GetBinaryValue HKEY_CURRENT_USER,strKeyPath,strValueName,dwValue

WScript.Echo RegBinaryToString(dwValue)

function RegBinaryToString(arrValue)  
 strInfo=""  
  for i=0 to ubound(arrValue)  
   if arrValue(i)<>0 then strInfo=strInfo & chr(arrValue(i))  
  next  
 RegBinaryToString=strInfo  
end function


Oh, and the location of the IconStreams data seems to differ with the operating system. This code was made to work on XP.

Edited by ShaneEP (2014-05-14 10:09 PM)