Page 1 of 1
Recovering Registry data
Posted: Wed Apr 11, 2012 7:44 pm
by InTheMood
The "All Files and Folders" tree, in the Sandboxie control panel, contains "RegHive" data.
Is there a way to view this data?
Is there a way to recover this registry data into a .reg or a text file?
Posted: Thu Apr 12, 2012 12:56 am
by MichaelS
The easiest way to get access to a sandbox's registry entries is while the sandbox is active (i.e. programs are running within it).
Depending on your needs, you've got two quick options:
1. If you want to view/save the sandbox's registry working set, while an application is running in the sandbox, run regedit (the Registry Editor) and then explore the registry tree HKEY_USERS\Sandbox_[your_username]_[sandbox_name]
2. If you want to view/save registry entries as if they'd be part of the whole OS registry, then run regedit.exe under the sandbox you want to analyze. If you're exporting, you can use these registry entries later by loading them under the same sandbox, or a different one if need arises.
Posted: Thu Apr 12, 2012 6:04 pm
by InTheMood
Running regedit in the sandbox displays the whole system registry. I am only interested in viewing the registry keys affected by the application(s) running in the sandbox.
Can I view/recover the affected registry keys in the same way that Sandboxie lets me view the affected files?
Re: Recovering Registry data
Posted: Thu Apr 12, 2012 6:14 pm
by Buster
InTheMood wrote:Is there a way to recover this registry data into a .reg or a text file?
Buster Sandbox Analyzer has a feature to convert Sandboxie´s RegHive file to .REG.
Posted: Fri Apr 13, 2012 1:46 am
by MichaelS
InTheMood wrote:Running regedit in the sandbox displays the whole system registry. I am only interested in viewing the registry keys affected by the application(s) running in the sandbox.
Can I view/recover the affected registry keys in the same way that Sandboxie lets me view the affected files?
As Buster said, using his tool, or if you do not always have it available, do what I said before:
1. If you want to view/save the sandbox's registry working set, while an application is running in the sandbox, run regedit (the Registry Editor) and then explore the registry tree HKEY_USERS\Sandbox_[your_username]_[sandbox_name]
Re: Recovering Registry data
Posted: Sat May 14, 2016 3:53 am
by Asailum
Is there some tool anyone knows of to copy the registry entries in a file system kind of way? I'm trying to move things from machine->software folder into my real one..
Re: Recovering Registry data
Posted: Sat May 14, 2016 7:44 pm
by Syrinx
If it's only a few keys you can find them and export them within regedit either by mounting the reghive file or finding it while the sandbox in question is active. So let's say you have something that creates a 'GAME' key under software. You export the entire 'Game' key, then edit it with notepad to search/replace the entry eg "HKEY_USERS\Sandbox_XXXX_XXXXX_XXXXXX\machine\software" to HKEY_LOCAL_MACHINE\Software" etc. Once the exported .reg has replaced those values (assuming you get the paths correct) you can then just save it [might want to save to a new file in case you get it wrong at first] and double click to import into the actual registry. That example is actually the reverse of how I normally place games I install on my gaming OS into the Steam\Origin Boxes on my other OS with SBIE where I mount the reghive first then import the altered original export into the box.