Sanboxie system default browser in Windows registry?

[jacekalex]

Hi
The problem is that in order to launch anything in the sandbox you have to command:
Code:
"C: \\ Program Files \\ sandbox \ start.exe / box: cage" C: \\ Program Files (x86) \ Mozilla Firefox \ firefox.exe

But when some in the link in the email or IM, it opens without the sandbox.
Where in the system you can set the path for the default browser?
Because I can only see some GUI where I can set the FF or Chrome or any rubbish from the supermarket,
and that's it.

How to register sandboxie "start.exe browser" as the default browser system according to the documentation:
https://msdn.microsoft.com/en-us/librar ... s.85).aspx ?

Cheers

[Syrinx]

Before I got the full version for my kids PC I had played with this very question. I managed to get it to mostly work by using regedit and doing a manual search for all the firefox.exe entries then identified if they were related to opening a document type and replacing them with a start string similar to what you have posted. It worked but I eventually undid it all and grabbed another license so that I could just force and separate programs into different boxes at the same time along with applying more specific rules.

I did a quick install of an older version of firefox in a VM and grabbed a list of the more obvious entries:

Code: Select all

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\open\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxURL\shell\open\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\properties\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -preferences"

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -safe-mode"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\FIREFOX.EXE\shell\properties\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -preferences"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -safe-mode"

[HKEY_CURRENT_USER\Software\Classes\FirefoxHTML\shell\open\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""

[HKEY_CURRENT_USER\Software\Classes\FirefoxURL\shell\open\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""

[HKEY_CURRENT_USER\Software\Classes\ftp\shell\open\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""

[HKEY_CURRENT_USER\Software\Classes\http\shell\open\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""

[HKEY_CURRENT_USER\Software\Classes\https\shell\open\command]
@="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""

There might be a couple others but if you have similar entries in these locations you *might* edit those to use start though if you aren't familiar with or comfortable messing with the registry I wouldn't suggest you try it. It could just result in breaking stuff if the wrong entries are altered or the wrong strings are inserted. Also there's a good chance the next time firefox updates it'll restore the original entries and undo the work so you may want to export them once you get them working.

I did a quick test in the VM and this seemed to do the trick but I can't be sure it covers everything (or doesn't break something) especially if called directly by another program. If they just pass the string found in one of the entries below, it has a good chance of working.

Code: Select all

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxURL\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\properties\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -preferences"

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -safe-mode"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\FIREFOX.EXE\shell\properties\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -preferences"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -safe-mode"

[HKEY_CURRENT_USER\Software\Classes\FirefoxHTML\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""

[HKEY_CURRENT_USER\Software\Classes\FirefoxURL\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""

[HKEY_CURRENT_USER\Software\Classes\ftp\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""

[HKEY_CURRENT_USER\Software\Classes\http\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""

[HKEY_CURRENT_USER\Software\Classes\https\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""

The VM I tested it on was Win7 x64 so there might be more or other entries in a diff OS. I just opened a saved .html page and it loaded in SBIE frees DefaultBox to test it. Other tweaking may be required and the paths will only be good if that's where each program is installed on your system....blahblah...use the one above and mess with your registry at YOU OWN RISK! eg, don't blame me!

Obviously with the paid version you can just force firefox and any other software and not need to alter shortcuts or reg entries.

[jacekalex]

Obviously with the paid version you can just force firefox and any other software and not need to alter shortcuts or reg entries.

I have a commercial version Sandboxie, thanks You for the tip to enable force sandboxing in box configuration options .

Cheers

[Creave]

Code: Select all

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxURL\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\properties\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -preferences"

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -safe-mode"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\FIREFOX.EXE\shell\properties\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -preferences"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -safe-mode"

[HKEY_CURRENT_USER\Software\Classes\FirefoxHTML\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""

[HKEY_CURRENT_USER\Software\Classes\FirefoxURL\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""

[HKEY_CURRENT_USER\Software\Classes\ftp\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""

[HKEY_CURRENT_USER\Software\Classes\http\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""

[HKEY_CURRENT_USER\Software\Classes\https\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -osint -url \"%1\""

This works perfectly! Would you kindly to do the same for Thunderbird?

[Syrinx]

This works perfectly! Would you kindly to do the same for Thunderbird? :)

Gave it a quick drunken once over in a VM. /crossfingers

Code: Select all

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Thunderbird.Url.mailto\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" -osint -compose \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Thunderbird.Url.news\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" -osint -mail \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ThunderbirdEML\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{29F458BE-8866-11D5-A3DD-00B0D0F3BAA7}\LocalServer32]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" /MAPIStartup"

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\Mail\Mozilla Thunderbird\Protocols\mailto\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" -osint -compose \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\Mail\Mozilla Thunderbird\shell\properties\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" -options"

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\Mail\Mozilla Thunderbird\shell\safemode\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" -safe-mode"

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\News\Mozilla Thunderbird\Protocols\news\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" -osint -mail \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\News\Mozilla Thunderbird\Protocols\nntp\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" -osint -mail \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\News\Mozilla Thunderbird\Protocols\snews\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" -osint -mail \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\News\Mozilla Thunderbird\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" -mail"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\Mail\Mozilla Thunderbird\Protocols\mailto\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" -osint -compose \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\Mail\Mozilla Thunderbird\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" -mail"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\Mail\Mozilla Thunderbird\shell\properties\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" -options"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\Mail\Mozilla Thunderbird\shell\safemode\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" -safe-mode"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\News\Mozilla Thunderbird\Protocols\news\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" -osint -mail \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\News\Mozilla Thunderbird\Protocols\nntp\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" -osint -mail \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\News\Mozilla Thunderbird\Protocols\snews\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" -osint -mail \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\News\Mozilla Thunderbird\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" -mail"

[HKEY_CURRENT_USER\Software\Classes\mailto\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" -osint -compose \"%1\""

[HKEY_CURRENT_USER\Software\Classes\Thunderbird.Url.mailto\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" -osint -compose \"%1\""

[HKEY_CURRENT_USER\Software\Classes\ThunderbirdEML\shell\open\command]
@="\"C:\\Program Files\\Sandboxie\\Start.exe\" /box:DefaultBox \"C:\\Program Files (x86)\\Mozilla Thunderbird\\thunderbird.exe\" \"%1\""

[Creave]

Thank you for your effort! But unfortunately I get this error:

[Syrinx]

This is likely due to something related to the email software check I have never understood inside SBIE. [I don't use them myself]
Have you set up the box you are going to run it in (the reg file was set to DefaultBox) up for the email reader in the Sandbox Settings > Applications > Email Reader ?
Let me know if not and I'll set up a VM to test it with though why not just use the Forced Program option?
Also, how did you launch it when that popped up?

Update: This whole email software check is horrible. Why is this one particular class of software treated differently than any other when they all use files and registry entries just like the rest?

It simply does not start without the process name. (BLOCKED by SBIE itself) eg If I just copy the entire template to the sandboxie.ini and paste it to a box then remove the thunderbird.exe, & thunde~1.exe parts I get the same error.

eg

Code: Select all

Tmpl.Thunderbird=%Local AppData%\Thunderbird
Tmpl.Thunderbird:ExpectFile=localstore.rdf
OpenFilePath=%Tmpl.Thunderbird%
OOpenFilePath=thunderbird.exe,%Tmpl.Thunderbird%
OpenFilePath=thunderbird.exe,%AppData%\Thunderbird
OpenFilePath=thunderbird.exe,%Local AppData%\Thunderbird
OpenKeyPath=thunderbird.exe,HKEY_LOCAL_MACHINE\SOFTWARE\Clients\*\Mozilla Thunderbird*
OpenKeyPath=thunderbird.exe,HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Thunderbird*
OpenFilePath=thunde~1.exe,%Tmpl.Thunderbird%
OpenFilePath=thunde~1.exe,%AppData%\Thunderbird
OpenFilePath=thunde~1.exe,%Local AppData%\Thunderbird
OpenKeyPath=thunde~1.exe,HKEY_LOCAL_MACHINE\SOFTWARE\Clients\*\Mozilla Thunderbird*
OpenKeyPath=thunde~1.exe,HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Thunderbird*

works

but this doesn't:

Code: Select all

Tmpl.Thunderbird=%Local AppData%\Thunderbird
Tmpl.Thunderbird:ExpectFile=localstore.rdf
OpenFilePath=%Tmpl.Thunderbird%
OOpenFilePath=%Tmpl.Thunderbird%
OpenFilePath=%AppData%\Thunderbird
OpenFilePath=%Local AppData%\Thunderbird
OpenKeyPath=HKEY_LOCAL_MACHINE\SOFTWARE\Clients\*\Mozilla Thunderbird*
OpenKeyPath=HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Thunderbird*
OpenFilePath=%Tmpl.Thunderbird%
OpenFilePath=%AppData%\Thunderbird
OpenFilePath=%Local AppData%\Thunderbird
OpenKeyPath=HKEY_LOCAL_MACHINE\SOFTWARE\Clients\*\Mozilla Thunderbird*
OpenKeyPath=HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Thunderbird*

Renaming Thunderbird.exe to NotEmail.exe works however....
Renaming notepad.exe to thunderbird.exe results in the same block without the template containing the name.

Please either improve or simply remove this horribly implemented check, or at least the related internal block. What is the point? What have I missed?

At this point I guess renaming the thunderbird.exe and updating the .reg entries to the renamed file might be the best bet for you Creave though using ForcedProgram with the registered version of sandboxie would still be far more ideal/certain.

[Creave]

Then I will use the ForcedProgram function. I appreciate the effort! Thanks!