Page 1 of 1

See registry keys into the virtual area

Posted: Sat Jun 25, 2011 12:30 pm
by k@rletto
Hello,
When I install a program into Sandboxie, I can see all the files generated
by the installed program, but I can't see the registry keys, why?
Where are stored??

Thanks and congratulations for the excellent Sandboxie!!

Re: See registry keys into the virtual area

Posted: Sat Jun 25, 2011 12:34 pm
by Buster
k@rletto wrote:Hello,
When I install a program into Sandboxie, I can see all the files generated
by the installed program, but I can't see the registry keys, why?
Where are stored??

Thanks and congratulations for the excellent Sandboxie!!
They are stored inside RegHive, at sandbox folder.

You can mount the file into registry to see the modifications or you can use a tool to do it.

The tool is named Buster Sandbox Analyzer and it includes a feature to see the registry keys and values of a RegHive file generated by Sandboxie.

Buster Sandbox Analyzer is available at http://bsa.isoftware.nl

Posted: Sat Jun 25, 2011 2:35 pm
by Guest10
While the sandbox is in use, you can also run the Registry Editor program unsandboxed (regedit.exe) and view the entries underneath HKEY_USERS\Sandbox_...
That's where Sandboxie mounts the Reghive file to the real Registry.

Re: See registry keys into the virtual area

Posted: Sat Jun 25, 2011 4:57 pm
by InstallIT
k@rletto wrote:When I install a program into Sandboxie, I can see all the files generated
by the installed program, but I can't see the registry keys, why?
Besides above suggestions you can track the registry/files changes with SandboxDiff that you find in "Contributed Utilities" forum'section.