Recovering Registry data

If it doesn't fit elsewhere, it goes here
Post Reply
InTheMood
Posts: 22
Joined: Wed Apr 11, 2012 7:31 pm

Recovering Registry data

Post by InTheMood » Wed Apr 11, 2012 7:44 pm

The "All Files and Folders" tree, in the Sandboxie control panel, contains "RegHive" data.

Is there a way to view this data?
Is there a way to recover this registry data into a .reg or a text file?
Harry

MichaelS
Posts: 139
Joined: Tue Feb 07, 2012 4:19 am
Location: MeanWhile City

Post by MichaelS » Thu Apr 12, 2012 12:56 am

The easiest way to get access to a sandbox's registry entries is while the sandbox is active (i.e. programs are running within it).

Depending on your needs, you've got two quick options:

1. If you want to view/save the sandbox's registry working set, while an application is running in the sandbox, run regedit (the Registry Editor) and then explore the registry tree HKEY_USERS\Sandbox_[your_username]_[sandbox_name]

2. If you want to view/save registry entries as if they'd be part of the whole OS registry, then run regedit.exe under the sandbox you want to analyze. If you're exporting, you can use these registry entries later by loading them under the same sandbox, or a different one if need arises.

InTheMood
Posts: 22
Joined: Wed Apr 11, 2012 7:31 pm

Post by InTheMood » Thu Apr 12, 2012 6:04 pm

Running regedit in the sandbox displays the whole system registry. I am only interested in viewing the registry keys affected by the application(s) running in the sandbox.

Can I view/recover the affected registry keys in the same way that Sandboxie lets me view the affected files?
Harry

Buster
Posts: 2576
Joined: Mon Aug 06, 2007 2:38 pm
Contact:

Re: Recovering Registry data

Post by Buster » Thu Apr 12, 2012 6:14 pm

InTheMood wrote:Is there a way to recover this registry data into a .reg or a text file?
Buster Sandbox Analyzer has a feature to convert Sandboxie´s RegHive file to .REG.

MichaelS
Posts: 139
Joined: Tue Feb 07, 2012 4:19 am
Location: MeanWhile City

Post by MichaelS » Fri Apr 13, 2012 1:46 am

InTheMood wrote:Running regedit in the sandbox displays the whole system registry. I am only interested in viewing the registry keys affected by the application(s) running in the sandbox.

Can I view/recover the affected registry keys in the same way that Sandboxie lets me view the affected files?
As Buster said, using his tool, or if you do not always have it available, do what I said before:
1. If you want to view/save the sandbox's registry working set, while an application is running in the sandbox, run regedit (the Registry Editor) and then explore the registry tree HKEY_USERS\Sandbox_[your_username]_[sandbox_name]

Asailum
Posts: 3
Joined: Sun May 05, 2013 10:52 pm

Re: Recovering Registry data

Post by Asailum » Sat May 14, 2016 3:53 am

Is there some tool anyone knows of to copy the registry entries in a file system kind of way? I'm trying to move things from machine->software folder into my real one..

Syrinx
Sandboxie Guru
Sandboxie Guru
Posts: 622
Joined: Fri Nov 13, 2015 4:11 pm

Re: Recovering Registry data

Post by Syrinx » Sat May 14, 2016 7:44 pm

If it's only a few keys you can find them and export them within regedit either by mounting the reghive file or finding it while the sandbox in question is active. So let's say you have something that creates a 'GAME' key under software. You export the entire 'Game' key, then edit it with notepad to search/replace the entry eg "HKEY_USERS\Sandbox_XXXX_XXXXX_XXXXXX\machine\software" to HKEY_LOCAL_MACHINE\Software" etc. Once the exported .reg has replaced those values (assuming you get the paths correct) you can then just save it [might want to save to a new file in case you get it wrong at first] and double click to import into the actual registry. That example is actually the reverse of how I normally place games I install on my gaming OS into the Steam\Origin Boxes on my other OS with SBIE where I mount the reghive first then import the altered original export into the box.
https://www.ntlite.com

Post Reply

Who is online

Users browsing this forum: No registered users and 0 guests