Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. It is being developed by David Xanatos since it became open source, before that it was developed by Sophos (which acquired it from Invincea, which acquired it earlier from the original author Ronen Tzur). It creates a sandbox-like isolated operating environment in which applications can be run or installed without permanently modifying the local or mapped drive. An isolated virtual environment allows controlled testing of untrusted programs and web surfing.

Since the open sourcing, Sandboxie is being released in two flavors: the Classic build with a MFC-based UI and a Plus build that incorporates new features with an entirely new Qt-based UI. All newly added features target the Plus branch, but can often be utilized in the Classic edition by manually editing the Sandboxie Ini file.

https://sandboxie-plus.com/

https://github.com/sandboxie-plus/sandboxie

We talked about this program 14 years ago!!!

Sandboxie is a sandbox-based isolation software for Windows NT-based operating systems that creates a secure operating environment in which applications can be run or installed without permanently modifying local & mapped drives or the Windows registry. An isolated virtual environment allows controlled testing of untrusted programs and web surfing.

Sandboxie allows you to create virtually unlimited sandboxes and run them alone or simultaneously to isolate programs from the host and each other, while also allowing you to run as many programs simultaneously in a single box as you wish.

Sandboxie is available in two editions, Plus and Classic. They both share the same core components, this means they have the same level of security and compatibility. What’s different is the availability of features in the user interface.

Sandboxie Plus has a modern Qt-based UI, which supports all new features that have been added since the project went open source:

• Snapshot Manager – takes a copy of any box in order to be restored when needed
• Maintenance menu – allows to uninstall/install/start/stop Sandboxie driver and service when needed
• Portable mode – you can run the installer and choose to extract all files to a directory
• Additional UI options to block access to Windows components like printer spooler and clipboard
• More customization options for Start/Run and Internet access restrictions
• Privacy mode sandboxes that protect user data from illegitimate access
• Security enhanced sandboxes that restrict the availability of syscalls and endpoints
• Global hotkeys to suspend or terminate all boxed processes
• A network firewall per sandbox which supports Windows Filtering Platform (WFP)
• The list of sandboxes can be searched with the shortcut key Ctrl+F
• A search function for Global Settings and Sandbox Options
• Ability to import/export sandboxes to and from 7z files
• Integration of sandboxes into the Windows Start menu
• A browser compatibility wizard to create templates for unsupported browsers
• Vintage View mode to reproduce the graphical appearance of Sandboxie Control
• A troubleshooting wizard to assist users with their problems
• An Add-on manager to extend or add functionality via additional components
• Protections of sandboxes against the host, including the prevention of taking screenshots
• A trigger system to perform actions, when a sandbox goes through different stages, like initialization, box start, termination or file recovery
• Make a process not sandboxed, but its child processes sandboxed
• Force programs to automatically use a user-provided SOCKS5 proxy
• DNS control by blocking or redirecting
• Limit the amount of memory space a single process in the sandbox can occupy and the total amount of memory space all processes can occupy, and You can limit the total number of sandboxed processes per box
• A completely different token creation mechanism from Sandboxie’s pre-open-source version makes sandboxes more independent in the system
• Encrypted Sandbox – an AES-based reliable data storage solution
• Prevent sandboxed programs from generating unnecessary unique identifier in the normal way
• An internal INI editor that aids the user with visual hints and tooltips on the settings they have configured or want to add
• The ability to configure an external text editor, beside the system default
• Control over the alpha transparency of the border
• A custom UAC-dialog, allowing to fake permission, grant them or cancel the elevation attempt
• Modern icons, while you can use the old-school ones in certain places
• You can change the font of the user interface
• Custom colors or icons can be used for sandboxes or groups