Auto Exec

Auto Exec

AutoExec is a sandbox setting in Sandboxie Ini. It specifies a list of commands that are executed every time the sandbox is initially populated.

Examples:

   .
   .
   .
   [DefaultBox]
   AutoExec=regedit /s c:\defaultbox.reg
   AutoExec=cmd /c del /f "%windir%\system32\someExploitableDLL.dll"

The first example shows using AutoExec to populate the sandboxed registry in some way. The second example shows using AutoExec to delete an undesirable DLL file. In both cases the customization takes place only within the sandbox.

Multiple AutoExec settings may be specified for a single sandbox. The commands listed are executed one by one. The commands (whether one or any number of them) are executed once in the life-time of a particular sandbox. To get Sandboxie to execute these commands again, the sandbox must be deleted.

This is true even if the command execution fails -- it will not be executed again, unless the sandbox is deleted.

At this time, there is no corresponding Sandboxie Control configuration for this setting.

Technical Details

Each AutoExec command, as it is executed by Sandboxie, is recorded in the registry of that sandbox, in the key _HKEY_CURRENTUSER\Software\SandboxieAutoExec.

The command will not be executed if it was already recorded in the sandboxed registry. Thus, deleting the sandbox clears all recorded AutoExec commands, so they are executed again the next time any sandboxed program starts in that sandbox. But it is also possible to get them to execute again, by manually deleting the command from that sandboxed registry key.

Open Source sandbox-based isolation software