Sandboxie Plus 1.15.4 / Classic 5.70.4 – FREE

Sandboxie is a proprietary sandbox based isolation program for Windows operating systems. It creates a sandbox-like isolated operating environment.

There you can run or install all applications without permanently modifying the local or mapped drive. An isolated virtual environment allows to control testing of untrusted programs and web surfing.

Sandboxie runs your programs in an isolated space. It prevents them from making permanent changes to other programs and data in your computer.

When you run a program on your computer, data flows from the hard disk to the program via read operations. The data is then processed and displayed, and finally flows back from the progam to the hard disk via write operations.

Sandboxie changes the rules such that write operations do not make it back to your hard disk.

• Intercept changes to both your files and registry settings, making it virtually impossible for any software to reach outside the sandbox.
• Traps cached browser items into the sandbox as a by-product of normal operation. So when you throw away the sandbox, all the history records and other side-effects of your browsing disappear as well.

Benefits of the Isolated Sandbox:

• Secure Web Browsing. If you run Web browser under the protection of Sandboxie, all malicious software downloaded by the browser is trapped in the sandbox and can be discarded trivially.
• Enhanced Privacy. Browsing history, cookies, and cached temporary files collected while Web browsing stay in the sandbox and don’t leak into Windows.
• Secure E-mail. Viruses and other malicious software that might be hiding in your email can’t break out of the sandbox and can’t infect your real system.
• Windows Stays Lean. Prevent wear-and-tear in Windows by installing software into an isolated sandbox.

Sandboxie Plus Features:

Sandboxie Plus offers a multitude of new functionality which improves security, compatybility and the overall sandboxing expirience.

Rule Specificity

• With this option rules are prioritized based on their specificity (see changelog/docs for details) this way sub paths can be readable/writeable while parent parts are still protected.

Security enhanced sandboxes

• Restrict syscall elevation to approved known safe / filtered sys calls
• Limit access to device endpoints to known safe / filtered endpoints

Privacy enhanced Sandboxes

• With this applying a preset rule collection all locations potentially containing personal data can be protected. Applications running in boxes with personal data protection will see an empty PC with no user data on it.

Compartment Mode

• This mode is intended to optimize compatibility at the cost of security, here sandboxie’s token-based isolation scheme is not used. Isolation is limited to the FS minifilter as well as registry and object callbacks. This has the potential to greatly improve compatibility with variouse applications.

Virtual Disk Integration

• RamDisk support, available since the latest insider build, allows you to create a virtual disk in your system’s memory, using the ImDisk driver, which can speed up file access and increase confidentiality as all box contents will be discarded when the disk is unmounted (manually or automatically on reboot).
• Encrypted Box Image support is currently in development and allows you to create encrypted sandboxed environments for an even greater protection of your confidential data. With this feature the box file root is being mounted from an AES-XTS encrypted box image, other ciphers are available as well. Upcoming additions to this root functionality will contain secure box passphrase handling and a driver extension to prevent applications not running in the encrypted sandbox from accessing the sandboxed files.

Enchanced network filering and redirection

• Proxy injection is yet another feature which has been added in the insider builds, it allows to force any application to use a Socks 5 proxy instead of a direct connection.
• DNS query logging, filtering and redirection feature allows you to block, or redirect DNS queries made by sandboxed programs for selected domains.

WFP (Windows Filtering Platform) support

• With this feature Sandboxie can be like an application firewall which applies the rules on a per box bases allowing the same application access to the internet in one box while blocking it in another.

Windows 11 context menu integration

Process/Thread handle filtering (obCallbacks)

• Using this mechanism greatly improves on isolation of processes and provides enhanced security.

Win32 syscall hooking

• With this feature win32 sys calls can get the same treatment as NT sys calls which helps with graphics and hw acceleration.

New UI with dark mode and much more

• Sandboxie-Plus bring an entirely new Qt based UI sandman.exe
• Customizable per box run menu
• Global hotkey to terminate all boxes
• INI section editor for easy configuration of advanced options
• Box event triggers/scripts
• Ability to stop selected applications from running globally, regardless of box presets

Snapshots

• Sandboxie-Plus can create box snapshots, with them it is possible to easily revert a box to a defined previous state.
• Box set to auto delete will when available auto revert to the last snapshot allowing to benefit from a fresh clean box each time but with some preset configuration

Enhanced debug/trace monitor

Fake admin privileges

• Allows to make all processes in a box think thay have admin permissions and act accordingly, without the potential draw backs of granting them admin permissions

Box size monitor

• Monitor and list box size in an own column

Start Menu integration

• Integrate start menu entries from sandboxes into the host start menu

Sandbox SID isolation

• Instead of using anonymous login SID use per box custom SID’s like Sandboxie/DefaultBox this way processes from separate boxes won’t be able accessing each other’s resources.

Breakout Process

• Allows to specifies which applications shall run unsandboxed when launched within the sandbox. A combination of this and ForceProcess allows for a simple priority system.
• Document BreakOut is an extension to the already well-known Breakout mechanism to allow to open selected file types saved to an open file path from within the sandbox in an unsandbox instance of the associated application.

USB drive sandboxing

• This feature allows you to automatically sandbox any USB drive that you plug into your computer, which adds an extra layer of protection to your system.

EFS Support

• Support for EFS (Encrypted File System) protected files.

ARM64 support for windows 11

• Support ARM64 natively
• Support emulated x86
• Support emulated x64 (ARM64EC)

Changes in version 1.15.4 Plus / 5.70.4 Classic:

Homepage – https://www.sandboxie.com

Supported Operating Systems: Windows 7, 8.1, 10, 11 (32-bit, 64-bit).

Translations: English, Albanian, Chinese (Simplified and Traditional), Czech, Finnish, French, German, Italian, Japanese, Korean, Polish, Portuguese (Brasil), Russian and Turkish.

Size: 2.90 MB

DOWNLOAD Sandboxie Classic 5.70.4 (32-bit)

DOWNLOAD Sandboxie Classic 5.70.4 (64-bit)

DOWNLOAD Sandboxie Plus 1.15.4 (32-bit)

DOWNLOAD Sandboxie Plus 1.15.4 (64-bit)

DOWNLOAD Sandboxie Plus 1.15.4 (ARM64)

BUY NOW Business Certificate