Sandboxie 5.22

Fixed several Chrome crashes in Win 10.
Fixed auto-recovery dialog failure to popup in Win 10-CU.
Firefox H264 video decoder now works.
Creation of IE embedded application objects are no longer blocked by default (which began in 5.18).If IE is your default browser, it is being forced, and hyperlinks in MS Office are not working, you can use new option BlockIEEmbedding=y.

Windows Creators Update is now supported.
Firefox multi-process (Electrolysis) is now supported in Win 7 and later.
Fixed problem with clicking Office hyperlinks failing to start forced IE.
TLS error when loading google sites in IE has been fixed.
Fixed crash when starting IE while using Microsoft User Experience Virtualization (UEV).
Added support for Opera Neon.
Fixed template for Roboform.
Fixed Chrome 56 lingering child process.

- Fixed Windows 10 build 14942 "SBIE2205 Service not implemented: SetWindowLong8"
- Fixed Windows 10-64 build 14965 "SBIE1222 Error with security token: (C00000BB / 35)"
- Fixed Windows 10-32 build 14971 "SBIE1222 Error with security token: (C0000058 / 62)"
- Fixed incompatibility with latest Nvidia drivers & DirectX.
- guard64.dll added to templates.ini for Comodo.
- In Win 8.1-32, and 10-32, UAC was always checked and grayed in Run Any Program start.exe dialog box.
- Added OpenWinClass=SWFlash_PlaceHolderX to fix Flash failure to start on some videos.
- Fixed certificate revocation check error
- Temporary files are no longer created with copy/paste
- SbieCtrl now gets Sandboxie updates via https.
- ActivIdentity (and other manufacturers') secure smart cards (CAC) are now supported
- Fixed BSOD that can occur if your license has expired and you are using MS Office ClickToRun.
- Added "Always on Top" option to SbieCtrl View menu. This will keep the SbieCtrl window as the top-most window.
- Fixed elevated installer failure introduced in 5.14.

- Added new Sbie setting BlockNetworkFiles. It is available under Sandboxie Settings -> Restrictions.
- When BlockNetworkFiles=y, sandboxed applications are blocked from reading network files or folders. Individual files/folders can be opened for reading/writing using the normal Resource Access settings. This option is enabled by default for new sandboxes.
- Fixed hang when starting MS Office applications.
- Eliminated error SBIE2314 Cancelling process xxxx.exe (xxxx / 9)
- Proxy Auto Config (PAC) files were not functioning in Win 10 Anniversary.
- Vivaldi is now supported.
- Fixed the Microsoft Account Sign-in Assistant issues (hotmail.com, outlook.com, etc.)
- Fixed clipboard copy/paste failure from sandbox to host.
- Fixed Actual Window Manager.

- Microsoft Office 2013/2016/365 ClickToRun is now supported for paid users.
- Chrome 52 is now supported.
- Sandboxed applications are no longer allowed to change the system power configuration.
- Environment variable USERNAME now shows proper username instead of "SYSTEM" in sandboxed applications.
- Added qWave driver (Google Hangouts, and other websites) to templates.ini under Applications->Miscellaneous
- The new, faster loader code developed for Windows 10 is now used for Win 8.0 & 8.1.
- Fixed 2 Excel clipboard related crashes
- Fixed Win 10 FR 14328 issue with WOW64 applications crashing.
- Fixed Win 10 FR 14316 BSOD.
- Fixed Win 10 FR 14316 (SBIE1113 Cannot find Nt system service, reason MASTER TABLE).
- Fixed Win 10 FR 14295 crash in Chrome & FF.
- Fixed Win 10 FR Build 14279 (SBIE1113 Cannot find Nt system service, reason MASTER TABLE)
- Fixed rare printing crash in Chrome-32 under Win 10-64.

- Sandboxie binaries are now dual-signed (SHA1 & SHA256) to eliminate IE 11 and Windows 10 certificate warnings.
- Fixed Win 10 FR Build 14267 (SBIE1113 Cannot find Nt system service, reason MASTER TABLE).
- Fixed Win 10 FR Build 14271 (SBIE1113 Cannot find Nt system service, reason MASTER TABLE).

- Improvements to application startup. Applications start faster and Windows 10 race conditions have been fixed.
- A problem with splwow64.exe in Win 8.1+ 64 bit has been fixed. If a user printed from inside the sandbox using a 32 bit app, printing outside the sandbox would no longer work.
- Office 2013 in Windows 10 is working under Sandboxie again.
- F12 Developer Tools now works in IE-11.
- In rare instances, SandboxieRpcSs.exe or SandboxieDcomLaunch.exe would not end when all other applications had exited.
- A file named c:program.exe no longer prevents SandboxieRpcSs.exe from starting.
- The known conflicts list in templates.ini has been updated. Fixed wrong Windows version # reported for Windows 8.1 . Windows 8.1 was reported as Windows 8.0.
- Windows 10 fast ring build 14251 "IsHungAppWindow" hook issue.
- Fixed rare Chrome 64 error SBIE2303 Could not hook VerifyCatalogFile .

- SBIE1222 Error with security token: (C0000061 / 33) caused by KB3088195 (Win 10 KB3097617) distributed on 10/13/2015 has been fixed. This also fixes BSOD when using Flash in Firefox.
- Fixed several problems that could cause Chrome to crash in Windows 10.
- Added logins.json for Firefox and derivatives to templates.ini to enable Firefox passwords storage outside the sandbox.
- Back by popular demand, the print spooler (spoolsv.exe) blocks file writes to the system temp folder (windows emp) and the user temp folder (Users<username>AppDataLocalTemp)
- Fixed problem that sometimes caused IE 11 to immediately exit if there are 3rd party applications injecting into iexplore.exe with Sandboxie (such as AV).

- Windows 10 support up to build 10547
- Win 10 KB3081455 and Win 8.1 KB3087039 on 9/8/2015 that broke Explorer, Skype, Quicktime, and possibly other apps has been fixed.
- The print spooler (spoolsv.exe) is now permitted to write files to the system temp folder (windows emp) and the user temp folder (Users<username>AppDataLocalTemp)
- A bug where some users in Win 8.1+ would not see any printers installed has been fixed.
- DeleteVolumeMountPoint security vulnerability has been blocked.
- Adobe snapshot copy/paste now supported.
- Code was updated to use newer Microsoft SDK/DDK.
- Fixed several issues with SandboxieRpcSs.exe that could lead to a crash or failure to start.

- Fixed SBIE2205 Service not implemented: CloseClipboard C0000058 error caused by Windows update KB3057839
- NtGetNextProcess can be used to alter processes outside the sandbox and will now be blocked.
- A DDE change in 4.18 broke Excel running as a forced program.
- Clipboard formats that were restricted in 4.18 are supported again.
- MS Office applications are again able to print to file inside the sandbox without errors

- A security hole with the Windows print spooler has been plugged. An application could use the print spooler to write an arbitrary file outside the sandbox. If Sandboxie detects that the print spooler is attempting to write a file outside the sandbox at the request of a sandboxed application, it will issue "SBIE1319 Blocked spooler print to file".
- Any error msgs generated when auto-deleting a sandbox will now be shown to the user.
- Fixed Chrome SBIE2205 Service not implemented: Win32Init.5
- Added Hitman Pro Alert to templates.ini
- Changed hook for ChangeDisplaySettingsEx() to allow CDS_RESET. A user reported that a game (fifa15) is trying to use this and failing resulting in incorrect display colors.
- Distributed File System (DFS) mapped drives are now supported
- VMWare HGFS (Host Guest File System) mapped drives are now supported.
- A BSOD bugcheck reported by a user when using bittorrent has been removed (this was a rare situation). SbieDrv was detecting corrupted memory when no corruption had occurred.
- Fixed a rare bug in clipboard handling that could crash SbieSvc.
- WebEx running under Chrome would sometimes hang.
- Recent Windows update in Win 8-64 causes Skype (and possibly other apps) to issue error SBIE2335 Initialization failed for process Skype.exe 33 / 0?

* Major redesign of hooking/injection code. ASLR is now enabled for 64 bit (it was already enabled for 32 bit).
* VC Redistributables are no longer downloaded by the combined 32/64 installer. The required VC DLLs are now included in the installer binary (which is why it is much larger now).
* KB3031432 in Win 8-64 causes 64 bit applications to crash.
* Sbie now detects when a sandboxed application starts WerFault.exe because it has crashed, and gives WerFault plenty of time to create a crash DMP file. WerFault has a couple of flaws. It doesn't create the crash DMP until the user presses OK on the crash popup dialog box. If the user does not respond quickly, the crashed application will exit memory and the DMP cannot be created. So now Sbie disables the WerFault dialog box and issues its own SBIE2224 "Sandboxed program has crashed". WerFault also must be given enough time to do various Internet activities before the application exits.
* Fixed Outlook 2013 crash at start.
* Excel 2013 would remain in memory after program exit.
* Fixed several SBIE2318 Dll Initialization Failed issues.
* Error SBIE2101 now gives more information.
* Increased named pipe timeout from 3 seconds to 10 seconds to eliminate SBIE2101 error.
* A security problem reported by a user has been fixed: hard links could be created outside the sandbox. CreateHardLink API is now blocked.
* Removed Avast from the list of known conflicts in templates.ini. This means Sandboxie will no longer popup the dialog box telling you to "review the Known Conflicts page..." when Avast is detected.
* Fixed: certificate revocation information is sometimes unavailable. IE occasionally popped up dialog "Revocation information for the security certificate for this site is not available. Do you want to proceed?"
* Sandboxie would issue error SBIE2205 Service not Implemented: LoadedModules.
* Fixed drag/drop crash in Chrome.
* Added OpenIpcPath=*BaseNamedObjects*FntCache to templates.ini to eliminate font cache problems.
* Added ClosedFilePath=%SystemRoot%System32IDStore.dll & ClosedFilePath=%SystemRoot%System32wlidprov.dll to templates.ini to eliminate Windows Live problems.

* There is a new EULA (license.txt)
* Fixed Chrome 37/38 crash error C0000008 (invalid handle).
* Fixed Chrome 38-64 hang (web page unresponsive).
* Fixed Chrome hang when printing to PDF.
* Browsers can now access Internet when using McAfee SaaS
* Fixed Silverlight crash in Win 8.1
* Fixed Excel crash when copying large amounts of data.
* Sandboxie now has language support for Farsi (Persian).
* The auto-update feature only checked the next update time (sandbox.ini setting SbieCtrl_NextUpdateCheck) 1 time when SbieCtrl.exe was started. If SbieCtrl.exe was kept running, it would never check the update time again.
* Several large memory leaks (reported by Dr. Larry Pepper et al.) have been fixed.
* ASLR is now enabled for SbieDll.dll 32 bit (64 bit will come later).
* OpenIpcPath=BaseNamedObjectsFontCachePort is now in templates.ini as a default. Until now, this was a suggested work-around for some Chrome 37 problems. NOTE: the default only applies to new installs. For existing installs, you need to go into Sandbox settings->Applications->Miscellaneous, and check the option "Allow direct access to Windows Font Cache"
* Added hook for GetProcessImageFileName/NtQueryInformationProcess so it now returns the sandboxed path.
* Improvements to the Dutch language text.
* The SbieSvc startup time has been increased from 5 seconds to 15 seconds to eliminate the following sequence of startup errors:
> SBIE2335 Initialization failed for process %2
> SBIE2336 Error in GUI server: %2
> SBIE2337 Failed to start program: %2
* Malware DarkComet is using a quirk in Windows to put up a MessageBox that does not have the sandboxed yellow window border. This poses no security risk, but to prevent user concern, this has been fixed.
* Special flag added to OpenWinClass to restore Buster Sandbox Analyzer (BSA) message logging. /IgnoreUIPI allows low integrity sandboxed processes to send WM_COPYDATA msgs to windows in higher integrity processes.
* Example Sandboxie.ini entries (both lines required):
> OpenWinClass=TFormBSA
> OpenWinClass=TFormBSA/IgnoreUIPI
* Fixed Sandboxed cmd.exe crash if window title > 256 chars.
* Fixed rare BSOD
* Fixed kernel memory leak in SandboxieCrypto
* The combined installer SandboxieInstall.exe now checks for the VC Redistributables DLLs Sandboxie requires. If they are not up to date (10.0.40219.325), the installer will download and install the VC Redist. from sandboxie.com.