Sandboxie - Open Source

Last update: Jan 2, 2023

Related tags

Overview

Sandboxie

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. It creates a sandbox-like isolated operating environment in which applications can be run or installed without permanently modifying local & mapped drives or the windows registry. An isolated virtual environment allows controlled testing of untrusted programs and web surfing.

System requirements	Release notes
Windows 7 or higher, 32-bit or 64-bit.	CHANGELOG.md

Download

Features

Sandboxie is available in two flavors, Plus and Classic. They both share the same core components, this means they have the same level of security and compatibility. What's different is the availability of features in the user interface.

Plus build has a modern Qt based UI, which supports all new features that have been added since the project went open source:

Snapshot Manager - this feature takes a copy of any box in order to be restored when needed
Maintenance mode - it allows to uninstall/install/start/stop Sandboxie driver and service when needed
Portable mode - you can run the installer and choose to extract all files to a directory
Additional UI options to block access for Windows components like printer spooler and clipboard
More customization options for Start/Run and Internet access restrictions
Global hotkey to terminate all boxed processes
A new firewall per sandbox which supports Windows Filtering Platform (WFP)

Classic build has the old no longer developed MFC based UI, hence it lacks native interface support for Plus features. However, most of them can be configured manually in the Sandboxie.ini configuration file, and some valuable contributions can still be applied nowadays.

If you need to check all new features at once, a good way to highlight them quickly is to find the equal sign in the CHANGELOG.md file.

Documentation

A GitHub copy of the Sandboxie documentation is currently maintained, although more volunteers are needed to keep it updated with the new changes. We recommend to check also the following labels in this repository:

A partial archive of the old Sandboxie forum that was previously maintained by Invincea is still available. If you need to find something there, please use the corresponding repository search.

Project maintenance

2004 - 2013 Ronen Tzur

2013 - 2017 Invincea Inc.

2017 - 2020 Sophos Group plc

Open Source release

2020 onwards David Xanatos

Helpful Contributors

DavidBerdik - Maintainer of Sandboxie Website Archive
diversenok - Security analysis & PoC's
stephtr - CI / Certification
TechLord - Team-IRA / Reversing
hg421 - Security analysis / Code reviews
typpos - UI suggestions / Documentation / Code reviews
isaak654 - Templates / Documentation / Code fixes
Dyras - Templates additions
cricri-pingouin - UI fixes
Valinwolf - UI / Icons
daveout - UI / Icons
mpheath - Author of Plus installer / Code fixes
yfdyh000 - Localization support for Plus installer
NewKidOnTheBlock - Changelog fixes

Translators

yuhao2348732, nkh0472, yfdyh000, gexgd0419 - Chinese Simplified
TragicLifeHu, Hulen - Chinese Traditional
RockyTDR - Dutch
clexanis - French
bastik-1001 - German
isaak654 - Italian
7zip from Xanasoft topic - Polish
JNylson - Portuguese and Brazilian Portuguese
lufog - Russian
sebadamus - Spanish
xorcan - Turkish (disabled for inactivity, a new translator is needed)
SuperMaxusa - Ukrainian

More volunteers are welcome here! ;)

Support the project

If you like the tool, please consider supporting it on Patreon: https://www.patreon.com/DavidXanatos

Or you can donate directly via the PayPal button on my website: https://xanasoft.com

Comments

Instructions for launching Sandboxie Plus, especially portable mode

Thank you for creating this fork and for all your hard work.

I'm trying to understand the details of how to actually use this tool, especially in portable mode.

After compiling it yourself (or extracting files from the release archive) into a folder, you will have 11 executables. Which one to use to launch Sandboxie Plus?

Also, to make it portable, is it as simple as creating an empty Sandboxie-Plus.ini in Sanboxie Plus's folder?

From looking at the code, it seems like there are 2 UIs provided. Are they both compatible with the portable mode?

I can update the readme with a summary of answers provided here.

Thanks!
documentation

opened by Gitoffthelawn 72
Listary 6 not working in Browsers
What happened?

Listary, global compatibility not working. When saving a file as, you should be able to open a separate explorer window to your download folder, jump back into the save as dialogue, where it automatically jumps to the last opened explorer folder.

To Reproduce

Install Listary

Ensure Listary Global Compatibility Enabled

Open any Browser in Sandboxie

Save page as

Open Local folder in separate Explorer process

Immediately go back to "save page as"

Expected behavior

Listary should jump "save page as" to current directory in Explorer

What is your Windows edition and version?

Windows 11 x64 21H2

In which Windows account you have this problem?

Not relevant to my request.

Please mention any installed security software

Nod32

What version of Sandboxie are you running?

Plus 1.0.9 x64

Is it a regression?

List of affected browsers

Firefox, Vivaldi...etc

In which sandbox type you have this problem?

All sandbox types (I tried them all).

Is the sandboxed program also installed outside the sandbox?

Yes, it is also installed outside the sandbox.

Can you reproduce this problem on an empty sandbox?

I can confirm it also on an empty sandbox.

Did you previously enable some security policy settings outside Sandboxie?

Disabled all possible vectors of conflicting security.

Crash dump

No response

Trace log

~~https://www.toptal.com/developers/hastebin/iqoxurezih.yaml~~ (broken link)

Sandboxie.ini configuration

No response

Sandboxie-Plus.ini configuration (for Plus interface issues)

~~https://www.toptal.com/developers/hastebin/azexewubuw.makefile~~ (broken link)
Support request
opened by rugabunda 48
Supporter certificate validity, terms and lifetime option?
Do I understand it correctly, that there is no "lifetime" option anymore to unlock all features of Sandboxie Plus?

I am using Sandboxie since 2011, and also bought the lifetime version from the previous developer. I understand, that software development takes time and effort and therefore have no problems, paying again for new features of Sandboxie Plus. However, the "supporter certificates" basically sound like a commercial subscription model instead of a donation initiative.

This is what I understood from the currently available options:

Small

valid for at least one year (what does that even mean?)

no personal device limitation 👍

after expiration, the license is invalid

Medium

after expiration, the license is invalid for newer builds. This could also render Sandboxie useless, if there are breaking changes in some Windows updates. This is somewhat near to a perpetual license, but it does not work well with software that might need to be kept up to date to function.

Large

valid for at least two years (could be the same as small?)

all features available during the validity period remain enabled for newer builds 👍 until a new major release 👎

has the similar issue with Medium, but delayed until a new major release

quite pricey

The wording "at least x years" and "until a major release" are very vague and could mean, that a purchased supporter certificate could start expiring at any time. It could also mean, that even the Small option could remain functional for an indefinite amount of time.

I would really like to have an option to support/pay for Sandboxie Plus that is not time restricted in any case (like in Large, but without the limitation to the major release).

Oh and before I forget - thank you very much for actively maintaining and improving Sandboxie! 😉
suggestions
opened by WongKit 46
Icon of Sandboxie PLUS is fuzzy, reason for people to stay with classic

Is your feature request related to a problem? Please describe. As illustrated by these posts on MalwareTips, people find the Sandboxie plus icon fuzzy https://malwaretips.com/threads/benefits-of-using-a-sandbox-ie-sandboxie.108759/#post-947828 and less pronounced https://malwaretips.com/threads/benefits-of-using-a-sandbox-ie-sandboxie.108759/#post-947824

Describe the solution you'd like A simpler icon for new sandboxie-plus

Describe alternatives you've considered Use visual langauge of old sandboxie (color scheme) and combine it with the symbols of Sandbox (a sand spade) and Sandboxie plus (a plus), as explained in this post https://malwaretips.com/threads/benefits-of-using-a-sandbox-ie-sandboxie.108759/#post-949917

Additional context It is a shame people stay on the old UI because of something silly as an icon. I hope a DTP-er will use the visual language elements explained below and design an appealing looking icon (I obviously have no DTP-skills).

Icon on the left with the red plus means that a sandbox is running/active without the red plus in the shield shaped spade means that no sandbox is running/active.

Explanation of visual language: Our eyes first recognize shapes, then color, then known images and symbols, then text. Therefore the old sandboxie icon (which looked more like a kite than a sandbox to me) has to go. Keeping the known old sandboxie color scheme has the advantage that old icon's color scheme was related to on-off status. Existing sandboxie users are familiar with this color scheme/function and are probably happy to see these trusted colors (subliminal effect).

Because the spade shade, looks very much like a shield and shields are used for security software and a spade is associated with a sandbox, this is a good "background" shape to use for a sandbox security program. The red plus is a direct connection to sandboxie plus new user interface.
Feature request Workaround added in next build

opened by LennyFox 44
Evade Sandboxie Detection

I would like to sandbox a program that is designed to not work if executed from within Sandboxie. Is it possible to harden a sandbox to prevent such detection? I suspect that to make this work, the best approach would be to modify all references to Sandboxie by name and then compile it myself, but I do not know enough to say for sure.
documentation Known issue

opened by DavidBerdik 43
[Question] Fundraiser for developper certificate

Hello,

Since the sbie driver needs to be digitally signed, how about you add a "call to fund raising" to buy a code signing certificate ? A sectigo 3 years valid certificate costs about 220$.

I pledge to fund a part of that price. Are others willing to ?

@DavidXanatos Would that help ?

opened by deajan 41
Add innosetup postuninstall cleanup of extra files
Adds the option for a user to remove extra files at uninstall of Sandboxie-Plus.

The messagebox will not display if the install is silent.

Default button is No, as removing {win}\Sandboxie.ini should be an explicit Yes as the file may have been updated.

Current files to remove are:

{localappdata}\{#MyAppName}\{#MyAppName}.ini

{win}\Sandboxie.ini

A TStringList type is used so adding more files later can be done by

Paths.Append('another_path_to_remove');

The UninstallDelete section will remove empty directories of:

{app}

{localappdata}\{#MyAppName}

Adds a custom message of english.UninstallRemoveFiles=Remove these files?. Adds ChineseSimplified and Italian lines which are commented, ready for translation.
Work in progress
opened by mpheath 40
False positives i.e. "NOT A VIRUS!!!!!"

The SbieDrv.sys driver must be signed, and since the appropriate certificates are prohibitively expensive, I head to use a leaked code signing certificate I found laying around the Internets. This means some anti malware applications wrongfully flag it as potentially dangerous or a virus.

If you want SandboxiePlus to get a proper EV-Code Signing Certificate please support the project through donations. You can donate via paypal at https://xanasoft.com/ or patreon https://www.patreon.com/DavidXanatos

opened by DavidXanatos 40
"The Windows Installer Service could not be accessed."

It appears that the "Windows Installer Service could not be accessed" error is still present in this release.

The good news is that now, we can fix it ourselves! That is, we can fix it ourselves if we understand the code. I've been reading through the code trying to get a sense of how it works, but have admittedly made little to no progress. Do you have any idea how to fix this? Or at least some pointers as to where I should be looking?

Reproducing the issue is very simple: try to run an MSI installer inside a sandbox, and you will get this error.
MSI Installer

opened by DavidBerdik 40
TrojanWin32Vigorf.A infected? False alarm or what?

When I try to DL SandboxieInstall64-v5.41.0.exe file, I get alert from Chrome browser and Win10 Defender Shield, that the file is infected with TrojanWin32Vigorf.A. Is this a false alarm or what?

opened by szymario 38
Xbox Gamepad controller not working in hardened security sandbox

Describe what you noticed and did

Hello guys

I just subscribed to the support and I wanted to activate security enforcement protection on my sandboxes for my games. However, when I switch from "standard" (yellow color) to orange/red ones ... it is impossible to play with my controller anymore.

If I go back to standard or blue one, working again.

I do not know on what additional information I shall share. Windows 11 64 bits Sandboxie v1.3.2

I get this error in the logs

SBIE2112 Non accessible object : \Device\Afd\Endpoint, call CreateFile (C0000022) access=0016019F initialized=1

How often did you encounter it so far?

No response

Affected program

Any programs which requires the controlpad

Download link

N/A

Where is the program located?

Not relevant to my request.

Expected behavior

N/A

What is your Windows edition and version?

Windows 11 64 bit

In which Windows account you have this problem?

I use the built-in Administrator account.

Please mention any installed security software

N/A

What version of Sandboxie are you running?

1.3.2

Is it a new installation of Sandboxie?

I have been using the same version for some time.

Is it a regression?

No response

In which sandbox type you have this problem?

In a Hardened sandbox (red sandbox icon).

Can you reproduce this problem on an empty sandbox?

I can confirm it also on an empty sandbox.

Did you previously enable some security policy settings outside Sandboxie?

No

Crash dump

No response

Trace log

No response

Sandboxie.ini configuration

No response
Confirmation pending Workaround

opened by bwayan 36
WindowsApps open failed in the Sandboxie-Plus-x64-v1.6.2.exe
Describe what you noticed and did

Install Sandboxie Plus

Open Sandboxie Plus

Try to run anything

error info

On the Win10 case: run failed both inside and outside the sandbox

On the Win11 run failed inside the sandbox，run success outside the sandbox

How often did you encounter it so far?

every time

Affected program

Sandboxie-Plus-x64-v1.6.2.exe

Download link

C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18114.19418.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe C:\Program Files\WindowsApps\Microsoft.Paint_11.2208.6.0_x64__8wekyb3d8bbwe\PaintApp\mspaint.exe

Where is the program located?

The program is installed both inside and outside the sandbox.

Expected behavior

Expected it normal running in the Sandboxie-Plus

What is your Windows edition and version?

Win10 Enterprise 1909 64-bit Win11 Enterprise 21H2 64-bit

In which Windows account you have this problem?

A local or Microsoft account without special changes.

Please mention any installed security software

Windows Defender

What version of Sandboxie are you running?

Sandboxie-Plus-x64-v1.6.2.exe

Is it a new installation of Sandboxie?

I recently did a new clean installation.

Is it a regression?

Sandboxie-Plus-x64-v1.0.9.exe

In which sandbox type you have this problem?

In a standard isolation sandbox (yellow sandbox icon).

Can you reproduce this problem on a new empty sandbox?

I can confirm it also on a new empty sandbox.

Did you previously enable some security policy settings outside Sandboxie?

No response

Crash dump

No response

Trace log

No response

Sandboxie.ini configuration

No response
duplicate Known issue UWP incompatibility
opened by GitHubAmos 1
Syscall settings not being applied at first start after the installation and causing issues
Describe what you noticed and did

Install Sandboxie Plus

Create a Orange/Red box (Hardened Box)

Try to run anything

Start.exe runs briefly and terminates,

To reproduce it:

SandMan > Sandbox > Maintanence > Stop All > Delete Sandboxie.ini > Maintanence > Connect > Create a new Orange/Red box > Try to run anything on it

Fix: Reload ini file fixes the issue.

How often did you encounter it so far?

Every time

Affected program

Not relevant

Download link

Not relevant

Where is the program located?

Not relevant to my request.

Expected behavior

After the installation it should reload the ini files automatically.

What is your Windows edition and version?

Windows 10 Pro 22H2 64-bit and Windows 11 Pro 22H2 64-bit

In which Windows account you have this problem?

A local or Microsoft account without special changes.

Please mention any installed security software

Microsoft Windows Defender

What version of Sandboxie are you running?

Sandboxie-Plus 1.6.3

Is it a new installation of Sandboxie?

I recently did a new clean installation.

Is it a regression?

No response

In which sandbox type you have this problem?

In a security hardened sandbox (orange sandbox icon).

Can you reproduce this problem on a new empty sandbox?

I can confirm it also on a new empty sandbox.

Did you previously enable some security policy settings outside Sandboxie?

No response

Crash dump

No response

Trace log

No response

Sandboxie.ini configuration

No response

https://user-images.githubusercontent.com/6871698/209815294-dda217af-cfa9-4d02-8812-8701506c1d59.mp4
fixed in next build Issue reproduced
opened by offhub 0
fixed issue with color inaccuracy caused by triggering OnColorSlider.

When color is a definite color value, m_BorderColor is finally given an approximate value because m_pColorSlider->setValue(hsv.h) is triggered again.

opened by okrc 1
Default BorderColor inconsistent with DefaultBox vs NewBox

Describe what you noticed and did

DefaultBox upon new installation Sandboxie.ini: BorderColor=#00ffff
Hex(FFFF00)=RGB(255, 255, 0)

Creating a NewBox Sandboxie.ini: BorderColor=#02f6f6,ttl Hex(F6F602)=RGB(246, 246, 2)

https://github.com/sandboxie-plus/Sandboxie/blob/bc48de371e8efc0950738e2777a37a5eff398fe7/SandboxiePlus/SandMan/SandMan.cpp#L231

How often did you encounter it so far?

No response

Affected program

Sandboxie UI

Download link

Not relevant

Where is the program located?

The program is installed both inside and outside the sandbox.

Expected behavior

Prefer the NewBox to be qRgb(255,255,0) same as the DefaultBox

What is your Windows edition and version?

Win10 64

In which Windows account you have this problem?

A local or Microsoft account without special changes.

Please mention any installed security software

None

What version of Sandboxie are you running?

v1.6.3

Is it a new installation of Sandboxie?

I recently did a new clean installation.

Is it a regression?

No response

In which sandbox type you have this problem?

In a standard isolation sandbox (yellow sandbox icon).

Can you reproduce this problem on a new empty sandbox?

I can confirm it also on a new empty sandbox.

Did you previously enable some security policy settings outside Sandboxie?

No response

Crash dump

No response

Trace log

No response

Sandboxie.ini configuration

No response
Confirmation pending

opened by Incog5 1
How to configure capacity to monitor keyboard/mouse input for only selected programs?

Is your feature request related to a problem or use case?

No i dont think it is a problem

Describe the solution you'd like

While I am running programs in a sandbox, I see that I cannot use shortcut input to do something that this program configures. For example, I am running an app that starts/stops video play when pressing ALT+SPACE, but I cannot do it because app is installed in sandbox and it cannot see my ALT+SPACE command. What I need is to do is to give access to keyboard inputs for only that programs. Is there a way to do that?

Describe alternatives you've considered

No response
Feature request

opened by NJT145 8

Releases(v1.6.3)

v1.6.3(Dec 22, 2022)
This is a maintenance release fixing various bugs.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

[1.6.3 / 5.61.3] - 2022-12-21

Changed

improved Network Location Awareness template

[1.6.2b / 5.61.2] - 2022-12-21

Fixed

fixed issue with update label when "version update" is set to "ignore"

fixed issue with wow64 thunking on 32 bit windows 10 systems #2546

fixed on reboot auto clean up boxes are nto cleared #2531 -- Note: a clean up is now done after each reboot

fixed issue with Network Location Awareness under windows 11 #2530

fixed issues with recovery window #2458

[1.6.2a / 5.61.2] - 2022-12-19

Fixed

Fixed crash issue in Vintage UI introduced in 1.6.1a

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.61.3.exe(2.72 MB)
Sandboxie-Classic-x86-v5.61.3.exe(2.14 MB)
Sandboxie-Plus-ARM64-v1.6.3.exe(15.21 MB)
Sandboxie-Plus-x64-v1.6.3.exe(17.62 MB)
Sandboxie-Plus-x86-v1.6.3.exe(15.23 MB)
v1.6.2(Dec 19, 2022)
This build introduces a couple of quality of life improvements,

the ability to suppress notification when gaming

a global setting to add run entries to all boxes

an option to select a custom icon for the sandbox added to the color slider in the box options

It fixed 12 issues and introduces a new update mechanism which allows to update individual files.

On the "Support Tab" in the "Global Options" the user can now choose from the following release channels:

Stable - GitHub Releases

Preview - GitHub Pre-Releases

There the user can also select how to behave when a "New Version" (where an installer is available) or a "Version Update" (where only individual files of the existing installation will be updated) is found. For a "New Version" the following options are available: Notify, Download & Notify, Download & Install For a "Version Update" the following options are available: Ignore, Notify, Download & Notify, Download & Install There is no "Ignore" option for "New Version" as that is covered by disabling check for updates.

In the "Stable" channel check for "Version Update" is only available to supporters with a valid certificate. In this channel all updates are signed and consists of the latest compatibility templates and urgent bug-fixes and translations.

In the "Preview" channel the "Version Update" consist of unsigned test builds (except the signed driver) released every few days (like for example 1.6.0,1.6.1a and 1.6.1b) as here the updates contain not only half tested fixes but also new functionality which may not yet be free of bugs.

Furthermore installers have been updated with the ability to download the latest Templates.ini and translations when installing.

[1.6.2 / 5.61.2] - 2022-12-19

Added

added template for Tencent TIM #2516 (thanks TooYoungTooSimp)

[1.6.1b / 5.61.1] - 2022-12-16

Added

added game/presentation mode #2534

added option to pick a custom box icon

Fixed

fixed support setting page not showing version updates properly

[1.6.1a / 5.61.1] - 2022-12-07

Added

added "Run Sandboxed" command to the sandbox menu

DefaultBox can now be replaced with another sandbox #2445

Fixed

improved fix for #2495

[1.6.1 / 5.61.1] - 2022-12-04

Added

added global option to introduce run menu entries to all boxes

Changed

reorganized command prompt entries #2451

the "live" update channel is now part of the "preview" channel for which version updates can now be disabled

Fixed

fixed issue with support setting drop-down menu multiplying #2502 (okrc)

added translations folder as deprecated, to be removed upon installation #2500 (lufog)

fixed issue with disk usage of hidden items not counted #2503 (okrc)

fixed issue with boolean settings which can also be set per process #2495

fixed issue with disk usage of hidden items not counted #2503

[1.6.0 / 5.61.0] - 2022-11-26

Added

added ability to import/export boxes into 7z files

added new update mechanism allowing for incremental updates -- used for nightly test builds in the "live" update channel -- used to update Templates.ini and translations after installation #1105

Changed

restructured the box context menu a bit

SandMan translations are now compressed and located in translations.7z

Fixed

fixed issue with recycle icon not updated in time #2457 (thanks okrc)

fixed issue with "index out of range" #2470 (thanks okrc)

fixed issue starting SandMan after install #2284

fixed encoding issue with my_version.h #2475

fixed issue with empty group blinking sequence #2486 (thanks okrc)

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.61.2.exe(2.72 MB)
Sandboxie-Classic-x86-v5.61.2.exe(2.14 MB)
Sandboxie-Plus-ARM64-v1.6.2.exe(15.20 MB)
Sandboxie-Plus-x64-v1.6.2.exe(17.62 MB)
Sandboxie-Plus-x86-v1.6.2.exe(15.23 MB)
v1.6.1(Dec 4, 2022)
This build fixes a few issues and improves on the new update mechanism.

[1.6.1 / 5.61.1] - 2022-12-04

Added

added global option to introduce run menu entries to all boxes

Changed

reorganized command prompt entries #2451

the "live" update channel is now part of the "preview" channel for which Version Updates can now be disabled

Fixed

fixed issue with support setting drop-down menu multiplying #2502 (okrc)

added translations folder as deprecated, to be removed upon installation #2500 (lufog)

fixed issue with disk usage of hidden items not counted #2503 (okrc)

fixed issue with boolean settings which can also be set per process #2495

fixed issue with disk usage of hidden items not counted #2503

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.61.1.exe(2.68 MB)
Sandboxie-Classic-x86-v5.61.1.exe(2.11 MB)
Sandboxie-Plus-ARM64-v1.6.1.exe(14.99 MB)
Sandboxie-Plus-x64-v1.6.1.exe(17.44 MB)
Sandboxie-Plus-x86-v1.6.1.exe(15.07 MB)
v1.6.0(Nov 26, 2022)
This build fixes a few issues and introduces a new update mechanism which allows to update individual files.

On the "Support Tab" in the "Global Options" the user can now choose from 3 release channels:

Stable - GitHub Releases

Preview - GitHub Pre-Releases

Live - Test builds before they are mature enough to be a Pre-Release

There the user can also select how to behave when a "Full Update" (where an installer is available) or a "Version Revision" (where only individual files of the existing installation will be updated) is found.

The installers will offer the ability to download the latest Templates.ini and translations when installing.

The Live release channel will be available as "Version Revision" only.

[1.6.0 / 5.61.0] - 2022-11-26

Added

added ability to import/export boxes into 7z files

added new update mechanism allowing for incremental updates -- used for nightly test builds in the "live" update channel -- used to update Templates.ini and translations after installation #1105

Changed

restructured the box context menu a bit

SandMan translations are now compressed and located in translations.7z

Fixed

fixed issue with recycle icon not updated in time #2457 (thanks okrc)

fixed issue with "index out of range" #2470 (thanks okrc)

fixed issue starting SandMan after install #2284

fixed encoding issue with my_version.h #2475

fixed issue with empty group blinking sequence #2486 (thanks okrc)

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.61.0.exe(2.68 MB)
Sandboxie-Classic-x86-v5.61.0.exe(2.11 MB)
Sandboxie-Plus-ARM64-v1.6.0.exe(14.99 MB)
Sandboxie-Plus-x64-v1.6.0.exe(17.44 MB)
Sandboxie-Plus-x86-v1.6.0.exe(15.06 MB)
v1.5.3(Nov 8, 2022)
This build fixes various issues and minor improvements.

Note: if you encounter the new message SBIE2227, the right course of action is to enable 8.3 name support for all volume on your system. Use the following command in an elevated command prompt:

fsutil behavior set disable8dot3 0

This is not a new issue, but an old forgotten one. The message has been added to bring attention to potential problems and offer instructions how to properly resolve the issue.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Added

boxes set to auto-delete are now marked with a small red recycle symbol

added Vietnamese language on Plus UI #2438

Fixed

fixed issue with box options #2400

fixed issue with Smart App Control #2341

fixed issue with snapshots when using privacy boxes #2427

fixed issue with m_pColorslider change not applied #2433 (thanks okrc)

fixed issue with switching snapshots when the file panel is open

fixed issue with file panel when an empty box is selected #2419

fixed issue with menu icon not being disabled #2406

fixed compatibility issue with Microsoft Edge #2312

fixed UsePrivacyMode=y compatibility with Windows 7 #2423

fixed minor issue during Sandboxie Plus uninstall #2421

fixed BSOD issue when driver initialization fails (introduced in 1.5.1) #2431

fixed fake paths being listed even if true paths do not exist #2403

fixed issue with Firefox 106.x requesting write access to plugin executables #2391 #2411

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.60.3.exe(2.67 MB)
Sandboxie-Classic-x86-v5.60.3.exe(2.10 MB)
Sandboxie-Plus-ARM64-v1.5.3.exe(15.44 MB)
Sandboxie-Plus-x64-v1.5.3.exe(17.93 MB)
Sandboxie-Plus-x86-v1.5.3.exe(15.65 MB)
v1.5.2(Oct 28, 2022)
This build fixes various issues and minor improvements.

Note: if you encounter the new message SBIE2227, the right course of action is to enable 8.3 name support for the volume you are using. Assuming you are using for example a RAM disk with the letter R:\, use the following command in an elevated command prompt:

fsutil behavior set disable8dot3 R: 0

This is not a new issue, but an old forgotten one. The message has been added to bring attention to potential problems and offer instructions how to properly resolve the issue.

Note: this installers are not signed as its an um scheduled hotfix release

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Changed

utility groups are now cleaned up automatically

improved removal of leftovers #2409

Fixed

fixed issues with SBIE2227 on virtual drives

fixed issues on native 32-bit windows introduced with 1.5.0 #2401

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.60.2.exe(2.65 MB)
Sandboxie-Classic-x86-v5.60.2.exe(2.08 MB)
Sandboxie-Plus-ARM64-v1.5.2.exe(15.22 MB)
Sandboxie-Plus-x64-v1.5.2.exe(17.73 MB)
Sandboxie-Plus-x86-v1.5.2.exe(15.46 MB)
v1.5.1(Oct 26, 2022)
This build fixes various issues and minor improvements.

Note: if you encounter the new message SBIE2227, the right course of action is to enable 8.3 name support for the volume you are using. Assuming you are using for example a RAM disk with the letter R:\, use the following command in an elevated command prompt:

fsutil behavior set disable8dot3 R: 0

This is not a new issue, but an old forgotten one. The message has been added to bring attention to potential problems and offer instructions how to properly resolve the issue.

Known Issues

the legacy 32-bit build does not work properly #2401 - use the last 1.4.2 build instead: https://github.com/sandboxie-plus/Sandboxie/releases/tag/v1.4.2

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Added

added SBIE2227 warning when a sandbox is located on a volume without 8.3 name support

added template for Tencent QQ #2367

Fixed

fixed issues when renaming a sandbox with a custom path #2368

properly fixed the Firefox 106 issue 46e9979

fixed issue with alternative UI modes #2380

fixed command line corruption with breakout processes #2377

fixed issues with Privacy Enhanced box types #2342

fixed issue with boxed object directory initialization #2342

Sandboxie no longer leaves behind permanent directory objects

FIXED SECURITY ISSUE ID-21 AlpcConnectPortEx was not filtered by the driver #2396

fixed issues with program control options #2395

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.60.1.exe(2.68 MB)
Sandboxie-Classic-x86-v5.60.1.exe(2.11 MB)
Sandboxie-Plus-ARM64-v1.5.1.exe(14.04 MB)
Sandboxie-Plus-x64-v1.5.1.exe(16.52 MB)
Sandboxie-Plus-x86-v1.5.1.exe(14.23 MB)
v1.5.0(Oct 19, 2022)
This build brings ARM64 support to sandboxie it supports windows 10 and 11 on ARM64, for non ARM users this build brings only a couple of fixes and minor improvements. The ARM64 build is to be considered pre-release it may still contain bugs, while the regular Intel/AMD builds are regular bug fix releases where no issues are to be expected.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Added

Added support for Windows on ARM64 #1321 #645 -- Ported SbieDrv for ARM64 -- Ported low level injection mechanism for ARM64/ARM64EC -- Ported syscall hooks for ARM64/ARM64EC -- Ported SbieDll.dll to ARM64/ARM64EC -- Note: ARM32 on ARM64 is not implemented and will terminate with message SBIE2338 -- Note: When Sandboxie is running, it disables the use of CHPE binaries for x86 processes globally, this is required for the forced processes functionality. This behaviour can be disabled by adding the global option "DisableCHPE=n" to the Sandboxie.ini, then x86 processes started outside the sandbox, instead of being forced, will be terminated with message SBIE2338

fixed

fixed issue with Win32 hooks in x86 applications

Avoid window overlap when editing templates #2339 (thanks okrc)

Fixed the wrong write of OpenWinClass setting UI #2347 (thanks okrc)

Fixed issue about Local Template #2338 (thanks okrc)

fixed Edge WebView compatybility issue #2350

added provisional workaround for firefox 106 content process sandbox issue

Fixed bug with Rename Sandbox 2358 (thanks okrc)

Changed

reworked API compatibility check

Break out process is now available for all users

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.60.0.exe(2.68 MB)
Sandboxie-Classic-x86-v5.60.0.exe(2.11 MB)
Sandboxie-Plus-ARM64-v1.5.0.exe(15.42 MB)
Sandboxie-Plus-x64-v1.5.0.exe(17.90 MB)
Sandboxie-Plus-x86-v1.5.0.exe(15.61 MB)
v1.4.2(Oct 10, 2022)
This build fixes various compatibility and usability issues.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Added

added tooltips to resource access modes #2300

added UI option to control ApplyElevateCreateProcessFix #2302

added message 2226 issued when a process may need 'ApplyElevateCreateProcessFix=y'

Changed

Moved Restrictions tab from the new Security page back to the General page

Fixed

fixed wrong button captions in the breakout process page

fixed issue with saving box recovery options

fixed the display problem of Sandman #2306 (thanks okrc)

fixed theme not auto changing #2307

fixed issue with saving sandman window state on windows shutdown

fixed miscellaneous minor issues #2301

fixed issue with MSEdge introduced in 106.x #2325

fixed vivaldi hooking issue, UseVivaldiWorkaround is no longer needed #1783

fixed issues with misc advanced options page #2315

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.59.2.exe(2.67 MB)
Sandboxie-Classic-x86-v5.59.2.exe(2.11 MB)
Sandboxie-Plus-x64-v1.4.2.exe(18.13 MB)
Sandboxie-Plus-x86-v1.4.2.exe(15.83 MB)
v1.4.1(Oct 5, 2022)
This build improves the SandMan UI a lot and adds various new UX oriented features, it also makes the Sandboxie Plus code base Qt6 compatible, that said, the build currently uses still Qt5, a switch to Qt6 is planned for later. With regard to Qt6's no longer present Windows 7 support, this won't be an issue as a custom build of Qt6's base components will be used which are Windows 7 compatible.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

[1.4.1 / 5.59.1] - 2022-10-05

Added

added dark title bar support for Windows 11 #2299

Changed

in Sbie 5.28 and later WinInetCache is open, which breaks IE's source view, therefore it can now be disabled with 'CloseWinInetCache=y'

Fixed

fixed WarnProcess and WarnFolder not working with certain configurations

[1.4.0 / 5.59.0] - 2022-09-30

Added

added integrated run from start menu #1836

added start menu enumeration #1570

added UI for breakout processes #1904

added option to customize double-click action per sandbox

added new miscellaneous tab in the advanced options tab allowing to configure specific processes and other advanced options

added "SeparateUserFolders=y" and "SandboxieLogon=y" to the sandbox options dialog

added icons to the section labels on the option pages

Changed

prepared for Qt 6.3.1

restructured the general settings page

restructured the sandbox options page, added a new tab and moved some of the advanced options there

Fixed

fixed menu bar issue in Plus UI #2280 (thanks okrc)

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.59.1.exe(2.67 MB)
Sandboxie-Classic-x86-v5.59.1.exe(2.11 MB)
Sandboxie-Plus-x64-v1.4.1.exe(18.13 MB)
Sandboxie-Plus-x86-v1.4.1.exe(15.82 MB)
v1.4.0(Sep 30, 2022)
This is a unsigned test build (that is the driver is signed but not the installers), it improves the SandMan UI a lot and adds various new UX oriented features, it also makes the Sandboxie Plus code base Qt6 compatible, that said, the build currently uses still Qt5, a switch to Qt6 is planned for later. With regard to Qt6's no longer present Windows 7 support, this won't be an issue as a custom build of Qt6's base components will be used which are Windows 7 compatible.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Added

added integrated run from start menu #1836

added start menu enumeration #1570

added UI for breakout processes #1904

added option to customize double-click action per sandbox

added new miscellaneous tab in the advanced options tab allowing to configure specific processes and other advanced options

added "SeparateUserFolders=y" and "SandboxieLogon=y" to the sandbox options dialog

added icons to the section labels on the option pages

Changed

prepared for Qt 6.3.1

restructured the general settings page

restructured the sandbox options page, added a new tab and moved some of the advanced options there

Fixed

fixed menu bar issue in Plus UI #2280 (thanks okrc)

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.59.0.exe(2.64 MB)
Sandboxie-Classic-x86-v5.59.0.exe(2.08 MB)
Sandboxie-Plus-x64-v1.4.0.exe(17.94 MB)
Sandboxie-Plus-x86-v1.4.0.exe(15.67 MB)
v1.3.5(Sep 26, 2022)
This build fixes various minor issues and adds some improvements.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Added

added localization to Windows 11 shell menu #2229

Changed

improved recovery window behaviour in Plus UI #2266

Fixed

fixed issues with stale data in Sandboxie-Plus.ini #2248 (thanks okrc)

fixed issue with dummy manifests #2252

fixed issue with XYplorer #2230

fixed crash in Plus UI e9e21c2

fixed m_pCleanUpButton is displayed empty when NoIcons=1 #2273 (thanks okrc)

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.58.5.exe(2.67 MB)
Sandboxie-Classic-x86-v5.58.5.exe(2.11 MB)
Sandboxie-Plus-x64-v1.3.5.exe(18.00 MB)
Sandboxie-Plus-x86-v1.3.5.exe(15.71 MB)
1.3.4(Sep 19, 2022)
This build improves window class name handling, resolves issues with WinUI apps and Windows 11 Explorer, it also fixes various minor issues and adds some improvements.

Known regression: https://github.com/sandboxie-plus/Sandboxie/issues/2252

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Added

Added NoRenameWinClass to the Plus UI

Added Windows.UI.* to the list of hardcoded well-known classes to resolve issues with WinUI apps #2109

Changed

NoRenameWinClass now supports wildcards

Fixed

fixed issue with default box not being detected on start #2195

fixed move sandbox menu issue #2225 (thanks okrc)

fixed issues with stale data in Sandboxie-Plus.ini #2234 (thanks okrc)

fixed autostart issue #2219

fixed firewall UI issue, all programs entries were missing *, prefix #2247

fixed BlockPorts template with a missing *, prefix 4420ba4

fixed issues with various Electron apps #2217 #2235 #2201 #2166 -- now the default behaviour is UseElectronWorkaround=n

Removed

removed obsolete VPNTunnel template

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.58.4.exe(2.67 MB)
Sandboxie-Classic-x86-v5.58.4.exe(2.10 MB)
Sandboxie-Plus-x64-v1.3.4.exe(18.00 MB)
Sandboxie-Plus-x86-v1.3.4.exe(15.70 MB)
v1.3.3(Sep 12, 2022)
This build fixes various issues and adds various minor improvements.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Added

added domain\user notation when the LogFile registry setting is applied as workaround for #2207 -- usage: in "HKLM\SYSTEM\CurrentControlSet\Services\SbieSvc" add REG_SZ "LogFile" with "3;[path]\Sandboxie.log"

added option to block host processes from accessing sandboxed ones #2132 -- usage: DenyHostAccess=Program.exe,y -- note: by default, this protection only applies for write access, that is, unsandboxed processes will still be able to obtain read-only access -- to prevent host processes from obtaining read access, ConfidentialBox=y must also be set, which requires a supporter certificate

added compatibility template for ReHIPS

added creation of all default folders in privacy box type #2218

Changed

improved SandMan settings behaviour for non admin users #2123

Fixed

fixed issues with group moving via drag and drop

approved more required syscalls #2190

fixed issues when deleting box content and the file panel view is open

fixed issue with config protection #2206

fixed issue with default box #2195

fixed issue with keyboard delete shortcut for process termination

Removed

removed obsolete Online Armor template

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.58.3.exe(2.67 MB)
Sandboxie-Classic-x86-v5.58.3.exe(2.10 MB)
Sandboxie-Plus-x64-v1.3.3.exe(17.99 MB)
Sandboxie-Plus-x86-v1.3.3.exe(15.70 MB)
v1.3.2(Aug 30, 2022)
This build fixes various issues and adds various minor improvements.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Added

added icons to sub tabs in the box options dialog

recovery and message pop-up menu options are not persisting across UI restarts any more

added new box color, a white box indicates that its not really a sandbox and is displayed when the user specified OpenFilePath=* or alike

Changed

Sandboxie no longer issues message 1301 when forced processes are temporarily disabled -- the message can be re-enabled with "NotifyForceProcessDisabled=y"

reworked the "Open COM" checkbox mechanism in the plus UI -- Now it uses a template and it can also keep COM closed while OpenIpcPath=* is set

Fixed

fixed compatibility issue with Proxifier #2163

fixed encoding issue with Korean translation #2173

fixed issues with update available message

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.58.2.exe(2.66 MB)
Sandboxie-Classic-x86-v5.58.2.exe(2.09 MB)
Sandboxie-Plus-x64-v1.3.2-.korean.fix.exe(17.96 MB)
Sandboxie-Plus-x64-v1.3.2.exe(17.96 MB)
Sandboxie-Plus-x86-v1.3.2-.korean.fix.exe(15.68 MB)
Sandboxie-Plus-x86-v1.3.2.exe(15.68 MB)
v1.3.1(Aug 20, 2022)
This build adds 2 new isolation mechanisms to increase security of hardened boxes, hence boxes previously designated hardened will now be downgraded in the UI to normal, and the hardened icons will be used to the new box type. The first isolation mechanism "SysCallLockDown=y" limits the amount of ntdll syscalls which are executed with the original process token to a list of known approved syscalls The second isolation mechanism "RestrictDevices=y" leverages rule specificity to limit the accessible driver/device endpoints to a list of known required endpoints plus whatever the user opens using the resource access rules.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

1.3.1

Added

added ability to switch fusion theme independently of the dark theme

added ability to download updates from the support page

added missing system calls to the hardened box type 88bc06a b775264 04b2377 (thanks Mr.X)

added search box to the Plus UI Settings and box option dialogs #2134

added Korean translation to the Plus UI #2133 (thanks VenusGirl)

added grouping to sandman tray menu #2148

Changed

improved info label

the look of vintage mode is even more vintage

reloading the configuration with the Sandman command "Options -> Reload ini file" now updates the list of approved syscalls

made rule specificity more specific, now a rule with less wildcards overrules a rule with more wildcards -- Note: tailing wildcards are evaluated separately

Fixed

fixed issue with displaying sandbox configuration #2111

fixed flashing issue when switching views #2050

fixed inconsistencies with various checkboxes in the Plus UI ef4ac1b 06c89e3

fixed a certificate validation issue 238cb44

fixed issue with "UseRuleSpecificity" setting #2124 file.c#L965-L966

1.3.0

Added

Added hook configuration for ntoskrnl/ntdll -- individual ntdll hooks can be disabled using "DisableWinNtHook=..."

Added new Super Extra Security Enhanced Box Mode to enable set "UseSecurityMode=y" -- then this setting is enabled it combines "SysCallLockDown=y" that limits the use of Nt system calls with "DropAdminRights=y" and "RestrictDevices=y" -- Only calls configured in the global section as "ApproveWinNtSysCall=..."/"ApproveWin32SysCall=..." wil be executed with the original token -- all not aproved Nt sys calls will be executed with the sandboxed token, this may break compatybility in certain scenarios -- hence additional syscalls may need to be allowed, this is to be done in the [GlobalSettings] and the driver must be restarted -- Note: Boxes created as Security Enhanced with prior builds will be displayed in the UI to normal from now on -- The Security Enhanced icons are now repurposed for the new Super Extra Security Enhanced Box Mode -- Note: The new enhanced security features require a supporter certificate

added browse option to the force processes tab

Changed

replaced the "DeviceSecurity" template with a dedicated setting "RestrictDevices=y" -- Note: when needed more "NormalPipePath=..." entries can be added to open specific devices

rule specificity is now even more specific a exact rule now overrules once that end with a wildcard

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.58.1.exe(2.66 MB)
Sandboxie-Classic-x86-v5.58.1.exe(2.09 MB)
Sandboxie-Plus-x64-v1.3.1.exe(17.93 MB)
Sandboxie-Plus-x86-v1.3.1.exe(15.65 MB)
v1.3.0(Aug 9, 2022)
This build adds 2 new isolation mechanisms to increase security of hardened boxes, hence boxes previously designated hardened will now be downgraded in the UI to normal, and the hardened icons will be used to the new box type. The first isolation mechanism "SysCallLockDown=y" limits the amount of ntdll syscalls which are executed with the original process token to a list of known approved syscalls The second isolation mechanism "RestrictDevices=y" leverages rule specificity to limit the accessible driver/device endpoints to a list of known required endpoints plus whatever the user opens using the resource access rules.

Please note that the installers for this test build are not signed.

You can support the project through donations, any help will be greatly appreciated.

Known Issues

ApproveWinNtSysCall=OpenKeyEx is missing, you can add it to [GlobalSettings] of your sandboxie.ini and reload the driver to fix issues with the hardened box type, additional syscalls to approve ApproveWinNtSysCall=SetInformationFile ApproveWinNtSysCall=CreatePrivateNamespace ApproveWinNtSysCall=AlpcCreateSecurityContext

Hardened box type is not available on first driver load when no sandboxie.ini was found, reload driver/reboot to fix

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Added

Added hook configuration for ntoskrnl/ntdll -- individual ntdll hooks can be disabled using "DisableWinNtHook=..."

Added new Super Extra Security Enhanced Box Mode to enable set "UseSecurityMode=y" -- then this setting is enabled it combines "SysCallLockDown=y" that limits the use of Nt system calls with "DropAdminRights=y" and "RestrictDevices=y" -- Only calls configured in the global section as "ApproveWinNtSysCall=..."/"ApproveWin32SysCall=..." wil be executed with the original token -- all not aproved Nt sys calls will be executed with the sandboxed token, this may break compatybility in certain scenarios -- hence additional syscalls may need to be allowed, this is to be done in the [GlobalSettings] and the driver must be restarted -- Note: Boxes created as Security Enhanced with prior builds will be displayed in the UI to normal from now on -- The Security Enhanced icons are now repurposed for the new Super Extra Security Enhanced Box Mode -- Note: The new enhanced security features require a supporter certificate

added browse option to the force processes tab

Changed

replaced the "DeviceSecurity" template with a dedicated setting "RestrictDevices=y" -- Note: when needed more "NormalPipePath=..." entries can be added to open specific devices

rule specificity is now even more specific a exact rule now overrules once that end with a wildcard

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.58.0.exe(2.62 MB)
Sandboxie-Classic-x86-v5.58.0.exe(2.06 MB)
Sandboxie-Plus-x64-v1.3.0.exe(17.69 MB)
Sandboxie-Plus-x86-v1.3.0.exe(15.44 MB)
v1.2.9(Aug 8, 2022)
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

You can support the project through donations, any help will be greatly appreciated.

Fixed

fixed issue with context menu setup on windows 11

fixed column issue in vintage mode #2103

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.57.7.exe(2.65 MB)
Sandboxie-Classic-x86-v5.57.7.exe(2.08 MB)
Sandboxie-Plus-x64-v1.2.8b.exe(17.83 MB)
Sandboxie-Plus-x86-v1.2.8b.exe(15.56 MB)
v1.2.8(Aug 5, 2022)
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

You can support the project through donations, any help will be greatly appreciated.

Fixed

fixed missing uninstall routine in sandman

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.57.7.exe(2.65 MB)
Sandboxie-Classic-x86-v5.57.7.exe(2.08 MB)
Sandboxie-Plus-x64-v1.2.8.exe(17.83 MB)
Sandboxie-Plus-x86-v1.2.8.exe(15.56 MB)
v1.2.7(Jul 31, 2022)
This build fixed a couple of issues.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

You can support the project through donations, any help will be greatly appreciated.

[1.2.7 / 5.57.7] - 2022-07-31

Added

added option to alternate row color in all lists #2073

Changed

SandboxieLogon is now disabled by default as it was not compatible with 3rd party antimalware tools #2025

the access view list now adds in display the tailing * to file and key paths the same way the driver does 2039

setup of shell integration is now done by sandman, no longer by the installer

uninstaller can now remove the sandbox folders #1235

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.57.7.exe(2.65 MB)
Sandboxie-Classic-x86-v5.57.7.exe(2.08 MB)
Sandboxie-Plus-x64-v1.2.7.exe(17.83 MB)
Sandboxie-Plus-x86-v1.2.7.exe(15.56 MB)
v1.2.6(Jul 25, 2022)
This build changes two core Sandboxie mechanics. It reworks the hooking mechanism to enable proper unhooking on dll unload which should solve various compatibility issues. It lets Sandboxie to use custom logon tokens instead of the anonymous one, the option is on by default and can be controlled with the "SandboxieLogon" setting.

This build also adds various UI improvements and a Vintage View Mode which makes Sandman.exe look almost like the classic SbieCtrl.exe.

Known Issues

SSL connection fails with 3rd party anti malware tools when SSL scanning is enabled, the fix is to set SandboxieLogon=n https://github.com/sandboxie-plus/Sandboxie/issues/2025#issuecomment-1196343325

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

You can support the project through donations, any help will be greatly appreciated.

[1.2.6 / 5.57.6] - 2022-07-25

Changed

reworked saving of global options

Fixed

fixed issue with the Delete Content option #2043

fixed issue with box prefs #2046

fixed issue with Delete V2 registry

[1.2.5 / 5.57.5] - 2022-07-22

Changed

improved a few icons

Fixed

fixed certificate validation issue

[1.2.4 / 5.57.4] - 2022-07-21

Added

added delete button to the recovery window #2024

Changed

improved tree selection display

Fixed

fixed issues with file panel

fixed issue with key bindings #2030

fixed issue wtih RemoveSidName when terminating sbiesvc

fixed issue with the new hooking mechanism

fixed BSOD issue with win32k hooks introduced in 1.2.0 #2035

fixed issue with element11 and electron workaround #2023

[1.2.3 / 5.57.3] - 2022-07-13

Fixed

fixed issues with new menu code

Changed

reworked frame drawing

[1.2.2 / 5.57.2] - 2022-07-13

Fixed

fixed issues with frame-drawing

fixed issues with the tray and box menu introduced in the last build

removed focus rectangle from the tree list

Changed

refactored menu creation code

[1.2.1 / 5.57.1] - 2022-07-11

Added

added Swedish translation to Plus UI (thanks pb1)

added Vintage View Mode to make SandMan UI look like SbieCtrl

added alternative tray menu mechanics

added ability to auto-generate sandbox icons based on the border colour

Changed

changed box group icon to a dedicated one

"browse content" is now available as a side panel in the main window

animated hourglass icon overlay

Fixed

fixed DPI issue on Windows 7

fixed issue with Software Compatibility tab

fixed issue with OpenKeyPath introduced in build 1.1.1 #2006

[1.2.0 / 5.57.0] - 2022-06-28

Added

re-engineered "SandboxieLogon=y"; it's on by default, as every sandbox gets its own SID now -- Note: this enforces strict isolation of sandboxes from each other.

Changed

reworked hook management, unloaded DLLs are properly unhooked now #1243

box order is now stored in the Sandboxie-Plus.ini

improved DPI scaling behaviour

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.57.6.exe(2.64 MB)
Sandboxie-Classic-x86-v5.57.6.exe(2.08 MB)
Sandboxie-Plus-x64-v1.2.6.exe(17.50 MB)
Sandboxie-Plus-x86-v1.2.6.exe(15.23 MB)
v1.2.5(Jul 22, 2022)
This build is a test build, it changes two core Sandboxie mechanics. It reworks the hooking mechanism to enable proper unhooking on dll unload which should solve various compatibility issues It lets Sandboxie to use custom logon tokens instead of the anonymous one, the option is on by default in the test build and can be controlled with the "SandboxieLogon" setting

This build also adds various UI improvements and a Vintage View Mode which makes Sandman.exe look almost like the classic SbieCtrl.exe

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

You can support the project through donations, any help will be greatly appreciated.

[1.2.5 / 5.57.5] - 2022-07-22

Changed

improved a few icons

Fixed

fixed certificate validation issue

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.57.5.exe(2.64 MB)
Sandboxie-Classic-x86-v5.57.5.exe(2.08 MB)
Sandboxie-Plus-x64-v1.2.5.exe(17.49 MB)
Sandboxie-Plus-x86-v1.2.5.exe(15.23 MB)
v1.2.4(Jul 21, 2022)
Now available as v1.2.5 / 5.57.5 because of the following issue: https://github.com/sandboxie-plus/Sandboxie/issues/2044

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

You can support the project through donations, any help will be greatly appreciated.

[1.2.4 / 5.57.4] - 2022-07-21

Added

added delete button to the recovery window #2024

Changed

improved tree selection display

Fixed

fixed issues with file panel

fixed issue with key bindings #2030

fixed issue wtih RemoveSidName when terminating sbiesvc

fixed issue with the new hooking mechanism

fixed BSOD issue with win32k hooks introduced in 1.2.0 #2035

fixed issue with element11 and electron workaround #2023

Source code(tar.gz)
Source code(zip)
v1.2.3(Jul 13, 2022)
This build fixes a few issues introduced in the last v1.2.2 build.

Please note that the installers for this build are not signed.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

You can support the project through donations, any help will be greatly appreciated.

Changelog

Fixed

fixed issues with new menu code

Changed

reworked frame-drawing

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.57.3.exe(2.61 MB)
Sandboxie-Classic-x86-v5.57.3.exe(2.05 MB)
Sandboxie-Plus-x64-v1.2.3.exe(17.32 MB)
Sandboxie-Plus-x86-v1.2.3.exe(15.07 MB)
v1.2.2(Jul 13, 2022)
This build fixes a few issues introduced in the last v1.2.1 build.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

You can support the project through donations, any help will be greatly appreciated.

ChangeLog

Fixed

fixed issues with frame-drawing

fixed issues with the tray and box menu introduced in the last build

removed focus rectangle from the tree list

Changed

refactored menu creation code

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.57.2.exe(2.64 MB)
Sandboxie-Classic-x86-v5.57.2.exe(2.08 MB)
Sandboxie-Plus-x64-v1.2.2.exe(17.47 MB)
Sandboxie-Plus-x86-v1.2.2.exe(15.21 MB)
v1.2.1(Jul 11, 2022)
This build adds various UI improvements and a Vintage View Mode which makes Sandman.exe look almost like the classic SbieCtrl.exe

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

You can support the project through donations, any help will be greatly appreciated.

ChangeLog

Added

added Swedish translation to Plus UI (thanks pb1)

added Vintage View Mode to make SandMan UI look like SbieCtrl

added alternative tray menu mechanics

added ability to auto-generate sandbox icons based on the border colour

Changed

changed box group icon to a dedicated one

"browse content" is now available as a side panel in the main window

animated hourglass icon overlay

Fixed

fixed DPI issue on Windows 7

fixed issue with Software Compatibility tab

fixed issue with OpenKeyPath introduced in build 1.1.1 #2006

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.57.1.exe(2.64 MB)
Sandboxie-Classic-x86-v5.57.1.exe(2.08 MB)
Sandboxie-Plus-x64-v1.2.1.exe(17.47 MB)
Sandboxie-Plus-x86-v1.2.1.exe(15.21 MB)
v1.2.0(Jun 28, 2022)
This build is a test build, it changes two core Sandboxie mechanics.

It reworks the hooking mechanism to enable proper unhooking on dll unload which should solve various compatibility issues

It lets Sandboxie to use custom logon tokens instead of the anonymous one, the option is on by default in the test build and can be controlled with the "SandboxieLogon" setting

EDIT: there was an issue with the Plus builds v1.2.0, so they were rebuilt and re-uploaded, but due to lack of time they were not signed: https://www.wilderssecurity.com/threads/sandboxie-plus-v1-2-0.445783/#post-3090370

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

You can support the project through donations, any help will be greatly appreciated.

ChangeLog

Added

Reenginiered "SandboxieLogon=y" and set it on by default, now every sandbox gets its own SID -- Note: this enforces the isolation of individual sandboxes from each other.

Changed

reworked hook management, now unloaded dll's are properly unhooked #1243

box order is now stored in the plus ini

improved dpi scaling behavioure

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.57.0.exe(2.64 MB)
Sandboxie-Classic-x86-v5.57.0.exe(2.08 MB)
Sandboxie-Plus-x64-v1.2.0.exe(17.23 MB)
Sandboxie-Plus-x86-v1.2.0.exe(14.98 MB)
v1.1.3(Jun 20, 2022)
Known Issue

- OpenKeyPath settings do not work between v1.1.1 and v1.1.3: https://github.com/sandboxie-plus/Sandboxie/issues/2006 https://github.com/sandboxie-plus/Sandboxie/issues/1276#issuecomment-1179549904

This release changes how sandboxie marks deleted host files as deleted, instead of creating dummy entries it uses an internal data structure to keep the stat of changes to the host file system. With the new mechanics it is possible to rename folders and keys properly. This new behavior needs to be enabled by specifying UseFileDeleteV2=y sand UseRegDeleteV2=y in later builds this will be enabled by default, hence please test this build and report back if there are any issues.

This build also adds a new UI functionality, sandman.exe now monitors the size of sandboxes and reports it in the info column, this functionality needs to be enabled in the global settings.

Last but not least this build reduces the cpu usage of sandman.exe a lot.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

You can support the project through donations, any help will be greatly appreciated.

ChangeLog

[1.1.3 / 5.56.3] - 2022-06-20

Added

added group first sorting #1922

Changed

updated Classic UI Swedish translation (thanks pb1)

restored Plus UI Turkish translation #1419 (thanks fmbxnary)

Fixed

fixed issue with recovery window on delete #1948

fixed double-click issue on path column #1951

"AllowBoxedJobs=n" is back to the default behaviour as issues were reported #1954

fixed issue with internet block #1955

fixed grouping issue in the Plus UI #1950

fixed issue with CredentialUIBroker.exe on win 11 with win32k hooks #1839

fixed issue with delete V2 #1939

[1.1.2 / 5.56.2] - 2022-06-14

Added

added missing file recovery log to SandMan #425

the immediate recovery window will now auto-close when all files have been recovered #1498

the immediate recovery window of SandMan is always on top by default like in SbieCtrl; this can be disabled with "Options/RecoveryOnTop=n" #1465

added option to toggle immediate recovery from the presets submenu #1653

added option to disable file recovery and message pop-up globally

added per box refresh option #1945

Changed

the desktop security workaround used for Chrome, Firefox and Acrobat can now be enabled for all processes using "UseSbieDeskHack=y"

improved double-click behaviour #1935

box size info is refreshed on file recovery

Fixed

fixed issue with unnecessary Sandboxie config reloads introduced in 1.1.1 #1938

fixed issue with recovery window focus #1374

fixed issues with desktop objects introduced in 1.1.1 #1934

fixed issues with Edge startup boost using a GPO preset #1913

[1.1.1 / 5.56.1] - 2022-06-07

Added

compatibility templates can now be viewed from the settings window #1891

the refresh command is now bound to F5 #1885

added more first start wizard options

added option to permanently disable immediate recovery for any given box when it opens #1478

double click on the path column now opens the box root in explorer #1924

Changed

changed Move Box behaviour #1879

improved implementation of the PreferExternalManifest option

Win32k hooks are now by default only used for Edge and Chromium apps as they cause issues with other software #1902 #1912 #1897

"AllowBoxedJobs=y" is now the default behaviour

Fixed

fixed Edge issue with Windows 11 after KB5014019

fixed issues with the new delete V2 mechanism when using "SeparateUserFolders=y" #1885

fixed credential issue #1770

fixed force process priorities #1883

fixed issues with the new delete V2 mechanism

fixed issue with the Windows 11 menu on older Windows builds 1877

refresh now works without WatchBoxSize option #1885

fixed crash issue with WatchBoxSize=true #1885

fixed issue with recovery folder paths #1840

fixed issues with Sbie desktop and wndStation affecting Acrobat Reader #1863

fixed issues with box grouping #1921 #1920

fixed issues when changing language #1914

fixed issue with BreakoutFolder #1908

fixed issue with SbieDll.dll for x86 exception handling

fixed issues with application-specific hives (RegLoadAppKey) affecting Visual Studio #1576 #1452

[1.1.0 / 5.56.0] - 2022-05-24

Added

added support for NtRenameKey (this requires UseRegDeleteV2=y) #205

added box size info #1780

Changed

reworked the mechanism Sandboxie uses to mark host files as deleted -- under the new behaviour a data file (FilePaths.dat) is created in the box root instead of dummy files -- it can be enabled with UseFileDeleteV2=y and also for the registry with UseRegDeleteV2=y which creates a reg file (RegPaths.dat)

reworked the TlsNameBuffer mechanism to be more versatile and less error-prone

significantly reduced the CPU usage of SandMan.exe

Fixed

fixed folder rename issues (this requires UseFileDeleteV2=y) #71

fixed issue with process access #1603

fixed translation issue #1864

fixed UI issue with the box selection window #1867

fixed UI issue when switching languages #1871

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.56.3.exe(2.67 MB)
Sandboxie-Classic-x86-v5.56.3.exe(2.11 MB)
Sandboxie-Plus-x64-v1.1.3.exe(15.91 MB)
Sandboxie-Plus-x86-v1.1.3.exe(13.89 MB)
v1.1.2(Jun 14, 2022)
This is an experimental release it changes how sandboxie marks deleted host files as deleted, instead of creating dummy entries it uses an internal data structure to keep the stat of changes to the host file system. With the new mechanics it is possible to rename folders and keys properly. This new behavior needs to be enabled by specifying UseFileDeleteV2=y sand UseRegDeleteV2=y in later builds this will be enabled by default, hence please test this pre release build and report back if there are any issues.

This build also adds a new UI functionality, sandman.exe now monitors the size of sandboxes and reports it in the info column, this functionality needs to be enabled in the global settings.

Last but not least this build reduces the cpu usage of sandman.exe a lot.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

You can support the project through donations, any help will be greatly appreciated.

ChangeLog

Added

added missing file recovery log from sbiectrl to sandman #425

Imminent recovery window will now auto close when all files are recovered #1498

the imminent recovery window of sandman is now by default alway on top like in sbiectrl this can be disabled with "Options/RecoveryOnTop=n" #1465

added option to toggle Imminent recovery from the presets sub menu #1653

added option to disable file recovery and or message pop up globally

added per box refresh opzion #1945

Changed

desktop security workaround used for chrome, firefox and acrobat can now be enabled for all processes using "UseSbieDeskHack=y"

inproved double click behavioure #1935

box size info is refreshed on file recovery

Fixed

fixed issue with unnececery sandboxie config reloads introduced in 1.1.1

fixed issue with recovery window focus #1374

fixed issues with desktop objects introduced in 1.1.1 #1934

fixed issues with edge startup boost using a gpo preset

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.56.2.exe(2.67 MB)
Sandboxie-Classic-x86-v5.56.2.exe(2.10 MB)
Sandboxie-Plus-x64-v1.1.2.exe(17.24 MB)
Sandboxie-Plus-x86-v1.1.2.exe(14.98 MB)
1.1.1(Jun 7, 2022)
This is an experimental release it changes how sandboxie marks deleted host files as deleted, instead of creating dummy entries it uses an internal data structure to keep the stat of changes to the host file system. With the new mechanics it is possible to rename folders and keys properly. This new behavior needs to be enabled by specifying UseFileDeleteV2=y sand UseRegDeleteV2=y in later builds this will be enabled by default, hence please test this pre release build and report back if there are any issues.

This build also adds a new UI functionality, sandman.exe now monitors the size of sandboxes and reports it in the info column, this functionality needs to be enabled in the global settings.

Last but not least this build reduces the cpu usage of sandman.exe a lot.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

You can support the project through donations, any help will be greatly appreciated.

ChangeLog

Added

compatibility templates can now be viewed from the settings window #1891

the refresh command is now bound to F5 #1885

added more first start wizard options

added option to permanently disable immediate recovery for any given box when it opens #1478

double click on the path column now opens the box root in explorer #1924

Changed

changed Move Box behaviour #1879

improved implementation of the PreferExternalManifest option

Win32k hooks are now by default only used for Edge and Chromium apps as they cause issues with other software #1902 #1912 #1897

"AllowBoxedJobs=y" is now the default behaviour

Fixed

fixed Edge issue with Windows 11 after KB5014019

fixed issues with the new delete V2 mechanism when using "SeparateUserFolders=y" #1885

fixed credential issue #1770

fixed force process priorities #1883

fixed issues with the new delete V2 mechanism

fixed issue with the Windows 11 menu on older Windows builds 1877

refresh now works without WatchBoxSize option #1885

fixed crash issue with WatchBoxSize=true #1885

fixed issue with recovery folder paths #1840

fixed issues with Sbie desktop and wndStation affecting Acrobat Reader #1863

fixed issues with box grouping #1921 #1920

fixed issues when changing language #1914

fixed issue with BreakoutFolder #1908

fixed issue with SbieDll.dll for x86 exception handling

fixed issues with application-specific hives (RegLoadAppKey) affecting Visual Studio #1576 #1452

Source code(tar.gz)
Source code(zip)
Sandboxie-Classic-x64-v5.56.1.exe(2.66 MB)
Sandboxie-Classic-x86-v5.56.1.exe(2.10 MB)
Sandboxie-Plus-x64-v1.1.1.exe(17.15 MB)
Sandboxie-Plus-x86-v1.1.1.exe(14.89 MB)