This build introduced a couple of major changes to Sandboxie's inner mechanics, all preset access directives have been moved to template entries. Sandboxie now fully isolates the NT namespace, reducing the potential attack surface. In addition, a couple of compatibility fixes should improve the use of Chrome and Chromium-based applications.

Last but not least, this build fixes a lot of issues, please see Changelog for more details.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

This build enables shadow stack for the SbieDll.dll improving on security on systems with gen11 Intel and Ryzen 5000 AMD CPUs.
This build restructures the Box options a bit and adds a whole new page allowing to control the file migration behavior as well as adding a couple SBIE messages to indicate file migration operations which may cause compatibility issues.
This build also provides a new Box creation wizard and improves on the box picker dialog.
It is now possible to create a new sandbox from the run sandboxes dialog and if need be set it as temporary, so that it gets removed after the program terminates. The box picker dialog was improved and contains now a search function to be accessed with Ctrl+F.
The boxes now created use by default the Delete V2 scheme in case you experience any issues with new boxes, this can be changed back in the box options to the old Delete V1, no old boxes will be migrated to Delete V2.
To improve on security the SandMan UI now indicates which processes have an administrative and which a system token.
Furthermore with this build it is possible to define file checker triggers to for example invoke a script to run a virus scan on a file before it is allowed to be recovered.

Last but not least this build fixes a lot of issues, please see Changelog for more details.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

This build improves the user experience by providing a new Box creation wizard and improving on the box picker dialog.
It is now possible to create a new sandbox from the run sandboxes dialog and if need be set it as temporary, so that it gets removed after the program terminates. The box picker dialog was improved and contains now a search function to be accessed with Ctrl+F.
The boxes now created use by default the Delete V2 scheme in case you experience any issues with new boxes, this can be changed back in the box options to the old Delete V1, no old boxes will be migrated to Delete V2.
The sandbox options have been restructured and the new layout is used by default, in the global settings under the appearance options it is possible to switch back to the old layout.
To improve on security the SandMan UI now indicates which processes have an administrative and which a system token.
Last but not least this build fixes a lot of issues, please see Changelog for more details.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

This build enables shadow stack for the SbieDll.dll improving on security on systems with gen11 Intel and Ryzen 5000 AMD CPUs.
As this required a change in the entry-point hooking scheme, compatibility should be thoroughly tested.
Further more a couple missing hooks have been added to improve on compatibility.
This build restructures the Box options a bit and adds a hole new page allowing to control the file migration behavior as well as adding a couple SBIE messages to indicate file migration operations which may cause compatibility issues.
Last but not least with this build it is possible to define file checker triggers to for example invoke a script to run a virus scan on a file before it is allowed to be recovered.

Note: as this is a pre-release the installers are not signed, only the driver is.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Added

• added OnFileRecovery trigger allowing to check files before recovering them #2202
• added more presets to sandbox options
  -- Note: these can only be changed when the box is empty
• added new file migration option page with additional settings
• added SBIE2113/SBIE2114/SBIE2115 message to indicate when files are not migrated due to presets

changed

• moved SeparateUserFolders checkbox from global settings to per box options

fixed

• resolved SbieDll.dll incompatibility with shadow stack and enabled /CETCOMPAT for SbieDll.dll #2559
• added missing registry hooks to improve compatibility with newer applications
• fixed permission issue with registry entries in privacy mode boxes

This is a maintenance release, it introduces minor changes and fixes a few issues.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Added

• added option to the classic ui to apply a supporter certificate

Changed

• time limited certificates now have 1 extra free month of validity, to improve the renewal expirience

Fixed

• fixed issue with Hebrew language (Classic UI) #2608
• fixed issue with startmenu integration and snapshots

Improved trace log and fixed a few bugs.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Changed

• reworked trace log retrival to greately improving performance
• improved list/tree finder
• improved trace logging
• enabled drop admin rights option for compartment style boxes
  -- Note: programs started unsandboxed can not have rights dropped, but UAC prompts and elevation from within the sandboxed are blocked

Fixed

• fixed potential BSOD issue in the driver
• fixed crash in in trace log #2599
• fixed tray issue 2600 (okrc)
• fixed issues with shortcuts #2601 (okrc)

This build fixed a couple issues with ARM64 and massively improves in the trace logging functionality. Sandboxie's core components can now log syscalls in user mode, hence syscall tracing is available also in compartment type boxes as well as for all win32 syscalls.
Further more the Trace Log in the Plus UI has been massively reworked it can now handle 10 Million log lines in under 1 second.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Added

• added user mode syscall tracing, now system calls can be logged also in compartment type boxes as well as all Win32k syscalls

Changed

• reworked trace log model, now it can load over 10e6 entries in under 1 second
• ApiLog support is now hidden from the trace UI when the appropriate DLLs are missing

Fixed

• fixed issue with Microsoft Edge in a security enhanced box #2571
• opened OpenIpcPath=\{BEC19D6F-D7B2-41A8-860C-8787BB964F2D} on ARM64 systems
• fixed incompatibility with Windows 11 21H2 ARM64 #2431

This is a maintenance release fixing various bugs.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Added

• added option to disable sandbox clean-up on startup #2553
• added contribution guidelines in the Help menu for both Plus and Classic UIs #2551

Fixed

• fixed issue with auto delete sandbox on SandMan startup #2555
• fixed issue with Windows 11 context menu when SandMan was not already running #2284
• fixed issue with the display about cmbDefault #2560 (okrc)
• fixed issue with color inaccuracy #2570 (okrc)
• fixed issue with Templates.ini loading on first start #2574
• fixed Cyberpunk 2077 not being able to load mods when sandboxed
• fixed performance issue in games
• fixed FFS hooking issue observed in Windows 11 ARM64 Build 22621.819

This is a maintenance release fixing various bugs.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

[1.6.3 / 5.61.3] - 2022-12-21

Changed

• improved Network Location Awareness template

[1.6.2b / 5.61.2] - 2022-12-21

Fixed

• fixed issue with update label when "version update" is set to "ignore"
• fixed issue with wow64 thunking on 32 bit windows 10 systems #2546
• fixed on reboot auto clean up boxes are nto cleared #2531
  -- Note: a clean up is now done after each reboot
• fixed issue with Network Location Awareness under windows 11 #2530
• fixed issues with recovery window #2458

[1.6.2a / 5.61.2] - 2022-12-19

Fixed

• Fixed crash issue in Vintage UI introduced in 1.6.1a

This build introduces a couple of quality of life improvements,

• the ability to suppress notification when gaming
• a global setting to add run entries to all boxes
• an option to select a custom icon for the sandbox added to the color slider in the box options
  

It fixed 12 issues and introduces a new update mechanism which allows to update individual files.

On the "Support Tab" in the "Global Options" the user can now choose from the following release channels:

1. Stable - GitHub Releases
2. Preview - GitHub Pre-Releases

There the user can also select how to behave when a "New Version" (where an installer is available) or a "Version Update" (where only individual files of the existing installation will be updated) is found.
For a "New Version" the following options are available: Notify, Download & Notify, Download & Install
For a "Version Update" the following options are available: Ignore, Notify, Download & Notify, Download & Install
There is no "Ignore" option for "New Version" as that is covered by disabling check for updates.

In the "Stable" channel check for "Version Update" is only available to supporters with a valid certificate. In this channel all updates are signed and consists of the latest compatibility templates and urgent bug-fixes and translations.

In the "Preview" channel the "Version Update" consist of unsigned test builds (except the signed driver) released every few days (like for example 1.6.0,1.6.1a and 1.6.1b) as here the updates contain not only half tested fixes but also new functionality which may not yet be free of bugs.

Furthermore installers have been updated with the ability to download the latest Templates.ini and translations when installing.

[1.6.2 / 5.61.2] - 2022-12-19

Added

• added template for Tencent TIM #2516 (thanks TooYoungTooSimp)

[1.6.1b / 5.61.1] - 2022-12-16

Added

• added game/presentation mode #2534
• added option to pick a custom box icon

Fixed

• fixed support setting page not showing version updates properly

[1.6.1a / 5.61.1] - 2022-12-07

Added

• added "Run Sandboxed" command to the sandbox menu
• DefaultBox can now be replaced with another sandbox #2445

Fixed

• improved fix for #2495

[1.6.1 / 5.61.1] - 2022-12-04

Added

• added global option to introduce run menu entries to all boxes

Changed

• reorganized command prompt entries #2451
• the "live" update channel is now part of the "preview" channel for which version updates can now be disabled

Fixed

• fixed issue with support setting drop-down menu multiplying #2502 (okrc)
• added translations folder as deprecated, to be removed upon installation #2500 (lufog)
• fixed issue with disk usage of hidden items not counted #2503 (okrc)
• fixed issue with boolean settings which can also be set per process #2495
• fixed issue with disk usage of hidden items not counted #2503

[1.6.0 / 5.61.0] - 2022-11-26

Added

• added ability to import/export boxes into 7z files
• added new update mechanism allowing for incremental updates
  -- used for nightly test builds in the "live" update channel
  -- used to update Templates.ini and translations after installation #1105

Changed

• restructured the box context menu a bit
• SandMan translations are now compressed and located in translations.7z

Fixed

• fixed issue with recycle icon not updated in time #2457 (thanks okrc)
• fixed issue with "index out of range" #2470 (thanks okrc)
• fixed issue starting SandMan after install #2284
• fixed encoding issue with my_version.h #2475
• fixed issue with empty group blinking sequence #2486 (thanks okrc)

This build fixes a few issues and improves on the new update mechanism.

[1.6.1 / 5.61.1] - 2022-12-04

Added

• added global option to introduce run menu entries to all boxes

Changed

• reorganized command prompt entries #2451
• the "live" update channel is now part of the "preview" channel for which Version Updates can now be disabled

Fixed

• fixed issue with support setting drop-down menu multiplying #2502 (okrc)
• added translations folder as deprecated, to be removed upon installation #2500 (lufog)
• fixed issue with disk usage of hidden items not counted #2503 (okrc)
• fixed issue with boolean settings which can also be set per process #2495
• fixed issue with disk usage of hidden items not counted #2503

This build fixes a few issues and introduces a new update mechanism which allows to update individual files.

On the "Support Tab" in the "Global Options" the user can now choose from 3 release channels:

1. Stable - GitHub Releases
2. Preview - GitHub Pre-Releases
3. Live - Test builds before they are mature enough to be a Pre-Release

There the user can also select how to behave when a "Full Update" (where an installer is available) or a "Version Revision" (where only individual files of the existing installation will be updated) is found.

The installers will offer the ability to download the latest Templates.ini and translations when installing.

The Live release channel will be available as "Version Revision" only.

[1.6.0 / 5.61.0] - 2022-11-26

Added

• added ability to import/export boxes into 7z files
• added new update mechanism allowing for incremental updates
  -- used for nightly test builds in the "live" update channel
  -- used to update Templates.ini and translations after installation #1105

Changed

• restructured the box context menu a bit
• SandMan translations are now compressed and located in translations.7z

Fixed

• fixed issue with recycle icon not updated in time #2457 (thanks okrc)
• fixed issue with "index out of range" #2470 (thanks okrc)
• fixed issue starting SandMan after install #2284
• fixed encoding issue with my_version.h #2475
• fixed issue with empty group blinking sequence #2486 (thanks okrc)

This build fixes various issues and minor improvements.

Note: if you encounter the new message SBIE2227, the right course of action is to enable 8.3 name support for all volume on your system. Use the following command in an elevated command prompt:

fsutil behavior set disable8dot3 0

This is not a new issue, but an old forgotten one.
The message has been added to bring attention to potential problems and offer instructions how to properly resolve the issue.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Added

• boxes set to auto-delete are now marked with a small red recycle symbol
• added Vietnamese language on Plus UI #2438

Fixed

• fixed issue with box options #2400
• fixed issue with Smart App Control #2341
• fixed issue with snapshots when using privacy boxes #2427
• fixed issue with m_pColorslider change not applied #2433 (thanks okrc)
• fixed issue with switching snapshots when the file panel is open
• fixed issue with file panel when an empty box is selected #2419
• fixed issue with menu icon not being disabled #2406
• fixed compatibility issue with Microsoft Edge #2312
• fixed UsePrivacyMode=y compatibility with Windows 7 #2423
• fixed minor issue during Sandboxie Plus uninstall #2421
• fixed BSOD issue when driver initialization fails (introduced in 1.5.1) #2431
• fixed fake paths being listed even if true paths do not exist #2403
• fixed issue with Firefox 106.x requesting write access to plugin executables #2391 #2411

This build fixes various issues and minor improvements.

Note: if you encounter the new message SBIE2227, the right course of action is to enable 8.3 name support for the volume you are using. Assuming you are using for example a RAM disk with the letter R:\, use the following command in an elevated command prompt:

fsutil behavior set disable8dot3 R: 0

This is not a new issue, but an old forgotten one.
The message has been added to bring attention to potential problems and offer instructions how to properly resolve the issue.

Note: this installers are not signed as its an um scheduled hotfix release

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Changed

• utility groups are now cleaned up automatically
• improved removal of leftovers #2409

Fixed

• fixed issues with SBIE2227 on virtual drives
• fixed issues on native 32-bit windows introduced with 1.5.0 #2401

This build fixes various issues and minor improvements.

Note: if you encounter the new message SBIE2227, the right course of action is to enable 8.3 name support for the volume you are using. Assuming you are using for example a RAM disk with the letter R:\, use the following command in an elevated command prompt:

fsutil behavior set disable8dot3 R: 0

This is not a new issue, but an old forgotten one.
The message has been added to bring attention to potential problems and offer instructions how to properly resolve the issue.

Known Issues

• the legacy 32-bit build does not work properly #2401 - use the last 1.4.2 build instead: https://github.com/sandboxie-plus/Sandboxie/releases/tag/v1.4.2

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Added

• added SBIE2227 warning when a sandbox is located on a volume without 8.3 name support
• added template for Tencent QQ #2367

Fixed

• fixed issues when renaming a sandbox with a custom path #2368
• properly fixed the Firefox 106 issue 46e9979
• fixed issue with alternative UI modes #2380
• fixed command line corruption with breakout processes #2377
• fixed issues with Privacy Enhanced box types #2342
• fixed issue with boxed object directory initialization #2342
• Sandboxie no longer leaves behind permanent directory objects
• FIXED SECURITY ISSUE ID-21 AlpcConnectPortEx was not filtered by the driver #2396
• fixed issues with program control options #2395

This build brings ARM64 support to sandboxie it supports windows 10 and 11 on ARM64, for non ARM users this build brings only a couple of fixes and minor improvements.
The ARM64 build is to be considered pre-release it may still contain bugs, while the regular Intel/AMD builds are regular bug fix releases where no issues are to be expected.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Added

• Added support for Windows on ARM64 #1321 #645
  -- Ported SbieDrv for ARM64
  -- Ported low level injection mechanism for ARM64/ARM64EC
  -- Ported syscall hooks for ARM64/ARM64EC
  -- Ported SbieDll.dll to ARM64/ARM64EC
  -- Note: ARM32 on ARM64 is not implemented and will terminate with message SBIE2338
  -- Note: When Sandboxie is running, it disables the use of CHPE binaries for x86 processes globally, this is required for the forced processes functionality. This behaviour can be disabled by adding the global option "DisableCHPE=n" to the Sandboxie.ini, then x86 processes started outside the sandbox, instead of being forced, will be terminated with message SBIE2338

fixed

• fixed issue with Win32 hooks in x86 applications
• Avoid window overlap when editing templates #2339 (thanks okrc)
• Fixed the wrong write of OpenWinClass setting UI #2347 (thanks okrc)
• Fixed issue about Local Template #2338 (thanks okrc)
• fixed Edge WebView compatybility issue #2350
• added provisional workaround for firefox 106 content process sandbox issue
• Fixed bug with Rename Sandbox 2358 (thanks okrc)

Changed

• reworked API compatibility check
• Break out process is now available for all users

This build fixes various compatibility and usability issues.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Added

• added tooltips to resource access modes #2300
• added UI option to control ApplyElevateCreateProcessFix #2302
• added message 2226 issued when a process may need 'ApplyElevateCreateProcessFix=y'

Changed

• Moved Restrictions tab from the new Security page back to the General page

Fixed

• fixed wrong button captions in the breakout process page
• fixed issue with saving box recovery options
• fixed the display problem of Sandman #2306 (thanks okrc)
• fixed theme not auto changing #2307
• fixed issue with saving sandman window state on windows shutdown
• fixed miscellaneous minor issues #2301
• fixed issue with MSEdge introduced in 106.x #2325
• fixed vivaldi hooking issue, UseVivaldiWorkaround is no longer needed #1783
• fixed issues with misc advanced options page #2315

This build improves the SandMan UI a lot and adds various new UX oriented features, it also makes the Sandboxie Plus code base Qt6 compatible, that said, the build currently uses still Qt5, a switch to Qt6 is planned for later. With regard to Qt6's no longer present Windows 7 support, this won't be an issue as a custom build of Qt6's base components will be used which are Windows 7 compatible.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

[1.4.1 / 5.59.1] - 2022-10-05

Added

• added dark title bar support for Windows 11 #2299

Changed

• in Sbie 5.28 and later WinInetCache is open, which breaks IE's source view, therefore it can now be disabled with 'CloseWinInetCache=y'

Fixed

• fixed WarnProcess and WarnFolder not working with certain configurations

[1.4.0 / 5.59.0] - 2022-09-30

Added

• added integrated run from start menu #1836
• added start menu enumeration #1570
• added UI for breakout processes #1904
• added option to customize double-click action per sandbox
• added new miscellaneous tab in the advanced options tab allowing to configure specific processes and other advanced options
• added "SeparateUserFolders=y" and "SandboxieLogon=y" to the sandbox options dialog
• added icons to the section labels on the option pages

Changed

• prepared for Qt 6.3.1
• restructured the general settings page
• restructured the sandbox options page, added a new tab and moved some of the advanced options there

Fixed

• fixed menu bar issue in Plus UI #2280 (thanks okrc)

This is a unsigned test build (that is the driver is signed but not the installers), it improves the SandMan UI a lot and adds various new UX oriented features, it also makes the Sandboxie Plus code base Qt6 compatible, that said, the build currently uses still Qt5, a switch to Qt6 is planned for later. With regard to Qt6's no longer present Windows 7 support, this won't be an issue as a custom build of Qt6's base components will be used which are Windows 7 compatible.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Added

• added integrated run from start menu #1836
• added start menu enumeration #1570
• added UI for breakout processes #1904
• added option to customize double-click action per sandbox
• added new miscellaneous tab in the advanced options tab allowing to configure specific processes and other advanced options
• added "SeparateUserFolders=y" and "SandboxieLogon=y" to the sandbox options dialog
• added icons to the section labels on the option pages

Changed

• prepared for Qt 6.3.1
• restructured the general settings page
• restructured the sandbox options page, added a new tab and moved some of the advanced options there

Fixed

• fixed menu bar issue in Plus UI #2280 (thanks okrc)

This build fixes various minor issues and adds some improvements.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Changelog

Added

• added localization to Windows 11 shell menu #2229

Changed

• improved recovery window behaviour in Plus UI #2266

Fixed

• fixed issues with stale data in Sandboxie-Plus.ini #2248 (thanks okrc)
• fixed issue with dummy manifests #2252
• fixed issue with XYplorer #2230
• fixed crash in Plus UI e9e21c2
• fixed m_pCleanUpButton is displayed empty when NoIcons=1 #2273 (thanks okrc)