FCU Exploit Protection

[Nix]

Hi admin,

Need some advice what I need to enabled/disable for FCU Exploit protection to work in SBIE, added Chrome in exploit protection ticked everything and now chrome doesn't work in SBIE. If possible also some setting for Firefox and Potplayer(installed in sandbox).

Thanks!

[Barb@Invincea]

Hello Nix,

I need more information in order to help you. Please provide all the required data from here:
viewtopic.php?f=11&t=19746

Regards,
Barb.-

[Nix]

Hi Barb,

Enable FCU exploit protection on chrome with all options ticked>on, after that chrome doesn't worked sandboxed. For now there are only a few that are enabled by default and SBIE is working just fine.

[Barb@Invincea]

Hello Nix,

I really need more information regarding what are you doing. What is this FCU protection that you are referring to?
What do you mean Chrome doesn't work? Are there any error messages? What's going on exactly?

Please, see my previous post and provide the required information so that I can set up the environment and test your issue.

Regards,
Barb.-

[Nix]

Hi Barb,

Sorry was using my win7 desktop last time, a bit lazy to open my laptop.

The Windows version number? (Win 10 x64, 1709)
Sandboxie version number (SBIE v5.22)
NAME & Version/build numbers of any applications involved? (Chrome v62)
Are you running antivirus/anti-malware software? (WD,Appguard, and Windows exploit protection)

Windows Defender Security Center > App & Browser Control > Exploit Protection
Currently Enabled(chrome works fine sandboxed):

• Control Flow Guard, Data Execution Prevention, Bottom-up ASLR, SEHOP, and Validate Heap Integrity

Just enabled Arbitrary Code Guard (ACG) and this is what I get. "SBIE2101 Object name not found: , error OpenProcess (C0000022) access=001FFFFF initialized=1". Just want to know which setting should be enabled, not too familiar with setting up exploit protection.

Regards,

[Barb@Invincea]

Hello Nix,

If I enable ACG under Exploit Protection ---> Program Settings
Then, I cannot launch Chrome at all outside Sandboxie. Does it work for you out of the Sandbox?

The default settings for Exploit Protection in Windows Defender do work fine with Sandboxie 5.22

Regards,
Barb.-

[Nix]

Hi Barb,

Ah I see haven't tried it outside sandboxie, try it out later.

Regards,
Nix