Unable to run DRM-protected programs (video games)

[maximedrn]

Describe what you noticed and did

When trying to run certain games in sandboxes, I often encounter a file corruption error. I've experienced this with two DRM-protected games (I assume), each with user-mode anti-cheat (BattlEye and Easy Anti-Cheat): Fortnite and Rainbow Six Siege.

Games and launchers are only installed in the sandbox. I don't know whether this is a false error on the part of anti-cheats, or whether it's a checksum problem due to the overlay that Sandboxie adds for sandbox programs.

• For the first game, I start it from Heroic Game Launcher (same behavior from Epic Games Launcher), the EAC client starts, its service too and raises the following error: the installation folder has been encrypted.
• For the second game, I start it from the official Ubisoft launcher, and get a similar error telling me that the game files are corrupted.
• I wanted to try with GTA 5 but the launcher doesn't launch (Cannot start gta, it may be because the rockstar launcher cannot start #2720), but I guess the problem will be the same.

Maybe it's a duplicate of #3218 and #1121

How often did you encounter it so far?

Every time.

Expected behavior

Games should launch normally.

Affected program

Fortnite/R6S

Download link

Not available

Where is the program located?

The program is installed only inside a sandbox (NOT in the real system anyway).

Did the program or any related process close unexpectedly?

No, not at all.

Crash dump

No response

What version of Sandboxie are you running now?

Sandboxie Plus 1.14.10 (64-bit)

Is it a new installation of Sandboxie?

I recently did a new clean installation.

Is it a regression from previous versions?

No response

In which sandbox type you have this problem?

In a standard isolation sandbox (yellow sandbox icon).

Can you reproduce this problem on a new empty sandbox?

I can confirm it also on a new empty sandbox.

What is your Windows edition and version?

Windows 11 Pro 24H2 (64-bit) with BitLocker on all drives

In which Windows account you have this problem?

An account with UAC protection set to Always notify.

Please mention any installed security software

No antivirus installed (Windows Defender deactivated and removed)

Did you previously enable some security policy settings outside Sandboxie?

No

Trace log

No response

Sandboxie.ini configuration

#
# Sandboxie configuration file
#

[GlobalSettings]
FileRootPath=C:\Program Files\Sandbox\%SANDBOX%
Template=OfficeLicensing
Template=WindowsLive
Template=WindowsRasMan
DefaultBox=DefaultBox
KeyRootPath=\REGISTRY\USER\Sandbox_%USER%_%SANDBOX%
IpcRootPath=\Sandbox\%USER%\%SANDBOX%\Session_%SESSION%

[UserSettings_11A60282]
SbieCtrl_AutoStartAgent=SandMan.exe -autorun
SbieCtrl_EnableAutoStart=n
BoxGrouping=:Microsoft_Office,Steam,Skydimo,DefaultBox,Ubisoft_Connect,Heroic

[Microsoft_Office]
Enabled=y
BlockNetworkFiles=y
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Desktop%
BorderColor=#02f6f6,ttl,6
Template=OpenBluetooth
Template=SkipHook
Template=FileCopy
Template=qWave
Template=BlockPorts
Template=LingerPrograms
Template=AutoRecoverIgnore
ConfigLevel=10
UseFileDeleteV2=y
UseRegDeleteV2=y
SeparateUserFolders=n
AutoRecover=y
MsiInstallerExemptions=y
RunCommand={"Command":"\"%BoxRoot%\\drive\\C\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE\"","Icon":"%BoxRoot%\\drive\\C\\Program Files\\Microsoft Office\\Root\\VFS\\Windows\\Installer\\{90160000-000F-0000-1000-0000000FF1CE}\\wordicon.exe,0","Name":"Word","WorkingDir":""}
RunCommand={"Command":"\"%BoxRoot%\\drive\\C\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE\"","Icon":"%BoxRoot%\\drive\\C\\Program Files\\Microsoft Office\\Root\\VFS\\Windows\\Installer\\{90160000-000F-0000-1000-0000000FF1CE}\\pptico.exe,0","Name":"PowerPoint","WorkingDir":""}
RunCommand={"Command":"\"%BoxRoot%\\drive\\C\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE\"","Icon":"%BoxRoot%\\drive\\C\\Program Files\\Microsoft Office\\Root\\VFS\\Windows\\Installer\\{90160000-000F-0000-1000-0000000FF1CE}\\xlicons.exe,0","Name":"Excel","WorkingDir":""}

[Steam]
Enabled=y
BlockNetworkFiles=y
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Desktop%
BorderColor=#02f6f6,ttl
Template=OpenBluetooth
Template=SkipHook
Template=FileCopy
Template=qWave
Template=BlockPorts
Template=LingerPrograms
Template=AutoRecoverIgnore
ConfigLevel=10
FileRootPath=D:\%SANDBOX%
UseFileDeleteV2=y
UseRegDeleteV2=y
SeparateUserFolders=n
AutoRecover=y
MsiInstallerExemptions=y
RunCommand={"Command":"steam://rungameid/945360","Icon":"%BoxRoot%\\drive\\C\\Program Files\\Steam\\steam\\games\\409663714339956c1a690a28b96c7a020f99ad28.ico,0","Name":"Among Us","WorkingDir":""}
RunCommand={"Command":"steam://rungameid/1966720","Icon":"%BoxRoot%\\drive\\C\\Program Files\\Steam\\steam\\games\\883604d98cee74b57c4921b52085df07d1dfb52e.ico,0","Name":"Lethal Company","WorkingDir":""}
RunCommand={"Command":"steam://rungameid/4000","Icon":"%BoxRoot%\\drive\\C\\Program Files\\Steam\\steam\\games\\01b545c997d68f6c4ac18ccef6c57d1d5d690e03.ico,0","Name":"Garry's Mod","WorkingDir":""}
RunCommand={"Command":"steam://rungameid/1943950","Icon":"%BoxRoot%\\drive\\C\\Program Files\\Steam\\steam\\games\\4f900d57e7b67d92a1c770a2b3c2d2488d65c094.ico,0","Name":"Escape the Backrooms","WorkingDir":""}
RunCommand={"Command":"\"C:\\Program Files\\Steam\\steam.exe\"","Icon":",0","Name":"Steam","WorkingDir":"C:\\Program Files\\Steam"}

[Skydimo]
Enabled=y
BlockNetworkFiles=y
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Desktop%
BorderColor=#02f6f6,ttl,6
Template=OpenBluetooth
Template=SkipHook
Template=FileCopy
Template=qWave
Template=BlockPorts
Template=LingerPrograms
Template=AutoRecoverIgnore
ConfigLevel=10
UseFileDeleteV2=y
UseRegDeleteV2=y
SeparateUserFolders=n
AutoRecover=y
MsiInstallerExemptions=y
AutoExec=C:\Program Files\Skydimo\SkyDimo.exe

[DefaultBox]
Enabled=y
BlockNetworkFiles=y
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Desktop%
BorderColor=#00FFFF,ttl
Template=OpenBluetooth
Template=SkipHook
Template=FileCopy
Template=qWave
Template=BlockPorts
Template=LingerPrograms
Template=AutoRecoverIgnore
ConfigLevel=10

[Ubisoft_Connect]
Enabled=y
BlockNetworkFiles=y
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Desktop%
BorderColor=#02f6f6,ttl,6
Template=OpenBluetooth
Template=SkipHook
Template=FileCopy
Template=qWave
Template=BlockPorts
Template=LingerPrograms
Template=AutoRecoverIgnore
Template=RpcPortBindingsExt
ConfigLevel=10
FileRootPath=D:\%SANDBOX%
UseFileDeleteV2=y
UseRegDeleteV2=y
SeparateUserFolders=n
AutoRecover=y
MsiInstallerExemptions=y
ApplyElevateCreateProcessFix=y
StartService=BattlEye Service

[Heroic]
Enabled=y
BlockNetworkFiles=y
RecoverFolder=%Desktop%
RecoverFolder=%Personal%
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
BorderColor=#02f6f6,ttl
Template=AutoRecoverIgnore
Template=LingerPrograms
Template=BlockPorts
Template=qWave
Template=FileCopy
Template=SkipHook
Template=OpenBluetooth
ConfigLevel=10
FileRootPath=D:\%SANDBOX%
UseFileDeleteV2=y
UseRegDeleteV2=y
SeparateUserFolders=n
AutoRecover=n
MsiInstallerExemptions=y
RunCommand={"Command":"heroic://launch/legendary/9d2d0eb64d5c44529cece33fe2a46482","Icon":",0","Name":"Grand Theft Auto V","WorkingDir":""}
RunCommand={"Command":"heroic://launch/gog/1423049311","Icon":"%BoxRoot%\\drive\\C\\Users\\Maxime\\Games\\Heroic\\Cyberpunk 2077\\REDprelauncher.exe,0","Name":"Cyberpunk 2077","WorkingDir":""}
StartService=Rockstar Service

[maximedrn]

By any chance, is there a setting in Sandboxie that can be changed to allow DRM checking to be carried out correctly?
I was thinking of Allow Raw Disk Read, but does this leave traces outside the sandbox?

[offhub]

See #234 (comment)