Closed Old-Mikey closed 3 years ago
isaak654
commented
3 years ago Also in the old Sophos and Classic versions of Sandboxie there is a facility in the UI to amend these folders but is mising in Sandboxie Plus
I agree, it would be awesome to have this in Plus:
isaak654
commented
3 years ago Running Windows 10 2004 64 Bit Desktop
I am evaluating Sandboxie-Plus and have found a bug
I use both Firefox and Thunderbird and have both profiles in a non default folder ie E:\Profiles\Firefox and E:\Profiles\Thunderbird
In order to enable Firefox bookmarks to be saved i need to add the following to Sandboxie.ini to reference this folder
[TemplateSettings]
Tmpl.Firefox=E:\Profiles\Firefox
However in Thunderbird if I do the same thing and add Tmpl.Thunderbird=E:\Profiles\Thunderbird
I have a problem when I open Thunderbird. All my Login info (email servers and passwords are missing) They are held in a file called logins.json held in the profile
To resolve the problem I have to move my Thunderbird profile to %APPDATA%
As far as I know, it's not advisable to copy the [TemplateSettings] section in sandboxie.ini: https://github.com/sandboxie-plus/Sandboxie/blob/3a3e5be67749c7d37c7bc1f2678cdd1df3e5ba02/Sandboxie/install/Templates.ini#L7-L8
About Thunderbird, I'm not entirely sure... please remove your previous thunderbird line in the OP and try to put these two lines inside [GlobalSettings] in sandboxie.ini:
Ovr.Tmpl.Thunderbird=E:\Profiles\Thunderbird
Ovr.Tmpl.Thunderbird:ExpectFile=xulstore.json
If they worked, please let me know about which line made the difference (trying to remove just the second one and see).
Old-Mikey
commented
3 years ago the following lines that I added is what the Sophos and Classic versions do automatically when you change the Folders default folder as you show above so it is OK I think all these entries do is overwrite the default settings in templates.ini which I agree should not be changed
[TemplateSettings]
Tmpl.Firefox=E:\Profiles\Firefox
I am afraid that the changes you suggest do not work
Old-Mikey
commented
3 years ago the following lines that I added is what the Sophos and Classic versions do automatically when you change the Folders default folder as you show above so it is OK I think all these entries do is overwrite the default settings in templates.ini which I agree should not be changed
[TemplateSettings]
Tmpl.Firefox=E:\Profiles\Firefox
I am afraid that the changes you suggest do not work
isaak654
commented
3 years ago the following lines that I added is what the Sophos and Classic versions do automatically when you change the Folders default folder as you show above so it is OK I think all these entries do is overwrite the default settings in templates.ini which I agree should not be changed
Thank you for the info, I never used the GUI for changing folders locations. My suggestion is based on the 'Overriding Variables' chapter in the official documentation here and it was provided by the original developer Tzur.
I am afraid that the changes you suggest do not work
Update: I think there is a similar issue here: https://github.com/sandboxie-plus/Sandboxie/issues/664 Tmpl.Thunderbird variable is basically a link to run multiple openfilepath(s) and one config posted there has your same path structure, same volume, but different names: E:\test\profile\
I would suggest to post your full ini configuration and to take a log and post it here. With Plus 0.7.3, you need to enable 'Trace Log' tab by opening 'Options' menu -> 'Trace Logging'. Once enabled, you can reproduce the issue. After reproducing it, just right click on one of the numerous entries -> 'Copy Panel' to copy the full log.
nik-gr
commented
3 years ago It is the same issue with #664 . Your places.sqlite gets updated because of the FileCopy template that is automatically placed in all sandboxes, it does not need anything extra. Are you using templates/application compatibility options? If not the setting you changed shouldn't make any difference Try to use openfilepath option to get direct access to the related files (in my case that does not work though)
Old-Mikey
commented
3 years ago See below my Sandboxie.ini and Trace log I have disguised my sensitive info
I have used the follwing as they do reference the correct templates Thanks for the documentation I was not aware of it
Ovr.Tmpl.Thunderbird=E:\Profiles\Thunderbird Ovr.Tmpl.Firefox=E:\Profiles\Firefox
Thunderbird downloads the mail OK from E:\Profiles\Thunderbird but then prompts me to enter all my account and password info which is missing
[GlobalSettings]
FileRootPath=\??\%SystemDrive%\Sandbox\%USER%\%SANDBOX% SeparateUserFolders=y KeyRootPath=\REGISTRY\USER\Sandbox%USER%%SANDBOX% IpcRootPath=\Sandbox\%USER%\%SANDBOX%\Session_%SESSION% EditAdminOnly=n ForceDisableAdminOnly=n ForgetPassword=n Template=WindowsRasMan Template=WindowsLive Template=RpcPortBindings Template=OfficeLicensing Ovr.Tmpl.Thunderbird=E:\Profiles\Thunderbird Ovr.Tmpl.Firefox=E:\Profiles\Firefox
[UserSettings_085C01A7]
SbieCtrl_AutoStartAgent=SandMan.exe SbieCtrl_EnableAutoStart=y
[DefaultBox]
Enabled=y ConfigLevel=8 AutoRecover=y BlockNetworkFiles=y RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}% RecoverFolder=%Personal% RecoverFolder=%Desktop% BorderColor=#00FFFF,ttl Template=SkipHook Template=FileCopy Template=qWave Template=BlockPorts Template=LingerPrograms Template=Chrome_Phishing_DirectAccess Template=Firefox_Phishing_DirectAccess Template=AutoRecoverIgnore
[Firefox]
Enabled=y
ConfigLevel=8
AutoRecover=y
RecoverFolder=E:\Downloads Shell
BlockNetworkFiles=y
Template=Firefox_Passwords_DirectAccess
Template=SkipHook
Template=FileCopy
Template=qWave
Template=BlockPorts
Template=LingerPrograms
Template=Chrome_Phishing_DirectAccess
Template=Firefox_Phishing_DirectAccess
Template=AutoRecoverIgnore
Template=Firefox_Bookmarks_DirectAccess
Template=Firefox_Force
BorderColor=#00ffff,ttl,6
BoxNameTitle=y
BlockNetParam=y
DropAdminRights=y
ClosePrintSpooler=n
OpenPrintSpooler=n
AllowSpoolerPrintToFile=y
CopyLimitKb=81920
CopyLimitSilent=n
NeverDelete=n
AutoDelete=y
ProcessGroup=
[Thunderbird]
Enabled=y ConfigLevel=8 AutoRecover=y BlockNetworkFiles=y RecoverFolder=E:\Downloads Shell BorderColor=#00FFFF,ttl Template=Thunderbird Template=qWave Template=BlockPorts Template=LingerPrograms Template=Chrome_Phishing_DirectAccess Template=Firefox_Phishing_DirectAccess Template=AutoRecoverIgnore Template=SkipHook Template=FileCopy DropAdminRights=y ForceProcess=thunderbird.exe
|Name| |Process ID| |Title| |Status| |Start Time| |Path / Command Line|
Thunderbird Enhanced Isolation, No Admin C:\Sandbox**\Thunderbird
_ thunderbird.exe 12332 [#] Inbox -**@**.co.uk - Mozilla Thunderbird [#] Running 15:39:10 "C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe" -p
_ SandboxieRpcSs.exe 3328 Running 15:39:03 "C:\Program Files\Sandboxie-Plus\SandboxieRpcSs.exe"
__ SandboxieDcomLaunch.exe 12348 Running 15:39:03 "C:\Program Files\Sandboxie-Plus\SandboxieDcomLaunch.exe"
Firefox Empty, Enhanced Isolation, No INet, No Admin C:\Sandbox**\Firefox
DefaultBox Normal C:\Sandbox**\DefaultBox
isaak654
commented
3 years ago With Plus 0.7.3, you need to enable 'Trace Log' tab by opening 'Options' menu -> 'Trace Logging'. Once enabled, you can reproduce the issue. After reproducing it, just right click on one of the numerous entries -> 'Copy Panel' to copy the full log.
@Old-Mikey I'm sorry, but it's the wrong log. You need to copy the log from the Trace Log tab:
If you decide to paste the log directly here, make sure to use the backticks around it, because Github tends to cut off special characters. An example here: https://docs.github.com/en/github/writing-on-github/creating-and-highlighting-code-blocks
Old-Mikey
commented
3 years ago Here is my Tracelog
|Process| |Type| |Status| |Value|
thunderbird.exe (2200, 10736) - 11:29:43.258 Pipe open \Device\Afd
thunderbird.exe (2200, 3964) - 11:29:43.258 Pipe open (3) \Device\Afd
thunderbird.exe (2200, 10736) - 11:29:43.258 Pipe open \Device\Afd
thunderbird.exe (2200, 8876) - 11:29:43.008 Pipe Open \Device\Afd
thunderbird.exe (2200, 3964) - 11:29:43.008 Pipe Open \Device\Afd
thunderbird.exe (2200, 8876) - 11:29:43.008 Pipe open \Device\Afd
thunderbird.exe (2200, 3964) - 11:29:43.008 Pipe open (2) \Device\Afd
thunderbird.exe (2200, 8876) - 11:29:43.008 Pipe open \Device\Afd
thunderbird.exe (2200, 8428) - 11:29:42.998 Ipc \BaseNamedObjects\F932B6C7-3A20-46A0-B8A0-8894AA421973
thunderbird.exe (2200, 11936) - 11:29:42.998 Ipc open \RPC Control\SbieSvcPort
thunderbird.exe (2200, 11936) - 11:29:42.998 Pipe \Device\HarddiskVolume5
thunderbird.exe (2200, 11936) - 11:29:42.998 Pipe \Device\MountPointManager
thunderbird.exe (2200, 11936) - 11:29:42.998 Pipe \Device\HarddiskVolume5
thunderbird.exe (2200, 11936) - 11:29:42.998 Pipe \Device\HarddiskVolume4
thunderbird.exe (2200, 11936) - 11:29:42.998 Pipe \Device\MountPointManager
thunderbird.exe (2200, 11936) - 11:29:42.998 Pipe \Device\HarddiskVolume4
thunderbird.exe (2200, 11936) - 11:29:42.998 Pipe \Device\MountPointManager
thunderbird.exe (2200, 11936) - 11:29:42.998 Pipe \Device\HarddiskVolume4
thunderbird.exe (2200, 5452) - 11:29:37.765 Ipc open \RPC Control\SbieSvcPort
firefox.exe (7004, 4352) - 11:29:24.445 WinClass closed Progman
firefox.exe (7004, 4352) - 11:29:24.445 WinClass $:explorer.exe
firefox.exe (7004, 4352) - 11:29:24.445 WinClass Progman
firefox.exe (7004, 8724) - 11:29:24.445 ComClass {C2F03A33-21F5-47FA-B4BB-156362A2F239} Immersive Shell
firefox.exe (7004, 8244) - 11:29:24.384 Pipe (9) \Device\MountPointManager
firefox.exe (7004, 4352) - 11:29:24.384 ComClass (9) {00021401-0000-0000-C000-000000000046} Shortcut
thunderbird.exe (2200, 9924) - 11:29:11.362 Ipc \Sessions\1\BaseNamedObjects\898HWNDInterface:1405f0
thunderbird.exe (2200, 9924) - 11:29:11.362 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:29:11.362 WinClass $:explorer.exe
thunderbird.exe (2200, 9924) - 11:29:11.362 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:29:11.362 Ipc \Sessions\1\BaseNamedObjects\898HWNDInterface:1405f0
thunderbird.exe (2200, 9924) - 11:28:53.321 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:53.321 WinClass $:explorer.exe
thunderbird.exe (2200, 9924) - 11:28:53.321 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:53.321 Ipc (2) \Sessions\1\BaseNamedObjects\898HWNDInterface:90294
thunderbird.exe (2200, 9924) - 11:28:53.321 WinClass MozillaWindowClass
thunderbird.exe (2200, 9924) - 11:28:51.315 Ipc \Sessions\1\BaseNamedObjects\898HWNDInterface:1703e4
thunderbird.exe (2200, 9924) - 11:28:51.315 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:51.315 WinClass $:explorer.exe
thunderbird.exe (2200, 9924) - 11:28:51.315 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:51.315 Ipc \Sessions\1\BaseNamedObjects\898HWNDInterface:1703e4
thunderbird.exe (2200, 9924) - 11:28:51.315 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:64:WilError_03_p0
thunderbird.exe (2200, 9924) - 11:28:51.315 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:64:WilError_03
thunderbird.exe (2200, 9924) - 11:28:51.285 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:51.285 WinClass $:explorer.exe
thunderbird.exe (2200, 9924) - 11:28:51.285 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:51.285 Ipc (2) \Sessions\1\BaseNamedObjects\898HWNDInterface:1405f0
thunderbird.exe (2200, 9924) - 11:28:51.285 WinClass MozillaWindowClass
thunderbird.exe (2200, 9924) - 11:28:51.274 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:51.274 WinClass $:explorer.exe
thunderbird.exe (2200, 9924) - 11:28:51.274 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:51.274 Ipc (2) \Sessions\1\BaseNamedObjects\898HWNDInterface:1703e4
thunderbird.exe (2200, 9924) - 11:28:51.274 WinClass (3) MozillaWindowClass
thunderbird.exe (2200, 9924) - 11:28:51.274 WinClass open (8) Shell_TrayWnd
thunderbird.exe (2200, 9924) - 11:28:51.244 Ipc \Sessions\1\BaseNamedObjects\898HWNDInterface:15064e
thunderbird.exe (2200, 9924) - 11:28:51.244 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:51.244 WinClass $:explorer.exe
thunderbird.exe (2200, 9924) - 11:28:51.244 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:51.244 Ipc \Sessions\1\BaseNamedObjects\898HWNDInterface:15064e
thunderbird.exe (2200, 9924) - 11:28:51.244 WinClass $:ReflectUI.exe
thunderbird.exe (2200, 9924) - 11:28:51.244 WinClass Afx:00007FF64DFE0000:0
thunderbird.exe (2200, 3964) - 11:28:49.832 Pipe open (7) \Device\Afd
thunderbird.exe (2200, 14248) - 11:28:49.771 Pipe open \Device\Afd
thunderbird.exe (2200, 3964) - 11:28:49.771 Pipe open (3) \Device\Afd
thunderbird.exe (2200, 14248) - 11:28:49.771 Pipe open \Device\Afd
thunderbird.exe (2200, 3964) - 11:28:49.771 Pipe open (5) \Device\Afd
thunderbird.exe (2200, 10736) - 11:28:49.771 Pipe open \Device\Afd
thunderbird.exe (2200, 3964) - 11:28:49.771 Pipe open \Device\Afd
thunderbird.exe (2200, 10736) - 11:28:49.761 Pipe open \Device\Afd
thunderbird.exe (2200, 9924) - 11:28:49.701 WinClass closed IPTip_Main_Window
thunderbird.exe (2200, 14248) - 11:28:49.300 Pipe open \Device\Afd
thunderbird.exe (2200, 3964) - 11:28:49.300 Pipe open \Device\Afd
thunderbird.exe (2200, 14248) - 11:28:49.300 Pipe open \Device\Afd
thunderbird.exe (2200, 9924) - 11:28:49.269 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:49.269 WinClass $:explorer.exe
thunderbird.exe (2200, 9924) - 11:28:49.269 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:49.269 Ipc (2) \Sessions\1\BaseNamedObjects\898HWNDInterface:15064e
thunderbird.exe (2200, 10736) - 11:28:49.269 Pipe open \Device\Afd
thunderbird.exe (2200, 3964) - 11:28:49.269 Pipe open \Device\Afd
thunderbird.exe (2200, 10736) - 11:28:49.269 Pipe open \Device\Afd
thunderbird.exe (2200, 9924) - 11:28:49.209 WinClass $:ReflectUI.exe
thunderbird.exe (2200, 9924) - 11:28:49.209 WinClass Afx:00007FF64DFE0000:0
thunderbird.exe (2200, 9924) - 11:28:49.209 WinClass $:ReflectUI.exe
thunderbird.exe (2200, 9924) - 11:28:49.209 WinClass Afx:00007FF64DFE0000:0
thunderbird.exe (2200, 8428) - 11:28:49.209 Ipc \BaseNamedObjects\F932B6C7-3A20-46A0-B8A0-8894AA421973
thunderbird.exe (2200, 9924) - 11:28:49.179 WinClass open (3) Shell_TrayWnd
thunderbird.exe (2200, 9924) - 11:28:49.179 WinClass MozillaDialogClass
thunderbird.exe (2200, 9924) - 11:28:49.149 Ipc \Sessions\1\BaseNamedObjects\898HWNDInterface:14064e
thunderbird.exe (2200, 9924) - 11:28:49.149 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:49.149 WinClass $:explorer.exe
thunderbird.exe (2200, 9924) - 11:28:49.149 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:49.149 Ipc \Sessions\1\BaseNamedObjects\898HWNDInterface:14064e
thunderbird.exe (2200, 9924) - 11:28:49.149 WinClass $:ReflectUI.exe
thunderbird.exe (2200, 9924) - 11:28:49.149 WinClass Afx:00007FF64DFE0000:0
thunderbird.exe (2200, 9924) - 11:28:49.046 ComClass Windows.Internal.Shell.Holographic.ContextIdentifier
thunderbird.exe (2200, 9924) - 11:28:49.046 ComClass {4CE576FA-83DC-4F88-951C-9D0782B4E376} UIHostNoLaunch Class
thunderbird.exe (2200, 9924) - 11:28:49.046 Ipc \Sessions\1\BaseNamedObjects\898HWNDInterface:14064e
thunderbird.exe (2200, 9924) - 11:28:49.046 ComClass Windows.UI.ViewManagement.InputPane
thunderbird.exe (2200, 9924) - 11:28:48.644 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:48.644 WinClass $:explorer.exe
thunderbird.exe (2200, 9924) - 11:28:48.644 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:48.644 Ipc (2) \Sessions\1\BaseNamedObjects\898HWNDInterface:14064e
thunderbird.exe (2200, 9924) - 11:28:48.584 WinClass closed IPTip_Main_Window
thunderbird.exe (2200, 9924) - 11:28:48.584 WinClass $:ReflectUI.exe
thunderbird.exe (2200, 9924) - 11:28:48.584 WinClass Afx:00007FF64DFE0000:0
thunderbird.exe (2200, 9924) - 11:28:48.584 WinClass $:ReflectUI.exe
thunderbird.exe (2200, 9924) - 11:28:48.584 WinClass Afx:00007FF64DFE0000:0
thunderbird.exe (2200, 9924) - 11:28:48.584 WinClass MozillaDialogClass
thunderbird.exe (2200, 9924) - 11:28:48.484 Ipc \Sessions\1\BaseNamedObjects\898HWNDInterface:13064e
thunderbird.exe (2200, 9924) - 11:28:48.484 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:48.484 WinClass $:explorer.exe
thunderbird.exe (2200, 9924) - 11:28:48.484 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:48.484 Ipc \Sessions\1\BaseNamedObjects\898HWNDInterface:13064e
thunderbird.exe (2200, 9924) - 11:28:48.484 WinClass $:ReflectUI.exe
thunderbird.exe (2200, 9924) - 11:28:48.484 WinClass Afx:00007FF64DFE0000:0
thunderbird.exe (2200, 9924) - 11:28:48.382 ComClass Windows.Internal.Shell.Holographic.ContextIdentifier
thunderbird.exe (2200, 9924) - 11:28:48.382 ComClass {4CE576FA-83DC-4F88-951C-9D0782B4E376} UIHostNoLaunch Class
thunderbird.exe (2200, 9924) - 11:28:48.382 Ipc \Sessions\1\BaseNamedObjects\898HWNDInterface:13064e
thunderbird.exe (2200, 9924) - 11:28:48.382 ComClass Windows.UI.ViewManagement.InputPane
thunderbird.exe (2200, 9924) - 11:28:47.880 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:47.880 WinClass $:explorer.exe
thunderbird.exe (2200, 9924) - 11:28:47.880 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:47.880 Ipc (2) \Sessions\1\BaseNamedObjects\898HWNDInterface:13064e
thunderbird.exe (2200, 9924) - 11:28:47.820 WinClass closed IPTip_Main_Window
thunderbird.exe (2200, 9924) - 11:28:47.820 WinClass $:ReflectUI.exe
thunderbird.exe (2200, 9924) - 11:28:47.820 WinClass Afx:00007FF64DFE0000:0
thunderbird.exe (2200, 9924) - 11:28:47.810 WinClass $:ReflectUI.exe
thunderbird.exe (2200, 9924) - 11:28:47.810 WinClass Afx:00007FF64DFE0000:0
thunderbird.exe (2200, 9924) - 11:28:47.800 WinClass MozillaDialogClass
thunderbird.exe (2200, 11932) - 11:28:47.700 Ipc open \RPC Control\SbieSvcPort
thunderbird.exe (2200, 9924) - 11:28:47.700 Ipc \Sessions\1\BaseNamedObjects\898HWNDInterface:12064e
thunderbird.exe (2200, 9924) - 11:28:47.700 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:47.700 WinClass $:explorer.exe
thunderbird.exe (2200, 9924) - 11:28:47.700 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:47.700 Ipc \Sessions\1\BaseNamedObjects\898HWNDInterface:12064e
thunderbird.exe (2200, 9924) - 11:28:47.700 WinClass $:ReflectUI.exe
thunderbird.exe (2200, 9924) - 11:28:47.700 WinClass Afx:00007FF64DFE0000:0
thunderbird.exe (2200, 9924) - 11:28:47.600 ComClass Windows.Internal.Shell.Holographic.ContextIdentifier
thunderbird.exe (2200, 9924) - 11:28:47.600 ComClass {4CE576FA-83DC-4F88-951C-9D0782B4E376} UIHostNoLaunch Class
SandboxieRpcSs.exe (13208, 7880) - 11:28:47.600 Pipe \Device\KsecDD
SandboxieRpcSs.exe (13208, 7880) - 11:28:47.600 Ipc Open \KnownDlls\bcrypt.dll
thunderbird.exe (2200, 9924) - 11:28:47.589 Ipc \Sessions\1\BaseNamedObjects\898HWNDInterface:12064e
thunderbird.exe (2200, 9924) - 11:28:47.589 ComClass Windows.UI.ViewManagement.InputPane
thunderbird.exe (2200, 9924) - 11:28:46.134 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02_p0
thunderbird.exe (2200, 9924) - 11:28:46.134 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02
thunderbird.exe (2200, 9924) - 11:28:46.134 Ipc open \BaseNamedObjects\[CoreUI]-PID(2948)-TID(4816) bbadbfdd-f0a0-4203-be71-a5e9ff457bc8
thunderbird.exe (2200, 9924) - 11:28:46.134 Ipc Open \BaseNamedObjects\[CoreUI]-PID(2200)-TID(9924) 0f560c1a-5344-4baa-b2d1-dc7b6be260ba
thunderbird.exe (2200, 9924) - 11:28:46.134 WinClass UserAdapterWindowClass
thunderbird.exe (2200, 9924) - 11:28:46.134 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02_p0
thunderbird.exe (2200, 9924) - 11:28:46.134 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02
thunderbird.exe (2200, 9924) - 11:28:46.134 Ipc open \BaseNamedObjects\CoreMessagingRegistrar
thunderbird.exe (2200, 9924) - 11:28:46.134 WinClass closed IPTip_Main_Window
thunderbird.exe (2200, 9924) - 11:28:46.134 WinClass $:ReflectUI.exe
thunderbird.exe (2200, 9924) - 11:28:46.134 WinClass Afx:00007FF64DFE0000:0
thunderbird.exe (2200, 9924) - 11:28:46.134 WinClass $:ReflectUI.exe
thunderbird.exe (2200, 9924) - 11:28:46.134 WinClass Afx:00007FF64DFE0000:0
thunderbird.exe (2200, 9924) - 11:28:46.134 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:46.134 WinClass $:explorer.exe
thunderbird.exe (2200, 9924) - 11:28:46.134 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:46.134 Ipc (2) \Sessions\1\BaseNamedObjects\898HWNDInterface:12064e
thunderbird.exe (2200, 9924) - 11:28:46.134 WinClass (3) MozillaDialogClass
thunderbird.exe (2200, 3964) - 11:28:45.973 Pipe open (3) \Device\Afd
thunderbird.exe (2200, 14248) - 11:28:45.943 Pipe open \Device\Afd
thunderbird.exe (2200, 3964) - 11:28:45.943 Pipe open \Device\Afd
thunderbird.exe (2200, 14248) - 11:28:45.943 Pipe open \Device\Afd
thunderbird.exe (2200, 3964) - 11:28:45.943 Pipe open \Device\Afd
thunderbird.exe (2200, 8876) - 11:28:45.943 Pipe Open \Device\Afd
thunderbird.exe (2200, 3964) - 11:28:45.943 Pipe Open \Device\Afd
thunderbird.exe (2200, 8876) - 11:28:45.943 Pipe open \Device\Afd
thunderbird.exe (2200, 3964) - 11:28:45.933 Pipe open (2) \Device\Afd
thunderbird.exe (2200, 8876) - 11:28:45.933 Pipe open \Device\Afd
thunderbird.exe (2200, 3964) - 11:28:45.913 Pipe open (3) \Device\Afd
thunderbird.exe (2200, 10736) - 11:28:45.903 Pipe open (3) \Device\Afd
thunderbird.exe (2200, 8876) - 11:28:45.843 Pipe open \Device\Afd
thunderbird.exe (2200, 3964) - 11:28:45.843 Pipe open \Device\Afd
thunderbird.exe (2200, 8876) - 11:28:45.843 Pipe open \Device\Afd
thunderbird.exe (2200, 3964) - 11:28:45.843 Pipe open (3) \Device\Afd
thunderbird.exe (2200, 14248) - 11:28:45.843 Pipe open \Device\Afd
thunderbird.exe (2200, 3964) - 11:28:45.843 Pipe open \Device\Afd
thunderbird.exe (2200, 14248) - 11:28:45.843 Pipe open \Device\Afd
thunderbird.exe (2200, 8876) - 11:28:45.843 Pipe open (3) \Device\Afd
thunderbird.exe (2200, 9924) - 11:28:45.642 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:45.642 WinClass $:explorer.exe
thunderbird.exe (2200, 9924) - 11:28:45.642 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:45.642 Ipc (2) \Sessions\1\BaseNamedObjects\898HWNDInterface:1f05e2
thunderbird.exe (2200, 9924) - 11:28:45.642 WinClass MozillaWindowClass
thunderbird.exe (2200, 14248) - 11:28:45.642 Pipe open (3) \Device\Afd
thunderbird.exe (2200, 9924) - 11:28:45.642 WinClass open (3) Shell_TrayWnd
thunderbird.exe (2200, 9924) - 11:28:45.642 WinClass MailBiffNotificationMessageWindow
thunderbird.exe (2200, 14248) - 11:28:45.642 Ipc open \RPC Control\DNSResolver
thunderbird.exe (2200, 14248) - 11:28:45.642 Pipe open (5) \Device\Afd
thunderbird.exe (2200, 8428) - 11:28:45.542 Ipc open \RPC Control\SbieSvcPort
thunderbird.exe (2200, 8428) - 11:28:45.542 Ipc \BaseNamedObjects\F932B6C7-3A20-46A0-B8A0-8894AA421973
thunderbird.exe (2200, 13032) - 11:28:45.542 Ipc open \RPC Control\LRPC-68bea72334ffa4592b
thunderbird.exe (2200, 10288) - 11:28:45.542 Ipc open \RPC Control\SbieSvcPort
thunderbird.exe (2200, 13032) - 11:28:45.542 Ipc open \RPC Control\SbieSvcPort
thunderbird.exe (2200, 12380) - 11:28:45.542 Pipe open \Device\Afd
thunderbird.exe (2200, 13032) - 11:28:45.512 Ipc open \RPC Control\webcache_{031b98cf-4a69-4c31-ab42-fd9b3c199407}_S-1-5-21-556717682-2009023678-3235534558-1001
thunderbird.exe (2200, 13032) - 11:28:45.512 Ipc open \RPC Control\lsasspirpc
thunderbird.exe (2200, 13032) - 11:28:45.512 Ipc open \Security\LSA_AUTHENTICATION_INITIALIZED
thunderbird.exe (2200, 3444) - 11:28:45.412 WinClass closed Progman
thunderbird.exe (2200, 3444) - 11:28:45.412 WinClass $:explorer.exe
thunderbird.exe (2200, 3444) - 11:28:45.412 WinClass Progman
thunderbird.exe (2200, 3444) - 11:28:45.412 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:64:WilError_03_p0
thunderbird.exe (2200, 3444) - 11:28:45.412 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:64:WilError_03
thunderbird.exe (2200, 9924) - 11:28:45.382 Ipc \Sessions\1\BaseNamedObjects\898HWNDInterface:1504ac
thunderbird.exe (2200, 9924) - 11:28:45.382 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:45.382 WinClass $:explorer.exe
thunderbird.exe (2200, 9924) - 11:28:45.382 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:45.382 Ipc \Sessions\1\BaseNamedObjects\898HWNDInterface:1504ac
thunderbird.exe (2200, 9924) - 11:28:45.312 Pipe \Device\MountPointManager
thunderbird.exe (2200, 9924) - 11:28:45.312 Pipe \Device\NamedPipe\srvsvc
thunderbird.exe (2200, 9924) - 11:28:45.302 File closed \Device\HarddiskVolume7\Video Shell\desktop.ini
thunderbird.exe (2200, 9924) - 11:28:45.302 File Closed \Device\HarddiskVolume7\Video Shell
thunderbird.exe (2200, 9924) - 11:28:45.302 File closed \Device\HarddiskVolume5\Camera Shell\desktop.ini
thunderbird.exe (2200, 9924) - 11:28:45.302 File Closed \Device\HarddiskVolume5\Camera Shell
thunderbird.exe (2200, 9924) - 11:28:45.292 File closed \Device\HarddiskVolume5\Music Shell\desktop.ini
thunderbird.exe (2200, 9924) - 11:28:45.292 File Closed \Device\HarddiskVolume5\Music Shell
thunderbird.exe (2200, 9924) - 11:28:45.292 File closed \Device\HarddiskVolume5\Documents Shell\desktop.ini
thunderbird.exe (2200, 9924) - 11:28:45.292 File Closed \Device\HarddiskVolume5\Documents Shell
thunderbird.exe (2200, 8628) - 11:28:45.272 Pipe (9) \Device\MountPointManager
thunderbird.exe (2200, 9924) - 11:28:45.272 Ipc \Sessions\1\BaseNamedObjects\windows_shell_global_counters
thunderbird.exe (2200, 9924) - 11:28:45.272 Ipc \BaseNamedObjects\windows_shell_global_counters
thunderbird.exe (2200, 9924) - 11:28:45.272 Ipc \Sessions\1\BaseNamedObjects\C:*Users*mike*AppData*Local*Microsoft*Windows*Caches*{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000035.db
thunderbird.exe (2200, 12380) - 11:28:45.272 Pipe \Device\MountPointManager
thunderbird.exe (2200, 12380) - 11:28:45.272 Pipe \Device\HarddiskVolume5
thunderbird.exe (2200, 9924) - 11:28:45.272 Ipc \Sessions\1\BaseNamedObjects\C:*Users*mike*AppData*Local*Microsoft*Windows*Caches*cversions.1.ro
thunderbird.exe (2200, 12380) - 11:28:45.272 Pipe \Device\MountPointManager
thunderbird.exe (2200, 12380) - 11:28:45.272 Pipe \Device\HarddiskVolume4
thunderbird.exe (2200, 12380) - 11:28:45.272 File closed \Device\HarddiskVolume7\
thunderbird.exe (2200, 12380) - 11:28:45.272 Pipe closed \Device\HarddiskVolume7
thunderbird.exe (2200, 12380) - 11:28:45.272 Pipe \Device\MountPointManager
thunderbird.exe (2200, 12380) - 11:28:45.272 Pipe \Device\HarddiskVolume1
thunderbird.exe (2200, 12380) - 11:28:45.272 Pipe \Device\MountPointManager
thunderbird.exe (2200, 12380) - 11:28:45.272 Pipe \Device\HarddiskVolume2
thunderbird.exe (2200, 12380) - 11:28:45.272 File closed \Device\HarddiskVolume8\
thunderbird.exe (2200, 12380) - 11:28:45.272 Pipe closed \Device\HarddiskVolume8
thunderbird.exe (2200, 12380) - 11:28:45.272 Pipe \Device\MountPointManager
thunderbird.exe (2200, 12380) - 11:28:45.272 Pipe \Device\00000035
thunderbird.exe (2200, 9924) - 11:28:45.272 Pipe \Device\MountPointManager
thunderbird.exe (2200, 9924) - 11:28:45.272 Pipe \Device\HarddiskVolume4
thunderbird.exe (2200, 3444) - 11:28:45.242 ComClass {00021401-0000-0000-C000-000000000046} Shortcut
thunderbird.exe (2200, 3444) - 11:28:45.242 Ipc \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db
thunderbird.exe (2200, 3444) - 11:28:45.242 Ipc \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db
thunderbird.exe (2200, 3444) - 11:28:45.242 Ipc \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db
thunderbird.exe (2200, 3444) - 11:28:45.242 Ipc \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db
thunderbird.exe (2200, 3444) - 11:28:45.242 Ipc \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
thunderbird.exe (2200, 3444) - 11:28:45.242 Ipc \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
thunderbird.exe (2200, 3444) - 11:28:45.242 Ipc \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db
thunderbird.exe (2200, 3444) - 11:28:45.242 Ipc \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db
thunderbird.exe (2200, 3444) - 11:28:45.242 Ipc \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db
thunderbird.exe (2200, 3444) - 11:28:45.242 Ipc \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db
thunderbird.exe (2200, 3444) - 11:28:45.242 Ipc \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
thunderbird.exe (2200, 3444) - 11:28:45.242 Ipc \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
thunderbird.exe (2200, 3444) - 11:28:45.242 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02_p0
thunderbird.exe (2200, 3444) - 11:28:45.242 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02
thunderbird.exe (2200, 3444) - 11:28:45.242 Ipc \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
thunderbird.exe (2200, 3444) - 11:28:45.242 Ipc \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
thunderbird.exe (2200, 3444) - 11:28:45.232 ComClass {00021401-0000-0000-C000-000000000046} Shortcut
thunderbird.exe (2200, 3444) - 11:28:45.232 Ipc open \RPC Control\SbieSvcPort
thunderbird.exe (2200, 9924) - 11:28:45.232 WinClass open (3) Shell_TrayWnd
thunderbird.exe (2200, 9924) - 11:28:45.082 WinClass $:ReflectUI.exe
thunderbird.exe (2200, 9924) - 11:28:45.082 WinClass Afx:00007FF64DFE0000:0
thunderbird.exe (2200, 9924) - 11:28:45.072 WinClass $:ReflectUI.exe
thunderbird.exe (2200, 9924) - 11:28:45.072 WinClass Afx:00007FF64DFE0000:0
thunderbird.exe (2200, 10460) - 11:28:44.171 Ipc open \RPC Control\SbieSvcPort
thunderbird.exe (2200, 9924) - 11:28:44.141 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:44.141 WinClass $:explorer.exe
thunderbird.exe (2200, 9924) - 11:28:44.141 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:44.141 Ipc (2) \Sessions\1\BaseNamedObjects\898HWNDInterface:707d8
thunderbird.exe (2200, 9924) - 11:28:43.841 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:43.841 WinClass $:explorer.exe
thunderbird.exe (2200, 9924) - 11:28:43.841 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:43.841 Ipc (2) \Sessions\1\BaseNamedObjects\898HWNDInterface:1704c0
thunderbird.exe (2200, 9924) - 11:28:43.841 WinClass MozillaWindowClass
thunderbird.exe (2200, 9924) - 11:28:43.781 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:43.781 WinClass $:explorer.exe
thunderbird.exe (2200, 9924) - 11:28:43.781 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:43.781 Ipc (2) \Sessions\1\BaseNamedObjects\898HWNDInterface:1504ac
thunderbird.exe (2200, 9924) - 11:28:43.781 WinClass MozillaWindowClass
thunderbird.exe (2200, 9924) - 11:28:43.721 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:43.721 WinClass $:explorer.exe
thunderbird.exe (2200, 9924) - 11:28:43.721 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:43.721 Ipc (2) \Sessions\1\BaseNamedObjects\898HWNDInterface:3e0500
thunderbird.exe (2200, 9924) - 11:28:43.721 WinClass MozillaWindowClass
thunderbird.exe (2200, 9924) - 11:28:43.721 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:43.721 WinClass $:explorer.exe
thunderbird.exe (2200, 9924) - 11:28:43.721 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:43.721 Ipc (2) \Sessions\1\BaseNamedObjects\898HWNDInterface:2406f4
thunderbird.exe (2200, 9924) - 11:28:43.721 WinClass MozillaWindowClass
thunderbird.exe (2200, 9924) - 11:28:43.721 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:43.721 WinClass $:explorer.exe
thunderbird.exe (2200, 9924) - 11:28:43.711 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (2200, 9924) - 11:28:43.711 Ipc (2) \Sessions\1\BaseNamedObjects\898HWNDInterface:100420
thunderbird.exe (2200, 9924) - 11:28:43.701 WinClass (3) MozillaDropShadowWindowClass
thunderbird.exe (2200, 9924) - 11:28:43.701 WinClass open OleMainThreadWndClass
thunderbird.exe (2200, 9924) - 11:28:43.701 WinClass $:SbieSvc.exe
thunderbird.exe (2200, 9924) - 11:28:43.701 WinClass OleMainThreadWndClass
thunderbird.exe (2200, 9924) - 11:28:43.350 Pipe \Device\DeviceApi
thunderbird.exe (2200, 9924) - 11:28:43.350 ComClass {BCDE0395-E52F-467C-8E3D-C4579291692E} MMDeviceEnumerator class
thunderbird.exe (2200, 9924) - 11:28:43.350 ComClass Windows.UI.Core.CoreWindow
thunderbird.exe (2200, 9924) - 11:28:43.350 Ipc open \RPC Control\AudioClientRpc
thunderbird.exe (2200, 9924) - 11:28:43.350 ComClass {BCDE0395-E52F-467C-8E3D-C4579291692E} MMDeviceEnumerator class
thunderbird.exe (2200, 9924) - 11:28:43.350 Ipc open \RPC Control\Audiosrv
thunderbird.exe (2200, 9924) - 11:28:43.350 WinClass open (3) Shell_TrayWnd
thunderbird.exe (2200, 9924) - 11:28:43.350 WinClass Mozilla_thunderbird_Thunderbird_RemoteWindow
thunderbird.exe (2200, 2144) - 11:28:43.350 Ipc open \Sessions\1\Windows\DwmApiPort
thunderbird.exe (2200, 9924) - 11:28:43.350 WinClass open (3) Shell_TrayWnd
thunderbird.exe (2200, 9924) - 11:28:43.350 WinClass (3) MozillaWindowClass
thunderbird.exe (2200, 9924) - 11:28:43.250 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02_p0
thunderbird.exe (2200, 9924) - 11:28:43.250 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02
thunderbird.exe (2200, 9924) - 11:28:43.250 Ipc open \BaseNamedObjects\msctf.serverDefault1
thunderbird.exe (2200, 9924) - 11:28:43.250 Ipc open \Sessions\1\BaseNamedObjects\MSCTF.CtfMonitorInstMutexDefault1
thunderbird.exe (2200, 9924) - 11:28:43.250 Ipc open \Sessions\1\BaseNamedObjects\CicLoadWinStaWinSta0
thunderbird.exe (2200, 9924) - 11:28:43.250 Ipc open \Sessions\1\BaseNamedObjects\CTF.AsmListCache.FMPDefault1
thunderbird.exe (2200, 9924) - 11:28:43.250 Ipc open \Sessions\1\BaseNamedObjects\MSCTF.Asm.MutexDefault1
thunderbird.exe (2200, 9924) - 11:28:43.250 WinClass open (3) Shell_TrayWnd
thunderbird.exe (2200, 9924) - 11:28:43.250 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02_p0
thunderbird.exe (2200, 9924) - 11:28:43.250 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02
thunderbird.exe (2200, 9924) - 11:28:43.250 Ipc open \Sessions\1\Windows\Theme2280552113
thunderbird.exe (2200, 9924) - 11:28:43.250 Ipc open \Windows\Theme2711629657
thunderbird.exe (2200, 9924) - 11:28:43.250 Ipc open \Sessions\1\Windows\ThemeSection
thunderbird.exe (2200, 9924) - 11:28:43.250 WinClass (3) MozillaHiddenWindowClass
thunderbird.exe (2200, 9924) - 11:28:43.250 Ipc open \Sessions\1\Windows\Theme2280552113
thunderbird.exe (2200, 9924) - 11:28:43.250 Ipc open \Windows\Theme2711629657
thunderbird.exe (2200, 9924) - 11:28:43.250 Ipc open (5) \Sessions\1\Windows\ThemeSection
thunderbird.exe (2200, 9924) - 11:28:43.220 Pipe \Device\MountPointManager
thunderbird.exe (2200, 9924) - 11:28:43.220 Pipe \Device\HarddiskVolume5
thunderbird.exe (2200, 9924) - 11:28:43.190 Ipc open \BaseNamedObjects\FontCachePort
thunderbird.exe (2200, 9924) - 11:28:43.130 Ipc (3) \Sessions\1\BaseNamedObjects\CDdf212806D6EmB31yE0c
thunderbird.exe (2200, 9924) - 11:28:43.130 Ipc open \RPC Control\LSARPC_ENDPOINT
thunderbird.exe (2200, 9924) - 11:28:43.130 Ipc \Sessions\1\BaseNamedObjects\70771B271dcb46948b2e40e3823fc51ef2eb74f901D72A06000898
thunderbird.exe (2200, 9924) - 11:28:43.130 Ipc \Sessions\1\BaseNamedObjects\70771B278b953463352548ad95dd0d94c5b7ed8f01D72A06000898
thunderbird.exe (2200, 9924) - 11:28:43.130 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02_p0
thunderbird.exe (2200, 9924) - 11:28:43.130 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02
thunderbird.exe (2200, 9924) - 11:28:43.029 Ipc Open \KnownDlls32\IMAGEHLP.dll
thunderbird.exe (2200, 9924) - 11:28:42.999 Ipc \RPC Control\LRPC-b445d3da23c7785c38
thunderbird.exe (2200, 9924) - 11:28:42.999 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02_p0
thunderbird.exe (2200, 9924) - 11:28:42.999 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02
thunderbird.exe (2200, 9924) - 11:28:42.989 ComClass Windows.System.UserProfile.GlobalizationPreferences
SandboxieRpcSs.exe (13208, 7880) - 11:28:42.929 Ipc open \RPC Control\SbieSvcPort
SandboxieRpcSs.exe (13208, 7880) - 11:28:42.929 Ipc \Sessions\1\BaseNamedObjects\__ComCatalogCache__
SandboxieRpcSs.exe (13208, 7880) - 11:28:42.929 Ipc \BaseNamedObjects\__ComCatalogCache__
SandboxieRpcSs.exe (13208, 7880) - 11:28:42.929 Ipc open \KernelObjects\MaximumCommitCondition
SandboxieRpcSs.exe (13208, 7880) - 11:28:42.929 Ipc Open \KnownDlls\clbcatq.dll
SandboxieRpcSs.exe (13208, 7880) - 11:28:42.929 Ipc \Sessions\1\BaseNamedObjects\__ComCatalogCache__
SandboxieRpcSs.exe (13208, 7880) - 11:28:42.929 Ipc \BaseNamedObjects\__ComCatalogCache__
SandboxieRpcSs.exe (13208, 7880) - 11:28:42.929 Ipc \Sessions\1\BaseNamedObjects\SM0:13208:304:WilStaging_02_p0h
SandboxieRpcSs.exe (13208, 7880) - 11:28:42.929 Ipc \Sessions\1\BaseNamedObjects\SM0:13208:304:WilStaging_02_p0
SandboxieRpcSs.exe (13208, 7880) - 11:28:42.929 Ipc \Sessions\1\BaseNamedObjects\SM0:13208:304:WilStaging_02
thunderbird.exe (2200, 9924) - 11:28:42.919 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02_p0
thunderbird.exe (2200, 9924) - 11:28:42.919 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02
thunderbird.exe (2200, 9924) - 11:28:42.919 WinClass open (3) Shell_TrayWnd
thunderbird.exe (2200, 9924) - 11:28:42.919 Ipc Open \KnownDlls32\MSCTF.dll
thunderbird.exe (2200, 7124) - 11:28:42.889 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02_p0
thunderbird.exe (2200, 7124) - 11:28:42.889 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02
thunderbird.exe (2200, 9924) - 11:28:42.889 Pipe \Device\MountPointManager
thunderbird.exe (2200, 9804) - 11:28:42.889 Ipc open \RPC Control\SbieSvcPort
thunderbird.exe (2200, 9924) - 11:28:42.889 Pipe \Device\MountPointManager
thunderbird.exe (2200, 9924) - 11:28:42.889 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:64:WilError_03_p0
thunderbird.exe (2200, 9924) - 11:28:42.889 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:64:WilError_03
thunderbird.exe (2200, 9924) - 11:28:42.889 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02_p0
thunderbird.exe (2200, 9924) - 11:28:42.889 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02
thunderbird.exe (2200, 9804) - 11:28:42.889 Pipe \Device\MountPointManager
thunderbird.exe (2200, 9804) - 11:28:42.889 Pipe \Device\HarddiskVolume5
thunderbird.exe (2200, 3964) - 11:28:42.859 Pipe open (7) \Device\Afd
thunderbird.exe (2200, 9540) - 11:28:42.859 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:64:WilError_03_p0
thunderbird.exe (2200, 9540) - 11:28:42.859 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:64:WilError_03
thunderbird.exe (2200, 7124) - 11:28:42.859 ComClass open {8BC3F05E-D86B-11D0-A075-00C04FB68820} Windows Management and Instrumentation
thunderbird.exe (2200, 9540) - 11:28:42.859 ComClass open {A47979D2-C419-11D9-A5B4-001185AD2B89} Network List Manager
thunderbird.exe (2200, 9540) - 11:28:42.859 Ipc \RPC Control\OLEEF40FF0557CE023CA32B111F8E38
thunderbird.exe (2200, 7124) - 11:28:42.859 Ipc open \RPC Control\SbieSvcPort
thunderbird.exe (2200, 9924) - 11:28:42.829 WinClass (3) nsAppShell:EventWindowClass
thunderbird.exe (2200, 9540) - 11:28:42.829 Ipc open \RPC Control\SbieSvcPort
thunderbird.exe (2200, 9540) - 11:28:42.829 ComClass {DCB00C01-570F-4A9B-8D69-199FDBA5723B} NetworkListManager
thunderbird.exe (2200, 9540) - 11:28:42.819 Ipc \Sessions\1\BaseNamedObjects\__ComCatalogCache__
thunderbird.exe (2200, 9540) - 11:28:42.819 Ipc \BaseNamedObjects\__ComCatalogCache__
thunderbird.exe (2200, 9540) - 11:28:42.819 Ipc open \KernelObjects\MaximumCommitCondition
thunderbird.exe (2200, 9540) - 11:28:42.819 Ipc Open \KnownDlls32\clbcatq.dll
thunderbird.exe (2200, 9540) - 11:28:42.819 Ipc \Sessions\1\BaseNamedObjects\__ComCatalogCache__
thunderbird.exe (2200, 9540) - 11:28:42.819 Ipc \BaseNamedObjects\__ComCatalogCache__
thunderbird.exe (2200, 9540) - 11:28:42.819 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02_p0
thunderbird.exe (2200, 9540) - 11:28:42.819 Ipc \Sessions\1\BaseNamedObjects\SM0:2200:168:WilStaging_02
thunderbird.exe (2200, 9924) - 11:28:42.819 WinClass closed Mozilla_thunderbird_Thunderbird_RemoteWindow
thunderbird.exe (2200, 9924) - 11:28:37.731 Pipe \Device\MountPointManager
thunderbird.exe (2200, 9924) - 11:28:37.731 Pipe \Device\HarddiskVolume4
thunderbird.exe (2200, 9924) - 11:28:37.721 Pipe \Device\MountPointManager
thunderbird.exe (2200, 3952) - 11:28:37.721 Ipc open \RPC Control\SbieSvcPort
thunderbird.exe (2200, 9924) - 11:28:37.721 Pipe \Device\MountPointManager
thunderbird.exe (2200, 9924) - 11:28:37.711 Ipc open \RPC Control\lsapolicylookup
thunderbird.exe (2200, 9924) - 11:28:37.711 Ipc \RPC Control\epmapper
thunderbird.exe (2200, 9924) - 11:28:37.711 Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_DcomLaunch
thunderbird.exe (2200, 9924) - 11:28:37.711 Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcSs
thunderbird.exe (2200, 9924) - 11:28:37.711 Ipc \RPC Control\epmapper
thunderbird.exe (2200, 9924) - 11:28:37.711 Ipc open \ThemeApiPort
thunderbird.exe (2200, 9924) - 11:28:37.711 Ipc \Sessions\1\BaseNamedObjects\windows_shell_global_counters
thunderbird.exe (2200, 9924) - 11:28:37.711 Ipc Open \KnownDlls32\SHCORE.dll
thunderbird.exe (2200, 9924) - 11:28:37.701 Pipe \Device\KsecDD
thunderbird.exe (2200, 9924) - 11:28:37.701 Pipe \Device\DeviceApi
thunderbird.exe (2200, 9924) - 11:28:37.701 Pipe open \Device\Nsi
thunderbird.exe (2200, 9924) - 11:28:37.701 Ipc Open \KnownDlls32\NSI.dll
thunderbird.exe (2200, 9924) - 11:28:37.671 Ipc Open \KnownDlls32\OLEAUT32.dll
thunderbird.exe (2200, 9924) - 11:28:37.671 Ipc Open \KnownDlls32\bcrypt.dll
thunderbird.exe (2200, 9924) - 11:28:37.671 Ipc Open \KnownDlls32\cfgmgr32.dll
thunderbird.exe (2200, 9924) - 11:28:37.671 Ipc Open \KnownDlls32\Setupapi.dll
thunderbird.exe (2200, 9924) - 11:28:37.671 Ipc Open \KnownDlls32\SHLWAPI.dll
thunderbird.exe (2200, 9924) - 11:28:37.671 Ipc Open \KnownDlls32\SHELL32.dll
thunderbird.exe (2200, 9924) - 11:28:37.671 Ipc Open \KnownDlls32\combase.dll
thunderbird.exe (2200, 9924) - 11:28:37.661 Ipc Open \KnownDlls32\ole32.dll
thunderbird.exe (2200, 9924) - 11:28:37.661 Ipc Open \KnownDlls32\WS2_32.dll
thunderbird.exe (2200, 9924) - 11:28:37.651 Ipc Open \KnownDlls32\IMM32.dll
thunderbird.exe (2200, 9924) - 11:28:37.651 Ipc Open \KnownDlls32\msvcp_win.dll
thunderbird.exe (2200, 9924) - 11:28:37.651 Ipc Open \KnownDlls32\gdi32full.dll
thunderbird.exe (2200, 9924) - 11:28:37.641 Ipc Open \KnownDlls32\gdi32.dll
thunderbird.exe (2200, 9924) - 11:28:37.641 Ipc Open \KnownDlls32\win32u.dll
thunderbird.exe (2200, 9924) - 11:28:37.641 Ipc Open \KnownDlls32\user32.dll
thunderbird.exe (2200, 9924) - 11:28:37.641 Pipe \Device\CNG
thunderbird.exe (2200, 9924) - 11:28:37.641 Ipc Open \KnownDlls32\bcryptPrimitives.dll
thunderbird.exe (2200, 5576) - 11:28:37.641 Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_DcomLaunch
thunderbird.exe (2200, 5576) - 11:28:37.641 Ipc \RPC Control\epmapper
thunderbird.exe (2200, 9924) - 11:28:37.641 Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcSs
thunderbird.exe (2200, 9924) - 11:28:37.641 Pipe \Device\KsecDD
thunderbird.exe (2200, 9924) - 11:28:37.631 Ipc Open \KnownDlls32\WINTRUST.dll
thunderbird.exe (2200, 9924) - 11:28:37.631 Ipc Open \KnownDlls32\CRYPT32.dll
thunderbird.exe (2200, 9924) - 11:28:37.631 Ipc Open \KnownDlls32\ucrtbase.dll
thunderbird.exe (2200, 9924) - 11:28:37.631 Ipc Open \KnownDlls32\rpcrt4.dll
thunderbird.exe (2200, 9924) - 11:28:37.631 Ipc Open \KnownDlls32\sechost.dll
thunderbird.exe (2200, 9924) - 11:28:37.631 Ipc Open \KnownDlls32\MSVCRT.dll
thunderbird.exe (2200, 9924) - 11:28:37.631 Ipc Open \KnownDlls32\advapi32.dll
thunderbird.exe (2200, 9924) - 11:28:37.631 Ipc \Sessions\1\BaseNamedObjects\SboxSession
thunderbird.exe (2200, 9924) - 11:28:37.601 Ipc open \RPC Control\SbieSvcPort
thunderbird.exe (2200, 9924) - 11:28:37.591 Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_2200
thunderbird.exe (2200, 9924) - 11:28:37.591 Drive \Device\HarddiskVolume8
thunderbird.exe (2200, 9924) - 11:28:37.591 Drive \Device\HarddiskVolume7
thunderbird.exe (2200, 9924) - 11:28:37.591 Drive \Device\HarddiskVolume5
thunderbird.exe (2200, 9924) - 11:28:37.591 Drive \Device\CdRom0
thunderbird.exe (2200, 9924) - 11:28:37.591 Drive \Device\HarddiskVolume4
thunderbird.exe (2200, 9924) - 11:28:37.591 Ipc Open \KnownDlls32\PSAPI.DLL
thunderbird.exe (2200, 9924) - 11:28:37.591 Ipc Open \Sessions\1\Windows\ApiPort
thunderbird.exe (2200, 9924) - 11:28:37.591 Ipc Open \Sessions\1\Windows\SharedSection
thunderbird.exe (2200, 9924) - 11:28:37.591 Ipc Open \KnownDlls32\KERNELBASE.dll
thunderbird.exe (2200, 9924) - 11:28:37.591 Ipc Open \KnownDlls32\kernel32.dll
thunderbird.exe (2200, 9924) - 11:28:37.591 Ipc Open \KnownDlls\wow64cpu.dll
thunderbird.exe (2200, 9924) - 11:28:37.591 Ipc Open \KnownDlls\user32.dll
thunderbird.exe (2200, 9924) - 11:28:37.591 Ipc Open \KnownDlls32\kernel32.dll
thunderbird.exe (2200, 9924) - 11:28:37.591 Ipc Open \KnownDlls\kernel32.dll
thunderbird.exe (2200, 9924) - 11:28:37.591 Ipc Open \KnownDlls\wow64win.dll
thunderbird.exe (2200, 9924) - 11:28:37.591 Ipc Open \KnownDlls\wow64.dll
thunderbird.exe (8520, 1176) - 11:28:37.591 Debug trace CreateProcess: C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe ("C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe" -p); err=0
thunderbird.exe (8520, 1176) - 11:28:37.560 Ipc \Sessions\1\BaseNamedObjects\2148HWNDInterface:f05e6
thunderbird.exe (8520, 1176) - 11:28:37.560 WinClass closed ApplicationManager_DesktopShellWindow
thunderbird.exe (8520, 1176) - 11:28:37.560 WinClass $:explorer.exe
thunderbird.exe (8520, 1176) - 11:28:37.560 WinClass ApplicationManager_DesktopShellWindow
thunderbird.exe (8520, 1176) - 11:28:37.560 Ipc \Sessions\1\BaseNamedObjects\2148HWNDInterface:f05e6
firefox.exe (7004, 11896) - 11:28:26.398 Ipc open \RPC Control\SbieSvcPort
firefox.exe (7004, 1108) - 11:28:26.296 Ipc \BaseNamedObjects\F932B6C7-3A20-46A0-B8A0-8894AA421973
I couldn't reproduce it on a clean sandbox with Classic 5.49.5, all login info are still preserved for me.
In my test I used a custom path (set in an OpenFilePath) for the TB profile: D:\profiles\data\thunderbird
Considering you were using a sophos version, I need to know if you did a clean uninstall of that version followed by a clean installation of Sbie Plus (without upgrades in the middle) and if you can reproduce the same issue on a new clean sandbox too.
Old-Mikey
commented
3 years ago I have tried both versions of Sandboxie to no avail. I uninstalled the current versions and replaced with the latest and the problem persists for both either with the default box or a newly created one I can ony assume that if this works for everyone else then I will need to reinstall Thunderbird as my last option I wiil try that when I have time Thanks for your help
Old-Mikey
commented
3 years ago Had a problem updating Thunderbird I kept getting the XULRunner error version *** is not compatible..... message but only when I ran under Sandboxie I reinstalled Thunderbird and not only fixed this error but also I can now keep my profile in a folder of my choice So problem now resolved
Running Windows 10 2004 64 Bit Desktop
I am evaluating Sandboxie-Plus and have found a bug
I use both Firefox and Thunderbird and have both profiles in a non default folder ie E:\Profiles\Firefox and E:\Profiles\Thunderbird
In order to enable Firefox bookmarks to be saved i need to add the following to Sandboxie.ini to reference this folder
[TemplateSettings]
Tmpl.Firefox=E:\Profiles\Firefox
However in Thunderbird if I do the same thing and add Tmpl.Thunderbird=E:\Profiles\Thunderbird
I have a problem when I open Thunderbird. All my Login info (email servers and passwords are missing) They are held in a file called logins.json held in the profile
To resolve the problem I have to move my Thunderbird profile to %APPDATA%
Also in the old Sophos and Classic versions of Sandboxie there is a facility in the UI to amend these folders but is mising in Sandboxie Plus
Many thanks for what appears to be a great program