Sandboxie will be detected when a statically-linked DLL contains detection code

[TheCjw]

Due to the documentation of Inject DLL：

The injected DLL is loaded into the sandboxed process (or program) after all the statically-linked DLLs are loaded and initialized, but before the program itself begins to execute at its entry point.

So the statically linked DLL will load and execute before SbieHide. You can use ProcMon to verify this.

In this scenario, an additional launcher is required to perform DLL injection using DetourCreateProcessWithDlls or Windows debugging APIs.

Hope this helps.

[0bbedCode]

Due to the documentation of Inject DLL：

The injected DLL is loaded into the sandboxed process (or program) after all the statically-linked DLLs are loaded and initialized, but before the program itself begins to execute at its entry point.

So the statically linked DLL will load and execute before SbieHide. You can use ProcMon to verify this.

In this scenario, an additional launcher is required to perform DLL injection using DetourCreateProcessWithDlls or Windows debugging APIs.

Hope this helps.

What program does this appear to happen ?

[VeroFess]

Pls try with https://github.com/VeroFess/SbieHide/releases/download/v2.0.0/SbieHideExLoader.exe