sR6uWE

OperatingINTERNALSDefault DesktopSystemElevation PoliciesAPI CallAPI Call• Sandbox Directory, STAN_RIGHTS_ALL• Sandbox Registry, KEY_ALL_ACCESS• Office Registry, KEY_READElevation PolicyManagerInterceptionManagerBroker ProcessCOM IPCShims (Interception Client)No ActiveX Controls(*) UI Restrictions:JOB_OBJECT_UILIMIT_HANDLESJOB_OBJECT_UILIMIT_READCLIPBOARDJOB_OBJECT_UILIMIT_WRITECLIPBOARD…(https://msdn.microsoft.com/en-us/library/windows/desktop/ms684152(v=vs.85).aspx)ActiveX ControlsCOM ObjectsName-Pipe IPCProtected-View Sandbox ProcessProcess AProcess BInteractions(see *)UntrustedUntrusted File NUntrusted FileFile 1InternetLabs.mwrinfosecurity.com | © MWR Labs 22