'Direct Access' settings don't apply to files in sandbox - so a malware would have to be called firefox.exe and be installed outside of the...
Separate names with a comma.