2 Chrome processes show up in Sandboxie, but neither of them is opened after installing KB5027231

[jedimasterspaz]

Describe what you noticed and did

I uninstalled KB5027231 and it works again.
Reinstalled KB5027231 and it stopped working again.

Sandboxie 5.64.7
Chrome is up to date
Version 114.0.5735.134 (Official Build) (64-bit)

OS Name Microsoft Windows 11 Home
Version 10.0.22621 Build 22621
Edition Windows 11 Home
Version 22H2
Installed on ‎2/‎27/‎2023
OS build 22621.1778
Experience Windows Feature Experience Pack 1000.22642.1000.0

I've attach the following screen shots:
What's in Sandboxie.
Windows updates.
Procmon with a Sandboxie filter.

How often did you encounter it so far?

When KB5027231was installed.

Affected program

Chrome

Download link

Not available

Where is the program located?

The program is installed only outside the sandbox.

Expected behavior

2 Chromes show up in Sandboxie but not on Taskbar.
Firefox works.
I uninstalled KB5027231 and it works again.
Reinstalled KB5027231 and it stopped working again.

What is your Windows edition and version?

Windows 11 Home Version 22H2 OS build 22621.1778

In which Windows account you have this problem?

A Microsoft account (Administrator).

Please mention any installed security software

Defender

What version of Sandboxie are you running?

5.46.7

Is it a new installation of Sandboxie?

I recently did a new clean installation.

Is it a regression?

No response

In which sandbox type you have this problem?

In a standard isolation sandbox (yellow sandbox icon).

Can you reproduce this problem on a new empty sandbox?

I can confirm it also on a new empty sandbox.

Did you previously enable some security policy settings outside Sandboxie?

No response

Crash dump

No response

Trace log

No response

Sandboxie.ini configuration

Default Sandboxie.ini from install.

[isaak654]

Do you have a Malwarebytes Exploit protection enabled in your system?

1. June 2023 Update (KB5027231) prevents Google Chrome from displaying
2. Malwarebytes Exploit Protection conflict with Google Chrome

[jedimasterspaz]

No, Malwarebytes free is installed, but set to not start up with Windows.

[Xegony]

encountering same issue with KB5027231

[offhub]

Do other Chromium-based browsers have the same problem?

[jedimasterspaz]

Reinstalled KB5027231.
Edge works in Sandboxie.
Chrome stopped working again.

[VisionXi]

I have Windows 10 and Windows 11 and several browsers. Operating systems and browsers are all on the most current official updates. Sandboxie-Plus 1.9.7.
Same problem here with Chrome after installation of KB5027231 under 22H2.
It's definitely an issue that came with KB5027231.
I can reproduce it with Windows 11 22H2 Build 22621.1848 and Chrome 114.0.5735.134, also with beta versions of Chrome 115.
No problem with Chromium 116.0.5824.0, no problem with Edge, no problem with Opera, no problem with any browser at all under Windows 10.

[DavidXanatos]

Its wired, on y clean win 11 vm with KB5027231 i can reproduce the issue with 114.0.5735.134 but on my host with same update and chromium verison everythign runs fine.

[DavidXanatos]

this is a widespread issue: https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5027231-also-breaks-chrome-for-cisco-watchguard-edr-users/

[Xegony]

this is a widespread issue: https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5027231-also-breaks-chrome-for-cisco-watchguard-edr-users/

Bitdefender user here.... but i can repo the issue on clean installed win 11 without any antivirus software installed on both vm and physical machine

[DavidXanatos]

this is a widespread issue: https://www.bleepingcomputer.com/news/microsoft/windows-11-kb5027231-also-breaks-chrome-for-cisco-watchguard-edr-users/

Bitdefender user here.... but i can repo the issue on clean installed win 11 without any antivirus software installed on both vm and physical machine

No, I'm saying whatever change in KB5027231 broke those other security solutions also broke sandboxie.

[VisionXi]

Indeed a widespread issue meanwhile. And like the recommendations found there, a workaround is setting Chrome as default browser. Couldn't believe it but it works.

[DavidXanatos]

Workaround:

ClosedKeyPath=HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice
ClosedKeyPath=HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\https\UserChoice

See also ClosedKeyPath documentation if you want to configure them per process.

[DavidXanatos]

Well according to my testing everything works except when the key is set to MSEdge, so that makes me think (although I might be wrong) there here MSFT messes up some edge protection feature that was intended to hinder the user when trying to switch to something else, and for whatever reason it ended up deadlocking programs which only tried to read that, not cool not cool MSFT.

[isaak654]

CC: @ojo11

[BilleBarrett]

Just tested it and it works .Remote PC Support "Your Windows System and Data are only as good as your last backup" (336) 988-0891 ***@***.***> ***@***.*** To subscribe to my FYI emails send an email to ***@***.***> ***@***.*** From: DavidXanatos ***@***.***> Sent: Sunday, June 18, 2023 8:59 AM To: sandboxie-plus/Sandboxie ***@***.***> Cc: BilleBarrett ***@***.***>; Comment ***@***.***> Subject: Re: [sandboxie-plus/Sandboxie] 2 Chrome processes show up in Sandboxie but not on taskbar after installing KB5027231 (Issue #3040) Well according to my testing everything works except when the key is set to MSEdge, so that makes me think (although I might be wrong) there here MSFT messes up some edge protection feature that was intended to hinder the user when trying to switch to something else, and for whatever reason it ended up deadlocking programs which only tried to read that, not cool not cool MSFT. — Reply to this email directly, view it on GitHub <#3040 (comment)> , or unsubscribe <https://github.com/notifications/unsubscribe-auth/AJ3MQJIJRUDIIUYWHEAQCI3XL33SLANCNFSM6AAAAAAZHA73CA> . You are receiving this because you commented. <https://github.com/notifications/beacon/AJ3MQJI6ALUC77UI5VYV7A3XL33SLA5CNFSM6AAAAAAZHA73CCWGG33NNVSW45C7OR4XAZNMJFZXG5LFINXW23LFNZ2KUY3PNVWWK3TUL5UWJTS7EMLI6.gif> Message ID: ***@***.*** ***@***.***> >

[BilleBarrett]

I found that I had to do the registry fix as well at make sure google chrome was set to default in app settings
It seems that all you have to do is open windows Setting > Apps > Default Apps > Goode Chrome
then click on Set default and this resolves the issue
I also went done the list and wherever Edge was I open and switch to Chrome
Reg Delete HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice /F

[VisionXi]

ClosedKeyPath=HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice

Great, Thank you! That solved the issue for me. Even with having Edge as default browser and ProgId=MSEdgeHTM under this RegKey.

[isaak654]

According to this topic, the next step is to wait for a new corrective update from Microsoft before considering a fix in Sandboxie.

[BilleBarrett]

I have a client that Edge keeps changing the 2 locations the HTTP and HTTPS
for some reason Edge says it is not default when my client open it and he clicks ok and I have to go in and delet the entries
Buth then I changed the setting the UserChoice setting Progid to ChromeHTML in both placed to stop Edge
Even if I set Chrome and default, edge attemps to reset ti

[lwcorp]

What does it mean "not on taskbar"?

I can confirm a case of 2 chromes appearing in the Sandboxie's control panel, but not actually opening up, i.e. no Chrome windows pop up, as if Chrome never opened up. I hope that's what you meant by "not on taskbar", because "not on taskbar" sounds to me not like an annoyance, but a deal breaker.