Unsandboxed app launches default browser (forced) unsandboxed

Sbie+ 1.14.10 x64
Windows 10 x64
Default browser = Catsxp portable x64

First time I experience this.
Any sandboxed or unsandboxed app I run, if I click on a link within the app it launches the default browser sandboxed because it is forced. Except for one I tried yesterday.

 

@DavidXanatos ?

 

how to reproduce the issue?

 

1. Download FastDownloader app: https://app.fast-download.org/release/FastDownloader-Setup-3.1.0.exe
2. Install in the main system, no sandbox
3. Open it unsandboxed and log in with these credentials, user: alanni2@instrete.com password: 3v~~1ST78<
4. Click in the upper left logo

Spoiler

It should launch the default browser, in my case it's Catsxp portable sitting in its own folder in a partition other than C. It has its own dedicated sandbox and it's set to run forced.

 

hmm... must be config relates on a clean Vm with the browser the downloader and latest sandboxie i could not reproduce the issue

 

@MrX

I gave it a test and every time I clicked the top left icon. The link opened up the web browser sandboxed - See below link.

https://drive.google.com/file/d/1QSLq3Hl7FzUZPt8Lvqo5FcFLtoS7vr8z/view?usp=drive_link

 

What does that mean? That you are not going to investigate further this real issue? Test on a physical machine...

 

No it means you should try with a new sandboxie.ini and and then add your regular config one by one if the issue is not present in a vanilla install.
VM or real system makes no difference.

 

Issue disappear in a vanilla install. I wonder why though.

Re old install:
Remember, five other programs I ran unsandboxed and click on them to launch the default browser, catsxp ran sandboxed as expected but FastDownloader

Question is, how am I going to fix this issue?

 

I would suspect that the culprit may be some sort of fast start or something,
do you see any instances of catsxp already running unsandboxed, when this happens?
Perhaps the sandboxed instance communicates over a local network socket with an unsandboxed one and makes it open.

You could use task explorer to see what is the actual parent process of the usnandboxed catsxp,
my assumption is that it will not be a sandboxed program but something that runs outside and wits for a trigger.

 

@Mr.X did you try TaskExplorer? you can also try SystemInformer, any new insights into your issue?
I can also offer you that we do a remote desktop session and we take a look together.

 

Investigating further last night, I found out what I think is "normal" behavior made by design.

 

Scenario 1
Portable Catsxp → default browser, has its own red box, forced catsxp.exe, sitting on E: drive
FastDownloader → has its own orange box, forced FastDownloader.exe, sitting on E: drive

Right-click on systray sandman → Pause Forcing Programs → Launch FastDownloader unsandboxed → Catsxp runs unsandboxed


Scenario 2
Portable Catsxp → default browser, has its own red box, forced catsxp.exe, sitting on E: drive
FastDownloader → no box no nothing, sitting on E: drive

Launch FastDownloader → Catsxp runs sandboxed


Is scenario 1 as normal as my red hair?
No kidding I have red hair...


Edit:
Scenario 3
I repeated the procedure on Scenario 1 but this time with IrfanView64 portable, same results. So it seems to be a normal behavior. I didn't know it is by design though.