Unknown URL captured on incidents generated for chrome and edge browsers with DLP extension installed

Products

• Data Loss Prevention Endpoint Prevent

Issue/Introduction

Unknown URL captured on chrome and edge.

Environment

Release : 15.8 and 16.0

Cause

brkprcs64.exe was not running.

Resolution

Check using process explorer if cmd.exe and brkprcs64.exe are running as a child process to chrome or edge as below.

Non working machine:

Working machine:

On non working machine, cmd.exe was renamed to cmd1.exe. Upon changing to cmd.exe, brkprcs64.exe started and unknown URL issue did not occur.

Other reasons which could cause brkprcs64.exe to fail to start are

1. GPO 'NativeMessagingBlocklist' applied on machine with '*' value, this can be verified typing edge://policy or chrome://policy in address bar of the web browser.
2. 'comspec' environmental variable incorrectly or not defined on windows machine.