Remove-Snapshot resurrects deleted files

[typpos]

Describe what you noticed and did

When deleting a snapshot, then previously deleted files reappear in the "merged" child snapshot / current.

Repro:

• Create normal sandbox, virtualization scheme v2
• On real system create file c:\b\a.txt
• Start boxed cmd.exe
• create file c:\b\b.txt
• delete file c:\b\a.txt // real file, deleted in sandbox
• exit
• Create snapshop
• Start boxed cmd.exe
• delete file c:\b\b.txt // snapshot file, deleted in 'current'
• exit
• delete snapshot
• Start boxed cmd.exe
• dir c:\b

Actual: Both files exist

Expected: Neither file exists

How often did you encounter it so far?

Always

Affected program

na

Download link

na

Where is the program located?

Not relevant to my request.

Expected behavior

files remain deleted

What is your Windows edition and version?

Windows 10 Pro 22H2

In which Windows account you have this problem?

A local account (Administrator).

Please mention any installed security software

MS Defender only

What version of Sandboxie are you running?

1.9.3 / (1.9.7-pre from src)

Is it a new installation of Sandboxie?

I recently did a new clean installation.

Is it a regression?

No response

In which sandbox type you have this problem?

In a standard isolation sandbox (yellow sandbox icon).

Can you reproduce this problem on a new empty sandbox?

I can confirm it also on a new empty sandbox.

Did you previously enable some security policy settings outside Sandboxie?

no

Crash dump

No response

Trace log

No response

Sandboxie.ini configuration

Enabled=y
BlockNetworkFiles=y
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Desktop%
BorderColor=#02f6f6,ttl
Template=OpenBluetooth
Template=SkipHook
Template=FileCopy
Template=qWave
Template=BlockPorts
Template=LingerPrograms
Template=AutoRecoverIgnore
ConfigLevel=10
UseSecurityMode=n
UseFileDeleteV2=y
UseRegDeleteV2=y
ClosedFilePath=!<InternetAccess>,InternetAccessDevices