Running Ultimate PDF triggers our monitoring program Crowdstrike. We are working with the vendor to whitelist the application, so that it no longer alerts. As part of their analysis they are asking what part of the command line is static and what part of the command line is variable. Would it be possible to provide documentation on that request?
Sample command line?
"C:\Windows\TEMP\.local-chromium\Win64-706915\chrome-win\chrome.exe" --type=renderer --no-sandbox --allow-pre-commit-input --disable-background-timer-throttling --disable-breakpad --enable-automation --file-url-path-alias="/gen=C:\Windows\TEMP\.local-chromium\Win64-706915\chrome-win\gen" --force-color-profile=srgb --remote-debugging-port=0 --use-gl=swiftshader-webgl --field-trial-handle=784,5191121692530508017,1096961246813162995,131072 --enable-features=NetworkService,NetworkServiceInProcess --disable-features=BlinkGenPropertyTrees,TranslateUI --disable-gpu-compositing --lang=en-US --headless --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=14654028232651846253 --renderer-client-id=4 --mojo-platform-channel-handle=1312 /prefetch:1
The path to the application (...)\chrome-win\chrome.exe should be static. Everything else would be dynamic, and would depend on which subprocess is being launched.
Can anyone help out with this? I need to get this issue resolved.
I need to identify a static portion of the command line. The command generated by this tool is causing alerts in Crowdstrike.
Hello,
We recently had this error message as well, if anyone has experienced this and has any tips on how to resolve it, we are grateful.
Regards.
Thank you!