search cancel

HTTPS uploads via Chrome causes high CPU utilization for EDPA.exe

book

Article ID: 174452

calendar_today

Updated On:

Products

Data Loss Prevention Endpoint Prevent

Issue/Introduction

Symantec Data Loss Prevention (DLP) Endpoint agent
14.6 MP2
14.6 MP3 HF

When uploading a zip file to in internal HTTPS site via Chrome, the edpa.exe process CPU utilization spikes and Chrome freezes.
After a few minutes, the upload will complete and the CPU utilization returns to normal.

03/14/2019 10:03:12 |  1760 | FINEST  | CodeInjection.HookManager | Session 0: LoadLibrary execution failed in process: Pid->11440 ProcessName->C:\Program Files (x86)\Google\Chrome\Application\chrome.exe | DllHooker.cpp(633)
03/14/2019 10:03:12 |  1760 | FINEST  | CodeInjection.HookManager | Session 0: WaitForProcessInitialization failed for process: Pid->11440 ProcessName->C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Returned Error Code = 5 | DllHooker.cpp(426)
03/14/2019 10:03:12 |  1760 | FINEST  | CodeInjection.HookManager | Session 0: Hooking failed for process: Pid->11440 ProcessName->C:\Program Files (x86)\Google\Chrome\Application\chrome.exe | HookingTask.cpp(63)

Resolution

Ran a clean uninstall of the Endpoint agent.
Reinstalled the Endpoint Agent.