CB ThreatHunter: Adobe PDF files fail to open and disappear

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Attempting to open a PDF document fails with the message “There was an error opening this document. This file cannot be found". The PDF file then disappears.

Environment

• CB PSC Sensor: 3.4.0.766

Cause

This issue is caused by a defect in the 3.4.0.766 sensor

Resolution

Upgrade affected sensors to sensor version 3.4.0.842 or higher

Additional Information

3.4.x.x sensors prior to 3.4.0.1016 were signed with a SHA1 certificate which is being deprecated by Microsoft Windows. It is recommended to upgrade to sensor version 3.4.0.1016.