EDR Sensor: Hosts file becomes corrupted when saved with UTF-8 BOM encoding

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• File C:\Windows\System32\drivers\etc\hosts shows gibberish characters under the #END_CBEDR
• hosts file encoding is UTF-8 BOM

Environment

• EDR Sensor: 7.2.2
• Microsoft Windows: All Supported Versions

Cause

Sensor issue with handling the encoding - CB-37343

Resolution

• This will be resolved in the 7.3.0 sensor release. 
• As a workaround, delete corrupt characters and save the file with ASCII encoding