Carbon Black Cloud: The application "X" attempted to modify the next instruction to execute in the process "X"

[#1]

Environment

• Carbon Black Cloud Sensor: 3.9
• Microsoft Windows: All Supported Versions

Symptoms

• Applications being terminated after modifying their own instruction sets

  The application "C:\program files (x86)\microsoft office\office16\winword.exe" attempted to modify the next instruction to execute in the process "C:\program files (x86)\microsoft office\office16\winword.exe". The operation was blocked by Carbon Black Cloud

Cause

Known issue

Resolution

This is resolved in sensors 4.0+ (DSEN-26353).

Additional Notes

VMware Carbon Black Cloud Windows Sensor 4.0.0.1292 Release Notes