Hi Team
may I know if there is any technical details about the following behavior.
we seen it from some of our endpoint system the sublime text upgrade some how triggered from the user’s recycle.bin
if there is any solution or configuration would get this fix, please let me know
parent_process:
“C:\Program Files\Sublime Text\sublime_text.exe” “–post_update”
childproc
Invoked: c:$recycle.bin\s-1-5-xx-xxx-xxxxx-xxxxx-xxxxx$rs7vixz\ (update)\plugin_host-3.3.exe (0462f464b32136599195f55f0d5c6695d594c3f9ad7531ccaa10de9b491ce3a7)
1:54:52 am Feb 10, 2022
childproc
Invoked: c:$recycle.bin\s-1-5-xx-xxx-xxxxx-xxxxx-xxxxx$rs7vixz\ (update)\plugin_host-3.8.exe (6f800e2252429b25089693c2d7827e58021969bf6033d35f26f2fd0c7eb08682)