Launching Adobe Premiere triggers "ExploitPayload" detection

[rostance]

Hello,

Launching the latest releace of Adobe Premiere (Version 24.1.0 BETA Build 2) causes Malwarebytes to trigger an RTP Detection.

I submitted a bug report to Adobe, but wanted to report it here in case it was possible to rule it out as a false positive?

The log shows this:

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 06/09/2023
Protection Event Time: 09:11
Log File: f2373992-4c8c-11ee-ae5e-18c04d89f677.json

-Software Information-
Version: 4.6.2.281
Components Version: 1.0.2131
Update Package Version: 1.0.74921
Licence: Premium

-System Information-
OS: Windows 10 (Build 19045.3324)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Exploit.PayloadProcessBlock, C:\WINDOWS\SYSTEM32\WINDOWSPOWERSHELL\V1.0\powershell.exe powershell.exe get-wmiobject win32_computersystem | fl model, Blocked, 701, 392684, 0.0.0, ,

-Exploit Data-
Affected Application: cmd
Protection Layer: Application Behavior Protection
Protection Technique: Exploit payload process blocked
File Name: C:\WINDOWS\SYSTEM32\WINDOWSPOWERSHELL\V1.0\powershell.exe powershell.exe get-wmiobject win32_computersystem | fl model
URL:

(end)

 

[Porthos]

@rostance

Can you check if the "Penetration testing" toggle in the UI is ON? If it is ON, please turn it OFF and Hit Apply

If that setting is not on, click restore defaults and click Apply, and opem Adobe again.

You can find it by going to Security->Exploit Protection->Advanced settings 

 

Edited September 6, 2023 by Porthos

[rostance]

Thank you, "restore to default" fixed the issue