Google Chrome "OneLaunch" detections using ENS 10.7 / ATP

[Glenn_Bolton]

Hello,

We are running ENS 10.7 with ATP and we are seeing a significant number of detections being recorded as with a Threat Target Path that includes: Google Chrome "OneLaunch."

We are trying to pinpoint the reason for these detections? Is there some other reporting option that I can use or add to identify additional information? We are reaching out to clients to determine if they saw any pop messages during the time that the detection occurred. The information that I have is listed below. Any additional advice that can be provided is greatly appreciated.

Threat Name usually begins with a prefix of "ATP/Suspect" or "Real Protect."
Threat Type is usually "Trojan."
Event Category is: Malware detected using heuristics
Event Description is: Adaptive Threat Protection Clean
Threat Target File Path: C:\Users\%userName%\AppData\Local\OneLaunch\4.101.0\chromium\chromium.exe

[Tares1 · Accepted solution]

Hello @Glenn_Bolton 

Thank you for reaching out to the support community.

This case requires a more detailed analysis of the logs in order to address specifically which ATP rules are being trigered.

Please proceed to open a malware service request for us to continue the troubleshooting.

[Glenn_Bolton]

Thank you.,..will do