Skip to content

Commit 9681e17

Browse files
committed
Terminal (Windows): don't use wininit as terminal
1 parent 1f8be43 commit 9681e17

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

src/detection/terminalshell/terminalshell_windows.c

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -313,7 +313,8 @@ static uint32_t getTerminalInfo(FFTerminalResult* result, uint32_t pid)
313313
ffStrbufSubstrBefore(&result->prettyName, result->prettyName.length - 4);
314314

315315
if(ffStrbufIgnCaseEqualS(&result->prettyName, "sihost") ||
316-
ffStrbufIgnCaseEqualS(&result->prettyName, "explorer")
316+
ffStrbufIgnCaseEqualS(&result->prettyName, "explorer") ||
317+
ffStrbufIgnCaseEqualS(&result->prettyName, "wininit")
317318
) {
318319
// A CUI program created by Windows Explorer will spawn a conhost as its child.
319320
// However the conhost process is just a placeholder;

0 commit comments

Comments
 (0)