Windows 10: I have found a file called ExtExport.exe in my Exploit Protection override settings. Is it...

I have found a file called ExtExport.exe in my Exploit Protection settings that has a system override. That override is Force randomisation for images Mandatory ASLR. I can't find anything definitive about this being a known-process for Windows, and even ChatGTP though ChatGTP does have a September 2021 cut-off date and it may be a new process warns it is not known and could be malware. Does anyone know if it is a legitimate process or do I have reason to be concerned? There is hardly any information about this file on the net, very uncommon for known processes and the fact it has an overr

:)

 

Many items in Program settings in Exploit protection

Hello,

In Security>App & browser control>Exploit protection>Program settings there is a long list of exe files in there that I did not put there myself.
A few examples are:
excelcnv.exe
ExTExport.exe
graph.exe
ie4uinit.exe

mshta.exe
msoasb.exe

ngen.exe

Plus many more.
I can elaborate on the individual overrides on each one if you like. But should there be so many exe files listed in the system overrides like this? Is this normal?
I have run virus scans using Trend Micro Housecall, Malwarebytes Premium and Microsoft Windows Defender, all of which found nothing.

I await a reply.
Thanks

 

Many items in Program settings in Exploit protection

Hello Reticzeta,

Thanks for using Microsoft products and posting in the community.

It is normal for there to be a large list of executable files in the Program settings section of Exploit protection. The list contains all the programs that are recognized by Windows, and some of them may have been added by third-party applications installed on your computer.

Some of the exe files you mentioned, such as excelcnv.exe, graph.exe, and ie4uinit.exe, are related to Microsoft Office applications and are included in the list by default. Other exe files, like ngen.exe, are related to Windows itself and may have been added to the list by Windows updates or other system changes.

If you are concerned about any of the individual overrides for these files, you can review them to see if they appear to be legitimate. If you are unsure, you can research the file online to see if it is associated with any known malware or security vulnerabilities.

Overall, having a long list of executable files in the Program settings section of Exploit protection is not necessarily a cause for concern, as it is normal for there to be a large number of programs on a typical computer. However, it is always a good idea to stay vigilant and keep your security software up to date to protect against any potential threats.

Please feel free to let me know if you have any further updates, thanks.

Best Regards,

Lenka-MSFT| Microsoft Community Support Specialist

 

Windows Security Exploit Protection settings

Dear all

In Windows Security > App- and browser control > Exploit Protection > Program settings

There is a list of .exe files and you can add more prorgrams

1.
What are those .exe files on the list?
What does this list do?

2.
Under some of the .exe files, it says "1 detention by system"
What does that mean?

Thanks in advance for replying

Best regards