Solved "iexplore.exe" running in background without IE being open

[Ramen]

Through my research I have found mixed results that iexplore.exe can be safe but also could be
a malware/virus/trojan so I wanted your excellent team to scout it out.

 

[argus]

C:\Program Files (x86)\iexplore.exe*32 is legitimate file.
It's part of the tab crash/isolation process. Tabs run in separate instances. Nothing to worry about.

Logs doesn't show active infection.

 

[Ramen]

thanks argus you made me feel so much better

 

[Ramen]

how about the iexplore.exe without the *32? is that also a legitimate internet explorer process? just wanted your clarification

 

[argus]

Y

how about the iexplore.exe without the *32? is that also a legitimate internet explorer process?

Yes

 

[Ramen]

Thank you will post again if something looks fishy 、(hopefully not)

 

[argus]

don't worry.
Malware climbs CPU 100%

 

[Ramen]

Hmm I just got back from work and checked the processes by all users and seeing multiple iexplore.exe again (this time only 5) (it was put to sleep when I was working)

the location is once again for ALL the mulitple processes are in C:\Program Files (x86)\iexplore.exe

could you explain
1)why both iexplore.exe and iexplore.exe*32 is run under two different processes when IE browser is open)
2)Why there are mutiples of iexplore.exe even when IE browser is closed?

 

[argus]

Because the system (X64). System x86 has only iexplore.exe

 

[Ramen]

So how about the iexplore.exe running without IE browser? is it as you explained in your previous
post that about multi tabs, it should be running even when IE browser is CLOSED?

C:\Program Files (x86)\iexplore.exe*32 is legitimate file.
It's part of the tab crash/isolation process. Tabs run in separate instances. Nothing to worry about.

Logs doesn't show active infection.

 

[argus]

Check file here
https://www.virustotal.com/

 

[Ramen]

Nope not a virus according to VirusTotal.
Thank you Argus once again sorry for being a pesky paranoid client.