Regular prompts from Defender Firewall about OneDriveFile Co-authoring

%3CLINGO-SUB%20id%3D%22lingo-sub-2148703%22%20slang%3D%22en-US%22%3ERegular%20prompts%20from%20Defender%20Firewall%20about%20OneDriveFile%20Co-authoring%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2148703%22%20slang%3D%22en-US%22%3E%3CP%3EI%20receive%20regular%20prompts%20from%20Defender%20Firewall%20about%20OneDrive%20File%20Co-authoring.%20(FileCoAuth.exe)%3CBR%20%2F%3Eappdata%5Clocal%5Cmicrosoft%5Conedrive%5C21.020.0128.0002%5Cfilecoauth.exe%3C%2FP%3E%3CP%3EThe%20file%20is%20identified%20(by%20defender)%20as%20being%20from%20Microsoft%20although%20the%20location%20(in%20my%20appdata)%20makes%20me%20suspicious%20that%20it%20could%20be%20malware%20%5Bsurely%20this%20is%20bad%20practice%5D%20and%20the%20fact%20that%20defender%20keeps%20blocking%20it%20(you'd%20think%20the%20OneDrive%20teams%20would%20have%20a%20working%20relationship%20with%20the%20Windows%20%26amp%3B%20defender%20team)%20doesn't%20add%20to%20my%20confidence.%3CBR%20%2F%3ESo%20questions%3A%3CBR%20%2F%3E1)%20Can%20anyone%20else%20confirm%20if%20this%20is%20really%20where%20MS%20keep%20this%20file%3F%20(what's%20wrong%20with%20program%20files%20etc.%3F)%3CBR%20%2F%3E2)%20Anyone%20know%20why%20defender%20keeps%20blocking%20it%20(My%20guess%20is%20that%20it's%20related%20to%20version%20updates%20and%20defender%20seeing%20a%20%22new%22%20app%20connection%20but%20why%20doesn't%20any%20update%20%22deal%22%20with%20issue%3F%20Especially%20as%20the%20defender%20dialgos%20often%20come%20up%20behind%20other%20open%20apps%20and%20go%20unnoticed%20for%20a%20while!%3CBR%20%2F%3E3)%20If%20other%20people%20aren't%20getting%20this%2C%20why%20am%20I%3F%3CBR%20%2F%3E%5BI%20have%20a%20lot%20of%20trouble%20with%20sync%20in%20Onedrive%20-%20which%20I%20have%20thus%20far%20put%20down%20to%20having%205%20Microsoft%20365%20tenants%20and%20personal%20drive%20active%20at%20the%20same%20time%20and%20editing%20across%20licences%5D%3C%2FP%3E%3CDIV%20class%3D%22ms-editor-squiggler%22%3E%26nbsp%3B%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2148703%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOneDrive%20for%20Business%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Contributor

I receive regular prompts from Defender Firewall about OneDrive File Co-authoring. (FileCoAuth.exe)
appdata\local\microsoft\onedrive\21.020.0128.0002\filecoauth.exe

The file is identified (by defender) as being from Microsoft although the location (in my appdata) makes me suspicious that it could be malware [surely this is bad practice] and the fact that defender keeps blocking it (you'd think the OneDrive teams would have a working relationship with the Windows & defender team) doesn't add to my confidence.
So questions:
1) Can anyone else confirm if this is really where MS keep this file? (what's wrong with program files etc.?)
2) Anyone know why defender keeps blocking it (My guess is that it's related to version updates and defender seeing a "new" app connection but why doesn't any update "deal" with issue? Especially as the defender dialgos often come up behind other open apps and go unnoticed for a while!
3) If other people aren't getting this, why am I?
[I have a lot of trouble with sync in Onedrive - which I have thus far put down to having 5 Microsoft 365 tenants and personal drive active at the same time and editing across licences]

 
0 Replies