Windows 10: Can anyone help identify this file?

  1.    30 May 2017 #1

    Can anyone help identify this file?


    I have found a file called runexehelper.exe in my Windows\System32 folder. It's creation date is similar to the rest of the Windows files for my current build (16199), but unlike all the other Windows files, it does not contain any Details information in Properties->Details tab. So it does not suggest it was created by Microsoft.

    Does anyone else have this file? I've run various scans from anti-virus and anti-malware against it, and nothing flags it.

    The reason I discovered this was that I enabled process auditing, and noticed this app was running quite frequently. A google search doesn't come up with anything relevant. So just want to check if, in fact, this is a MS shipped file, or if something else installed it.
      My ComputerSystem Spec

  2.    31 May 2017 #2

    I also am running 16199, and also have this file, so I am pretty sure is something new to this build (that also explains why Google doesn't find anything). Maybe Microsoft forgot to add the details info to this file.
    Click image for larger version. 

Name:	image.png 
Views:	61 
Size:	18.8 KB 
ID:	137428Click image for larger version. 

Name:	image.png 
Views:	61 
Size:	26.3 KB 
ID:	137429
      My ComputerSystem Spec

  3.    31 May 2017 #3

    A google search of the file name found plenty of results when I did it. Most of which were bad news.

    What antivirus scanner do you have. I would also run it by VIirusTotal online.
      My ComputersSystem Spec

  4.    31 May 2017 #4

    swarfega said: View Post
    A google search of the file name found plenty of results when I did it. Most of which were bad news.



    What antivirus scanner do you have. I would also run it by VIirusTotal online.
    None of the results except this own thread and maybe the first one (which says safe) are related to this file. Many of the results having trojan or Virus are simply coincidental, because seems to be a utility called exehelper
    Click image for larger version. 

Name:	image.png 
Views:	2 
Size:	46.9 KB 
ID:	137505 Click image for larger version. 

Name:	image.png 
Views:	2 
Size:	47.4 KB 
ID:	137506 Click image for larger version. 

Name:	image.png 
Views:	2 
Size:	212.7 KB 
ID:	137509

    Click image for larger version. 

Name:	image.png 
Views:	2 
Size:	28.5 KB 
ID:	137507


    In my case I don't have any antivirus
    Do you have 16199 but do not have that file?
    Last edited by derek10; 31 May 2017 at 11:43.
      My ComputerSystem Spec


  5. Posts : 4,503
    Win10 Home and Pro, Win10 Insider Preview, Win7 Home, Linux Mint
       31 May 2017 #5

    derek10 said: View Post
    In my case I don't have any antivirus
    Do you have 16199 but do not have that file?
    By default Win10, the 3 versions I am running including the Insider Preview, installs Windows Defender antivirus.

    The file mentioned exists in 5 times on my 16199 HDD, twice in C:\Windows and 3 times in C:\Windows.old. The files are dated 05/01/17, 05/07/17 and 05/14/17.
      My ComputerSystem Spec

  6.    31 May 2017 #6

    Ok, thanks guys. I'm less worried.

    The reason I enabled process auditing was because I kept seeing a console window pop up every so often, and it was quite annoying, and wanted to figure out what was doing it. It seems to be something called officebackgroundtaskhandler.exe in my office16 folder.

    Not sure what it's doing, or how to disable it. I just find it annoying as heck.

    Another thing I learned from process auditing, GoogleUpdate.exe seems to run a lot more often than I would expect it to.. like every couple of minutes. Strange, but not causing any issues.
      My ComputerSystem Spec


 

Related Threads
Solved identify unknown device in Drivers and Hardware
hi, I performed a fresh install of w10 on my sisters HP DV6 laptop, everything works but device manager shows 1 unknown device, is there anyway to find out what it is, I've installed all the drivers from the manufacturer
Help Identify some music in Chillout Room
Hello, Maybe this is a strange, or not in place question, before posting it, I made a search and got nothing, so now I will ask you: Some days ago I listened to the radio - some classics, and heared a nice piece which I managed to record a few...
Long story cut short... and this may be a far to simplistic approach but here goes...... I'm a great fan of Windows own Disk Imaging utility that is included with W10 BUT I have encountered one minor and one major issue. It seems that a restored...
SFC errors - how to identify/fix? in Performance & Maintenance
As one (not particularly hopeful) step in trouble-shooting a problem (Cortana not opening reliably) I used sfc /scannow from an elevated command. At its conclusion I got this message: "Windows Resource Protection found corrupt files but was...
Solved Identify OneNote version? in Microsoft Office and 365
How do I identify my Microsoft OneNote's version?
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 02:57.
Find Us