1.    30 May 2017 #1
    Join Date : Sep 2014
    Nashville, TN
    Posts : 3,143
    Windows 10 Pro

    Can anyone help identify this file?


    I have found a file called runexehelper.exe in my Windows\System32 folder. It's creation date is similar to the rest of the Windows files for my current build (16199), but unlike all the other Windows files, it does not contain any Details information in Properties->Details tab. So it does not suggest it was created by Microsoft.

    Does anyone else have this file? I've run various scans from anti-virus and anti-malware against it, and nothing flags it.

    The reason I discovered this was that I enabled process auditing, and noticed this app was running quite frequently. A google search doesn't come up with anything relevant. So just want to check if, in fact, this is a MS shipped file, or if something else installed it.
      My ComputerSystem Spec
  2.    31 May 2017 #2
    Join Date : Oct 2014
    Posts : 215
    Windows 10 Pro 64-bit

    I also am running 16199, and also have this file, so I am pretty sure is something new to this build (that also explains why Google doesn't find anything). Maybe Microsoft forgot to add the details info to this file.
    Click image for larger version. 

Name:	image.png 
Views:	61 
Size:	18.8 KB 
ID:	137428Click image for larger version. 

Name:	image.png 
Views:	61 
Size:	26.3 KB 
ID:	137429
      My ComputerSystem Spec
  3.    31 May 2017 #3

    A google search of the file name found plenty of results when I did it. Most of which were bad news.

    What antivirus scanner do you have. I would also run it by VIirusTotal online.
      My ComputersSystem Spec
  4.    31 May 2017 #4
    Join Date : Oct 2014
    Posts : 215
    Windows 10 Pro 64-bit

    Quote Originally Posted by swarfega View Post
    A google search of the file name found plenty of results when I did it. Most of which were bad news.



    What antivirus scanner do you have. I would also run it by VIirusTotal online.
    None of the results except this own thread and maybe the first one (which says safe) are related to this file. Many of the results having trojan or Virus are simply coincidental, because seems to be a utility called exehelper
    Click image for larger version. 

Name:	image.png 
Views:	2 
Size:	46.9 KB 
ID:	137505 Click image for larger version. 

Name:	image.png 
Views:	2 
Size:	47.4 KB 
ID:	137506 Click image for larger version. 

Name:	image.png 
Views:	2 
Size:	212.7 KB 
ID:	137509

    Click image for larger version. 

Name:	image.png 
Views:	2 
Size:	28.5 KB 
ID:	137507


    In my case I don't have any antivirus
    Do you have 16199 but do not have that file?
    Last edited by derek10; 31 May 2017 at 11:43.
      My ComputerSystem Spec
  5.    31 May 2017 #5
    Join Date : Aug 2014
    Forever West
    Posts : 3,922
    Win10 Home and Pro, Win10 Insider Preview, Win7 Home, Linux Mint

    Quote Originally Posted by derek10 View Post
    In my case I don't have any antivirus
    Do you have 16199 but do not have that file?
    By default Win10, the 3 versions I am running including the Insider Preview, installs Windows Defender antivirus.

    The file mentioned exists in 5 times on my 16199 HDD, twice in C:\Windows and 3 times in C:\Windows.old. The files are dated 05/01/17, 05/07/17 and 05/14/17.
      My ComputerSystem Spec
  6.    31 May 2017 #6
    Join Date : Sep 2014
    Nashville, TN
    Posts : 3,143
    Windows 10 Pro
    Thread Starter

    Ok, thanks guys. I'm less worried.

    The reason I enabled process auditing was because I kept seeing a console window pop up every so often, and it was quite annoying, and wanted to figure out what was doing it. It seems to be something called officebackgroundtaskhandler.exe in my office16 folder.

    Not sure what it's doing, or how to disable it. I just find it annoying as heck.

    Another thing I learned from process auditing, GoogleUpdate.exe seems to run a lot more often than I would expect it to.. like every couple of minutes. Strange, but not causing any issues.
      My ComputerSystem Spec

 


Similar Threads
Thread Forum
Solved identify unknown device
hi, I performed a fresh install of w10 on my sisters HP DV6 laptop, everything works but device manager shows 1 unknown device, is there anyway to find out what it is, I've installed all the drivers from the manufacturer
Drivers and Hardware
Help Identify some music
Hello, Maybe this is a strange, or not in place question, before posting it, I made a search and got nothing, so now I will ask you: Some days ago I listened to the radio - some classics, and heared a nice piece which I managed to record a few...
Chillout Room
Solved A challenge for the pro's. Can you help identify a reg key please.
Long story cut short... and this may be a far to simplistic approach but here goes...... I'm a great fan of Windows own Disk Imaging utility that is included with W10 BUT I have encountered one minor and one major issue. It seems that a restored...
General Support
SFC errors - how to identify/fix?
As one (not particularly hopeful) step in trouble-shooting a problem (Cortana not opening reliably) I used sfc /scannow from an elevated command. At its conclusion I got this message: "Windows Resource Protection found corrupt files but was...
Performance & Maintenance
Solved Identify OneNote version?
How do I identify my Microsoft OneNote's version?
Software and Apps
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 19:35.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums