Question Does anyone else have "PosPaymentsWorker.exe" in their System32 Folder?

[The Guy From The Thing]

there's so little information about this file online that I could find but I discovered an exe file in my Windows 10 System32 called "pospaymentsworker"; when right clicking Properties, and going to Details, there is no File Description, File Version, Product Name, Product Version, Copyright, or Language


this file, for me, has a creation and last modified date of December 7th 2019, and a rough size of around 44kb. I cross checked in my Windows 11 laptop's System32 folder and the "pospaymentsworker" exe is there as well, although the creation/modification date is in 2023 due to the recency of the laptop account



neither devices have this file in the SysWOW64 folder, and both of them have it in the WinSxS folder, under the "amd64-microsoftwindows-d..ice" folder, or something similar to that, I can't recall the exact name. I looked at the Properties of the file in the WinSxS folder, and it also has no File Desc or Version, no Product Name or Version, no Copyright, and no Language, it's blank as well. the creation and modification date is the exact same as the one in System32 as well


I scanned the file with Windows Defender and MalwareBytes; they came up with nothing


I don't want any links to a site that talks about the file, I would just like to know if anyone else has this "pospaymentsworker" exe file in their System32 folder? and if it also has blanks in the Details tab of Properties?

 

[turtletarget111]

Pospaymentsworker.exe is a normal Windows32 file. It is also normal to be completely blank with no creator or signature. If it did have information, that could potentially mean it has been hijacked and used to disguise malware. To answer your question exactly, yes, the exact same blank file is on my system too.

 

[The Guy From The Thing]

Pospaymentsworker.exe is a normal Windows32 file. It is also normal to be completely blank with no creator or signature. If it did have information, that could potentially mean it has been hijacked and used to disguise malware. To answer your question exactly, yes, the exact same blank file is on my system too.

thanks for clarifying. usually if I see a file, I'll hover over it to see the "Microsoft Corporation" name pop up but it didn't do that for this file, and when I tried googling about it, pretty much came up with nothing


only info I could really find was talking about how it can be found in the WinSxS folder. you can kind of see why it gave me a bit of a scare


I'm on Windows 10 64-bit, and even though I checked with my Windows 11 laptop (which I think can only be 64-bit), I just wanted to ask elsewhere

 

[Colif]

its a windows admin tool of some sort but as you said, there isn't a lot out there on it.

Its listed on here: https://www.anoopcnair.com/administrative-tools-windows-tools-windows-11/

its date in some reports shows as being from 2065, this is a common trick by Microsoft to ensure files aren't accidentally replaced. Some of the windows files show as really old as well, for similar reasons.

https://strontic.github.io/xcyclope...ker.exe-77D96999819206E9208DF12819E5DBA7.html << shows its Microsoft.