Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

Mystery File mager.onnxe 300,597,649 bytes


  • Please log in to reply
7 replies to this topic

#1 Keven412

Keven412

  •  Avatar image
  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:09:10 AM

Posted 20 July 2024 - 09:37 PM

Hello, Robert here, today I found a fairly large file of weird and puzzling origins. It's Called Mager.onnxe. and its 300,597,649 bytes and growing. It's located in system information files here 

 

C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2024.11020.28003.0_x64__8wekyb3d8bbwe\mager.onnxe
 
C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2024.11070.15005.0_x64__8wekyb3d8bbwe\mager.onnxe
 
C:\System Volume Information\SystemRestore\AppxStaging\Program Files\WindowsApps\Microsoft.Windows.Photos_2024.11020.28003.0_x64__8wekyb3d8bbwe\mager.onnxe
 

I'v tried to find info on it and most I got from researching it was "is it missed spelled" for Maniger.one, copilot knew nothing about the file and then rewording my question in a way to make fun of it, (copilot hates this) it replied , ONNX stands for Open Neural Network ExchangeIt’s an open standard for machine learning interoperability1ONNX defines a common set of operators - the building blocks of machine learning and deep learning models - and a common file format to enable AI developers to use models with a variety of frameworks, tools, runtimes, and compilers, however copilot completely denies knowing or finding anything about this file, being owned created and secured by "SYSTEM" on my pc. i even did a forced web search "great for when ai, or copilot is being to stubborn to chatty, or having an AI hallucination"

 

[assistant][(#search_web(query=“what is the file namager.onnxe owned by Windows system on my pc?”))]

 its reply, 

 

I’m sorry for the confusion earlier. I tried to find information about a file named “mager.onnxe” in Windows, but I couldn’t find any relevant information. It’s possible that this file is not a standard part of the Windows operating system or any commonly used applications.

The file size you mentioned, 300,597,649 bytes, is quite large (around 286 MB). If you’re not sure what this file is, it’s generally a good idea to not open it until you can verify its contents. Here are a few steps you can take to investigate further: Based on the directory listing you provided, it appears that the mager.onnxe file is located in the same directory as several other files related to the Photos App in Windows. This includes various .dll.winmd, and .exe files, which are typically associated with Windows applications.

The mager.onnxe file could be a part of the Photos App or a related component, but without more specific information, it’s hard to say for certain what its purpose is. The .onnxe extension is not a standard file extension recognized by Windows or common applications. It’s possible that this file is used internally by the Photos App or a related component.

 

You
Sent by you:
You're saying that Windows doesn't do any of this? Open Neural Network Exchange. It’s an open standard for machine learning interoperability1. ONNX defines a common set of operators - the building blocks of machine learning and deep learning models - and a common file format to enable AI developers to use models with a variety of frameworks, tools, runtimes, and compilers, and there for windows doesnt recognise a .onnxe file that its app created?

Copilot

Sent by Copilot:

I apologize for any confusion. You’re correct that ONNX (Open Neural Network Exchange) is a standard for machine learning interoperability. It allows developers to use models across various frameworks, tools, runtimes, and compilers.

However, the .onnxe file extension you mentioned is not a standard file extension associated with ONNX or recognized by Windows. It’s possible that this file is used internally by the Photos App or a related component in Windows, but without more specific information, it’s hard to say for certain what its purpose is.

If you’re experiencing issues with the Photos App or have concerns about this file, I would recommend reaching out to Microsoft Support or the relevant software vendor for further assistance. They may be able to provide more specific information about this file and its purpose. 

 

 

so any one know what this is? thanks 

 


BC AdBot (Login to Remove)

 


#2 Secret-Squirrel

Secret-Squirrel

  •  Avatar image
  • Members
  • 570 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:United Kingdom
  • Local time:02:10 PM

Posted 21 July 2024 - 02:59 AM

 

......................I found a fairly large file of weird and puzzling origins. It's Called Mager.onnxe. and its 300,597,649 bytes...........C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2024.11020.28003.0_x64__8wekyb3d8bbwe\mager.onnxe

 

My Windows 10 has that file, with exactly the same size, in that folder as well.

 

I don't believe that there's anything sinister going on so you should stop worrying about it - especially when 286MB is hardly a big file.
 



#3 Chris Cosgrove

Chris Cosgrove

  •  Avatar image
  • Site Admin
  • 29,726 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Scotland
  • Local time:01:10 PM

Posted 21 July 2024 - 04:18 AM

BC has certainly taken me to some strange places on my computer !  This is not an area I have ever looked at but under WindowsApps there are any number of folders with the suffix '_8wekyb3d8bbwe' and '-8wekyb3d8bbwe' but I don't appear to have any file with the ONNXE extension. I would also have to disagree with Secret-Squirrel when he calls 286MB 'hardly a big file'. 286MB is about 40% of the capacity of a standard CD or equivalent to about 10 minutes of high definition (1020p) video.

 

All I can suggest, if you are worried about this being malicious, is to start a topic in Virus and Malware Removal.

 

Chris Cosgrove



#4 midimusicman79

midimusicman79

    Sec & Web Browser Enthusiast


  •  Avatar image
  • BC Advisor
  • 5,620 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Norway
  • Local time:02:10 PM

Posted 21 July 2024 - 05:48 AM

And if you would like to do so, please follow the instructions in the Malware Removal and Log Section Preparation Guide.

Good luck! :)

Microsoft Windows 10 Professional 64-bit V. 22H2 (19045) Retail Desktop PC, EAMH Paid/EEK, MB 5 Prem., and Unchecky, MDFW, FF with uBO/AG, Grammarly Free, MBBG, and Acronis True Image Essentials, RuckZuck, PatchMyPC, UpdateHub, UniGetUI, UCheck, and Winget. I have 29.5 Years of PC Experience.


#5 Secret-Squirrel

Secret-Squirrel

  •  Avatar image
  • Members
  • 570 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:United Kingdom
  • Local time:02:10 PM

Posted 21 July 2024 - 11:40 AM

..............................8wekyb3d8bbwe' but I don't appear to have any file with the ONNXE extension

Well, I had another look on a second PC and this what I found:

 

CMD.jpg
 

It's just a Photos app system file and nothing to worry about. I still don't believe that there's anything sinister going on or it's malware related.


Edited by Secret-Squirrel, 21 July 2024 - 11:49 AM.


#6 midimusicman79

midimusicman79

    Sec & Web Browser Enthusiast


  •  Avatar image
  • BC Advisor
  • 5,620 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Norway
  • Local time:02:10 PM

Posted 21 July 2024 - 01:42 PM

I also checked my desktop-only computer with Microsoft Windows 10 Professional 64-bit Build 19045.4651 (22H2) and I have the same file, with the exact same file size, and in the same folder. :)

 

As a security and web browser enthusiast, I even follow the Best Practices for Safe Computing - Prevention of Malware Infection, so there is NO malware on my computer. :thumbup2:


Microsoft Windows 10 Professional 64-bit V. 22H2 (19045) Retail Desktop PC, EAMH Paid/EEK, MB 5 Prem., and Unchecky, MDFW, FF with uBO/AG, Grammarly Free, MBBG, and Acronis True Image Essentials, RuckZuck, PatchMyPC, UpdateHub, UniGetUI, UCheck, and Winget. I have 29.5 Years of PC Experience.


#7 wielkipiec

wielkipiec

  •  Avatar image
  • Members
  • 1 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Poland
  • Local time:02:10 PM

Posted 01 November 2024 - 04:50 PM

Hello,
Despite this being an old topic, I decided to bump it. Since there is very little information about this file on the web and it's huge, let's change it, as I did some digging.

"mager.onnxe" is an ONNX model for a component of a Microsoft project called Perceptive Shell. It is accompanied with a library, magerapi.dll. Lookng around it quickly shows that "mager" is an abbreviation for... "Magic Eraser". Which is an internal name for a Microsoft Photos feature, called Generative Erase.

Here's some docs: https://support.microsoft.com/en-us/windows/using-generative-erase-in-microsoft-photos-e0b4df42-3372-4dfd-9d28-c4ef408454a7



#8 midimusicman79

midimusicman79

    Sec & Web Browser Enthusiast


  •  Avatar image
  • BC Advisor
  • 5,620 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Norway
  • Local time:02:10 PM

Posted 01 November 2024 - 10:00 PM

:welcome: to BC, and Thank you, wielkipiec! :)

Edited by midimusicman79, 01 November 2024 - 10:00 PM.

Microsoft Windows 10 Professional 64-bit V. 22H2 (19045) Retail Desktop PC, EAMH Paid/EEK, MB 5 Prem., and Unchecky, MDFW, FF with uBO/AG, Grammarly Free, MBBG, and Acronis True Image Essentials, RuckZuck, PatchMyPC, UpdateHub, UniGetUI, UCheck, and Winget. I have 29.5 Years of PC Experience.





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users