home

systemexplorerservice64.exe

System Explorer

Miroslav Topolar

It runs as a windows Service named “System Explorer Service”.
Publisher:
Mister Group  (signed by Miroslav Topolar)

Product:
System Explorer

Description:
System Explorer Service

Version:
5.0.0.248

MD5:
a30b77ddd64f77548acc28c991af0eb4

SHA-1:
7889a1ea943dbade8af12136e00d271c34c527fc

SHA-256:
42b373986dfcdb6c3a8285545d2366d316c300659031ad18740f608cdfab61f8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 8:28:39 PM UTC  (today)

File size:
801.9 KB (821,096 bytes)

Product version:
5

Copyright:
Mister Group

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\system explorer\service\systemexplorerservice64.exe

Digital Signature
Signed by:
Miroslav Topolar

Authority:
GlobalSign nv-sa

Valid from:
4/2/2014 6:04:22 PM

Valid to:
4/3/2015 6:04:22 PM

Subject:
E=topolar@gmail.com, CN=Miroslav Topolar, O=Miroslav Topolar, L=Vyskov, C=CZ

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121064920E7AF489635733C913FD203FD9F

File PE Metadata
Compilation timestamp:
8/13/2014 3:32:27 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:BqwQIf3Z16DFDKRT85fVvW/dwEjG3203RFS8vgZx73mo4r9v05t7AwcxDh7:4w7J1qFDKp8tpsWl203RsEyhAs7ALxJ

Entry address:
0x954E0

Entry point:
55, 53, 48, 83, EC, 78, 48, 8B, EC, 48, C7, 45, 40, 00, 00, 00, 00, 48, C7, 45, 38, 00, 00, 00, 00, 48, C7, 45, 58, 00, 00, 00, 00, 48, C7, 45, 48, 00, 00, 00, 00, 48, C7, 45, 50, 00, 00, 00, 00, 48, C7, 45, 68, 00, 00, 00, 00, 48, C7, 45, 60, 00, 00, 00, 00, 90, 48, 8D, 0D, AF, A0, FF, FF, E8, 22, BE, F7, FF, 90, C7, 05, C3, A6, 01, 00, 00, 00, 00, 00, 48, 8B, 05, E0, FB, 00, 00, 48, 8B, 08, 48, 8D, 15, 3A, 02, 00, 00, 4C, 8D, 05, 67, 02, 00, 00, 4C, 8D, 0D, A4, A6, 01, 00, C6, 44, 24, 20, 00, E8, 0E, 9E...
 
[+]

Code size:
594.5 KB (608,768 bytes)

Service
Display name:
System Explorer Service

Service name:
SystemExplorerHelpService

Type:
Win32ShareProcess


Scan systemexplorerservice64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.