home

systemexplorer.exe

System Explorer

Miroslav Topolar

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘SystemExplorerAutoStart’. This is installed with multiple programs including System Explorer 7.0.0.
Publisher:
Mister Group  (signed by Miroslav Topolar)

Product:
System Explorer

Version:
7.0.0.5356

MD5:
e6563f7f05cb9664542b7d9035515ecd

SHA-1:
7e5712d74d8b55fe459a15b20e92eac3d2c8dccf

SHA-256:
16177c3a3bbf5bfb65b0a5ae948757e1886b45321ffd16b8f2328eca34baec53

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 1:33:57 PM UTC  (today)

File size:
3.2 MB (3,389,160 bytes)

Product version:
7.0.0

Copyright:
(c) Mister Group

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\system explorer\systemexplorer.exe

Digital Signature
Signed by:
Miroslav Topolar

Authority:
GlobalSign nv-sa

Valid from:
3/18/2015 11:28:11 AM

Valid to:
5/3/2016 6:04:22 PM

Subject:
E=topolar@gmail.com, CN=Miroslav Topolar, O=Miroslav Topolar, L=Vyskov, C=CZ

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11214DA2CA614145C1343E0805524D173508

File PE Metadata
Compilation timestamp:
8/19/2015 10:00:14 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:/1ApB8/KDhTqzpKI0bfIcQK/cLZsZEPXeZ98cqWbaw:/1uimTgkFQK/cmEPoew

Entry address:
0x25240C

Entry point:
55, 8B, EC, B9, 05, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 51, B8, C4, EF, 64, 00, E8, 0A, 58, DB, FF, 33, C0, 55, 68, D1, 29, 65, 00, 64, FF, 30, 64, 89, 20, E8, 5F, A1, FF, FF, A1, 20, B8, 65, 00, 80, 38, 05, 77, 34, A1, 18, C0, 65, 00, 8B, 00, 8B, 40, 30, E8, 26, 73, F9, FF, 8D, 4D, EC, 33, D2, B8, E4, 29, 65, 00, E8, 3F, 2C, EE, FF, 8B, 4D, EC, BA, 3C, 2A, 65, 00, 33, C0, E8, C0, FF, F2, FF, 6A, 00, E8, E1, 5B, DB, FF, E8, BC, 11, DB, FF, 85, C0, 0F, 8E, 23, 03, 00, 00, C6, 05, F8, 7E, 66, 00, 01, 8D...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
2.3 MB (2,431,488 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
SystemExplorerAutoStart

Command:
"C:\Program Files\system explorer\systemexplorer.exe" \tray


User Start Menu Item
Name:
SystemExplorer.exe


The file systemexplorer.exe has been discovered within the following programs.

System Explorer 7.0.0  by Mister Group
www.systemexplorer.net
About 7% of users remove it
SystemExplorer  by RePack by Andreyonohov
About 9% of users remove it
 
Powered by Should I Remove It?

Scan systemexplorer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.