home

SystemHealth.exe

System Health Tool

Schlumberger

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘SystemHealth’. This is installed with System Health Tool.
Publisher:
Schlumberger  (signed and verified)

Product:
System Health Tool

Version:
2.3.9

MD5:
7c90a679f2e3f857194d45654dfb3d33

SHA-1:
6f3dd61c976fb4b976b0c478369ca03f6160c6a7

SHA-256:
f3b6ba74612c9e615160343c038885bf93af45da7a9ae233a27013b7837539ad

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/25/2024 5:47:00 AM UTC  (today)

File size:
1012.5 KB (1,036,776 bytes)

Product version:
2.3.9

Copyright:
Copyright © Schlumberger - 2015

Original file name:
SystemHealth.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\schlumberger\system health tool\systemhealth.exe

Digital Signature
Signed by:
Schlumberger

Authority:
slb.com

Valid from:
2/17/2014 9:11:59 AM

Valid to:
2/16/2018 9:11:59 AM

Subject:
E=rgadeev@slb.com, CN=SCCM Code Signing Certificate, OU=IT, O=Schlumberger, L=Houston, S=TX, C=US

Issuer:
CN=Schlumberger Corporate Issuing CA2, OU=Schlumberger, O=slb.com, L=Houston, S=Texas, C=US

Serial number:
32A3E3B300000010E166

File PE Metadata
Compilation timestamp:
6/22/2015 2:52:53 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:i0jGVdHOCr6pTDZX22pE8XYWR7YArMD03Jbx:iWG/HDp2u8PRMER33

Entry address:
0x10200A

Entry point:
FF, 25, 00, 20, 50, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.8652

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
183 KB (187,392 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
SystemHealth

Command:
"C:\Program Files\schlumberger\system health tool\systemhealth.exe"


The file SystemHealth.exe has been discovered within the following program.

System Health Tool  by Schlumberger
www.Schlumberger.com
23% remove it
 
Powered by Should I Remove It?

Scan SystemHealth.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.