home

SystemHealth.exe

System Health Tool

Schlumberger

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘SystemHealth’. This file is installed with the program System Health Tool.
Publisher:
Schlumberger  (signed and verified)

Product:
System Health Tool

Version:
2.5

MD5:
b303e87d10888ecc2677865f56b6506a

SHA-1:
d46cbf12f6118ffd51f0bfa0358de0a882a91b53

SHA-256:
045c18db0847c87760b21f2c2b668df7e1c98668ee13949af35e6d0243061982

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/25/2024 5:42:49 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.Packed
1.3.0.7383

File size:
1.1 MB (1,107,432 bytes)

Product version:
2.5

Copyright:
Copyright © Schlumberger - 2015

Original file name:
SystemHealth.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\schlumberger\system health tool\systemhealth.exe

Digital Signature
Signed by:
Schlumberger

Authority:
slb.com

Valid from:
2/17/2014 7:11:59 AM

Valid to:
2/16/2018 7:11:59 AM

Subject:
E=rgadeev@slb.com, CN=SCCM Code Signing Certificate, OU=IT, O=Schlumberger, L=Houston, S=TX, C=US

Issuer:
CN=Schlumberger Corporate Issuing CA2, OU=Schlumberger, O=slb.com, L=Houston, S=Texas, C=US

Serial number:
32A3E3B300000010E166

File PE Metadata
Compilation timestamp:
11/23/2015 10:03:27 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
24576:+nzNSMquESoVk83uqzc2oWrM0SgkC026ii+60nOFzyDS8tFuKpX2BnJ3jNdMbZP:1/vS0knmc2okrSxC2+fngyvtFu82BnJK

Entry address:
0x11400A

Entry point:
FF, 25, 00, 40, 51, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.8526  (probably packed)

Code size:
210.5 KB (215,552 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
SystemHealth

Command:
"C:\Program Files\schlumberger\system health tool\systemhealth.exe"


The file SystemHealth.exe has been discovered within the following program.

System Health Tool  by Schlumberger
www.Schlumberger.com
23% remove it
 
Powered by Should I Remove It?

Scan SystemHealth.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.