Versions

4.0.0.248	85.71%
4.0.0.247	14.29%

There are 2 versions of systemexplorerservice64.exe in the wild, the latest version being 4.0.0.248. It is started as a Windows Service called 'SystemExplorerHelpService' with the name 'SystemExplorerHelpService'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). This is executed as a shared service (which simply means that this service can share a process with other Win32 services). The average file size is about 802.46 KB. The file is a digitally signed and issued to Miroslav Topolar by GlobalSign nv-sa. The executable is a .NET framework assembly utilizing the CLR. During the process's lifecycle, the typical CPU resource utilization is about 0.0011% including both foreground and background operations, the average private memory consumption is about 7.29 MB with the maximum memory reaching around 7.99 MB and typical read I/O operations are around 1.22 KB per minute.