SystemPropertiesRemote.exe
Summary
Windows System Remote Settings.
SystemPropertiesRemote.exe is the 3525th most commonly executed Windows program in EchoTrail's dataset, observed 55 times across enterprise environments. It typically runs from C:\Windows\System32 and it is most often launched by explorer.exe.
3525th
most commonly executed Windows program
55
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Windows\System32100%
Top Hashes (SHA256)
- 0cc4cd8a1630985deaf39c1719062e54590fd9e94ded7a0e54afbb72b910953021.28%
- 464b613bf38262c4c088068855b557082d1fca8f697f8c99d77704471069c32b17.02%
- c05a82102108ebb43c71a5d621604f1500d4b22794e82969e59d16683f2f6d9517.02%
- 8f6116c500f4a778725b753501fc095da4dfda36cf5ddd9bafca881c99b3e6b312.77%
- e0178c05597090522e268645d572622acf91aca4ef91ddb87f8e7fb14b66b67b12.77%
- 0c0ccf03bc17f570030e68326ac7e16d542f0bb1eeb4dd735f82468ba19aa3888.51%
- 5762e1570de6ca4ff4254d03c8f6e572f3b9c065bf5c78fd5a9ea3769c33818a6.38%
- 1b41901be7a2a3fd175aeb229a3f73c87014d44813a3cbf25981e97f7faab1e54.26%
Process Ancestry
Top Grandparents
- svchost.exe50%
- userinit.exe50%
Top Parents
- explorer.exe81.82%
- RuntimeBroker.exe7.27%
- SystemSettings.exe7.27%
- rundll32.exe3.64%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about SystemPropertiesRemote.exe
Rocky answers questions about SystemPropertiesRemote.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.