Should I block it?
No, this file is 100% safe to run.
Additional versions
(Note, Koshy John publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
memclean.exe
By Koshy John (Signed)
| MD5: | 1aa28078f59cf3942df139b72b455a72 |
| SHA1: | 44023536fe245b34b5f91cd68a533c42a9c55630 |
Overview
memclean.exe executes as a process with the local user's privileges. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). The file is digitally signed by Koshy John which was issued by the COMODO CA Limited certificate authority (CA).
Details
| File name: | memclean.exe |
| Typical file path: | C:\users\user\appdata\roaming\koshyjohn.com\memclean\memclean.exe |
| Size: | 767.08 KB (785,489 bytes) |
| Build date: | 1/15/2010 4:09 PM |
| Certificate |
| Issued to: | Koshy John |
| Authority (CA): | COMODO CA Limited |
| Effective date: | Friday, February 1, 2013 |
| Expiration date: | Sunday, February 2, 2014 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'Memory Cleaner' → C:\users\user\appdata\Roaming\KoshyJohn.com\MemClean\MemClean.exe boot
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00044159% | |
| Kernel CPU: | 0.00009235% | |
| User CPU: | 0.00034925% | |
| Kernel CPU time: | 19,188 ms/min | |
| Memory |
| Private memory: | 2.65 MB | |
| Private (maximum): | 2.21 MB | |
| Private (minimum): | 220 KB | |
| Non-paged memory: | 2.65 MB | |
| Virtual memory: | 102.92 MB | |
| Virtual memory (peak): | 119.02 MB | |
| Working set: | 1.93 MB | |
| Working set (peak): | 9.25 MB | |
| Resource allocations |
| Threads: | 2 | |
| Handles: | 107 | |
| GUI GDI count: | 59 | |
| GUI GDI peak: | 61 | |
| GUI USER count: | 51 | |
| GUI USER peak: | 53 | |
Process properties
| Integrety level: | High |
| Platform: | 32-bit |
| Command line: | "C:\users\user\appdata\roaming\koshyjohn.com\memclean\memclean.exe" boot |
| Owner: | User |
Distribution by Windows OS
| OS version | distribution |
| Windows 8.1 Pro |
33.33% |
|
| Windows 8 Pro |
33.33% |
|
| Windows 7 Professional |
33.33% |
|
Distribution by country
Canada installs about 66.67% of memclean.exe.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Lenovo |
80.00% |
|
| Hewlett-Packard |
20.00% |
|
