Versions
(Note, Koshy John publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
memclean.exe
By Koshy John (Signed)
Overview
memclean.exe has 2 known versions, the most recent one is . memclean.exe is run as a standard windows process with the logged in user's account privileges. By adding a startup entry to the run registry key, the file will be executed when the user logs into Windows. The average file size is about 770.04 KB. It is an authenticode code-signed executable issued to Koshy John by the certification authority COMODO CA Limited. During the process's lifecycle, the typical CPU resource utilization is about 0.0020% including both foreground and background operations, the average private memory consumption is about 5.86 MB. Addionally, typically read and write I/O disk operations is about 120.02 KB per minute for reads and 4.99 KB per minute for writes.
 Details
|
| File name: | memclean.exe |
| Typical file path: | C:\users\user\appdata\roaming\koshyjohn.com\memclean\memclean.exe |
| Certificate |
| Issued to: | Koshy John |
| Authority (CA): | COMODO CA Limited |
| Effective date: | Friday, February 1, 2013 |
| Expiration date: | Sunday, February 2, 2014 |
Behaviors
(Note, the behaviors below are for all versions of memclean.exe, select a unique version for details.)
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'Memory Cleaner' → C:\users\user\appdata\Roaming\KoshyJohn.com\MemClean\MemClean.exe boot
All file variations of memclean.exe
