» MemOptimizer.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

MemOptimizer.exe

MemOptimizer

Pointstone Software, LLC

The application MemOptimizer.exe by Pointstone Software has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘MemOptimizer’. This file is typically installed with the program MemOptimizer 3 by Pointstone Software, LLC.

File name:

MemOptimizer.exe

Publisher:

Pointstone Software, LLC (signed and verified)

Product:

MemOptimizer

Version:

3.5.0.130

MD5:

ad7c514526891bc43d0dae1d93682485

SHA-1:

40698546c6d1f499b0aa3005cc120c4b62845c8f

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

11/23/2024 2:18:56 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Optional.Pointstone.Startup

17.1.19.18

File size:

1.3 MB (1,333,552 bytes)

Product version:

3.0.0.0

Trademarks:

MemOptimizer and Pointstone are either trademarks or registered trademarks of Pointstone Software, LLC

Original file name:

MemOptimizer.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\pointstone\memoptimizer 3\memoptimizer.exe

Digital Signature

Signed by:

Pointstone Software, LLC

Authority:

The USERTRUST Network

Valid from:

3/18/2010 1:00:00 AM

Valid to:

3/18/2012 12:59:59 AM

Subject:

CN="Pointstone Software, LLC", O="Pointstone Software, LLC", STREET=220 E. Delaware Avenue, L=Newark, S=Delaware, PostalCode=19711, C=US

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

39D522210A1786B5F689AF9B0415E163

File PE Metadata

Compilation timestamp:

4/7/2011 9:59:54 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

Entry address:

0x1000

Entry point:

68, 01, D0, 65, 00, E8, 01, 00, 00, 00, C3, C3, 40, 87, E3, 50, 15, 05, 9D, ED, BA, E3, 50, 00, 43, AB, 19, D7, D6, 8C, 7D, 15, E8, 23, 4C, D9, 08, C0, 82, 73, C5, 94, 1A, C8, D3, A8, E0, 9E, 50, B6, 4C, 93, E2, 26, 6A, 35, 7F, 5B, 1A, CA, EF, F2, A7, 47, 1D, FF, 49, 0C, 33, 79, 13, ED, 21, 64, 06, 21, 54, E7, 28, F4, 39, 71, 75, 08, 77, 3E, 48, 1A, FE, 4A, 6E, B9, E3, 29, 8A, 75, C4, 9F, A4, 2A, 66, 19, 7D, 33, 87, CC, E2, F5, BA, FF, E3, DC, E3, 94, 33, 89, 33, 68, 37, A9, F9, 01, 28, 09, 7F, E8, FE, BF... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

1.6 MB (1,643,520 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

MemOptimizer

Command:

C:\Program Files\pointstone\memoptimizer 3\memoptimizer.exe

The file MemOptimizer.exe has been discovered within the following program.

MemOptimizer 3 by Pointstone Software, LLC

Publisher's description - “Prevent crashes and improve your system's performance by freeing up unused RAM. Is your PC becoming increasingly slow and unstable? MemOptimizer monitors your system in the background and frees resources when these are required.”

www.MemOptimizer.com

43% remove it

Remove MemOptimizer.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.