» memeolauncher2.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

memeolauncher2.exe

Memeo Backup

Memeo Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Memeo Backup’. This is installed with Memeo Backup.

File name:

memeolauncher2.exe

Publisher:

Memeo Inc. (signed and verified)

Product:

Memeo Backup

Description:

Memeo Backup Launcher

Version:

2.0.0.0

MD5:

1f5004793b9f1ad727d5cdedeacca088

SHA-1:

0dc2719c1394865239f15b73ca349583f03a53b8

SHA-256:

a0a555200fbec7a55a62852991fb4f9a60ce41fd61332eb614b9b4160514793d

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/18/2024 2:51:52 AM UTC (today)

File size:

133.9 KB (137,088 bytes)

Product version:

2.0.0.0

Trademarks:

Memeo

Original file name:

MemeoLauncher.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\memeo\autobackup\memeolauncher2.exe

Digital Signature

Signed by:

Memeo Inc.

Authority:

VeriSign, Inc.

Valid from:

10/10/2012 2:00:00 AM

Valid to:

9/21/2013 1:59:59 AM

Subject:

CN=Memeo Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Development, O=Memeo Inc., L=Santa Clara, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

39EC558658FA7A225F8981277DED3DA0

File PE Metadata

Compilation timestamp:

11/22/2012 12:23:26 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

3072:EwS1CsW4qzuPTEYfCbYz0a/GM8660BTlQU0s4N:NdYqMTE2XAaxBX

Entry address:

0x16B8E

Entry point:

FF, 25, 00, 20, 00, 11, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00... 
[+]

Developed / compiled with:

Microsoft Visual C# / Basic .NET

Code size:

84 KB (86,016 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

Memeo Backup

Command:

C:\Program Files\memeo\autobackup\memeolauncher2.exe --silent --no_ui

The file memeolauncher2.exe has been discovered within the following program.

Memeo Backup by Memeo Inc.

Publisher's description - “Choose which files you want in each plan or you can back up your entire C drive. You can also select multiple backup destinations - external hard drives, another computer on your network, USB storage devices or online storage.”

www.memeo.com

20% remove it

Scan memeolauncher2.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.