» rfa_start.exe
Overview
Analysis
File Details
Programs (1)

rfa_start.exe

Registry First Aid

Rose City Software

File name:

rfa_start.exe

Publisher:

KsL Software (signed by Rose City Software)

Product:

Registry First Aid

Description:

Registry First Aid, the easy powerful registry maintenance program

Version:

7.0.0.1690

MD5:

60685fa2988e28740a428ba8e3b763dd

SHA-1:

7f50004a65ce638a5fdea7743fc0822ddc415370

SHA-256:

8f6034f1ee443de43044132b967c37e564fec2ed95ff216c08780d2108de9e24

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/10/2024 3:19:02 PM UTC (today)

File size:

621.3 KB (636,256 bytes)

Product version:

7.0.0.1690

Original file name:

adminrun.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\rfa\rfa_start.exe

Digital Signature

Signed by:

Rose City Software

Authority:

GeoTrust Inc.

Valid from:

2/12/2008 7:34:58 PM

Valid to:

2/25/2009 7:34:58 PM

Subject:

E=jburke@infinisource.com, CN=Rose City Software, OU=Email and phone validated only., OU=Phone Validation - 1(503) 699-0463, OU=See Public S/MIME CPS www.geotrust.com/resources/CPS., OU=CPS terms incorporated by reference liability limited.

Issuer:

CN=GeoTrust True Credentials CA 2, O=GeoTrust Inc., C=US

Serial number:

108979

File PE Metadata

Compilation timestamp:

6/19/1992 6:22:17 PM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

6144:ikgWmBUvbD36DqWWIZcMgK4flmL8esAvq6oP924K+fI6pJzrdJ:icmCbDqeGZcMgmFsCqP2B+g6pZrH

Entry address:

0x81F0

Entry point:

55, 8B, EC, 83, C4, EC, 53, 56, 33, C0, 89, 45, F0, 89, 45, EC, B8, 98, 81, 40, 00, E8, 12, C5, FF, FF, 33, C0, 55, 68, EB, 83, 40, 00, 64, FF, 30, 64, 89, 20, 68, FC, 83, 40, 00, 6A, FF, 68, 00, 00, 10, 00, E8, A7, C5, FF, FF, A3, 08, A7, 40, 00, 83, 3D, 08, A7, 40, 00, 00, 74, 1B, A1, 08, A7, 40, 00, 50, E8, 96, C5, FF, FF, A1, 08, A7, 40, 00, 50, E8, 2B, C5, FF, FF, E9, 7E, 01, 00, 00, 68, FC, 83, 40, 00, 6A, FF, 6A, 00, E8, 20, C5, FF, FF, A3, 08, A7, 40, 00, 83, 3D, 08, A7, 40, 00, 00, 0F, 84, 5E, 01... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

29.5 KB (30,208 bytes)

The file rfa_start.exe has been discovered within the following program.

Registry First Aid by RoseCitySoftware

Registry First Aid from RoseCitySoftware is registry fixer utility whose purported purpose is to remove redundant items from the Windows registry.

www.registry-repair-software.com

47% remove it

Scan rfa_start.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.