» rfa_start.exe
Overview
Analysis
File Details
Programs (1)

rfa_start.exe

Registry First Aid

Rose City Software

File name:

rfa_start.exe

Publisher:

KsL Software (signed by Rose City Software)

Product:

Registry First Aid

Description:

Registry First Aid, the easy powerful registry cleanup program

Version:

7.0.0.1648

MD5:

e78350908f9f2fb5de11e9ec152b8b5c

SHA-1:

ab26ef5213457b81035b7bd7e6400838a41c2139

SHA-256:

860bda40767cd6c42763c945ebbf3bab6a72b6d2d403f786cce5f07c301e3ece

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 11:27:00 AM UTC (today)

File size:

601.3 KB (615,736 bytes)

Product version:

7.0.0.1648

Original file name:

adminrun.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\rfa\rfa_start.exe

Digital Signature

Signed by:

Rose City Software

Authority:

GeoTrust Inc.

Valid from:

2/12/2008 4:34:58 PM

Valid to:

2/25/2009 4:34:58 PM

Subject:

E=jburke@infinisource.com, CN=Rose City Software, OU=Email and phone validated only., OU=Phone Validation - 1(503) 699-0463, OU=See Public S/MIME CPS www.geotrust.com/resources/CPS., OU=CPS terms incorporated by reference liability limited.

Issuer:

CN=GeoTrust True Credentials CA 2, O=GeoTrust Inc., C=US

Serial number:

108979

File PE Metadata

Compilation timestamp:

6/19/1992 3:22:17 PM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

6144:bglBUvbD36DqWWIZcMgK4flmL8esAvq6oP924K+fI6pJzrUp:2CbDqeGZcMgmFsCqP2B+g6pZrg

Entry address:

0x461C

Entry point:

55, 8B, EC, 83, C4, EC, 53, 56, 33, C0, 89, 45, F0, 89, 45, EC, B8, B4, 45, 40, 00, E8, 42, F4, FF, FF, 33, C0, 55, 68, 17, 48, 40, 00, 64, FF, 30, 64, 89, 20, 68, 28, 48, 40, 00, 6A, FF, 68, 00, 00, 10, 00, E8, B7, F4, FF, FF, A3, FC, 65, 40, 00, 83, 3D, FC, 65, 40, 00, 00, 74, 1B, A1, FC, 65, 40, 00, 50, E8, A6, F4, FF, FF, A1, FC, 65, 40, 00, 50, E8, 5B, F4, FF, FF, E9, 7E, 01, 00, 00, 68, 28, 48, 40, 00, 6A, FF, 6A, 00, E8, 50, F4, FF, FF, A3, FC, 65, 40, 00, 83, 3D, FC, 65, 40, 00, 00, 0F, 84, 5E, 01... 
[+]

Entropy:

5.5813

Developed / compiled with:

Microsoft Visual C++

Code size:

14.5 KB (14,848 bytes)

The file rfa_start.exe has been discovered within the following program.

Registry First Aid by RoseCitySoftware

Registry First Aid from RoseCitySoftware is registry fixer utility whose purported purpose is to remove redundant items from the Windows registry.

www.registry-repair-software.com

47% remove it

Scan rfa_start.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.