» rfa_start.exe
Overview
Analysis
File Details
Programs (1)

rfa_start.exe

Registry First Aid

Rose City Software

File name:

rfa_start.exe

Publisher:

KsL Software (signed by Rose City Software)

Product:

Registry First Aid

Description:

Registry First Aid, the easy powerful registry maintenance program

Version:

7.1.0.1719

MD5:

fe43ccefac61ad9c423358d8e5afa89b

SHA-1:

d007cb69c78baa499b77fd3ace7f42b5539c1414

SHA-256:

7ebcce148e7fb33155129d9f89b341a2e77cd771b21be6c84df7239dfc145780

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 2:31:25 AM UTC (today)

File size:

621.3 KB (636,224 bytes)

Product version:

7.1.0.1719

Original file name:

adminrun.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\rfa\rfa_start.exe

Digital Signature

Signed by:

Rose City Software

Authority:

The USERTRUST Network

Valid from:

4/28/2009 8:00:00 PM

Valid to:

4/29/2010 7:59:59 PM

Subject:

CN=Rose City Software, O=Rose City Software, STREET=3 Monroe Pkwy, STREET=Suite P-447, L=Lake Oswego, S=OR, PostalCode=97035, C=US

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

33DD257C14AA596DCE18CC0EA9BE6492

File PE Metadata

Compilation timestamp:

6/19/1992 6:22:17 PM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

6144:sQgefBUvbD36DqWWIZcMgK4flmL8esAvq6oP924K+fI6pJzr6:sgfCbDqeGZcMgmFsCqP2B+g6pZr6

Entry address:

0x829C

Entry point:

55, 8B, EC, 83, C4, EC, 53, 56, 33, C0, 89, 45, F0, 89, 45, EC, B8, 44, 82, 40, 00, E8, 66, C4, FF, FF, 33, C0, 55, 68, 97, 84, 40, 00, 64, FF, 30, 64, 89, 20, 68, A8, 84, 40, 00, 6A, FF, 68, 00, 00, 10, 00, E8, FB, C4, FF, FF, A3, 08, A7, 40, 00, 83, 3D, 08, A7, 40, 00, 00, 74, 1B, A1, 08, A7, 40, 00, 50, E8, EA, C4, FF, FF, A1, 08, A7, 40, 00, 50, E8, 7F, C4, FF, FF, E9, 7E, 01, 00, 00, 68, A8, 84, 40, 00, 6A, FF, 6A, 00, E8, 74, C4, FF, FF, A3, 08, A7, 40, 00, 83, 3D, 08, A7, 40, 00, 00, 0F, 84, 5E, 01... 
[+]

Entropy:

5.6282

Developed / compiled with:

Microsoft Visual C++

Code size:

29.5 KB (30,208 bytes)

The file rfa_start.exe has been discovered within the following program.

Registry First Aid by RoseCitySoftware

Registry First Aid from RoseCitySoftware is registry fixer utility whose purported purpose is to remove redundant items from the Windows registry.

www.registry-repair-software.com

47% remove it

Scan rfa_start.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.