» rfa_start.exe
Overview
Analysis
File Details
Programs (1)

rfa_start.exe

Registry First Aid

Rose City Software

File name:

rfa_start.exe

Publisher:

KsL Software (signed by Rose City Software)

Product:

Registry First Aid

Description:

Registry First Aid, the easy powerful registry maintenance program

Version:

7.1.1.1733

MD5:

7815e834630d98c838ef61fae24c80b5

SHA-1:

ee21dc0b82bf66612908e83a867e441740260eac

SHA-256:

0d0bb38cc6a633b26103f7a7e889835fc9888021dbcee9da3130582c4ec09b1e

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 7:27:38 AM UTC (today)

File size:

621.3 KB (636,224 bytes)

Product version:

7.1.1.1733

Original file name:

adminrun.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\rfa\rfa_start.exe

Digital Signature

Signed by:

Rose City Software

Authority:

The USERTRUST Network

Valid from:

4/29/2009 2:00:00 AM

Valid to:

4/30/2010 1:59:59 AM

Subject:

CN=Rose City Software, O=Rose City Software, STREET=3 Monroe Pkwy, STREET=Suite P-447, L=Lake Oswego, S=OR, PostalCode=97035, C=US

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

33DD257C14AA596DCE18CC0EA9BE6492

File PE Metadata

Compilation timestamp:

6/20/1992 12:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

6144:GQgsxBUvbD36DqWWIZcMgK4flmL8esAvq6oP924K+fI6pJzrU:GmxCbDqeGZcMgmFsCqP2B+g6pZrU

Entry address:

0x829C

Entry point:

55, 8B, EC, 83, C4, EC, 53, 56, 33, C0, 89, 45, F0, 89, 45, EC, B8, 44, 82, 40, 00, E8, 66, C4, FF, FF, 33, C0, 55, 68, 97, 84, 40, 00, 64, FF, 30, 64, 89, 20, 68, A8, 84, 40, 00, 6A, FF, 68, 00, 00, 10, 00, E8, FB, C4, FF, FF, A3, 08, A7, 40, 00, 83, 3D, 08, A7, 40, 00, 00, 74, 1B, A1, 08, A7, 40, 00, 50, E8, EA, C4, FF, FF, A1, 08, A7, 40, 00, 50, E8, 7F, C4, FF, FF, E9, 7E, 01, 00, 00, 68, A8, 84, 40, 00, 6A, FF, 6A, 00, E8, 74, C4, FF, FF, A3, 08, A7, 40, 00, 83, 3D, 08, A7, 40, 00, 00, 0F, 84, 5E, 01... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

29.5 KB (30,208 bytes)

The file rfa_start.exe has been discovered within the following program.

Registry First Aid by RoseCitySoftware

Registry First Aid from RoseCitySoftware is registry fixer utility whose purported purpose is to remove redundant items from the Windows registry.

www.registry-repair-software.com

47% remove it

Scan rfa_start.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.