home

rfagent64.exe

Registry First Aid

Rose City Software LLC

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘rfagent’.
Publisher:
KsL Software  (signed by Rose City Software LLC)

Product:
Registry First Aid

Description:
Registry First Aid Agent

Version:
10.0.0.2278

MD5:
b8b641c30c35148fe583dc193cb59bdc

SHA-1:
88fa05fd867d7cf89592af97c09fa71cea14118e

SHA-256:
58ce1d675852ee2998a3673b330304e1b925987169a129fed1d8ac9aab4eb9c6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 1:22:06 AM UTC  (today)

File size:
3.4 MB (3,526,848 bytes)

Product version:
10.0.0.2278

Copyright:
Copyright (c) KsL Software, 2001-2014

Trademarks:
Registry First Aid of KsL Software

Original file name:
reg1aid.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\rfa 10\rfagent64.exe

Digital Signature
Signed by:
Rose City Software LLC

Authority:
COMODO CA Limited

Valid from:
11/28/2013 1:00:00 AM

Valid to:
11/28/2016 12:59:59 AM

Subject:
CN=Rose City Software LLC, O=Rose City Software LLC, STREET=16420 SE McGillivray Blvd, STREET=Suite 103-334, L=Vancouver, S=WA, PostalCode=98683, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00DBDED8BEA9CCD48DEEB485CF975FBCA7

File PE Metadata
OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
2.64

CTPH (ssdeep):
98304:5o297NLlU6KhKeS3awsh5araHaa3iaHau/aeaBa7aBaLdnP2Uo:l9xUo

Entry address:
0x17DC0

Entry point:
55, 48, 89, E5, 48, 83, EC, 20, C6, 05, 41, 55, 1D, 00, 00, E8, 6C, EE, FF, FF, C9, C3, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 55, 48, 89, E5, 48, 83, EC, 10, 65, 48, A1, 08, 00, 00, 00, 00, 00, 00, 00, 65, 48, 2B, 04, 25, 10, 00, 00, 00, C9, C3, 00, 00, 55, 48, 89, E5, 48, 83, EC, 30, 48, 89, 5D, F8, 48, B9, 00, 00, 00, 01, 00, 00, 00, 00, E8, C5, FF, FF, FF, 48, 89, C3, 48, 8B, 05, FB, 91, 2A, 00, 48, 85, C0, 74, 0B, 8B, 0D, C0, 9E, 2A, 00, 48, FF, D0, EB, 07, 48, 8D, 05, BC, 9E, 2A, 00, 48, 89, 18, 48...
 
[+]

Code size:
1.9 MB (2,007,856 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
rfagent

Command:
"C:\Program Files\rfa 10\rfagent64.exe"


The file rfagent64.exe has been discovered within the following program.

Registry First Aid 10  by RoseCitySoftware
"Trial version only fixes 19 errors per run."
www.registry-repair-software.com
53% remove it
 
Powered by Should I Remove It?

Scan rfagent64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.