home

rfasetup.exe

Registry First Aid 9

Rose City Software LLC

The program is a setup application that uses the Inno Setup installer. This is installed with Registry First Aid. The file has been seen being downloaded from www.rosecitydownloads.com and multiple other hosts.
Publisher:
RoseCitySoftware   (signed by Rose City Software LLC)

Product:
Registry First Aid 9

Description:
Registry First Aid, the easy powerful registry maintenance p

Version:
9.1.0.2157

MD5:
d76796508592906dedf7cbb16817d318

SHA-1:
5c72f2f5873eb36727bd1e2e9710c13ed910a266

SHA-256:
ba8af372a52ab6f6da52b1188a5972b113526abd3068fc071f9cc36f5e034398

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 4:49:05 AM UTC  (today)

File size:
6.2 MB (6,497,648 bytes)

Product version:
9.1.0

Copyright:
Copyright (c) KsL Software and Published by RoseCitySoftware

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\rfasetup.exe

Digital Signature
Signed by:
Rose City Software LLC

Authority:
COMODO CA Limited

Valid from:
10/2/2012 2:00:00 AM

Valid to:
10/3/2013 1:59:59 AM

Subject:
CN=Rose City Software LLC, O=Rose City Software LLC, STREET="3 Monroe Pkwy, Suite P-447", L=Lake Oswego, S=OR, PostalCode=97035, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
31DBEEA1420453795699B4648FD59717

File PE Metadata
Compilation timestamp:
7/9/2012 3:41:29 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:54z0VjquvXfROZRjS5Hx+hoz9SRls4+e3tPAcw:2zUjxE9S5Hxeoz9ibPAv

Entry address:
0x16478

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, B8, 52, 41, 00, E8, AC, 03, FF, FF, 33, C0, 55, 68, 45, 6B, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 01, 6B, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, AB, 41, 00, E8, 56, EC, FF, FF, E8, FD, E7, FF, FF, 8D, 55, EC, 33, C0, E8, 7F, 84, FF, FF, 8B, 55, EC, B8, E8, D6, 41, 00, E8, E2, E9, FE, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, D6, 41, 00, B2, 01...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
84 KB (86,016 bytes)

The file rfasetup.exe has been discovered within the following program.

Registry First Aid  by RoseCitySoftware
Registry First Aid from RoseCitySoftware is registry fixer utility whose purported purpose is to remove redundant items from the Windows registry.
www.registry-repair-software.com
47% remove it
 
Powered by Should I Remove It?

The file rfasetup.exe has been seen being distributed by the following 3 URLs.

http://www.rosecitydownloads.com/rfasetup.exe

http://www.inndir.com/inndir.php?id=2604&inndir=e199821da8073e226d029457e0df43cb&alt=

https://store2.esellerate.net/.../d.aspx?dl=1rwGGf1IeNWtKfUP4jPW

Scan rfasetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.