home

raregistry64.exe

Ralink RalinkRegistryWriter

Ralink Technology Corporation

It runs as a separate (within the context of its own process) windows Service named “Ralink Registry Writer 64”. This is installed with multiple programs including Ralink RT3690 Wireless LAN Card and Ralink RT2870 Wireless LAN Card.
Publisher:
Ralink Technology, Corp.  (signed by Ralink Technology Corporation)

Product:
Ralink RalinkRegistryWriter

Description:
RalinkRegistryWriter

Version:
1, 0, 0, 15

MD5:
c0e618f5a0d643f71fdd96cdc0c561c3

SHA-1:
9fa9e4b3a6ad003da6caf4aa97a0516df40577eb

SHA-256:
7ae7fff6e04d88816891da0dbe696bf171950a3ff95cfd4aa1fc2c1f21578d7b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 12:13:11 AM UTC  (today)

File size:
206.3 KB (211,296 bytes)

Product version:
1, 0, 0, 15

Copyright:
(c) Copyright 2008, Ralink Technology, Inc.

Original file name:
RalinkRegistryWriter.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\ralink\common\raregistry64.exe

Digital Signature
Signed by:
Ralink Technology Corporation

Authority:
VeriSign, Inc.

Valid from:
2/24/2010 5:30:00 AM

Valid to:
2/25/2011 5:29:59 AM

Subject:
CN=Ralink Technology Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Ralink Technology Corporation, L="Hsin-Chu, Taiwan", S=Taiwan, C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
54CC50D147FA549E3F721C754E4E3A91

File PE Metadata
Compilation timestamp:
6/1/2010 11:02:54 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
8.0

Entry address:
0x75A0

Entry point:
48, 83, EC, 28, E8, 27, 9B, 00, 00, E8, 12, 00, 00, 00, 48, 83, C4, 28, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 48, 83, EC, 68, C7, 44, 24, 2C, 00, 00, 00, 00, C7, 44, 24, 44, 00, 00, 00, 00, C7, 44, 24, 20, 00, 00, 00, 00, C7, 44, 24, 38, 00, 00, 00, 00, C7, 44, 24, 3C, 00, 00, 00, 00, C7, 44, 24, 40, 00, 00, 00, 00, FF, 15, A6, FB, 01, 00, 41, B8, 94, 00, 00, 00, 33, D2, 48, 8B, C8, FF, 15, 8D, FB, 01, 00, 48, 89, 44, 24, 30, 48, 83, 7C, 24, 30, 00, 75, 14, B9, 12, 00, 00, 00, E8, 8E, 02...
 
[+]

Entropy:
5.7364

Code size:
148.5 KB (152,064 bytes)

Service
Display name:
Ralink Registry Writer 64

Service name:
RalinkRegistryWriter64

Type:
Win32OwnProcess


The file raregistry64.exe has been discovered within the following programs.

Hama Wireless LAN Adapter  by Hama
www.hama.com
About 9% of users remove it
Ralink RT2870 Wireless LAN Card  by Ralink
The software provides the installation utilities for Ralink RT2870 802.11 WirelessLAN Card including software and drivers.
www.ralinktech.com
7% remove it
Ralink RT3690 Wireless LAN Card  by Ralink
This software package contains the required software and driver to connect the Ralink device to the PC.
About 9% of users remove it
USB WiFi mini format  by Boulanger
www.boulanger.fr
About 2% of users remove it
 
Powered by Should I Remove It?

Scan raregistry64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.