Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

1, 0, 0, 26 13.79%
1, 0, 0, 21 13.79%
1, 0, 0, 16 10.34%
1, 0, 0, 14 10.34%
1, 0, 0, 13 24.14%
1, 0, 0, 13 10.34%
1, 0, 0, 11 17.24%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
ConvertStringSecurityDescriptorToSecurityDescriptorA, DeregisterEventSource, ReportEventA, RegisterEventSourceA, SetServiceStatus, StartServiceA, OpenServiceA, CloseServiceHandle, CreateServiceA, OpenSCManagerA, DeleteService, QueryServiceStatus, ControlService, RegisterServiceCtrlHandlerA, StartServiceCtrlDispatcherA, RegCloseKey, RegSetValueExA, RegOpenKeyExA, RegCreateKeyExA, RegDeleteValueA, RegDeleteKeyA, InitializeSecurityDescriptor
kernel32.dll
CreateFileA, FlushFileBuffers, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetConsoleMode, GetConsoleCP, SetFilePointer, GetLocaleInfoA, SetEvent, CreateEventA, Sleep, MultiByteToWideChar, GetLastError, LocalFree, lstrlenA, FormatMessageA, GetModuleFileNameA, SetConsoleCtrlHandler, WinExec, GetWindowsDirectoryA, CloseHandle, CreateNamedPipeA, HeapValidate, IsBadReadPtr, RtlUnwind, ResumeThread, CreateThread, ExitThread, InterlockedIncrement, InterlockedDecrement, GetProcAddress, GetModuleHandleA, ExitProcess, GetCommandLineA, HeapFree, GetVersionExA, HeapAlloc, GetProcessHeap, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, GetModuleFileNameW, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapReAlloc, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, GetACP, GetOEMCP, GetCPInfo, IsValidCodePage, TlsGetValue, TlsAlloc, TlsSetValue, GetCurrentThreadId, TlsFree, SetLastError, RaiseException, WriteFile, GetStdHandle, LoadLibraryA, InitializeCriticalSection, WideCharToMultiByte, LCMapStringA, LCMapStringW, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, GetFileType, GetStartupInfoA, DebugBreak, OutputDebugStringA, WriteConsoleW, OutputDebugStringW, LoadLibraryW, GetStringTypeA, GetStringTypeW, SetEnvironmentVariableA, CompareStringW, CompareStringA, VirtualQuery, GetTimeZoneInformation, GetLocaleInfoW, GetUserDefaultLCID, EnumSystemLocalesA, IsValidLocale, FreeLibrary, FatalAppExitA, GetCurrentThread, InterlockedExchange, GetTimeFormatA, GetDateFormatA
ole32.dll
CoCreateInstance, CoUninitialize, CoInitializeEx, CoSetProxyBlanket, CoInitializeSecurity
rpcrt4.dll
RpcServerListen, RpcServerRegisterIf, RpcServerRegisterAuthInfoA, RpcServerUseProtseqEpA, RpcServerUnregisterIf, RpcMgmtStopServerListening, NdrServerCall2
setupapi.dll
SetupDiEnumDeviceInfo, SetupDiGetClassDevsA, SetupDiDestroyDeviceInfoList, SetupDiCallClassInstaller, SetupDiSetClassInstallParamsA, SetupDiClassGuidsFromNameA, SetupDiGetDeviceRegistryPropertyA
shlwapi.dll
SHDeleteKeyA, SHCopyKeyA
user32.dll
wsprintfW

raregistry.exe

Ralink RalinkRegistryWriter by Ralink Technology Corporation (Signed)

Remove raregistry.exe
Version:   1, 0, 0, 16
MD5:   e5f568414f32873e6ec9fd97f9ee980c
SHA1:   aff9d25f93d343a1fae8630870e66353e5f435c0
SHA256:   7b360b2fb8ce6bb8feed996fd45f209c00828c507908884369ed1100cf0e2b7a

What is raregistry.exe?

This is software installed with various versions of the Ralink wireless adapter software that uses the Ralink chipset. It is used for operation and setup of teh installed drivers in order to perform a number of registry registration actions.

Overview

raregistry.exe runs as a service under the name Ralink Registry Writer (RalinkRegistryWriter) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including Tenda Wireless LAN Card published by Tenda, Ralink RT2860 Wireless LAN Card from Ralink and Ralink RT2860 Wireless LAN Card by Ralink. The file is digitally signed by Ralink Technology Corporation which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:raregistry.exe
Publisher:Ralink Technology, Corp.
Product name:Ralink RalinkRegistryWriter
Description:RalinkRegistryWriter
Typical file path:C:\Program Files\tenda\common\raregistry.exe
Original name:RalinkRegistryWriter.exe
File version:1, 0, 0, 16
Size:189.34 KB (193,888 bytes)
Certificate
Issued to:Ralink Technology Corporation
Authority (CA):VeriSign
Digital DNA
PE subsystem:Windows Console
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Ralink
6% remove
The software provides the installation utilities for Ralink RT2860 802.11 WirelessLAN Card including software and drivers.
Ralink
7% remove
The software provides the installation utilities for Ralink RT2870 802.11 WirelessLAN Card including software and drivers.
Tenda
1% remove

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'RalinkRegistryWriter'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00202024%
0.028634%
Kernel CPU:0.00101012%
0.013761%
User CPU:0.00101012%
0.014873%
Kernel CPU time:8 ms/min
100,923,805ms/min
CPU cycles:380/sec
17,470,203/sec
Memory
Private memory:816 KB
21.59 MB
Private (maximum):2.89 MB
Private (minimum):2.86 MB
Non-paged memory:816 KB
21.59 MB
Virtual memory:24.31 MB
140.96 MB
Virtual memory (peak):26.54 MB
169.69 MB
Working set:2.88 MB
18.61 MB
Working set (peak):3.04 MB
37.95 MB
Page faults:848/min
2,039/min
I/O
I/O other transfer:0 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:4
12
Handles:56
600
GUI GDI count:4
103
GUI USER count:1
49

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command line:"C:\Program Files\tenda\common\raregistry.exe"
Owner:SYSTEM
Windows Service
Service name:RalinkRegistryWriter
Display name:Ralink Registry Writer
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 31.03%
Windows 7 Home Premium 24.14%
Microsoft Windows XP 24.14%
Windows 7 Professional 13.79%
Windows Vista Home Premium 3.45%
Windows Vista Ultimate 3.45%

Distribution by countryDistribution by country

United States installs about 48.28% of Ralink RalinkRegistryWriter.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 31.25%
Toshiba 12.50%
Acer 12.50%
ASUS 12.50%
Intel 12.50%
Gateway 12.50%
Hewlett-Packard 6.25%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE