home

REALPLAY.EXE

RealPlayer (32-bit)

RealNetworks, Inc.

This is installed with RealPlayer. The file has been seen being downloaded from orland135.edmodo.com.
Publisher:
RealNetworks, Inc.  (signed and verified)

Product:
RealPlayer (32-bit)

Description:
RealPlayer

Version:
16.0.0.282

MD5:
01243fa89fbec041e873de8386138440

SHA-1:
118f225e23e365e7b5cc01be2dc40146cd52d473

SHA-256:
7a9f1b4d4c295eae8cd8cc1805cb0df57e71d3411351c735cf425eb3dfa3bb40

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 2:31:22 AM UTC  (today)

File size:
489.1 KB (500,888 bytes)

Product version:
16.0.0.282

Copyright:
Copyright © RealNetworks, Inc. 1995-2012

Trademarks:
RealAudio(tm) is a trademark of RealNetworks, Inc.

Original file name:
REALPLAY.EXE

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\real\realplayer\realplay.exe

Digital Signature
Signed by:
RealNetworks, Inc.

Authority:
Thawte, Inc.

Valid from:
8/3/2011 8:00:00 AM

Valid to:
8/16/2013 7:59:59 AM

Subject:
CN="RealNetworks, Inc.", OU=MS&S, O="RealNetworks, Inc.", L=Seattle, S=Washington, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
17FDFBD161CDD4A95804A4808D678FCA

File PE Metadata
Compilation timestamp:
12/1/2012 7:35:50 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:/QcRT6d7e7Mkdx+OFOnIgK54IQzeeeL4/QhZwzZwoJda:4ch6PfIgKKM4Yh0lJ4

Entry address:
0xE568

Entry point:
E8, 06, 06, 00, 00, E9, 63, FD, FF, FF, FF, 25, 28, 02, 41, 00, FF, 25, 38, 02, 41, 00, FF, 25, 3C, 02, 41, 00, FF, 25, 40, 02, 41, 00, FF, 25, 44, 02, 41, 00, FF, 25, 4C, 02, 41, 00, FF, 25, 50, 02, 41, 00, FF, 25, 5C, 02, 41, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 80, F9, 40, 73, 15, 80, F9, 20, 73, 06, 0F, AD, D0, D3, EA, C3, 8B, C2, 33, D2, 80, E1, 1F, D3, E8, C3, 33, C0, 33, D2, C3, CC, 53, 56, 8B, 44, 24, 18, 0B, C0, 75, 18, 8B, 4C, 24, 14, 8B, 44, 24, 10, 33, D2, F7, F1, 8B, D8...
 
[+]

Entropy:
5.4253

Code size:
58.5 KB (59,904 bytes)

5 Autoplay Handlers
Display name:
RPCDBurningOnArrival

Display name:
RPDVDBurningOnArrival

Display name:
RPPlayCDAudioOnArrival

Display name:
RPPlayDVDMovieOnArrival

Display name:
RPPlayMediaOnArrival


The file REALPLAY.EXE has been discovered within the following programs.

RealPlayer  by RealNetworks, Inc.
RealPlayer is a cross-platform software product primarily used for the playing of recorded media.
www.real.com/realplayer
27% remove it
 
Powered by Should I Remove It?

The file REALPLAY.EXE has been seen being distributed by the following URL.

https://orland135.edmodo.com/file?id=2bddd70779d91c0960928b33e8f465d9

Scan REALPLAY.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.