home

REALPLAY.EXE

RealPlayer (32-bit)

RealNetworks, Inc.

It runs as a scheduled task under the Windows Task Scheduler. This is installed with multiple programs including RealTimes (RealPlayer) and RealPlayer.
Publisher:
RealNetworks, Inc.  (signed and verified)

Product:
RealPlayer (32-bit)

Description:
RealPlayer

Version:
16.0.3.51

MD5:
447fc81330cd96ca26459db2e86c3630

SHA-1:
7a6af428b829feb4f24e92a8ab001cc0f165fb8e

SHA-256:
bf58f8a394dd3343de671757fedd9f648b22481db823158064844a2202d9dba1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/30/2024 10:08:56 AM UTC  (today)

File size:
489.6 KB (501,328 bytes)

Product version:
16.0.3.51

Copyright:
Copyright © RealNetworks, Inc. 1995-2013

Trademarks:
RealAudio(tm) is a trademark of RealNetworks, Inc.

Original file name:
REALPLAY.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\real\realplayer\realplay.exe

Digital Signature
Signed by:
RealNetworks, Inc.

Authority:
Thawte, Inc.

Valid from:
7/25/2013 5:00:00 PM

Valid to:
8/15/2015 4:59:59 PM

Subject:
CN="RealNetworks, Inc.", OU=MS&S, O="RealNetworks, Inc.", L=Seattle, S=Washington, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
72B64DF3DBCC1FB70C7858961B8A5BBA

File PE Metadata
Compilation timestamp:
8/14/2013 5:18:14 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:HQcRT6d7h7M9dx+OOenIgK54IQzeeeL4/QhZwzZwo/Uai:wch6oVIgKKM4Yh0l/u

Entry address:
0xE568

Entry point:
E8, 06, 06, 00, 00, E9, 63, FD, FF, FF, FF, 25, 28, 02, 41, 00, FF, 25, 38, 02, 41, 00, FF, 25, 3C, 02, 41, 00, FF, 25, 40, 02, 41, 00, FF, 25, 44, 02, 41, 00, FF, 25, 4C, 02, 41, 00, FF, 25, 50, 02, 41, 00, FF, 25, 5C, 02, 41, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 80, F9, 40, 73, 15, 80, F9, 20, 73, 06, 0F, AD, D0, D3, EA, C3, 8B, C2, 33, D2, 80, E1, 1F, D3, E8, C3, 33, C0, 33, D2, C3, CC, 53, 56, 8B, 44, 24, 18, 0B, C0, 75, 18, 8B, 4C, 24, 14, 8B, 44, 24, 10, 33, D2, F7, F1, 8B, D8...
 
[+]

Entropy:
5.4284

Code size:
58.5 KB (59,904 bytes)

5 Autoplay Handlers
Display name:
RPCDBurningOnArrival

CLSID name:
OLE (Part 1 of 5)

Display name:
RPDVDBurningOnArrival

CLSID name:
OLE (Part 1 of 5)

Display name:
RPPlayCDAudioOnArrival

CLSID name:
OLE (Part 1 of 5)

Display name:
RPPlayDVDMovieOnArrival

CLSID name:
OLE (Part 1 of 5)

Display name:
RPPlayMediaOnArrival

CLSID name:
OLE (Part 1 of 5)


14 Scheduled Tasks
Task name:
RealCreateProcessScheduledTask11185848SID

Trigger:
Registration (Runs on registration)

Task name:
RealCreateProcessScheduledTask2664372SID

Trigger:
Registration (Runs on registration)

Task name:
RealCreateProcessScheduledTask4957571SID

Trigger:
Registration (Runs on registration)

Task name:
RealCreateProcessScheduledTask107930633SID

Trigger:
Registration (Runs on registration)

Task name:
RealCreateProcessScheduledTask109320711SID

Trigger:
Registration (Runs on registration)

Task name:
RealCreateProcessScheduledTask15197492SID

Trigger:
Registration (Runs on registration)


3 Windows Firewall Allowed Programs
Name:
C:\Program Files\Real\RealPlayer\realplay.exe

Name:
C:\Programmi\Real\RealPlayer\realplay.exe

Name:
C:\Programme\Real\RealPlayer\realplay.exe


The file REALPLAY.EXE has been discovered within the following programs.

Freecorder 5  by Applian Technologies Inc.
Freecorder 5 bundles a branded version of the Conduit Toolbar, which delivers search based advertising and results. During installation the user is presented in some cases with the option to install the toolbar. Once accepted, the packaged executable, ConduitInstaller.
applian.com
31% remove it
RealPlayer  by RealNetworks, Inc.
RealPlayer is a cross-platform software product primarily used for the playing of recorded media.
www.real.com/realplayer
27% remove it
RealPlayer (RealTimes)  by RealNetworks
www.real.com
About 6% of users remove it
RealPlayer Cloud  by RealNetworks, Inc.
Publisher's description - “RealPlayer Cloud enables you to move, watch and share your videos. When you share videos with friends and family they’ll be able to play them on any device or operating system, without downloading the RealPlayer Cloud app.”
6% remove it
RealTimes (RealPlayer)  by RealNetworks
About 5% of users remove it
 
Powered by Should I Remove It?

Scan REALPLAY.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.