home

realplayer.exe

RealNetworks Installer (32-bit)

RealNetworks, Inc.

Publisher:
RealNetworks, Inc.

Product:
RealNetworks Installer (32-bit)

Description:
RealNetworks Installer

Version:
7.2.0.6

MD5:
0dfd4d367b3a75d3673e2cc9ba4ea7d7

SHA-1:
11d7940a5416f41bad8e9ed43497dec39d223a99

SHA-256:
51c9f261c19768bdb2e9d8032222e8d5fb27f0e5e3e86f22236c1e3a2e02ecd6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2025 11:59:38 PM UTC  (a few moments ago)

File size:
1.3 MB (1,355,424 bytes)

Product version:
7.2.0.6

Original file name:
rnsetup.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\realplayer.exe

File PE Metadata
Compilation timestamp:
6/2/2016 1:42:03 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:Xcgg92Y8OmIBepTe7jTVFQjfFhnCKp6tkIdGl25hlovLDFLttPdvwx/9p+/B/5:MfzfYevTSvndIdGl2+DpDdvi1p+/B/5

Entry address:
0x3A51

Entry point:
B5, B6, 0F, AF, DE, 8A, F2, F7, DD, 52, B9, A0, 19, DB, 9F, 59, 0F, AF, F0, 70, 03, 0F, AF, FF, 69, CA, 5A, 0E, 72, 76, EB, 02, 85, D2, B8, 96, 04, 00, 00, C7, C1, C3, 28, 4C, A3, 05, F4, 09, 00, 00, 81, F9, 13, 31, 00, 00, 76, 06, F6, C7, B0, 0F, AF, C9, 0B, F7, 8B, CB, 2D, 01, 00, 00, 00, 49, FE, C7, 3D, 01, 07, 00, 00, 73, DF, FF, CD, 88, FF, E8, 00, 00, 00, 00, 58, EB, 05, 80, F2, CB, 8B, D7, 8B, CF, 84, CB, 2B, F9, 81, FF, 65, 81, 00, 00, 71, 06, F7, D5, FE, C7, FE, C3, 76, 05, 8A, F4, 80, E9, 2B, 78...
 
[+]

Entropy:
6.7372

Code size:
53 KB (54,272 bytes)

The file realplayer.exe has been seen being distributed by the following URL.

http://cache-download.real.com/free/windows/installer/stubinst/stub/rp16/.../RealPlayer.exe

Scan realplayer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.