home

realplayer.exe

RealNetworks Installer (32-bit)

RealNetworks, Inc.

Publisher:
RealNetworks, Inc.  (signed and verified)

Product:
RealNetworks Installer (32-bit)

Description:
RealNetworks Installer

Version:
5.1.0.54

MD5:
67f564eb99339527dfa5c38b5dc5ef5b

SHA-1:
252a666ad947113e98ba4ed18a4a008a2c36bd3c

SHA-256:
a429392601d4099bb6da6f9b40b5e2ed06d758e36e44f8642a2c2a41f271f73a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/30/2024 10:15:29 AM UTC  (today)

File size:
794.2 KB (813,232 bytes)

Product version:
5.1.0.54

Original file name:
rnsetup.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\realplayer.exe

Digital Signature
Signed by:
RealNetworks, Inc.

Authority:
Thawte, Inc.

Valid from:
7/25/2013 5:00:00 PM

Valid to:
8/15/2015 4:59:59 PM

Subject:
CN="RealNetworks, Inc.", OU=MS&S, O="RealNetworks, Inc.", L=Seattle, S=Washington, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
72B64DF3DBCC1FB70C7858961B8A5BBA

File PE Metadata
Compilation timestamp:
1/2/2014 11:42:05 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:YunxvSUOvvh/GavZAdr3gHc44G3iHxhFoYiwle2+vBDEUEZ:pqBs0c44G3eViwCve

Entry address:
0x3317

Entry point:
E8, E9, 41, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 53, 8B, 5D, 08, 83, FB, E0, 77, 6F, 56, 57, 83, 3D, 38, 28, 41, 00, 00, 75, 18, E8, D0, 3B, 00, 00, 6A, 1E, E8, 1A, 3A, 00, 00, 68, FF, 00, 00, 00, E8, 2A, 37, 00, 00, 59, 59, 85, DB, 74, 04, 8B, C3, EB, 03, 33, C0, 40, 50, 6A, 00, FF, 35, 38, 28, 41, 00, FF, 15, 10, D1, 40, 00, 8B, F8, 85, FF, 75, 26, 6A, 0C, 5E, 39, 05, AC, 2F, 41, 00, 74, 0D, 53, E8, 04, 20, 00, 00, 59, 85, C0, 75, A9, EB, 07, E8, 32, 03, 00, 00, 89, 30, E8, 2B, 03, 00, 00, 89...
 
[+]

Entropy:
6.6243

Code size:
48 KB (49,152 bytes)

The file realplayer.exe has been discovered within the following programs.

RealPlayer Cloud  by RealNetworks, Inc.
Publisher's description - “RealPlayer Cloud enables you to move, watch and share your videos. When you share videos with friends and family they’ll be able to play them on any device or operating system, without downloading the RealPlayer Cloud app.”
www.real.com
6% remove it
Skitch  by Evernote Corp.
Publisher's description - “Skitch gives you all the tools you need to get your point across faster the first time every time.”
evernote.com/skitch
6% remove it
 
Powered by Should I Remove It?

The file realplayer.exe has been seen being distributed by the following 10 URLs.

http://software.thaiware.com/download_url.php?id=151

http://www.real.com.au/twe/.../link.html?src=rpv11&frm=mixrealld

http://cache-download.real.com/free/windows/installer/stubinst/stub/rp16/.../RealPlayer.exe

http://client-software.real.com/free/windows/installer/stubinst/stub/rp16/.../RealPlayer.exe

http://cache-download.real.com/free/windows/installer/stubinst/stub/rp15/.../RealPlayer.exe

http://sw-real.jp.real.com/free/windows/installer/stubinst/stub/rp16/.../RealPlayer.exe

http://client-software.real.com/free/windows/installer/stubinst/stub/rp15/.../RealPlayer.exe

http://forms.real.com/real/realone/.../intl_download.html?type=rp12_en_ap

http://www.real.com.au/twe/.../link.html?src=rpv12&frm=mixrealld

http://client-software.real.com/free/windows/installer/stubinst/stub/rp16/.../RealPlayer.exe

Scan realplayer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.