» realtimes-realplayer.exe
Overview
Analysis
File Details
Downloads (64)

realtimes-realplayer.exe

RealNetworks Installer (32-bit)

RealNetworks, Inc.

File name:

Publisher:

RealNetworks, Inc. (signed and verified)

Product:

RealNetworks Installer (32-bit)

Description:

RealNetworks Installer

Version:

7.3.0.27

MD5:

feed72795b80035564fa101ff789852d

SHA-1:

e0073a911cf11d90c7510d1267cfcd6a9bf7b8a3

SHA-256:

f7350b0d62b7b9bab9f360ae6c5a1264d1a404200ad6fe74252bb6828c86f034

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/25/2024 4:40:15 PM UTC (today)

File size:

1.3 MB (1,332,080 bytes)

Product version:

7.3.0.27

Original file name:

rnsetup.EXE

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\programs\realtimes-realplayer.exe

Digital Signature

Signed by:

RealNetworks, Inc.

Authority:

Thawte, Inc.

Valid from:

7/22/2015 3:00:00 AM

Valid to:

8/15/2017 2:59:59 AM

Subject:

CN="RealNetworks, Inc.", OU=MS&S, O="RealNetworks, Inc.", L=Seattle, S=Washington, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

79C168D8457E463A4EC3D683FA7AF5D0

File PE Metadata

Compilation timestamp:

7/19/2016 8:57:55 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

24576:XIz0fiOQqA21Bkh3t2iBfeSYwXhXy4Eom2NDHQUaBd0ihU92DkvYy1QS9HakPJ3W:4qfAgBWRHQUaB892Dkwy1QS9HaQ3y+30

Entry address:

0x3A51

Entry point:

E8, 2F, 50, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 53, 8B, 5D, 08, 83, FB, E0, 77, 6F, 56, 57, 83, 3D, 74, 48, 41, 00, 00, 75, 18, E8, 16, 4A, 00, 00, 6A, 1E, E8, 60, 48, 00, 00, 68, FF, 00, 00, 00, E8, 20, 45, 00, 00, 59, 59, 85, DB, 74, 04, 8B, C3, EB, 03, 33, C0, 40, 50, 6A, 00, FF, 35, 74, 48, 41, 00, FF, 15, 20, F1, 40, 00, 8B, F8, 85, FF, 75, 26, 6A, 0C, 5E, 39, 05, E4, 4F, 41, 00, 74, 0D, 53, E8, F9, 30, 00, 00, 59, 85, C0, 75, A9, EB, 07, E8, F8, 01, 00, 00, 89, 30, E8, F1, 01, 00, 00, 89... 
[+]

Entropy:

6.6959

Code size:

53 KB (54,272 bytes)

The file realtimes-realplayer.exe has been seen being distributed by the following 50 URLs.

http://www.funcentralnew.com/Rcjf0BVFQvwkUGz2Dl9hTL5R2TJiO8BgSGorBWWjOZ0zbvXc1TAAQUo7MseNIeC9vguVXktUA24JRXIhliSN3Y798uIv0SZGGi7u3ooZ_czbO9pcFM4HJSPE3K0jwdYciBZ8KW9EUehKpiQ8t1u99ZYBb6Q3EC6Wq7FExzzf0W39H0oxB9wOXVwewVbDU61Z8YUaSQ0jHdgHDtdpviQNU6tpG_CayUotgY_jLnfj8u4NsxKdwXIxM6YYouyRLqpBSv7_kYg9sbuYSnEKoVpJLuvCwEa3n7AXEgkq532hmu oGuiB2jLI1CqmnQZdwYp1ApOqrbn25M49B0AASASl2bmA6STvghIeRexFbVutpF5PI6IY3XdAuvpoe2chVIwRZHbRvPy9QTLQozZD Pv0XWHwM07kF7Qox43RUymxphqF1nrqjfjny8gx1ruydbCCn10tn J8COEj6s3TofZuf9yKBazC4r_sRBgri9dWwmRln108W_w=-GxQAAKRdxtretCCEFCKK5DqwG4Nvu_EA-e

http://director.real.com/.../devicedetect?type=rt_uk&rppr=home&countryCode=uk

http://www.funcentralnew.com/bLxoI1GnqdLo2Z6vrpVGSkEO57bnD4vW_gyA4a uiiUF_g5WPd97IiWw4B9bAQ71uL2F3pFkqP2wiX6TahWAaLIuegsgxMK8_BUeUKfi2EIoYjHTopk7_vKLbdn5OKBb2BmxH6m258ThLzHkssyd_VMrnlJssyo9P41e xzUdObe_oefmHm5ynIHtNFVZx3N4no7vkHXLU3PRzsclYjeiPojju2GcO3_dwwPBbGdFA7uqlzQODOn6Q4PpVVD1gul9H5DaqsV W ccQD4ky SwUcKZthGJeETRaVhy82MKSkqjhJI5KITuv8jLznJuSOvcNQCYF8pPsgr9luqiEcqscQuII8Hnvb3 i8QOrxiMMksWwqyk58zg0wStwWewjMw61JVeZQ1IMI53XReP8sEITwKIisTPkKuXO7IndMkOa5jKUNUwUCHsnW_FlUI CxNUkLJ1zyh8Eyaczms3Y6r6mSYphfkCf97erWQddQOWpFiVOz OM0=-GxQAAKRdxtretCCEFCKK5DqwG4Nvu_EA-e

http://www.download.dk/manuel_load/multimedie/film-afspillere/.../832

http://director.real.com/.../devicedetect?type=rt_us&rppr=home&countryCode=us

http://switchboard.real.com/.../installer.html?cd=backup_download&prod=RealTimes&ver=18.0&distcode=T10EUD&sessionid=2939633000&loc=my&stampcode=T10EUD&li=en&os=10.0.10586|SP0|en&oem=rt1_en_eu

http://director.real.com/.../devicedetect?type=rt_eu&rppr=getapp&countryCode=ae

http://director.real.com/.../devicedetect?type=rt_eu&rppr=home&countryCode=mk

http://director.real.com/.../devicedetect?type=rt_eu&rppr=getapp&countryCode=eu

http://director.real.com/.../devicedetect?type=rt_us&rppr=semggeg1&pcode=sem_ggl_rt&rsrc=ggl_sch_alpha_rpc_desktop_usa&countryCode=us

http://director.real.com/.../devicedetect?type=rt_eu&rppr=home&countryCode=ru

http://director.real.com/.../devicedetect?type=rt_eu&countryCode=sk

http://director.real.com/.../devicedetect?type=rt_eu&rppr=home&pcode=free_aff_pc&rsrc=softonic_organic&countryCode=ie

http://www.hostpresentbits.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

http://director.real.com/.../devicedetect?type=rt_eu&rppr=msfa&pcode=msfa&rsrc=msfa&countryCode=eg

http://director.real.com/.../devicedetect?type=rt_eu&rppr=home&pcode=free_aff_pc&rsrc=softonic_organic&countryCode=tr

http://director.real.com/.../devicedetect?type=rt_eu&rppr=msfa&pcode=msfa&rsrc=msfa&countryCode=ie

http://director.real.com/.../devicedetect?type=rt_eu&rppr=home&pcode=free_aff_pc&rsrc=softonic_organic&countryCode=ae

http://director.real.com/.../devicedetect?type=rt_eu&countryCode=sa&rppr=home

http://director.real.com/.../devicedetect?type=rt_eu&rppr=home&countryCode=bm

http://director.real.com/.../devicedetect?type=rt_eu&rppr=home&countryCode=tr

http://director.real.com/.../devicedetect?type=rt_eu&rppr=home&countryCode=bg

http://director.real.com/.../devicedetect?type=rt_eu&rppr=home&pcode=free_aff_pc&rsrc=softonic_organic&countryCode=no

http://director.real.com/realplayer?type=rt_eu&rppr=home

http://director.real.com/.../devicedetect?type=rt_eu&rppr=home&pcode=free_aff_pc&rsrc=softonic_organic&countryCode=bg

http://director.real.com/.../devicedetect?type=rt_eu&rppr=rnwk&countryCode=nl

http://director.real.com/.../devicedetect?type=rt_eu&rppr=home&countryCode=hr

http://director.real.com/.../devicedetect?type=rt_eu&rppr=home&countryCode=se

http://director.real.com/.../devicedetect?type=rt_eu&rppr=home&countryCode=ua

http://director.real.com/.../devicedetect?type=rt_eu&rppr=msfa&pcode=msfa&rsrc=msfa&countryCode=mt

Latest 30 of 64 download URLs

Scan realtimes-realplayer.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.