» rhapsodyreal.exe
Overview
Analysis
File Details
Programs (1)
Downloads (7)

rhapsodyreal.exe

Rhapsody International Inc

The program is a setup application that uses the Wise Installer installer. This is installed with Rhapsody. The file has been seen being downloaded from download.rhap.com and multiple other hosts.

File name:

rhapsodyreal.exe

Publisher:

Rhapsody International Inc. (signed by Rhapsody International Inc)

Description:

Rhapsody

Version:

4.0.6.14

MD5:

a118d15cfff294d6b4ca8072fd4bc14a

SHA-1:

025e936cf73d83e35d9631f735033557533102da

SHA-256:

7d95e07752aebb18327af86c75b39e5232240f18f858cd7bd4c973a1ca1cb0b9

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/15/2024 2:31:43 AM UTC (today)

File size:

15.5 MB (16,304,976 bytes)

File type:

Executable application (Win32 EXE)

Installer:

Wise Installer

Language:

English (United States)

Common path:

C:\users\{user}\downloads\rhapsodyreal.exe

Digital Signature

Signed by:

Rhapsody International Inc

Authority:

GoDaddy.com, Inc.

Valid from:

5/2/2011 8:31:38 PM

Valid to:

3/4/2013 6:08:44 PM

Subject:

CN=Rhapsody International Inc, O=Rhapsody International Inc, L=Seattle, S=WA, C=US

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

4EE9DF73265883

File PE Metadata

Compilation timestamp:

4/8/1999 4:24:47 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

393216:PYBXVzymWtvPsB0pjNBDrX7dAnxWwIhHqDWgpoPyFkVKf:PYX+m2vPsWbZm3uPyFgKf

Entry address:

0x1000

Entry point:

55, 8B, EC, 81, EC, 78, 05, 00, 00, 53, 56, BE, 04, 01, 00, 00, 57, 8D, 85, 94, FD, FF, FF, 56, 33, DB, 50, 53, FF, 15, 34, 20, 40, 00, 8D, 85, 94, FD, FF, FF, 56, 50, 8D, 85, 94, FD, FF, FF, 50, FF, 15, 30, 20, 40, 00, 8B, 3D, 2C, 20, 40, 00, 53, 53, 6A, 03, 53, 6A, 01, 8D, 85, 94, FD, FF, FF, 68, 00, 00, 00, 80, 50, FF, D7, 83, F8, FF, 89, 45, FC, 0F, 84, 7B, 01, 00, 00, 8D, 85, 90, FC, FF, FF, 50, 56, FF, 15, 28, 20, 40, 00, 8D, 85, 98, FE, FF, FF, 50, 53, 8D, 85, 90, FC, FF, FF, 68, 10, 30, 40, 00, 50... 
[+]

Entropy:

7.9998

Packer / compiler:

Wise Installer Stub

Code size:

512 Bytes (512 bytes)

The file rhapsodyreal.exe has been discovered within the following program.

Rhapsody by Rhapsody International

Rhapsody is an online music store subscription service. The Rhapsody Music Software, which is free from Rhapsody, helps organize music collections, and synchronize them in MP3 portable media players (PMP) with the Rhapsody subscription service. It thus competes with Apple Inc.

www.rhapsody.com

8% remove it

The file rhapsodyreal.exe has been seen being distributed by the following 7 URLs.

http://download.rhap.com/upgrade/.../RhapsodyReal_yahoo.EXE

http://rhap-app-4-0.rhapsody.com/download.jsp?from=yahoomigratednonsubs

http://www.rhapsody.com/download.jsp?from=yahoomigratednonsubs

http://www.real.com/R/EMAL.080618EMAL02.r1t.dl..R/.../download.jsp?from=yahoomigratednonsubs

http://rhap-app-4-0.rhapsody.com/download.jsp?from=real

http://www.rhapsody.com/download.jsp?from=real

http://download.rhap.com/upgrade/.../RhapsodyReal.EXE

Scan rhapsodyreal.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.