VersionsVersions

17.0.1.181 0.03%
16.0.3.51 14.21%
16.0.2.32 11.91%
16.0.1.18 10.86%
16.0.0.282 33.27%
15.0.6.14 17.51%
15.0.5.109 1.90%
15.0.4.53 4.83%
15.0.3.37 0.15%
15.0.2.72 1.53%
15.0.1.13 0.93%
15.0.0.198 0.40%
12.0.1.669 0.03%
12.0.1.652 0.15%
12.0.1.647 0.65%
12.0.1.633 0.28%
12.0.1.609 0.15%
12.0.1.600 0.03%
12.0.0.756 0.03%
12.0.0.614 0.03%
12.0.0.343 0.03%
12.0.0.301 0.23%
12.0.0.297 0.03%
11.0.0.674 0.13%
11.0.0.663 0.03%
11.0.0.477 0.03%
11.0.0.453 0.03%
11.0.0.446 0.13%
11.0.0.442 0.03%
11.0.0.431 0.03%
11.0.0.372 0.25%
6.0.12.1483 0.13%
6.0.12.1465 0.03%
6.0.12.1235 0.03%
6.0.12.857 0.03%
6.0.8.122 0.03%
6.0.8.122 0.03%

Relationships

REALPLAY.exe

RealPlayer (32-bit) by RealNetworks (Signed)

Remove REALPLAY.exe
Warning 5 antivirus scanners has detected malware in various versions of REALPLAY.exe.

Overview

realplay.exe has 37 known versions, the most recent one is 17.0.1.181. realplay.exe is run as a standard windows process with the logged in user's account privileges. During installation, a run registry key for all users is added that will cause the program to run each time any user logs on to Windows. The average file size is about 341.63 KB. It is an authenticode code-signed executable issued to RealNetworks by the certification authority Thawte. The programs RealPlayer, RealOnePlayer_1059 and WinRAR 4.01 (32-bit) have been observed as installing specific variations of realplay.exe. During the process's lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 82.1 MB. Addionally, typically read and write I/O disk operations is about 540.12 KB per minute for reads and 12.67 KB per minute for writes.

What is realplay.exe?

RealPlayer, by RealNetworks, is a cross-platform software product primarily used for the playing of recorded media. The media player is compatible with numerous formats within the multimedia realm, including MP3, MPEG-4, QuickTime, Windows Media, and multiple versions (proprietary) of RealAudio and RealVideo formats. The software is powered by an underlying open source media engine called Helix.

About realplay.exe (from RealNetworks)

Real brings you RealPlayer, the only solution you’ll need for managing all your music and videos. It’s the best free media player around for enjoying all types of entertainment! You can also transfer

DetailsDetails

File name:realplay.exe
Publisher:RealNetworks, Inc.
Product name:RealPlayer (32-bit)
Description:RealPlayer
Typical file path:C:\Program Files\real\realplayer\\realplay.exe
Certificate
Issued to:RealNetworks
Authority (CA):Thawte
Expiration date:Tuesday, August 16, 2011

ResourcesPrograms installed in

(Note, the programs listed below are for all versions of RealPlayer (32-bit) .)
Applian Technologies Inc.
31% remove
Freecorder 5 bundles a branded version of the Conduit Toolbar, which delivers search based advertising and results. During installation the user is presented in some cases with the option to install t...
Codec Guide
9% remove
Real Alternative is a software bundle that allows users to play RealMedia files without installing RealPlayer. Real Alternative is a software bundle that allows users to play RealMedia files without i...
lain
  66% remove
RealNetworks
5% remove
RealNetworks, Inc.
27% remove
RealPlayer is a cross-platform software product primarily used for the playing of recorded media. The media player is compatible with numerous formats within the multimedia realm, including MP3, MPEG-...
RealNetworks, Inc.
6% remove
RealPlayer Cloud enables you to move, watch and share your videos. When you share videos with friends and family they’ll be able to play them on any device or operating system, without downloading the...
Real-Software Inc.
7% remove
Shark007
11% remove
The following filetypes are enabled and SUPPORTED by the installation of the Vista Codec Package. amr | mpc | ofr | divx | mka | ape | flac | evo | flv | m4b | mkv | ogg | ogv | ogm | rmvb | xvid Al...
Skype Technologies S.A.
12% remove
To ensure a consistent Skype experience no matter what device you use we have updated the behavior for video messaging access points when a contact is offline and the share (plus button) menu. When a ...
win.rar GmbH
2% remove
Version 4 speeds up decompression by up to 30%. Windows 98, Windows Me, and Windows NT are no longer supported; the minimum Windows version required is Windows 2000. WinRAR is a shareware file archive...

BehaviorsBehaviors

(Note, the behaviors below are for all versions of realplay.exe, select a unique version for details.)
Autoplay handlers
Runs under the registry key 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers'
  • Handler name 'RPPlayMediaOnArrival'
  • Handler name 'RPPlayDVDMovieOnArrival'
  • Handler name 'RPPlayCDAudioOnArrival'
  • Handler name 'RPDVDBurningOnArrival'
  • Handler name 'RPCDBurningOnArrival'
Scheduled tasks
  • The job 'RealCreateProcessScheduledTask1247296S-1-5-21-3669111873-1580353433-1935662099-1000' runs on registration in the path '\RealCreateProcessScheduledTask1247296S-1-5-21-3669111873-1580353433-1935662099-1000'
  • The task '{E26C2663-BEC4-4819-8D2D-15D312F1158A}' runs on registration in the path '\{E26C2663-BEC4-4819-8D2D-15D312F1158A}'
  • The job '{CD1D82FD-6C85-4BFE-9A55-66B729011AF4}' runs on registration in the path '\{CD1D82FD-6C85-4BFE-9A55-66B729011AF4}'
  • The task '{2D57B953-5798-4027-AD32-FB96E7FE4673}' runs on registration in the path '\{2D57B953-5798-4027-AD32-FB96E7FE4673}'
  • The task '{CAF98FFB-8246-4180-8543-CE4146F5E2AE}' runs on registration in the path '\{CAF98FFB-8246-4180-8543-CE4146F5E2AE}'
  • The task '{B815BF93-A61B-4EED-9AF4-402B5BA00560}' runs on registration in the path '\{B815BF93-A61B-4EED-9AF4-402B5BA00560}'
  • The job '{B00723DD-88CF-42AB-9272-85A4ACE0FC8B}' runs on registration in the path '\{B00723DD-88CF-42AB-9272-85A4ACE0FC8B}'
  • The job '{A5338D06-1807-4121-B5B0-69E6C2003821}' runs on registration in the path '\{A5338D06-1807-4121-B5B0-69E6C2003821}'
  • The task '{0895B815-A511-4D0A-B56A-6CF1E9D08C22}' runs on registration in the path '\{0895B815-A511-4D0A-B56A-6CF1E9D08C22}'
  • The job 'RealCreateProcessScheduledTask11318824S-1-5-21-1478862715-1088129902-3265764659-1000' runs on registration in the path '\RealCreateProcessScheduledTask11318824S-1-5-21-1478862715-1088129902-3265764659-1000'
  • The task '{AA7C5070-83A8-43BC-AF3F-225C1AC0CA71}' runs on registration in the path '\{AA7C5070-83A8-43BC-AF3F-225C1AC0CA71}'
  • The job '{A894CEF0-8569-4479-8ED4-3BFB4E6FB838}' runs on registration in the path '\{A894CEF0-8569-4479-8ED4-3BFB4E6FB838}'
  • The task '{471C618E-7BF8-43F7-B4A1-C55025E0F927}' runs on registration in the path '\{471C618E-7BF8-43F7-B4A1-C55025E0F927}'
  • The task '{D9F1E4D5-8621-48ED-B124-22C258F32FF6}' runs on registration in the path '\{D9F1E4D5-8621-48ED-B124-22C258F32FF6}'
  • The job '{4D69A9E0-ABF9-4C34-BF05-F5F743F30350}' runs on registration in the path '\{4D69A9E0-ABF9-4C34-BF05-F5F743F30350}'
  • The task '{07044237-9D30-413D-B8FB-35F47E7B82FA}' runs on registration in the path '\{07044237-9D30-413D-B8FB-35F47E7B82FA}'
  • The job '{ED98A541-D106-4B62-A208-5156B2F9CF19}' runs on registration in the path '\{ED98A541-D106-4B62-A208-5156B2F9CF19}'
  • The task '{DA53DD74-4B9B-49E2-9B64-F6FC940B430A}' runs on registration in the path '\{DA53DD74-4B9B-49E2-9B64-F6FC940B430A}'
  • The job '{788FD8F4-7015-4AF1-85D0-A2BFB1568852}' runs on registration in the path '\{788FD8F4-7015-4AF1-85D0-A2BFB1568852}'
  • The job '{6A797CBD-F1A4-464C-A6C7-F6A33CAEFB18}' runs on registration in the path '\{6A797CBD-F1A4-464C-A6C7-F6A33CAEFB18}'
  • The job '{502CA4E6-C85D-4FC7-A5BC-AE15D4F9FDEC}' runs on registration in the path '\{502CA4E6-C85D-4FC7-A5BC-AE15D4F9FDEC}'
  • The task '{3864C674-88EC-438C-805E-B5940EC59B79}' runs on registration in the path '\{3864C674-88EC-438C-805E-B5940EC59B79}'
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Program Files\Real\RealPlayer\realplay.exe'
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'RealTray' → C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER

MalwareMalware detections

Based on 40+ industry antivirus scanners, 5 of them detected the following malware.
Antivirus engineEngine versionDetectionFile version
Antiy Labs AVL 2.0.3.7 Trojan/Win32.Agent2 16.0.0.282
Antiy Labs AVL 2.0.3.7 Trojan/Win32.Agent2 16.0.1.18
Antiy Labs AVL 2.0.3.7 Trojan/Win32.Agent2 16.0.2.32
NANO AntiVirus 0.28.0.57630 Trojan.Win32.Boran.bodorx 6.0.12.1483
NANO AntiVirus 0.26.0.55203 Trojan.Win32.Boran.bodorx 6.0.12.1235

VersionsAll file variations of realplay.exe

MD5SHA-1File size
831bdaae30a1a9c9c4c6083c3193105e 23dec734b7ea0a23986c18d58b3bac718e10ebcb 259.58 KB
447fc81330cd96ca26459db2e86c3630 7a6af428b829feb4f24e92a8ab001cc0f165fb8e 489.58 KB
8a48305d3e81c513dac27690b5aa7fc0 7ac09af24b2741e8cd42fb732edd65b828f35181 489.58 KB
56d1d4ba99d1a18cdfe35d65f1752b52 e04b3784473fc2c11718bf8c435c9d7bd37be717 489.58 KB
01243fa89fbec041e873de8386138440 118f225e23e365e7b5cc01be2dc40146cd52d473 489.15 KB
b7cfa3f9df5df31e67b93c4aacbb9c97 f4b4adf447953eeb5f5ff779ee62720dc8e2c82a 487.65 KB
5b9c42de541d7a0e292e803883864cf3 eb3f0d0ebd098ea36545aa8dc157693c15a0b17d 487.65 KB
32288d2a44c99a769a8d3b6d627d7227 d749f1d50b8b1354cdcd0792c2dbc964041f5f88 487.61 KB
eba7271e9c965b2a99e4feed71ea0fe9 6465abdf986852b27c1adc91c024a1f0a0397bd1 487.61 KB
ff5407af7ea0140df64e4167c647885f 711c5283857a5a6d8a25536c46c6578d09352a62 487.61 KB
61ab67b076024ed77acfd98a115ac326 756dfd180291efc38d0eeb7f81617bf41838cd7a 487.61 KB
6cb49f640c31d8c27629b606e4eb1490 cf324a64ba447c77937a15d9e2466850af745170 487.61 KB
b5b19af0321834460a7d31701eb634d3 c733d523617a04500bd50060617993034b267d4b 478.61 KB
f780ee20d47a23060dbce20dc104e272 8c0de7158b5526922dba15c8d621fbb3675b164f 478.63 KB
0d2e386bc6d282c9da7b40271d31ccb7 3430d3eaefc117e8953ec717a912e722fbd2bec8 478.63 KB
239bc05af0d0636daaab7e502900bf00 72baed75ff89313438650fbb35ad924cfcc55bee 478.63 KB
ae22197774b91282d1744ef9c4b46cf2 803e75bacc846d475b20d05b06d387c72fd87503 479.66 KB
b6de2876a6dcced5e973984781521a3f 4785e1e95c59e1a9d529946192a2d04f1011d81a 479.66 KB
f841d0c3617c6224ffa6a1c0b424e429 4d37b1cbe69af33c75f7efff950aab3260808658 477.51 KB
41fe3cc100ce14955f3920de0397bdc6 06e353e94ffc3524d87491b1700b0a847df0a606 477.51 KB
387fab56f7691bcfda6f91aa9e9528a0 3ae4839ed40d0c3ccc14ee274c409cca90db75db 217.51 KB
7ec577c30da696ee91a6409290a7d213 90337d0738a48bc17d02e6c9680cb67427018ec5 217.51 KB
9214932dc1ba6ccbc2cf257238c484b0 962e89d2e525e78d5f09f79c3f09bc672bfe42b3 217.51 KB
aac12d8145bd9cf3cae8f4282dd5791d ac75ec61b9ec3fe54dd70d7a2f70590f98d0d43d 209.51 KB
e76bfe46bdcc3af9c1d46a913c1f7342 1208f3e94546c1500246855e82982e86aa07dc2d 209.51 KB
eb89f4ac13f95fa31c850907d53dba87 b0a34af264273af4446867d776d9bc2717b908b0 209.51 KB
283b2294568a60c0319c91555241aa36 3bb70d8b893c432c5911c6ea4ea3b8929a01cff8 209.53 KB
6e07d9f3be1ea32f283e30e916d3ffc1 37136f1f7c51676aa3a79c983b909f0725e1b694 209.53 KB
2a75320761aaaa6b345761e1b75840cf 068d2c0dc50f297d90af7829c035d3757c937afd 209.53 KB
4a799edfab0bb49f95cf731da6dec7b6 05f067c308f5bce7b117bfd54003e97d169a22b1 209.53 KB
81aff03dd0ed64afb93803bbb1743856 f6a259954e33ca4a12899dc8e4f9dd4b53bace5e 209.53 KB
166d4304b61e489c68864e2d08b7c89c 8dbc777d21eab8b85bf787116f4d796f13ac1233 204.04 KB
4814a30318e728c5367bbac2ab1d1f58 85134e07d88287cc2bdeadc8c6a55197b67238d1 204.04 KB
e73a2d223009a4f5c74b5f1fe7259f66 ffd741f7c02bf29c06df56563c8ba7d1509f50ad 204.04 KB
3054597470e8dd650aceabaa505707ac 0e8ef9b1b16a85e4a6999687faefb23b084386ba 200.04 KB
29de369633df2bd3b0bc4cd08a7d4eb2 09d65b3f61f80f284c30919ecb726701576075db 20 KB
4be54c21a6ff9689d58896f43d6f260a 76952a8f50bb3a5cd1ceedf8ce4228fa7d9d9e93 20 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 49.50%
Windows 7 Ultimate 20.00%
Microsoft Windows XP 7.75%
Windows 8.1 6.50%
Windows 8 Enterprise N 2.50%
Windows 8 Enterprise 2.50%
Windows 7 Home Basic 2.50%
Windows 8 2.50%
Windows 8 Pro 2.50%
Windows 8 Enterprise Evaluation 1.25%
Windows 7 Professional 1.25%
Windows Vista Home Premium 1.25%

Distribution by countryDistribution by country

United States installs about 43.50% of RealPlayer (32-bit) .

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 24.52%
Toshiba 17.51%
Hewlett-Packard 16.29%
Lenovo 12.61%
Acer 7.01%
Sony 7.01%
GIGABYTE 3.68%
Intel 3.50%
Compaq 3.50%
ASUS 3.50%
American Megatrends 0.88%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE