Should I block it?

60%

60% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

16.0.2.32	25.00%
16.0.0.282	50.00%
15.0.6.14	25.00%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegEnumKeyExA, RegOpenKeyA, RegDeleteValueA, RegCreateKeyExA, RegSetValueExA, RegOpenKeyExA, RegQueryValueExA, RegCloseKey, RegSetValueA, RegCreateKeyA, RegDeleteKeyA, RegEnumKeyA, FreeSid, RegQueryValueA, RegCreateKeyW, RegSetValueW, RegOpenKeyW, RegQueryValueW

gdi32.dll

GetDeviceCaps

kernel32.dll

DeleteFileA, CreateFileA, GetFileAttributesA, CreateDirectoryA, MoveFileA, GetTickCount, GetSystemInfo, GetVersion, RaiseException, SizeofResource, LockResource, LoadResource, FindResourceA, FindResourceExA, SetCurrentDirectoryA, GetCurrentDirectoryA, IsBadWritePtr, VirtualProtect, IsBadReadPtr, GetModuleHandleA, WideCharToMultiByte, SetUnhandledExceptionFilter, TerminateThread, WaitForSingleObject, GetCurrentThreadId, GetCurrentProcess, WriteFile, GetThreadContext, VirtualQuery, GetCurrentProcessId, OpenProcess, SetFilePointer, GlobalMemoryStatus, SetProcessWorkingSetSize, CreateEventA, LocalFree, SetEvent, WaitForMultipleObjects, GetProcessHeap, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, GetSystemTimeAsFileTime, QueryPerformanceCounter, IsDebuggerPresent, UnhandledExceptionFilter, TerminateProcess, GetStartupInfoA, InterlockedCompareExchange, Sleep, InterlockedExchange, GetVersionExA, GetEnvironmentVariableA, GetModuleFileNameA, SetErrorMode, OpenMutexA, WinExec, LoadLibraryA, GetProcAddress, FreeLibrary, InterlockedDecrement, InterlockedIncrement, CreateMutexA, GetLastError, CloseHandle, ReleaseMutex, CreateThread, FindResourceW, FindResourceExW, lstrlenW, MultiByteToWideChar, lstrlenA, InitializeCriticalSectionAndSpinCount, GetStartupInfoW, HeapSetInformation, DecodePointer, EncodePointer

msvcr100.dll

DllMain

msvcr90.dll

DllMain

shell32.dll

SHGetFolderPathA, SHGetFolderPathW, SHCreateDirectoryExW, SHCreateDirectoryExA

shlwapi.dll

PathAddBackslashA, PathAppendA, PathAddBackslashW, PathAppendW

user32.dll

GetSystemMetrics, CharNextA, ReleaseDC, GetDC, DestroyMenu, DestroyIcon, GetSubMenu, SetTimer, IsWindow, KillTimer, FindWindowA, LoadCursorA, RegisterClassExA, CreateWindowExA, ShowWindow, UpdateWindow, GetMessageA, TranslateMessage, DispatchMessageA, PostQuitMessage, RegisterWindowMessageA, BeginPaint, EndPaint, DefWindowProcA, PostMessageA

version.dll

GetFileVersionInfoA, VerQueryValueA

realonemessagecenter.exe

RealPlayer (32-bit) by RealNetworks (Signed)

Remove realonemessagecenter.exe

Version:	15.0.6.14
MD5:	653ea8210c80e16296d2e15e43e8ec3b
SHA1:	6a421d76a2c7aeef7ae0d07bbf07eab8ccf37cc8
SHA256:	03f76c56354df1bbb880a46bc8f5bd216384ec15395cbe16cc57ffef8b408149

What is realonemessagecenter.exe?

RealPlayer, by RealNetworks, is a cross-platform software product primarily used for the playing of recorded media. The media player is compatible with numerous formats within the multimedia realm, including MP3, MPEG-4, QuickTime, Windows Media, and multiple versions (proprietary) of RealAudio and RealVideo formats. The software is powered by an underlying open source media engine called Helix.

About realonemessagecenter.exe (from RealNetworks)

“Real brings you RealPlayer, the only solution you’ll need for managing all your music and videos. It’s the best free media player around for enjoying all types of entertainment! You can also transfer ”

Details

File name:	realonemessagecenter.exe
Publisher:	RealNetworks, Inc.
Product name:	RealPlayer (32-bit)
Description:	RealNetworks Event Launcher
Typical file path:	C:\Program Files\real\realplayer\update\realonemessagecenter.exe
Original name:	realevent.exe
File version:	15.0.6.14
Size:	77.2 KB (79,048 bytes)
Certificate
Issued to:	RealNetworks
Authority (CA):	Thawte
Effective date:	Tuesday, March 8, 2011
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 9.0
.NET CLR:	No

More details

Programs

The following programs will install this file

RealPlayer

RealNetworks, Inc.

27% remove

RealPlayer is a cross-platform software product primarily used for the playing of recorded media. The media player is compatible with numerous formats within the multimedia realm, including MP3, MPEG-4, QuickTime, Windows Media, and multiple versions of RealAudio and RealVideo formats. The software is powered by an underlying open source media engine called Helix.

Behaviors

Startup files (user) run

Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'MsgCenterExe' → "C:\Program Files\real\realplayer\update\RealOneMessageCenter.exe" -osboot

Scheduled tasks

The task 'RealCreateProcessScheduledTask7880328S-1-5-21-2355705715-2703073010-2366679147-1000' runs on registration in the path '\RealCreateProcessScheduledTask7880328S-1-5-21-2355705715-2703073010-2366679147-1000'

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00009559%	0.028634%
Kernel CPU:	0.00004075%	0.013761%
User CPU:	0.00005484%	0.014873%
Kernel CPU time:	11,856,076 ms/min	100,923,805ms/min
Memory
Private memory:	1.89 MB	21.59 MB
Private (maximum):	852 KB
Private (minimum):	212 KB
Non-paged memory:	1.89 MB	21.59 MB
Virtual memory:	70.57 MB	140.96 MB
Virtual memory (peak):	74.64 MB	169.69 MB
Working set:	212 KB	18.61 MB
Working set (peak):	5.79 MB	37.95 MB
Resource allocations
Threads:	2	12
Handles:	223	600
GUI GDI count:	18	103
GUI GDI peak:	20	142
GUI USER count:	10	49
GUI USER peak:	12	71