Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

17.0.9.18 0.28%
1.7.0.24 0.28%
1.5.1.161 0.28%
1.3.3.66 18.66%
1.3.2.28 16.43%
1.3.1.2 13.09%
1.3.0.208 48.75%
1.2.0.144 1.67%
1.1.0.66 0.28%
1.0.2.49 0.28%

Relationships

Parent processes
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
FreeSid, OpenProcessToken, GetTokenInformation, ConvertSidToStringSidW, RegOpenKeyExW, RegQueryValueExW, RegSetValueExA, RegEnumKeyExA, RegCreateKeyW, RegSetValueW, RegOpenKeyW, RegEnumKeyA, RegDeleteKeyA, RegCreateKeyA, RegSetValueA, RegQueryValueW, RegQueryValueA, RegDeleteValueA, RegOpenKeyExA, RegOpenKeyA, RegQueryValueExA, RegCloseKey
gdi32.dll
GetDeviceCaps
kernel32.dll
SetErrorMode, SizeofResource, LockResource, LoadResource, FindResourceW, FindResourceExW, GetModuleFileNameW, CreateProcessW, GetCurrentProcessId, GetLocaleInfoW, LoadLibraryW, SetEnvironmentVariableW, GetEnvironmentVariableW, LocalFree, SetCurrentDirectoryA, GetCurrentDirectoryA, IsBadWritePtr, VirtualProtect, IsBadReadPtr, SetUnhandledExceptionFilter, TerminateThread, WaitForSingleObject, CreateThread, GetCurrentThreadId, SetEnvironmentVariableA, GetEnvironmentVariableA, GetCurrentProcess, GetModuleHandleExA, WriteFile, GetThreadContext, VirtualQuery, OpenProcess, SetFilePointer, GlobalMemoryStatus, SetProcessWorkingSetSize, WaitForMultipleObjects, Sleep, CreateProcessA, LoadLibraryExW, LoadLibraryExA, FreeLibraryAndExitThread, GetModuleHandleW, GetSystemDirectoryW, UnmapViewOfFile, MapViewOfFile, OpenFileMappingA, IsProcessorFeaturePresent, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, EncodePointer, DecodePointer, InterlockedExchange, InterlockedCompareExchange, HeapSetInformation, GetStartupInfoW, TerminateProcess, UnhandledExceptionFilter, IsDebuggerPresent, GetSystemTimeAsFileTime, QueryPerformanceCounter, SetLastError, RaiseException, GetLastError, CloseHandle, SetEvent, OpenEventA, WideCharToMultiByte, lstrlenW, MultiByteToWideChar, lstrlenA, GetModuleHandleA, CreateEventA, ReleaseMutex, CreateMutexA, InterlockedIncrement, InterlockedDecrement, FreeLibrary, GetProcAddress, LoadLibraryA, GetVersionExA, GetVersion, GetSystemInfo, GetTickCount, MoveFileA, CreateFileW, ReadFile, CreateDirectoryA, GetFileAttributesA, GetModuleFileNameA, CreateFileA, GetFileSize, DeleteFileA
msvcp100.dll
DllMain
msvcr100.dll
DllMain
ole32.dll
StringFromCLSID, CoInitialize, CoUninitialize, CoTaskMemFree, CoCreateInstance
secur32.dll
GetUserNameExW
shell32.dll
SHGetFolderPathW, SHCreateDirectoryExW, ShellExecuteA, SHCreateDirectoryExA
shlwapi.dll
PathAddBackslashW, PathRemoveFileSpecW, PathStripPathW, PathAppendW, PathFileExistsW
user32.dll
RegisterClassExA, CreateWindowExA, SendMessageA, GetSystemMetrics, DestroyMenu, LoadCursorA, SetMenuDefaultItem, IsWindow, DestroyIcon, GetSubMenu, MessageBoxA, ShowWindow, UpdateWindow, FindWindowW, GetMessageA, TranslateMessage, DispatchMessageA, BeginPaint, EndPaint, PostQuitMessage, RegisterWindowMessageA, DefWindowProcA, PostMessageA, CharNextA, LoadMenuA, SetLastErrorEx, LoadIconA, GetWindowPlacement, SystemParametersInfoA, IsIconic, SetForegroundWindow, GetForegroundWindow, AttachThreadInput, FlashWindow, GetWindowThreadProcessId, GetDC, ReleaseDC, FindWindowA
version.dll
GetFileVersionInfoA, GetFileVersionInfoSizeA, VerQueryValueA

recordingmanager.exe

RealDownloader (32-bit) by RealNetworks (Signed)

Remove recordingmanager.exe
Version:   1.3.2.28
MD5:   013cbc83d1c8131eb623567ef4d3ffcc
SHA1:   ec32112bb0d1307c8b4b2e54164b4086ac204307
SHA256:   7daa32984705f39e458d5a55a235f79af1a5471533c89f175d6bde37dcf3550c

About recordingmanager.exe (from RealNetworks)

“Using RealDownloader, you can download videos from YouTube, Facebook, Vimeo, Metacafe, and more. Save your favorite free online videos from hundreds of Web sites. It’s never been easier to download vi”

Overview

recordingmanager.exe executes as a process with the local user's privileges typically within the context of its parent chrome.exe (Google Chrome by Google Inc). The file is digitally signed by RealNetworks which was issued by the Thawte certificate authority (CA).

DetailsDetails

File name:recordingmanager.exe
Publisher:RealNetworks, Inc.
Product name:RealDownloader (32-bit)
Description:RealDownloader
Typical file path:C:\Program Files\realnetworks\realdownloader\recordingmanager.exe
File version:1.3.2.28
Size:227.59 KB (233,048 bytes)
Build date:4/16/2013 5:09 AM
Certificate
Issued to:RealNetworks
Authority (CA):Thawte
Effective date:Tuesday, March 8, 2011
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 10.0
.NET CLR:No
More details

BehaviorsBehaviors

Scheduled tasks
  • The task 'RealDownloaderDownloaderScheduledTaskS-1-5-21-1423522360-3395476842-3449966222-1001' runs daily in the path '\RealDownloaderDownloaderScheduledTaskS-1-5-21-1423522360-3395476842-3449966222-1001'
  • The task 'RealDownloaderDownloaderScheduledTaskS-1-5-21-3780133834-331337826-3407075997-1001' runs daily in the path '\RealDownloaderDownloaderScheduledTaskS-1-5-21-3780133834-331337826-3407075997-1001'
  • The task 'RealDownloaderDownloaderScheduledTaskS-1-5-21-874151087-749315904-2186047852-1000' runs daily in the path '\RealDownloaderDownloaderScheduledTaskS-1-5-21-874151087-749315904-2186047852-1000'
  • The task 'RealDownloaderDownloaderScheduledTaskS-1-5-21-2714351487-4149610615-3439605620-1000' runs daily in the path '\RealDownloaderDownloaderScheduledTaskS-1-5-21-2714351487-4149610615-3439605620-1000'
  • The task 'RealDownloaderDownloaderScheduledTaskS-1-5-21-3478971812-858940020-2471763029-1000' runs daily in the path '\RealDownloaderDownloaderScheduledTaskS-1-5-21-3478971812-858940020-2471763029-1000'
  • The job 'RealDownloaderDownloaderScheduledTaskS-1-5-21-1409082233-725345543-682003330-1004' runs daily in the path 'C:\WINDOWS\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1409082233-725345543-682003330-1004.job'
  • The job 'RealDownloaderDownloaderScheduledTaskS-1-5-21-2426516273-3893298846-2812643595-1000' runs daily in the path '\RealDownloaderDownloaderScheduledTaskS-1-5-21-2426516273-3893298846-2812643595-1000'
  • The job 'RealDownloaderDownloaderScheduledTaskS-1-5-21-917801239-2516116701-2666536058-1000' runs daily in the path '\RealDownloaderDownloaderScheduledTaskS-1-5-21-917801239-2516116701-2666536058-1000'
  • The job 'RealDownloaderDownloaderScheduledTaskS-1-5-21-4136827049-1587382504-3562502678-1001' runs daily in the path '\RealDownloaderDownloaderScheduledTaskS-1-5-21-4136827049-1587382504-3562502678-1001'
  • The job 'RealDownloaderDownloaderScheduledTaskS-1-5-21-2302185735-1820880577-3360714277-1000' runs daily in the path '\RealDownloaderDownloaderScheduledTaskS-1-5-21-2302185735-1820880577-3360714277-1000'
  • The job 'RealDownloaderDownloaderScheduledTaskS-1-5-21-3514410-921461477-147006633-1000' runs daily in the path '\RealDownloaderDownloaderScheduledTaskS-1-5-21-3514410-921461477-147006633-1000'
  • The job 'RealDownloaderDownloaderScheduledTaskS-1-5-21-1761162800-216172879-1472656228-1001' runs daily in the path '\RealDownloaderDownloaderScheduledTaskS-1-5-21-1761162800-216172879-1472656228-1001'
  • The job 'RealDownloaderDownloaderScheduledTaskS-1-5-21-1460418714-1805443713-3851231066-1006' runs daily in the path 'C:\WINDOWS\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1460418714-1805443713-3851231066-1006.job'
  • The job 'RealDownloaderDownloaderScheduledTaskS-1-5-21-73586283-746137067-839522115-1003' runs daily in the path 'C:\WINDOWS\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-73586283-746137067-839522115-1003.job'
  • The task 'RealDownloaderDownloaderScheduledTaskS-1-5-21-789336058-706699826-839522115-1003' runs daily in the path 'C:\WINDOWS\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-789336058-706699826-839522115-1003.job'
  • The task 'RealDownloaderDownloaderScheduledTaskS-1-5-21-4226971044-3753984958-3471663708-1001' runs daily in the path '\RealDownloaderDownloaderScheduledTaskS-1-5-21-4226971044-3753984958-3471663708-1001'
  • The job 'RealDownloaderDownloaderScheduledTaskS-1-5-21-572681465-336890980-4167514758-1000' runs daily in the path '\RealDownloaderDownloaderScheduledTaskS-1-5-21-572681465-336890980-4167514758-1000'
  • The task 'RealDownloaderDownloaderScheduledTaskS-1-5-21-1682383202-3072944920-2630020424-1000' runs daily in the path '\RealDownloaderDownloaderScheduledTaskS-1-5-21-1682383202-3072944920-2630020424-1000'
  • The task 'RealDownloaderDownloaderScheduledTaskS-1-5-21-2709236969-139009050-3515939019-1002' runs daily in the path '\RealDownloaderDownloaderScheduledTaskS-1-5-21-2709236969-139009050-3515939019-1002'
  • The job 'RealDownloaderDownloaderScheduledTaskS-1-5-21-3081201213-2557485704-3847274730-1000' runs daily in the path '\RealDownloaderDownloaderScheduledTaskS-1-5-21-3081201213-2557485704-3847274730-1000'
  • The job 'RealDownloaderDownloaderScheduledTaskS-1-5-21-1940068096-1023481402-460927341-1002' runs daily in the path '\RealDownloaderDownloaderScheduledTaskS-1-5-21-1940068096-1023481402-460927341-1002'
  • The job 'RealDownloaderDownloaderScheduledTaskS-1-5-21-2194461130-3394011999-86662213-1000' runs daily in the path '\RealDownloaderDownloaderScheduledTaskS-1-5-21-2194461130-3394011999-86662213-1000'
Network connections
  • [UDP] listens on port 52264
  • [UDP] listens on port 56583

    • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.01327010%
    0.028634%
    Kernel CPU:0.00922119%
    0.013761%
    User CPU:0.00404890%
    0.014873%
    Kernel CPU time:374,645 ms/min
    100,923,805ms/min
    CPU cycles:5,289,161/sec
    17,470,203/sec
    Context switches:329/sec
    284/sec
    Memory
    Private memory:5.3 MB
    21.59 MB
    Private (maximum):12.08 MB
    Private (minimum):6.46 MB
    Non-paged memory:5.3 MB
    21.59 MB
    Virtual memory:98.07 MB
    140.96 MB
    Virtual memory (peak):104.08 MB
    169.69 MB
    Working set:8.49 MB
    18.61 MB
    Working set (peak):12.41 MB
    37.95 MB
    Page faults:26,724/min
    2,039/min
    I/O
    I/O read transfer:4.35 KB/sec
    1.02 MB/min
    I/O read operations:4/sec
    343/min
    I/O write transfer:321.64 KB/sec
    274.99 KB/min
    I/O write operations:41/sec
    227/min
    I/O other transfer:43.33 KB/sec
    448.09 KB/min
    I/O other operations:73/sec
    1,671/min
    Resource allocations
    Threads:9
    12
    Handles:203
    600
    GUI GDI count:18
    103
    GUI GDI peak:19
    142
    GUI USER count:23
    49
    GUI USER peak:28
    71

    BehaviorsProcess properties

    Integrety level:Medium
    Platform:64-bit
    Command lines:
    • "C:\Program Files\realnetworks\realdownloader\recordingmanager.exe" /bgrecordhelpersvc
    • "C:\Program Files\realnetworks\realdownloader\recordingmanager.exe"
    • "C:\Program Files\realnetworks\realdownloader\recordingmanager.exe" /m "video/mpeg4" /t "outlaws - there goes another love song - youtube" /pageurl "httC://www.youtube.com/watch?v=lhvnsg6sb6s" /objecturl "httC://s.ytimg.com/yts/swfbin/watch_as3-vflbp0oge.swf" /u "httC://r4---sn-ufuxaxjvh-v53e.c.youtube.com/videoplayback?algorithm=throttle-factor&burst=40&clen=2897839&cp=u0hwrlduvf9ms0nonl9ptlheomu3r2jqdk5wety5&cpn=rppobjyseqpj6nt-&expire=1371796371&factor=1.25&fexp=919110%2c911403%2c904
    Owner:User
    Parent processes:

    ResourcesThreads

    Averages
     
    msvcr100.dll (Microsoft Visual Studio 2010 by Microsoft)
    Total CPU:0.00893657%
    0.272967%
    Kernel CPU:0.00658314%
    0.107585%
    User CPU:0.00235343%
    0.165382%
    CPU cycles:1,257,362/sec
    5,741,424/sec
    Context switches:110/sec
    79/sec
    Memory:764 KB
    1.16 MB
    recordingmanager.exe (main module)
    Total CPU:0.00674433%
    Kernel CPU:0.00452707%
    User CPU:0.00221726%
    CPU cycles:2,194,270/sec
    Context switches:73/sec
    Memory:236 KB
    wow64.dll (Win32 Emulation on NT64 by Microsoft)
    Total CPU:0.00004938%
    Kernel CPU:0.00004938%
    User CPU:0.00000000%
    CPU cycles:3,175/sec
    Memory:252 KB

    Common loaded modules

    These are modules that are typiclaly loaded within the context of this process.

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 35.50%
    Windows 7 Ultimate 20.50%
    Microsoft Windows XP 12.00%
    Windows 8 6.50%
    Windows 7 Professional 5.50%
    Windows Vista Home Premium 5.00%
    Windows 8 Pro 3.50%
    Windows 8 Single Language 2.50%
    Windows 7 Home Basic 2.50%
    Windows 8 Pro with Media Center 2.00%
    Windows 8 Enterprise Evaluation 1.00%
    Windows 8.1 1.00%
    Windows Vista Business 1.00%
    Windows 8 Enterprise N 0.50%
    Windows 7 Starter 0.50%
    Windows Se7en Titan 0.50%

    Distribution by countryDistribution by country

    United States installs about 44.16% of RealDownloader (32-bit) .

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Dell 26.12%
    Toshiba 20.90%
    Hewlett-Packard 16.42%
    Acer 11.57%
    Sony 6.72%
    Lenovo 5.22%
    Intel 2.99%
    Samsung 2.24%
    American Megatrends 1.49%
    ASUS 1.49%
    GIGABYTE 1.12%
    Compaq 0.75%
    Sahara 0.75%
    NEC 0.75%
    MSI 0.75%
    Gateway 0.75%
    Back to top
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE