Should I block it?

No, this file is 100% safe to run.

Additional versions

2.0.5417	1.61%
2.0.3027	17.74%
2.0.2807	30.65%
2.0.2807	1.61%
2.0.0828	4.84%
2.0.0705	11.29%
1.1.0808	1.61%
1.1.0808	29.03%
1.0.1321	1.61%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

richvideo64.exe (RichVideo Module by CyberLink)

PE file structure

Show functions

Import table

advapi32.dll

InitializeSecurityDescriptor, SetSecurityDescriptorDacl, ControlService, DeleteService, CreateServiceA, StartServiceCtrlDispatcherA, OpenThreadToken, SetServiceStatus, RegisterServiceCtrlHandlerA, RegisterEventSourceA, ReportEventA, DeregisterEventSource, OpenSCManagerA, OpenServiceA, CloseServiceHandle, RegEnumKeyW, RegEnumKeyA, RegDeleteValueA, RegDeleteValueW, RegDeleteKeyA, RegDeleteKeyW, RegCreateKeyExA, RegCreateKeyExW, RegSetValueExA, RegSetValueExW, RegQueryValueExW, RegEnumKeyExA, RegEnumKeyExW, RegEnumValueA, RegEnumValueW, RegQueryValueExA, RegCloseKey, RegOpenKeyExA, RegOpenKeyExW, CopySid, GetLengthSid, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, GetTokenInformation, OpenProcessToken

kernel32.dll

GetStartupInfoA, IsBadWritePtr, IsBadReadPtr, GetFileSize, SetEvent, CreateEventA, GetLastError, WideCharToMultiByte, CloseHandle, ReadFile, SetEndOfFile, WriteFile, GetVersionExA, CreateFileA, CreateFileW, OutputDebugStringA, OutputDebugStringW, MultiByteToWideChar, FindFirstFileA, FindFirstFileW, GetTempFileNameA, GetTempFileNameW, DeleteFileA, DeleteFileW, CreateDirectoryA, CreateDirectoryW, SetFilePointer, GetTempPathW, GetDriveTypeW, GetDriveTypeA, GetVolumeInformationA, CreateMutexA, InterlockedDecrement, GetCurrentThread, GetCurrentThreadId, lstrcmpiA, GetCommandLineA, InitializeCriticalSection, GetModuleFileNameA, lstrlenA, DeleteCriticalSection, lstrlenW, GetShortPathNameA, GetModuleHandleA, InterlockedIncrement, FreeLibrary, CreateThread, LoadLibraryA, lstrcpyA, lstrcatA, GetCurrentProcess, LeaveCriticalSection, EnterCriticalSection, WaitForSingleObject, GetProcAddress, DeviceIoControl, ResetEvent, QueryDosDeviceA, VirtualFree, VirtualAlloc, SearchPathA

msvcrt.dll

DllMain

ole32.dll

CoCreateInstance, CoInitialize, CoInitializeSecurity, CoRegisterClassObject, CoRevokeClassObject, CoUninitialize, CoDisconnectObject

shell32.dll

SHGetSpecialFolderPathA, SHGetSpecialFolderPathW

shlwapi.dll

PathFileExistsW, PathFileExistsA

user32.dll

MessageBoxA, CharNextA, PostThreadMessageA, DispatchMessageA, GetMessageA, LoadStringA, MessageBoxW, wsprintfA

winmm.dll

timeGetTime

RichVideo.exe

RichVideo Module by CyberLink (Signed)

Remove RichVideo.exe

Version:	2.0.0828
MD5:	0a468612a19feb657d127e7c4810f6fc
SHA1:	af4e3afca7cf951e64554b0b5b23c0b40f903f54
SHA256:	b31a083fa10051be5132d759a904e131e9dd1c4ce79310a75213b9c48247739b

Overview

richvideo.exe runs as a service under the name Cyberlink RichVideo Service(CRVS) (RichVideo) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by CyberLink which was issued by the VeriSign certificate authority (CA).

Details

File name:	richvideo.exe
Product name:	RichVideo Module
Typical file path:	C:\Program Files\cyberlink\shared files\richvideo.exe
File version:	2.0.0828
Size:	260.1 KB (266,343 bytes)
Certificate
Issued to:	CyberLink
Authority (CA):	VeriSign
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'RichVideo' (Cyberlink RichVideo Service(CRVS))
RichVideo

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00002233%	0.028634%
Kernel CPU:	0.00002017%	0.013761%
User CPU:	0.00000216%	0.014873%
Kernel CPU time:	140 ms/min	100,923,805ms/min
Memory
Private memory:	1.14 MB	21.59 MB
Private (maximum):	1.4 MB
Private (minimum):	1.04 MB
Non-paged memory:	1.14 MB	21.59 MB
Virtual memory:	56.53 MB	140.96 MB
Virtual memory (peak):	58.53 MB	169.69 MB
Working set:	1.04 MB	18.61 MB
Working set (peak):	3.63 MB	37.95 MB
Resource allocations
Threads:	4	12
Handles:	68	600

Process properties

Integrety level:	System
Platform:	32-bit
Command line:	"C:\Program Files\cyberlink\shared files\richvideo.exe"
Owner:	SYSTEM
Windows Service
Service name:	RichVideo
Display name:	Cyberlink RichVideo Service(CRVS)
Type:	Win32OwnProcess, InteractiveProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads

Averages

ADVAPI32.dll
Total CPU:	0.00000450%	0.272967%
Kernel CPU:	0.00000225%	0.107585%
User CPU:	0.00000225%	0.165382%
CPU cycles:	48/sec	5,741,424/sec
Memory:	792 KB	1.16 MB
RichVideo.exe (main module)
Total CPU:	0.00000337%
Kernel CPU:	0.00000337%
User CPU:	0.00000000%
CPU cycles:	316/sec
Memory:	268 KB

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	30.65%
Windows Vista Home Premium	22.58%
Windows 7 Ultimate	14.52%
Microsoft Windows XP	6.45%
Windows Vista Home Basic	6.45%
Windows 8.1 Single Language	3.23%
Windows 8.1	3.23%
Windows Seven Black Edition	3.23%
Windows 8 Pro with Media Center	3.23%
Windows 8 Single Language	3.23%
Windows 8 Pro	1.61%
Windows Vista Ultimate	1.61%

Distribution by country

United States installs about 35.48% of RichVideo Module.

Distribution by PC manufacturer

PC Manufacturer	distribution
ASUS	34.78%
Hewlett-Packard	15.94%
Lenovo	11.59%
Acer	10.14%
Toshiba	8.70%
Dell	5.80%
Gateway	5.80%
GIGABYTE	4.35%
Sahara	2.90%

Remove Adware and Spyware Programs, FREE Download!