Should I block it?

No, this file is 100% safe to run.

Additional versions

2.0.7413	5.52%
2.0.7413	14.11%
2.0.3222	0.61%
2.0.3027	18.40%
2.0.3027	5.52%
2.0.2930	34.97%
2.0.1120	9.20%
2.0.0929	0.61%
2.0.0425	4.91%
2.0.0425	4.29%
1.1.0808	1.84%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

richvideo64.exe (RichVideo Module by CyberLink)

PE file structure

Show functions

Import table

advapi32.dll

InitializeSecurityDescriptor, SetSecurityDescriptorDacl, ControlService, DeleteService, CreateServiceA, StartServiceCtrlDispatcherA, OpenThreadToken, SetServiceStatus, RegisterServiceCtrlHandlerA, RegisterEventSourceA, ReportEventA, DeregisterEventSource, OpenSCManagerA, OpenServiceA, CloseServiceHandle, RegEnumKeyW, RegEnumKeyA, RegDeleteValueA, RegDeleteValueW, RegDeleteKeyA, RegDeleteKeyW, RegCreateKeyExA, RegCreateKeyExW, RegSetValueExA, RegSetValueExW, RegQueryValueExW, RegEnumKeyExA, RegEnumKeyExW, RegEnumValueA, RegEnumValueW, RegQueryValueExA, RegCloseKey, RegOpenKeyExA, RegOpenKeyExW, CopySid, GetLengthSid, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, GetTokenInformation, OpenProcessToken

kernel32.dll

GetStartupInfoA, IsBadWritePtr, IsBadReadPtr, GetFileSize, SetEvent, CreateEventA, GetLastError, WideCharToMultiByte, CloseHandle, ReadFile, SetEndOfFile, WriteFile, GetVersionExA, CreateFileA, CreateFileW, OutputDebugStringA, OutputDebugStringW, MultiByteToWideChar, FindFirstFileA, FindFirstFileW, GetTempFileNameA, GetTempFileNameW, DeleteFileA, DeleteFileW, CreateDirectoryA, CreateDirectoryW, SetFilePointer, GetTempPathW, GetDriveTypeW, GetDriveTypeA, GetVolumeInformationA, CreateMutexA, InterlockedDecrement, GetCurrentThread, GetCurrentThreadId, lstrcmpiA, GetCommandLineA, InitializeCriticalSection, GetModuleFileNameA, lstrlenA, DeleteCriticalSection, lstrlenW, GetShortPathNameA, GetModuleHandleA, InterlockedIncrement, FreeLibrary, CreateThread, LoadLibraryA, lstrcpyA, lstrcatA, GetCurrentProcess, LeaveCriticalSection, EnterCriticalSection, WaitForSingleObject, GetProcAddress, VirtualFree, VirtualAlloc, DeviceIoControl, ResetEvent, QueryDosDeviceA, SearchPathA

msvcrt.dll

DllMain

ole32.dll

CoCreateInstance, CoInitialize, CoInitializeSecurity, CoRegisterClassObject, CoRevokeClassObject, CoUninitialize, CoDisconnectObject

shell32.dll

SHGetSpecialFolderPathA, SHGetSpecialFolderPathW

shlwapi.dll

PathFileExistsW, PathFileExistsA

user32.dll

MessageBoxA, CharNextA, PostThreadMessageA, DispatchMessageA, GetMessageA, LoadStringA, MessageBoxW, wsprintfA

winmm.dll

timeGetTime

RichVideo.exe

RichVideo Module by CyberLink (Signed)

Remove RichVideo.exe

Version:	2.0.7413
MD5:	9c675492b635cc1756ae4eab3937552a
SHA1:	a2a93c97f41c992d9a2aa155fdac94f26941c2f5

Overview

richvideo.exe runs as a service under the name Cyberlink RichVideo Service(CRVS) (RichVideo) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including PowerDirector11 published by CruZified, CyberLink Media Suite 12 from CyberLink Corp. and CyberLink Media Suite 12 by CyberLink Corp.. The file is digitally signed by CyberLink which was issued by the VeriSign certificate authority (CA).

Details

File name:	richvideo.exe
Product name:	RichVideo Module
Typical file path:	C:\Program Files\cyberlink\shared files\richvideo.exe
File version:	2.0.7413
Size:	248.59 KB (254,552 bytes)
Certificate
Issued to:	CyberLink
Authority (CA):	VeriSign
Effective date:	Tuesday, April 4, 2006
Expiration date:	Monday, April 13, 2009
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Programs

The following programs will install this file

PowerDirector11

CruZified

4% remove

CyberLink Media Suite 12

CyberLink Corp.

11% remove

CyberLink PowerDirector 12 Content Pack Essential

CyberLink Corp.

7% remove

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'RichVideo' (Cyberlink RichVideo Service(CRVS))
RichVideo

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00024774%	0.028634%
Kernel CPU:	0.00024309%	0.013761%
User CPU:	0.00000465%	0.014873%
Kernel CPU time:	62,438 ms/min	100,923,805ms/min
CPU cycles:	40,810/sec	17,470,203/sec
Memory
Private memory:	1.26 MB	21.59 MB
Private (maximum):	3.34 MB
Private (minimum):	1.33 MB
Non-paged memory:	1.26 MB	21.59 MB
Virtual memory:	42.45 MB	140.96 MB
Virtual memory (peak):	45.01 MB	169.69 MB
Working set:	1.47 MB	18.61 MB
Working set (peak):	4 MB	37.95 MB
Page faults:	1,343/min	2,039/min
I/O
I/O read transfer:	4.65 KB/sec	1.02 MB/min
I/O read operations:	10/sec	343/min
I/O other transfer:	27 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	4	12
Handles:	85	600
GUI GDI count:	4	103
GUI USER count:	4	49

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	"C:\Program Files\cyberlink\shared files\richvideo.exe"
Owner:	SYSTEM
Windows Service
Service name:	RichVideo
Display name:	Cyberlink RichVideo Service(CRVS)
Type:	Win32OwnProcess
Parent process:	services.exe (by Microsoft)

Threads

Averages

wow64.dll
Total CPU:	0.00009164%	0.272967%
Kernel CPU:	0.00005891%	0.107585%
User CPU:	0.00003273%	0.165382%
CPU cycles:	2,288/sec	5,741,424/sec
Memory:	252 KB	1.16 MB
RichVideo.exe (main module)
Total CPU:	0.00002667%
Kernel CPU:	0.00002196%
User CPU:	0.00000471%
CPU cycles:	17,100/sec
Memory:	244 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

richvideops.dll (by CyberLink)

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	38.65%
Windows Vista Home Premium	12.27%
Windows 8 Pro	7.98%
Microsoft Windows XP	6.75%
Windows 7 Ultimate	6.75%
Windows 8	6.13%
Windows 8.1	4.91%
Windows 7 Professional	4.91%
Windows 7 Home Basic	3.68%
Windows Vista Home Basic	3.07%
Windows 8 Single Language	2.45%
Windows 8 Pro with Media Center	2.45%

Distribution by country

United States installs about 48.45% of RichVideo Module.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	35.00%
Hewlett-Packard	25.83%
Samsung	10.00%
Acer	8.33%
ASUS	6.67%
GIGABYTE	4.17%
Medion	3.33%
Toshiba	3.33%
Alienware	1.67%
Intel	1.67%

Remove Adware and Spyware Programs, FREE Download!