Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

f3840 0.27%
1b89c 1.51%
6b220 0.14%
a0ff4 48.83%
89525 14.54%
b2d01 16.32%
96efe 17.70%
2665e 0.14%
2bfdf 0.41%
71a9a 0.14%
(Note, RealNetworks publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegQueryValueExA, CloseServiceHandle, CreateServiceA, OpenSCManagerA, DeleteService, OpenServiceA, SetServiceStatus, RegisterServiceCtrlHandlerA, StartServiceCtrlDispatcherA, RegCreateKeyExA, RegNotifyChangeKeyValue, RegOpenKeyExA, RegCloseKey, RegSetValueExA, RegDeleteKeyA, RegOpenKeyExW, RegQueryValueExW
kernel32.dll
HeapSize, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, GetProcessHeap, LeaveCriticalSection, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, DecodePointer, EncodePointer, HeapSetInformation, InterlockedCompareExchange, Sleep, InterlockedExchange, GetEnvironmentVariableA, GetCurrentProcess, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, GetTickCount, GetFileAttributesA, WaitForMultipleObjects, MoveFileA, lstrlenW, WideCharToMultiByte, lstrlenA, EnterCriticalSection, MultiByteToWideChar, LoadLibraryA, GetProcAddress, FreeLibrary, GetLastError, RaiseException, lstrcmpiA, CreateEventA, WaitForSingleObject, CloseHandle, SetEvent, GetModuleFileNameA, InitializeCriticalSection
msvcr100.dll
DllMain
msvcr90.dll
DllMain
ole32.dll
CoInitialize, CoUninitialize
shell32.dll
SHGetFolderPathW, SHCreateDirectoryExW, SHFileOperationW
shlwapi.dll
PathAppendW
user32.dll
GetSystemMetrics, CharNextA

rndlresolversvc.exe

By RealNetworks (Signed)

Remove rndlresolversvc.exe
MD5:   a0ff419b61ae47e26adf3bb15db4f2fe
SHA1:   b568988b431a315a2750db547b396fd12d4b6153
SHA256:   974ff9751d123e212bd3ce8dae70d4bccc988a01431a1bd91a532849e492bbd8

Overview

rndlresolversvc.exe runs as a service under the name RealNetworks Downloader Resolver Service with extensive SYSTEM privileges (full administrator access). This is typically installed with the program RealDownloader published by RealNetworks, Inc.. The file is digitally signed by RealNetworks which was issued by the Thawte certificate authority (CA).

DetailsDetails

File name:rndlresolversvc.exe
Typical file path:C:\Program Files\realnetworks\realdownloader\rndlresolversvc.exe
Size:37.7 KB (38,608 bytes)
Certificate
Issued to:RealNetworks
Authority (CA):Thawte
Effective date:Tuesday, March 8, 2011
Digital DNA
PE subsystem:Windows Console
File packed:No
Code language:Microsoft Visual C++ 10.0
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
RealNetworks, Inc.
27% remove
RealDownloader is a freemium download manager by RealNetworks that downloads embedded Internet videos in multiple formats including MOV and FLV from sites such as Youtube. This software utility lets users share downloaded videos on social networks and transfer them to their mobile devices. The freeware version includes automatic embedded video detection and integration with web browsers such as Google Chrome, Internet Explorer and Mozil...

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'RealNetworks Downloader Resolver Service'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00028789%
0.028634%
Kernel CPU:0.00018773%
0.013761%
User CPU:0.00010016%
0.014873%
Kernel CPU time:39,608 ms/min
100,923,805ms/min
CPU cycles:41,796/sec
17,470,203/sec
Context switches:2/sec
284/sec
Memory
Private memory:1.14 MB
21.59 MB
Private (maximum):3.28 MB
Private (minimum):2.02 MB
Non-paged memory:1.14 MB
21.59 MB
Virtual memory:38.61 MB
140.96 MB
Virtual memory (peak):40.73 MB
169.69 MB
Working set:2.22 MB
18.61 MB
Working set (peak):3.8 MB
37.95 MB
Page faults:1,853/min
2,039/min
I/O
I/O read transfer:12 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:22 Bytes/sec
448.09 KB/min
I/O other operations:3/sec
1,671/min
Resource allocations
Threads:4
12
Handles:71
600
GUI GDI count:4
103
GUI USER count:3
49

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command lines:
  • "C:\Program Files\realnetworks\realdownloader\rndlresolversvc.exe"
  • C:\programas\realnetworks\realdownloader\rndlresolversvc.exe
Owner:SYSTEM
Windows Service
Service name:RealNetworks Downloader Resolver Service
Description:“Manage different Downloader versions in RealNetworks' products.”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
MSVCR100.dll
Total CPU:0.00039032%
0.272967%
Kernel CPU:0.00030229%
0.107585%
User CPU:0.00008804%
0.165382%
CPU cycles:8,097/sec
5,741,424/sec
Memory:764 KB
1.16 MB
rndlresolversvc.exe (main module)
Total CPU:0.00034689%
Kernel CPU:0.00022613%
User CPU:0.00012076%
CPU cycles:5,885/sec
Memory:44 KB
ntdll.dll
Total CPU:0.00007184%
Kernel CPU:0.00003592%
User CPU:0.00003592%
CPU cycles:81/sec
Memory:1.23 MB
wow64.dll
Total CPU:0.00001803%
Kernel CPU:0.00001803%
User CPU:0.00000000%
CPU cycles:10/sec
Memory:252 KB
wow64win.dll
Total CPU:0.00001396%
Kernel CPU:0.00001396%
User CPU:0.00000000%
CPU cycles:6/sec
Memory:360 KB
wow64cpu.dll
Total CPU:0.00001002%
Kernel CPU:0.00001002%
User CPU:0.00000000%
CPU cycles:15/sec
Memory:32 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 33.50%
Windows 7 Ultimate 19.50%
Microsoft Windows XP 14.50%
Windows 7 Professional 5.50%
Windows 8 4.00%
Windows 8.1 4.00%
Windows 8 Pro 3.50%
Windows Vista Home Premium 3.50%
Windows 7 Home Basic 3.00%
Windows 8 Enterprise 2.00%
Windows 8 Enterprise N 1.00%
Windows 8 Enterprise Evaluation 1.00%
Windows 7 Starter 1.00%
Windows 8 Single Language 1.00%
Windows Se7en Titan 1.00%
Windows Vista Home Basic 1.00%
Windows Vista Business 1.00%

Distribution by countryDistribution by country

United States installs about 40.91% of rndlresolversvc.exe.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 25.83%
Hewlett-Packard 15.50%
Lenovo 13.28%
Toshiba 8.12%
Sony 7.38%
Acer 7.01%
GIGABYTE 6.27%
ASUS 5.90%
Compaq 4.43%
Intel 1.48%
Sahara 1.48%
NEC 1.48%
American Megatrends 1.11%
Samsung 0.74%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE