home

ravcpl64.exe

Gestionnaire audio HD Realtek

Realtek Semiconductor Corp

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘RtHDVCpl’. This is installed with Realtek High Definition Audio Driver.
Publisher:
Realtek Semiconductor  (signed by Realtek Semiconductor Corp)

Product:
Gestionnaire audio HD Realtek

Version:
1, 0, 0, 929

MD5:
92894ce1b4dbbb9bb55ea0a1e6e7df99

SHA-1:
87d45b81a8cd80b982ced3590d01f56d6af41a0e

SHA-256:
06e575611bef01d75789dd92afe33a6ce9ba18831ad97e7c096be6c2b0bfe64a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 8:39:41 AM UTC  (today)

File size:
13 MB (13,672,152 bytes)

Product version:
1, 0, 0, 929

Copyright:
2013 (c) Realtek Semiconductor. All rights reserved.

Original file name:
RtHDVCpl.exe

File type:
Executable application (Win64 EXE)

Language:
French (France)

Common path:
C:\Program Files\realtek\audio\hda\ravcpl64.exe

Digital Signature
Signed by:
Realtek Semiconductor Corp

Authority:
VeriSign, Inc.

Valid from:
5/13/2013 2:00:00 AM

Valid to:
7/12/2016 1:59:59 AM

Subject:
CN=Realtek Semiconductor Corp, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Realtek Semiconductor Corp, L=Hsinchu, S=Taiwan, C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
13222A5DCCF716DF5AF9C87084412DD9

File PE Metadata
Compilation timestamp:
5/26/2014 10:37:52 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:iwTlmQ9gsn7V+eVA8LsKv2ZwmIRrWmtslQ7OMCToaLGJxBRPIp2zocB9IwfCcag5:iwT4Q9x+eFT3Ymt2yOHTHaxRWcUSag

Entry address:
0x20E480

Entry point:
48, 83, EC, 28, E8, 87, 72, 00, 00, 48, 83, C4, 28, E9, 0E, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8D, 05, 7F, FC, 03, 00, 8B, DA, 48, 8B, F9, 48, 89, 01, E8, 12, 73, 00, 00, F6, C3, 01, 74, 08, 48, 8B, CF, E8, DD, 4D, FC, FF, 48, 8B, C7, 48, 8B, 5C, 24, 30, 48, 83, C4, 20, 5F, C3, CC, CC, CC, CC, CC, CC, CC, 4C, 8D, 41, 11, 48, 83, C2, 11, 4C, 2B, C2, 66, 90, 66, 66, 90, 0F, B6, 0A, 42, 0F, B6, 04, 02, 2B, C8, 75, 08, 48, 83, C2, 01...
 
[+]

Code size:
2.3 MB (2,361,344 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
RtHDVCpl

Command:
C:\Program Files\realtek\audio\hda\ravcpl64.exe -s


The file ravcpl64.exe has been discovered within the following programs.

Realtek HDMI Audio Driver for ATI  by Realtek Semiconductor Corp.
The Realtek HDMI Audio Driver is the software driver for the Realtek HDMI Audio devices. It is a program used to communicate from the Windows PC OS to the device. This software is required in most cases for the hardware device to function properly.
www.realtek.com.tw
9% remove it
Realtek High Definition Audio Driver  by Realtek Semiconductor Corp.
Realtek's High Definition Audio Driver provide high quality DTS, Dolby, Surround Sound to your PC via the audio card.
9% remove it
 
Powered by Should I Remove It?

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.