home

rpshell.dll

RealPlayer

RealNetworks, Inc.

This file is installed with multiple programs including RealPlayer (RealTimes) and RealPlayer.
Publisher:
RealNetworks, Inc.  (signed and verified)

Product:
RealPlayer

Description:
RealPlayer Shell Extensions

Version:
16.0.3.51

MD5:
4f43b0ffa993c1954feafee2208f01e8

SHA-1:
37a2fdd330ade4e6b804fb8249fe06e3ffd23a4b

SHA-256:
bae2ea23a4d8fd91b1483ddf5236dd556b5d80c26d299087221a0ca8b8d50680

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/27/2024 12:32:10 AM UTC  (today)

Scan engine
Detection
Engine version

Boost by Reason
UnneededApp.RealNetworks.H
164288

File size:
69.6 KB (71,280 bytes)

Product version:
16.0.3.51

Copyright:
Copyright © RealNetworks, Inc. 2001-2013

Original file name:
rpshellext.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\real\realplayer\rpshell.dll

Digital Signature
Signed by:
RealNetworks, Inc.

Authority:
Thawte, Inc.

Valid from:
7/25/2013 5:00:00 PM

Valid to:
8/15/2015 4:59:59 PM

Subject:
CN="RealNetworks, Inc.", OU=MS&S, O="RealNetworks, Inc.", L=Seattle, S=Washington, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
72B64DF3DBCC1FB70C7858961B8A5BBA

Registration
CLSID:
{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}

COM registered:
Yes

File PE Metadata
Compilation timestamp:
8/14/2013 5:16:47 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1536:TGHmnoEFGOzFuCwBjj7Z+QYkksWAnOBp4JoHqdZR3o:KHvE0l+QYkNRnOBp4JoHqdZR3o

Entry address:
0x7F2A

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, BA, 04, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, CC, FE, FF, FF, 59, 5D, C2, 0C, 00, CC, FF, 25, 50, 91, 77, 62, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 80, F9, 40, 73, 15, 80, F9, 20, 73, 06, 0F, AD, D0, D3, EA, C3, 8B, C2, 33, D2, 80, E1, 1F, D3, E8, C3, 33, C0, 33, D2, C3, CC, 8B, 44, 24, 08, 8B, 4C, 24, 10, 0B, C8, 8B, 4C, 24, 0C, 75, 09, 8B, 44, 24, 04, F7, E1, C2, 10, 00, 53, F7, E1, 8B, D8, 8B, 44, 24, 08, F7, 64, 24, 14, 03, D8, 8B, 44...
 
[+]

Entropy:
6.0897

Code size:
30.5 KB (31,232 bytes)

Approved Shell Extension
Name:
Shell Extensions for RealOne Player

CLSID:
{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}

CLSID name:
RealOne Player Context Menu Class


The file rpshell.dll has been discovered within the following programs.

Freecorder 5  by Applian Technologies Inc.
Freecorder 5 bundles a branded version of the Conduit Toolbar, which delivers search based advertising and results. During installation the user is presented in some cases with the option to install the toolbar. Once accepted, the packaged executable, ConduitInstaller.
applian.com
31% remove it
RealPlayer  by RealNetworks, Inc.
RealPlayer is a cross-platform software product primarily used for the playing of recorded media.
www.real.com/realplayer
27% remove it
RealPlayer (RealTimes)  by RealNetworks
www.real.com
About 6% of users remove it
RealPlayer Cloud  by RealNetworks, Inc.
Publisher's description - “RealPlayer Cloud enables you to move, watch and share your videos. When you share videos with friends and family they’ll be able to play them on any device or operating system, without downloading the RealPlayer Cloud app.”
6% remove it
RealTimes (RealPlayer)  by RealNetworks
About 5% of users remove it
 
Powered by Should I Remove It?

Scan rpshell.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.