Versions

1, 0, 0, 390	70.59%
1, 0, 0, 386	17.65%
1, 0, 0, 314	5.88%
1, 0, 0, 243	5.88%

There are 4 versions of ravcpl64.exe in the wild, the latest version being 1, 0, 0, 390. ravcpl64.exe is run as a standard windows process with the logged in user's account privileges. During installation, a run registry key for all users is added that will cause the program to run each time any user logs on to Windows. The average file size is about 7.08 MB. The file is a digitally signed and issued to Realtek Semiconductor Corp by VeriSign. Numerous variations of ravcpl64.exe have been installed with both Realtek High Definition Audio Driver and Realtek HDMI Audio Driver for ATI. The executable is a .NET framework assembly utilizing the CLR. During the process's lifecycle, the typical CPU resource utilization is about 0.0008% including both foreground and background operations, the average private memory consumption is about 9.11 MB with the maximum memory reaching around 9.82 MB. Addionally, typically read and write I/O disk operations is about 40 Bytes per minute for reads and 0 Bytes per minute for writes.