Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

2.0.5417 1.61%
2.0.3027 17.74%
2.0.2807 30.65%
2.0.2807 1.61%
2.0.0828 4.84%
2.0.0705 11.29%
1.1.0808 1.61%
1.1.0808 29.03%
1.0.1321 1.61%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
InitializeSecurityDescriptor, SetSecurityDescriptorDacl, ControlService, DeleteService, CreateServiceA, StartServiceCtrlDispatcherA, OpenThreadToken, SetServiceStatus, RegisterServiceCtrlHandlerA, RegisterEventSourceA, ReportEventA, DeregisterEventSource, OpenSCManagerA, OpenServiceA, CloseServiceHandle, RegEnumKeyW, RegEnumKeyA, RegDeleteValueA, RegDeleteValueW, RegDeleteKeyA, RegDeleteKeyW, RegCreateKeyExA, RegCreateKeyExW, RegSetValueExA, RegSetValueExW, RegQueryValueExW, RegEnumKeyExA, RegEnumKeyExW, RegEnumValueA, RegEnumValueW, RegQueryValueExA, RegCloseKey, RegOpenKeyExA, RegOpenKeyExW, CopySid, GetLengthSid, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, GetTokenInformation, OpenProcessToken
kernel32.dll
GetStartupInfoA, IsBadWritePtr, IsBadReadPtr, GetFileSize, SetEvent, CreateEventA, GetLastError, WideCharToMultiByte, CloseHandle, ReadFile, SetEndOfFile, WriteFile, GetVersionExA, CreateFileA, CreateFileW, OutputDebugStringA, OutputDebugStringW, MultiByteToWideChar, FindFirstFileA, FindFirstFileW, GetTempFileNameA, GetTempFileNameW, DeleteFileA, DeleteFileW, CreateDirectoryA, CreateDirectoryW, SetFilePointer, GetTempPathW, GetDriveTypeW, GetDriveTypeA, GetVolumeInformationA, CreateMutexA, InterlockedDecrement, GetCurrentThread, GetCurrentThreadId, lstrcmpiA, GetCommandLineA, InitializeCriticalSection, GetModuleFileNameA, lstrlenA, DeleteCriticalSection, lstrlenW, GetShortPathNameA, GetModuleHandleA, InterlockedIncrement, FreeLibrary, CreateThread, LoadLibraryA, lstrcpyA, lstrcatA, GetCurrentProcess, LeaveCriticalSection, EnterCriticalSection, WaitForSingleObject, GetProcAddress, DeviceIoControl, ResetEvent, QueryDosDeviceA, VirtualFree, VirtualAlloc, SearchPathA
msvcrt.dll
DllMain
ole32.dll
CoCreateInstance, CoInitialize, CoInitializeSecurity, CoRegisterClassObject, CoRevokeClassObject, CoUninitialize, CoDisconnectObject
shell32.dll
SHGetSpecialFolderPathA, SHGetSpecialFolderPathW
shlwapi.dll
PathFileExistsW, PathFileExistsA
user32.dll
MessageBoxA, CharNextA, PostThreadMessageA, DispatchMessageA, GetMessageA, LoadStringA, MessageBoxW, wsprintfA
winmm.dll
timeGetTime

RichVideo.exe

RichVideo Module by CyberLink (Signed)

Remove RichVideo.exe
Version:   1.1.0808
MD5:   1d4061cc5bc8e823d05e1e6e6c1224e3
SHA1:   d87dda1c472e8dbf191cc95a5c4823b2074dae42
SHA256:   3fe820db4bc0c7f66f98d74b643c004958f42eddff05313e02c56155014d21ab

Overview

richvideo.exe runs as a service under the name Cyberlink RichVideo Service(CRVS) (RichVideo) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by CyberLink which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:richvideo.exe
Product name:RichVideo Module
Typical file path:C:\Program Files\cyberlink\shared files\richvideo.exe
File version:1.1.0808
Size:169.55 KB (173,616 bytes)
Certificate
Issued to:CyberLink
Authority (CA):VeriSign
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'RichVideo' (Cyberlink RichVideo Service(CRVS))
  • RichVideo

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00001116%
0.028634%
Kernel CPU:0.00000558%
0.013761%
User CPU:0.00000558%
0.014873%
Kernel CPU time:47 ms/min
100,923,805ms/min
Memory
Private memory:884 KB
21.59 MB
Private (maximum):592 KB
Private (minimum):52 KB
Non-paged memory:884 KB
21.59 MB
Virtual memory:35.64 MB
140.96 MB
Virtual memory (peak):37.64 MB
169.69 MB
Working set:68 KB
18.61 MB
Working set (peak):3.04 MB
37.95 MB
Resource allocations
Threads:3
12
Handles:83
600
GUI GDI count:8
103
GUI USER count:3
49

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Command line:"C:\Program Files\cyberlink\shared files\richvideo.exe"
Owner:SYSTEM
Windows Service
Service name:RichVideo
Display name:Cyberlink RichVideo Service(CRVS)
Type:Win32OwnProcess, InteractiveProcess
Parent process:services.exe (Microsoft Windows Operating System by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 30.65%
Windows Vista Home Premium 22.58%
Windows 7 Ultimate 14.52%
Microsoft Windows XP 6.45%
Windows Vista Home Basic 6.45%
Windows 8.1 Single Language 3.23%
Windows 8.1 3.23%
Windows Seven Black Edition 3.23%
Windows 8 Pro with Media Center 3.23%
Windows 8 Single Language 3.23%
Windows 8 Pro 1.61%
Windows Vista Ultimate 1.61%

Distribution by countryDistribution by country

United States installs about 35.48% of RichVideo Module.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
ASUS 34.78%
Hewlett-Packard 15.94%
Lenovo 11.59%
Acer 10.14%
Toshiba 8.70%
Dell 5.80%
Gateway 5.80%
GIGABYTE 4.35%
Sahara 2.90%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE