home

winpcap_4_1_3.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.winpcap.org.
MD5:
2c1a219e209ed4cd7ad348d8266b84d7

SHA-1:
4721b7ef759d60cade85a58688a275071f00df4a

SHA-256:
18a0ae72a425bda79f86805ac3eab1579634cd7d15933590772dcb25aec06611

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 2:27:43 AM UTC  (today)

File size:
893.7 KB (915,128 bytes)

File type:
Executable application (Win64 EXE)

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
12288:X++PL8VQ7NNVZuwYxadpL/Q5HJ2Yatj6kVFmicCsWmJX6k7hxtNMHrLgf9DFacil:X+W82NRlg5ahncZ68uaZwhl

Entry point:
6B, 95, 5F, 26, A9, 80, 0C, D0, AF, 3F, BD, 92, 00, 64, 25, 13, 1A, FA, 74, 80, F4, FC, 05, 1F, FD, DB, 96, 09, 42, FC, 76, A3, 52, 94, C4, 22, 3A, C0, 8C, 26, 22, 2A, F5, E4, 5D, A6, 72, 5E, ED, C7, 5C, C5, B6, D6, A4, C7, 12, 0C, 61, 05, 7B, 55, 12, E1, DF, 35, 6D, 89, 88, 06, DE, FC, 4D, F9, 8C, 51, C6, 0C, 42, 8E, 54, 01, C6, 59, 32, 17, 2C, F0, 4F, 80, 04, 4C, 81, C1, C0, 22, 96, B0, DC, 6D, 5D, 36, 99, 63, 28, E1, A7, 7D, 6B, 22, 02, D2, 26, A9, 0A, D5, 59, 5B, 9A, 4D, 85, D9, 96, 04, D4, DA, 65, 45...
 
[+]

Entropy:
7.9996  (probably packed)

The file winpcap_4_1_3.exe has been seen being distributed by the following URL.

https://www.winpcap.org/install/.../WinPcap_4_1_3.exe

Scan winpcap_4_1_3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.