home

wpcap.dll

WinPcap high level library

NetGroup - Politecnico di Torino

Publisher:
NetGroup - Politecnico di Torino

Product:
WinPcap high level library

Description:
wpcap - Based on libpcap 0.8.1

Version:
3, 1, 0, 23

MD5:
5c5561185a8751711156934585f002e8

SHA-1:
4bc6097e41191903fcec60b5b6363c857e2d25af

SHA-256:
4c2b690d8d9afaefc531d1fedcf2d067ffca8b7e2f99072014b6a6d8edfdc49c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 3:41:52 AM UTC  (today)

File size:
220 KB (225,280 bytes)

Product version:
3, 1, 0, 23

Copyright:
Copyright © 1999-2004

Original file name:
wpcap.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\Program Files\showtraf\wpcap.dll

File PE Metadata
Compilation timestamp:
5/14/2004 8:32:43 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:mHrZxq7dQ2qjbGO4eQ9KuuwN3Ch0kIrNsZ3Gva5aOlqPozwH:mHHqHb5eQEaN3O0kgyZ3j51

Entry address:
0x174BD

Entry point:
55, 8B, EC, 53, 8B, 5D, 08, 56, 8B, 75, 0C, 57, 8B, 7D, 10, 85, F6, 75, 09, 83, 3D, 20, 93, 03, 10, 00, EB, 26, 83, FE, 01, 74, 05, 83, FE, 02, 75, 22, A1, 68, B2, 03, 10, 85, C0, 74, 09, 57, 56, 53, FF, D0, 85, C0, 74, 0C, 57, 56, 53, E8, E7, FE, FF, FF, 85, C0, 75, 04, 33, C0, EB, 4E, 57, 56, 53, E8, FE, 45, 00, 00, 83, FE, 01, 89, 45, 0C, 75, 0C, 85, C0, 75, 37, 57, 50, 53, E8, C3, FE, FF, FF, 85, F6, 74, 05, 83, FE, 03, 75, 26, 57, 56, 53, E8, B2, FE, FF, FF, 85, C0, 75, 03, 21, 45, 0C, 83, 7D, 0C, 00...
 
[+]

Entropy:
6.1705

Code size:
124 KB (126,976 bytes)

The file wpcap.dll has been discovered within the following program.

PEOPLEnet CCU-550 Modem  by PEOPLEnet
About 1% of users remove it
 
Powered by Should I Remove It?

The file wpcap.dll has been seen being distributed by the following 4 URLs.

https://mlfdll.com/.../wpcap.dll

http://www.telecharger-dll.fr/.../wpcap.dll

http://www.telecharger-dll.fr/download.php?dll=wpcap.dll

http://www.dlldump.com/dllfiles/.../wpcap.dll

Scan wpcap.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.