rpcapd.exe
WinPcap by CACE TECHNOLOGIES (Signed)
Overview
There are 2 versions of rpcapd.exe in the wild, the latest version being 4.0.0.1040. It is started as a Windows Service called 'rpcapd'. The average file size is about 87.31 KB. The file is a digitally signed and issued to CACE TECHNOLOGIES by VeriSign. The programs WinPcap 3.0, WinPcap 3.1 and winpcap-overlook 4.02 have been observed as installing specific variations of rpcapd.exe.
 Details
|
| File name: | rpcapd.exe |
| Publisher: | CACE Technologies |
| Product name: | WinPcap |
| Description: | Remote Packet Capture Daemon |
| Typical file path: | C:\Program Files\winpcap\rpcapd.exe |
| Certificate |
| Issued to: | CACE TECHNOLOGIES |
| Authority (CA): | VeriSign |
| Effective date: | Sunday, May 6, 2007 |
| Expiration date: | Sunday, May 18, 2008 |
| Windows Service |
| Display name: | rpcapd |
Programs installed in
(Note, the programs listed below are for all versions of WinPcap.)
WinPcap is the Windows version of the libpcap library; it includes a driver to support capturing packets. WinPcap consists implementations of a lower-level library for the listed operating systems, to...
Behaviors
(Note, the behaviors below are for all versions of rpcapd.exe, select a unique version for details.)
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
All file variations of rpcapd.exe
