Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Parent process
Related files
rpcapd.exe
WinPcap by CACE Technologies (Signed)
| Version: | 4.1.0.2001 |
| MD5: | b60f58f175de20a6739194e85b035178 |
| SHA1: | 1568c3bb5a8e7fd530ac1996a137fd22e117a707 |
| SHA256: | 6e66d6041af0b69896e4556f9ff3a3aa70cf4b09ffbe68e14e60313c5e3ffddb |
What is rpcapd.exe?
WinPcap allows applications to capture and transmit network packets and consists of a driver, that extends the operating system to provide low-level network access, and a library that is used to easily access the low-level network layers. WinPcap comes with Remote Capture capabilities.This requires a remote daemon (called rpcapd) which performs the capture and sends data back and a local client that sends the appropriate commands and receives the captured data.
About rpcapd.exe (from CACE Technologies)
“WinPcap is the industry-standard tool for link-layer network access in Windows environments: it allows applications to capture and transmit network packets bypassing the protocol stack, and has additi”
Details
| File name: | rpcapd.exe |
| Publisher: | CACE Technologies, Inc. |
| Product name: | WinPcap |
| Description: | Remote Packet Capture Daemon |
| Typical file path: | C:\Program Files\winpcap\rpcapd.exe |
| File version: | 4.1.0.2001 |
| Size: | 114.52 KB (117,264 bytes) |
| Certificate |
| Issued to: | CACE Technologies |
| Authority (CA): | VeriSign |
| Effective date: | Tuesday, May 6, 2008 |
| Expiration date: | Saturday, May 7, 2011 |
| Digital DNA |
| Entropy: | 6.238866 |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
WinPcap is the Windows version of the libpcap library; it includes a driver to support capturing packets. WinPcap consists implementations of a lower-level library for the listed operating systems, to communicate with those drivers; a port of libpcap that uses the API offered by the low-level library implementations. It uses NDIS to read packets directly from a network adapter.
WinPcap is the Windows version of the libpcap library; it includes a driver to support capturing packets. WinPcap consists implementations of a lower-level library for the listed operating systems, to communicate with those drivers; a port of libpcap that uses the API offered by the low-level library implementations. It uses NDIS to read packets directly from a network adapter.
MyFree Codec contains files which are necessary to play various media files from your device to Samsung Kies. It is automatically installed when upgrading or installing Samsung Kies. KIES utilizes the playing functionality and if it is not installed then you might experience errors when using various features or playing some media files, typically AVI or MPEGs or other movie or audio files.
If you notice the play button is disabled o...
“Spotnet Launcher is a handy tool that allows you to see if you still get the latest version at a glance Spotnet used, or that there is now a newer version is available. It is much safer than relying on registered sites that claim there is a new version. You never know whether a prankster a virus attempts to spread.”
“Windows-based powerline configuration utility. Optional management utility compatible with Windows 7 (32/64-bit), Vista (32/64-bit), and XP (32/64-bit) operating systems. Auto QoS support through traffic classification and multiple priority queuing. A Gigabit Ethernet port maintains high performance wired connections. Manage each Powerline adapter on your network with the included Windows utility. LED displays convey device status for ...”
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'rpcapd' (Remote Packet Capture Protocol v.0 (experimental))
- 'rpcapd'
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00009378% | |
| User CPU: | 0.00009378% | |
| CPU cycles: | 4,985/sec | |
| Memory |
| Private memory: | 2.28 MB | |
| Private (maximum): | 4.72 MB | |
| Private (minimum): | 3.74 MB | |
| Non-paged memory: | 2.28 MB | |
| Virtual memory: | 44.51 MB | |
| Virtual memory (peak): | 49.77 MB | |
| Working set: | 3.74 MB | |
| Working set (peak): | 5.35 MB | |
| Page faults: | 1,681/min | |
| I/O |
| I/O read transfer: | 8 Bytes/sec | |
| I/O read operations: | 1/sec | |
| I/O write transfer: | 0 Bytes/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 6 Bytes/sec | |
| I/O other operations: | 2/sec | |
| Resource allocations |
| Threads: | 6 | |
| Handles: | 89 | |
Process properties
| Integrety level: | System |
| Platform: | 32-bit |
| Command line: | "C:\Program Files\winpcap\rpcapd.exe" -d -f "C:\Program Files\winpcap\rpcapd.ini" |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | rpcapd |
| Display name: | Remote Packet Capture Protocol v.0 (experimental) |
| Description: | “Allows to capture traffic on this machine from a remote machine.” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| ADVAPI32.dll |
| Total CPU: | 0.00012722% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00012722% | |
| CPU cycles: | 2,116/sec | |
| Memory: | 792 KB | |
| rpcapd.exe (main module) |
| Total CPU: | 0.00006361% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00006361% | |
| CPU cycles: | 3,387/sec | |
| Memory: | 224 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
30.91% |
|
| Windows 7 Home Premium |
25.45% |
|
| Microsoft Windows XP |
21.82% |
|
| Windows Vista Home Premium |
7.27% |
|
| Windows 7 Professional |
7.27% |
|
| Windows 8 Pro with Media Center |
1.82% |
|
| Windows Seven Black Edition |
1.82% |
|
| Windows 8 Pro |
1.82% |
|
| Windows 8 |
1.82% |
|
Distribution by country
United States installs about 25.00% of WinPcap.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Hewlett-Packard |
34.62% |
|
| ASUS |
15.38% |
|
| Dell |
15.38% |
|
| Sony |
7.69% |
|
| Toshiba |
7.69% |
|
| Lenovo |
7.69% |
|
| Acer |
7.69% |
|
| Samsung |
3.85% |
|
