home

wireshark-win32-1.10.3.exe

Wireshark

Wireshark Foundation

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from wireshark.en.softonic.com and multiple other hosts.
Publisher:
Wireshark development team  (signed by Wireshark Foundation)

Product:
Wireshark

Description:
Wireshark installer for 32-bit Windows

Version:
1.10.3.53022

MD5:
d03156fc81100a8decca5ea435cdf1c6

SHA-1:
7ebca3f46633f2f527b3301f30f82e5bf7b41e18

SHA-256:
495397c111b0cd9ea4c2fb0ff8107f199d5a506ff417534863695be908c65f98

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 10:31:15 AM UTC  (today)

File size:
21.1 MB (22,117,888 bytes)

Product version:
1.10.3.53022

Copyright:
© Gerald Combs and many others

Trademarks:
Wireshark and the 'fin' logo are registered trademarks of the Wireshark Foundation

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\low\content.ie5\{random}\wireshark-win32-1.10.3.exe

Digital Signature
Signed by:
Wireshark Foundation

Authority:
COMODO CA Limited

Valid from:
7/14/2013 5:00:00 PM

Valid to:
7/14/2016 4:59:59 PM

Subject:
CN=Wireshark Foundation, O=Wireshark Foundation, STREET=199 Fremont, L=San Francisco, S=CA, PostalCode=94105, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
4CFF0C70E9CA31A85DFEB92699944390

File PE Metadata
Compilation timestamp:
12/5/2009 2:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:UQhfR81W+lFi0e4QnlONxP3AAPBSSwbDgp09cKOkRomSb9G81Eq4CCr5N:JcW+lH3EAPzw3iPKOz9G81EDCCX

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.9958

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file wireshark-win32-1.10.3.exe has been seen being distributed by the following 24 URLs.

https://wireshark.en.softonic.com/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPkyA8Y74Uvmh fTtY7pUIyLLVFzGIioS7lEPo2PUs9GSOietRjfCS02j7k5lwOCcuGALIj0HK mV5b6b70KHjkXh6KUTjHiGuyC3JvB9slRZrjR0l5Y9gF1Ch9INgSRLxONTOjjSFLAJpQdk8FHWJ1VmuwV8Tf9u OrthZYtCOfQ==

http://gsf-cf.softonic.com/7eb/ca3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34498&instance=softonic_en&type=PROGRAM&Expires=1483085141&Signature=Bc8~UU3zzXK3BGmTlFShcY-QHX62YqEubeszuUqeF~TLGrYndI2jlfi3ocO0s4Vy7i8h-aYTU-bswJg9JEVejj-8ak3ifgfz8W~3gkpVEdun6-0s8lqXEFFWmwidBMe4aDyKEBxO6qU1xQ66eNeNhvAFN0OcBowWlnS0JQpv6bo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Wireshark-win32-1-10-3.exe

http://wireshark.softonic.com.br/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPkyA8Y74Uvmh fTtY7pUIyLLVFzGIioS7lEPo2PUs9GSOietRjfCS02j7k5lwOCcuGALIj0HK mV5b6b70KHjkXh6KUTjHiGuyC3JvB9slRZrjR0l5Y9gF1Ch9INgSRLxONTOjjSFLAJpQdk8FHWJ1VmuwV8Tf9u OrthZYtCOfQ==

https://1.eu.dl.wireshark.org/.../Wireshark-win32-1.10.3.exe

http://gsf-cf.softonic.com/7eb/ca3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34498&instance=softonic_en&type=PROGRAM&Expires=1478667609&Signature=XD3LlsoZQDCueUp1EA8tclsGeXXAFGWY46zjlX5vF8gR76RglmByxcUI0ikU6VmiuMadE4oY8jajzRh8tyTP-vRcWb2rS0KVUWbenHx3-zW9~RrwR05i-~Uxzt-zs3lXZFQSQ0OrGqTBe9wRhJizB8z4KldM6COxOnPMulu2bQ8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Wireshark-win32-1-10-3.exe

http://gsf-cf.softonic.com/7eb/ca3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34498&instance=softonic_en&type=PROGRAM&Expires=1448889230&Signature=R515HUDtGm7JqdtkO4UNLfrE-M2X5l8s1MoyRLZ1f09Xsi5nd1KWLYn9Gr8bDZDSeESNAvKmA6u~guCFXligdwOq-GsyD1Qluc~F6e~QuGj-oqB49UdekS49tQ9pZO7EZ-87v2lfhAToNvcgMbI89dTzr28hAHL2Upc6sDlkBx4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Wireshark-win32-1-10-3.exe

http://gsf-cf.softonic.com/7eb/ca3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34498&instance=softonic_en&type=PROGRAM&Expires=1466196577&Signature=bPfGxhokMFqbVlhouAyeOioSS6Gr06YlcIsT49j8GHtTrV5EQ6EzMDvC43iVlaZU40B4qrmkWOX09n80iSJ~qADH8nifMWMAEr5AKYzhRGKOjJ1JVjZtP-BfCRhII-oE6g94txGTaXk7BcVDggIVzbtvOfGOwTSzlVJU3DGV6ds_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Wireshark-win32-1-10-3.exe

http://gsf-cf.softonic.com/7eb/ca3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34498&instance=softonic_en&type=PROGRAM&Expires=1448840213&Signature=g4iCG8920b5fW10fCb3aQ4y8jlIqTa5W4NXyNiF0rm6QOSL~rJupLsOgXG5qxsnImAxVJVJ3bS~nEIcglXtg~xZT5UszcM3hDdw3Lo2VVZlH-0dZD~KX9xAOE0AbaS8KLGXe5NNXWFYpryPp61sEy8m6c-W2FSLV6r~ie09-Owo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Wireshark-win32-1-10-3.exe

http://gsf-cf.softonic.com/7eb/ca3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34498&instance=softonic_en&type=PROGRAM&Expires=1458446125&Signature=V5msja~n-WxLwzyCBHchSJp~FQhlzsGcotixESuiJUWUtHPIKEVpFpexJp7qLJ~w1VvbI4YUgG3eqUgCwwmWhkgQgNjPVCGiZeUriApErNDmNkAR8-HrHQAoMenuzwSOft-AZud6dJg4i1NjElKjFT5M2yRNTBgMlWXJEvV0PI4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Wireshark-win32-1-10-3.exe

http://wireshark.it.softonic.com/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPkyA8Y74Uvmh fTtY7pUIyLLVFzGIioS7lEPo2PUs9GSOietRjfCS02j7k5lwOCcuGALIj0HK mV5b6b70KHjkXh6KUTjHiGuyC3JvB9slRZrjR0l5Y9gF1Ch9INgSRLxONTOjjSFLAJpQdk8FHWJ1VmuwV8Tf9u OrthZYtCOfQ==

http://gsf-cf.softonic.com/7eb/ca3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34498&instance=softonic_en&type=PROGRAM&Expires=1445410011&Signature=B0OWC0909R6IGnlCxC9Y50maGM6uc9zlOZRtjJv8Hgha14BqFC~c9Vrf05hCY2vWdnFb3iwfKonGysO~t4nV-36L80kaRast51xiqEjsnr2pdwp6F2IfHzMOw0LXWwkOSLNJi-VkuHueE0V5TkWWTouwFhGvYoued4HyS0e0uHA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Wireshark-win32-1-10-3.exe

http://gsf-cf.softonic.com/7eb/ca3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34498&instance=softonic_en&type=PROGRAM&Expires=1433387735&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=O2idL76TcP977ugoPge7NkpyUYdO4Lxuf0snZ02bzkj-hAdRxXTyhEymqlEOXreuXNQGwfItm9QV7cv~mFX7fHaDBmFr1aqzQnPyGeAttJbhV800ZDHWWvonWgaoR5ouz7Z~E581bBgOvZUfrawnNQdKGY32Hek9FAftfTLf-Tk_&filename=Wireshark-win32-1-10-3.exe

http://global-shared-files-lw.softonic.com/7eb/ca3/.../Wireshark-win32-1-10-3.exe

http://gsf-cf.softonic.com/7eb/ca3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34498&instance=softonic_en&type=PROGRAM&Expires=1435126630&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Y9wEQBDe3cP-5Wh67lsvy8aIi3OVy74K-Tm2gpzYvoudEh0L3qm58Gp2NS16JGmbw3opVGG8iF6lRXK6C8ql6BKdq9vxs0s2baXK6rGx1yNy~s4erdl2iuUbLMminR7ZoSFcp~knGTYv3P~LYdZt-lh-NvqPVc0OAkSLA-cUwIQ_&filename=Wireshark-win32-1-10-3.exe

http://gsf-cf.softonic.com/7eb/ca3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34498&instance=softonic_en&type=PROGRAM&Expires=1454518993&Signature=IcAa2vola0DCK2F~nonv-AFSMgGXq5yN-YFfyCkYyGyGDHI2SXCZgRnt4dKKgM4KSHwMY91xjSJhf19VxZLl1R2ibORQA7XjorDK~dDiGr26g~wrw5bcnuW3RsjVydqk~9F8R9SzWoO0hpVXzeP2Qg2zTxMjoekgpQXaVivzpn4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Wireshark-win32-1-10-3.exe

http://wireshark.en.softonic.com/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPkyA8Y74Uvmh fTtY7pUIyLLVFzGIioS7lEPo2PUs9GSOietRjfCS02j7k5lwOCcuGALIj0HK mV5b6b70KHjkXh6KUTjHiGuyC3JvB9slRZrjR0l5Y9gF1Ch9INgSRLxONTOjjSFLAJpQdk8FHWJ1VmuwV8Tf9u OrthZYtCOfQ==

http://gsf-cf.softonic.com/7eb/ca3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34498&instance=softonic_en&type=PROGRAM&Expires=1447760332&Signature=iNXHlGcwWoRvLMrViU7yZXJ1IjLeekp7LLq1SvuVIOz9YQ12--Jh8JJTk7F1~vvEv36ChZDDE7T6LAy01KfxfRo1Xq1x6dWZdZhd-gAhc5X2iq4KpYcM5~kkkFKlWrTUA3T4z25HIe9ErmsYUWsnjwQ4xulH6UXh6Q2q0tSm77Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Wireshark-win32-1-10-3.exe

http://wireshark.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/.../HXR96z8xO2hIC450O4nVhjAMExmYNyIZ 8MmdpHHt4ohxlzoq8iWVBxQwG1JxPizxHsv5LA0td17Bufrzm7cYYpy9hJP7OfplTpNH7lXES7nDDgrEfw==

http://nervion.us.es/wsdownload/.../Wireshark-win32-1.10.3.exe

http://gsf-cf.softonic.com/7eb/ca3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34498&instance=softonic_en&type=PROGRAM&Expires=1426963990&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=GOsvTSo4KUK4UIUR8b0QDgtCwxWGLpJnfsYyA9hll3HB1OYJCzmp0q-pg9kqHjCvM41xw83s5BnclhKzAlFAsbhJr2Q21VCY4WlVa8rFYMln5XB6XKt2JtVFwXXPdiBVDzH1FnmWbWwmiuQBQk3Ii82Hvp9eFIDjApKKPGYLrZE_&filename=Wireshark-win32-1-10-3.exe

http://gsf-cf.softonic.com/7eb/ca3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=34498&instance=softonic_en&type=PROGRAM&Expires=1434626560&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=QaUfemJqC13k0IHg2TEAQYuib-fv3l9lDs3Cj~Kk1Sq0wolmzC1Pj2FXMsDigW6OCEHxzMXuyLHkNLH-DTgCg7y09H3oE5LCZa6-4nt97HqF4n~vAOR-GN1t05ZJiccty1oYPgAru9WCZ8jqTL2TRHKiaK4noeJUz6zTI5XRS7U_&filename=Wireshark-win32-1-10-3.exe

http://switch.dl.sourceforge.net/project/wireshark/win32/.../Wireshark-win32-1.10.3.exe

http://downloads.sourceforge.net/project/wireshark/win32/.../Wireshark-win32-1.10.3.exe

http://wiresharkdownloads.riverbed.com/wireshark/.../Wireshark-win32-1.10.3.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.