usbdump.dll
usbdump dissector file version info
Library on Windows 1 known copy with hashes
Is it the real usbdump.dll?
Installed in
C:\Program Files\Wireshark\plugins\3.2\wiretap\Signed byWireshark Foundation
ProductWireshark, The Wireshark developer community, https://www.wireshark.org/
Descriptionusbdump dissector
1 known copy
0.0.1.0 · C:\Program Files\Wireshark\plugins\3.2\wiretap\usbdump.dll · signed by Wireshark Foundation
7d1b588818cf97f24f59876ebe4da500a1f17eea3d1a29a375f05a3126903625From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.