» libeay32.dll
Overview
Analysis
File Details

libeay32.dll

The OpenSSL Toolkit

P e P na Internet LTDA ME

libeay32.dll is the libeay32.dll binary is part of the OpenSSL Project used to implement Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols for the included program and is recompiled by P e P na Internet LTDA ME. The library libeay32.dll, “OpenSSL Shared Library” by P e P na InternetA ME has been known to be a potentially unwanted program that has been detected by 1 anti-malware scanner. Although a detection has been made for this resource, it is generally a commonly distributed 3rd-party library and is typically safe by itself.

File name:

libeay32.dll

Publisher:

The OpenSSL Project, http://www.openssl.org/ (signed by P e P na Internet LTDA ME)

Product:

The OpenSSL Toolkit

Description:

OpenSSL Shared Library

Version:

1.0.1g

MD5:

95c5b69b4978fb9d275370987e0ff2e7

SHA-1:

00579c315d26704b41ce5d40c4afca9c9177f944

SHA-256:

fca78e1a198a2aa969ef8f265576a8df7464c69edc7431f24a203c25164efffb

Scanner detections:

1 / 68

Status:

Inconclusive but possibly unwanted (It is part of a common redistributable library)

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:

4/25/2024 4:52:49 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Common.OpenSSLPackaged.PUP.BR Software

15.3.18.1

File size:

1.2 MB (1,273,320 bytes)

Product version:

1.0.1g

Original file name:

libeay32.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\baixou agora app\libeay32.dll

Digital Signature

Signed by:

P e P na Internet LTDA ME

Authority:

Symantec Corporation

Valid from:

1/26/2014 10:00:00 PM

Valid to:

1/27/2016 9:59:59 PM

Subject:

CN=P e P na Internet LTDA ME, O=P e P na Internet LTDA ME, L=Vila Velha, S=Espirito Santo, C=BR, SERIALNUMBER=12.112.810/0001-19, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.3=BR

Issuer:

CN=Symantec Class 3 Extended Validation Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

1F8F91EE9AF97AC99EB07FFFA32D1892

File PE Metadata

Compilation timestamp:

4/17/2014 1:19:27 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

8.0

CTPH (ssdeep):

24576:ZGGkgq+/mxUq/ga1n7EEoXZ15NC7vFM0G9FMNpoxvwLVnVAIZ91:Z2LDUEEnC7vFUMNpox4LVVAIZ91

Entry address:

0xBC651

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, A3, 89, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 55, 8B, EC, 51, 56, 8B, 75, 0C, 56, E8, 74, D5, FF, FF, 89, 45, 0C, 8B, 46, 0C, A8, 82, 59, 75, 17, E8, 5F, B1, FF, FF, C7, 00, 09, 00, 00, 00, 83, 4E, 0C, 20, 83, C8, FF, E9, 2D, 01, 00, 00, A8, 40, 74, 0D, E8, 44, B1, FF, FF, C7, 00, 22, 00, 00, 00, EB, E3, 53, 33, DB, A8, 01, 74, 16, A8, 10, 89, 5E, 04, 0F, 84, 85, 00, 00, 00, 8B, 4E, 08, 83, E0, FE, 89, 0E, 89, 46, 0C, 8B... 
[+]

Code size:

808 KB (827,392 bytes)

Scan libeay32.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.