home

libeay32.dll

The OpenSSL Toolkit

Flyingbird Technology Limited

libeay32.dll is the libeay32.dll binary is part of the OpenSSL Project used to implement Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols for the included program and is recompiled by Flyingbird Technology Limited. Note, this is a common distributed file and although it has been detected it might not be a threat is un-coupled from its distribution source.
Publisher:
The OpenSSL Project, http://www.openssl.org/  (signed by Flyingbird Technology Limited)

Product:
The OpenSSL Toolkit

Description:
OpenSSL Shared Library

Version:
0.9.8k

MD5:
b96585120a4aef92e7fd4e337c64575a

SHA-1:
503db2753f242807e2fc160730882a4e46ba66cc

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 7:13:19 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.ELEX (M)
16.12.12.14

File size:
1.1 MB (1,128,112 bytes)

Product version:
0.9.8k

Copyright:
Copyright ?1998-2007 The OpenSSL Project. Copyright ?1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.

Original file name:
libeay32.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\乾隆\乾隆助手\乾隆助手\libeay32.dll

Digital Signature
Signed by:
Flyingbird Technology Limited

Authority:
GlobalSign nv-sa

Valid from:
7/31/2013 4:17:31 PM

Valid to:
8/1/2014 4:17:31 PM

Subject:
CN=Flyingbird Technology Limited, O=Flyingbird Technology Limited, L=HongKong, S=HongKong, C=HK

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11219C80305D6E9F5989212C98615553D346

File PE Metadata
Compilation timestamp:
7/23/2009 5:31:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
24576:S1dxBPCNuIDyCldvK5Yc6RMpMXwmIwYS/:AkhyClJciRMpMXwmILS/

Entry address:
0x9B756

Entry point:
83, 7C, 24, 08, 01, 75, 05, E8, BB, 86, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 55, 8B, EC, 51, 56, 8B, 75, 0C, 56, E8, 3F, DF, FF, FF, 89, 45, 0C, 8B, 46, 0C, A8, 82, 59, 75, 17, E8, 0A, BD, FF, FF, C7, 00, 09, 00, 00, 00, 83, 4E, 0C, 20, 83, C8, FF, E9, 2D, 01, 00, 00, A8, 40, 74, 0D, E8, EF, BC, FF, FF, C7, 00, 22, 00, 00, 00, EB, E3, 53, 33, DB, A8, 01, 74, 16, A8, 10, 89, 5E, 04, 0F, 84, 85, 00, 00, 00, 8B, 4E, 08, 83, E0, FE, 89, 0E, 89, 46, 0C, 8B...
 
[+]

Entropy:
6.7906

Code size:
720 KB (737,280 bytes)

Scan libeay32.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.