» libeay32.dll
Overview
Analysis
File Details

libeay32.dll

The OpenSSL Toolkit

P e P na Internet LTDA ME

libeay32.dll is the libeay32.dll binary is part of the OpenSSL Project used to implement Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols for the included program and is recompiled by P e P na Internet LTDA ME. The library libeay32.dll, “OpenSSL Shared Library” by P e P na InternetA ME has been known to be a potentially unwanted program that has been detected by 1 anti-malware scanner. Although a detection has been made for this resource, it is generally a commonly distributed 3rd-party library and is typically safe by itself.

File name:

libeay32.dll

Publisher:

The OpenSSL Project, http://www.openssl.org/ (signed by P e P na Internet LTDA ME)

Product:

The OpenSSL Toolkit

Description:

OpenSSL Shared Library

Version:

1.0.1g

MD5:

ed9f0f76ee70d557c615a8c55ff95eba

SHA-1:

9b6a3733d94f730d00b41a0a7737e3570d8a55fc

SHA-256:

24784642e598325f4413e2de27d2b828d108ef826fd0ef11c7f6ead7a6709f46

Scanner detections:

1 / 68

Status:

Inconclusive but possibly unwanted (It is part of a common redistributable library)

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:

4/25/2024 9:04:50 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Common.OpenSSLPackaged.PUP.BR Software

15.3.18.1

File size:

1.2 MB (1,273,320 bytes)

Product version:

1.0.1g

Original file name:

libeay32.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\baixou agora app\libeay32.dll

Digital Signature

Signed by:

P e P na Internet LTDA ME

Authority:

Symantec Corporation

Valid from:

1/26/2014 10:00:00 PM

Valid to:

1/27/2016 9:59:59 PM

Subject:

CN=P e P na Internet LTDA ME, O=P e P na Internet LTDA ME, L=Vila Velha, S=Espirito Santo, C=BR, SERIALNUMBER=12.112.810/0001-19, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.3=BR

Issuer:

CN=Symantec Class 3 Extended Validation Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

1F8F91EE9AF97AC99EB07FFFA32D1892

File PE Metadata

Compilation timestamp:

4/17/2014 1:19:27 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

8.0

CTPH (ssdeep):

24576:JGGkgq+/mxUq/ga1n7EEoXZ15NC7vFM0G9FMNpoxvwLVnVAIZ9s:J2LDUEEnC7vFUMNpox4LVVAIZ9s

Entry address:

0xBC651

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, A3, 89, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 55, 8B, EC, 51, 56, 8B, 75, 0C, 56, E8, 74, D5, FF, FF, 89, 45, 0C, 8B, 46, 0C, A8, 82, 59, 75, 17, E8, 5F, B1, FF, FF, C7, 00, 09, 00, 00, 00, 83, 4E, 0C, 20, 83, C8, FF, E9, 2D, 01, 00, 00, A8, 40, 74, 0D, E8, 44, B1, FF, FF, C7, 00, 22, 00, 00, 00, EB, E3, 53, 33, DB, A8, 01, 74, 16, A8, 10, 89, 5E, 04, 0F, 84, 85, 00, 00, 00, 8B, 4E, 08, 83, E0, FE, 89, 0E, 89, 46, 0C, 8B... 
[+]

Code size:

808 KB (827,392 bytes)

Scan libeay32.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.