» libeay32.dll
Overview
Analysis
File Details

libeay32.dll

The OpenSSL Toolkit

Atom Security OOO

libeay32.dll is the libeay32.dll binary is part of the OpenSSL Project used to implement Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols for the included program and is recompiled by Atom Security OOO. Note, this is a common distributed file and although it has been detected it might not be a threat is un-coupled from its distribution source.

File name:

libeay32.dll

Publisher:

The OpenSSL Project, http://www.openssl.org/ (signed by Atom Security OOO)

Product:

The OpenSSL Toolkit

Description:

OpenSSL Shared Library

Version:

1.0.1c

MD5:

8f6cec2b6ac3399b8800d0859e26cc6a

SHA-1:

e1c14055482558b20da39e03678556dc7d14f2a9

SHA-256:

7864498b6c198388a4af98220f2f84b08f68aaef9b5de6398a318c5e631fdf4f

Scanner detections:

1 / 68

Status:

Inconclusive but possibly unwanted (It is part of a common redistributable library)

Analysis date:

4/25/2024 10:29:08 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Common.PartOf.OpenSSLPackaged.PUP.Optional.AtomSecurity

16.2.10.22

File size:

1.1 MB (1,184,216 bytes)

Product version:

1.0.1c

Original file name:

libeay32.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\staffcop\libeay32.dll

Digital Signature

Signed by:

Atom Security OOO

Authority:

COMODO CA Limited

Valid from:

6/24/2013 2:00:00 AM

Valid to:

6/25/2014 1:59:59 AM

Subject:

CN=Atom Security OOO, OU=development, O=Atom Security OOO, STREET="Academician Koptyuga Prospect, 4,office 158", L=Novosibirsk, S=nso, PostalCode=630090, C=RU

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

717783EFCF5E8A80B86D166EFF5E6862

File PE Metadata

Compilation timestamp:

5/11/2012 6:10:35 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

9.0

CTPH (ssdeep):

24576:l91y3U+idPVcdxxtj4i/8MROt2q7Ilp9ASU4u25p1ijbV+/6Ypr:l9puBSofOt2KIlp9ASFu25p1gV+/6Ypr

Entry address:

0xC009C

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, B5, 04, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, CC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 58, 91, 11, 10, 89, 0D, 54, 91, 11, 10, 89, 15, 50, 91, 11, 10, 89, 1D, 4C, 91, 11, 10, 89, 35, 48, 91, 11, 10, 89, 3D, 44, 91, 11, 10, 66, 8C, 15, 70, 91, 11, 10, 66, 8C, 0D, 64, 91, 11, 10, 66, 8C, 1D, 40, 91, 11, 10, 66, 8C, 05, 3C, 91, 11, 10, 66, 8C, 25, 38, 91, 11, 10, 66, 8C, 2D, 34, 91, 11, 10, 9C, 8F, 05, 68, 91... 
[+]

Code size:

766 KB (784,384 bytes)

Scan libeay32.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.