home

libEGL.dll

ANGLE libEGL Dynamic Link Library

ClaraLabSoftware

libEGL.dll is the ANGLE library provides runtime WebGL and other OpenGL content by translating OpenGL calls to DirectX calls and is recompiled by ClaraLabSoftware. The library libEGL.dll by ClaraLabSoftware has been known to be a potentially unwanted program that has been detected by 1 anti-malware scanner. Note, this is a common distributed file and although it has been detected it might not be a threat is un-coupled from its distribution source.
Publisher:
ClaraLabSoftware  (signed and verified)

Product:
ANGLE libEGL Dynamic Link Library

Version:
2.1.unknown hash

MD5:
94281d0375773e03ed3d9fb871e020a0

SHA-1:
8c6484c96adaf7aacec7f0686c3a763349abb5f4

SHA-256:
342e776c1289f2c533ad7b75543ee1d122abaa056b170bc5f72df2f67e0edfc4

Scanner detections:
1 / 68

Status:
Inconclusive but possibly unwanted  (It is part of a common redistributable library)

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
4/25/2024 2:31:48 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Common.PUP.ClaraLabSoftware
15.4.19.3

File size:
205.6 KB (210,568 bytes)

Product version:
2.1.unknown hash

Copyright:
Copyright (C) 2011 Google Inc.

Original file name:
libEGL.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\bobrowser\application\39.0.2132.13\libegl.dll

Digital Signature
Signed by:
ClaraLabSoftware

Authority:
GlobalSign nv-sa

Valid from:
1/20/2015 2:40:38 AM

Valid to:
1/21/2016 2:40:38 AM

Subject:
CN=ClaraLabSoftware, O=ClaraLabSoftware, L=Paris, C=FR

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112123154E5E0FD1C6C84C77F8890B7472E0

File PE Metadata
Compilation timestamp:
2/4/2015 10:46:39 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
12.0

CTPH (ssdeep):
3072:5A05+V57gRgtRd+OrtHnHciqAf+5sAg0Fu35fWAg0Fuak5WFkW3a:5A0WURMRTxHnHcitGsAO5WAOmx3a

Entry address:
0xA078

Entry point:
55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, AC, 80, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, 38, E8, 02, 10, E8, E9, 3F, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 80, 1A, 03, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, 90, 49, 02, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
117.5 KB (120,320 bytes)

Scan libEGL.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.