libEGL.dll

ANGLE libEGL Dynamic Link Library

SIEN S.A.

This is the SIEN AppScion Installer which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. libEGL.dll is the ANGLE library provides runtime WebGL and other OpenGL content by translating OpenGL calls to DirectX calls and is recompiled by SIEN S.A.. The module libEGL.dll by SIEN S.A has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the SIEN SuperInstall installer. Note, this is a common distributed file and although it has been detected it might not be a threat is un-coupled from its distribution source.
Publisher:
SIEN S.A.  (signed and verified)

Product:
ANGLE libEGL Dynamic Link Library

Version:
1.2.0.2449

MD5:
e2f80af7e156937f1a80682e5b8a4ad6

SHA-1:
b2be59bc664162780335b14d4904a0a890350cf4

SHA-256:
389ed32426f61f86b44d8d3a38e460b7fc6f4250e0f98566670cccbb1aa4bc9e

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
This is the ANGLE library provides runtime WebGL and other OpenGL content by translating OpenGL calls to DirectX calls. While the file itself is not dangerous, it is part of a program that has been detected.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
4/27/2024 1:02:15 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Sien (M)
17.3.1.13

File size:
106.3 KB (108,856 bytes)

Product version:
1.2.0.2449

Copyright:
Copyright (C) 2011 Google Inc.

Original file name:
libEGL.dll

File type:
Dynamic link library (Win32 DLL)

Bundler/Installer:
SIEN SuperInstall

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\1stbrowser\application\32.1.1700.77\libegl.dll

Digital Signature
Signed by:

Authority:
VeriSign, Inc.

Valid from:
8/21/2012 9:00:00 PM

Valid to:
8/22/2014 8:59:59 PM

Subject:
CN=SIEN S.A., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=SIEN S.A., L=Paris, S=France, C=FR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
514EA00D30C8C244C3E818890BF73967

File PE Metadata
Compilation timestamp:
2/6/2014 7:21:28 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
10.0

Entry address:
0x9F51

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 6F, 36, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 51, 56, 8B, 75, 0C, 56, E8, 7B, 42, 00, 00, 89, 45, 0C, 8B, 46, 0C, 59, A8, 82, 75, 17, E8, 86, 01, 00, 00, C7, 00, 09, 00, 00, 00, 83, 4E, 0C, 20, 83, C8, FF, E9, 2F, 01, 00, 00, A8, 40, 74, 0D, E8, 6B, 01, 00, 00, C7, 00, 22, 00, 00, 00, EB, E3, 53, 33, DB, A8, 01, 74, 16, 89, 5E, 04, A8, 10, 0F, 84, 87, 00, 00, 00, 8B, 4E, 08, 83, E0, FE, 89, 0E...
 
[+]

Code size:
66 KB (67,584 bytes)

Remove libEGL.dll - Powered by Reason Core Security