» libeay32.dll
Overview
Analysis
File Details

libeay32.dll

The OpenSSL Toolkit

Acai Tech Ltd

libeay32.dll is the libeay32.dll binary is part of the OpenSSL Project used to implement Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols for the included program and is recompiled by Acai Tech Ltd. The library libeay32.dll, “OpenSSL Shared Library” by Acai Tech has been known to be a potentially unwanted program that has been detected by 1 anti-malware scanner. Although a detection has been made for this resource, it is generally a commonly distributed 3rd-party library and is typically safe by itself.

File name:

libeay32.dll

Publisher:

The OpenSSL Project, http://www.openssl.org/ (signed by Acai Tech Ltd)

Product:

The OpenSSL Toolkit

Description:

OpenSSL Shared Library

Version:

1.0.1g

MD5:

adc9d9327b7976e0e53706891594a2af

SHA-1:

a180a6edc6d78ad04473a0e8f4aaf0de300ba9a3

SHA-256:

bf00c248baa5d07bd4366109979c720ba50cf487850090f6790447ba31732dc3

Scanner detections:

1 / 68

Status:

Inconclusive but possibly unwanted (It is part of a common redistributable library)

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:

6/16/2024 4:02:58 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Common.OpenSSLPackaged.PUP.I

14.12.16.14

File size:

1.2 MB (1,270,584 bytes)

Product version:

1.0.1g

Original file name:

libeay32.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\shop for rewards\libeay32.dll

Digital Signature

Signed by:

Acai Tech Ltd

Authority:

COMODO CA Limited

Valid from:

9/21/2014 8:00:00 PM

Valid to:

9/22/2015 7:59:59 PM

Subject:

CN=Acai Tech Ltd, O=Acai Tech Ltd, STREET=Rakefet 19, L=Hod Hasharon, S=Sharon, PostalCode=4520634, C=IL

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

189E85B982528243713729AC8244D22C

File PE Metadata

Compilation timestamp:

4/17/2014 12:19:27 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

8.0

CTPH (ssdeep):

24576:AGGkgq+/mxUq/ga1n7EEoXZ15NC7vFM0G9FMNpoxvwLVnVAIZ9m:A2LDUEEnC7vFUMNpox4LVVAIZ9m

Entry address:

0xBC651

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, A3, 89, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 55, 8B, EC, 51, 56, 8B, 75, 0C, 56, E8, 74, D5, FF, FF, 89, 45, 0C, 8B, 46, 0C, A8, 82, 59, 75, 17, E8, 5F, B1, FF, FF, C7, 00, 09, 00, 00, 00, 83, 4E, 0C, 20, 83, C8, FF, E9, 2D, 01, 00, 00, A8, 40, 74, 0D, E8, 44, B1, FF, FF, C7, 00, 22, 00, 00, 00, EB, E3, 53, 33, DB, A8, 01, 74, 16, A8, 10, 89, 5E, 04, 0F, 84, 85, 00, 00, 00, 8B, 4E, 08, 83, E0, FE, 89, 0E, 89, 46, 0C, 8B... 
[+]

Entropy:

6.7728

Code size:

808 KB (827,392 bytes)

Scan libeay32.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.