home

libeay32.dll

The OpenSSL Toolkit

Atom Security OOO

libeay32.dll is the libeay32.dll binary is part of the OpenSSL Project used to implement Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols for the included program and is recompiled by Atom Security OOO. Note, this is a common distributed file and although it has been detected it might not be a threat is un-coupled from its distribution source.
Publisher:
The OpenSSL Project, http://www.openssl.org/  (signed by Atom Security OOO)

Product:
The OpenSSL Toolkit

Description:
OpenSSL Shared Library

Version:
1.0.1c

MD5:
d0d543a2edd82c6877633ec0c8a402a3

SHA-1:
53ed04b21d0b3f8d68b1d7aa74f84217a3114047

SHA-256:
63f4901887a3eb42291613b6692d9a66d37bb94b57c5525bb0121e19aba8d99c

Scanner detections:
1 / 68

Status:
Inconclusive but possibly unwanted  (It is part of a common redistributable library)

Analysis date:
11/28/2024 4:39:30 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Common.PartOf.OpenSSLPackaged.PUP.Optional.AtomSecu
16.7.25.15

File size:
1.1 MB (1,184,216 bytes)

Product version:
1.0.1c

Copyright:
Copyright © 1998-2005 The OpenSSL Project. Copyright © 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.

Original file name:
libeay32.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\staffcop\libeay32.dll

Digital Signature
Signed by:
Atom Security OOO

Authority:
COMODO CA Limited

Valid from:
6/24/2013 6:00:00 AM

Valid to:
6/25/2014 5:59:59 AM

Subject:
CN=Atom Security OOO, OU=development, O=Atom Security OOO, STREET="Academician Koptyuga Prospect, 4,office 158", L=Novosibirsk, S=nso, PostalCode=630090, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
717783EFCF5E8A80B86D166EFF5E6862

File PE Metadata
Compilation timestamp:
5/11/2012 10:10:35 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
24576:g91y3U+idPVcdxxtj4i/8MROt2q7Ilp9ASU4u25p1ijbV+/6Ypk:g9puBSofOt2KIlp9ASFu25p1gV+/6Ypk

Entry address:
0xC009C

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, B5, 04, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, CC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 58, 91, 11, 10, 89, 0D, 54, 91, 11, 10, 89, 15, 50, 91, 11, 10, 89, 1D, 4C, 91, 11, 10, 89, 35, 48, 91, 11, 10, 89, 3D, 44, 91, 11, 10, 66, 8C, 15, 70, 91, 11, 10, 66, 8C, 0D, 64, 91, 11, 10, 66, 8C, 1D, 40, 91, 11, 10, 66, 8C, 05, 3C, 91, 11, 10, 66, 8C, 25, 38, 91, 11, 10, 66, 8C, 2D, 34, 91, 11, 10, 9C, 8F, 05, 68, 91...
 
[+]

Code size:
766 KB (784,384 bytes)

Scan libeay32.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.