home

libeay32.dll

The OpenSSL Toolkit

The OpenSSL Project, http://www.openssl.org/

libeay32.dll is the libeay32.dll binary is part of the OpenSSL Project used to implement Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols for the included program. The file has been seen being downloaded from goodbe.co and multiple other hosts.
Publisher:
The OpenSSL Project, http://www.openssl.org/

Product:
The OpenSSL Toolkit

Description:
OpenSSL shared library

Version:
1.0.0k

MD5:
9462cb83718ccab3c744f0f5561a289d

SHA-1:
d716496ea6b6354e2cab9337e6b631603bba80e5

SHA-256:
f08009f941680657077fff1c8d58fac8affa2216b3a478312ac48948c228c73a

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/15/2024 12:08:44 PM UTC  (today)

Scan engine
Detection
Engine version

XVirus List
Win.Detected
2.3.31

File size:
1.6 MB (1,704,448 bytes)

Product version:
1.0.0k

Copyright:
Copyright © 1998-2006 The OpenSSL Project. Copyright © 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.

Original file name:
libeay32.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\libeay32.dll

File PE Metadata
Compilation timestamp:
8/9/2013 9:58:29 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.23

CTPH (ssdeep):
49152:9wqSuGMVeZlrWohOGxzF9g4ojLis+x/FJuV2JI:KqSuGMVeZlrWohOGR9oPiRvJ

Entry address:
0x1058

Entry point:
55, 89, E5, 57, 56, 53, 83, EC, 2C, 8B, 75, 08, 8B, 5D, 0C, 8B, 7D, 10, 83, FB, 01, 74, 3D, 89, 7C, 24, 08, 89, 5C, 24, 04, 89, 34, 24, E8, B1, 05, 00, 00, 83, EC, 0C, 85, DB, 75, 19, 8B, 15, 00, E0, 17, 63, 85, D2, 0F, 84, 84, 00, 00, 00, 89, 45, E4, E8, 64, FF, FF, FF, 8B, 45, E4, 8D, 65, F4, 5B, 5E, 5F, C9, C2, 0C, 00, 8D, 76, 00, C7, 04, 24, 80, 00, 00, 00, E8, 64, BC, 10, 00, A3, 00, E0, 17, 63, 85, C0, 74, 63, C7, 00, 00, 00, 00, 00, A3, 04, E0, 17, 63, A1, 40, 8D, 14, 63, 85, C0, 74, 14, 89, 7C, 24...
 
[+]

Code size:
1 MB (1,098,240 bytes)

The file libeay32.dll has been seen being distributed by the following 5 URLs.

http://goodbe.co/libeay32.dll

http://m.0459f1e5dc998dc996096e9552b42918.com/.../libeay32.dll

ftp://ftp.republika.pl/.../libeay32.dll

http://m.0839f88ae61efaa3e91fdf5b732b242f.com/.../libeay32.dll

ftp://ftp.thienfinance.com/Oppsett_vapor/.../libeay32.dll

Scan libeay32.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.