libEGL.dll

ANGLE libEGL Dynamic Link Library

Qingdao Ruanmei Network Technology Co.,Ltd.

libEGL.dll is the ANGLE library provides runtime WebGL and other OpenGL content by translating OpenGL calls to DirectX calls and is recompiled by Qingdao Ruanmei Network Technology Co.,Ltd.. The module libEGL.dll by Qingdao Ruanmei Network Technology Co.,Ltd has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. Note, this is a common distributed file and although it has been detected it might not be a threat is un-coupled from its distribution source.
Publisher:

Product:
ANGLE libEGL Dynamic Link Library

Version:
2.1.0.1a1b30c37e13

MD5:
3fa4b6556d6d786e53fb174c28ea1ac2

SHA-1:
c25371ce3bc98123002f09f047c1900f7c61d050

SHA-256:
b2040f6ed8da1b50a3ae12a66e1dc68e19875a7fa3fe1454ba2496ec095dd90c

Scanner detections:
1 / 68

Status:
Adware

Explanation:
This is the ANGLE library provides runtime WebGL and other OpenGL content by translating OpenGL calls to DirectX calls. While the file itself is not dangerous, it is part of a program that has been detected.

Analysis date:
1/13/2025 3:50:53 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.1.7.23

File size:
105.2 KB (107,680 bytes)

Product version:
2.1.0.1a1b30c37e13

Copyright:
Copyright (C) 2015 Google Inc.

Original file name:
libEGL.dll

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\Program Files\ruanmei\qiyu\2.1.0.0\libegl.dll

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
3/13/2016 8:00:00 AM

Valid to:
8/27/2017 7:59:59 AM

Subject:
CN="Qingdao Ruanmei Network Technology Co.,Ltd.", OU=IT, O="Qingdao Ruanmei Network Technology Co.,Ltd.", L=Qingdao, S=Shandong, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
50284BE9AB1A229C8F2C9FDD7B7E4AE4

File PE Metadata
Compilation timestamp:
11/8/2016 6:39:58 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
14.0

Entry address:
0x1748

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, FB, 03, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 53, FE, FF, FF, CC, CC, CC, 48, 83, EC, 28, E8, 8B, 08, 00, 00, 85, C0, 74, 21, 65, 48, 8B, 04, 25, 30, 00, 00, 00, 48, 8B, 48, 08, EB, 05, 48, 3B, C8, 74, 14, 33, C0, F0, 48, 0F, B1, 0D, 8C, 51, 01, 00, 75, EE, 32, C0, 48, 83, C4, 28, C3, B0, 01, EB, F7, CC, CC, CC, 48, 83, EC, 28...
 
[+]

Entropy:
6.2031

Code size:
41.5 KB (42,496 bytes)

Remove libEGL.dll - Powered by Reason Core Security