CmdID

CmdID / Files

libcrypto-1_1.dll

OpenSSL shared library file version info

Library on Windows 2 known copies with hashes

Is it the real libcrypto-1_1.dll?

file version info and known copies
Installed inC:\Program Files (x86)\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl32.DllA\OpenSSL32.DllA\
C:\Program Files (x86)\Sennheiser\SenncomSDK\
Signed bySimba Technologies Inc.
ProductThe OpenSSL Toolkit, The OpenSSL Project, https://www.openssl.org/
DescriptionOpenSSL shared library

2 known copies

1.1.1d · C:\Program Files (x86)\Sennheiser\SenncomSDK\libcrypto-1_1.dll · not signed

919a1a2c3ffd6aa5a76585f3e53a4f35e7ed83f77cbc57649470e0a2059afab7

1.1.0j · C:\Program Files (x86)\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\LibCurl32.DllA\OpenSSL32.DllA\libcrypto-1_1.dll · signed by Simba Technologies Inc.

730a4965459ef17eaf83ef946885eea07722e5c9cad65f857134b11c40c0c768

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.