home

ssleay32.dll

The OpenSSL Toolkit

Flyingbird Technology Limited

ssleay32.dll is the OpenSSL Toolkit used to implement Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols for the included program. SSLeay is designed to provide cryptographic support functionality for SSL connections and is recompiled by Flyingbird Technology Limited. Note, this is a common distributed file and although it has been detected it might not be a threat is un-coupled from its distribution source.
Publisher:
The OpenSSL Project, http://www.openssl.org/  (signed by Flyingbird Technology Limited)

Product:
The OpenSSL Toolkit

Description:
OpenSSL Shared Library

Version:
0.9.8k

MD5:
6863d0408280c94c1c8e3b0d11dd4111

SHA-1:
384ea84bba7bf6fb7c41b3ec101d80b076787655

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/24/2024 11:26:06 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.ELEX (M)
16.12.12.18

File size:
273.7 KB (280,240 bytes)

Product version:
0.9.8k

Copyright:
Copyright ?1998-2007 The OpenSSL Project. Copyright ?1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.

Original file name:
ssleay32.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\乾隆\乾隆助手\乾隆助手\ssleay32.dll

Digital Signature
Signed by:
Flyingbird Technology Limited

Authority:
GlobalSign nv-sa

Valid from:
7/31/2013 4:17:31 PM

Valid to:
8/1/2014 4:17:31 PM

Subject:
CN=Flyingbird Technology Limited, O=Flyingbird Technology Limited, L=HongKong, S=HongKong, C=HK

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11219C80305D6E9F5989212C98615553D346

File PE Metadata
Compilation timestamp:
7/23/2009 5:31:31 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
3072:bvBoW0n7JU28Jd5/AnSqOoguq9d12UmQPJumDb5Y2xoot24PSaXYOZaxNKB7u17B:DB7Qta/AnVOduMdgUBBfhtlnoMNvt9D8

Entry address:
0x2591D

Entry point:
83, 7C, 24, 08, 01, 75, 05, E8, 3E, 36, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, CC, CC, 53, 56, 8B, 44, 24, 18, 0B, C0, 75, 18, 8B, 4C, 24, 14, 8B, 44, 24, 10, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 0C, F7, F1, 8B, D3, EB, 41, 8B, C8, 8B, 5C, 24, 14, 8B, 54, 24, 10, 8B, 44, 24, 0C, D1, E9, D1, DB, D1, EA, D1, D8, 0B, C9, 75, F4, F7, F3, 8B, F0, F7, 64, 24, 18, 8B, C8, 8B, 44, 24, 14, F7, E6, 03, D1, 72, 0E, 3B, 54, 24, 10, 77, 08, 72, 07, 3B, 44, 24, 0C, 76...
 
[+]

Entropy:
6.3800

Code size:
192 KB (196,608 bytes)

Scan ssleay32.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.