» ssleay32.dll
Overview
Analysis
File Details

ssleay32.dll

The OpenSSL Toolkit

P e P na Internet LTDA ME

ssleay32.dll is the OpenSSL Toolkit used to implement Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols for the included program. SSLeay is designed to provide cryptographic support functionality for SSL connections and is recompiled by P e P na Internet LTDA ME. The library ssleay32.dll, “OpenSSL Shared Library” by P e P na InternetA ME has been known to be a potentially unwanted program that has been detected by 1 anti-malware scanner. Note, this is a common distributed file and although it has been detected it might not be a threat is un-coupled from its distribution source.

File name:

ssleay32.dll

Publisher:

The OpenSSL Project, http://www.openssl.org/ (signed by P e P na Internet LTDA ME)

Product:

The OpenSSL Toolkit

Description:

OpenSSL Shared Library

Version:

1.0.1g

MD5:

8e3023558c3dd0c46d9f058633bd5781

SHA-1:

5d6277ca97efbf48ef9f684e05bc9374ea54efa4

SHA-256:

5a02cde1539d14b9c5c044b5868f57e4710b756e8020d11736e2fe1f8d70a5ce

Scanner detections:

1 / 68

Status:

Inconclusive but possibly unwanted (It is part of a common redistributable library)

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:

4/18/2024 10:16:39 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Common.OpenSSLPackaged.PUP.BR Software

15.3.18.1

File size:

351.5 KB (359,912 bytes)

Product version:

1.0.1g

Original file name:

ssleay32.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\baixou agora app\ssleay32.dll

Digital Signature

Signed by:

P e P na Internet LTDA ME

Authority:

Symantec Corporation

Valid from:

1/26/2014 10:00:00 PM

Valid to:

1/27/2016 9:59:59 PM

Subject:

CN=P e P na Internet LTDA ME, O=P e P na Internet LTDA ME, L=Vila Velha, S=Espirito Santo, C=BR, SERIALNUMBER=12.112.810/0001-19, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.3=BR

Issuer:

CN=Symantec Class 3 Extended Validation Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

1F8F91EE9AF97AC99EB07FFFA32D1892

File PE Metadata

Compilation timestamp:

4/17/2014 1:19:37 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

8.0

CTPH (ssdeep):

6144:le7yK7kkCfMZNkY0BzcutzilOsnQMnlW2E1cMziiiQ+J5XmnQY5fSlRAjw+KkPst:l+L7kkCMZNkY0BzcutmlOsnQMnM2E1ct

Entry address:

0x32D9F

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, 43, 3F, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 53, 56, 8B, 44, 24, 18, 0B, C0, 75, 18, 8B, 4C, 24, 14, 8B, 44, 24, 10, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 0C, F7, F1, 8B, D3, EB, 41, 8B, C8, 8B, 5C, 24, 14, 8B, 54, 24, 10, 8B, 44, 24, 0C, D1, E9, D1, DB, D1, EA, D1, D8, 0B, C9, 75, F4, F7, F3, 8B, F0, F7, 64, 24, 18, 8B, C8, 8B, 44, 24, 14, F7, E6, 03, D1, 72, 0E, 3B, 54, 24, 10, 77, 08, 72, 07, 3B, 44, 24, 0C, 76, 01, 4E... 
[+]

Code size:

248 KB (253,952 bytes)

Scan ssleay32.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.