home

ssleay32.dll

The OpenSSL Toolkit

TRIORIS LLC

ssleay32.dll is the OpenSSL Toolkit used to implement Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols for the included program. SSLeay is designed to provide cryptographic support functionality for SSL connections and is recompiled by TRIORIS LLC. Note, this is a common distributed file and although it has been detected it might not be a threat is un-coupled from its distribution source.
Publisher:
The OpenSSL Project, http://www.openssl.org/  (signed by TRIORIS LLC)

Product:
The OpenSSL Toolkit

Description:
OpenSSL Shared Library

Version:
1.0.1c

MD5:
bd7ef1a0000b69144966276e3f0385e9

SHA-1:
83d2a247b7c14957af3df946288325f0e6af85b4

SHA-256:
601afae54944656ed5f4242cdb72e2233010217951b2f2538e17ae20c82d6a96

Scanner detections:
1 / 68

Status:
Inconclusive but possibly unwanted  (It is part of a common redistributable library)

Analysis date:
4/24/2024 7:13:00 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Common.PartOf.OpenSSLPackaged.PUP.Optional.TRIORIS
16.2.8.18

File size:
346.7 KB (354,976 bytes)

Product version:
1.0.1c

Copyright:
Copyright © 1998-2005 The OpenSSL Project. Copyright © 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.

Original file name:
ssleay32.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\screentk\ssleay32.dll

Digital Signature
Signed by:
TRIORIS LLC

Authority:
COMODO CA Limited

Valid from:
3/27/2013 3:00:00 AM

Valid to:
3/27/2016 2:59:59 AM

Subject:
CN=TRIORIS LLC, O=TRIORIS LLC, STREET="Griboedova str., 34, 5", L=Novosibirsk, S=Novosibirsk region, PostalCode=630000, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00DDE431469F44EE01CD42B3680AB9990D

File PE Metadata
Compilation timestamp:
11/19/2012 4:04:01 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
6144:p8dtIpxBRIBlRhnxNOs06T+hP/mPe6MzshOFGNfdkbk4/fyrsPj0HZp6VCU9G83r:p8dmpxBiBlRhnxNOs0C+hP/mPebzshOl

Entry address:
0x31ABF

Entry point:
83, 7C, 24, 08, 01, 75, 05, E8, 44, 3F, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 53, 56, 8B, 44, 24, 18, 0B, C0, 75, 18, 8B, 4C, 24, 14, 8B, 44, 24, 10, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 0C, F7, F1, 8B, D3, EB, 41, 8B, C8, 8B, 5C, 24, 14, 8B, 54, 24, 10, 8B, 44, 24, 0C, D1, E9, D1, DB, D1, EA, D1, D8, 0B, C9, 75, F4, F7, F3, 8B, F0, F7, 64, 24, 18, 8B, C8, 8B, 44, 24, 14, F7, E6, 03, D1, 72, 0E, 3B, 54, 24, 10, 77, 08, 72, 07, 3B, 44, 24, 0C, 76, 01, 4E...
 
[+]

Code size:
244 KB (249,856 bytes)

Scan ssleay32.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.