» ssleay32.dll
Overview
Analysis
File Details

ssleay32.dll

The OpenSSL Toolkit

Digital Pine, LLC

ssleay32.dll is the OpenSSL Toolkit used to implement Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols for the included program. SSLeay is designed to provide cryptographic support functionality for SSL connections and is recompiled by Digital Pine, LLC. The library ssleay32.dll, “OpenSSL shared library” by Digital Pine has been known to be a potentially unwanted program that has been detected by 2 anti-malware scanners. It is also typically executed from the user's temporary directory.

File name:

ssleay32.dll

Publisher:

The OpenSSL Project, http://www.openssl.org/ (signed by Digital Pine, LLC)

Product:

The OpenSSL Toolkit

Description:

OpenSSL shared library

Version:

1.0.1e

MD5:

e739b8d7c32e1ff4e1cab542b1974f29

SHA-1:

8711bd15bee16e10dcf884c782136cc2c592885b

SHA-256:

5d9a575184db08fb0ef4b5b9faaadb259843bee9a452130d2f93d5fb4554e720

Scanner detections:

2 / 68

Status:

Inconclusive but possibly unwanted (It is part of a common redistributable library)

Analysis date:

4/26/2024 11:28:44 AM UTC (today)

Scan engine

Detection

Engine version

AVG

MalSign.Generic

2016.0.3005

Reason Heuristics

Common.OpenSSLPackaged.PUP.DigitalPine.TheOpenSSLProjecthttpwwwopensslorg (M)

15.8.27.8

File size:

368.5 KB (377,336 bytes)

Product version:

1.0.1e

Original file name:

ssleay32.dll

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\nuploader\ssleay32.dll

Digital Signature

Signed by:

Digital Pine, LLC

Authority:

DigiCert Inc

Valid from:

6/17/2013 4:00:00 AM

Valid to:

3/30/2016 4:00:00 PM

Subject:

CN="Digital Pine, LLC", O="Digital Pine, LLC", L=Moscow, C=RU

Issuer:

CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

0C6DFC094A13DA127C9280621A006F48

File PE Metadata

Compilation timestamp:

3/28/2013 4:19:27 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

2.22

CTPH (ssdeep):

6144:P5KCPazPxJU6tJtvP6K76DVoPjPe95F7+KHaHQxY7qt0ns9JOMxu507AjC4tICve:h/PazPxJUXN+7qt0nbMj2hvP9Y

Entry address:

0x1420

Entry point:

83, EC, 1C, 8B, 54, 24, 24, C7, 05, B4, 40, 45, 6E, 00, 00, 00, 00, 83, FA, 01, 74, 1A, 8B, 4C, 24, 28, 8B, 44, 24, 20, E8, 1D, FE, FF, FF, 83, C4, 1C, C2, 0C, 00, 8D, B4, 26, 00, 00, 00, 00, 89, 54, 24, 0C, E8, 37, 60, 04, 00, 8B, 54, 24, 0C, EB, D7, 90, 55, 89, E5, 83, EC, 18, A1, 98, AD, 44, 6E, 85, C0, 74, 3C, C7, 04, 24, 00, B0, 44, 6E, FF, 15, EC, 8B, 45, 6E, BA, 00, 00, 00, 00, 83, EC, 04, 85, C0, 74, 16, C7, 44, 24, 04, 0E, B0, 44, 6E, 89, 04, 24, FF, 15, F0, 8B, 45, 6E, 83, EC, 08, 89, C2, 85, D2... 
[+]

Code size:

283.5 KB (290,304 bytes)

Scan ssleay32.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.