home

ssleay32.dll

The OpenSSL Toolkit

DriverDevelop.com

ssleay32.dll is the OpenSSL Toolkit used to implement Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols for the included program. SSLeay is designed to provide cryptographic support functionality for SSL connections and is recompiled by DriverDevelop.com. The module ssleay32.dll, “OpenSSL Shared Library” by DriverDevelop.com has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. Note, this is a common distributed file and although it has been detected it might not be a threat is un-coupled from its distribution source.
Publisher:
The OpenSSL Project, http://www.openssl.org/  (signed by DriverDevelop.com)

Product:
The OpenSSL Toolkit

Description:
OpenSSL Shared Library

Version:
1.0.0c

MD5:
b577aa6548590201d059c62169959586

SHA-1:
cd687b31236759548a2fce32d891d40213f84497

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
This is the OpenSSL Toolkit used to implement Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols for the included program. SSLeay is designed to provide cryptographic support functionality for SSL connections. While the file itself is not dangerous, it is part of a program that has been detected.

Analysis date:
5/10/2024 11:19:21 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.1.18.7

File size:
237 KB (242,680 bytes)

Product version:
1.0.0c

Copyright:
Copyright ?1998-2005 The OpenSSL Project. Copyright ?1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.

Original file name:
ssleay32.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\kingsoft\klive business\ssleay32.dll

Digital Signature
Signed by:
DriverDevelop.com

Authority:
DriverDevelop.com

Valid from:
8/15/2009 11:02:01 AM

Valid to:
8/13/2019 11:02:01 AM

Subject:
E=ca@zndev.com, CN=DriverDevelop.com Signtools Test cert, OU=Dept. CodeSign CA, O=DriverDevelop.com, S=BeiJing, C=CN

Issuer:
E=ca@zndev.com, CN=DriverDevelop.com CA, OU=DriverDevelop.com CA, O=DriverDevelop.com, L=BeiJing, S=BeiJing, C=CN

Serial number:
011E

File PE Metadata
Compilation timestamp:
1/14/2011 10:41:06 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
10.0

Entry address:
0x2B933

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 3B, 04, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, CC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, A0, 83, 03, 10, 89, 0D, 9C, 83, 03, 10, 89, 15, 98, 83, 03, 10, 89, 1D, 94, 83, 03, 10, 89, 35, 90, 83, 03, 10, 89, 3D, 8C, 83, 03, 10, 66, 8C, 15, B8, 83, 03, 10, 66, 8C, 0D, AC, 83, 03, 10, 66, 8C, 1D, 88, 83, 03, 10, 66, 8C, 05, 84, 83, 03, 10, 66, 8C, 25, 80, 83, 03, 10, 66, 8C, 2D, 7C, 83, 03, 10, 9C, 8F, 05, B0, 83...
 
[+]

Entropy:
6.4429

Code size:
172 KB (176,128 bytes)

Remove ssleay32.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.