» ssleay32.dll
Overview
Analysis
File Details

ssleay32.dll

The OpenSSL Toolkit

P e P na Internet LTDA ME

ssleay32.dll is the OpenSSL Toolkit used to implement Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols for the included program. SSLeay is designed to provide cryptographic support functionality for SSL connections and is recompiled by P e P na Internet LTDA ME. The library ssleay32.dll, “OpenSSL Shared Library” by P e P na InternetA ME has been known to be a potentially unwanted program that has been detected by 1 anti-malware scanner. Although a detection has been made for this resource, it is generally a commonly distributed 3rd-party library and is typically safe by itself.

File name:

ssleay32.dll

Publisher:

The OpenSSL Project, http://www.openssl.org/ (signed by P e P na Internet LTDA ME)

Product:

The OpenSSL Toolkit

Description:

OpenSSL Shared Library

Version:

1.0.1g

MD5:

8adc0ee235cda3ab97ec0116aabdb48d

SHA-1:

eff7a5a5b2d44b56f50a8293f9a840e667fad14e

SHA-256:

5c5b470e84b4e4b657f4cdb6cd4a374954250ebfb0e7cf8e163e6d2b2f42042f

Scanner detections:

1 / 68

Status:

Inconclusive but possibly unwanted (It is part of a common redistributable library)

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:

4/25/2024 3:38:38 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Common.OpenSSLPackaged.PUP.BR Software

15.3.18.1

File size:

351.5 KB (359,912 bytes)

Product version:

1.0.1g

Original file name:

ssleay32.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\baixou agora app\ssleay32.dll

Digital Signature

Signed by:

P e P na Internet LTDA ME

Authority:

Symantec Corporation

Valid from:

1/26/2014 10:00:00 PM

Valid to:

1/27/2016 9:59:59 PM

Subject:

CN=P e P na Internet LTDA ME, O=P e P na Internet LTDA ME, L=Vila Velha, S=Espirito Santo, C=BR, SERIALNUMBER=12.112.810/0001-19, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.3=BR

Issuer:

CN=Symantec Class 3 Extended Validation Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

1F8F91EE9AF97AC99EB07FFFA32D1892

File PE Metadata

Compilation timestamp:

4/17/2014 1:19:37 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

8.0

CTPH (ssdeep):

6144:oe7yK7kkCfMZNkY0BzcutzilOsnQMnlW2E1cMziiiQ+J5XmnQY5fSlRAjw+KkPss:o+L7kkCMZNkY0BzcutmlOsnQMnM2E1cs

Entry address:

0x32D9F

Entry point:

83, 7C, 24, 08, 01, 75, 05, E8, 43, 3F, 00, 00, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, ED, FE, FF, FF, 59, C2, 0C, 00, 53, 56, 8B, 44, 24, 18, 0B, C0, 75, 18, 8B, 4C, 24, 14, 8B, 44, 24, 10, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 0C, F7, F1, 8B, D3, EB, 41, 8B, C8, 8B, 5C, 24, 14, 8B, 54, 24, 10, 8B, 44, 24, 0C, D1, E9, D1, DB, D1, EA, D1, D8, 0B, C9, 75, F4, F7, F3, 8B, F0, F7, 64, 24, 18, 8B, C8, 8B, 44, 24, 14, F7, E6, 03, D1, 72, 0E, 3B, 54, 24, 10, 77, 08, 72, 07, 3B, 44, 24, 0C, 76, 01, 4E... 
[+]

Code size:

248 KB (253,952 bytes)

Scan ssleay32.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.