home

ssleay32.dll

The OpenSSL Toolkit

Atom Security OOO

ssleay32.dll is the OpenSSL Toolkit used to implement Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols for the included program. SSLeay is designed to provide cryptographic support functionality for SSL connections and is recompiled by Atom Security OOO. Note, this is a common distributed file and although it has been detected it might not be a threat is un-coupled from its distribution source.
Publisher:
The OpenSSL Project, http://www.openssl.org/  (signed by Atom Security OOO)

Product:
The OpenSSL Toolkit

Description:
OpenSSL Shared Library

Version:
1.0.1c

MD5:
6606f507a4c727dfe9a5db600bf9c887

SHA-1:
f216e4bfa14dc3bcf0aa66cfbeb59171c4574d8e

SHA-256:
7d47aeea5f56d6310040323dd170c068908946fd365395c2d312054c1dfa22b1

Scanner detections:
1 / 68

Status:
Inconclusive but possibly unwanted  (It is part of a common redistributable library)

Analysis date:
4/25/2024 7:40:03 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Common.PartOf.OpenSSLPackaged.PUP.Optional.AtomSecurity
16.2.10.22

File size:
265 KB (271,320 bytes)

Product version:
1.0.1c

Copyright:
Copyright © 1998-2005 The OpenSSL Project. Copyright © 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.

Original file name:
ssleay32.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\staffcop\ssleay32.dll

Digital Signature
Signed by:
Atom Security OOO

Authority:
COMODO CA Limited

Valid from:
6/24/2013 2:00:00 AM

Valid to:
6/25/2014 1:59:59 AM

Subject:
CN=Atom Security OOO, OU=development, O=Atom Security OOO, STREET="Academician Koptyuga Prospect, 4,office 158", L=Novosibirsk, S=nso, PostalCode=630090, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
717783EFCF5E8A80B86D166EFF5E6862

File PE Metadata
Compilation timestamp:
5/11/2012 6:10:51 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
6144:H1Fo45ScFAq5pV9rASeblvioafJUER89JUL/Fc+NaLNWlX+nQzkweaYVeUkxm1zZ:H1F9ScFp5pV9rfeb9JafJUE69JUL/Fcf

Entry address:
0x303A0

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 3A, 04, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, CC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 48, FF, 03, 10, 89, 0D, 44, FF, 03, 10, 89, 15, 40, FF, 03, 10, 89, 1D, 3C, FF, 03, 10, 89, 35, 38, FF, 03, 10, 89, 3D, 34, FF, 03, 10, 66, 8C, 15, 60, FF, 03, 10, 66, 8C, 0D, 54, FF, 03, 10, 66, 8C, 1D, 30, FF, 03, 10, 66, 8C, 05, 2C, FF, 03, 10, 66, 8C, 25, 28, FF, 03, 10, 66, 8C, 2D, 24, FF, 03, 10, 9C, 8F, 05, 58, FF...
 
[+]

Code size:
190.5 KB (195,072 bytes)

Scan ssleay32.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.