This file is legitimate. It's linked to the TOR project. This version is used by the Wanacry ransomware.


MD5: 6ed47014c3bb259874d673fb3eaedc85
SHA1: c9b29ba7e8a97729c46143cc59332d7a7e9c1ad8
SHA256: 58be53d5012b3f45c1ca6f4897bece4773efbe1ccbf0be460061c183ee14ca19

=> VirusTotal


CharacterSet: Unicode
CodeSize: 1526272
CompanyName: The OpenSSL Project, http //
Directory: C \Users\user\Desktop\TaskData\Tor
EntryPoint: 0x1400
FileDescription: OpenSSL shared library
FileFlags: (none)
FileFlagsMask: 0x003f
FileName: libeay32.dll
FileOS: Win32
FilePermissions: rw-r--r--
FileSize: 3.0 MB
FileSubtype: 0
FileType: Win32 DLL
FileTypeExtension: dll
FileVersion: 1.0.2k
ImageFileCharacteristics: Executable, No line numbers, 32-bit, DLL
ImageVersion: 1.0
InitializedDataSize: 2105344
InternalName: libeay32
LanguageCode: English (U.S.)
LegalCopyright: Copyright © 1998-2006 The OpenSSL Project. Copyright © 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.
LinkerVersion: 2.24
MachineType: Intel 386 or later, and compatibles
MIMEType: application/octet-stream
ObjectFileType: Dynamic link library
OriginalFileName: libeay32.dll
OSVersion: 4.0
PEType: PE32
ProductName: The OpenSSL Toolkit
ProductVersion: 1.0.2k
Subsystem: Windows command line
SubsystemVersion: 4.0
TimeStamp: 0000 00 00 00 00 00
UninitializedDataSize: 12288