This file is legitimate. It's linked to the TOR project. This version is used by the Wanacry ransomware.


MD5: 90f50a285efa5dd9c7fddce786bdef25
SHA1: 54213da21542e11d656bb65db724105afe8be688
SHA256: 77a250e81fdaf9a075b1244a9434c30bf449012c9b647b265fa81a7b0db2513f

=> VirusTotal


CodeSize: 278528
Directory: C \Users\user\Desktop\TaskData\Tor
EntryPoint: 0x1400
FileName: libevent-2-0-5.dll
FilePermissions: rw-r--r--
FileSize: 702 kB
FileType: Win32 DLL
FileTypeExtension: dll
ImageFileCharacteristics: Executable, No line numbers, 32-bit, DLL
ImageVersion: 1.0
InitializedDataSize: 365056
LinkerVersion: 2.24
MachineType: Intel 386 or later, and compatibles
MIMEType: application/octet-stream
OSVersion: 4.0
PEType: PE32
Subsystem: Windows GUI
SubsystemVersion: 4.0
TimeStamp: 0000 00 00 00 00 00
UninitializedDataSize: 5632