This file is legitimate. It's linked to the TOR project. This version is used by the Wanacry ransomware.


MD5: e5df3824f2fcad0c75fd601fcf37ee70
SHA1: 902418a4c5f3684dba5e3246de8c4e21c92d674e
SHA256: 5cd126b4f8c77bdf0c5c980761a9c84411586951122131f13b0640db83f792d8

=> VirusTotal


CodeSize: 155648
Directory: C \Users\user\Desktop\TaskData\Tor
EntryPoint: 0x1400
FileName: libevent_core-2-0-5.dll
FilePermissions: rw-r--r--
FileSize: 408 kB
FileType: Win32 DLL
FileTypeExtension: dll
ImageFileCharacteristics: Executable, No line numbers, 32-bit, DLL
ImageVersion: 1.0
InitializedDataSize: 209920
LinkerVersion: 2.24
MachineType: Intel 386 or later, and compatibles
MIMEType: application/octet-stream
OSVersion: 4.0
PEType: PE32
Subsystem: Windows GUI
SubsystemVersion: 4.0
TimeStamp: 0000 00 00 00 00 00
UninitializedDataSize: 2560