This file is legitimate. It's linked to the TOR project. This version is used by the Wanacry ransomware.


MD5: a12c2040f6fddd34e7acb42f18dd6bdc
SHA1: d7db49f1a9870a4f52e1f31812938fdea89e9444
SHA256: bd70ba598316980833f78b05f7eeaef3e0f811a7c64196bf80901d155cb647c1

=> VirusTotal


CharacterSet: Unicode
CodeSize: 326656
CompanyName: The OpenSSL Project, http //
Directory: C \Users\user\Desktop\TaskData\Tor
EntryPoint: 0x1400
FileDescription: OpenSSL shared library
FileFlags: (none)
FileFlagsMask: 0x003f
FileName: ssleay32.dll
FileOS: Win32
FilePermissions: rw-r--r--
FileSize: 695 kB
FileSubtype: 0
FileType: Win32 DLL
FileTypeExtension: dll
FileVersion: 1.0.2k
ImageFileCharacteristics: Executable, No line numbers, 32-bit, DLL
ImageVersion: 1.0
InitializedDataSize: 435712
InternalName: ssleay32
LanguageCode: English (U.S.)
LegalCopyright: Copyright © 1998-2006 The OpenSSL Project. Copyright © 1995-1998 Eric A. Young, Tim J. Hudson. All rights reserved.
LinkerVersion: 2.24
MachineType: Intel 386 or later, and compatibles
MIMEType: application/octet-stream
ObjectFileType: Dynamic link library
OriginalFileName: ssleay32.dll
OSVersion: 4.0
PEType: PE32
ProductName: The OpenSSL Toolkit
ProductVersion: 1.0.2k
Subsystem: Windows command line
SubsystemVersion: 4.0
TimeStamp: 0000 00 00 00 00 00
UninitializedDataSize: 1536