Gridinsoft Logo
File Icon

The NSudo.exe (NSudo Launcher) File Analysis

Technical Analysis

File Name NSudo.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.217.174
Database Version 2025-06-01 07:00:31 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
160,256
File Size (bytes)
2025-06-01
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
7aacfd85b8dff0aa6867bede82cfd147
SHA1
e783f6d4b754ea8424699203b8831bdc9cbdd4e6
SHA256
871e4f28fe39bcad8d295ae46e148be458778c0195ed660b7db18eb595d00bd8
SHA512
59cce358c125368dc5735a28960ddb7ee49835ca19f44255a7ae858ddd8a2db68c72c3f6818eca3678d989041043876e339f9fafe1d81d26001286494a8014f0
ImpHash
21c5088120f053f6a67b20e86076cca2

PE Analysis

Basic Information

Icon
Hash: 83197ea787d30008a84635588c3840f0
Fuzzy: b6aec594635d7188f11e4de9423f0fb5
dHash: 279858b6bc999044
Image Base 0x140000000
Entry Point 0x14000d800
Compilation Time 2021-06-06 13:26:33
Checksum 0x00000000 (Actual: 0x00028106)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path D:\Projects\MouriNaruto\NSudoPrivate\Source\Native\Output\Binaries\Release\x64\NSudoLG.pdb
Digital Signature No valid SignedData structure was found.
Imports 10 libraries
KERNEL32, USER32, GDI32, COMDLG32, ADVAPI32, SHELL32, ole32, USERENV, WTSAPI32, msvcrt
Exports 0 functions
Resources 34 Resources
Sections 6 Sections

Version Information

CompanyName M2-Team
FileDescription NSudo Launcher
FileVersion 8.2.0.0
InternalName NSudoL
LegalCopyright © M2-Team and Contributors. All rights reserved.
OriginalFilename NSudoL.exe
ProductName NSudo
ProductVersion 8.2.0.0
Translation 0x0000 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 80,488 bytes 80,896 bytes 6.30 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ E3CFE972545635BDF79E75E55578866F
.rdata 0x00015000 27,874 bytes 28,160 bytes 4.98 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 17F96A1E9F9B94B66DEA5103C0520728
.data 0x0001c000 3,072 bytes 1,024 bytes 2.91 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 61F951FD97B28EC1E1A1157FF5C511B1
.pdata 0x0001d000 3,972 bytes 4,096 bytes 4.93 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4BD2C9EFADFD409D7F58658CFADED38E
.rsrc 0x0001e000 44,200 bytes 44,544 bytes 6.07 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ CA8963F1C4E89FC2CA2FD5F20B659828
.reloc 0x00029000 252 bytes 512 bytes 2.97 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ B7C73734CA40E7FD39551C634A000815

Resource Analysis

Total Resources: 34 (42,704 bytes)
Resource Type Count Total Size Percentage
STRING 21 28,743 bytes
67.3%
RT_ICON 8 11,170 bytes
26.2%
RT_DIALOG 2 516 bytes
1.2%
RT_GROUP_ICON 1 118 bytes
0.3%
RT_VERSION 1 732 bytes
1.7%
RT_MANIFEST 1 1,425 bytes
3.3%

Certificate Chain Analysis

Certificate Information
Product NSudo
Description NSudo Launcher
File Version 8.2.0.0
Original Name NSudoL.exe
Internal Name NSudoL
Copyright © M2-Team and Contributors. All rights reserved.

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware