Gridinsoft Logo
File Icon

The sudo.exe (sudo) File Analysis

Updated 0 second ago
Checked by Malaware Check
sudo.exe

Technical Analysis

File Name sudo.exe
File Type
PE32+ executable (console) x86-64, for MS Windows
Scanner Version 1.0.217.174
Database Version 2025-06-08 07:00:26 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
936,368
File Size (bytes)
2025-06-08
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
5c2a9cb328adfc6ea6902a50f6f0983e
SHA1
dfeed8e455635118b36096aeb26a7bf5b0107279
SHA256
ad048d92e0fe91e3d57fd5e7a96920a77dd9d892df1b5bd061b3ac21cd6d0be8
SHA512
24e4e73df2078eac4f8e0e81dded618dfbd226b7f27029431d1e4d2739915be537fa5085e0720d1cfa3db8958b8b2b0054d62c892c3c5b9228d32e0bf0b6b6e1
ImpHash
013f95a421730c5ae235506b870b2c61

PE Analysis

Basic Information

▼
Icon
Hash: 09a5ebcc81eea5fc13c90cc132269730
Fuzzy: 245df93da8c5b1bb133422155a83bed8
dHash: f0ec92b6b2dae871
Image Base 0x140000000
Entry Point 0x140091530
Compilation Time 2024-07-11 20:41:36
Checksum 0x000e8665 (Actual: 0x000e8665)
OS Version 6.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
PDB Path C:\cargo_target_dir\x86_64-pc-windows-msvc\release\deps\sudo.pdb
Digital Signature OK
Imports 16 libraries
Exports 0 functions
Resources 55 Resources
Sections 7 Sections

Version Information

▼
ProductName sudo
FileDescription sudo
FileVersion 1.0.1
ProductVersion 1.0.1
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 618,896 bytes 619,008 bytes 6.21 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 94CF5B1ADB9FCCBB01E51DB878BD7EF4
.rdata 0x00099000 111,924 bytes 112,128 bytes 5.32 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A93B258E312823D05E74E888D5503CC0
.data 0x000b5000 4,648 bytes 2,560 bytes 1.48 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 58740DC2A721A118F3F812F75EE190F7
.pdata 0x000b7000 12,600 bytes 12,800 bytes 5.78 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 31196DC619ADFD3893434D3BB06358C4
_RDATA 0x000bb000 500 bytes 512 bytes 4.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 80E866989C3D56237A03227B2DAD0EF3
.rsrc 0x000bc000 174,208 bytes 174,592 bytes 6.42 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3F76DFEA1FD4F58769494F6B8169DB43
.reloc 0x000e7000 3,312 bytes 3,584 bytes 5.31 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ BD122AA906EE3C185DCB84B01AC1CF4D

Resource Analysis

▼
Total Resources: 55 (172,113 bytes)
Resource Type Count Total Size Percentage
WEVT_TEMPLATE 1 1,562 bytes
0.9%
RT_ICON 8 93,794 bytes
54.5%
RT_STRING 42 75,784 bytes
44%
RT_MESSAGETABLE 1 144 bytes
0.1%
RT_GROUP_ICON 1 118 bytes
0.1%
RT_VERSION 1 408 bytes
0.2%
RT_MANIFEST 1 303 bytes
0.2%

Certificate Chain Analysis

▼
Certificate Information
Product sudo
Description sudo
File Version 1.0.1
Signing Date 08:44 PM 07/11/2024 (331 days ago)
Verification Status Signed
Signers Microsoft Corporation; Microsoft Code Signing PCA 2011; Microsoft Root Certificate Authority 2011
Counter Signers Microsoft Time-Stamp Service; Microsoft Time-Stamp PCA 2010; Microsoft Root Certificate Authority 2010
Certificate Chain Summary
Microsoft Corporation #1 Primary
Validity Period: 2023-11-16 19:09:00 → 2024-11-14 19:09:00
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 03 AF 30 40 0E 4C A3 4D 05 41 00 00 00 00 03 AF
Microsoft Code Signing PCA 2011 #2 Chain
Validity Period: 2011-07-08 20:59:09 → 2026-07-08 21:09:09
Signature Algorithm: sha256RSA
Serial Number: 61 0E 90 D2 00 00 00 00 00 03
Microsoft Time-Stamp Service #3 Chain
Validity Period: 2023-10-12 19:06:59 → 2025-01-10 19:06:59
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 01 DA 8E D5 C9 5A 00 D1 11 B1 00 01 00 00 01 DA
Microsoft Time-Stamp PCA 2010 #4 Chain
Validity Period: 2021-09-30 18:22:25 → 2030-09-30 18:32:25
Signature Algorithm: sha256RSA
Serial Number: 33 00 00 00 15 C5 E7 6B 9E 02 9B 49 99 00 00 00 00 00 15

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware