Gridinsoft Logo

The ssh-agent.exe File Analysis

Technical Analysis

File Name ssh-agent.exe
File Type
PE32+ executable (console) x86-64, for MS Windows
Scanner Version 1.0.210.174
Database Version 2025-03-12 23:00:44 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
550,912
File Size (bytes)
2025-03-12
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
b202279796f0b61eeb6ec5741154b81f
SHA1
f68a91fc1e37b877f05017daef88b5964df3af43
SHA256
f9eda6a7336274fefb1319822c1153a415b8db95d0806426c5453765596f7748
SHA512
67c176cae4844e4139251cdb5d74cab278b7c22fda4895cab45466fa1bd4bae3db5e8d7e5d577d668eff487a6afb37c21b102ca92049fc47bb43289e5306bc45
ImpHash
0e4abf8f73907c27fcee049b15ba6d26

PE Analysis

Basic Information

Image Base 0x140000000
Entry Point 0x140031930
Compilation Time 2024-09-04 22:45:31
Checksum 0x0008e51d (Actual: 0x0008e51d)
OS Version 6.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
PDB Path ssh-agent.pdb
Digital Signature No valid SignedData structure was found.
Imports 6 libraries
libcrypto, KERNEL32, ADVAPI32, CRYPT32, WS2_32, USER32
Exports 0 functions
Resources 4 Resources
Sections 6 Sections

Version Information

FileVersion 9.5.2.1
ProductName OpenSSH for Windows
ProductVersion OpenSSH_9.5p1 for Windows
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 325,952 bytes 326,144 bytes 6.48 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 260DB28296928B2EA3B3C6C0C22C5609
.rdata 0x00051000 199,330 bytes 199,680 bytes 3.91 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 59262D246B615BDC8084434446B3C21E
.data 0x00082000 149,312 bytes 3,584 bytes 2.03 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D72F1012F0F7E023C0E4B1149BD8DE60
.pdata 0x000a7000 13,632 bytes 13,824 bytes 5.67 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 112BFBC1CFEE400E4D56C6C6796799A2
.rsrc 0x000ab000 3,704 bytes 4,096 bytes 4.47 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5817CB88D5C98DC585CD095E85D9049A
.reloc 0x000ac000 2,388 bytes 2,560 bytes 5.32 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 1A4A74D0310D3399021391EADE63767E

Resource Analysis

Total Resources: 4 (3,350 bytes)
Resource Type Count Total Size Percentage
WEVT_TEMPLATE 1 1,114 bytes
33.3%
RT_MESSAGETABLE 1 188 bytes
5.6%
RT_VERSION 1 428 bytes
12.8%
RT_MANIFEST 1 1,620 bytes
48.4%

Certificate Chain Analysis

Certificate Information
Product OpenSSH for Windows
File Version 9.5.2.1
Signing Date 01:42 PM 10/04/2024 (246 days ago)
Verification Status Signed
Signers Microsoft Windows; Microsoft Windows Production PCA 2011; Microsoft Root Certificate Authority 2010
Counter Signers Microsoft Time-Stamp Service; Microsoft Time-Stamp PCA 2010; Microsoft Root Certificate Authority 2010

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware