CmdID / Files

sud.dll

SUD Control Panel file version info

Library on Windows 2 known copies with hashes

Is it the real sud.dll?

file version info and known copies

Installed inC:\Windows\system32\
C:\Windows\SysWOW64\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionSUD Control Panel

2 known copies

10.0.19041.423 (WinBuild.160101.0800) · C:\Windows\SysWOW64\sud.dll · signed by Microsoft Windows

2447071a99d05a60180f63636d6ae7b36ee3414d07475e51ba46b8ce98bbab9d

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\sud.dll · signed by Microsoft Windows

ad10d8d26a4a80cd14c3e06463e6e879c9be963c2c1c591b6a2c24da90631cdb

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.