The 4f1d0e64 1ff2 47ec bd2c 90ad0dc30c69 tmp node File Malware Analysis

Technical Analysis

File Name	4f1d0e64-1ff2-47ec-bd2c-90ad0dc30c69.tmp.node
File Type	PE32+ executable (DLL) (console) x86-64, for MS Windows
Scanner Version	1.0.229.174
Database Version	2025-12-01 15:00:32 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	d4d4556d90276bc091ec53366a7b893d
SHA1	81be395f58241ac117fdf6b2a87d2a5f9e2fca3f
SHA256	dadb2fc7fa9f6a8691661a90d5b1ab80f4091c1b8a5becf1959a977e8aca025a
SHA512	14d439520c958e00505b74c8a584ef56b0384d73346b7a67710e4f55e06ac5c06dcfd3d0f3cb9fbb978ed0b8dc42af4a9916fe8f6d619bf06cffc839b071c0aa
ImpHash	e326b9d986207643a21d70d1d9956c6b

PE Analysis

Basic Information

▼

Image Base	`0x180000000`
Entry Point	`0x18018f2cc`
Compilation Time	2024-04-07 19:17:36
Checksum	0x00000000 (Actual: 0x0023cbe3)
OS Version	6.0
PEiD Signatures	`PE32+ executable (DLL) (console) x86-64, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	2 libraries KERNEL32, ADVAPI32
Exports	1 functions
Resources	1 Resources
Sections	7 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	1,725,968 bytes	1,726,464 bytes	5.57 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`8ED8FC51E3F77B8C87F09B0A5E31CBB3`
`.rdata`	`0x001a7000`	357,910 bytes	358,400 bytes	4.26 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`A0F8F8BD300617AF2F7FF1D2766F1182`
`.data`	`0x001ff000`	622,748 bytes	5,632 bytes	3.05 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`1D0484A689FAFC49301DC1A3405A4CBE`
`.pdata`	`0x00298000`	209,892 bytes	209,920 bytes	6.28 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`D361A130227F03E647A898ED8CA100EE`
`_RDATA`	`0x002cc000`	500 bytes	512 bytes	4.16 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`B1F454C3EE43F59DCA8E6BBC233D8B98`
`.rsrc`	`0x002cd000`	480 bytes	512 bytes	4.72 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`92166F228EDD9A169CC7C68D899AEA18`
`.reloc`	`0x002ce000`	35,764 bytes	35,840 bytes	5.43 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`BACCE5535D97D085D8B1858849623306`

Resource Analysis

▼

Total Resources: 1 (381 bytes)

Resource Type	Count	Total Size	Percentage
RT_MANIFEST	1	381 bytes	100%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The 4f1d0e64-1ff2-47ec-bd2c-90ad0dc30c69.tmp.node File Analysis