Gridinsoft Logo

The tkcon.exe File Analysis

Technical Analysis

File Name tkcon.exe
File Type
PE32+ executable (console) x86-64, for MS Windows
Scanner Version 1.0.217.174
Database Version 2025-05-31 02:00:17 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
12,293,120
File Size (bytes)
2025-05-31
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
437c3ebef4c0762e6b687e8509bbc44a
SHA1
ba42f0a689653572ab4fad26b46ae248735fd6c9
SHA256
aa20617f88364b61f8c9451820f5c91dd4089f5ee2bbecbbcb0909918c1ddf5d
SHA512
976b9a9db997ced753736ac8b4c67bd53c7ba8fd537d81dd27d921e4b169b2995ffa2a92338b2974bba84ca3ee83653a7ffd942523f8a2c0628a24c91fb6ca92
ImpHash
2093333e1a32b7afde05fa1ceb0b462c

PE Analysis

Basic Information

Image Base 0x00400000
Entry Point 0x00d50720
Compilation Time 2025-05-22 18:15:58
Checksum 0x00bc92d1 (Actual: 0x00bc92d1)
OS Version 5.2
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
Digital Signature OK
Imports 23 libraries
Exports 3 functions
Resources 147 Resources
Sections 11 Sections

Version Information

ProductName Gridinsoft® Anti-Malware
ProductVersion 4.3.61
CompanyName Gridinsoft LLC
LegalCopyright © Gridinsoft LLC, 2025
LegalTrademarks Gridinsoft®
InternalName tkcon
OriginalFilename tkcon.exe
FileVersion 4.3.61.5853
FileDescription Anti-Malware Console
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 9,933,672 bytes 9,933,824 bytes 5.72 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 0992A948EE6994718D20328F17E7CA4B
.data 0x0097b000 945,232 bytes 945,664 bytes 5.01 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 80B05DAE497732E0F1BD7DB4A27085A6
.bss 0x00a62000 691,888 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x00b0b000 25,168 bytes 25,600 bytes 4.46 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE B62858F0E4CA0093877650065EFFAC31
.didata 0x00b12000 5,418 bytes 5,632 bytes 3.40 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 3B047EE98D2BA508052EF7362C6FD9E7
.edata 0x00b14000 151 bytes 512 bytes 1.84 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C4E754043F0ACB046D94CE12BDAFAD65
.tls 0x00b15000 664 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x00b16000 109 bytes 512 bytes 1.38 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0DA3728AD8853D5A48770E3F837AA3EC
.reloc 0x00b17000 474,792 bytes 475,136 bytes 6.47 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 6805383E0A6E431D62AA858B9BE2E2A4
.pdata 0x00b8b000 513,468 bytes 513,536 bytes 6.53 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 7D1CC6459B0F413B2B6FFCC7B9C6BDE1
.rsrc 0x00c09000 381,440 bytes 381,440 bytes 5.98 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4F4AEB3D8034CCFFA74F0CF0A557B1CC
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 147 (372,969 bytes)
Resource Type Count Total Size Percentage
UNICODEDATA 6 191,535 bytes
51.4%
RT_CURSOR 21 10,868 bytes
2.9%
RT_BITMAP 5 2,432 bytes
0.7%
RT_STRING 68 78,564 bytes
21.1%
RT_RCDATA 25 88,338 bytes
23.7%
RT_GROUP_CURSOR 21 420 bytes
0.1%
RT_VERSION 1 812 bytes
0.2%

Certificate Chain Analysis

No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware