Gridinsoft Logo
File Icon

The 0tk.exe File Analysis

Technical Analysis

File Name 0tk.exe
File Type
PE32+ executable (console) x86-64, for MS Windows
Scanner Version 1.0.209.174
Database Version 2025-03-02 18:00:36 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
92,672
File Size (bytes)
2025-03-02
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
4a6341a0542f9388588182d9041399e0
SHA1
97deafeb32c8d6aa049013d790f6bf9709901107
SHA256
b3e1909ef779400363a3e08bb47a513fa23ce2e6373bf04949c52e1bff1a654b
SHA512
9584442e0c10951d59b717a483dc76c30f301000352f0daa93efae52b3f09ba449ec433dc61b132ba6a3c7f941e25ae7debb18550bcb909d8b980843f85dedd2
ImpHash
14a847b958adc61d0783d743a20874b2

PE Analysis

Basic Information

Icon
Hash: 6c064833d178519f9192ffdb2c2620f7
Fuzzy: 7a933d3d7c523a0f25febd686537e497
dHash: 7872f0d997e4cc99
Image Base 0x140000000
Entry Point 0x140002ba0
Compilation Time 2023-07-31 05:58:37
Checksum 0x00000000 (Actual: 0x00021089)
OS Version 6.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
PDB Path C:\Users\playt\source\repos\GHT\x64\Release\GHT.pdb
Digital Signature No valid SignedData structure was found.
Imports 13 libraries
Exports 0 functions
Resources 3 Resources
Sections 6 Sections

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 10,217 bytes 10,240 bytes 5.94 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 26CADEEF1F17207B8DAA63A67B08C8EE
.rdata 0x00004000 10,556 bytes 10,752 bytes 4.58 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1A37CF2DAA692BCE133BFE17401D9FFC
.data 0x00007000 1,792 bytes 512 bytes 2.05 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE FE4AAAEBFF817D2B3C0A80CEBCE7DED6
.pdata 0x00008000 696 bytes 1,024 bytes 2.88 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D9CE5FEF7DE1B298DDC7B4D199A98F3C
.rsrc 0x00009000 68,272 bytes 68,608 bytes 6.59 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8E47A2A73A1BA6E633EBACC9FBE1536B
.reloc 0x0001a000 92 bytes 512 bytes 1.18 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 9B70AAE2F0DAD2A36EE12BACBF2E178E
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 3 (68,025 bytes)
Resource Type Count Total Size Percentage
RT_ICON 1 67,624 bytes
99.4%
RT_GROUP_ICON 1 20 bytes
0%
RT_MANIFEST 1 381 bytes
0.6%

Certificate Chain Analysis

No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware