The RegCleaner736 exe (TweakNow RegCleaner Setup) TweakNow com File Malware Analysis
Gridinsoft Logo
File Icon

The RegCleaner736.exe (TweakNow RegCleaner Setup) File Analysis

Technical Analysis

File Name RegCleaner736.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.229.174
Database Version 2025-11-30 05:00:33 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
7,248,800
File Size (bytes)
2025-11-30
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
12ee260d09b39e11414a68613aed6ebf
SHA1
0c4f55c58e8e23c0aef6c533dcb7c3f8cb63495f
SHA256
36acf53eac41a73646f4928679b50db86e3adda999386b3161ce2b13ae17957d
SHA512
5e6b486456523b64840d71d28630fe2211de0cd0010cf4348e8d8d7f027507476499749d8767993b3fc638365766a90bafa6d24544f83b980f901f2f48b6a6cd
ImpHash
48aa5c8931746a9655524f67b25a47ef

PE Analysis

Basic Information

Icon
Hash: 3e91cc67e146308239c15a39134ff14e
Fuzzy: 2e2cf0d16805fb9dfdfc9b2658485b99
dHash: f0f0f4d8c8c8d8f0
Image Base 0x00400000
Entry Point 0x004113bc
Compilation Time 2015-07-16 13:24:20
Checksum 0x006f0e21 (Actual: 0x006f0e21)
OS Version 5.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 5 libraries
oleaut32, advapi32, user32, kernel32, comctl32
Exports 0 functions
Resources 23 Resources
Sections 8 Sections

Version Information

Comments This installation was built with Inno Setup.
CompanyName TweakNow.com
FileDescription TweakNow RegCleaner Setup
FileVersion
LegalCopyright Copyright 2003-2015 TweakNow.com
ProductName TweakNow RegCleaner
ProductVersion 7.3.6
Translation 0x0000 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 61,748 bytes 61,952 bytes 6.39 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 1B89617B988C8BD575544F47F0D04258
.itext 0x00011000 2,884 bytes 3,072 bytes 5.74 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 25478D452B599B551FE11BFB5904D2D0
.data 0x00012000 3,208 bytes 3,584 bytes 2.25 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 0C3E63B09234B01CE16CFF38DF28BB6F
.bss 0x00013000 22,200 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x00019000 3,536 bytes 3,584 bytes 4.97 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 93D91A2B90E60BD758FC0C4908856AE1
.tls 0x0001a000 8 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x0001b000 24 bytes 512 bytes 0.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3DFFC444CCC131C9DCEE18DB49EE6403
.rsrc 0x0001c000 122,880 bytes 121,856 bytes 6.74 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 629A11295F7EB2DE950BA97A3F4B3052
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 23 (120,394 bytes)
Resource Type Count Total Size Percentage
RT_ICON 10 80,826 bytes
67.1%
RT_STRING 6 2,668 bytes
2.2%
RT_RCDATA 4 33,908 bytes
28.2%
RT_GROUP_ICON 1 146 bytes
0.1%
RT_VERSION 1 1,268 bytes
1.1%
RT_MANIFEST 1 1,578 bytes
1.3%

Certificate Chain Analysis

Certificate Information
Product TweakNow RegCleaner
Description TweakNow RegCleaner Setup
Signing Date 10:58 PM 08/06/2015 (3807 days ago)
Verification Status Signed
Signers Priyo Hutomo; Thawte Code Signing CA - G2; thawte
Counter Signers Symantec Time Stamping Services Signer - G4; Symantec Time Stamping Services CA - G2; Thawte Timestamping CA
Copyright Copyright 2003-2015 TweakNow.com
Certificate Chain Summary
Symantec Time Stamping Services CA - G2 #1 Primary
Validity Period: 2012-12-21 00:00:00 → 2020-12-30 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 7E 93 EB FB 7C C6 4E 59 EA 4B 9A 77 D4 06 FC 3B
thawte Primary Root CA #2 Chain
Validity Period: 2006-11-17 00:00:00 → 2036-07-16 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 34 4E D5 57 20 D5 ED EC 49 F4 2F CE 37 DB 2B 6D
Thawte Code Signing CA - G2 #3 Chain
Validity Period: 2010-02-08 00:00:00 → 2020-02-07 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 47 97 4D 78 73 A5 BC AB 0D 2F B3 70 19 2F CE 5E
Symantec Time Stamping Services Signer - G4 #4 Chain
Validity Period: 2012-10-18 00:00:00 → 2020-12-29 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 0E CF F4 38 C8 FE BF 35 6E 04 D8 6A 98 1B 1A 50
Priyo Hutomo #5 Chain
Validity Period: 2014-12-23 00:00:00 → 2015-12-23 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 46 E9 E2 CE 26 B3 06 F2 6F 97 02 76 81 31 21 CF

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware