Gridinsoft Logo

The tweego_win64.exe File Analysis

Updated 4 minutes ago
Checked by Malware Check
tweego_win64.exe

Technical Analysis

File Name tweego_win64.exe
File Type
PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows
Scanner Version 1.0.218.174
Database Version 2025-06-18 03:00:34 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
4,612,608
File Size (bytes)
2025-06-18
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
3a526cb24088f8db70f7272ee503057e
SHA1
f4fc527839ae5bc7c09d9e0ec3689c57502de4f3
SHA256
50cb7609ee46872b594647ba7083c4fc0e5bc81ceb86ba7a7fe3684c7ae984fb
SHA512
9e66a49f339f5e96a154d58ce3127414e984666d4a27bb5d8a5d6c97457ec541a0d764ec6a16e0d2f7ba14c432083f5c57942fd4d782c10045c5690c463631a2
ImpHash
1cd364a9e949d5ecebd6c614e64bc545

PE Analysis

Basic Information

▼
Image Base 0x00400000
Entry Point 0x0045a440
Compilation Time 1970-01-01 00:00:00
Checksum 0x00000000 (Actual: 0x0046cb14)
OS Version 6.1
PEiD Signatures PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 1 libraries
kernel32
Exports 0 functions
Resources 0 Resources
Sections 14 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,517,465 bytes 1,517,568 bytes 5.89 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D859A3C6DFB7BF6BD1E75240BE4EC91B
.rdata 0x00174000 1,766,767 bytes 1,766,912 bytes 5.47 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ ACF3209788F7E67E2EA07985E4767361
.data 0x00324000 290,728 bytes 151,552 bytes 5.30 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 881A101B03C1DEA8FB0CB20529B3795B
/4 0x0036b000 281 bytes 512 bytes 4.83 (Normal) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 28A3E9C96B9BB43E6541A26C8F68899B
/19 0x0036c000 208,534 bytes 208,896 bytes 7.99 (Packed/Encrypted) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 11D35B5F739B737F6C569DCA565D8438
/32 0x0039f000 51,535 bytes 51,712 bytes 7.94 (Packed/Encrypted) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 3F121B4F4F69D29E63149F57043C6596
/46 0x003ac000 10,097 bytes 10,240 bytes 7.95 (Packed/Encrypted) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 2763480809269B96C8FA6253AB33098B
/63 0x003af000 23,778 bytes 24,064 bytes 7.97 (Packed/Encrypted) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 558CF9A09390E71D8570AC0A4923EB0E
/80 0x003b5000 40 bytes 512 bytes 0.71 (Normal) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ D82725D4780AE94BB7610097441A7844
/99 0x003b6000 343,845 bytes 344,064 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 8C815936CF33896872D185F292AD8727
/112 0x0040a000 222,276 bytes 222,720 bytes 7.99 (Packed/Encrypted) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 8A3734730BE26CB3349716202A64004D
/124 0x00441000 77,743 bytes 77,824 bytes 7.81 (Packed/Encrypted) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ CA4E410A1F7F51C19EF58F93783CE54F
.idata 0x00454000 948 bytes 1,024 bytes 4.06 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 480482A9CE2B07DC37C0868FE9F2F0A9
.symtab 0x00455000 233,201 bytes 233,472 bytes 5.34 (Normal) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 7B010102CAC5C15AD610834F2F0606D0
Entropy Analysis Alert

7 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware