Gridinsoft Logo

The tweego_win86.exe File Analysis

Updated 3 minutes ago
Checked by Malware Check
tweego_win86.exe

Technical Analysis

File Name tweego_win86.exe
File Type
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
Scanner Version 1.0.218.174
Database Version 2025-06-18 03:00:34 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
4,115,456
File Size (bytes)
2025-06-18
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
5d3887280b9f9e6c9a345be10f10127a
SHA1
1ee7f7f7d7447f7a4311e7421bdc4d0258b0cf1e
SHA256
7806a4a043f05f1069ccc497651135355d6982b17cd8c3368ac74fa68af2b022
SHA512
ee6818b91e5135a17ff2c0312348ec3b43725ef900c19d152e3b1093347881c4e23c183b423085d7d73693c9b5cd5a0d38afc415db709d39478ea06748d31cab
ImpHash
1cd364a9e949d5ecebd6c614e64bc545

PE Analysis

Basic Information

▼
Image Base 0x00400000
Entry Point 0x0044eb50
Compilation Time 1970-01-01 00:00:00
Checksum 0x00000000 (Actual: 0x003eebc2)
OS Version 6.1
PEiD Signatures PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 1 libraries
kernel32
Exports 0 functions
Resources 0 Resources
Sections 14 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,283,493 bytes 1,283,584 bytes 6.12 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 703957B04862BAB4BC2B1C2EBB17811C
.rdata 0x0013b000 1,535,060 bytes 1,535,488 bytes 5.98 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 79CA62203DC35DC56AF69FB526E20562
.data 0x002b2000 220,408 bytes 133,120 bytes 5.83 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 2C4FDB627071454688AB26E7903EFDF8
/4 0x002e8000 281 bytes 512 bytes 4.83 (Normal) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 28A3E9C96B9BB43E6541A26C8F68899B
/19 0x002e9000 209,485 bytes 209,920 bytes 7.99 (Packed/Encrypted) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 3F52F6614C82051FF6303EA1A50D2041
/32 0x0031d000 47,464 bytes 47,616 bytes 7.98 (Packed/Encrypted) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 3458C9A4B88FA185A86F5244550E565C
/46 0x00329000 10,089 bytes 10,240 bytes 7.95 (Packed/Encrypted) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 85E5E85AC6A2BD6C50E02C8774371E10
/63 0x0032c000 23,670 bytes 24,064 bytes 7.97 (Packed/Encrypted) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 1FD534F59C29A8FFDEAD77C4E646196C
/80 0x00332000 40 bytes 512 bytes 0.71 (Normal) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ D82725D4780AE94BB7610097441A7844
/99 0x00333000 333,673 bytes 333,824 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 4043F40D04DCF69E7D5A057B13334522
/112 0x00385000 228,024 bytes 228,352 bytes 7.99 (Packed/Encrypted) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ FD210638C7B9CCD2426016F4D61522BF
/124 0x003bd000 76,091 bytes 76,288 bytes 7.93 (Packed/Encrypted) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 2AC969B51696220DA493789FC76BC9E8
.idata 0x003d0000 816 bytes 1,024 bytes 4.05 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 95A4600D151A04BB74C88FD4C80B26F4
.symtab 0x003d1000 229,829 bytes 229,888 bytes 5.33 (Normal) IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 4C634B79BE8C7439AD619B5F39DDA1C3
Entropy Analysis Alert

7 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware