home

tweakbho.dll

TweakMASTER

Hagel Technologies Ltd

Publisher:
Hagel Technologies Ltd.  (signed by Hagel Technologies Ltd)

Product:
TweakMASTER

Description:
TweakMASTER Browser Helper Object

Version:
2.06 Build 792

MD5:
549b3c6d03b5bdae73c47319494476a4

SHA-1:
2b3dbe8c27e57124317e683e4fd11a522db21682

SHA-256:
113751a549436536a4570da65c3e15d945f70b22a70a4c187f1568a12e7e65a1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/29/2024 1:15:19 PM UTC  (today)

File size:
140.1 KB (143,416 bytes)

Product version:
2.06 Build 792

Copyright:
Copyright © 2000-2006 Hagel Technologies Ltd.

Original file name:
TWEAKBHO.EXE

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\tweakbho.dll

Digital Signature
Signed by:
Hagel Technologies Ltd

Authority:
GeoTrust Inc.

Valid from:
10/16/2005 9:11:39 AM

Valid to:
10/30/2006 10:11:39 AM

Subject:
E=support@hageltech.com, CN=Hagel Technologies Ltd, OU=Email and phone validated only., OU=Phone Validation - 1(250) 863-3452, OU=See Public S/MIME CPS www.geotrust.com/resources/CPS., OU=CPS terms incorporated by reference liability limited.

Issuer:
CN=GeoTrust True Credentials CA 2, O=GeoTrust Inc., C=US

Serial number:
103EF0

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
3072:tIDs7mgXQxml6TB/oAThbEo2DVIuhFO3x9OGk:tIg7rXQxNipck

Entry address:
0x1C8BC

Entry point:
55, 8B, EC, 83, C4, C4, B8, FC, C7, 01, 67, E8, 68, 9B, FE, FF, A1, 68, E6, 01, 67, 50, E8, B5, 9C, FE, FF, E8, 1C, 79, FE, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.6251

Developed / compiled with:
Microsoft Visual C++

Code size:
110.5 KB (113,152 bytes)

Scan tweakbho.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.