Absolutely, a trick commonly used in PHP backdoors or webshells is to append a fake image header (eg. "GIF89a"). PHP will happily ignore this and execute the actual code, and it may trick AV or admins in thinking it's an image file.
You can add location information to your Tweets, such as your city or precise location, from the web and via third-party applications. You always have the option to delete your Tweet location history. Learn more
