TweakCubeVD.sys
TweakCube VD
Qingdao Ruanmei Network Technology Co.,Ltd.
The file TweakCubeVD.sys by Qingdao Ruanmei Network Technology Co.,Ltd has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a Windows 64-bit kernel mode device driver named “TweakCubeVD”.
File name:
TweakCubeVD.sys
Publisher:
青岛软媒网络科技有限公司 (signed by Qingdao Ruanmei Network Technology Co.,Ltd.)
MD5:
4a40ec8aa86aaa08689210af1aee46ef
SHA-1:
f5bceb06362746063001b3f713a5a14b20d2e549
SHA-256:
28bbe4f62866a683ad35cc0b709aa8bd07c60628e263c78be9bfcef3bde6c523
Scanner detections:
1 / 68
Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.
Analysis date:
4/19/2024 11:28:01 AM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
PUP.QingdaoRuanmeiNetworkTechnologyCoLtd.O
14.2.12.7
File size:
157.8 KB (161,624 bytes)
Product version:
1, 0, 0, 0
Original file name:
TweakCubeVD.sys
File type:
Driver (Win64 SYS)
Common path:
C:\Windows\System32\drivers\tweakcubevd.sys
Valid from:
6/16/2011 8:00:00 AM
Valid to:
6/16/2014 7:59:59 AM
Subject:
CN="Qingdao Ruanmei Network Technology Co.,Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Qingdao Ruanmei Network Technology Co.,Ltd.", L=Qingdao, S=Shandong, C=CN
Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
Serial number:
6E1C43A41D4DDC805A8561C69CEDA182
CTPH (ssdeep):
3072:VL+wMsi5/CU/xpqaKNEQqW6yo+rmqeSpFVlYqe:t+MApCEc6yjFVlU
Driver
Type:
Kernel device driver (KernelDriver)