home

teamviewer setup.exe

Installer

Max Criteria (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application teamviewer setup.exe, “Installer Setup ” by Max Criteria (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Max Criteria (Fried Cookie Ltd.)  (signed and verified)

Product:
Installer

Description:
Installer Setup

Version:
5.4.4.1

MD5:
4cf802d833705b83be6764bb2a50b7e4

SHA-1:
5e7a9bedb7f2c67fd38562247aed2e44351f7bc8

SHA-256:
ef0bd3d5a79fcf4a6bfbe0da80bc70649c6f2497048c4392966e89a98868aaaf

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/29/2024 9:42:41 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.1.13.20

File size:
963 KB (986,136 bytes)

Product version:
3.3

Copyright:
Lite Application

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\teamviewer setup.exe

Digital Signature
Signed by:
Max Criteria (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 5:30:28 AM

Valid to:
7/24/2016 8:37:50 AM

Subject:
CN=Max Criteria (Fried Cookie Ltd.), O=Max Criteria (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121F0C6B8EDBABE266B325280BC664A1402

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:HdtZMTceJ+RL4pPjNDYhQMFFgyjK1SNXzrrUeZWfL6YTm:H72oFRMpPjShjFxOu386Gm

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9335

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file teamviewer setup.exe has been seen being distributed by the following 25 URLs.

http://www.farmtourvault.com/c?x=0T5WsxKN5jqkV/enA6MY7xJZrCXn/9 rstNM2w9/BjM=&c=iGSpvjY gL2Uaya4DdHBzZwKrjkU/p3l8oEd/neOJcy4NgeI9rv FqNNLpqvaduz0eUir93wxT74e54WmTkgvosWvAKi3/v4R0GCf/MQyClwvZaxMAL3eJMDAumil8CX&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.downloadhostbundles.com/c?x=cC4RZZacjkBtyPxKEbrITzeRtkEAsy7bnNyByXlYBQE=&c=JucMlSThQAWPnYTcVlgZIgFFH1DmiLorlRUKtyRs4wHnzbVbx4l6SKWmr6zjqZMh/spqDZTHFr/wmeHQEq02fEvew/vtXEU9vcqL3yHnXexZ3XcEafE7vrB Z/74r/s4&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.downloadhostbundles.com/c?x=CSOGZafSq973ABAGXXi/iUCSIuXrmPQoekQ0bkE8fPU=&c=5 TvhVmoKkQ4IA gd9esiBzW9Zi8m933ZxJa7aY3O8dUx Td7Tt4dAGG0ZQk5gASZkvCAM2AItgf AZ/wkbIZXTGe/gpRi9EAMbXNYQrR1HJ9k4618b6oSyINUEv4Ajj&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.downloadhostbundles.com/c?x=fkpJgZWCE5f290Iwt9xx3jw1yVjOnvGTd0RCwO0Mry0=&c=kjK9qm0pKJQOlmXfwZtAyOTj/7ILNepbhs RR ROynh 99a7hLo867QyPbQd5XjQmlvRZXlPw3w68VYiqn SzMeGl/pkqCHQ8lIXextC5zNOzn01GK9xJuwex0KEVUZx&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.downloadhostbundles.com/c?x=eU7fS4GMM/5wLxvgammPDcGPK5IQUN7Cj/q6M/lgTjc=&c=Cdr9A//iPh8UZcFMYi6YqCkynHAmml3Xt4sE0YkgtUqKurAy5sLDtpRq27pKlpXce9C2ylMh3 MdDajuHMoZIiycQrDx68QkLab hs45hpbihjEyu7vjkO1uLh4 hzPX&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.downloadhostbundles.com/c?x=sL3uaEVPHcDXqLkZtRHNZ171l8N3GkXhCUp/iSEdcgo=&c= 01IkYW4nbaZflV2RxMM4vx7UrwIjJzj/NO37nYagcnVX0zeK29Fm4fRIXB1PhNF/JltwZxSnqrNIkfhfzDtpoYXNo1ntj74q3Tgd9DVLnKTEh8EgUkbUfh4gcQC8f9d&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.downloadhostbundles.com/c?x=M7r/MpmUTcRXR3QMkOy55cubBZxIOCuyQMe qOaQ1jg=&c=QYYu2w/VL0pO7wa02k1m9EyCXE7jVeHDADAFSyPRtsF051WkcQUJewJyo03F1EyFvO g8ZkiS S3raxwMPl5XEuCWUK 1M6Z7eDFvWmuESKQjgarVKdFMvQpFkH8Fuzy&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.downloadhostbundles.com/c?x=vjLNIiM9coLyGhPebhSVyLGTT58Xbe7MYX4eiCdMP I=&c=Am9 KKx/rLEt/i1o2riWVQtk0XUTRgUO1IOMsfMnG V8VCWEg1FqFrykbFxRl9xvpPUYz2xlkKuJDA/JLVV0o2zE/bZbxF37oYhBL 7tHLCl4RObrETQIJy9lqzYBOdT&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.downloadhostbundles.com/c?x=mEufb6kSuUB f9LqAhkau7h0IXi6/BPPSlGmq86cSd8=&c=CZIVZDkqCuPrHlKuO96iN3VpXVRWej9lp65urvAtv/dCIyC2BmMpWVPgujS9kT20E GgTtWun0OFGMqG4bC7g5PXVOgYzwq62HAMEw1QZv682wS5mLPuRmH6Yp6Q5UAc&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.farmtourvault.com/c?x=X9qZUWO9MY g18hxFuyOzG6Wz dPLna0QwmExN9 9As=&c=39vyn5VshUO8ryNCjZEyfbYjXQB7yD2L/Myv2PX3mIduI66LizVRqFvRUsNlKPlIvENSQa51v0U40oER4GfAD3cmkff5TIXWyatnOBohK8tsHyXDNuPpay4fvHKVgMmk&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.farmtourvault.com/c?x=UfPacUp7UFKIH2QvaT4eQSJ94bTphXv6G0XRF A4vpM=&c=HYYAaeNBrRnBTetisgaGoc5DV8BnSuSk1Fry4iAiEcc5OCfI7FKTRTkDUMjCnQuxMg/Pz5aQoX eW66pNfLiY/Lho0 sRyUUhlVeUEjXt40NJMNmvjCoqtbreN3zlu7q&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.downloadhostbundles.com/c?x=im4p2j4KXYDuGWeIPahCi31SeH QVlxJmDKvohNko38=&c=kQLAQZOUmgcOazqtdFzhxcJjC9kqtW1iUF5D5N4hhwl/3VkjspoveNnSCdfuDWHSXWRxpEUhm0iLAuYPPrqIl5r CnU1shG07QHCpcPfvt2BGNvYT8s81QtkF7eBjYd8&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.downloadhostbundles.com/c?x=z52Yw5OtSwsOUAb94WqTr3UJxtvpfA PZU6JqusYsXA=&c=bPkfPDhUtYQ8eQ1xbomatbWPvK6SPArfxeYurYqmPmCMt11aL07yF2oifA6bo 0s57Bd3CJaSgbzH04y7qkK eo6Zzrui40R3a1aqmRgpEwv9ppdY1qzmXEJeCSZ8NxQ&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.downloadhostbundles.com/c?x=hqOoQOoB0PXqu mkEENHS0sMd rVhPL4FFwnOtuja2I=&c=/fl8tSZSxPOjInykxE00jhwk596HdTY0qdRw7RYxoeI9rV Dt67OOEsYkYMWdFBsA8Ot5iGzFqldgNbrc7JToi2IXEMksOOeGUSoukijM6X4/PMWdV14dQ91fOYCQ97c&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.downloadhostbundles.com/c?x=jqKwZlRvXm5tih Z aAJ0n8A135Kp1CGgSr YGTlyUM=&c=S5c8UjF8RvRmcYoLPj9g4AcUZRIfsMarcwo1Ls138vR3KRFvrWD3vqrUS0EnSd/xZjjbUgIJJgo4kkHDPOumjsJeKwBw5q8qU3I5Eisa/EHeGvRXYeyCDqHFqUMYCgZQ&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.downloadhostbundles.com/c?x=2AEPB3ri3URuhpJP qfxrlX309I4iXuP6W2aEIUQPzQ=&c=fLAl k0szuHUfByxZ1f2 9ZNiXcJHTfOQoJlV46bpY6heaAEYMJn0Wvv0pu xnAKiLVtAnPG9KFBPkqO2J/hlXTSlvPW2TeeExz9IDm4s1EAuypSiqZCfeA5JzXl0CBV&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.downloadhostbundles.com/c?x=CE9rYPEuRSdKYRrkamgwwGxLQKlit5wRKYTCXw90j14=&c=qK0lMOhN4zuFtZx85YHYSP3JLYePNPIiAraQcwXhAfRnjmDEHXCxrRmMaj375tMRAAx2Jegka/x0kiRc6SQHELZTNGdVFr7lXsnnsT HwrvchJzkUHWSFArOnG5XfldS&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.downloadhostbundles.com/c?x=C62fltXPgcTxp96LfMi8RBHjStY8VAG/u2atBrF6zQ8=&c=XuTUYtSzjPVXHhl3fXqzPfmu/haNFh6JSpV4pK pWl1JxeNubVxFGd686vvDZIadW6/NaNB7KvDtxsnWInOAj/Qrxpel4GsJzXW8gU4gyIut5CXZ4Diou9X0Mopl2e1x&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.downloadhostbundles.com/c?x=GfL3OZ6SDfkL QCNZHj29 qDhjublaU1OG6cHxbGfeE=&c=TP3Ypl/2dEz8GV3HIdOq7NtdjqyZntUFyHjo19hp6abP3Y5Gw8KZlLQuVkSOKAdJvXgzkLYmlxLpWQL73V6YEeVaPm5WpKfeTq2mQEm2C1yslhub U8puRYFz0j6L d9&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.farmtourvault.com/c?x=HQfKZsGR2zdRaZ6Z4dkMA4bsvFLeYU531bfoKxCXZ1o=&c=hzp/QL9qnR9Bb whm/3vELDg32exAjN8hbkSAYN0KKXLrG4y6HmEnjAdyPG3f Walx1WLLwOT8fOaCbd586YMSVPiBKwDj21H/hQS9EsNxg194YDw58L13fZY38Q55sS&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.downloadhostbundles.com/c?x=ghocdTJef4DFq2bKWVkrN7JE39 BwnX0dfBPCOR6S74=&c=G5buuIdFiMrC3/x9hXsYm2O3wneIGb/aFshGeA8KvreHaoclhrjFoyFdszoY/vbmj59H7A2RhC/65nyjrtM c7Y6h2gJ1z7r CLhJcJr8W/l0Uz0ZBAHOLqbKaF9tmEg&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.farmtourvault.com/c?x=HgV56hF4bat2IPDdk x7 B5xZlelyWLDij2a5XJl6XY=&c=BKUDYn9j6gn1/Zz0I3mEQO8uotb2tMNAtYlLfE9NQ3YdydqhdHHlBmRWODh7Hq xcpAFdS5u4CE7QpF5bMQpcG/mP7Gwye2mDx7lLE0uyct8DSmYUfyQgX1nj6C1LcCq&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.farmtourvault.com/c?x=cCN69PmCXTFmz7U5 5wRDUkOCvHynfakDuSWXpMxmJg=&c=QEcX9ZkFhnXTOWrfjr t3lvEMTo/Tlw ERwRT5WGZuiuz42m8qhaa4AZTaxehHghHn5i6ssu3mSI67rThZANuyZuqL03mPP9TCoYLXGM9JWtDBwUXZ3M4t3qFG S4A5/&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.downloadhostbundles.com/c?x=wPrxeuqm8QizZsNGHurYVeoQQV60icSU5coVibqNh4E=&c=ewDDWH/KxP3Bsf c/a goAg5xSVzEbOg8uX4qf3mB1SNwBqSbPOfft4npRzJIDxxmsglhM lv0bFM3kEJGT8/sVTnB5e1bA/P2tBi4VtAHs9nxub3C2 pTz7hF7P1bU8&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.downloadhostbundles.com/c?x=lvxW sY668mGQyb3RE ItMPssRldJP/rWUru1EHRvF4=&c=44ydlAj/2po1c0PxD5AYA iAirHP6rwLXNuX6bKGerQP9AbRfYfGDX1icq1YvsO Qp0aBGpKNv2rcY3pkAtE8oUVU/XfVopDwH9L7qrVSuOJfJm4TOHSVGas5Iu6p6B8&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

Remove teamviewer setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.