home

teamviewer setup.exe

Getetese

FlashFunnel (New Media Holdings Ltd)

The application teamviewer setup.exe, “Getetese Setup ” by FlashFunnel (New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. It is also typically executed from an Internet Explorer cache folder. The file has been seen being downloaded from www.capitalvaultsbits.com and multiple other hosts.
Publisher:
Baheb   (signed by FlashFunnel (New Media Holdings Ltd))

Product:
Getetese

Description:
Getetese Setup

Version:
3.4.1.3

MD5:
6cd82a4a0db5ed85cff5f044787abcfc

SHA-1:
75b9ef8eaa5cfcc664c699c109626b5d913a377a

SHA-256:
4c550e6914d16be0aed1568b0c707b6998d1c03515c7f05c62c52c2ec089ad4f

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
1/13/2025 4:10:24 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.NewMedia.NMH.Bundler (M)
16.4.15.3

File size:
969.8 KB (993,040 bytes)

Product version:
1.7.7

Copyright:
Lite Fast

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\teamviewer setup.exe

Digital Signature
Signed by:
FlashFunnel (New Media Holdings Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 5:30:20 AM

Valid to:
6/1/2016 8:03:11 AM

Subject:
CN=FlashFunnel (New Media Holdings Ltd), O=FlashFunnel (New Media Holdings Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121DF62995B705C263C7C1BB644682A9A73

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:tQMaHtCHqOdwKlKtejxpBs4NIcx1Kz3c/iePW5ITSG/jJGvJVOivKL+SNkihszMK:tQMStCfdqoZs4NIciuMg/EvSiiCMa

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9321

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file teamviewer setup.exe has been seen being distributed by the following 22 URLs.

http://www.capitalvaultsbits.com/c?x=CzDT1AM4lUGVCLF0W/3D lzf2caRqtt4 r oxDZE8cA=&c=VxwNlMsIvTYN/tju6W8v1b5gcQ6oo1jp8FeWrp8exVCeX GVtTe7 L/nEFJR GTYxloCUyevLSFKF9UjBdUQZbKYNuSxDRUsZkHG UtWYBFT55IoI XpFAgLxTmfSLsm&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

http://www.capitalvaultsbits.com/c?x=h41LsEbylTmZ OsA/4V7GRLqWV8u62noMZ1LY0KcWyM=&c=WyweYT2v397i5 zdowSeaMFiplxejGJqUfpxePFLWFmafKVKhmNjUSBAQozI4dbRKdZlReNZ431SYc55dT6qolYWakq8yYR8m AwuANdYTTOZglgrBCS 6S4MZnLqIl&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

http://www.capitalvaultsbits.com/c?x=CX/BWgkuY7l8nON8WJj4jJxNNXTp0w8Idu7v7JgWZQU=&c=MpBfYU VqJcWDSs4dqwSfIUGRA WgADora1BdlEdD/f2o3IW0d8fpwt2elVItQNMFBv5D6DqJH076LHNDT oxS8fCPxDyFnnJCcXtXO1t9ZVD4eEoIfvhahrvQ/vBqd&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

http://www.capitalvaultsbits.com/c?x=a NNU/ 3Q2BLtKBK4E95h6kkA04gkaQCAQ8dsQBbdqU=&c=8U4dC4sIm2MprGisRux agjrda4Wcy47rcOMm ndHTc QWOXBlEdOuYxHAoloiXc8riZto5Fh39ghi8vCef2uGXBUfCMXcEGF/TzBeNuK dRG5mGbeU63 EamUS8lHv&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

http://www.capitalvaultsbits.com/c?x=zLqpj/qZjMHTlgGe4Q5L55jv5yN48NCOOz2dJdBoSS4=&c=TJM1lD9O9NwPOFEIZmHWpSrT32vzXcrfO7TGwPzS5N FQiAMJBGIJ4/pU/gC6A5/dDiwNCednBuok02KJzxTh60Z4clUlaZ llIv/KyHpaQqaGB1Dd6RRCOoTix5LusZ&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

http://www.filebitscentral.com/c?x=Yi4aTMy13ucI5SO6UQoLRBeiK9WMQWj/JCj2XmXbeJo=&c=tSPogVH5zSr0NWRvDySo/0QDWS30UgU q5Mn/ZwY3GzUIo6IbpGQ2 VHbMYbdXKQ//WUJnbJ4JWIsaj6O8bCZF8x5AXcchP B1E5s2R3o6igDRx5PJJ2KSTZKUvEkHXp&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

http://www.capitalvaultsbits.com/c?x=Fl9iErsOWffX zucsKqYCCIvUQBD39rVRRY1xWmqnPs=&c=NYE3 ILnw3nZyMqJLg8M6SyZ JUWhORVUYlEGlMCJLtR vCJt2x5b3tYhssaBWIrBipeL8vOb4BUqt5miUW5oX4Q BIOwi7McUKddF0rnd1VdlV6YCf3cdvU7jEz/wRU&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

http://www.capitalvaultsbits.com/c?x=U5oa0u5yHsM8grdgG/1MpW3MdQMDbbMwmScSCFRYo0M=&c=PcPjDrr5wgL8IE/hGRKJaPmo48b/qYwt8tX8DiobwOsqDfndEow16sV5TWZ4W9JUFoC2We1whs/tOia6MZHc/ERBGIDuttftYX5MYgsQVQ65/KXYpDH0N96KzkADHi2J&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

http://www.capitalvaultsbits.com/c?x=yJSThVApbEqvbhJUTb2BSdHN9YjLiJTVWy0634mfzPM=&c=wNz8hmo7FphN3OY/nDm5JzEOE p8mFDU3Ph7mUkX/mH7t6m4jAjK8gQVSRhAsHqDum1wKTRJpTklYNFmvnVZhkGmuiMxuVzdG0o1JKCgF1rkHN59/QulQ7lNjX4R 7v&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

http://www.capitalvaultsbits.com/c?x=U7B2wMMw7bt0CpwZm4HBJMAoIB4qIvLCTgxfaxG5reo=&c=SZ0Hcy/spfIn9l JPkLMYI aPaAxhHCcPc6nrYh0kfnXQ2FWX6tIrlzMeoXzztSdLuYPxdMX44RoKeboEQbMlA6eAhISrmuGOxFbjw2IPfwF/VKaRDYxDHOqAQyuMX6H&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

http://www.capitalvaultsbits.com/c?x=GaH5cW0CDFYdtfROqvM84NoZXF2iiGHOdUZeppGMur4=&c=cGiG/4yCFNq8o5llUx56g0uIX2lsri29hVU4X0nkBdhU8NbkxKNzy/qMudU7IS7hf/XNQvslO2ieu8GmzRK3WEUFGHJ5nMjN/ QtDiqnMstaTgI2v1CphJ8XGQqanBRV&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

http://www.capitalvaultsbits.com/c?x=T9BT0KMXmnimC0l bRyUoJ8 hVvlL/NdPnUMA D4g w=&c=YjidLSACWEfQc27LmfQG9i6lBq8tYV6 gw4ScjPOKhQp8eX9uqRxuWgoih47ziKb 3j8LMZ 6rTVeKFuPucBKeE4uhEONuZYnQDuWXkYR8xxPu YvxENXYs0ZzTMumHc&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

http://www.capitalvaultsbits.com/c?x=tISiz7e5s/6ztN3JHpj6FVw59NdX4sV39HijWWrN8go=&c=7cheMkUfjgdxntzkvqe eY2dFzRgVQN7 qVJPKx9MhQMQe2CeC4lRpCYmMNgwvie5XXQFg0amatinWACdlrYp7a s71uRt2nOSv1/Kqf6N79SGpX3b3IftGI2Dmgxvy5&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

http://www.capitalvaultsbits.com/c?x=PgjyIBS9wetpRkOa31SO43qLvWn4JJrFT1wXP/EFzN0=&c=5niKJYUY7X4URd1Td9 Em7YZLy NcaTc9W998PUdyBGLWtc3avyQpF6b3MmdQEhIhA2NGsAjcZN9nzQNifOXcF4fHOxmhu/WdnClm6tKbEjxD0uOJOR1rQ5Lm5B7eHuJ&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

http://www.capitalvaultsbits.com/c?x=OiKACRih 14eiHdDc4jewusOhkDlj1K na0fYckS3 w=&c=jolxfAAn5X1kX0wKXD5 zHw PmZm6/egkgQq vfKRS8WLQxcXkFrPGUZzAbj44Piywt EOuY3XfDY9EtjCpjcapowIvPBk9g0SNQDHSj6HqnexopXsDjKOmvyhn/akol&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

http://www.capitalvaultsbits.com/c?x=kLt9lJVrnJ6B E6exmLqyHBBAawMrpDdP1WuOfJKgk8=&c=JuHXG8vW9N9nkWNJB PcM4DjACLdjQXxjo iE1xcSI8nhDE6ddTFK64xeWdg41mGWKaT0mazkNHmCNPTa7j/bf3ufHfoXExeaCl9CwGQUInsOMk10DAhCEyLeXlPaMg7&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

http://www.filebitscentral.com/c?x=0IY55nEIOFRPTTbPzjOtujInQwAXSGVFBS4 EAPwH08=&c=QZMYgfnpEELGHGdbZFN3cDEcwrmxsWrZ8lnyaVwsQk6lzDH7BIszGs561 KIqwziEpq3CMXW/lBqSeDPVHjZmfsLVGAiIOAV9Cormc6QeFXGR5/rW dB/kpipDJ7q9HV&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

http://www.capitalvaultsbits.com/c?x=06STHoauxEbBAQBK CykT5l2mo27xsVz 7Tj8OMl U0=&c=WtRsKydcJcCKIrYUBSa0txhiWu2TBBVqqc47aTTcgCJkUymgyS/UiRwWZZ7x7TxHqNhzp 66j9iueNltXbSRVJFvwjpoD6d9YIaM/G7i7nOL8TeCP9IHSAM5HMtZv6bs&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

http://www.capitalvaultsbits.com/c?x=NswDTMbNosEUtM/TCnnBRqct1eDQsp2gIcwtP060oeQ=&c=gxLFrycgBengRH0yZMDvO/HuoTkTkMVwtboUBGtDpnMcydm1Dl5h010o0jGXkWwpVwuKJy5QSasvdSgIw4eWpSu7Pi3xjza3kPc0eMvq9JGvH0YVXd8OO8mLJlIYhW1q&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

http://www.todaysendsoftware.com/c?x=qD4hViuAid1kJ0njW3fJW5ai3BpSP8qFDqEnfibvWIU=&c=62tisWG TaSmWSkrMg3yXg7ohX hRqiSPjBtAx/2yFrU6a Zu0IzVukMXL8HsrgDiAkQQ408Hi7o/qX3O6vTEVVNgxFbQAL8jL7AwzxbkDPwDmHiq35sqn2zo9afDGsj&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

http://www.capitalvaultsbits.com/c?x=oIB5ILfhQJkxb7Bhbh0NLYfFmpUwP81x/d0yBwe0Sxc=&c=niGacffckNfGqyBly02mF dSz18OTw6lJrJYOKk9/TeLWBNEjAzPzitVJtPz3TD/Rs7JVXlm4jjCBltaLFtdAbFijWphBiLMl/c0BRg4dJDBQFjdQ6vkyGk3dxAMTA/a&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

http://www.filebitscentral.com/c?x=dJg8uCzeagKpoNgkH/RtxE97KbUbaatsk 5EId7hPzs=&c=0Sm3iFLL10GPM7NbezMIF5i2fTaJ7IwM5N2qSDvDIoUPGQoAQ4bHPRLi0kzXbz Gv7 ub0DhxB0L12FMC7db3p6/nplxQsp4lnnrCCMgYTRBE R5sp627dtBRnFloesX&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/.../download.php

Remove teamviewer setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.