home

teamviewer setup.exe

Internet

Criteria Quality (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application teamviewer setup.exe, “Internet Setup ” by Criteria Quality (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Web Application   (signed by Criteria Quality (Fried Cookie Ltd.))

Product:
Internet

Description:
Internet Setup

MD5:
8fbf3da043575ce5aa2923401b94908d

SHA-1:
8fc70124289f3fe38b694a79354312eecd59f9b5

SHA-256:
08d3e04682d37e9eb10bc651c137bf0615f39ca17f49867fca8b0dd8ce1415f3

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
11/5/2024 2:40:30 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.2.2.1

File size:
955.9 KB (978,832 bytes)

Product version:
5.4.7

Copyright:
Program web

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\teamviewer setup.exe

Digital Signature
Signed by:
Criteria Quality (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 8:21:34 AM

Valid to:
6/29/2016 8:39:55 AM

Subject:
CN=Criteria Quality (Fried Cookie Ltd.), O=Criteria Quality (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11216ABCF20419312093F809F0E003C850D7

File PE Metadata
Compilation timestamp:
6/19/1992 4:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:VHl0J+JinXu+fy6jFXsxRbvUyRzkDeQI+AMuuJVnsWbY:VFq+JWrjFIU+oDi+AwzbY

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9298

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file teamviewer setup.exe has been seen being distributed by the following 47 URLs.

http://www.hostsendpackage.com/c?x=H764KC1vxKAkoJnkt9 0H369fepQSH3mLtaNdshbYJ0=&c=M7i9tCyJK98XD9rWwYYwVH8lXMwvSFnn7LjQKaXZzFKAtoo7DhPdeN JUvTI2WYyIjtWDWjUY1xijvjWpbYNTF4rYeyyzmkfNUmNpudXZ7H0F lGyhufy9Fq/UQ/x/xs&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.cdnfilesandstorage2.com/c?x=rdMTgObpGR/01bm8axeMuHwapCWe8NhNK GKWkAWLTc=&c=sWUXyQpkCkQI8uV7IyUSldcFpKJwt9JfuZISKFWlWIVRAM2pBBGnArMqcX9fWb1xgjjt4cvmGom9FH9i5O1 c7bC1EbJWuH txvxEDpzCoabzZ6Gby8nXsESrvJU5xZ3&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.giftcapitalgrab.com/c?x=HNFluhQNf3KUawjXhxtkGOei0rPtYPV38/hjIo8mhU0=&c=bA1E86zX6tFUVXo5cBeR7slMH73yx7zh5gynQ 3PUDINhJ4jAwaJTim8aUR5e5vYMB8/v2AimtjbJXm4JYARsKG/hi4VAEvAz7pvYra3XlGUZLmc4 K3cRhXsmEVpJZi&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=YyPAXZo2ibwGFHA7nxKaNxUgzoxuV7hZxRFjhlwUZ1c=&c=CWH3FLDGdg7vnFwZCO7otNJEJhnSW5zWCZYr3krMnPdEU20KbdzR4jeyiJuJ9qWniIljGetDIoSNqjdysoH6Fr1MRD0qHqNCEYSjoBeFx1FGhk9p28AQX7ThIDQOP03o&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=7cUlPox4NSMWKIYZ0hORpX8jLkxFZL6sxjlX9OZdmg8=&c=sI/2zZyTryrgI6 rGH5X3xy 7TTAom6lzuxJwNv9gkzUijOuJGnXPDMW/tc VBMzClB/B1YH6AJI46VMVAmwSl Ky4PP3xRRVkyFC48QNKoItKp3oI5b8SRfUf3iMFul&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=mFsCAqq3LUVqEejhrG6NfhCA9N AktLiy eQ4fAx6jM=&c=HpXKlHuNePtMhg7QfHbUqZWXccSB26bpOikt0hcwt3 kktPF V93Xthjc1nCWaCJ5MckMdmJoOZ/OXGuzVpDtK56H0/ILcM MVNjQdS7ZTxPbrvsWILSs8tA9sEbZkZR&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=o9ztoBhd0CHYA z0RAAqC35rEEJ5Wf F76dY98v49JM=&c=CKbgZjcAYKGOApUE8XVmKJsEDo6BoMEWFSUQnblRjPSKTOyrsdoFcfzR81LYeiZhpjftZDn H LdNnFwBbhNfyIkVxcQNk06WCXa18B83OuBKl5zbGJdbpikYhy5NBTC&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=NORA/2gmflHYdSfDIiGYOrUxd1bRK1t00mRq4aO6a3E=&c=7lhPozmjbxf6945KJZ8eOHxrGsz5As6GLhRS7N3POgaVh8vrejWRx4BAYsOQnpqwVvHCuo7ikPqHLlLF/O/V5Q8jLtqeNoeK1nF/lz78mU0h9SZGxeGgIq/ /16R2YYp&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=mApoP197bB2M7dHWn3FQ2gEtK2FvQ1onB9mV4E2Mx80=&c=KXbLww/XuovB5l7Ycdo1jIcHbrWOa8DZamJg3dW9W0Y8Iwdp54RfBAtS9fSTAkWheTbgJSVvZCbYEARj4JgSslxeMnMLqVuQiaxXYWqGCV/cNOyQVdMW7DYxCnZYXViJ&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=UI3lglsW87bQXSqJNr6ZOIieYiEHvSe9VWZphBbJWvM=&c=Hy7Z//2W8bMeMqxDVTUE41mFOiP2zM4Jd3ofRPafeXfHBIyEeAOCzZyyY2WzcRfEWp5brOo9knjUN2qPOL8nCrNxLY/3z8j9vMaIyXQGxer0Pdez1zyxKHp0nyUCAO5m&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=TTYUcUvg/Mc1c/1n2bEaMLCLSOdNJNHlawN30FZvJ3I=&c=gIHWGKy0FAusu9T/g3VlFmvqX8uyQsaAwSMAHzLXsCcW Sycpz8L/rcz0X3/a4tahUeOXsTr8HpShXDMP4eA9S8r OeR95qbEdMi dYIfBVYKoggcGHzGBGi9DRhriUT&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=hlIx05MkaMD33IB6nKHO8Q/yw3DuzcW07Vsb3eiI3zs=&c=z4qKVycrU4uvpr3ZQNlXIKToI3IxnwdFu2gjmuGZwGC7iGFddI5JrGDM iTJRljW8 WZsVIbI/0QJ5 G4M8xkZJ2gMJGl9c8YK0LuYTRPR9S2q3fDHLTxSldvBWfjYw0&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=BDYKpgkp08VYfB0a4xooEFwPIT yDc5A463QKmlO6NM=&c=suzP68kbMdBc53mk7jZaOQ8GnFXrUzvC8ql9oMucf5VbuS0B8 a75c3IzG5MeLvaJaO7b5tl4G0nmln9h3JfFCjaviQZEMbvS7A kUwA15rycTJnIKQFjN2VWdXfsg8I&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=o0tdl4XoRIr5z5MajFj9zbek1LBkG2kFNur9s91qebQ=&c=LBNHIda ZzvqRL4PglKD DlooQKckCL4OGATu/sVjxTYDcRaZKsWI4J6XMOp9e2IeRJYA5WZBvmSaZesDx4byV/uVeXNyIynFdmHhxqnMlRu0p0QvPmtT5aymDyCIteq&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.giftcapitalgrab.com/c?x=cvlXG6lYq7ovzqsomqNDs5R0QIHe1p4d0xiU j7dD6E=&c=2kri4VIK KC WhCBBEA80fL7ClNaHFas0JSL2GxOyARpJAVbuE0i9/mLoXtxtXh9ZXSaAHYMQLPybga4gyrdzm7dPCpTayiOYbom jmRxNVNTKvf5ViOdoDVkY8lWvfR&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.giftcapitalgrab.com/c?x=idsn6F9o4oi0LYNBkT9hAJvLsTvI9hQ7xuTpbpIzCxU=&c=g e1qdP1dlYBmNrpl6orXeh388k3w6TVXd9 oDmE7IKfVhtlJGVaZRP7ovoOjGRw3dYZ4Zwr1RghGU3O2nL1Tss BhNwo6TmC0zD55Ij2b1jaLNWhPBvyvmh15FIQ7Lx&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=uP9A5Z2yYiUk6MJgHEmzpEUbyxuJge xvtCUu7fxK8o=&c=QKXTguoW/fILIczjovilwQyofl8BvK8ighCFZKIZCaQkPVgLeIQfs7vT713Y5AoNGToGjNY5F7y7kp9FZF 2KzRNRW5131svYTYMrDDSQphe0PTs lQ4rXx3SAyoQoj3&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=KbpQmxLJCcLEDh3B THmojcrWAcAk9CpLw9WLvMUC5c=&c=ziZDRNgzmNhq/xMk T EnGDpB75 HwV0uhMo1pRY65ZtRm9UjN9fhUTm7iwijHHeW1GFA8lRaB0fNtdKkkl0YO/m/gKSGwAcLlYIa1JtiQhcKVxKz 6XXlV13utlzNNj&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=xPEy90hdOkOYuwEiHSWSeS5dZBooRdeDLhYvNEheuQA=&c=gb 9VL1u9ve/kOjaYCWSbP5xC70culmSDlOrvxTEaQM1Hu/9Hwal2G1bAp2UB0c0RIb9ZjyTqB0AwZ3SnclMMClq/74DEuusXxChfMALyAXD2ZgtLSVKgnD/0d15kE2D&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=v/XNDutkQs7vPcmpiWV9hexibe/535V0iy4ThQsHslI=&c=GdQfV5FvW2lRVIBNlbDnHHoqatCA5Td4QRH90UScs157UOi3/eaxGL1byMTPelwCrvuD4HMsezb1TUOoVS 4o4 cNs0q9kO n/YnGZtSp/Z4GQZLMFLOKcnqsxYDOjpY&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=ETRs54JFKe2oWVdr4Ex8cyCrQOYOaS7Apmdcx4RinVc=&c=WiJWlNNwDUZuCJPaw5nZFPc j9/FL1TnizIswwQ4cX/1W8oFlqxF/mh/VqDkJGhfv6iik9hLik9X3BN4t4JF0M1mtcFuv0QnPzmTuqySS/sf4yLyW2mIDhaOChmnPvKT&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=31XP2JGk4N4FOaF7Rj9Mg P5GXCI37s9K1//EisFOAk=&c=L3qCMofz9pLrrFzL98JONZpDDLqtgI0Y4MsQ4EahjAvF0BuYS Cjnkg6W9VWF4YyOsOJgGCj/UWI9SoMw6RyScNj1I9NxygNtxY lL/EcxRmvyLmkfk50ZYYCGlggkLN&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=0lsq ZAml3pvOHYFWxfcpvZ5AOPCfRzTk3G22fE7tJ0=&c= 1hZTCOcmQzt1qk0T5jSN6xO9EcFLjxtvivQlnQ5q69rZq 5moogl8Ez4yjDEDrQoXuEoOJ8rm48MnIIcZEAurAFq0KcdjmIRC525x/lfl0x4mUIQQNBvkaY2di2/wy &downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=JHI3uJQMyRWvppmLdqaS79JhS8sMp0Nq4xnKhrwPWTU=&c=ZY7xRR8sp2xAfgJ 3h1Lt2rvHOeVWJJEJ56rNwCgMqd4JkpUzEG/Rkw4jYBcLy86gV8/cpwie6Oi46S0NFDrzYotYHw7zohZYiS4BAWdSAwSUIJWcQOze3AIXAxT5Abv&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=sf4p32TN F2E2FEz7 MqvdSNdmjuq d2H/OeXZESq3o=&c=aIijuiJ8rR1vFqEMfo1MNzyQsqiYSsOWBh6GlEgY0EIEaaDFhweq2BTHmPTgwumtj2/CtgZw4Rk0BKf8jDb8/QwOvu6jwFHigCl3GsB93uUrS/9OAkEWHJBWjsGK1Zz &downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=8/jrlqOs1BQNQkSA1iznl57Tz8c5BejGfmp5e2D2sqM=&c=y89ykGDbrUcVX rOHmaPyloDzKE0R/RpYbvAeLgsLLc3oi1XC7nbwkzu1YbwH2zpgt6GhxbRsc1/62P63g5qKnX NE3CoaFSJ0f0SKDb9oqCmjqq37pN0yB9IkZkWm9L&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=OB Z uNWrjhbyxl5anEXO7xLw5Z9aUOTBp5O3esBP64=&c=TLPyPNa6FGNXeU4gpKEdUQud1m2o4xYI/ccOofAdL7S0Ei3eXmolOvKbHChFps741PjXhDzamSzNriRk2slSek7zWyf6AbHI5D2BoDVfltai9nZdykQBvihf4OlgRDia&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=Z3GXIdrTKUtRxr32gVHCZX7vvBuBtfZJ8lxbd0KibiY=&c=8J4eHAyvFi 0O9s C ZruQZuHDmnZ9mvUhejg6u1qdFpdjucS 82dGwCOIsZJa 8N6o3Yv15GyKxNQr5SwmEAApmhlNKNHV4BGjTONWRkbpYBzVb4W59uZqutbEFDzQ/&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=CwBBt1b1r3/3yV9626pTd/x3UwUshtfrUB7FS SXkvA=&c=kzTFKzBICr0a0tM26jfjXVC REO8nXUxsL8t3jxc nCRW5eGyPTwHb7cbHcstP5OieS1baZVHtXHs9381/J8cS9uaabDthuTCRxSeOWBZDkS4GObI16pJqLefLHaIK5C&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.hostsendpackage.com/c?x=2MzL4EachXUfML2AN dA2k2SCz1DnCv Xw0OcWe ScI=&c=UgzVUZo MqQVfVIjo5D3rB8KU6XxIAnZ/JCW5v0qmULIJ9KlpCRR6Rk7Fhyqr8hhVLp7b5dWuwKUhB8eUYYTIuvVnZ6IXsXjT5wv8n0X40zJTGypFQsqZ/oJ88hgII/1&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

Latest 30 of 47 download URLs

Remove teamviewer setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.