home

teamviewer setup.exe

Installer

Setup Quality (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application teamviewer setup.exe, “Installer Setup ” by Setup Quality (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Setup Quality (Fried Cookie Ltd.)  (signed and verified)

Product:
Installer

Description:
Installer Setup

Version:
2.0.3.3

MD5:
f086cfed1689161b7ab333c18654f787

SHA-1:
930f720bb0df1ffac62465085bf40131f19e8d9e

SHA-256:
8bd7a6c49470ff1ff8f9c23aba22825d078d484c0cc964eb83153e0e70aa1fec

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/29/2024 3:49:46 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.1.30.6

File size:
960.3 KB (983,368 bytes)

Product version:
3.0.2

Copyright:
Web program

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\teamviewer setup.exe

Digital Signature
Signed by:
Setup Quality (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 8:23:08 AM

Valid to:
6/29/2016 9:32:29 AM

Subject:
CN=Setup Quality (Fried Cookie Ltd.), O=Setup Quality (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121734671448CB8540659135FEB5A8E8573

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:+miOa0eOFSiIgFA9q0QgiFg/ORnYhoBXa+R6cPiFjT:+HaexiIRqFgTONYh6KcyV

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.9307

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file teamviewer setup.exe has been seen being distributed by the following 23 URLs.

http://www.apptowerstag.com/c?x=RWtIb0nLLPLP4O3zge0pficUuRXFMW506Ui8eAigBws=&c=m45qWmthzk/qcJVAcaNJ3DfeqO h71pjXR36/lYJYwQNEyR/rl9hjdLGALQ8GC2wumUp QlrSX4cHHbvAyuIdZAxw8lEVr4NsbkzwPJmpx82163LBdvcT8PLE1Gex72o&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.bitsranchcontent.com/c?x=317HlsIFqn7KdlmIeR2aqht1LwIFEmP37uD9t9yeii4=&c=UD/CtnfGk3l3woR40zILgBnTaMLVsuhNB 44RfZC2E9Mk YUyNtiE7CXIiCHqlVkd4KwMadxCRm6Z9HzfmjKhcXRYGHzZHPqSHeoAXW DLvKVSgwDxLhfkkw7TuxrHg3&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.contentbestsend.com/c?x=b3zD4h7bQ0l0DgAhv1yUDpbZhB9bqZRgQGZhWRdMtBc=&c=00m7SwSc83L7/dQx3k0KrbVMAGvaOv1m6eyA4goBPMtuA1YD3CnBNckZvWQmYuLG0Qt0dK6wpfAkCSr5uol7o8t60a2qctaG3l9XXmg1VIyCTTVKishbYyfGxLvVYIjk&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.giftchucklehead.com/c?x=ZApZ/pJhblDwqrHzP1NMGBA4m/UZjUsK3rZxOpPW1PI=&c=pFiocs4SlOqw2wNMiIrHSFEojylGasSt6Do2BwgDruCFw2JIn8HkxSHFBW3sn6 ssFETFXrZIEot DDVFOH/IICH8E1N7o83iMg3 196WgP9zo5DqgcUN/KcZnCggTZ5&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.contentbestsend.com/c?x=sb6d4s6Q3wmHbmN15j8V 7T2Q6Sv0wRuvI8yZAz v1Y=&c=GJtklO68dagVTcguTw2JmI5wIltaP1arMvXDtz37s5AkenJYz9ceeVImwfrWd8i83PQCsWJLFrtYIlivSIJABFsKsYgbGsBubeQpsTZYrjUDYomAm29o2GKg0u61BuEM&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.laboratoryfactorygift.com/c?x=FJgrLhf2q3PMH6/6 aSPfir0Da1ygxo3ta hrcU Kyg=&c=Jtn08ejFbfAexoz76VynKLp9lv T2bueHJkXofsajYUERFZH01YuEvUUgiFP 8YYldpf vFJsDgzKmJZXFd65G1Z41InlVojOf4kGl3Hp8F0kfG/20pTkuuUAiiOhqRL&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.tagcapitalfactory.com/c?x=miIw2LtOXnVuRAT374cbS92iu Lhk7xS1M9lsnuuhDQ=&c=SLdk5DLWqklPP0AZzrjmQRYi5OI6 oCTuWvWKFMCXTUXBE2MWUvFq5dRUcDr56huQLSlJH8VZShr6hgy93F0xKrC 06T38WD4fcH3fc1jPb5pVxku0/6XC2f3fzVZLqY&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.laboratoryfactorygift.com/c?x=SlJMqOesaYT0ueRaqZ1rCjL lFqftZq0CHf1KySWmhY=&c=oK0SIFt443lyztpicPoofZy 9XA JbxZv11NaKNzyp3sBX AkGyfwm/Ndn2igzfp7kEYKUzifBONVUtLMLm6E2qZrJELFz0YqecBY3graVafhFTPPRSMZYE5j91/2bN5&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.contentbestsend.com/c?x=hWkiEH3xjo56fi/zsuPAP8w7vkCm/MFH91i wUPfZnY=&c=hzLPJEolKDJ5ntdhOGseKHtpruZlhKLp3zVj0OQqVGy6m/T99Ev7frQEfVeo Lr/gzyQDn8soSNEWA3sPwa4UCPbO9g5AkacvKThKyBbcyLtKYyVV3HL98PL8hX8ratj&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.contentbestsend.com/c?x=naxF2nPUm5IuBUGWgb0rZ7l LHd6If6dUJLok3Y1Jiw=&c=txwTzxIPEWHhIl6sInJeTqMHv 0J gB2UNm0tuQDnzpmcVXvlvunPI58aWeIqPq/PJaeipyKB4EICLjFItnjtTZdkMyNWAFBuITaloL ha8ZbqDyiFodIZlwgFkAdzv&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.bitsranchcontent.com/c?x=HXBfCJK6IrOnxugeoBn30y/bkqr BCoap5zfdQWxw90=&c=Zab0XHf339ZFGcwf4/0rM0qwRbB0M/1Hmoc5EL4nki1g8d4t4lxxbbbNNSPh2Etg96oYhz5x9 1MXd9veVk X1M2NlX/MyBiztKwp0fnlWXjLg2FCxCzRk5n6p8TPpVa&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.laboratoryfactorygift.com/c?x=V7Hs0jea9LmVCcBBnT4 3EkLknvW/hil HBe1UjaSTg=&c=wyE78yMOXqMXtPr3AYUsE6N3J2Evf/P1RMf2mZtL/fvPk nvGOwq0ZymTyW JQvG7lBpPTWda/99DkmrH1p1DPWrn0VZwBB0/OJsqDDZvCpZE6EV9rMETDjXPVye5gfc&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.laboratoryfactorygift.com/c?x=mXLGo8o866DhjZ5KK900C JKNAeiaFd/8EkZgntpA18=&c=LTe J1NzL /pIrWvVCnJ2nhMxwD/jYtryfWdZhw39wSsGmQwHD6d1zXh a0drtELNFP56ABKGY t091YFUctF3hxTEN194OhQZiFkOEEmhYqPRp0A1s7fBIKFNJSjjOt&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.laboratoryfactorygift.com/c?x=qwzNEYX7Nd96q6CgENS PbxrYQrTHYvCtZ0q5H FdhI=&c=z9KcvcUfjEwgVCebYVveDbAkO5EP37V9S Pb0c1GBeDpRG3X jAhKtmLrKnlsOBl04DouljkkhAl0WgrNhP/N5u0T MgMKjaPPcfiNBMkqFpcUC6Ohy0Sv/RygXyU2Ry&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.apptowerstag.com/c?x=jT8nchHQ7RYUmpgjhP BKmM/hdlC9E/iRBeSFbtYpyA=&c=1g8XgVid2EGe48iqum9phCx9jPiAOs6l l0w5CBsKNi51czFT50lsPyqotoZbMgEemyKqXFPMG5uwzziRUCcMrFsjnxyoXWv2dpS3rb9AhG/BxxrZ/QWhhwiOGUXj0FH&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.bitsranchcontent.com/c?x=QmwmF/XMgjI281f23q3xhRXEcYXnYyMxJXUp6Xn76lA=&c=FxOySxXxei5WFQ4QA94eYZqenFuC1GB3dcVtEKNHHfbJEc0A9NOUgp1VPv7jpDEyyk45nkA76hFXx7cajoFheO8GazAyfrgUzAH6UKDH7/4iO3N4/8iAzMJIUmYcmNhz&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.giftchucklehead.com/c?x=gByhoHV3TBMXOz5t46K9gOdzE80dsayyvvbZtNJTzaA=&c=4w6BWUT/fqWZghIpMHn1G37ZeYjTAHm9KE02D/YXINGIkyMIruCFM1mfu 6VWbcJ0wzz6j Jcjc61/6LQ0iXJSK42XKeu4dUdTIsUdP6HPfkjtedNrELu6OcgLpj0IA4&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.apptowerstag.com/c?x=MXnT2qClgrlA7bzqhJCCJbMydM21404QgmIpMx0Kt64=&c=B6Cmkhp69Jxu6u1zbe53aUDkHNVLDxIgxiC5jEIuOh0KLPuY DxRP7QjetWbz2nVK/PDPcmH6MFUC2hkVee07xU5VNR9csv nlr8355lrRr KDM 7 MLAH77j8r07kO4&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.apptowerstag.com/c?x=Uu/FI0cp5x62e4Q9pPoSrkycyIHYybbuDx7lVkSNB7Q=&c=aL8PbDQ7taBxGHciWUXYxNZDdWZa/bhh5JP/BDR1Csf0PA3/xSq/BGXvOPB1Bhrh8lwdy0Mmu2SEM/w5WBOzF26FEaO1BsavthMwpSHxJ5yBzGF8x75wRsV5ziNvTL2u&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.bitslaboratorynow.com/c?x=gs6zyF4MmjVz0dogUMAhO5nDmSNWpAaQJIxHc3FmtBE=&c=bEXYerpiKkPqeKP3Sow7pZDLA4fKYdneW8S14xzIAkRGSmr6svXVHkhQpWvO5wBb gZHQVnFveuz0z wWs7y3YoF8sBzO14BRZr/YhxqXtiot5ixUTVPKGG8 lpKyG/&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.laboratoryfactorygift.com/c?x=QZqP2ImY0fwDx0OZB89lGPT7rj6YpFviQ1s/d/hLK5E=&c=GTEsa2kwW4ohrEoBJ5I9sD/HH6rs 9YeHE5715pHcTAIqgxrJ61Gm2Qn6ModAIVWMzrV9udj3bDFF6zWRg24WsYY0K5CVK2Lw6/thCpNRGuAfrYIvfoi6fFIEVtpCv /&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.apptowerstag.com/c?x=dfXK6h80/sGZcmVOeYk15ab0bWDKc/Oa jnlNkW7y8M=&c=AeQuGGjipZOxfX7BhDZFv3iLtMzNxplJ8EF5yNhSRRKDpktMexMhBDuDK0E2tSu2yzPoCj9ypetunCwl2hPfjbggUjyXM0JQ2M7o wfkULKZdaXt6bLYGSTjW0/F3bVY&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.bitslaboratorynow.com/c?x=ygfECNjDu9j5JYxwbOi8MLgQqY1PHDW265 RgzZpFho=&c=YQxoTMCkWfq2h45Ea/Y9gbnySF9ZS YIwU5jRvl9XJmS/Izk4xFvW3borQ6siJp2OiQSLF1BAAa8JXQSI0mDZFRKxSotQdcDuNWP7BBOca89sd3dmt50gk5tUMQgCphl&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

Remove teamviewer setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.