home

teamviewer setup.exe

Lacuf

InstallFlash (Fried Cookie Ltd)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application teamviewer setup.exe, “Lacuf Setup ” by InstallFlash (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Robu   (signed by InstallFlash (Fried Cookie Ltd))

Product:
Lacuf

Description:
Lacuf Setup

Version:
3.8.4.3

MD5:
bfe4047d08de72a4ef0e3a458c9201cd

SHA-1:
bc7685238f6f8c40f80cbad975635aa2b3681f07

SHA-256:
c7d47b7f1ae308c1ac5669845511a3c9a121b493bf6bce73e47a4a3dcc020be7

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/1/2024 8:38:54 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.FC.Installer (M)
16.3.1.7

File size:
1.1 MB (1,120,352 bytes)

Product version:
2.4.5

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\teamviewer setup.exe

Digital Signature
Signed by:
InstallFlash (Fried Cookie Ltd)

Authority:
GlobalSign nv-sa

Valid from:
12/17/2015 6:48:16 PM

Valid to:
6/2/2016 8:54:43 PM

Subject:
CN=InstallFlash (Fried Cookie Ltd), O=InstallFlash (Fried Cookie Ltd), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121ACE394F39EFB26D753579A412465CB79

File PE Metadata
Compilation timestamp:
6/20/1992 3:52:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:b5pydzYpRU332AMsh7+m+JeFxOAgJFiG4C3/YuFA8TPu5RY5:bDazYmmEA+xOtFiG4C3DFyRY5

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.8700

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file teamviewer setup.exe has been seen being distributed by the following 21 URLs.

http://www.downloadsbestbundles.com/c?x=KNaUdf4brQSe51QgMdzyXxJ3XB3/jA53YLqvMpwSBNc=&c=c uUSXHVMWKdgvlFkFckgGMT/KTVp0F6S2NrVThYo3eY3RGr2uqqPSHEeDkZQgYfuItslTYdLJ1Wz8C7GgJCgc7ulkFNHJqW9Ay06FcZrU2jBkPLwyVLGGBPS5pcenWL&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.packageflashcurrent.com/c?x=cvFYM5VrN 3crFxDkMmU0AnHtKpNZBZzFXHFfBoXCOA=&c=Mc0U Pg 1hxqrY58TPhu/cSF4pRA8qSI2B5dQzBxzAzXdETxL2l4XxGHVS74qirXtfOHr0WXKn31ZEvtk8ZfZ44TXME54KUexQM9TQL5BReRPsSnaT 7OqKXEdkzQ93G&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.downloadsbestbundles.com/c?x=kCRbiCE5V03I3oCdHPCsmPgYa8wr8PWmpfnNJVmL5bk=&c=3ox7mNsjJR6y3CDLa zLiXq9QMTSiT7ZHtIQ5Hj/FZcZ/K8yl8kwjiaSe5M3/KTzIX wZTnUGOiMt ggun46piHcPX822NOKyVvtmUrsS/lH38mgg/b4zNFkznWY9s7C&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.packageflashcurrent.com/c?x=LjJCY/AFqd2dW 518YNVDVenwuXZu8aHbXgLWNAcdac=&c=yWKl6Xr6zuUAq55gp6Z2K71kXUMrDx2KAK pMcNrxWKu5/QsmrzVbbSY9GWWSu fF2pwbFfCQY28NE9dOvkXiLgb3atw6a50eKhZIhgrAocNg5Y5KiQe CeExt6rfEuB&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.bundlerepositorybundle.com/c?x=pE2ACeADKXLIZIs3Ww81xGYXfz3 5VJayZJUytuy9KQ=&c=bnj8fc3888cb2qQOTHmpK7daWUJPKwGARCglRG6FkN2CNezsSRmpEY diAo4sd2mWd0F8JHjOX4OCYZGlua9f4vVmo7eKH/nEZZG9uZFnKl3fGgtYGEaeQ2zeXWZbe64&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.downloadsbestbundles.com/c?x=Z0cusQp6k1jJwDJvVYGOtIBhiT73Wp/0vu2pq6TxLLk=&c=0BmbHzDT3iaVYvsdjh6ktEUbiHsz1T7rRm49p /3WHDKefRgrMF2Ni6bdM7kna867qGDbWP0y4M7A0DBX44apMwzhCJGCmyDmiyabMF6PirX7 4bRGK56NLr LFtL8M3&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.bundleworlddl.com/c?x=II290k7b6HPqktWlueFwVJ39zWnki2jgk9EWisrkAMQ=&c= JdvIOByXmoCLEvozCRE/iDsEG1tSYo4BkjNSPGRBmTWLt2V3hVmCZ6J2hezPg7Z2AJKQQNBDnIn/4j4EI8vE7/AGizZIvMMKp5uK bqHDIb6gPEDUGwas2uh76FxIHR&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.bundlerepositorybundle.com/c?x=adZGzXgHnaGWdpfJKfFoIeqkkSV9pqNRbWNugz530p4=&c=5nwb8wxOo7gN0/ kfuIPvEf4zOS8cj3dvf23BTUvAx5o2oicZAECnWl9h25DoZ0Scg/wIuuKuGDoZ38LG4CsSw5F0rItOguqLg3Ud2lDzGj6ZcXFKIflvSEVmgYYpbrH&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.presentfuncity.com/c?x=8uEIRS81f3B6KXBxz1UDns4TtJp Th9RDSaEYuGdhkg=&c=HdFJUjSoznGV14OqLrcOJDryORGCFz vch/3gLG3a5W1yQwopLb32Et31E0/Qae/ew2Z23cbtrsLR7787YOOqaO1cxQFTdSpewl2T57BWVguero4fa6xr3ULixKXNC7r&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.downloadsbestbundles.com/c?x=pbEpy qXwLn1jsdmhtiIAJkiQeR6bmFYvid6KBshAfs=&c=DeOpzV2FVto7uwqWIY0iRnngQe bmqsp04b7X9A15mX6VOYsSx59VmghM7nlhFyI2AthD24RO5PwLKPQegG63HIrz16cDaz812Kf2EROW93gBM1jRJuWjs9agzq7w3Gs&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.packageflashcurrent.com/c?x=CnFQGiBpb/CLZok2BzWCm3jt4m8yBf5SF4MpQGEKh88=&c=6cPqPbG0voV4A5nPBAIw59aIvLFyBO2eNF6uzDWxOOiLKrZv799Khv3e7TsQDdAW2Iupl6JGNt9dWix/t9SNC3naw I8Nb95aJF00SxLM5HxVm22ppHhArKEvGk8z85t&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.downloadsbestbundles.com/c?x=RI3OveRJ9So fYQailJ2LX3opwUevoalznSvsJ2OiII=&c=mG1O99qs9r6ONrqXJU/qeI4xQ7PJIXfN3OWPzvpfn2Mm73hF1aZ5HIoce88n6ucJhc6MqAj5OSZsUJxJubRYxUnd4AbJZ/mhloOX0XG/ZW7rTifeka2KCJOxFCL4otox&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.downloadsbestbundles.com/c?x=oO7bEqJO251Qy0W9PlnU0H0F5l7YOKYenfQAxAPG5RY=&c=Fk76G8qZyhKwfTTKenNtC7FPWz8iWkqDK/6emuzfK0njMoNDplKon50Q1JJAJ/MexlZ9QEje054aWsi7GFnpC7NiFJ/pnBfM7o2HqZCfrynv/w43InT0dvklcfpUI60l&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.downloadsbestbundles.com/c?x=paiXZn9OrkqBNvqZzXhqDINp141mjHl4n3jPOCzM TU=&c=L8mstQ6ZuraTSklgFzTAOMzxz/UtPXsl/16cTxaqM jmfyN2xDBdMocFwetBa0Mp YdHYt4LJOnBAWXWBq3uDZaRXntTEsNfUH9nOqrvnkhgVV6JbS5cL893wHcKhnW2&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.tagfilescity.com/c?x=SoRXTempiY3kjgQpVUlxGnAT0YTrU10V/5uy0 G7OXU=&c=NlahcGDNnspmswSNdu MkXiRKGJOOx8R6II8IzZeezcXgSAY5xx rk2dkt/aStnU1I5tAdEb3zQDY4597Ze26T5Aq6qe1vccWBVELCbkTSUMONsxiZjAwt/zVUd/rZdR&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.packageflashcurrent.com/c?x=PzfzqBz7iBCN2Ga1OUmbV8DZUKv2hbKbzWNgASLBeXI=&c=PGqQ1bdSxNvXh0e28DqR5YRv67lvjpxrR7goGZsoQCRTK5ShDqSxT8Ob2vSK0GNcT3cchcsar0mcIcnX/4P46AFE5l RtEU7Uyb5CFa0vZvxZyX3lUNCsak/1PtTZ/g/&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.bundleworlddl.com/c?x=nSecoYyYIgIKtTRbebLJJET8/rcITdYU5OhFf 2Cgfw=&c=sqpzVzXfDnT32mPlC5D1lKAMIRe0oSclthlrzulzKs q5kVAmJK 4Ys5GUhn4b4FTgiZPf RA04uMMz7eQUZggYZoHxYLJQw8eRYXRlsaNX5fnAV9QxosGRCeqzbF3gB&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.presentfuncity.com/c?x=OrSZMOhNJsvp1H4BYRAA9EWfy6KWVhe5abkd1JXCpgk=&c=q xsQ56J/GOpK4aCyZZpfDFgJw0GqmYsBnr5wSX0WFZAyEQ3mUV0bBdqjf04IqzeI0YGUsGKYavNy/yRvx7KN6YELTR3Mhjx/FsGd580NcrHnnBRXIkseJsnShSq9FZB&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.sharetownworld.com/c?x=kY UconXlRo9M4YRkx qGsIStyiu94U9cl2KxR1LVsw=&c=a7708qqPOD8r73pGzSheb2pwPWiIqfBW7kpjxv/mE99AuEDx9pTGUPDsqALLakSbE3Kn2LM2wdd JnJbusreCJeDtwa1jC5RoEjMWDYe/ZyxDL5vj4KjzTGsKTTA5g7m&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.tagfilescity.com/c?x=BUSSKBpsCkewCuNsaaYurRQHkNGzndvs6urnUDpNPnk=&c=r/BW5nIKCDiocEJjazlmbCfvWuw8Mb4O umPzku4ds77rcYpc2mztZQIFDjV2FNsaSfzriCYHQM8HbgIBz0D Zt uWXf3Fi Ad dR4EM4H5NMoStQy2vnxOXT BGwb7A&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

http://www.sharetownworld.com/c?x=XNKt4hbargQGw8EbLYcQFw2zEAWYrujo71ptfSZptHw=&c=zh5X63z1bXvOo60OjDiZrBbum05xbzL8wMt4oRscoA1nCjM9DcLu3BL0BZ NozXxEqtS6DFWKOunODYlreRG91DDrGC3sng3gfqZsdK/qHAd0SHMiNlm7DX4XNQ3B6n8&downloadAs=TeamViewer Setup.exe&fallback_url=http://www.downloadfree4.com/landers/.../download.php

Remove teamviewer setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.