home

teamviewerqs.exe

TeamViewer QS

TeamViewer

This is a setup program which is used to install the application. The file has been seen being downloaded from tatrasoft.sk and multiple other hosts.
Publisher:
TeamViewer  (signed and verified)

Product:
TeamViewer QS

Version:
7.0.17271.0

MD5:
3a335a9b1c704e8dc155b565725e7513

SHA-1:
0ab823e7489317f970e929b2469422cc7793da7f

SHA-256:
950bc07dd85672469a8b91174c341d89e6a7a0b0a59c8f15eaf3199e170f254d

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/24/2024 3:12:15 PM UTC  (today)

Scan engine
Detection
Engine version

XVirus List
Win.Detected
2.3.31

File size:
3.8 MB (4,034,224 bytes)

Product version:
7.0.17271.0

Copyright:
TeamViewer

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\teamviewerqs.exe

Digital Signature
Signed by:
TeamViewer

Authority:
VeriSign, Inc.

Valid from:
8/8/2011 2:00:00 AM

Valid to:
8/8/2014 1:59:59 AM

Subject:
CN=TeamViewer, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=TeamViewer, L=Goeppingen, S=Baden Wuerttemberg, C=DE

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3D27AFBEA5996F13E5B5624421F16295

File PE Metadata
Compilation timestamp:
6/6/2009 11:41:54 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:2X9xjIvOCtg+FUH7ACAcYk4xGMDJ24WVBsJoPhz:S9hIvvtgUI8CaP5DHciy5z

Entry address:
0x373B0

Entry point:
60, BE, 00, 30, 43, 00, 8D, BE, 00, E0, FC, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75...
 
[+]

Packer / compiler:
UPX 2.90LZMA]

Code size:
20 KB (20,480 bytes)

The file teamviewerqs.exe has been seen being distributed by the following 50 URLs.

http://tatrasoft.sk/tv.exe

http://sopvi.com/conexion.exe

http://tuvantinhoc1088.com/component/banners/.../18.html

http://stat.haifa.ac.il/.../TeamViewerQS_en.exe

http://www.pbsco.fr/.../Telemaintenance-PBSCo.exe

http://columbiacomputadores.com.br/wp-content/uploads/2013/.../TeamViewer7.exe

http://www.ospiti.it/TeamViewerQS_it.exe

http://www.velomark.com.br/TeamviewerQS.exe

https://dl.dropboxusercontent.com/u/.../suporte.exe

http://www.gss.ge/downloads/.../TeamViewer_QS.exe

http://www.cap-info.fr/TeamViewerQS.exe

http://faragamara.ir/Downloads/utility/.../TeamViewer_QS.exe

https://images.firstcallonline.com/parts/img/documents/.../teamviewerqs.exe

http://www.ctsolutions.es/.../TeamViewerQS.exe

http://www.pusulanet.net/tr/.../6.exe

http://www.dedsoft.com/2/component/docman/.../88-teamviewer?Itemid=110

http://cifaquitaine.com/.../TeamViewer7QS.exe

http://www.crcsecure.com/TeamViewerQS.exe

http://www.add.fr/.../teamviewer.exe

http://www.kujawy.kssa.pl/.../TeamViewerQS.exe

https://dl.dropboxusercontent.com/u/.../TeamViewerQs7.exe

http://myrfamerica.com/storage/.../RF_Support_w.exe

ftp://nucleoengenharia.com.br/remoto.exe

http://www.c2sistemas.com.br/sites/default/.../teamviewerqs.exe

http://www.apresi.com.br/.../Teamviewer 7.exe

https://www.dcreator.net/.../SupportOnline.exe

http://www.cs507.com/software/remote/.../tv.exe

ftp://sby5241:Cliente1@217.76.132.208/TeamViewerQS.exe

http://cdigital.com.mx/.../teamviewerqs2.exe

http://genetic-test.ru/system/.../TeamViewerQS.exe

Latest 30 of 78 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.