home

teamviewerqs.exe

TeamViewer GmbH

This is a setup program which is used to install the application. The file has been seen being downloaded from www.150.co.il.
Publisher:
TeamViewer GmbH

Version:
6.0.11117.0

MD5:
973e6d770d5317c44fb7b6442f8c9b2d

SHA-1:
6080fe122bfa9b5f12f240505525907f6645a03e

SHA-256:
7361f6448bda5b276b16f0e4f58145f6d6999b862ffc26db23cb9a3cd274c177

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 5:06:44 PM UTC  (today)

File size:
3.3 MB (3,487,544 bytes)

Copyright:
TeamViewer GmbH

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\teamviewerqs.exe

File PE Metadata
Compilation timestamp:
6/7/2009 12:41:54 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:xvLhmuRL3HxRMcr6u6dqDSx8aqgI8BjLR36YEdz1pOX9dxQKoNbO4aPoMXqETrAP:1cuhRRMcO9JBjL16BzjOH7gBaXqETra

Entry address:
0x36340

Entry point:
60, FE, C1, 22, F2, F3, 73, 03, 0F, B7, D2, 02, F1, 21, EE, 2C, 4A, 0F, AF, EF, 81, D1, C3, B1, FB, F1, 05, 62, AD, F8, 8F, C7, C6, 36, 2A, 0F, 80, E8, 00, 00, 00, 00, 0F, AF, EB, 47, 0F, AF, D7, F2, 85, EB, 0F, AF, F7, 35, 61, 31, 00, 00, 8D, 35, CD, 78, 0E, 31, 39, F7, 21, C2, 5E, F3, F3, 88, DF, 51, F7, C0, 8C, 6D, 23, 64, FF, C5, 8D, 1D, F0, 71, CD, 76, EB, 07, BB, 39, F2, E6, F9, FF, C3, 86, EC, 21, D9, 41, EB, 0A, 24, 26, 69, C1, 6A, 2B, 39, E7, 0C, 7A, 81, F2, 28, 27, 00, 00, B3, 47, 0F, BF, DD, 68...
 
[+]

Entropy:
7.9983  (probably packed)

Code size:
20 KB (20,480 bytes)

The file teamviewerqs.exe has been seen being distributed by the following URL.

http://www.150.co.il/TeamViewerQS.exe

Scan teamviewerqs.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.