TeamViewer[.]exe | Triage™

resource
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/TvGetVersion.dll
unpack001/$PLUGINSDIR/nsis7z.dll
unpack003/$PLUGINSDIR/FindProcDLL.dll
unpack003/$PLUGINSDIR/KillProcDLL.dll
unpack003/$PLUGINSDIR/System.dll
unpack003/$PLUGINSDIR/TvGetVersion.dll

resource
unpack002/TeamViewer.exe
unpack002/TeamViewer_Desktop.exe
unpack002/TeamViewer_Note.exe
unpack002/TeamViewer_Resource_ar.dll
unpack002/TeamViewer_Resource_bg.dll
unpack002/TeamViewer_Resource_cs.dll
unpack002/TeamViewer_Resource_da.dll
unpack002/TeamViewer_Resource_de.dll
unpack002/TeamViewer_Resource_el.dll
unpack002/TeamViewer_Resource_en.dll
unpack002/TeamViewer_Resource_es.dll
unpack002/TeamViewer_Resource_fi.dll
unpack002/TeamViewer_Resource_fr.dll
unpack002/TeamViewer_Resource_he.dll
unpack002/TeamViewer_Resource_hr.dll
unpack002/TeamViewer_Resource_hu.dll
unpack002/TeamViewer_Resource_id.dll
unpack002/TeamViewer_Resource_it.dll
unpack002/TeamViewer_Resource_ja.dll
unpack002/TeamViewer_Resource_ko.dll
unpack002/TeamViewer_Resource_lt.dll
unpack002/TeamViewer_Resource_nl.dll
unpack002/TeamViewer_Resource_no.dll
unpack002/TeamViewer_Resource_pl.dll
unpack002/TeamViewer_Resource_pt.dll
unpack002/TeamViewer_Resource_ro.dll
unpack002/TeamViewer_Resource_ru.dll
unpack002/TeamViewer_Resource_sk.dll
unpack002/TeamViewer_Resource_sr.dll
unpack002/TeamViewer_Resource_sv.dll
unpack002/TeamViewer_Resource_th.dll
unpack002/TeamViewer_Resource_tr.dll
unpack002/TeamViewer_Resource_uk.dll
unpack002/TeamViewer_Resource_vi.dll
unpack002/TeamViewer_Resource_zhCN.dll
unpack002/TeamViewer_Resource_zhTW.dll
unpack002/TeamViewer_Service.exe
unpack002/TeamViewer_StaticRes.dll
unpack002/tv_w32.dll
unpack002/tv_w32.exe
unpack002/tv_x64.dll
unpack002/tv_x64.exe
unpack002/uninstall.exe
unpack004/x64/TVMonitor.sy_
unpack005/x86/TVMonitor.sy_

TeamViewer.exe

IMPHASH 4ea4df5d94204fc550be1874e1b77ea7
SHA256 f66295b532144eb3ce1fd3d60cdf1cb1ae63f6e5fcfa68f2e4bfd929a8fe87a8
MD5 21508645e8689c1972621b15bc4cd965
SHA1 02666f0d190abb10a66d388ae4fe63c00761a02f
SHA512 3c1de7af2c505f3bbd6ac1fac1c7839423f7499f78d318a98093c2dfc3c161378b5ee965c8c6bd421d5943f1812f013139b1091bf111ef3bab99de8fc04cafab
SSDEEP 393216:RgGAjDcSOcJKKcwUXsFvqxq5fDtzJ7l5LuYbl:GDlOGO5Xspqk9BH5iYbl
TLSH
T1B9F633E9E7E756E3E4331B36CBA1427461363FC468F81DF64585772C89341DEA22A82C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Digest

e2:ff:08:57:8d:15:42:2d:a6:8b:65:de:bb:f3:93:04:5b:c7:34:c4:68:02:8b:ad:1f:11:87:7c:bd:84:b3:3e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

25:8d:3e:a5:94:ca:10:fd:62:8c:e9:54:6a:06:be:95:49:07:02:1a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

02:87:14:d7:00:5c:69:cd:85:95:c1:cc:3d:dc:31:14

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2019 - Feb 13, 2020

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

13238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount CreateFileW GetFileSize MoveFileW SetFileAttributesW GetModuleFileNameW CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode WaitForSingleObject GetCurrentProcess CompareFileTime GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GetDiskFreeSpaceW lstrlenW lstrcpynW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/InstallOptions.dll

IMPHASH 4b45b7e00344a87332fbd12653854d1a
SHA256 c91c1796338a265b49039c0b2c7a312d764b99e5174fb2dae455ca54f8f41ec7
MD5 033ee34c40e8fa85bf2739bcb2f3e186
SHA1 2ca942f35f77f37df3fc6097acac34f2e77341b7
SHA512 2204e0b8721b8d85c51bd068b1695b16ee096bfc1d1cd5843f48fd04032aeee2b6a91ce82978a4b3414f3d966ec5b36fb337a4149dae3a1d0445935d964d247f
SSDEEP 384:ErC43tPegZ3eBaRwCPOYY7nNYXCT/Yosa:EmTgZ3eBTCmrnNAh
TLSH
T1B1624D1137D558B3E2D62A797EE3B7138FA5F722A4438E0BC7332E06281A5956E7C311
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetCurrentDirectoryW GlobalUnlock GlobalLock GetModuleHandleW CloseHandle SetEndOfFile SetCurrentDirectoryW GetPrivateProfileStringW GetPrivateProfileIntW MultiByteToWideChar ReadFile GetFileSize CreateFileW lstrcmpiW lstrcatW lstrcpynW WritePrivateProfileStringW lstrlenW lstrcpyW GlobalFree GlobalAlloc WriteFile SetFilePointer

user32

LoadCursorW SetWindowRgn GetDlgCtrlID CloseClipboard DrawFocusRect OpenClipboard DrawTextW SetCursor LoadIconW LoadImageW SetWindowLongW CreateWindowExW MapDialogRect SetWindowPos GetWindowRect CreateDialogParamW GetClientRect ShowWindow GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageW TranslateMessage GetMessageW IsDialogMessageW CallWindowProcW PostMessageW MessageBoxW GetSysColor CharNextW wsprintfW GetWindowTextW SetWindowTextW SendMessageW GetWindowLongW EnableMenuItem PtInRect MapWindowPoints GetClipboardData

gdi32

SetTextColor DeleteObject CombineRgn CreateRectRgn GetDIBits SelectObject CreateCompatibleDC GetObjectW

shell32

SHGetDesktopFolder SHGetPathFromIDListW ShellExecuteW SHBrowseForFolderW

comdlg32

GetOpenFileNameW GetSaveFileNameW CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 982c5fb7ada7d8c9bc3e419d1c35da6f05bc5dd845940c179af3a33d00a36a8b
MD5 0ff2d70cfdc8095ea99ca2dabbec3cd7
SHA1 10c51496d37cecd0e8a503a5a9bb2329d9b38116
SHA512 cb5fc0b3194f469b833c2c9abf493fcec5251e8609881b7f5e095b9bd09ed468168e95dda0ba415a7d8d6b7f0dee735467c0ed8e52b223eb5359986891ba6e2e
SSDEEP 192:eK24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlASl:u8QIl975eXqlWBrz7YLOlA
TLSH
T12B325C02135481F3E4918138C86B3A276B6A15029BF98E57DFD39646BE30BE3BD7D603
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/TvGetVersion.dll

IMPHASH 8fe1425ee6d46ec8c7cfcf0fd32a8530
SHA256 c67cbd5e35e1ce0c7ba17c55d8e2bc33afd5e0a68774554a1fe7216d330c709e
MD5 05f51bc8ffb2c8f5a2825bf5680301cf
SHA1 30f7f77dce1fb3526142780e9f5bd5c11622d6b6
SHA512 1e041aaa37dd00414ad955ebc8c0f708589014d2085a5a0b95a31f4d694bb1cc4994bb1324d4b983cbad0449fb0a05560d82c60fdbfc78be67ff61275e451233
SSDEEP 3072:4J7KJkcma0VkpOG/374vnriZ1nmTaK405/+ncMCQ2bDh:6EkcmYOG/37MnGZoeKxpuuQ
TLSH
T1D7245B0177E4843AF2F726746DF6C6604EBDBC725934D18FE780892A2E70A85DB24727
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

67443

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

shlwapi

StrChrW StrRChrW

wtsapi32

WTSEnumerateProcessesW WTSFreeMemory

msi

ord205 ord45 ord16 ord70 ord141

psapi

GetProcessImageFileNameW

kernel32

lstrcpyA lstrcmpiA lstrcpynA lstrlenA lstrcpyW lstrcpynW Sleep GetVersionExW LocalFree FreeLibrary LoadLibraryW GetExitCodeProcess WaitForSingleObject CreateProcessW OpenProcess Process32NextW Process32FirstW CreateToolhelp32Snapshot TerminateProcess DeleteFileW GetWindowsDirectoryW GetTempPathW InterlockedDecrement WideCharToMultiByte CreateDirectoryW GetFileAttributesW MultiByteToWideChar RtlUnwind HeapFree RaiseException HeapReAlloc MoveFileW FindClose FileTimeToSystemTime FileTimeToLocalFileTime FindFirstFileExW EncodePointer DecodePointer GetCurrentThreadId GetCommandLineA IsProcessorFeaturePresent HeapAlloc TlsAlloc TlsGetValue TlsSetValue TlsFree CreateFileW SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess EnterCriticalSection LeaveCriticalSection lstrlenW GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW HeapCreate HeapDestroy GetFullPathNameW GetFileInformationByHandle PeekNamedPipe GetFileType GetFileSize HeapSize ExitProcess SetHandleCount GetStdHandle GetStartupInfoW DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime WriteFile GetModuleFileNameW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer GetStringTypeW GetUserDefaultLCID GetLocaleInfoW GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetEndOfFile GetProcessHeap InterlockedExchange GetTimeZoneInformation WriteConsoleW CompareStringW SetEnvironmentVariableA InterlockedCompareExchange InitializeCriticalSection GlobalAlloc ReadFile CloseHandle GlobalFree GetLastError lstrcatW InitializeCriticalSectionAndSpinCount GetDriveTypeW GetCurrentProcessId GetModuleHandleW GetProcAddress VerSetConditionMask VerifyVersionInfoW lstrcmpiW InterlockedIncrement GetCurrentDirectoryW

user32

SendMessageW PostMessageW GetSystemMetrics wsprintfW

gdi32

AddFontResourceExW RemoveFontResourceExW

winspool.drv

EnumPrintProcessorsW EnumPrinterDriversW

advapi32

RegSetValueExW RegCloseKey RegEnumKeyExW RegDeleteKeyW GetUserNameW LookupAccountNameW ConvertSidToStringSidW DeleteService ControlService RegOpenKeyExA RegQueryValueExA OpenProcessToken LookupPrivilegeValueW OpenServiceW CloseServiceHandle QueryServiceStatus RegQueryValueExW RegEnumValueW RegCreateKeyExW RegOpenKeyExW RegFlushKey ChangeServiceConfig2W RegDeleteValueW AdjustTokenPrivileges StartServiceW OpenSCManagerW

shell32

ShellExecuteExW SHFileOperationW

ole32

CoInitialize CoUninitialize CLSIDFromString CLSIDFromProgID CoCreateInstance OleRun

oleaut32

SysAllocString SysFreeString GetErrorInfo

$PLUGINSDIR/nsis7z.dll

IMPHASH 9c8bb65ecbb91da1f2ebb6ae7a714ed0
SHA256 66b2f36274ddfeef35b1d6ae6e5755f834446e5d78a719063347543793987161
MD5 87853c0f20f065793bdc707ece66190b
SHA1 738e11a9a565923ec75400a0cd4bce4db257b21d
SHA512 febfcd11795f4ef0ff3d25cbf1856be01e7f6423a9f16028c927988c04ab21de5f0b076d7f4ce9294aa7603c0db61ea5ffb888af2e9f7c6a6a11bcabfe9795a2
SSDEEP 3072:eBFxfbJUIW9WGExPYD5JFBJOYWjm8KCmRv1fPIVF2tbRp:6xzJSAGEdYD5JcYl78Fs
TLSH
T110049D2337E0C175E21F0732DE56EB9122BAB6504E62C8873F990F5C4F726989E2D716
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

96225

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle SetFileAttributesW RemoveDirectoryW MoveFileW CreateDirectoryW GetLastError DeleteFileW GetFullPathNameW GetCurrentThreadId GetCurrentProcessId SetLastError CreateFileW SetFileTime FindClose FindFirstFileW GetFileSize SetFilePointer ReadFile WriteFile SetEndOfFile GetCurrentProcess GetSystemInfo GetProcAddress GetStdHandle EnterCriticalSection LeaveCriticalSection WaitForMultipleObjects DeleteCriticalSection AreFileApisANSI VirtualFree VirtualAlloc GetVersionExW WaitForSingleObject SetEvent InitializeCriticalSection ResetEvent CreateEventW SetFileApisToOEM SetFileApisToANSI GlobalFree lstrcpyW lstrcpynW GlobalAlloc RaiseException VirtualQuery LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA WideCharToMultiByte MultiByteToWideChar GetTickCount HeapFree HeapAlloc HeapReAlloc ExitThread CreateThread GetCommandLineA GetVersionExA GetProcessHeap HeapDestroy HeapCreate GetModuleHandleA ExitProcess GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement SetHandleCount GetFileType GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep HeapSize RtlUnwind GetConsoleCP GetConsoleMode FlushFileBuffers FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime LoadLibraryA GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle CreateFileA WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoA

user32

CharUpperW GetDlgItem FindWindowExW SetWindowTextW wsprintfW SendMessageW

oleaut32

VariantCopy VariantClear SysAllocString

$PLUGINSDIR/wincheck.ini

SHA256 0375c254f677b4b3c43fd6cc892816d5b2342ac699579c1fdd70d50dfe3771f7
MD5 04f98c8509a7ff5ce42f2d56e1cd010e
SHA1 0ed6c8707f1fcd7079b12d4d8b94da36650a3812
SHA512 3c9cc57d4b6b52687c5991d2190da86815f1c4a07baec40c733c8f23c369d83022246b2d31eccefce8aea0a7c597b5395b26d6151f77e7596eef59ecef06b8f8
TLSH
T1C1C012884101439D907071510C5A7751B7D027210B0A19E8F16618A3935D8E048AC68A
MD5 SHA1 SHA512 TLSH

$_6_/tvqsfiles.7z

SHA256 0743d117a3dfc275b0e138fb4cf3d1ce584620e0a4924257d89368dfabc5ba75
MD5 691c8ec79d06e755925596e591f56bc2
SHA1 d86981dcc71b7c108146585197fcceafc8bc9e9a
SHA512 551800d74994ba765d51830747b939e1f33e75ff5868673aa435b611bb9351536bdd9c5816789accd535a255ced463eabee0f470e27fdc3b84d03d00df31713e
SSDEEP 393216:oUFP9Mw2Zsu44QG5qIqpfRDeTtYK8KGZKV4Hyp:oUFPGw1VyqIqppKNL4Hyp
TLSH
T159E6336794D5AF00CD0C9E7CE9C5F8BFE166BA758A60CA47456E6BC503CCF91288C4AC
MD5 SHA1 SHA512 SSDEEP TLSH

TeamViewer.exe

IMPHASH e64a70175306445e877c8e688ee77cc0
SHA256 ffaea974b833b60366bdaad55f5e6dbd71238dbd0d49d1621e00934c1a1f29d6
MD5 eceb04790be45cce5ebda66209d2f419
SHA1 719c4485d8c293e625bc7f5768bd521d9330189f
SHA512 33e07e6f95502cebeb55b073c4d82087a20da89805caec9c572b06d24a8af7cf292db75b646d0c9386dba6ce28fa16a2c1265c99ebb85b3eb8cb579cf3eaa347
SSDEEP 786432:QMtIzLt9PY9paMpmXHiw/ljLf3/rYhW7mE:7tIzLtRYTaOxw/lj/+WyE
TLSH
T1FE776D71B6C686DAD59A11F25A3D5E5F831CAE29077400C763E8A9AE2C305C30F72F67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

d5:dc:be:1e:58:e5:9f:f6:25:d6:bb:b4:d0:a4:a4:af:be:2b:20:df

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

23977808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\TeamViewer_Workspace\TeamViewer_13.2_Release\BuildTarget\QS_Release2017\TeamViewer.pdb

kernel32

InterlockedExchange EnterCriticalSection InterlockedCompareExchange InterlockedDecrement InitializeCriticalSectionAndSpinCount LeaveCriticalSection PostQueuedCompletionStatus GetLastError SetEvent TlsAlloc InterlockedExchangeAdd CloseHandle RaiseException DecodePointer DeleteCriticalSection InterlockedIncrement TlsFree CreateEventA LoadLibraryExA GetModuleHandleA GetModuleFileNameA GetSystemDirectoryA SetLastError GetCurrentThreadId InitializeCriticalSection WaitForSingleObjectEx TlsGetValue ResetEvent OpenEventA GetCurrentProcessId lstrlenW GlobalAlloc GlobalLock GlobalUnlock MulDiv UnregisterWaitEx GetSystemTimeAsFileTime RegisterWaitForSingleObject SetWaitableTimer WaitForSingleObject SleepEx CreateEventW CreateWaitableTimerW ReleaseSemaphore DuplicateHandle GetCurrentProcess CreateSemaphoreA GetTickCount GetProcAddress TlsSetValue WideCharToMultiByte QueryPerformanceCounter CreateIoCompletionPort FreeLibrary GetPrivateProfileStringW WritePrivateProfileStringW GlobalFree GlobalSize HeapDestroy HeapSize HeapReAlloc HeapFree HeapAlloc GetProcessHeap Sleep LocalFree LocalAlloc FormatMessageW GetCommandLineW MultiByteToWideChar GetModuleHandleW GetVersionExW CreateJobObjectW SetInformationJobObject AssignProcessToJobObject ReadFile WriteFile CreatePipe CreateDirectoryW SizeofResource LockResource LoadResource FindResourceW FindResourceExW VirtualAlloc VirtualFree GetSystemDirectoryW SetUnhandledExceptionFilter FindFirstFileW FindNextFileW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime FindClose DeleteFileW LoadLibraryW CreateFileW SetFilePointer GetLogicalDriveStringsW GetDriveTypeW GetFileAttributesW SetFileAttributesW GetFileSize CreateThread ResumeThread GetExitCodeThread QueueUserAPC MoveFileExW GetTempPathW ExpandEnvironmentStringsW GetUserGeoID GetGeoInfoW GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW GetSystemInfo GlobalMemoryStatusEx GetComputerNameW MoveFileW SystemTimeToFileTime GetCurrentDirectoryW LocalFileTimeToFileTime SetFileTime GetLocalTime GetFileInformationByHandle CreateFileMappingW MapViewOfFile UnmapViewOfFile SetThreadAffinityMask GetCurrentThread QueryPerformanceFrequency SwitchToThread FormatMessageA SetThreadPriority GetQueuedCompletionStatus VerifyVersionInfoW VerSetConditionMask TerminateThread WaitForMultipleObjects LoadLibraryExW GetModuleFileNameW GetWindowsDirectoryW SetDllDirectoryW HeapSetInformation GetVolumeInformationW GetNativeSystemInfo OpenEventW CreateFileMappingA OpenFileMappingA MapViewOfFileEx OpenProcess WaitNamedPipeW CreateProcessW TerminateProcess GetProcessId ProcessIdToSessionId WTSGetActiveConsoleSessionId GetExitCodeProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW SetFilePointerEx ReleaseMutex CreateMutexW OpenMutexW GetPrivateProfileIntW GetPrivateProfileSectionW GetTimeZoneInformation GetTimeFormatW GetDateFormatW lstrcmpiW SetThreadExecutionState SetEndOfFile GetFileAttributesExW SetErrorMode DeviceIoControl AreFileApisANSI TryEnterCriticalSection HeapCreate GetFullPathNameW GetDiskFreeSpaceW OutputDebugStringA LockFile GetFullPathNameA UnlockFileEx HeapValidate GetTempPathA GetDiskFreeSpaceA GetFileAttributesA OutputDebugStringW FlushViewOfFile CreateFileA LoadLibraryA GetVersionExA DeleteFileA HeapCompact UnlockFile LockFileEx GetSystemTime FlushFileBuffers CopyFileW GetComputerNameExW CompareFileTime GetPriorityClass SetPriorityClass lstrcmpW GlobalHandle GetTempFileNameW GetSystemPowerStatus GetOverlappedResult CompareStringW OpenThread GetComputerNameExA CreateSemaphoreW GetThreadTimes ExpandEnvironmentStringsA WriteConsoleW VirtualProtect VirtualQuery SetProcessShutdownParameters GetStringTypeW EncodePointer GetCPInfo LCMapStringW IsDebuggerPresent InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent GetStringTypeExW LCMapStringA GetUserDefaultLCID GetStringTypeExA GetEnvironmentVariableW RemoveDirectoryW CreateDirectoryExW WaitForMultipleObjectsEx CreateWaitableTimerA UnhandledExceptionFilter GetStartupInfoW FreeLibraryAndExitThread RtlUnwind ExitThread GetModuleHandleExW ExitProcess GetFileType PeekNamedPipe GetStdHandle GetACP GetConsoleMode ReadConsoleW GetConsoleCP IsValidLocale EnumSystemLocalesW SetStdHandle IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA FindFirstFileExA FindNextFileA GetCommandLineA

Name

.text

Size

25.0MB

Virtual Size

25.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.7MB

Virtual Size

4.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.0MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

298KB

Virtual Size

297KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=33, id=241, version=40116,

count=190, id=243, version=40116,

count=49, id=242, version=40116,

count=4, id=199, version=41118,

count=29, id=259, version=26706,

count=30, id=261, productName=VS2017 v15.5.4 build 25834, version=25834,

count=41, id=260, version=26706,

count=147, id=261, version=26706,

count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=261, version=24728,

count=50, id=260, version=24728,

count=135, id=205, version=50522,

count=70, id=260, productName=VS2017 v15.6.0 build 26128, version=26128,

count=3, id=261, productName=VS2017 v15.3.3 build 25507, version=25507,

count=4, id=260, productName=VS2017 v15.4.5 build 25547, version=25547,

count=2, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=190, id=260, productName=VS2017 v15.8.5 build 26732, version=26732,

count=1028, productName=Unmarked objects (old),

count=186, id=260, productName=VS2017 v15.3.3 build 25507, version=25507,

count=1, id=171, productName=VS2010 build 30319, version=30319,

count=22, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=1033, id=1, productName=Unmarked objects,

count=54, id=261, version=25019,

count=15, id=260, version=25019,

count=5268, id=265, version=27027,

count=1, id=255, productName=VS2017 v15.9.7 build 27027, version=27027,

count=1, id=151,

count=1, id=258, productName=VS2017 v15.9.7 build 27027, version=27027,

TeamViewer_Desktop.exe

IMPHASH 0874ea2a2f554ea9d298160d5770744f
SHA256 d0e938ea51fb15b4dc763715f495178fb8392974e192450e45da5884a1c527b5
MD5 c79bea9abc51404e9bdcfecc949bd8e8
SHA1 29f5bfa16125aa0d4b8e2a77e83a6c34d781bb5f
SHA512 c8e0c83467051dde76ee58e2b80b92b3151312abbc30aa46ef3883041bfb27ec9d6457f1f90c479b64badd0e8de760bc39d6f2f3ddac4a74be354a191218ceda
SSDEEP 196608:QVDsStczctfLUMrQV4E0rEb4xrT7E/ST3u9:UsStczctTUMQ10Q4BT7z69
TLSH
T189A68E70F2C38526E45605F1993DA76F503CBE590B2488E7A2D8BD5DB830FC35A32B66
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

83:d1:f6:a1:a7:16:2c:c2:40:92:da:2a:b1:6d:f2:49:f4:26:a1:6a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

5801728

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\TeamViewer_Workspace\TeamViewer_13.2_Release\BuildTarget\QS_Release2017\TeamViewer_Desktop.pdb

kernel32

CloseHandle InterlockedExchange InterlockedCompareExchange WaitForSingleObjectEx CreateEventA SetEvent InterlockedExchangeAdd InterlockedIncrement LeaveCriticalSection EnterCriticalSection PostQueuedCompletionStatus TlsFree GetLastError TlsAlloc TlsGetValue DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsSetValue GetCurrentProcessId OpenEventA ResetEvent GetSystemTimeAsFileTime SetWaitableTimer WaitForSingleObject SleepEx CreateEventW CreateWaitableTimerW GetTickCount InterlockedDecrement InitializeCriticalSection GetProcessHeap HeapFree HeapAlloc Sleep GetCurrentThreadId QueryPerformanceCounter CreateFileW DeviceIoControl GetSystemTimes GetProcessTimes GetCurrentProcess RaiseException LoadLibraryExA GetModuleHandleA GetModuleFileNameA GetSystemDirectoryA GetCommandLineW GetModuleFileNameW GetProcessShutdownParameters SetProcessShutdownParameters DecodePointer SetLastError ReleaseSemaphore DuplicateHandle CreateSemaphoreA GetProcAddress LocalAlloc LocalFree GetCurrentThread LoadLibraryW GetSystemInfo VirtualProtect VirtualQuery FreeLibrary GetModuleHandleW WideCharToMultiByte GetSystemDirectoryW SetUnhandledExceptionFilter FindFirstFileW FindNextFileW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime FindClose DeleteFileW WriteFile HeapSize HeapReAlloc GetFileAttributesW QueryPerformanceFrequency GetVersionExW GetUserGeoID GetGeoInfoW GetComputerNameW VerSetConditionMask VerifyVersionInfoW GetNativeSystemInfo CreateDirectoryW UnregisterWaitEx OpenProcess WaitNamedPipeW ReadFile ResumeThread CreateProcessW TerminateProcess WaitForMultipleObjects ProcessIdToSessionId WTSGetActiveConsoleSessionId RegisterWaitForSingleObject CreateToolhelp32Snapshot Process32FirstW Process32NextW SetDllDirectoryW HeapSetInformation LoadLibraryExW GetQueuedCompletionStatus CreateIoCompletionPort QueueUserAPC TerminateThread SetFilePointerEx ReleaseMutex CreateMutexW OpenMutexW GetFileSize GetTimeZoneInformation GetLocalTime GetTimeFormatW GetDateFormatW SystemTimeToFileTime GetPrivateProfileStringW GetTempPathW MultiByteToWideChar GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW GlobalMemoryStatusEx SetFileAttributesW lstrcmpiW SizeofResource LoadResource FindResourceW SetThreadExecutionState IsDebuggerPresent OutputDebugStringW EncodePointer InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent VirtualAlloc VirtualFree GetStringTypeW SwitchToThread GetCPInfo CompareStringW LCMapStringW FormatMessageA LoadLibraryA LCMapStringA GetUserDefaultLCID GetStringTypeExA GetCurrentDirectoryW GetFileAttributesExW GetFileInformationByHandle GetFullPathNameW RemoveDirectoryW SetEndOfFile CopyFileW AreFileApisANSI WaitForMultipleObjectsEx CreateWaitableTimerA UnhandledExceptionFilter GetStartupInfoW RtlUnwind CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetStdHandle GetACP GetFileType IsValidLocale EnumSystemLocalesW FlushFileBuffers GetConsoleCP GetConsoleMode ReadConsoleW IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA FindFirstFileExA FindNextFileA GetCommandLineA SetStdHandle WriteConsoleW CreateSemaphoreW TryEnterCriticalSection GetThreadTimes ExpandEnvironmentStringsA GetPrivateProfileIntW GetPrivateProfileSectionW WritePrivateProfileStringW UnmapViewOfFile CreateFileMappingA OpenFileMappingA MapViewOfFileEx OpenEventW GetExitCodeThread GetDriveTypeW PeekNamedPipe

Name

.text

Size

7.4MB

Virtual Size

7.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.orpc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

146KB

Virtual Size

173KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

282KB

Virtual Size

281KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

307KB

Virtual Size

306KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=23, id=241, version=40116,

count=183, id=243, version=40116,

count=36, id=242, version=40116,

count=4, id=199, version=41118,

count=29, id=259, version=26706,

count=27, id=261, productName=VS2017 v15.5.4 build 25834, version=25834,

count=37, id=260, version=26706,

count=86, id=261, version=26706,

count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=261, version=24728,

count=30, id=260, version=24728,

count=104, id=205, version=50522,

count=70, id=260, productName=VS2017 v15.6.0 build 26128, version=26128,

count=3, id=261, productName=VS2017 v15.3.3 build 25507, version=25507,

count=49, id=261, version=25019,

count=554, id=1, productName=Unmarked objects,

count=172, id=260, productName=VS2017 v15.8.5 build 26732, version=26732,

count=888, productName=Unmarked objects (old),

count=1, id=260, productName=VS2017 v15.3.3 build 25507, version=25507,

count=8, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=771, id=265, version=27027,

count=1, id=255, productName=VS2017 v15.9.7 build 27027, version=27027,

count=1, id=151,

count=1, id=258, productName=VS2017 v15.9.7 build 27027, version=27027,

TeamViewer_Note.exe

IMPHASH 67df7f07722eb96bee7772a4d222a418
SHA256 3b9bb0b3cd7559a322127c6948938ffcd6f482a0744f944f32b861a76f17b8a0
MD5 9649c01fb5909c090499a6c97eb1677d
SHA1 6aca5c2ac166d0b0edde8ab2be555656efb3a1a5
SHA512 72826f136e113fd7980451a8ece6b257e6e4a17558f6ed7a525b030598cd674758472a5b7e25960f0da86d307bd629599dcbaf970c567cfc37d9f07372c975c4
SSDEEP 6144:CTwTKBJ8wWMrmafguSDYK60PmJC5lcL1/YjvdRcrdm:zTKNLrmafNSMm+E5aJ/YRirdm
TLSH
T191E4D670A582C123D463143DEA65D6F7142BEDF0DBA079E726883E2B3A343C5953992F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

07:fc:86:4d:7f:be:9d:db:52:03:4f:eb:99:7a:a0:87:8e:9a:c9:3e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

57398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\TeamViewer_Workspace\TeamViewer_13.2_Release\Installer\Tools\LeaveNote\LeaveNote\LeaveNote\Release2017\TeamViewer_Note.pdb

kernel32

LoadLibraryExA GetModuleHandleA GetModuleFileNameA GetSystemDirectoryA GetModuleFileNameW SetLastError EnterCriticalSection LeaveCriticalSection GetCurrentThreadId RaiseException DeleteCriticalSection GetLastError InitializeCriticalSectionAndSpinCount HeapDestroy HeapSize HeapReAlloc HeapFree HeapAlloc GetProcessHeap SizeofResource LockResource LoadResource FindResourceW FindResourceExW GetFileAttributesW CreateFileW CloseHandle SetDllDirectoryW HeapSetInformation GetCurrentProcess GetSystemDirectoryW LoadLibraryExW GetProcAddress FreeLibrary ResetEvent OpenEventA GetCurrentProcessId SetEvent CreateEventA WaitForSingleObjectEx VerSetConditionMask VerifyVersionInfoW DecodePointer GetSystemInfo VirtualProtect VirtualQuery GetModuleHandleW EncodePointer InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent VirtualAlloc VirtualFree IsDebuggerPresent OutputDebugStringW SetFilePointerEx CreateEventW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime RtlUnwind InterlockedFlushSList TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetACP GetCurrentThread GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FindClose FindFirstFileExA FindFirstFileExW FindNextFileA FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetEnvironmentVariableW GetFileType SetConsoleCtrlHandler OutputDebugStringA CreateThread SetStdHandle GetStringTypeW FlushFileBuffers GetConsoleCP GetConsoleMode WriteConsoleW

TeamViewer_Resource_ar.dll

SHA256 4d76815018cde919c1f425e2432f11dd49c45875dd91238be6b021ff08f6faa3
MD5 bbd1d7e2cc5618a0d7100fce47de8f12
SHA1 5dc9f9a91e5b064461130631f93f2a708a19da21
SHA512 454254b134c35e5bc8a2adf1f6799a146c65df206c29c3de5060b0654ce2d8e7fbc0a378a3a6206f25f4c412ac26962e4025676d693971f3ac142576454798eb
SSDEEP 1536:t0BCgTLQvNkOib1s1R/6iPoVeHNv07QrUUcW9dTzVHb8tQaQzrohsGQQt1qMlPgI:tD4yExsluf0EkwIDNJ++l6f4lT6Jqc
TLSH
T1584498011E9CD23CF4A79738C523C653629D61AADDDD323F86788E281AE44709B4FAF5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

c2:49:45:b7:05:ef:80:34:2f:0f:46:c1:92:d9:ea:10:fe:0b:fb:36

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_bg.dll

SHA256 35416b8fca940fe502a6d07df2015b9df3aa3ee1b1d51f69110b72d40d5f1cc6
MD5 0faaf46a110d57268ffb5b0016e0ade5
SHA1 7d7e7099fa6ca5fba989b575c2c9188a7c958f96
SHA512 cb8eac7138ddfb71a80cb86f3f90debf163c2c56d01cc9c8e8e333f26525c49bd2c7f684f7fc49278da1c5528103f3263c20672fc92f440e4adac96cffe89f0c
SSDEEP 3072:70e/B9t2CooXAm8ycIjr47/3729f79RyehmpWWRa5eQ/:70O7BZt/
TLSH
T1CB64410FB9BD9240FA59D3311F6686E721BA7B1073395ACA835F7D68602CA3533252C7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

7f:ff:0d:34:dc:01:fd:09:b7:14:3e:47:3f:ce:6f:52:93:0a:d9:9e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_cs.dll

SHA256 d0ea8f9a003cc9c0776845fad8d1a32cf3eb33674260daf38c7d047c0d1208ac
MD5 fb179cd9865579ed4caf7a4e319071e0
SHA1 7c9e250e8a5245705c18b12baf412be14cd8f8fc
SHA512 a563bb8ef392e3d4683699d91264fb367427b88fc39f100a87f99624a87226d115f6608f8e28231db861e0273134086515500ee355abe388dc24f6c99b64ae95
SSDEEP 3072:OYokkR5mEnHqva+1DUemFNWP6ZL7jOrZaWg5iCqV/Zw+4uWAguX3RQdesbywmBeT:IEnQbCXf8P
TLSH
T13D54F20126FC0685F6FBAF76BDB406624E7B7CA2BB34C14F9550428D1D70AD0A8A5B73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

a5:08:46:f6:6e:5a:a0:bf:ec:3b:0f:7f:7c:94:75:d9:71:e5:3c:87

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_da.dll

SHA256 5aa8bf3fd2dac640f191864e8d871c6f19cbd50a95067de4e59e5d3c5a2ab204
MD5 4309749836d38cb47934be877976001e
SHA1 785b22b860b23adc1ddaca381c52759f0752b69d
SHA512 172665969a1030e2791abfad5b4aa94b7459c906c40ac115666a34a25151525f1a47a50261b14ad990fefe729cd73e02f68464d76bf938131cf90cd6f241ebe4
SSDEEP 3072:yAN9np6/P0fJWpZPCq5OOlEy7Pk7xRa9xE+/CDI/66rMuQocVOcG0reXDLB9UK:7Dga6Tz
TLSH
T17154985123E9520DF6F73B34BDB902945ABABCD6AE39D61D1210518C1CB2BE4D9B0B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

5f:a2:55:80:72:5d:05:25:29:65:c7:81:97:b3:59:d5:15:3c:27:2c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_de.dll

SHA256 ab8cbe4483bfc70ae58d219d34fd620fb5e1f6b6d29924e77a929bb78d80bd73
MD5 b5f60eab60413501ea4f9f4f26e74a36
SHA1 e923130ec860167c4fc615ec9ebbfbf136c0f359
SHA512 612af07cb58796c1d078a0d2579734c2ad584603705a411e791c8b4abe9847a13c91333084e202b226e29ae71e318889a1da2cfd0e7297ea573152294a9dea0b
SSDEEP 3072:BQPbjxz4ZblHPDbrlqMK/CuJctzbMYXQzEdHg72C1XLvuBMPKj1RnStnAKdcvmoq:7dj4Wt1Bs1
TLSH
T1A364DB1157E98A18F2F33F74AEB862946E72BCE6FD7AE54D1710509C1871B80DA60B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

d8:75:e1:b2:26:b5:52:ce:20:91:b3:20:bc:d9:e9:09:d0:c6:44:d3

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_el.dll

SHA256 7a35b002ecef84910114daa7523e309ca23cb963d74f11366066a66c88b45923
MD5 fb979dc4bed45e3c5df7d20fa56c4d7f
SHA1 b61ecb2ef514ba74c4ded098ebb0f4cff3f3c70b
SHA512 df235a05d04a6bf3a7fa4cf896e6289799f3706175ea891d5401d3998623f34a40abec27b6f70ea2df0146f52029f849bbc4dbbf574e7403845a79a9c9e01eb5
SSDEEP 3072:YEy6P+Zk2TwK/VViEKd5iLKYl4QINVmF78+oc2kdd2w0hqXUo20GCUdqldow5ey7:DqzTGAPNlVnbt9h541xTz+fYwZx
TLSH
T10374288E0DFF2721DEE999F2583381665AAFF9924428DD7E72F07048E91DC118DC2E16
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

ef:0b:a3:b8:ed:96:fa:16:75:ff:fd:bd:81:6a:96:6d:e7:1d:96:12

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_en.dll

SHA256 b076e4c261c93638516c649dbb12b700705ce5f4946f78cab0435f9e5d7442f1
MD5 f501a782281b73dc618a3812519046aa
SHA1 08cc4153a597054485fe095d76cbc0e060d99fde
SHA512 73858c6cf417d3daf38c605a5549a17094ddeab89b988f34408ea1b32ec3fbfc1e3186871305a5b89e6687a44f9e2bf5e3da30de3391dad9c62a2465b1d03e73
SSDEEP 3072:RIo5PGoSlzzoSzk+3i4sLHmBB7NVakj6WKXde1y:R55tSNuwjy
TLSH
T17954885163F94208F6F77F74AEB926644E7ABCA6AD38D29C0250405E59B1F90DCB0B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

fc:96:b6:56:69:fa:a7:c9:77:d2:68:28:a1:3b:ab:46:7d:a5:e7:50

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_es.dll

SHA256 3923e8090c7319e743f0feddc255640c2f71837a07b9b56ae31abdb7f0f49395
MD5 14a696b242a08a5129e06036842f59b4
SHA1 034d88d790ffd6a24f0e1bbb676247ac0c4c0c90
SHA512 30a1ae1186de91dd29a9a38187accdaa74c3377628d047910c9748fa14ce75a30efffd196427df12dea85442645cfd2a5f02a52848dbf02250b02d88d68043b7
SSDEEP 6144:CIbch6P1GdTiRjrsq1MSH/ryoGK7eqKhbdPsj:vj
TLSH
T1C364325067FD6246F6F37F39A97916298E7ABD92EC38C14C4220525E0DB0E84DE64B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

7b:8e:ed:d7:5f:c2:3d:71:4e:b8:34:df:2e:07:68:d1:2b:f2:72:25

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_fi.dll

SHA256 a2bd49e65fee2e5b610a945c02a634dd83b99cea4f8a495b5459404b04feaf1f
MD5 1d33dabf72527fc36a0c2e3414393715
SHA1 d33fbfe7a92c0a5e3592956c86e56177dd508984
SHA512 81927412fc314bd1ef2a6d479f0ead52f5ce4fa3e40e0dcdd95cfbec8f1be768bdb12eea4979135bad51debc77fc46088595b07f886aee9bff03b6c6512871f0
SSDEEP 6144:O5727txl+OxYuVWeZMA83IyJTcxKlMDjujlM:l6M
TLSH
T1C354874256FD9234F6F3AF30BEB852100AB77E93ADF9E65D0A04455D9835680E8B0B37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

cb:2f:ef:38:5f:75:8a:1b:16:19:3a:cf:38:5d:84:77:56:f4:8b:ae

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_fr.dll

SHA256 a5ff2f1648df41d622a943c54fe4241fd50cf4cee5a46afc8e81e5609848b835
MD5 89673e752cb1a0f5cc76dedee637fe6b
SHA1 82b4364c1ff839acf7e30d174f6c9259072a6f69
SHA512 c82513291276da6cbac15fd18067ea33bf87a2898b2ee5c03ec4404da9b211de3d5667efd4e4f9a9bd50f31668d927b6d6afe0deab2d7a9f7d16a723ab226f25
SSDEEP 3072:eRWHpSCvTV4ElyQz7SmlWld6U/yK4AYiCRB0wnMib:BF5kd6U/ZCSwnvb
TLSH
T1EC745E61A3F96605F6F77F21A9B921154E3B7C9ADD38C15D0650908E2CB2E94CCB8B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

e5:5a:60:05:16:7d:e2:a2:01:d7:2a:e6:85:40:9b:1b:d7:dd:6e:ea

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_he.dll

SHA256 2e259fcb4f73635bc4778d5c14952678f19af3983e06a27af0926a141085317f
MD5 a0172c5c9fbe97406dcbf31788df888e
SHA1 ccad0316d607a03ed8d0e410839945843bbc46ec
SHA512 9af829294c0ed38b4b015bdeec550eaa557581314a0f3b47b4e39075e8da7687ec96aed271124296a6728793062a89548447400e76ac7ea24caa53a8549d454a
SSDEEP 3072:3Jch8i807LjQOu1rc1Yu2OCeMB5o2VJiJHwCNTbzkHXpmQ2sFd4A9q4T:5/in7LjQOu1rFuSiJ+X2skkT
TLSH
T1BA3447801A90D2F8F9A5EF33A63F292E8691EB00827C775B545C55602E6DBC1CB5DB3C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

a4:ed:a8:48:1a:f3:4a:6b:f0:6b:22:a9:ce:52:27:b4:b3:0f:0f:ae

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_hr.dll

SHA256 80e5f9ab08eb8882476dc6943df60129c75549e75399b9ab352b7a5e37e73b7c
MD5 a4153dbab0708f4f5058dd906933918d
SHA1 42db558d314e092fbdd6ba6e235b70520ac01b22
SHA512 45274d2ea5f2d7bc32c02d6e6e3908bf147cca8a68906defa98be24f9e7a72b0e90588b040b24b3b4067a4c48ab1338b8266468e952e415857d369e8da30ba7f
SSDEEP 3072:p+hrAb+Imla0xaA6rrwVrM7rY/rrUjviUvjY+pqAnQbSUXLg+:pcfanrdT+
TLSH
T1F364AB42A3FD2249FAF77F74A9B813644A7B7DB6BA39C15E1140028D1D71AC0D9A1733
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

ca:be:29:8e:8e:c1:4e:46:ea:9a:c3:2f:ef:ec:93:4c:a2:af:cb:93

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_hu.dll

SHA256 c04c2c86ebcda7f4101434b42e14109560a124101d451af03d9f031ce1b66a76
MD5 c59d47565b6641459b3f9ac3769400d1
SHA1 b0f7ec3cfcb4393a345f413b9cef5ad741f4e4c1
SHA512 8c6ebaf59b399a7d47b4251fa961f287da73ba797ecefd274f10faa6042dfca29369ffbfa5b74b4e5cfa1b92eab8290b689d3df0f91332ae7ab7e695d83700ea
SSDEEP 3072:rsE8a4Y+tp3whglRKRmwUM4ilVF8dx2v1rUhPyAXwuVo/TZkzpIBHpiTBLJKGHH1:rsrtyTs5yXbbjrPGsPeS4
TLSH
T19464EF0562FC524AF5F78F767DF052950A7ABDA1AE3DE25E8640528C1DB1AC0CDB0B32
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

34:38:62:43:bc:a4:38:fa:f2:f2:dd:d3:e4:f8:aa:d6:85:4b:b4:66

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_id.dll

SHA256 9d3214424902db237e84849f7260a12efc3a1727f93ea4c397205d884247ad15
MD5 e4b1aa72f11674a35ff7f37efdbe0e4a
SHA1 e41f82ff8661b420a8076c71fa1d21fe81214f52
SHA512 454009320624a39653a0778521a6e60cb677274e326705805ff300208d7478900b605c60fa86e6565c2820a0588abf4e8de03b54b5a6033aaba055be6fec5bb2
SSDEEP 3072:X5XATEseS9S6lvgEbIFbq8W8fV5y3WF6Z2VEnpnFkwZR:g+EbIdLV+/ZRR
TLSH
T15254889163ECA508FEFB5F70AAF826940A6BFE92BD39D24C1314556C1C74BC19D60B32
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

0f:e9:1d:89:f2:49:de:a9:57:04:1b:ed:f4:82:94:e7:81:2e:a2:84

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_it.dll

SHA256 2764993dc41f7beb5d7f614c0c42dd5e337c3017c3aaab6a3602f5ac34685cb5
MD5 5dfeed578350cb8a32d1832889322810
SHA1 95d7d5d00cbcc15afabd79e8aee217af6582a202
SHA512 1a8dddd4da75f77614745e588180ec9773ff56b762d67f5ae81e7cfe9db3c032c7246e84bbe416db7e986bf53fa20a2c156cf9ee13b3d9c16171c2dfb596a2c4
SSDEEP 3072:GBSr9tBDpfgs4nAA3KJOE1N839w96vil5I6vQbill6:fxast3vwQ0ill6
TLSH
T194646311A7FD5208F6F3BF74A93966288E7BBEA6AC38D15D0250409D1871E94DDB0B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

c5:06:1b:d3:42:0d:db:99:7c:d5:76:87:2c:3b:a2:f4:af:32:71:5a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_ja.dll

SHA256 40b5ff23a867a64e0e464659d73ef1c1dba3f15c1ef22c882c1343053ffbb19d
MD5 231644b67a5da176e330d5deb1a4c26c
SHA1 fc50ee894ca777b0813ba9dfee7f8bd3228a6fb3
SHA512 53ab035270c7bd6c74765dd45623d13c63b532d597f44731a0e9b69e016c99b72c06c5868934aaa5d71e194cffe43244b28cf3610eae4a4950012ddef29ff333
SSDEEP 3072:R7j2F9KSV5QCE9X+jOsaVCQGmDQbszZRZAxLximcpAnvQgWm3+aBl8Ldlnlt:GCPvm5nB8ln/
TLSH
T11804A58C36E94A4EF4F386759472B5B866A9FA20C6D28CDE0284C40F1450EDD6787B7F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

09:a6:00:2c:3c:cf:57:35:9c:72:4f:71:23:b9:fb:d3:c6:23:b7:95

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_ko.dll

SHA256 29765d3ce44a4d1a755d63953f35d53c1fa1be90d95cb4e144a257f4aece2832
MD5 5a4538ae1af70620baab23b74224c85d
SHA1 7cff7ee0a4b06d3b8d38c86efea14f50bab16779
SHA512 752f75a310461a08d7d19dfdb4a7f5008da4690d48f04ec4b4e0c39af11fa241de7e9c5ca12d790b5321cf99d4cc4cfb2415a9095aa11b50b49efabc9e963264
SSDEEP 3072:X9LDwexHWhDin9bw3AY3s4vvOlnhe4+BZGplAlTqCVSUwSH9yIAzd3tWZ:ReDfAAYtWZ
TLSH
T163F3D502A1F9D140F4F3A779AAF353A7466B3580E617498ED310928C75B0BD0EEA5BCD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

a7:a9:cd:6e:6b:04:0c:e5:8e:5a:cc:18:4e:b2:ad:4c:1a:77:42:e2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_lt.dll

SHA256 cf44931be7813df1f41059a0ab0df6247fdc66265b96679ed8be93874902b6e1
MD5 81644cb57cc41bf6dd7dea61bb8204f1
SHA1 becfaaeb4496dccb75583524edda3aa145fc3eba
SHA512 427f23511d57a9a386c893659d430d03e6b6141fd754020b7e3e300951b3cb38f9c03bf3c2d84726c78237a5d614250fdaaae5bd25a444760fc4acb5ca6616ba
SSDEEP 3072:SpJjvTYioXxVL8DpXlGyFZZazfUA9VnmWQvzREmguDhpXewxwzeT8Ct8qApnJP:PBFlHP
TLSH
T1B764CA15A3FC1189F3F35F34A9F496160B7BBDA6AE38D15F2510414EA874AD1CAB0B23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

8e:74:76:78:2a:87:e5:33:56:db:3c:a3:9e:b1:21:dc:c7:f5:de:fc

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_nl.dll

SHA256 9491e92ba0a5d45f67c70c213c5ceb1894504c6b1ce32d45cdeaf358a05ea08c
MD5 5c83bd6fd58862ea7a4baa4146b1bc88
SHA1 60440b476cf79baa6ca2a0922fe8f701e99c9e79
SHA512 3ec514a817dbf0bdbbbc12c37c8e431c86d13fcead62f1f29c7da2c845707a8bd0a742f61fc639cfdf06795aa7803fb7159977318f0d9114fe043268e50d7f7f
SSDEEP 3072:x2q/cbVvwTfrLFzPOrUNer6e7teN/QUvrFiYVhqUx9yfvptaDWaaoclAaKopFJvJ:+Go4MrD9R0Mr
TLSH
T1A364B95223F9920CF9F72F746DB922508EBABCE6BD75D68D0250219C5C71B809DA4B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

8b:6c:10:2d:b0:fb:30:9b:e4:2e:57:a5:05:56:4f:c4:ca:e8:80:e4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_no.dll

SHA256 a934043c20449550b991283303c1b3edc1a5c4a3a931a92a88ce0b2e44471ba6
MD5 dc2deb0b3cf823aad592b94e16c5958b
SHA1 85d061a783060489ebf711040dc101167b514528
SHA512 33b344e74d18af60beef324f049ee5bcc2bf47fcad20397e62eedae52310e47c519e72464bf7c256175c08c919a07c3a2c63278254291af5fa954ea8b5e058a7
SSDEEP 3072:46NPbKlhvBYOoX6b1MwjrNPo1v0cv7/EfhzxAEhqsDVwZpNF/J2bw19TlPYEn0Ly:4I/zhf
TLSH
T14E54B86163E95209F1F76F30BDB812945AAABCE6FE38D21D0240519C4D72BE5D9B0B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

4e:18:43:f5:3f:e8:54:f5:78:04:9d:7d:01:4f:cc:c4:6f:86:dc:f0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_pl.dll

SHA256 4b2afd1598dd2cc588898d6f47cbd5e4dbb8fe99c9e0138980c1bf5fab28934c
MD5 16f5966eb3159a5ea09cf0c312f90d67
SHA1 4beaba7e82a304a3f0892974f8486424c27da5ca
SHA512 c8ff784c85c33679dd0af8b35a42663f566eb73da533ce5adf43963374a6e3fc1dd5109e3fa234a281f4b4ecd7e2a4cecaa0b84867c1bc3a24f1f48f4c5cf086
SSDEEP 3072:z1hBtrR+oh20T0JWxH/OQ82dcas4ASf8k6Fm3is99f:zfAS88/9f
TLSH
T19E64040163F80255F6F76F74A9B976988F7BBD22BA39C2DF2500514D1A70AD0D9A0B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

dc:6a:71:62:62:4f:33:65:cf:03:26:7c:0b:26:f4:9c:d5:6a:56:50

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_pt.dll

SHA256 50f542d049d5c9e1a6660663721602da6dc3a0c91ef70ef42da4605e699e362e
MD5 d0bedfa0e0a75fa3b4cf18ceb15e4ba8
SHA1 4230e88d5253d4a50fe66bd10cf67a6687eb906b
SHA512 56a9cb3e6a1897d36b055f5bd7192a996d41e499a30ab110a5b73b3f2a963bacc664a68e15c53f565b767496c092dad4cfe0dd67b6029ef0a408e36f33dd899e
SSDEEP 1536:TvPDyQtYB1bzvDxUCXaFBFvrtd9A8aIkzYbkxjKCBpQILKX0IokvcdrEPjmmbXVw:LLTYyW6koSjKeqHJEcU76e
TLSH
T1BC64325267FD1244FAF76F36A97826258E3BBD92AC39C14D0220515A1DB1F80DDB8B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

d1:68:f6:d5:35:1a:f5:f5:34:d3:4c:f3:5a:1f:83:72:36:18:32:30

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_ro.dll

SHA256 5ed979d924fa6bd34c45e014aaf50056661424acc1a5b8bdcc5ee2887803f9fb
MD5 4f3a1ff6084afb2815fb7c0ccb030d73
SHA1 10d5fc14777c54b30f0e5cd6ed02d205496ede3d
SHA512 c218dc43ad0ea2f7f9bfdedebe45aad7d7061e9cbbd54636bba5fb12ddcac0c224d7664c1ddcd3d236404b7bc0bda8dcdbdf593a3fc051d8f5884f3c87a95770
SSDEEP 6144:M28AxLJolb2yapkzGZlK90scSOpTCCNLi3gXpjtvXRQalwwz0clFdqsZEQT281K2:HV2g
TLSH
T17674785167E9121AF3F3BF38693826140E7B7EA7AA39D54F1A10424E1DB1EC49D60B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

56:2f:94:39:06:28:82:46:27:d8:b6:d9:ce:51:c5:be:c7:99:50:0c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_ru.dll

SHA256 896be46f409a512b663182be663176a14c27c686721278dd47293a21c0700b63
MD5 11304b56b106e2a981e63a1a893ff97a
SHA1 d3e72548bdd648e9f83501f969cfae3f737941e1
SHA512 3c612c51aa271d50347a6440717b75ac3a53e2df788fe37455365137a30047c94d1ebfaabc64e788fa0bbc7c1ce6b4e8698c986edef31d2c32fe293e48b1c95c
SSDEEP 1536:DF3J7m7OJplrcfKoaginGysOg0r/NcusfpQO2Toxwb4Ow:DF38yohLysOg8/N9sGoxwdw
TLSH
T1E664790FFABC9590F9A9D3700F3289D710AABB50632995CAD68F7D78606C63533252C7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

1a:97:24:1d:df:d9:11:5f:84:ce:e0:63:ac:20:2a:03:83:cb:96:74

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_sk.dll

SHA256 eb99438ca7c49611d4fc5279bef723f85b781951704bc38a6ad4fd181e75f05f
MD5 52b09af01a30a41f1cf593558f24e152
SHA1 bf3587d3c67ebe8c159bf67708351378c09b60b8
SHA512 3c3df41cf85901fc04ef24d0775134cbecc1557b569c7871d0e6b58db10b04ef31fc791b12128ddd7a174b9a715630f33a11e17e792c72ceb4f05cff3e85bb61
SSDEEP 3072:VUr+Ctbqdjg2QTWKBcfOOdkzz068trR5r3S4Wa/JNDnc6WMqLR7YwovSPWH22S60:nfSzNd9
TLSH
T1F364F11163FD0685F6FBBF75B9B401654E7B7CA6BA39C14F6640828D0C71AC0A8A4B73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

85:28:a1:72:ed:a9:72:2a:19:fc:6a:d8:ae:33:2a:3d:8f:18:b7:00

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_sr.dll

SHA256 1fd22c1a4edca34d457b4bf71c195ac3df7fb38a93b3d707be00c2db619db8c3
MD5 0f13d8b219bc7a6092b2a8602aeac17b
SHA1 05dba78e1b6df148ac61ac6e7a67d8f06792a9d6
SHA512 75d2c24ce6218b08190fc3624e5685907b53ad8f12b41453daa96777ce77f1bbed4386a8baf225321e3e3d05cc746f9702556265fcddedba5fdda594ef8ce488
SSDEEP 3072:P91zJAifRueFRIbMvGBxskuOuyPhO/u8H3pTPTDnf8Wi2k+DbbkX6Im7QH5l9eQd:P3p/ZnRntTkakXNf1
TLSH
T17064BD42A3FC2249F6F77F75AAB812650E7B7DB6FA39C15E1150028D0D71AC099A1B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

77:76:f8:18:14:4e:74:e8:2f:db:c1:3b:61:01:69:90:1b:a1:ab:bc

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_sv.dll

SHA256 e8095fab81854e37ee16510cd340c6ec39a3075fbd41dfb082218162f8b27e69
MD5 13ffc060da32590181bf251127da1964
SHA1 cbb84b488afe3c8c835b34d9148c6adfab6c7cdf
SHA512 114cfbb73892e655d0eb63f4ef44d6eee3eab6134daaf2d5ff7f782111906d9875a8807ccc66207c24f7815be152b285de27999162adf47955587955ce73d50a
SSDEEP 3072:u7up/DBIikRbVc1E4amu7IvTuwqx+tv9Q5pD0hW7abmlF51imlXstVL3TinvCp:iukAaJ3nc+vy
TLSH
T13854ED4163ED5618FAF39F74BDB912604AAABCE6ADB9D21D0B10019C0C71BD4D9B0B37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

15:a9:83:e6:de:19:ad:2e:0f:13:a3:d7:f7:c3:7d:23:96:73:44:0c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_th.dll

SHA256 1feb74409eefe1f4dde09f220f5d8f54a4caa546559004394ad8efb29ebd5235
MD5 04f0d1de5da11d89a7b40da6aa16e44c
SHA1 4928f52e084c8df52c14616bfcb57ab87bff4009
SHA512 2331535635c841101fe790136a6f68ae7b3c7ede724ac0ed8a8ed93ec9f7307f95c591c99b7a7875324a480116921ad9152b32768bb587d75f11b4e80dec6e72
SSDEEP 3072:Fh21UML/00s/ZbNNyB5O63afQ9tXykpwRUirIXx:KaRUrx
TLSH
T11F54B834A6F72302D597D1F0E6F10E727C28B912D45FC199C03BCA296560ABAA7F4D2D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

bd:28:0f:2b:c8:21:68:6b:c0:3f:bf:ea:9a:b8:0c:a1:08:f6:ea:2a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_tr.dll

SHA256 8b56226aa5a63b03509900a3f234da8f5585bd666bef27a039c06ae09467dc88
MD5 e27e6a38d079b51f29bbc75438c7f87c
SHA1 573fb5a2d3a562252b362fbff58762f252ed4cd0
SHA512 f3a54856703198e08dab23b0eca097a80e93c00f1600632bd12fde60482b48714989a43c7f789fa6e8a6e46d26698455e8692b15e79ef372ac41efa8a7430295
SSDEEP 3072:u2F16RrQrxO9VO+AHaK+ypTWZvsnm+UJi96OotO4pabWIH2lAyvxvQXhi4TfzD1N:2vsnAk1qt+10b8
TLSH
T185540D0143ED5A0AFAF32F357DB462920BA77DB6BD39C24F2621215D0C716E099A4B73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

68:83:02:af:e3:2e:e0:c4:74:eb:76:38:fb:94:7d:18:a9:fb:da:3b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_uk.dll

SHA256 c163aee658ae1360336f193e932c8a53d1b1f5405bcef0caa354fefb416dab69
MD5 04b56dfd47d38d2b7ad3692643c28060
SHA1 0fd1f061103538e2aa973f90064fc3c5b50f87b5
SHA512 05595391b63b29d26cffd0f7488a49103c77ec7ced97a1aca5d2076eb96d9da5333dcdf83a3ee45f02035762db729c39796e8fd0cc161a277edbcf53400ffaaa
SSDEEP 3072:tiyCFSc2S57iUIMtQvGiHXTyL29s/F5JFUzHaljKf:QLWiztQuBeFf
TLSH
T1AE64870FBEBC9654EA99D2B14F628AD701A9F75023A8C2CDB24F7D24206C77573216C7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

56:30:56:0e:08:72:ba:5a:d3:f8:8d:45:79:ec:6e:6b:dd:0e:c7:d2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_vi.dll

SHA256 5f95821461a9d849902dad3f1ea5137c6b80443b7b5a66be60091538663c9ede
MD5 3ebe1552e8d65ee8c7470a34a972ed22
SHA1 fc8b60edf0609317592c0dafa860571a6eda8edf
SHA512 ed4799be351805bc07676550745af88e810b8bf7b24115ffdf0d4ffa380b2788c6e3b66c099f39a87e8aae857e598b948072ded139679fcde8d5cbc530798c19
SSDEEP 3072:4UJhlP9fD+1iwhAlSuhQb9PS5s2nVDVkCAbuRiRxhp4:42rsiwhchQbw5s2nVSBRhp4
TLSH
T1D164273203AE9100FEF713B2567DE7A0EE75FDD66C38E74712214609097A5822DA87E7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

65:6c:63:b5:ab:28:93:08:cc:85:00:6e:b0:6b:77:ba:8e:9c:cf:81

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_zhCN.dll

SHA256 98138cd3d79e0c0b4aa52e151490aa4b6e4639aa37d544bd14ecb8aba462ef19
MD5 40c4418e1113e2e168201ff94a86200b
SHA1 4d18c6b4211f761b7084339409099e4ec29441df
SHA512 e44987eccc2c70118b67d15a945fa1ad6dcbc3a7b3f679a028c3dacd90c5cc77d8d611c44b134462f47cf596091acc241906ba4aaccab6626dcedeef99e63a23
SSDEEP 3072:mEiZ+n3d2EH7GD9TG/KBrVnu/sHt4QegvjZrEd:gSd2EH7INBxu+40ad
TLSH
T11CC31808A7EF0E84FAF38F74ED76306253B67755D6158FCE0024C4582DA4AD16DA2B2E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

90:5e:5d:eb:4c:cf:09:e3:73:0a:eb:69:63:fd:a9:e6:13:7d:88:25

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_zhTW.dll

SHA256 5d0354b41bb9ad06245bea21770029d9e4fca69d31572052ffdac5782abc6a52
MD5 e626bb56eb99c19b5b39c132bf942a4c
SHA1 c88f485af0cb273f55cdc6ea3391abf3fa2adb70
SHA512 454aa79f9ff41e8f4f81dc06a60a4d508181180c602e317b24ff0d3a988d30b58d11b5f3e27b8ef7714de690e4f140daea2cf1c43e5790497cfd0f703c417209
SSDEEP 3072:6rNJgbkKZzOCEDzvBQLv5MMw7m4IqjfPc:kgCzKLv5MMx4N7c
TLSH
T1A7C3290127DE0244F9F34FB8AE72346167F6BA20E7648BDE1515C64C6DB0BD52C92B2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

cb:c7:e2:a1:bf:f6:7a:8a:40:1b:be:9c:f4:de:84:2f:62:38:1c:44

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Service.exe

IMPHASH d7dcd6f12981c67e2e627a0cd6d17ae0
SHA256 66fc59964d68c0c9773156a3bfc5195fbbe941a888ae5785356f485d8c896dd3
MD5 85bcaacea185d5320cb324db487f280d
SHA1 adc27007e6e467c219de384c651117ff6e8f5bec
SHA512 f5a6917bd364ef9b97ded2395810f6a51d7c0e366bfb71be3dd79090bbaae6506bf9c389aa64a35feae9ea960c8dd5725db8aed7ea3b556eff9e2230301f1641
SSDEEP 98304:Unfrk9CHj6mCXSb5qc+Qlr7VUPn6N0X8CIJe4vpgddGXrT5/nfVvH:sqaj7CDqvCPkesyyt39
TLSH
T1FA967D34BA85C527C95341F25A7D9B2B801CBF6B2B7184D742D8FB5D39306C34A32EA6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

2d:23:f6:0f:83:d3:ee:1e:76:50:bb:11:6c:22:e9:5e:7a:0f:2c:05

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

5395216

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\TeamViewer_Workspace\TeamViewer_13.2_Release\BuildTarget\QS_Release2017\TeamViewer_Service.pdb

kernel32

GetCurrentThreadId GetModuleFileNameW LoadLibraryExA GetModuleHandleA GetModuleFileNameA GetSystemDirectoryA CloseHandle InterlockedExchange InterlockedDecrement GetLastError lstrcmpiW DeleteCriticalSection RaiseException DecodePointer LeaveCriticalSection EnterCriticalSection GetModuleHandleW FreeLibrary GetProcAddress MultiByteToWideChar SizeofResource LoadResource FindResourceW LoadLibraryExW InitializeCriticalSectionAndSpinCount InterlockedIncrement InterlockedCompareExchange PostQueuedCompletionStatus SetEvent TlsAlloc InterlockedExchangeAdd TlsFree CreateEventA Sleep InitializeCriticalSection GetSystemInfo VirtualProtect VirtualQuery WideCharToMultiByte GetSystemDirectoryW SetUnhandledExceptionFilter GetCurrentProcessId GetCurrentProcess FindFirstFileW FindNextFileW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime FindClose DeleteFileW LoadLibraryW CreateFileW WriteFile HeapFree HeapSize HeapReAlloc HeapAlloc GetProcessHeap WaitForSingleObjectEx GetTickCount MoveFileExW CreateDirectoryW GetSystemTimeAsFileTime SetWaitableTimer TlsGetValue WaitForSingleObject SleepEx CreateEventW CreateWaitableTimerW OpenProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW LocalFree ResetEvent OpenEventA SetDllDirectoryW HeapSetInformation GetFileAttributesW UnregisterWaitEx WaitNamedPipeW ReadFile SetLastError ResumeThread CreateProcessW TerminateProcess WaitForMultipleObjects GetProcessId ProcessIdToSessionId WTSGetActiveConsoleSessionId RegisterWaitForSingleObject SetFilePointerEx ReleaseMutex CreateMutexW OpenMutexW GetFileSize GetVersionExW GetUserGeoID GetGeoInfoW GetComputerNameW GetTimeZoneInformation GetLocalTime GetTimeFormatW GetDateFormatW SystemTimeToFileTime VerSetConditionMask VerifyVersionInfoW GetNativeSystemInfo GetPrivateProfileStringW DuplicateHandle CreateSemaphoreA ReleaseSemaphore GetQueuedCompletionStatus TlsSetValue CreateIoCompletionPort QueueUserAPC TerminateThread SetThreadPriority QueryPerformanceCounter GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW GlobalMemoryStatusEx OpenEventW GetSystemPowerStatus IsDebuggerPresent OutputDebugStringW GetStringTypeW SwitchToThread EncodePointer CompareStringW LCMapStringW GetCPInfo FormatMessageA LoadLibraryA LCMapStringA GetUserDefaultLCID GetStringTypeExA GetCurrentDirectoryW GetFileAttributesExW GetFileInformationByHandle GetFullPathNameW RemoveDirectoryW SetEndOfFile SetFileAttributesW DeviceIoControl CopyFileW AreFileApisANSI WaitForMultipleObjectsEx CreateWaitableTimerA UnhandledExceptionFilter IsProcessorFeaturePresent InitializeSListHead GetStartupInfoW RtlUnwind InterlockedPushEntrySList CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW QueryPerformanceFrequency ExitProcess GetStdHandle GetCommandLineA GetCommandLineW GetACP GetCurrentThread GetFileType IsValidLocale EnumSystemLocalesW FlushFileBuffers GetConsoleCP GetConsoleMode ReadConsoleW FindFirstFileExW IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetEnvironmentVariableW SetStdHandle WriteConsoleW GetThreadTimes ExpandEnvironmentStringsA GetPrivateProfileIntW GetPrivateProfileSectionW WritePrivateProfileStringW LocalAlloc SetThreadAffinityMask GetVolumeInformationW UnmapViewOfFile CreateFileMappingA OpenFileMappingA MapViewOfFileEx SetFilePointer GetExitCodeThread GetOverlappedResult GetDriveTypeW PeekNamedPipe

Name

.text

Size

6.3MB

Virtual Size

6.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

243KB

Virtual Size

266KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

1024B

Virtual Size

816B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

281KB

Virtual Size

281KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

372KB

Virtual Size

371KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=18, id=241, version=40116,

count=182, id=243, version=40116,

count=38, id=242, version=40116,

count=4, id=199, version=41118,

count=27, id=259, version=26706,

count=18, id=261, productName=VS2017 v15.5.4 build 25834, version=25834,

count=36, id=260, version=26706,

count=84, id=261, version=26706,

count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=261, version=24728,

count=7, id=260, version=24728,

count=45, id=205, version=50522,

count=126, productName=Unmarked objects (old),

count=70, id=260, productName=VS2017 v15.6.0 build 26128, version=26128,

count=3, id=261, productName=VS2017 v15.3.3 build 25507, version=25507,

count=52, id=261, version=25019,

count=448, id=1, productName=Unmarked objects,

count=8, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=865, id=265, version=27027,

count=1, id=255, productName=VS2017 v15.9.7 build 27027, version=27027,

count=1, id=151,

count=1, id=258, productName=VS2017 v15.9.7 build 27027, version=27027,

TeamViewer_StaticRes.dll

SHA256 13a7c7459ba75a90717a0479598ec9ada256df67d908e184b0711a54952b1660
MD5 db272ef63b949ac670d6bd017b79eacc
SHA1 3b631d6a2e70daf7c9667ced09ee293e90cd8124
SHA512 5123866b327eb812fb69e30d39d9d5765e0590b4656500958671225fb4937c4353e052d2183156ae4e53a1fb8f0a2b8f28d41b28661a2eedd7005e52ea8d6e7e
SSDEEP 98304:7zaJcYTl5i5pDoCwug/4sh0SjjipEpieJCGHENk8NX:7WCol5i/SR4s2SdiUCGHENk85
TLSH
T1EE56DFA5FEF27AA7E41962325AD504009C331EC3E9916C46B6CDB82D1F307CD8D8B65E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

97:50:47:98:dd:66:fd:9a:74:cf:f1:73:a6:f9:db:0e:8f:3c:f8:2b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

tv_w32.dll

IMPHASH 781fb9256785dcc8f67af8fc5c83f3b8
SHA256 6ebf8b582b35aca6d700bc1a9243ac7b78dca52ebfe53ee7fe191a5156a3e169
MD5 fa0e687c19b3f562b795b2cc571c1841
SHA1 b587a28b768f868f103f8c7ff35f22c01c493d9d
SHA512 80d1032d364720efe914bf7ecf0ecf43d56a3ae118f88de11029dae823d6551f38b5ed67b3111718ca10d5a2160af0bb2bd815b353347ea4446daaefc3d91092
SSDEEP 12288:96On5eFeOPayaG4pzWQRwLAKY3RsqKfr1XeGAq0Hu4z:rn5eF7ayaGesqKfr1XeGAqF4z
TLSH
T1BA948D10BD82C472D1B334354679E6B10CBCAD210B359DCB63A92979AFB45C1BA3D63B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

60:66:7b:77:2c:d3:72:80:c2:ab:54:88:e7:fa:26:04:74:45:c8:81

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

73456

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\TeamViewer_Workspace\TeamViewer_13.2_Release\BuildTarget\Release2017\tv_w32dll.pdb

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

comctl32

InitCommonControlsEx

kernel32

CreateRemoteThread QueryPerformanceCounter EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetVersionExW GetFileAttributesExW FileTimeToSystemTime GlobalLock DeleteCriticalSection GlobalUnlock GetSystemDirectoryA LoadLibraryA FreeLibrary GetCurrentThreadId GetLocalTime GetModuleFileNameA InterlockedExchange InterlockedCompareExchange Thread32Next Thread32First SuspendThread ResumeThread DisableThreadLibraryCalls OpenMutexW OpenThread GetExitCodeProcess GetModuleFileNameW FreeLibraryAndExitThread Sleep LoadLibraryW CreateThread IsBadWritePtr GetCurrentProcess InterlockedDecrement CreateMutexW WaitForSingleObject ReleaseMutex OpenFileMappingW UnmapViewOfFile CreateEventW SetEvent LocalFree VerSetConditionMask VerifyVersionInfoW InterlockedIncrement IsBadReadPtr CreateFileMappingW MapViewOfFile GetTickCount VirtualQuery SetLastError LocalAlloc GetModuleHandleW Module32NextW HeapReAlloc HeapSize SetStdHandle GetStringTypeW SetConsoleCtrlHandler SetEnvironmentVariableW SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindNextFileA FindFirstFileExW FindFirstFileExA FindClose EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW GetFileType GetStdHandle WriteFile GetACP GetCurrentThread WideCharToMultiByte MultiByteToWideChar GetModuleHandleExW ExitProcess RaiseException EncodePointer LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RtlUnwind InterlockedFlushSList InterlockedPushEntrySList GetStartupInfoW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime IsProcessorFeaturePresent TerminateProcess WriteConsoleW GetProcessHeap GetCurrentProcessId HeapAlloc CloseHandle QueryPerformanceFrequency GetLastError CreateToolhelp32Snapshot OpenProcess GetModuleHandleA Module32First Module32Next VirtualAlloc VirtualFree HeapFree VirtualProtect GetProcAddress OutputDebugStringA OutputDebugStringW WaitForSingleObjectEx Module32FirstW CreateFileW SetUnhandledExceptionFilter UnhandledExceptionFilter DecodePointer FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP

user32

GetDC ClientToScreen MapWindowPoints GetUpdateRect FindWindowW GetDesktopWindow GetWindowLongW CallWindowProcW PostMessageW GetWindow SendMessageW GetSystemMetrics GetActiveWindow ShowWindow RedrawWindow GetWindowInfo TrackMouseEvent GetSysColor LoadBitmapW IsRectEmpty SetWindowLongW GetClientRect SystemParametersInfoW InvalidateRect FindWindowExW BeginPaint EndPaint GetWindowRect IsWindowVisible SetWindowPos GetWindowDC ReleaseDC RegisterClassExW LoadCursorW GetClassInfoExW RegisterClipboardFormatW DefWindowProcW SendMessageTimeoutW CallNextHookEx UnregisterClassW IsWindow SetTimer UnhookWindowsHookEx SendNotifyMessageW GetClassNameW SetWindowsHookExW KillTimer RegisterWindowMessageW DestroyWindow CreateWindowExW IsIconic IsZoomed

gdi32

Polyline SetPixel CreateCompatibleBitmap RectVisible GetPixel LineTo ExtCreatePen GetObjectW MoveToEx CreateSolidBrush GetStockObject CreatePen Rectangle BitBlt SelectObject CreateDIBSection CreateCompatibleDC GdiFlush DeleteDC DeleteObject

shell32

DragQueryFileW

ole32

CoUninitialize ReleaseStgMedium CoCreateInstance CoInitialize

Name

.text

Size

301KB

Virtual Size

300KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

68KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.shared

Size

512B

Virtual Size

36B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

tv_w32.exe

IMPHASH fb0b5b061482cf640a007cf49248aec2
SHA256 a700e4695856adb3eff2a3ce2f5db8252af2bc89d448cd4a5afc8a6a50dd2cc3
MD5 d2c0bcf6eae010b972706a82baa7c9a1
SHA1 c4eb9b383b89b978a0a42e673eb9169588c5aaf2
SHA512 69adb788008fc232914a8d2842a012eba23cebf1b88b3e0eaefeaefb79266baba53fdb2a378b09ab6a57b225660355d16407e5748944d64dace8a7f8577b49f8
SSDEEP 3072:nL+hAuPHlH8ocoEz+NxBN1x1BvKcssnXhvta3nVzt3ehNdIgIKBd4vE9H0M:6AuPHlHpEG1x1dVxveHOxrZH0M
TLSH
T1E6047C21B5C1C432D5B3553019F9EB75AABCBD301BB548DBA3C40B2A4F706E26635E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

6c:2a:a2:ad:74:13:be:1f:28:d0:63:e9:b6:14:87:6f:0e:c5:70:36

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

1

Major OS version

5

Entry point

55449

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\TeamViewer_Workspace\TeamViewer_13.2_Release\BuildTarget\Release2017\tv_w32exe.pdb

setupapi

SetupDiEnumDeviceInfo SetupUninstallOEMInfW SetupDiCallClassInstaller SetupDiSetClassInstallParamsW SetupDiGetDeviceRegistryPropertyW CM_Get_Device_ID_ExW SetupDiGetDeviceInfoListDetailW SetupDiGetClassDevsExW

kernel32

SetLastError CreateFileW ReadFile GetTickCount Sleep FreeLibrary GetModuleFileNameA LoadLibraryA GetProcAddress LoadLibraryW GetSystemDirectoryW OpenMutexW CreateWaitableTimerW SetWaitableTimer SetEvent SetFilePointer WriteFile ReleaseMutex CreateMutexW InterlockedIncrement InterlockedDecrement GetLocalTime GetCurrentThreadId GetCurrentProcessId LoadLibraryExA GetModuleHandleA GetSystemDirectoryA GetCommandLineW GetCurrentProcess CloseHandle CreateEventW VerifyVersionInfoW VerSetConditionMask GetWindowsDirectoryW GetModuleFileNameW GetLastError LocalFree SetStdHandle HeapSize HeapReAlloc GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers DecodePointer WaitForSingleObject GetModuleHandleW RaiseException GetSystemInfo VirtualProtect VirtualQuery WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead RtlUnwind EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW WideCharToMultiByte ExitProcess GetModuleHandleExW MultiByteToWideChar GetStdHandle GetACP GetStringTypeW HeapFree HeapAlloc GetFileType LCMapStringW FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap

advapi32

RegCloseKey RegSetValueExW RegOpenKeyExW DeleteService ControlService QueryServiceStatusEx OpenServiceW OpenSCManagerW CryptGetHashParam CryptDestroyHash CryptHashData CryptReleaseContext CryptCreateHash CryptAcquireContextW RegQueryValueExW RegOpenKeyW CloseServiceHandle

tv_x64.dll

IMPHASH 306ff5e22424e5bfcfc70dcd48ccfe91
SHA256 ad3992dae09d2678780c2152d382c2dde1b7ad516f1fe1aec38f6b1b80589eb9
MD5 aeff19b35f2a8daccc9269ad46193afb
SHA1 38b3f8df4266e3bbf127d3ad9fbf81c3a57a0e30
SHA512 4d7d02a62d4dff75cf4af0d285e26539fc496262f664b293d1fa3ffe18e04d85f7e0204bdb1b47ed3c1e2ce4629c435c7b53baf4e1f0d9e902e0dc5f9b16e1f0
SSDEEP 12288:nAhVtVwp/MB7r1c1F1VKRK2D9WQNAB3I+0W07:AhVtepQr1c1F1VKRK2D9hNAB3IO4
TLSH
T13CB47D16F7A50BB5D07BD23DC9628A02E9B178465721A38F03E8E3760F237A1697F711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

03:d4:ca:4e:60:07:80:98:14:bc:2a:f3:92:65:0e:84:fe:25:3e:5f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

2

Major OS version

5

Entry point

80932

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\TeamViewer_Workspace\TeamViewer_13.2_Release\BuildTarget\Release2017\tv_x64dll.pdb

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

comctl32

InitCommonControlsEx

kernel32

CreateRemoteThread QueryPerformanceCounter EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetVersionExW GetFileAttributesExW FileTimeToSystemTime GlobalLock DeleteCriticalSection GlobalUnlock GetSystemDirectoryA LoadLibraryA FreeLibrary GetCurrentThreadId GetLocalTime GetModuleFileNameA Thread32Next Thread32First SuspendThread ResumeThread DisableThreadLibraryCalls OpenMutexW OpenThread GetModuleFileNameW FreeLibraryAndExitThread Sleep LoadLibraryW CreateThread IsBadWritePtr CreateMutexW WaitForSingleObject ReleaseMutex OpenFileMappingW UnmapViewOfFile CreateEventW SetEvent LocalFree VerSetConditionMask VerifyVersionInfoW IsBadReadPtr CreateFileMappingW MapViewOfFile GetTickCount VirtualQuery SetLastError LocalAlloc HeapReAlloc HeapSize GetModuleHandleW GetStringTypeW SetConsoleCtrlHandler SetEnvironmentVariableW SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindNextFileA FindFirstFileExW FindFirstFileExA FindClose EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW GetFileType GetStdHandle GetACP GetCurrentThread WideCharToMultiByte MultiByteToWideChar GetModuleHandleExW ExitProcess RtlPcToFileHeader WriteFile RaiseException EncodePointer LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount InterlockedFlushSList InterlockedPushEntrySList RtlUnwindEx GetStartupInfoW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime IsProcessorFeaturePresent OutputDebugStringA GetProcessHeap GetCurrentProcessId HeapAlloc CloseHandle QueryPerformanceFrequency GetLastError CreateToolhelp32Snapshot OpenProcess GetModuleHandleA Module32First Module32Next VirtualAlloc VirtualFree HeapFree VirtualProtect GetProcAddress OutputDebugStringW WaitForSingleObjectEx CreateFileW SetStdHandle RtlUnwind TerminateProcess GetCurrentProcess WriteConsoleW FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter

user32

GetDC ClientToScreen MapWindowPoints GetUpdateRect FindWindowW GetDesktopWindow CallWindowProcW PostMessageW GetWindow SetWindowLongPtrW SendMessageW GetSystemMetrics GetWindowLongPtrW GetActiveWindow ShowWindow GetWindowInfo TrackMouseEvent GetSysColor LoadBitmapW IsRectEmpty GetClientRect IsZoomed SystemParametersInfoW InvalidateRect FindWindowExW BeginPaint EndPaint GetWindowRect IsWindowVisible SetWindowPos GetWindowDC ReleaseDC RegisterClassExW LoadCursorW GetClassInfoExW RegisterClipboardFormatW DefWindowProcW SendMessageTimeoutW CallNextHookEx UnregisterClassW IsWindow SetTimer UnhookWindowsHookEx SendNotifyMessageW GetClassNameW SetWindowsHookExW KillTimer RegisterWindowMessageW DestroyWindow CreateWindowExW IsIconic RedrawWindow

gdi32

Polyline SetPixel CreateCompatibleBitmap RectVisible GetPixel LineTo ExtCreatePen GetObjectW MoveToEx CreateSolidBrush GetStockObject CreatePen Rectangle BitBlt SelectObject CreateDIBSection CreateCompatibleDC GdiFlush DeleteDC DeleteObject

shell32

DragQueryFileW

ole32

CoUninitialize ReleaseStgMedium CoCreateInstance CoInitialize

Name

.text

Size

361KB

Virtual Size

360KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

108KB

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.shared

Size

512B

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

tv_x64.exe

IMPHASH aa614df48133381f46925a0ab97fd6fd
SHA256 4d378da436b9e8af8159dbaae33cf22e21de04843b63b2a3d9f3123f74b1ded4
MD5 caa20e242e521dde983333d35f323f04
SHA1 3f06936cbb50f17eced84e881639adad0cac1e99
SHA512 8e5f6ca58facc487ecf97e03e793ac2ec32efed4641e96ee845689a1666bee50519230b27e4220ef538821335deb4329385c0100fa015007f69acae39a363158
SSDEEP 3072:gvs1ZZrM9CvoPZEW5ciMCTmbkVcoczmgeQv9lobkWLwO+F/Srw1d1W:n1ZZrQCvoPeCcsSCcrWKdWoK8BW
TLSH
T1D5246D1AB39548F8E167C138CD528A15E67374050B71CAEF1394037A9F677E1AE3EB22
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

df:f3:65:7e:c0:30:ed:41:b3:53:23:11:cc:eb:6b:11:41:74:01:a8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

2

Major OS version

5

Entry point

59076

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

E:\TeamViewer_Workspace\TeamViewer_13.2_Release\BuildTarget\Release2017\tv_x64exe.pdb

setupapi

SetupDiEnumDeviceInfo SetupUninstallOEMInfW SetupDiCallClassInstaller SetupDiSetClassInstallParamsW SetupDiGetDeviceRegistryPropertyW CM_Get_Device_ID_ExW SetupDiGetDeviceInfoListDetailW SetupDiGetClassDevsExW

kernel32

SetLastError CreateFileW ReadFile GetTickCount Sleep FreeLibrary GetModuleFileNameA LoadLibraryA GetProcAddress LoadLibraryW GetSystemDirectoryW OpenMutexW CreateWaitableTimerW SetEvent WaitForSingleObject SetFilePointer WriteFile ReleaseMutex CreateMutexW GetLocalTime GetCurrentThreadId GetCurrentProcessId LoadLibraryExA GetModuleHandleA GetSystemDirectoryA GetCommandLineW GetCurrentProcess CloseHandle CreateEventW VerifyVersionInfoW VerSetConditionMask GetWindowsDirectoryW GetModuleFileNameW GetLastError LocalFree SetStdHandle HeapSize HeapReAlloc GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers WriteConsoleW SetWaitableTimer RtlVirtualUnwind RaiseException GetSystemInfo VirtualProtect VirtualQuery GetModuleHandleW RtlCaptureContext RtlLookupFunctionEntry UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx RtlPcToFileHeader EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW WideCharToMultiByte ExitProcess GetModuleHandleExW MultiByteToWideChar GetStdHandle GetACP GetStringTypeW HeapFree HeapAlloc GetFileType LCMapStringW FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap

advapi32

RegCloseKey RegSetValueExW RegOpenKeyExW DeleteService ControlService QueryServiceStatusEx OpenServiceW OpenSCManagerW CryptGetHashParam CryptDestroyHash CryptHashData CryptReleaseContext CryptCreateHash CryptAcquireContextW RegQueryValueExW RegOpenKeyW CloseServiceHandle

uninstall.exe

IMPHASH 4ea4df5d94204fc550be1874e1b77ea7
SHA256 14ac1a97d5ce459e06f4ec6e68973f03d7d25171f7d6d1765bfc78566e29b8f9
MD5 7a69f536e84bab696cce49a93ee22c27
SHA1 4cf6ae7144fc8bb609e8613ab95a6b02c318b971
SHA512 6128075888c9d61c735726f365aa20ada63f94266461b3b228e49418f762ee1e79a588f5ff4dd7de06f606c6903f34b46668f9ef0dc54bfd382a2d60a61835c9
SSDEEP 3072:PAe+3aJpqWXTBum5GfqPvbiOjpyWD1DTrNi0ANK6PlHOaOEKa3jP2qJ40sp:YB+pqUFdPDiOJxDTrTsLVO6P2641p
TLSH
T16F9495F9D7E356D3F8326A36CB91523460323EC9A4E46DF556C8B72C49301DEA21E92C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

b8:52:41:73:1b:75:ef:3e:f2:2e:29:85:05:7b:f0:e5:3c:9d:db:07

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Apr 24, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

4

Entry point

13238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount CreateFileW GetFileSize MoveFileW SetFileAttributesW GetModuleFileNameW CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode WaitForSingleObject GetCurrentProcess CompareFileTime GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GetDiskFreeSpaceW lstrlenW lstrcpynW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/FindProcDLL.dll

IMPHASH e26d7460d0c04056b9226a899477ba4d
SHA256 6eb09ce25c7fc62e44dc2f71761c6d60dd4b2d0c7d15e9651980525103aac0a9
MD5 6f73b00aef6c49eac62128ef3eca677e
SHA1 1b6aff67d570e5ee61af2376247590eb49b728a1
SHA512 678fc4bf7d345eeb99a3420ec7d0071eaba302845e93b48527d9a2a9c406709cc44ec74d6a889e25a8351a463803f8713a833df3a1707a5ad50db05240a32938
SSDEEP 384:DZoRF0XXUuJReQg0Tw67ADWBTgmldIogUD3GLgFmyaX/fVYcWJQCDmrinogRdBl:DZaF0HtTwuz9yu3KgwRX1nWJ1q+noI
TLSH
T12DC26C107C9042B7D28E5671A1E50F075B3F6E512AE65883CF256ADA2D612F0FA3F31B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6100

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/KillProcDLL.dll

IMPHASH d806a080e21508dd768fa70be247d2ae
SHA256 de1177a4bd1c56c3555f366d40b37d7dd9cb25e16c4973d0a4d22bf9a8af7aed
MD5 1cc87d2b5a79b18f133b4f944e2f2f74
SHA1 98e0ddb727c76e06be1668434d754e5b80a0c154
SHA512 d8fee1c09fef9af4e1f38baaffa3a6d059713b14ecad900815c086cc22855644fcdeacd6bba31ea6e6925831e650f7b0d34e6dea4c57a978fb4f5bf0cd6d72a9
SSDEEP 384:JLmJwO50x66T9JOpOUT38YZvml7xoKdyuwlx8xSiorppugBwUdJopS:JW50hJwwUTsXdPwxvtpDtdJo
TLSH
T1DFF26C507C8144F7C28E4235A5A9AB179FBF692036E55983CF269EDA1C311F0E93B307
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6841

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 982c5fb7ada7d8c9bc3e419d1c35da6f05bc5dd845940c179af3a33d00a36a8b
MD5 0ff2d70cfdc8095ea99ca2dabbec3cd7
SHA1 10c51496d37cecd0e8a503a5a9bb2329d9b38116
SHA512 cb5fc0b3194f469b833c2c9abf493fcec5251e8609881b7f5e095b9bd09ed468168e95dda0ba415a7d8d6b7f0dee735467c0ed8e52b223eb5359986891ba6e2e
SSDEEP 192:eK24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlASl:u8QIl975eXqlWBrz7YLOlA
TLSH
T12B325C02135481F3E4918138C86B3A276B6A15029BF98E57DFD39646BE30BE3BD7D603
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/TvGetVersion.dll

IMPHASH 8fe1425ee6d46ec8c7cfcf0fd32a8530
SHA256 c67cbd5e35e1ce0c7ba17c55d8e2bc33afd5e0a68774554a1fe7216d330c709e
MD5 05f51bc8ffb2c8f5a2825bf5680301cf
SHA1 30f7f77dce1fb3526142780e9f5bd5c11622d6b6
SHA512 1e041aaa37dd00414ad955ebc8c0f708589014d2085a5a0b95a31f4d694bb1cc4994bb1324d4b983cbad0449fb0a05560d82c60fdbfc78be67ff61275e451233
SSDEEP 3072:4J7KJkcma0VkpOG/374vnriZ1nmTaK405/+ncMCQ2bDh:6EkcmYOG/37MnGZoeKxpuuQ
TLSH
T1D7245B0177E4843AF2F726746DF6C6604EBDBC725934D18FE780892A2E70A85DB24727
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

67443

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

shlwapi

StrChrW StrRChrW

wtsapi32

WTSEnumerateProcessesW WTSFreeMemory

msi

ord205 ord45 ord16 ord70 ord141

psapi

GetProcessImageFileNameW

kernel32

lstrcpyA lstrcmpiA lstrcpynA lstrlenA lstrcpyW lstrcpynW Sleep GetVersionExW LocalFree FreeLibrary LoadLibraryW GetExitCodeProcess WaitForSingleObject CreateProcessW OpenProcess Process32NextW Process32FirstW CreateToolhelp32Snapshot TerminateProcess DeleteFileW GetWindowsDirectoryW GetTempPathW InterlockedDecrement WideCharToMultiByte CreateDirectoryW GetFileAttributesW MultiByteToWideChar RtlUnwind HeapFree RaiseException HeapReAlloc MoveFileW FindClose FileTimeToSystemTime FileTimeToLocalFileTime FindFirstFileExW EncodePointer DecodePointer GetCurrentThreadId GetCommandLineA IsProcessorFeaturePresent HeapAlloc TlsAlloc TlsGetValue TlsSetValue TlsFree CreateFileW SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess EnterCriticalSection LeaveCriticalSection lstrlenW GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW HeapCreate HeapDestroy GetFullPathNameW GetFileInformationByHandle PeekNamedPipe GetFileType GetFileSize HeapSize ExitProcess SetHandleCount GetStdHandle GetStartupInfoW DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime WriteFile GetModuleFileNameW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer GetStringTypeW GetUserDefaultLCID GetLocaleInfoW GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetEndOfFile GetProcessHeap InterlockedExchange GetTimeZoneInformation WriteConsoleW CompareStringW SetEnvironmentVariableA InterlockedCompareExchange InitializeCriticalSection GlobalAlloc ReadFile CloseHandle GlobalFree GetLastError lstrcatW InitializeCriticalSectionAndSpinCount GetDriveTypeW GetCurrentProcessId GetModuleHandleW GetProcAddress VerSetConditionMask VerifyVersionInfoW lstrcmpiW InterlockedIncrement GetCurrentDirectoryW

user32

SendMessageW PostMessageW GetSystemMetrics wsprintfW

gdi32

AddFontResourceExW RemoveFontResourceExW

winspool.drv

EnumPrintProcessorsW EnumPrinterDriversW

advapi32

RegSetValueExW RegCloseKey RegEnumKeyExW RegDeleteKeyW GetUserNameW LookupAccountNameW ConvertSidToStringSidW DeleteService ControlService RegOpenKeyExA RegQueryValueExA OpenProcessToken LookupPrivilegeValueW OpenServiceW CloseServiceHandle QueryServiceStatus RegQueryValueExW RegEnumValueW RegCreateKeyExW RegOpenKeyExW RegFlushKey ChangeServiceConfig2W RegDeleteValueW AdjustTokenPrivileges StartServiceW OpenSCManagerW

shell32

ShellExecuteExW SHFileOperationW

ole32

CoInitialize CoUninitialize CLSIDFromString CLSIDFromProgID CoCreateInstance OleRun

oleaut32

SysAllocString SysFreeString GetErrorInfo

$_6_/tvqsfilesx64.7z

SHA256 42d8f51122d953578f956bead2f6ccfee8dff9c73a83c4a1c6437322099a1153
MD5 7a8387c61696693038dcd09d5de2bdba
SHA1 de98edea1309d1caba2f395c4381b7f8ad595327
SHA512 167c3656d10fb9b0ddf934a25d67e84549395df611e97b9c3d5375663938bc4950e724c5539c78a40eba652db5b2c8fce196b2e2e1b84dafa3a12c6289bda18f
SSDEEP 192:q3vRpD/cA2sPoQAXDJtNichsyc4Ydyqk/IfkbSENxbZ5sRUzTsS5PsnpkMOZAuQn:Ovn4zX1cyao+fk+Eb15PvPokBZAF
TLSH
T11532D1588E2FFA0C916F9D1DA3C4BEE3B05FD302751C405DB2AD6A9A4632DF11A5520A
MD5 SHA1 SHA512 SSDEEP TLSH

x64/TVMonitor.inf

SHA256 60fa2925c589ac38bab74713e1b0bb2a205a8c825d614b971fc3426991cd86ca
MD5 5c05880e0ed65fac3a4dfb7b6802b898
SHA1 55ea8dac7093123e26584a49012517818c0f586d
SHA512 5176504de06e6f8249815f8f8472ed7c9a26003e92ecd80299da8b611a630a1ba8179419cdf50f02b78a19caf221d6e0ae59452b224dc55feef72a93cd4d147d
TLSH
T181317579014B553AF80372367D9B7642729A3003B0E94965B1ECC2D1BB6AC1C6B262FF
MD5 SHA1 SHA512 TLSH

x64/TVMonitor.sy_

IMPHASH bd2fee8a544a1c6656edb847a80a08c5
SHA256 78318c6a8ae65fb3afe6ba06cf1bda69903390e250950d3bf78895cd79afd4d8
MD5 b7ca6668278fbae3fbd649285f8ccc35
SHA1 dd5cd2fb0e6818eb56268f0d6e72d0f5ac74aef4
SHA512 7305b979abbef7beb4789261e9fc0ebde00415bb00eceee2289cd1fcf91467ccc7c84ed77e7f5cd042243508b5fc8c3384ea59d6a1a17497781110fe5238103c
SSDEEP 192:qumQmspn15C9l0HDRRdrauc056CAyIKGNsuIeInYe+PjPtrwnc8ijtlAur9ZCsp5:qmF100Hzdrau/NAyoauQnYPLWUUHeMt
TLSH
T10E824C931B646077E9D7CA75C6D2C7A39D31B5A03F9589CF0062C2962E42FF0373A21A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

29:60:7a:cd:03:f6:4a:bf:52:39:8b:f3:de:04:e8:19:d1:a0:8c:34

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Goeppingen,ST=Baden-Wuerttemberg,C=DE

Chains

May 12, 2017

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Goeppingen,ST=Baden-Wuerttemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Goeppingen,ST=Baden-Wuerttemberg,C=DE

Serial Number

7e:c0:da:c3:9a:e3:64:6b:14:93:27:7f:76:1a:0e:c3

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 28, 2016 - Mar 3, 2018

Subject

Serial Number

61:19:93:e4:00:00:00:00:00:1c

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Feb 22, 2011 - Feb 22, 2021

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

6

Entry point

24676

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

c:\teamviewer_tvmonitordriver\drivers\win\monitor\objfre_win7_amd64\amd64\TVMonitor.pdb

Name

.text

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1024B

Virtual Size

628B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

288B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

228B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PAGE

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

960B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

x64/tvmonitor.cat

SHA256 143df27418b1eaf375bed6291765e2e77166830d6216a6bfb71a075735f05da5
MD5 1f2380a5474583dba929f761a760546f
SHA1 561248613c6f443d8a993900e2dbebf3b718a660
SHA512 4309403df0a29c53190833aa13a6e67a4501650b77106bc62925f691dffedcab184b6df3b8ba750e0a8fd4c9b6e0919b729f5bd250413178cd7a4ce287241aed
SSDEEP 192:Ast9AnYe+PjPtrwnc8ijtlAur9ZCspE+TM4rwMcA0qTv0a:NAnYPLWUUHeM4cAVv0a
TLSH
T190020AD70A192467EDC78EA0D6D2D16BED31F7926DC8549E64B683822EC1FB1370940E
MD5 SHA1 SHA512 SSDEEP TLSH

$_6_/tvqsfilesx86.7z

SHA256 37e2ed4547e380421fc35e8e7b7767bb7ede3c6193e3188d20ab1838a30299e3
MD5 5e088d2d512a9d9c96498859e5d09719
SHA1 464b99556da7baedd4614de977eee77f7b22a4ce
SHA512 aa31c8c60b0b824ca84cfb7f80b6e99625819cd3dc95cba1873190c6facc76fa8aec08371c6544f4fb7e3d4a8d5966cd77852779a62f34066d47f79e8ebaa248
SSDEEP 192:zJrGvOF6Q8DYC87LS2CFCQGRyZbl9+XzWDdUAIeSzJpKSZD6PRZGjFb0xn:zJrGhxMCeLSxFBZblmWBWhzJrwPqeZ
TLSH
T17822BF4BCB83E307C81B3347669B11959AC7D5607FDA3AF319185B0746291B693351D2
MD5 SHA1 SHA512 SSDEEP TLSH

x86/TVMonitor.inf

SHA256 267253de35f1aa852e6499af811445e43a00470eecbf8d1f054e9363e07cd2fe
MD5 558934fcb110d20c4be32dd144399ca1
SHA1 37028ffd14bc126733f3cfee368765d6c3868eb5
SHA512 af4b2af4f5676a19977eb59c29286d778ef3391242ae6e1c7f4552cd54ed69344153ec7e87160682fbe96a46e1219248d556449be7f630cd583c8c92e29c1fc1
TLSH
T1F8317778044B553AF80372367D9B7742725A3003B0D98910B1DCC2D0BB6AD1C6B366FB
MD5 SHA1 SHA512 TLSH

x86/TVMonitor.sy_

IMPHASH 0a4b1988011b75460fe539769b8577b2
SHA256 ddca680bd7b542d0a010760d7c68c856e02ad5a19ca1fb14e6500669ed180e07
MD5 e5b882729ce85f3c365988e4d5f05323
SHA1 6b47626f1bc85d3d8c4709870704dee9a3d726b8
SHA512 fd8da18b05d3f3b17cf8f288fd7f38f7f9a4b8258b2571dad1b0763d1490e4556d8b62dc19925cab6cb66d8f8f52a32d858a82c8ae45facb21b22ed654814371
SSDEEP 192:ndPLaKAYh8bzV52RqInf/nYe+PjPtrwnc8ijtlAur9ZCspE+TMArlMK4:nJLFAY2bzV57WXnYPLWUUHeMtz
TLSH
T161622B8B07282472EEC78EB0C996D2629877BBA14F58A0CB50B581C62DC1FF03B1571F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

5f:de:f0:fe:c2:39:13:da:ed:30:b0:89:10:26:13:ea:05:d1:4d:f1

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Goeppingen,ST=Baden-Wuerttemberg,C=DE

Chains

May 12, 2017

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Goeppingen,ST=Baden-Wuerttemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Goeppingen,ST=Baden-Wuerttemberg,C=DE

Serial Number

7e:c0:da:c3:9a:e3:64:6b:14:93:27:7f:76:1a:0e:c3

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 28, 2016 - Mar 3, 2018

Subject

Serial Number

61:19:93:e4:00:00:00:00:00:1c

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Feb 22, 2011 - Feb 22, 2021

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

6

Entry point

4414

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\teamviewer_tvmonitordriver\drivers\win\monitor\objfre_wxp_x86\i386\TVMonitor.pdb

Name

.text

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

384B

Virtual Size

280B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

128B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

PAGE

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

960B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

384B

Virtual Size

262B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

x86/tvmonitor.cat

SHA256 9956b649c577fae5005863dd62899aebbdd248c8ddf134a66300fa9a9f8850d8
MD5 efc78a1a843a152e15e85bb056fbdc24
SHA1 f37776fcd88c5279fc77fac9d013515816f195d9
SHA512 003a5b619081d00c32ae66a9576f3470d7192db743b6e480c4e8b631b8c268d164937503939fbbaa1f6c1e76ac0ea6b277c9fee4a95fcd27d28fddd2046ff6c3
SSDEEP 192:fc9NdJnYe+PjPtrwnc8ijtlAur9ZCspE+TM4rhM9bjTT:aJnYPLWUUHeMXN3
TLSH
T101021BD70A191462EDC78EA0C5C6D12BAC71F7D2ADC854AE60B683C16EC2FA13B5D40E
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

TeamViewer.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/InstallOptions.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/TvGetVersion.dll

shlwapi

wtsapi32

msi

psapi

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

generic

$PLUGINSDIR/nsis7z.dll

kernel32

user32

oleaut32

generic

$PLUGINSDIR/wincheck.ini

$_6_/tvqsfiles.7z

TeamViewer.exe

PE Signature issue

kernel32

generic

TeamViewer_Desktop.exe

PE Signature issue

kernel32

generic

TeamViewer_Note.exe

PE Signature issue

kernel32

generic

TeamViewer_Resource_ar.dll

PE Signature issue

generic

TeamViewer_Resource_bg.dll

PE Signature issue

generic

TeamViewer_Resource_cs.dll

PE Signature issue

generic

TeamViewer_Resource_da.dll

PE Signature issue

generic

TeamViewer_Resource_de.dll

PE Signature issue

generic

TeamViewer_Resource_el.dll

PE Signature issue

generic

TeamViewer_Resource_en.dll