TeamViewerQS_es[.]exe

resource	yara_rule
static1/unpack002/$PLUGINSDIR/nsArray.dll	acprotect
static1/unpack005/$PLUGINSDIR/nsArray.dll	acprotect

resource	yara_rule
static1/unpack002/$PLUGINSDIR/nsArray.dll	upx
static1/unpack005/$PLUGINSDIR/nsArray.dll	upx

resource
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/TvGetVersion.dll
unpack002/$PLUGINSDIR/Base64.dll
unpack002/$PLUGINSDIR/FindProcDLL.dll
unpack002/$PLUGINSDIR/InstallOptions.dll
unpack002/$PLUGINSDIR/InvokeShellVerb.dll
unpack002/$PLUGINSDIR/KillProcDLL.dll
unpack002/$PLUGINSDIR/LangDLL.dll
unpack002/$PLUGINSDIR/StartMenu.dll
unpack002/$PLUGINSDIR/System.dll
unpack002/$PLUGINSDIR/TvGetVersion.dll
unpack002/$PLUGINSDIR/UAC.dll
unpack002/$PLUGINSDIR/UserInfo.dll
unpack002/$PLUGINSDIR/dialogsEx.dll
unpack002/$PLUGINSDIR/linker.dll
unpack002/$PLUGINSDIR/nsArray.dll
unpack003/out.upx
unpack002/$PLUGINSDIR/nsExec.dll
unpack002/$PLUGINSDIR/nsis7z.dll
unpack005/$PLUGINSDIR/FindProcDLL.dll
unpack005/$PLUGINSDIR/InstallOptions.dll
unpack005/$PLUGINSDIR/InvokeShellVerb.dll
unpack005/$PLUGINSDIR/KillProcDLL.dll
unpack005/$PLUGINSDIR/System.dll
unpack005/$PLUGINSDIR/TvGetVersion.dll
unpack005/$PLUGINSDIR/UAC.dll
unpack005/$PLUGINSDIR/UserInfo.dll
unpack005/$PLUGINSDIR/nsArray.dll
unpack006/out.upx
unpack005/$PLUGINSDIR/nsExec.dll

resource
unpack001/$_4_/TeamViewer_.exe
unpack004/TeamViewer_Desktop.exe
unpack004/TeamViewer_Note.exe
unpack004/TeamViewer_Resource_ar.dll
unpack004/TeamViewer_Resource_bg.dll
unpack004/TeamViewer_Resource_cs.dll
unpack004/TeamViewer_Resource_da.dll
unpack004/TeamViewer_Resource_de.dll
unpack004/TeamViewer_Resource_el.dll
unpack004/TeamViewer_Resource_en.dll
unpack004/TeamViewer_Resource_es.dll
unpack004/TeamViewer_Resource_fi.dll
unpack004/TeamViewer_Resource_fr.dll
unpack004/TeamViewer_Resource_he.dll
unpack004/TeamViewer_Resource_hr.dll
unpack004/TeamViewer_Resource_hu.dll
unpack004/TeamViewer_Resource_id.dll
unpack004/TeamViewer_Resource_it.dll
unpack004/TeamViewer_Resource_ja.dll
unpack004/TeamViewer_Resource_ko.dll
unpack004/TeamViewer_Resource_lt.dll
unpack004/TeamViewer_Resource_nl.dll
unpack004/TeamViewer_Resource_no.dll
unpack004/TeamViewer_Resource_pl.dll
unpack004/TeamViewer_Resource_pt.dll
unpack004/TeamViewer_Resource_ro.dll
unpack004/TeamViewer_Resource_ru.dll
unpack004/TeamViewer_Resource_sk.dll
unpack004/TeamViewer_Resource_sr.dll
unpack004/TeamViewer_Resource_sv.dll
unpack004/TeamViewer_Resource_th.dll
unpack004/TeamViewer_Resource_tr.dll
unpack004/TeamViewer_Resource_uk.dll
unpack004/TeamViewer_Resource_vi.dll
unpack004/TeamViewer_Resource_zhCN.dll
unpack004/TeamViewer_Resource_zhTW.dll
unpack004/TeamViewer_Service.exe
unpack004/TeamViewer_StaticRes.dll
unpack004/outlook/ManagedAggregator.dll
unpack004/outlook/TeamViewerMeetingAddIn.dll
unpack004/outlook/TeamViewerMeetingAddinShim.dll
unpack004/outlook/TeamViewerMeetingAddinShim64.dll
unpack004/tv_w32.dll
unpack004/tv_w32.exe
unpack004/tv_x64.dll
unpack004/tv_x64.exe
unpack004/uninstall.exe

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

TeamViewerQS_es.exe

IMPHASH b78ecf47c0a3e24a6f4af114e2d1f5de
SHA256 df26627cc29716b65a3ed72f78d59808244f9bc4ad2624657ddbee79d2baa422
MD5 673d583d7c195cf565bb8cb0ced65f56
SHA1 cea8123b769226630f78f03fe027270abec6a7aa
SHA512 3bc7a3d37336077c31337c3b1026c92ffb55fe2da5aec9c79b57f98fb31cebffe45f2c3335fac3cd6cff8e1cb445e114cec10bcf5fa95a467bf07972843cb9f4
SSDEEP 393216:VAj+jwYyVd7lwti2RPxL8L99PUalje3ZpUydZsjiYQtz+v5kJ2h6fgZOW3vh:SjdpwM2JS99ReppUNjiD+v5kJ2HZ9J
TLSH
T17E3733F997E352D7F8325A36D6A2127420313FD464E46DF55AC8B72C4A302DEA31E92C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

22:b5:c7:9a:90:ca:83:3b:f7:9d:72:f2:66:04:79:51:52:3a:cd:e6:83:91:5b:39:ca:04:e7:1f:f9:43:04:c9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

6d:c4:de:6f:6d:e7:97:b3:74:00:99:8f:80:a7:37:e5:d7:a4:67:b4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

02:87:14:d7:00:5c:69:cd:85:95:c1:cc:3d:dc:31:14

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2019 - Feb 13, 2020

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

12505

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA GetFileAttributesA SetFileAttributesA GetWindowsDirectoryA GetTempPathA GetCommandLineA lstrlenA GetVersion SetErrorMode lstrcpynA ExitProcess GetFullPathNameA GlobalLock CreateThread GetLastError CreateDirectoryA CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA ReadFile WriteFile lstrcpyA MoveFileExA lstrcatA GetSystemDirectoryA GetProcAddress CloseHandle SetCurrentDirectoryA MoveFileA CompareFileTime GetShortPathNameA SearchPathA lstrcmpiA SetFileTime lstrcmpA ExpandEnvironmentStringsA GlobalUnlock GetDiskFreeSpaceA GlobalFree FindFirstFileA FindNextFileA DeleteFileA SetFilePointer GetPrivateProfileStringA FindClose MultiByteToWideChar FreeLibrary MulDiv WritePrivateProfileStringA LoadLibraryExA GetModuleHandleA GetExitCodeProcess WaitForSingleObject GlobalAlloc

user32

ScreenToClient GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard PostQuitMessage GetWindowRect EnableMenuItem CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA ReleaseDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndDialog RegisterClassA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx GetDC CreateDialogParamA SetTimer GetDlgItem SetWindowLongA SetForegroundWindow LoadImageA IsWindow SendMessageTimeoutA FindWindowExA OpenClipboard TrackPopupMenu AppendMenuA EndPaint DestroyWindow wsprintfA ShowWindow SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegDeleteKeyA SetFileSecurityA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegOpenKeyExA RegEnumValueA RegDeleteValueA RegCloseKey RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH 8c8a576201f68de1a3f26fc723b9f30f
SHA256 98bcd1dd88642f4dd36a300c76ebb1ddfbbbc5bfc7e3b6d7435dc6d6e030c13b
MD5 b8992e497d57001ddf100f9c397fcef5
SHA1 e26ddf101a2ec5027975d2909306457c6f61cfbd
SHA512 8823b1904dccfaf031068102cb1def7958a057f49ff369f0e061f1b4db2090021aa620bb8442a2a6ac9355bb74ee54371dc2599c20dc723755a46ede81533a3c
SSDEEP 192:PPtkumJX7zB22kGwfy0mtVgkCPOs81un:E702k5qpds8Qn
TLSH
T19A325C15135046F3E1D2853C142B3AAB6FB869118AF04E43CFB36852EF386C79D79352
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

9995

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/TvGetVersion.dll

IMPHASH 0aa4910d794270f48586a60a5dca5262
SHA256 a4db659c6265ba7efbbd4906257ef6cdb8f9b1fefba78f01425390729ab3d1f2
MD5 d2ac4ca57f4b624c444c17e8a353deaa
SHA1 d713b2b4ff0cec01b5c89bd26127012eed460a32
SHA512 db991671548d9f239acf7b77b47ccbf438c626e803026a68d7c67ec5b3923195c8745f6adbe730fe4c049237217849f8f9f47fc335cf94b1413a7debc9b8d9b1
SSDEEP 3072:CpotVlHTjsWb8CCIzLumhachhNwetDe0KQWi+ndms6fYXqR697GX3dcK7TD5:ak/uYhhvx4JndUgXO6wiWD
TLSH
T1DA147D167680C036C2E71130997A67721BFDB8714AB594CFEBD88F2A1FA46D5DB2430B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

69961

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

shlwapi

StrChrA StrRChrA

wtsapi32

WTSEnumerateProcessesA WTSFreeMemory

msi

ord204 ord44 ord15 ord67 ord141

psapi

GetProcessImageFileNameA

kernel32

lstrcatA lstrlenA lstrcpyA lstrcpynA Sleep GetVersionExA LocalFree FreeLibrary LoadLibraryA GetExitCodeProcess WaitForSingleObject CreateProcessA OpenProcess Process32Next Process32First CreateToolhelp32Snapshot TerminateProcess DeleteFileA GetWindowsDirectoryA GetTempPathA InterlockedDecrement CreateDirectoryA GetFileAttributesA MultiByteToWideChar WideCharToMultiByte RtlUnwind HeapFree RaiseException HeapReAlloc MoveFileA FindClose FileTimeToSystemTime FileTimeToLocalFileTime FindFirstFileExA EncodePointer DecodePointer GetCurrentThreadId GetCommandLineA HeapAlloc IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW GlobalAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetDriveTypeA GetFileType GetStartupInfoW DeleteCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW HeapCreate HeapDestroy ReadFile GetFileInformationByHandle PeekNamedPipe GetCurrentDirectoryW HeapSize ExitProcess GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime WriteFile GetModuleFileNameW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer GetStringTypeW GetUserDefaultLCID GetLocaleInfoW GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetDriveTypeW SetEndOfFile GetProcessHeap GetTimeZoneInformation LoadLibraryW WriteConsoleW CreateFileW CompareStringW SetEnvironmentVariableA InitializeCriticalSection CloseHandle GlobalFree GetLastError GetCurrentProcessId GetModuleHandleA CreateFileA InitializeCriticalSectionAndSpinCount GetFileSize GetProcAddress VerSetConditionMask VerifyVersionInfoA lstrcmpiA SetLastError GetFullPathNameA

user32

SendMessageA PostMessageA GetSystemMetrics wsprintfA

gdi32

AddFontResourceExA RemoveFontResourceExA

winspool.drv

EnumPrintProcessorsA EnumPrinterDriversA

advapi32

RegEnumKeyExA RegDeleteKeyA GetUserNameA LookupAccountNameA ConvertSidToStringSidA DeleteService ControlService StartServiceA OpenSCManagerA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegDeleteValueA QueryServiceStatus RegCloseKey RegSetValueExA RegQueryValueExA RegEnumValueA RegCreateKeyExA RegOpenKeyExA RegFlushKey ChangeServiceConfig2A OpenServiceA CloseServiceHandle

shell32

ShellExecuteExA SHFileOperationA

ole32

CoInitialize CoUninitialize CLSIDFromString CLSIDFromProgID CoCreateInstance OleRun

oleaut32

SysFreeString VariantClear SysAllocString GetErrorInfo

$_4_/TeamViewer_.exe

IMPHASH 4ea4df5d94204fc550be1874e1b77ea7
SHA256 bce0baeca1bfd7b52d9c5c677c9e77208bf75cc3212cf306141dd9439097e462
MD5 fb64c53bd7981d745ff71a9c71500d7d
SHA1 4ab54941db4d1e5f70e8f8ff27c33f74d8f755de
SHA512 f1910a5fb9ccd58115edaa7c7667b2f85ee96a23388ea94afab73020b76e7f1c929c2c69eae905dee68fdc5af675da976a974cc9ced14a6bd49f901ba8941f26
SSDEEP 393216:8jwYyVd7lwti2RPxL8L99PUalje3ZpUydZsjiYQtz+v5kJ2h6fgZOW3vhJ:PpwM2JS99ReppUNjiD+v5kJ2HZ9JJ
TLSH
T1812733A957E382DBF8325A36D6A2127424313FD414E46DF61BC8B72C4A352DEA31ED1C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

06:ac:2a:71:6b:3e:61:d8:4e:bd:02:40:91:3f:70:87:96:0e:7c:e4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

4

Entry point

13238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount CreateFileW GetFileSize MoveFileW SetFileAttributesW GetModuleFileNameW CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode WaitForSingleObject GetCurrentProcess CompareFileTime GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GetDiskFreeSpaceW lstrlenW lstrcpynW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/Base64.dll

IMPHASH ad07268da82afb689855dbfe2dd9f0d2
SHA256 015f30080a8a8ef5c9ee8751400100e3c8abb48d5c8ab5208a48daae39d22e9f
MD5 20dc0e30cc3a715e100f8662d09b71a9
SHA1 c40b9158a8c8e28d4ce7ba73a6f2e69368afc389
SHA512 2e455dfa373f91b563dedd2e043f8730e686bb1a6ae45c488e5ea5b9cbb0c7658b767b2e751008757c62537f8b70396aae79721dcbf13e493daaf6cebc5500bd
TLSH
T1A271EB9E8F1B4423E1058B3486C725D53FFD9A5735C3693FCF900806A9811FCA092EB1
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4252

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/FindProcDLL.dll

IMPHASH e26d7460d0c04056b9226a899477ba4d
SHA256 6eb09ce25c7fc62e44dc2f71761c6d60dd4b2d0c7d15e9651980525103aac0a9
MD5 6f73b00aef6c49eac62128ef3eca677e
SHA1 1b6aff67d570e5ee61af2376247590eb49b728a1
SHA512 678fc4bf7d345eeb99a3420ec7d0071eaba302845e93b48527d9a2a9c406709cc44ec74d6a889e25a8351a463803f8713a833df3a1707a5ad50db05240a32938
SSDEEP 384:DZoRF0XXUuJReQg0Tw67ADWBTgmldIogUD3GLgFmyaX/fVYcWJQCDmrinogRdBl:DZaF0HtTwuz9yu3KgwRX1nWJ1q+noI
TLSH
T12DC26C107C9042B7D28E5671A1E50F075B3F6E512AE65883CF256ADA2D612F0FA3F31B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

6100

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/InstallOptions.dll

IMPHASH 4b45b7e00344a87332fbd12653854d1a
SHA256 c91c1796338a265b49039c0b2c7a312d764b99e5174fb2dae455ca54f8f41ec7
MD5 033ee34c40e8fa85bf2739bcb2f3e186
SHA1 2ca942f35f77f37df3fc6097acac34f2e77341b7
SHA512 2204e0b8721b8d85c51bd068b1695b16ee096bfc1d1cd5843f48fd04032aeee2b6a91ce82978a4b3414f3d966ec5b36fb337a4149dae3a1d0445935d964d247f
SSDEEP 384:ErC43tPegZ3eBaRwCPOYY7nNYXCT/Yosa:EmTgZ3eBTCmrnNAh
TLSH
T1B1624D1137D558B3E2D62A797EE3B7138FA5F722A4438E0BC7332E06281A5956E7C311
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetCurrentDirectoryW GlobalUnlock GlobalLock GetModuleHandleW CloseHandle SetEndOfFile SetCurrentDirectoryW GetPrivateProfileStringW GetPrivateProfileIntW MultiByteToWideChar ReadFile GetFileSize CreateFileW lstrcmpiW lstrcatW lstrcpynW WritePrivateProfileStringW lstrlenW lstrcpyW GlobalFree GlobalAlloc WriteFile SetFilePointer

user32

LoadCursorW SetWindowRgn GetDlgCtrlID CloseClipboard DrawFocusRect OpenClipboard DrawTextW SetCursor LoadIconW LoadImageW SetWindowLongW CreateWindowExW MapDialogRect SetWindowPos GetWindowRect CreateDialogParamW GetClientRect ShowWindow GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageW TranslateMessage GetMessageW IsDialogMessageW CallWindowProcW PostMessageW MessageBoxW GetSysColor CharNextW wsprintfW GetWindowTextW SetWindowTextW SendMessageW GetWindowLongW EnableMenuItem PtInRect MapWindowPoints GetClipboardData

gdi32

SetTextColor DeleteObject CombineRgn CreateRectRgn GetDIBits SelectObject CreateCompatibleDC GetObjectW

shell32

SHGetDesktopFolder SHGetPathFromIDListW ShellExecuteW SHBrowseForFolderW

comdlg32

GetOpenFileNameW GetSaveFileNameW CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/InvokeShellVerb.dll

IMPHASH 1dd17c8be9b0761e58bbdf6fc06463e3
SHA256 2fddc8b8ab4bf4838ea374d25e4cb9e83362c3f1cb24f380137d14c814d56169
MD5 1a6e1ea7e90e50d9a18e034e7cde41a6
SHA1 93148d67fc2cee4537f749a8c98a0735065241a8
SHA512 53d35e9e4a0d45a5b37da7952f7bf8c26666fa57748c3d292fd154e40a602f08ad55735cefe9bdf043e03e3eff3e58d603bd9980ef291b3c5f409228dd5ba872
TLSH
T118813F3343F444B2D4D79A376F6B09E96A22AB1137B5654C4A83182A6822BEFDD38711
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4754

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/KillProcDLL.dll

IMPHASH d806a080e21508dd768fa70be247d2ae
SHA256 de1177a4bd1c56c3555f366d40b37d7dd9cb25e16c4973d0a4d22bf9a8af7aed
MD5 1cc87d2b5a79b18f133b4f944e2f2f74
SHA1 98e0ddb727c76e06be1668434d754e5b80a0c154
SHA512 d8fee1c09fef9af4e1f38baaffa3a6d059713b14ecad900815c086cc22855644fcdeacd6bba31ea6e6925831e650f7b0d34e6dea4c57a978fb4f5bf0cd6d72a9
SSDEEP 384:JLmJwO50x66T9JOpOUT38YZvml7xoKdyuwlx8xSiorppugBwUdJopS:JW50hJwwUTsXdPwxvtpDtdJo
TLSH
T1DFF26C507C8144F7C28E4235A5A9AB179FBF692036E55983CF269EDA1C311F0E93B307
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

6841

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/LangDLL.dll

IMPHASH 3e8d18bb71c7ebbda2ddc2a4bb03547b
SHA256 f577b66492e97c7b8bf515398d8deb745abafd74f56fc03e67fce248ebbeb873
MD5 174708997758321cf926b69318c6c3f5
SHA1 645488089bf320f6864e0d0bc284c85216e56fbd
SHA512 214433597e04ca1ff9b4fe092d5d2997707a7c56f0f82c85d586088a200e4455028f3b9427d87b4f06f9252557d5be4b7a9138ea6a8d045df6209421fd8ca054
SSDEEP 48:S46+/ZTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mCofjLl:zDuPbOBtWZBV8jAWiAJCdv2CmpL
TLSH
T1E1C19370B3C248B9D491513368E733D36A12EE746784600F9B6711AA38209F7AD3EBC3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/Lizenz_TeamViewer_DE_unicode.txt

SHA256 ed8705dbdf281629e958ffa927e5a0af8154fa87af53bd1ad70281bc3a4c0da5
MD5 14c7579d77ade9dde5cc400168c74326
SHA1 dbd6c474ceef61fd65b493cd29c16c303b9e26ae
SHA512 a6211bfaf3c159a3b1fc49cad40740e2a94102d46e3a86e963a4720adb93891144c981c094686804e57fefce44f080854428bc64a5ffba360c52e4d816866363
SSDEEP 3072:Kgdvm8D14ucu8u0vCRBhDTW6jBLNw3hp10TDVTucu8uX/cGOCBL5BhrBLp:vCP
TLSH
T18BF3BC2153EA8A1CF2F36F142D7952649FA3BDD2BC7AE64D1280119D0CB1B44DA74BB3
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/Lizenz_TeamViewer_EN_unicode.txt

SHA256 2f501148fdae9c5fbd24da3a6bc3a11349e404df816a8bea3210169edcfc240f
MD5 b276830b5f7ebe023c150f1791db2f60
SHA1 63568edb59864740d6b92d622f0175e4b66adeec
SHA512 c950d3b0e0828e0d2645cdfff7aed721544810bc4cbcc8bcc5bced67136d5e432877d2cbabc1f3d319ecdb36dc990f7f04af225dbe74efff7250a67d8c8a6a44
SSDEEP 1536:s7GqGFwAUSpJCyd95GADkYom+afWf4tC+afWf8:EOLE
TLSH
T1C7F32352A7FD4608FAFB3F64A9B952740E76BC96AD3DC65C1280105E09B1E84DCB0B73
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/StartMenu.dll

IMPHASH 80469f6834e579db68a646d49780b9d5
SHA256 77b6d60b2a3f5113a79bd28fbc6d662f37bc0481210194beda90461291ddb704
MD5 fb062fbb33102c79fdfc815d634ea776
SHA1 1f3d9ce02328297cda1aa1b1093efb5d5aa47ff4
SHA512 a5a3a0702be8b0d2037ea320cd1d231e6f2f5012178578ba40e06d16313fc32c431a5560efc8919f81ba4631d02e64a2b1faaeb6da374dd1b6ace8c344dc550d
SSDEEP 96:H8dPIKJhMuhik+CfoEwknt6io8zv+qy5/utta/23lkCTcaqHCI:cZIKXgk+cx6QYFkAylncviI
TLSH
T175F1C8B5F3D10673F9AB427428232F221B2AF5215765C1A7850316CE7661CE3FD34B21
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

6430

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 982c5fb7ada7d8c9bc3e419d1c35da6f05bc5dd845940c179af3a33d00a36a8b
MD5 0ff2d70cfdc8095ea99ca2dabbec3cd7
SHA1 10c51496d37cecd0e8a503a5a9bb2329d9b38116
SHA512 cb5fc0b3194f469b833c2c9abf493fcec5251e8609881b7f5e095b9bd09ed468168e95dda0ba415a7d8d6b7f0dee735467c0ed8e52b223eb5359986891ba6e2e
SSDEEP 192:eK24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlASl:u8QIl975eXqlWBrz7YLOlA
TLSH
T12B325C02135481F3E4918138C86B3A276B6A15029BF98E57DFD39646BE30BE3BD7D603
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/TvGetVersion.dll

IMPHASH 8fe1425ee6d46ec8c7cfcf0fd32a8530
SHA256 c67cbd5e35e1ce0c7ba17c55d8e2bc33afd5e0a68774554a1fe7216d330c709e
MD5 05f51bc8ffb2c8f5a2825bf5680301cf
SHA1 30f7f77dce1fb3526142780e9f5bd5c11622d6b6
SHA512 1e041aaa37dd00414ad955ebc8c0f708589014d2085a5a0b95a31f4d694bb1cc4994bb1324d4b983cbad0449fb0a05560d82c60fdbfc78be67ff61275e451233
SSDEEP 3072:4J7KJkcma0VkpOG/374vnriZ1nmTaK405/+ncMCQ2bDh:6EkcmYOG/37MnGZoeKxpuuQ
TLSH
T1D7245B0177E4843AF2F726746DF6C6604EBDBC725934D18FE780892A2E70A85DB24727
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

67443

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

shlwapi

StrChrW StrRChrW

wtsapi32

WTSEnumerateProcessesW WTSFreeMemory

msi

ord205 ord45 ord16 ord70 ord141

psapi

GetProcessImageFileNameW

kernel32

lstrcpyA lstrcmpiA lstrcpynA lstrlenA lstrcpyW lstrcpynW Sleep GetVersionExW LocalFree FreeLibrary LoadLibraryW GetExitCodeProcess WaitForSingleObject CreateProcessW OpenProcess Process32NextW Process32FirstW CreateToolhelp32Snapshot TerminateProcess DeleteFileW GetWindowsDirectoryW GetTempPathW InterlockedDecrement WideCharToMultiByte CreateDirectoryW GetFileAttributesW MultiByteToWideChar RtlUnwind HeapFree RaiseException HeapReAlloc MoveFileW FindClose FileTimeToSystemTime FileTimeToLocalFileTime FindFirstFileExW EncodePointer DecodePointer GetCurrentThreadId GetCommandLineA IsProcessorFeaturePresent HeapAlloc TlsAlloc TlsGetValue TlsSetValue TlsFree CreateFileW SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess EnterCriticalSection LeaveCriticalSection lstrlenW GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW HeapCreate HeapDestroy GetFullPathNameW GetFileInformationByHandle PeekNamedPipe GetFileType GetFileSize HeapSize ExitProcess SetHandleCount GetStdHandle GetStartupInfoW DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime WriteFile GetModuleFileNameW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer GetStringTypeW GetUserDefaultLCID GetLocaleInfoW GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetEndOfFile GetProcessHeap InterlockedExchange GetTimeZoneInformation WriteConsoleW CompareStringW SetEnvironmentVariableA InterlockedCompareExchange InitializeCriticalSection GlobalAlloc ReadFile CloseHandle GlobalFree GetLastError lstrcatW InitializeCriticalSectionAndSpinCount GetDriveTypeW GetCurrentProcessId GetModuleHandleW GetProcAddress VerSetConditionMask VerifyVersionInfoW lstrcmpiW InterlockedIncrement GetCurrentDirectoryW

user32

SendMessageW PostMessageW GetSystemMetrics wsprintfW

gdi32

AddFontResourceExW RemoveFontResourceExW

winspool.drv

EnumPrintProcessorsW EnumPrinterDriversW

advapi32

RegSetValueExW RegCloseKey RegEnumKeyExW RegDeleteKeyW GetUserNameW LookupAccountNameW ConvertSidToStringSidW DeleteService ControlService RegOpenKeyExA RegQueryValueExA OpenProcessToken LookupPrivilegeValueW OpenServiceW CloseServiceHandle QueryServiceStatus RegQueryValueExW RegEnumValueW RegCreateKeyExW RegOpenKeyExW RegFlushKey ChangeServiceConfig2W RegDeleteValueW AdjustTokenPrivileges StartServiceW OpenSCManagerW

shell32

ShellExecuteExW SHFileOperationW

ole32

CoInitialize CoUninitialize CLSIDFromString CLSIDFromProgID CoCreateInstance OleRun

oleaut32

SysAllocString SysFreeString GetErrorInfo

$PLUGINSDIR/UAC.dll

IMPHASH 2a2e0e82c0dc9890f9201e8bd8ecbff2
SHA256 0d21041a1b5cd9f9968fc1d457c78a802c9c5a23f375327e833501b65bcd095d
MD5 113c5f02686d865bc9e8332350274fd1
SHA1 4fa4414666f8091e327adb4d81a98a0d6e2e254a
SHA512 e190d1ee50c0b2446b14f0d9994a0ce58f5dbd2aa5d579f11b3a342da1d4abf0f833a0415d3817636b237930f314be54e4c85b4db4a9b4a3e532980ea9c91284
SSDEEP 192:5cdcpry0igQ1Ii1rzn6U4gbfW6irWP+vOg7XRSEi+OPLjte86jugnincl0Nr90Og:WqVibvTh4qnFP+OPEzinclP+
TLSH
T19A821A5537E543BFE57229313AE766120BBEB8301A32542F4D63AAC93870987AD3D707
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

14996

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GlobalAlloc lstrlenW lstrcpynW GetVersionExW lstrcmpiW GetCurrentThreadId LoadLibraryW FreeLibrary GetProcAddress CreateProcessW GetExitCodeProcess WaitForSingleObject DuplicateHandle Sleep GetCurrentProcessId CreateThread GetCommandLineW OpenProcess GetLastError FormatMessageW LocalFree GlobalFree CloseHandle SetLastError GetModuleFileNameW GetPrivateProfileIntW GetPrivateProfileStringW LoadLibraryA GetModuleHandleW

user32

DialogBoxParamW CharNextW UnhookWindowsHookEx CallNextHookEx GetClassNameW SetWindowsHookExW SendMessageTimeoutW WaitForInputIdle DefWindowProcW PostMessageW GetLastActivePopup PostQuitMessage SetForegroundWindow DispatchMessageW GetMessageW CreateWindowExW RegisterClassW UnregisterClassW GetWindowTextW TranslateMessage IsDialogMessageW PeekMessageW MsgWaitForMultipleObjects IsWindow GetWindowThreadProcessId MessageBoxW SetWindowLongW LoadImageW DestroyWindow GetWindowLongW EnableWindow ShowWindow SetWindowTextW wsprintfW GetDlgItem SendMessageW LoadStringW EndDialog

advapi32

RegCloseKey QueryServiceStatus OpenServiceW CloseServiceHandle OpenSCManagerW OpenProcessToken RegQueryValueExW RegOpenKeyExW

shell32

ShellExecuteExW

ole32

CoInitialize CoUninitialize

$PLUGINSDIR/UserInfo.dll

IMPHASH e1c0bd3d5b9f3f5cec7ea773ff66ac6e
SHA256 925d80c31702a95d58ede91ee97fd842de78ca6dde69156a6c1a755fba93cd5c
MD5 9b0db6a6056e8e51ac35e602aeab769f
SHA1 b541c6d2635141cdc3a74f59d55db8df4a92e7ac
SHA512 83fe9d346835940a37e0e0a18d041c9d13fc95a0e9ece3bc18e555cf0e8e7ddf7b42dba422b1e55ace31db3c9fc807e0b44e93b8f07f5acb943eaaf77b4f0ac6
TLSH
T1128142BB93F40CF2D0954B7B41A31CA793B2DD702716401F4947558A1094AAFED5E705
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4714

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/advanced_unicode.ini

SHA256 c7052bfd9c71f58033f8e5f06b20d40b7e25bf69bc7af399ac345241b7ffb58f
MD5 c8fa730de856ce61ff87e40ea68f71e8
SHA1 a1749ce24d5b8e83fcd45725c888fa2bd6ae9c15
SHA512 ae47b08fb2611bd5749e41aa1aa21b2e32355844b700ca6862045b3a896d559c2e8627962590d1c9960cbb54842c5873efbd44e5aca91966fd20453688a55e98
TLSH
T12F213C533FF80118F5AAF648EEF584356B39B845681DC90E81D10E0F48F9AC0966BBDB
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/dialogsEx.dll

IMPHASH 557640b8e9154ea0d56b33592889a90f
SHA256 5ec7c1f4579229592fe7ec1e971d1fa1eb70a7fcd769c712b34e49e1c9f239d8
MD5 26068c948b8529a61286c1f82cd2bac5
SHA1 5d07f7eb34f498eb57933fa3e92c53e38e96fca4
SHA512 5390c888dc27070d91eb05fef00fd85c364b3413cd1015739c954a8238b097d0af73ce63743aa4bd51a775b737acc857e83e06bea3396942a101cca5edc94acc
SSDEEP 192:86Kxv2/dKOWQqklwbJzN+eVP/nVV0lzPNDMZLTf:89xv2/d+klwt7nVazM1
TLSH
T19842E612638145F7F3E305BC68B22717D6A97620A036AC0ACF630E456DA52D36E35F72
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

9284

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

t:\untgz\Joel_plugins_src\dialogsEx\dialogs\Release\dialogsEx.pdb

$PLUGINSDIR/ioSpecial.ini

SHA256 4868ee046975b35282e7a613526d3c9d7b3e0b1122794238d286aa464b0b5bd1
MD5 81b9854cd40b04c3d50391ea6d28c61e
SHA1 d31ae147cac2daef64aa27dab5179334e2101da8
SHA512 cdf7d0924536c3ebd58bde52617287035d481b4b07622efd6a0e37cefeffe1a6cdb42c80b2b94e9ab57006bbf981fb8a23b87cf00783cd73e5419a5c5880facf
TLSH
T185C0128DD09A812548222707BE7ABFA177903D505B2718F7D1B24D17CB4C9CD58CD5C6
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/linker.dll

IMPHASH 7157cbf6b8ac59151804907639aae079
SHA256 f223d6c72f86544b358a6301daf60ccdd86198f32e3447a1860acf3f59f2dae9
MD5 4ac3f0ab2e423515ed9c575333342054
SHA1 a3e4f2b2135157f964d471564044b023a64f2532
SHA512 8fbd5b4989be51c27fa15af155d2921bea9aa5d0557a22d4224256e678dfe7dcaa5f80917a748c31dc9c9a91573e4618e2497ccfd47eefd7a0fa08c12366a1e5
SSDEEP 768:vmTLl3rmEgLMP/rLqgidfwHJQDEExmE+Ji4RdVt//w:vgLFm8OdfwpJS/fqt//w
TLSH
T1B6235A11B290C1B7D45B4279156ADB129BABAD111BF5D0833FF7678EAE313D0A63E302
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

6937

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

HeapAlloc GetProcessHeap GetProcAddress GetModuleHandleA ExitProcess TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetLastError InterlockedDecrement Sleep SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WriteFile LeaveCriticalSection GetVersionExA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent LoadLibraryA InitializeCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc RtlUnwind HeapSize MultiByteToWideChar GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW lstrcpyW HeapFree GetCommandLineA GetCurrentThreadId GlobalAlloc GetModuleHandleW lstrcpynW EnterCriticalSection GlobalFree

user32

ReleaseCapture EndPaint BeginPaint SetCursor LoadCursorW CallWindowProcW DestroyCursor SetWindowLongW DrawTextW DrawFocusRect GetFocus FillRect GetClientRect SetWindowPos ClientToScreen GetParent ReleaseDC GetDC CreateCursor IsWindow PtInRect SetFocus SetCapture GetWindowLongW SendMessageW InvalidateRect UpdateWindow EnumChildWindows ScreenToClient GetWindowRect

gdi32

CreateFontIndirectW GetStockObject DeleteObject SelectObject SetBkMode SetTextColor GetObjectW

shell32

ShellExecuteW

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

$PLUGINSDIR/nsArray.dll

SHA256 8bc5e75bbfa5a8f10526aec2af441153b2883d6d288726ed8f7c9af12a1ee02b
MD5 82d49c227928741f6f09c5cea3bde9f1
SHA1 b0904368a5e94026d0ca5760d4577236f796051d
SHA512 d4f588e3613886e3dab58330cd69ce7f24c39be2c4854cc8edfcef98e1324926fcde0d79df1a8fdf5e2bf9327b17f22a9fa1396568c0ace4e46d4f548fdc7530
SSDEEP 192:mUODeqedh6EHFRA5sX7d7KnnpOKxX22v:2qqedh6EHFRksp7KpFX
TLSH
T192D13B52F7E85DA9D5B703B95A69571D912A7E30D6BE92881B84303D2861300AA18FBC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

ACProtect 1.3x - 1.4x DLL software

Detects file using ACProtect software.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

36144

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

out.upx

SHA256 380f015ce06b7a4d6adbe08f784b9e00259aac5c1b33dfddc274d2bbd8c6a28f
MD5 a44317e3ae33bbc262e7a7a84d4b9a95
SHA1 4306c91378bcfb7e5f5fa553f58494250fcf3a9e
SHA512 1542c5cc80e42557ebfadd61a1cbb84149fd96c65c26fd8b49e2a28036a27a48b7eb65034b233d59d22f38222c6810bbc5adf53c6750ab4d399011d4206b650f
SSDEEP 192:5mHBsIIIEa5roirVt0M8Kgms4G+bSexX2:5jINmirVxQcyuX
TLSH
T1CC129301BFA051B5F8B66171FFFE16247A1A6E04575AB8EF071704542962AD2BE38232
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

8992

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsExec.dll

IMPHASH 0b75f1007d3cc8e457970ae3e3fd53c3
SHA256 ee052fd5141bf769b841846170aabf0d7c2bb922c74c623c3f109344534f7a70
MD5 01e76fe9d2033606a48d4816bd9c2d9d
SHA1 e46d8a9ed4d5da220c81baf5f1fdb94708e9aba2
SHA512 62ef7095d1bf53354c20329c2ce8546c277aa0e791839c8a24108a01f9483a953979259e0ad04dbcab966444ee7cdd340f8c9557bc8f98e9400794f2751dc7e0
SSDEEP 96:J7fhfKaGgchPzxK6bq+pKX6D8ZLidGgmkN738:HbGgGPzxeX6D8ZyGgmkN
TLSH
T110D1F8B832C10CF3D44D46743F22381717BDD4761B7542A1CB932AD61EA2AE2FE21B41
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsis7z.dll

IMPHASH 9c8bb65ecbb91da1f2ebb6ae7a714ed0
SHA256 66b2f36274ddfeef35b1d6ae6e5755f834446e5d78a719063347543793987161
MD5 87853c0f20f065793bdc707ece66190b
SHA1 738e11a9a565923ec75400a0cd4bce4db257b21d
SHA512 febfcd11795f4ef0ff3d25cbf1856be01e7f6423a9f16028c927988c04ab21de5f0b076d7f4ce9294aa7603c0db61ea5ffb888af2e9f7c6a6a11bcabfe9795a2
SSDEEP 3072:eBFxfbJUIW9WGExPYD5JFBJOYWjm8KCmRv1fPIVF2tbRp:6xzJSAGEdYD5JcYl78Fs
TLSH
T110049D2337E0C175E21F0732DE56EB9122BAB6504E62C8873F990F5C4F726989E2D716
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

96225

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle SetFileAttributesW RemoveDirectoryW MoveFileW CreateDirectoryW GetLastError DeleteFileW GetFullPathNameW GetCurrentThreadId GetCurrentProcessId SetLastError CreateFileW SetFileTime FindClose FindFirstFileW GetFileSize SetFilePointer ReadFile WriteFile SetEndOfFile GetCurrentProcess GetSystemInfo GetProcAddress GetStdHandle EnterCriticalSection LeaveCriticalSection WaitForMultipleObjects DeleteCriticalSection AreFileApisANSI VirtualFree VirtualAlloc GetVersionExW WaitForSingleObject SetEvent InitializeCriticalSection ResetEvent CreateEventW SetFileApisToOEM SetFileApisToANSI GlobalFree lstrcpyW lstrcpynW GlobalAlloc RaiseException VirtualQuery LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA WideCharToMultiByte MultiByteToWideChar GetTickCount HeapFree HeapAlloc HeapReAlloc ExitThread CreateThread GetCommandLineA GetVersionExA GetProcessHeap HeapDestroy HeapCreate GetModuleHandleA ExitProcess GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement SetHandleCount GetFileType GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep HeapSize RtlUnwind GetConsoleCP GetConsoleMode FlushFileBuffers FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime LoadLibraryA GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle CreateFileA WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoA

user32

CharUpperW GetDlgItem FindWindowExW SetWindowTextW wsprintfW SendMessageW

oleaut32

VariantCopy VariantClear SysAllocString

$PLUGINSDIR/start_unicode.ini

SHA256 01c47fb427d587a58f43bce9a145afd055d56bbdea5cde5b19cec068376e16a4
MD5 b106d599f90309f272b5c0c3aa041615
SHA1 3db59160ced4ce74f27f0c28fb806f174fc59fb7
SHA512 ac0fa8e9f3397c0ba4b8bfe0562424afa0337a5d4f0f190aaf01e6763789d2c7e87f4ac7d96501c7b47d3958d9b1c52eda75159cc5638cd3bd44fa74d6b2edf7
TLSH
T178515F532FF40024E5BBF648FBB6913197397A51582DC51E81D0090E49FA690926BBEF
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

$PLUGINSDIR/wincheck.ini

SHA256 0375c254f677b4b3c43fd6cc892816d5b2342ac699579c1fdd70d50dfe3771f7
MD5 04f98c8509a7ff5ce42f2d56e1cd010e
SHA1 0ed6c8707f1fcd7079b12d4d8b94da36650a3812
SHA512 3c9cc57d4b6b52687c5991d2190da86815f1c4a07baec40c733c8f23c369d83022246b2d31eccefce8aea0a7c597b5395b26d6151f77e7596eef59ecef06b8f8
TLSH
T1C1C012884101439D907071510C5A7751B7D027210B0A19E8F16618A3935D8E048AC68A
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

tvfiles.7z

SHA256 e48430fe20e7672017081e12060410a287995366ac22fb72f64d61109f1efc54
MD5 db3bfc80fed270c803d37093703b717e
SHA1 f84a69e9f519a45e466e18a5a6e1a3de38668ed7
SHA512 3829ef19208fe868b13a2551675ca790151714336d275fa2073f47b4a2facfa49b3f555057e3d512d9bbe57d4c77992284b4dfd12689303bb8d58b491715a186
SSDEEP 393216:/X3OJlXvGlYaWhW9P4yRCasavcKfij/ry:fKlXvqbWo9P4yP5ij/m
TLSH
T18617333287EF9E35E57C31BADEB27417088D7A617E5038CBC6415DA060BFBB55882293
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

CopyRights_DE.txt

SHA256 0452616496679ada598a7fe7b36058baf0fda5e747d45727544b8ec224b19cfa
MD5 a7dde0be757c9fd8b3bd4a7af6a95439
SHA1 b797fcee144f193488d0cb792ffd62f0626f17ca
SHA512 1b58faaea79aa60f4cea481cb4837dd6fa4837d2ff39d52f7877c87ee8398bc4a1d5e052ad1031c337e4704bb129b8f2b21828eddf2cc26e0ca9fa2cc8fe987e
SSDEEP 1536:oHrMmVgNVhaoyTgBtfn4yQeVfMyk4FeSEDhxOFYwT9ySEjPSvOFYwT3Jx:oHrMm6NbaoykBtgyeSmhxOQSw6OnJx
TLSH
T1FE33C86F7649037319F242517A56A8C9F31EA03F3B5B2A04346DE25C1B3B829D2FF598
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

CopyRights_EN.txt

SHA256 f77b387824b0a7272225daa7df4ac845cd183d75e7cbd6013498ba7bb0a6ee64
MD5 e6875a4a62e57dbb66f071caa853f281
SHA1 78fa5a447a63768983836c67b94a63ae7f13f4bb
SHA512 c6b6db19cd11c9c4a264d8ada3dc4721b9e0e8e74b709caa11a8a785494e1884b38c4288b37dc06e824669b5de142b0fb0fa99fa7b88d339ee0953667d1cd696
SSDEEP 1536:oHrZmVgIVhaoyTgBtfn4yQeVfMyk4LeSEDhxOFYwT9ySEjPSvOFYwT3Jx:oHrZm6IbaoykBtgysSmhxOQSw6OnJx
TLSH
T14133C86F7649037319F242517A56A8C9F31EA03F3B5B2A04346DE25C1B3B829D2FF598
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Lizenz_TeamViewer_DE_unicode.txt

SHA256 ed8705dbdf281629e958ffa927e5a0af8154fa87af53bd1ad70281bc3a4c0da5
MD5 14c7579d77ade9dde5cc400168c74326
SHA1 dbd6c474ceef61fd65b493cd29c16c303b9e26ae
SHA512 a6211bfaf3c159a3b1fc49cad40740e2a94102d46e3a86e963a4720adb93891144c981c094686804e57fefce44f080854428bc64a5ffba360c52e4d816866363
SSDEEP 3072:Kgdvm8D14ucu8u0vCRBhDTW6jBLNw3hp10TDVTucu8uX/cGOCBL5BhrBLp:vCP
TLSH
T18BF3BC2153EA8A1CF2F36F142D7952649FA3BDD2BC7AE64D1280119D0CB1B44DA74BB3
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Lizenz_TeamViewer_EN_unicode.txt

SHA256 2f501148fdae9c5fbd24da3a6bc3a11349e404df816a8bea3210169edcfc240f
MD5 b276830b5f7ebe023c150f1791db2f60
SHA1 63568edb59864740d6b92d622f0175e4b66adeec
SHA512 c950d3b0e0828e0d2645cdfff7aed721544810bc4cbcc8bcc5bced67136d5e432877d2cbabc1f3d319ecdb36dc990f7f04af225dbe74efff7250a67d8c8a6a44
SSDEEP 1536:s7GqGFwAUSpJCyd95GADkYom+afWf4tC+afWf8:EOLE
TLSH
T1C7F32352A7FD4608FAFB3F64A9B952740E76BC96AD3DC65C1280105E09B1E84DCB0B73
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

TeamViewer.exe

IMPHASH 769927112a4d43a7d8fb5ed3bf7b5188
SHA256 6e6f3581a730ec3b2baac6444fd397c14c60f449ab35c8c79a7e4291e17e133a
MD5 1ba6cce42c29e2dfbcc3f49fe12b0306
SHA1 7b8a20087f846d2ccbc2c025fd6acf9faf8e5ebb
SHA512 e4af9e8008eb20da15f4f6463792729d27fb66b6d739b97658a54d2d55c6571dc25d15b5b5ee2183b75f89a357ca1698e4667eff0a37ede2cb3d6f6099835ffe
SSDEEP 786432:jgt3zCtU8QJJ0ye714MIb8AatyoE0ZuLohhoDh7Vfudq7zsiAIsbqn:Ut3zCtU8QD0F1fM8AatyoE06VOKzvAIh
TLSH
T129A77E21BAD5C19ED59741F25A3D96AF902EAE160B7494CBC3D8B57E19309C30A33F23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

61:90:08:a6:26:c6:88:d6:aa:31:07:c5:a6:2d:02:9e:20:bf:74:f2:15:3a:cf:5d:cd:90:ac:f1:76:8b:20:3b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

f8:43:7f:a3:04:37:b4:54:8e:e8:c8:a9:71:9c:0a:0f:51:05:38:7e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

02:87:14:d7:00:5c:69:cd:85:95:c1:cc:3d:dc:31:14

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2019 - Feb 13, 2020

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

6

Entry point

32911392

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\TeamViewer_Workspace\TeamViewer_14.4_Release\build_cmake_win\FULL\Release\TeamViewer.pdb

kernel32

LoadLibraryExA GetModuleHandleA GetModuleFileNameA GetSystemDirectoryA DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW GetLastError InitializeCriticalSectionEx CloseHandle SetLastError GetCurrentThreadId RaiseException WaitForMultipleObjects WaitForSingleObject PostQueuedCompletionStatus FormatMessageW SetEvent TerminateThread TlsAlloc QueueUserAPC DecodePointer LocalFree WideCharToMultiByte TlsFree FormatMessageA CreateEventA WaitForSingleObjectEx GetCurrentProcessId OpenEventA ResetEvent Sleep InitializeCriticalSection FindResourceW HeapFree HeapSize HeapReAlloc HeapAlloc HeapDestroy GetProcessHeap UnregisterWaitEx RegisterWaitForSingleObject UnregisterWait CreateToolhelp32Snapshot Process32FirstW Process32NextW GlobalFree GetTickCount DuplicateHandle GetCurrentProcess CreateSemaphoreA ReleaseSemaphore GetSystemTimeAsFileTime TlsGetValue GetQueuedCompletionStatus SetWaitableTimer TlsSetValue SleepEx CreateEventW CreateIoCompletionPort InitializeCriticalSectionAndSpinCount VerifyVersionInfoW VerSetConditionMask CreateWaitableTimerW MulDiv GetProcAddress GetModuleHandleW GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary GlobalAlloc GlobalSize GlobalLock GlobalUnlock LoadResource LockResource SizeofResource VirtualAlloc VirtualFree DeleteFileW FindFirstFileW GetFileAttributesW FindClose GetCommandLineW ExpandEnvironmentStringsW WriteFile ReadFile SetErrorMode SetProcessShutdownParameters CreateMutexW ReleaseMutex GetExitCodeProcess CopyFileW MoveFileExW GetTempPathW CreateDirectoryW GetVersionExW GetUserGeoID GetGeoInfoW GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW GetLogicalProcessorInformation GetSystemInfo GlobalMemoryStatusEx GetComputerNameW MoveFileW FileTimeToSystemTime GetLocalTime SystemTimeToFileTime SetFilePointer GetFileInformationByHandle GetFileSize CreateFileW CreateFileMappingW MapViewOfFile UnmapViewOfFile LocalAlloc GetCurrentDirectoryW MultiByteToWideChar LocalFileTimeToFileTime SetFileTime QueryPerformanceCounter QueryPerformanceFrequency OpenProcess FindNextFileW WaitNamedPipeW ResumeThread CreateProcessW TerminateProcess K32GetModuleBaseNameW QueryFullProcessImageNameW K32GetModuleFileNameExW K32EnumProcesses GetProcessId ProcessIdToSessionId WTSGetActiveConsoleSessionId GetNativeSystemInfo SetSearchPathMode SetDllDirectoryW HeapSetInformation SetProcessDEPPolicy GetTickCount64 GetWindowsDirectoryW LoadLibraryW LoadLibraryExW IsWow64Process SetThreadPriority GetPrivateProfileIntW GetPrivateProfileSectionW GetDynamicTimeZoneInformation GetTimeZoneInformation SystemTimeToTzSpecificLocalTime GetTimeFormatW GetDateFormatW TzSpecificLocalTimeToSystemTime GetSystemDirectoryW SetFilePointerEx OpenMutexW GetSystemPowerStatus lstrcmpiW OpenEventW FindResourceExW lstrlenW GlobalReAlloc GlobalHandle lstrcmpW CreateThread GetCurrentThread CompareStringW CompareFileTime CreateFileMappingA OpenFileMappingA SwitchToThread MapViewOfFileEx GetTempFileNameW GetDriveTypeW GetFullPathNameW DeviceIoControl GetOverlappedResult GetExitCodeThread GetPriorityClass SetPriorityClass CreateSemaphoreW InitializeConditionVariable WakeConditionVariable SleepConditionVariableCS TryEnterCriticalSection AreFileApisANSI HeapCreate GetDiskFreeSpaceW OutputDebugStringA LockFile GetFullPathNameA SetEndOfFile UnlockFileEx HeapValidate GetTempPathA GetDiskFreeSpaceA GetFileAttributesA GetFileAttributesExW OutputDebugStringW FlushViewOfFile CreateFileA LoadLibraryA GetVersionExA DeleteFileA HeapCompact UnlockFile LockFileEx GetSystemTime FlushFileBuffers OpenThread GetComputerNameExA GetComputerNameExW GetLogicalDriveStringsW GetVolumeInformationW SetFileAttributesW SetUnhandledExceptionFilter Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection ExpandEnvironmentStringsA GetFileSizeEx GetThreadTimes SetThreadExecutionState VirtualProtect VirtualQuery IsDebuggerPresent EncodePointer InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent GetStringTypeW GetCPInfo LCMapStringW GetStringTypeExW LCMapStringA GetUserDefaultLCID GetStringTypeExA GetEnvironmentVariableW GetDiskFreeSpaceExW GetFileTime RemoveDirectoryW CreateDirectoryExW WaitForMultipleObjectsEx CreateWaitableTimerA UnhandledExceptionFilter GetStartupInfoW CreateTimerQueue SignalObjectAndWait GetThreadPriority CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask FreeLibraryAndExitThread InterlockedFlushSList QueryDepthSList RtlUnwind ExitThread GetModuleHandleExW ExitProcess GetFileType PeekNamedPipe GetStdHandle GetConsoleMode ReadConsoleW GetConsoleCP IsValidLocale EnumSystemLocalesW SetStdHandle IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW FindFirstFileExW GetCommandLineA WriteConsoleW CreateJobObjectW SetInformationJobObject AssignProcessToJobObject CreatePipe

Name

.text

Size

34.4MB

Virtual Size

34.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

6.3MB

Virtual Size

6.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.6MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

298KB

Virtual Size

297KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=210, id=261, version=26213,

count=1, id=149, productName=VS2008 build 21022, version=21022,

count=4, id=199, version=41118,

count=28, id=259, version=26706,

count=40, id=260, version=26706,

count=43, id=259, version=26213,

count=146, id=261, version=26706,

count=3, id=257, version=26213,

count=134, id=205, version=50522,

count=2, id=263, version=26213,

count=190, id=260, version=27031,

count=1029, productName=Unmarked objects (old),

count=7, id=262, version=26213,

count=2, id=171, productName=VS2010 build 30319, version=30319,

count=380, id=260, productName=VS2017 v15.9.7 build 27027, version=27027,

count=59, id=260, version=26213,

count=99, id=261, productName=VS2017 v15.9.7 build 27027, version=27027,

count=1055, id=1, productName=Unmarked objects,

count=5425, id=265, version=27031,

count=1, id=255, version=27031,

count=1, id=151,

count=1, id=258, version=27031,

TeamViewer14.otf

SHA256 89d692f2c56d7edbcf8a3c40871309dfb1a36a6988e0de88c3f2e6db6dab5b1f
MD5 a17abb06ffaf9f2eec64c06c460c1432
SHA1 9dd68bdae187c0feb54d145c744e855cf45b9949
SHA512 13f577d92c4340a87b47811c2e73ef6e5ceca086a21867d756b941baa65555233b08ede4b28f1040ef31de56e3e2e31fef98aea56ab2f03e6cbe7827a5205f02
TLSH
T13B51FC4ED7C9CD6AC8D31730CC3107299FE2A85E0270C3EE465935C36E59D92ED5D218
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

TeamViewer_Desktop.exe

IMPHASH 398b977da6717ce573200f5195179c18
SHA256 5ff8652b1e33f8e944a0117eb5dd74ee4314b127779f12ecdc497bd1ad3689dc
MD5 d16f31ade685d443c47f789c74d4834d
SHA1 2d861488a0c097b9873af1f5c08829ddc2d81c9b
SHA512 bb2e60c46db1037f8039499e5059b24670cfa554f64ceda9b366bc86c3f22cea3f7fd7c7e4953637e0d831067f54338b2a2a2c1c311eff5f74c9348d48587307
SSDEEP 196608:/Nt3zCtOenADC40jxxZOO6JC02tYoih+NQ0NONgvsCE:/Nt3zCtvAW40jxxZOOwCBKoY+fWGE
TLSH
T1ADA69E61F2E3C122E5A215B05D3DBF6F82187E154B2188E793D8BA1DA9713C31E31B67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

7c:81:7d:64:fb:04:b1:0e:75:fb:c5:99:d3:e3:b4:da:38:94:83:33

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

7318704

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\TeamViewer_Workspace\TeamViewer_14.4_Release\build_cmake_win\FULL\Release\TeamViewer_Desktop.pdb

kernel32

CloseHandle WaitForSingleObjectEx CreateEventA GetCurrentProcessId SetEvent OpenEventA ResetEvent LeaveCriticalSection EnterCriticalSection InitializeCriticalSection DeleteCriticalSection LoadLibraryExA GetModuleHandleA GetModuleFileNameA GetSystemDirectoryA GetCommandLineW GetModuleFileNameW GetProcessShutdownParameters SetProcessShutdownParameters GetCurrentThreadId DecodePointer GetLastError InitializeCriticalSectionEx RaiseException GetProcessHeap HeapFree WideCharToMultiByte LocalFree FormatMessageW FormatMessageA HeapAlloc WaitForMultipleObjects WaitForSingleObject PostQueuedCompletionStatus TerminateThread TlsAlloc QueueUserAPC TlsFree SetLastError InitializeCriticalSectionAndSpinCount TlsSetValue TlsGetValue GetSystemTimeAsFileTime GetQueuedCompletionStatus SetWaitableTimer SleepEx CreateEventW CreateIoCompletionPort VerifyVersionInfoW VerSetConditionMask CreateWaitableTimerW GetTickCount QueryPerformanceCounter QueryPerformanceFrequency GetCurrentProcess Sleep GetSystemTimes GetProcessTimes CreateFileW DeviceIoControl ReleaseSemaphore DuplicateHandle CreateSemaphoreA GetTempPathW CreateDirectoryW GetVersionExW GetUserGeoID GetGeoInfoW GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW GetLogicalProcessorInformation GetSystemInfo GlobalMemoryStatusEx GetComputerNameW DeleteFileW GetSystemDirectoryW SetUnhandledExceptionFilter FindFirstFileW FindNextFileW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime FindClose LoadLibraryW GetProcAddress FreeLibrary WriteFile HeapSize HeapReAlloc GetTempFileNameW UnregisterWaitEx OpenProcess WaitNamedPipeW ReadFile ResumeThread CreateProcessW TerminateProcess K32GetModuleBaseNameW QueryFullProcessImageNameW K32GetModuleFileNameExW K32EnumProcesses ProcessIdToSessionId WTSGetActiveConsoleSessionId RegisterWaitForSingleObject CreateToolhelp32Snapshot Process32FirstW Process32NextW SetSearchPathMode SetDllDirectoryW HeapSetInformation SetProcessDEPPolicy GetTickCount64 GetFileAttributesW LoadLibraryExW GetNativeSystemInfo SetThreadPriority IsWow64Process GetPrivateProfileStringW GetPrivateProfileIntW GetPrivateProfileSectionW WritePrivateProfileStringW MultiByteToWideChar SetFilePointerEx ReleaseMutex CreateMutexW OpenMutexW GetFileSize GetTimeZoneInformation GetLocalTime GetTimeFormatW GetDateFormatW SystemTimeToFileTime GetModuleHandleW lstrcmpiW SizeofResource LoadResource FindResourceW SetThreadExecutionState SetFileAttributesW Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection GetCurrentThread LocalAlloc ExpandEnvironmentStringsA GetFileSizeEx CreateSemaphoreW InitializeConditionVariable WakeConditionVariable SleepConditionVariableCS TryEnterCriticalSection GetThreadTimes OpenEventW VirtualProtect VirtualQuery IsDebuggerPresent OutputDebugStringW EncodePointer InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent VirtualAlloc VirtualFree GetStringTypeW SwitchToThread GetExitCodeThread GetCPInfo CompareStringW LCMapStringW LoadLibraryA LCMapStringA GetUserDefaultLCID GetStringTypeExA WaitForMultipleObjectsEx CreateWaitableTimerA UnhandledExceptionFilter GetStartupInfoW GetCurrentDirectoryW GetFileAttributesExW GetFileInformationByHandle GetFullPathNameW RemoveDirectoryW SetEndOfFile SetFileTime CopyFileW AreFileApisANSI CreateTimerQueue SignalObjectAndWait CreateThread GetThreadPriority CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask UnregisterWait FreeLibraryAndExitThread InterlockedFlushSList QueryDepthSList RtlUnwind ExitThread GetModuleHandleExW GetDriveTypeW GetFileType PeekNamedPipe ExitProcess GetStdHandle GetConsoleMode ReadConsoleW GetConsoleCP IsValidLocale EnumSystemLocalesW FlushFileBuffers SetStdHandle IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW FindFirstFileExW GetCommandLineA WriteConsoleW SetFilePointer LocalFileTimeToFileTime UnmapViewOfFile CreateFileMappingA OpenFileMappingA MapViewOfFileEx

Name

.text

Size

7.7MB

Virtual Size

7.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.orpc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

163KB

Virtual Size

194KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

282KB

Virtual Size

281KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

314KB

Virtual Size

313KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=203, id=261, version=26213,

count=1, id=149, productName=VS2008 build 21022, version=21022,

count=4, id=199, version=41118,

count=29, id=259, version=26706,

count=39, id=260, version=26706,

count=29, id=259, version=26213,

count=141, id=261, version=26706,

count=33, id=260, version=26213,

count=3, id=262, version=26213,

count=3, id=257, version=26213,

count=124, id=205, version=50522,

count=84, id=261, productName=VS2017 v15.9.7 build 27027, version=27027,

count=172, id=260, version=27031,

count=971, productName=Unmarked objects (old),

count=593, id=1, productName=Unmarked objects,

count=176, id=260, productName=VS2017 v15.9.7 build 27027, version=27027,

count=822, id=265, version=27031,

count=1, id=255, version=27031,

count=1, id=151,

count=1, id=258, version=27031,

TeamViewer_Note.exe

IMPHASH 9e6b0b642046cf98abfa184ae419ae51
SHA256 2b13ba21da6313a2ee43a2dc803e25d5016cfeff604564590189f344a82f96bf
MD5 eb99df0c65510008a689881aaa62996d
SHA1 d966199fdc56c721a40f515439a07e8dc60202a4
SHA512 79de8aa571e51d15b0a61af2fb105d71b8463c09cecc9c7c7b1bd2691747b6e86b27a695fd4c51be4021d693c015db89d06416ed2522d893e72d3c08541a7686
SSDEEP 24576:LoV84YSbDM/dirTVUt3PvTaZ6sApHHZZZAC6MpfjVuA1z:jyTWtnywpHHZZZAC6MphuAB
TLSH
T1425539717642D633D463007CE965D6F6106BFDB8CB65A4EB52887E2E39303C22A3196B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

64:78:79:82:0b:0c:44:a3:92:b7:39:a4:9b:a1:b7:d9:50:ba:9d:ac

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

348880

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\TeamViewer_Workspace\TeamViewer_14.4_Release\Installer\Tools\LeaveNote\LeaveNote\BuildTarget\LeaveNoteRelease2017\TeamViewer_Note.pdb

kernel32

LoadLibraryExA GetModuleHandleA GetModuleFileNameA GetSystemDirectoryA GetModuleFileNameW SetLastError EnterCriticalSection LeaveCriticalSection GetCurrentThreadId RaiseException DeleteCriticalSection GetLastError InitializeCriticalSectionEx HeapDestroy HeapSize HeapReAlloc HeapFree HeapAlloc GetProcessHeap SizeofResource LockResource LoadResource FindResourceW FindResourceExW DecodePointer GetSystemInfo VirtualProtect VirtualQuery FreeLibrary GetModuleHandleW GetProcAddress CloseHandle ResetEvent OpenEventA GetCurrentProcessId SetEvent CreateEventA WaitForSingleObjectEx SetSearchPathMode SetDllDirectoryW HeapSetInformation SetProcessDEPPolicy GetCurrentProcess GetSystemDirectoryW LoadLibraryExW GetFileAttributesW CreateFileW WaitForSingleObject WaitForMultipleObjects FormatMessageW TerminateThread TlsAlloc QueueUserAPC LocalFree WideCharToMultiByte TlsFree FormatMessageA VerSetConditionMask VerifyVersionInfoW GetVersionExW IsWow64Process GetSystemTimeAsFileTime TlsGetValue TlsSetValue CreateEventW InitializeCriticalSectionAndSpinCount GetTickCount CreateDirectoryW InitializeCriticalSection SetFilePointerEx WriteFile ReleaseMutex CreateMutexW OpenMutexW GetFileSize UnregisterWaitEx FindNextFileW FindClose Sleep TerminateProcess RegisterWaitForSingleObject GetLocalTime LoadLibraryW QueryPerformanceCounter QueryPerformanceFrequency DuplicateHandle ReleaseSemaphore MultiByteToWideChar SetThreadPriority GetStringTypeW TryEnterCriticalSection EncodePointer SwitchToThread LCMapStringW GetLocaleInfoW GetCPInfo InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent VirtualAlloc VirtualFree IsDebuggerPresent OutputDebugStringW GetLogicalProcessorInformation UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW SignalObjectAndWait CreateThread GetThreadPriority CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask UnregisterWait GetCurrentThread GetThreadTimes FreeLibraryAndExitThread InterlockedFlushSList QueryDepthSList CreateTimerQueue RtlUnwind GetModuleHandleExW ExitProcess GetStdHandle GetFileType IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetConsoleCP GetConsoleMode FlushFileBuffers FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle WriteConsoleW

Name

.text

Size

759KB

Virtual Size

759KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

245KB

Virtual Size

245KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

25KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

512B

Virtual Size

372B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

287KB

Virtual Size

286KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

43KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

TeamViewer_Resource_ar.dll

SHA256 e3fadefe11656fbd70c3d94e0742c69080111fd121e61127cd0268d1b8063fed
MD5 3c93bf5a12ad7889ce316009ac505e2e
SHA1 f19bd8e1a4171e40752fe3ee56ef375a4e5da5d6
SHA512 a4370523fd3ad26cf42b646dafb221adaacc30edd26bb9ef1327a04b71d839398fded4359833f454cc08a9a4f1de49370f785c717695cebcf5786bd17d1dc7f5
SSDEEP 3072:/wfCyXA8iN4rCsmx/D2J+7lUH4l86T3dCSU:xyb0i94l86tU
TLSH
T14E5498011E9CC23CF4A7A738C523C653626D65AADDDD323F46788E281AE44709B4FAF5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

19:40:76:84:65:20:4d:58:69:2f:64:ed:3a:a3:da:b8:81:41:d4:3f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_bg.dll

SHA256 ea6f3713883e267c7189ca6ff13a02bf9dac93a6989a681779283cc5023aea12
MD5 cd524771414ee63c7a36adf549d9a874
SHA1 5ca0c47b2f92f34d8d404f384571cd21037c142d
SHA512 559c3e883c7bdab4d37933090ca4a5cb63cd860eab5a3915559c6cc3f88f7e2fb97d29fd4ab06be7e1dc9cbade48cb6a9ae925d1fec63cf4303e809597ae3dcf
SSDEEP 3072:jt/9b2Eoo0t9a1yTDrff77Yy7FfS5oBolnJUydqupITdRaAF1zSs:2Ghq+s
TLSH
T1E674310FB9BD9240FA59D3311F6686E721BA7B1073395ACA835F7D68602CA3533252C7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

0f:9b:31:e5:6b:35:be:10:16:74:c4:54:39:83:4a:6d:19:20:6e:87

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_cs.dll

SHA256 28be59f7bc60dad1fe3d28a08da8063707bc32091247801ca0dac1331d738462
MD5 75fba6b0b98b857120fb999f23b6bce7
SHA1 dd1889c847ebdcbfd4a4a1e517dcb3379be86158
SHA512 4e40a9dcb3b9f6d6e3c1286c10b71798ade4ddc1000866c6df7e2f0bc8df3c452228cf7d7f4805ef56494ab094de22ba61d7d9f07981b3466dddcd4602cdee1d
SSDEEP 3072:uikkv4mwnHqba+DGsu+ttI4NWP6ZLPVjOrZaWg5iCiVPZwh1GKAi6g39pdesvywc:w6nQYQbkJI
TLSH
T17464F20122FC0685F6F7AF76BDB406624E7B7CA2BA35C24F9550428D1D70AD0E8A5B73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

2b:ba:1b:7c:88:61:f2:de:64:bd:10:fb:18:6b:bf:bb:5c:73:2c:27

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_da.dll

SHA256 e42f489c27c2fba6c86ee315a12290db217776614611c2cd84248258df12869f
MD5 db1ed95e765d0c5a505c715dd88171e3
SHA1 0285700894315572511038805fcf8bdec5c8360b
SHA512 d6aaabe795b9fb131c4b7e14ea6d521aa4695fb2bdd16a87e1039c41dbb6b617ef18f2f0fa6e7eb7bdd65080e2e5ebd493f510bbb9a25210a3131d52cb38cebb
SSDEEP 3072:xqBnopU/PMfiWrZPCX5OgVZ4VZ57ZPa9x3+/CDb/s6r2uQoc+Pr9cGYreI2bRdFI:8+go65I
TLSH
T1B064985123E9520DF6F72F34BDB902945ABABCE6AD39D21D1210518D1CB2BE4D9B0B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

31:61:80:98:f0:62:f2:e5:c5:42:a2:da:82:f0:34:38:ba:5f:f7:a4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_de.dll

SHA256 0a248159d9875dc08af81ec908a1723d2f8cd20e7faf8c2ad8a0cc26794a2e16
MD5 8cc4635984455c231cfedb95cd498774
SHA1 f272b43efa377982991619bb81ca57f409b5fb70
SHA512 a8d71cd870278ad7ed38ec84b56e79292804042789e8c2b8ad36caeeb08021ce7724813aa46ba1f62adce403db114151d527235315e84827911706f33a79c6f2
SSDEEP 3072:ZauPbgdz4ZwH0Vgq/oCumctk1yQX3zEFvg2Q1p14LxuxM5KjYRhSynAgdcvmoDgU:8TU4WtL+0
TLSH
T1A674EB1157E98A18F2F33F74AEB862946E72BCE6FD7AE54D1710509C1871B80DA60B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

bb:87:ee:d5:5f:70:58:ba:ac:f5:28:ab:5d:5c:4b:dc:c2:9f:7d:8e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_el.dll

SHA256 c62756bb53af0891ba994cbfe213518bef92cf05e9660781c9d9f8a88584c418
MD5 3379150586b3f7b49f003350163926cd
SHA1 ce3dbb0c23a50399715a7690fb396bec408c160b
SHA512 b2a598c8e30c09201ed2c500345335d491f0ab7ab8f4e06a6839f5bc7c6e4237aa7590ed7f59b5c42e34a926e01b54f5a182088de56c3524e9f8663cd50159e1
SSDEEP 3072:YC2y6P+ZkEJ0K/VjTTKdaiEKYl4nINnwuF78XocrJkdd2wMh+Xy2oKPgCUdNldoK:sNzd9gPNlVinWMhm41xKPbDLi5
TLSH
T1F984388E0DFF2711DEEAA9F2583381565AAFF9924428DD7E72F07048E91DC118DC2E16
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

61:96:13:b2:2f:b8:5c:8b:7c:03:87:ab:fb:ec:5d:c0:4e:72:2e:ea

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_en.dll

SHA256 e09ff63f37df82baf6498f5d36194c9bd4b0ec5ae2d6c5000c7b8b9880b9f96f
MD5 57841da0924f4bc0e2280e143c24f821
SHA1 610705ff8ed6c3aa8ca7556963d97a992c631dcc
SHA512 70e90951493f27eb36ff1b5e19cc46a5e88854f08894bbfb95490f05a138c5ba4ea4f7b172503388b3399780595b9b694b82786700186dcc80653863347f4d25
SSDEEP 3072:Avt8bP0+SYzwyMSzDv3p4sgVm6B7X/skjxHnKpywTra:kvN0wEa
TLSH
T1DD64885163F94208F6F77F74AEB926644E7ABCA6AD38D29C0250405E59B1F90DCB0B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

3b:b6:5c:3b:01:dc:d0:b2:59:30:04:e4:73:a8:1b:a5:9d:23:47:5c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_es.dll

SHA256 df789803e235316647dd6cbcfeb8e397017284bc5affc1c09e314487fea677c5
MD5 50ae58eb559ba739d60d7ab5963ca331
SHA1 b2bd6a42d28def0bf112552c67721149866968ef
SHA512 9019f1c2fc0a480c5efb4903efccd07f9f7e628b7ab57dfe040636abfd3e1077420b1e6654e47a71716cf5af06053be7544ee0ebb41be0774a91afd22317de0d
SSDEEP 6144:cYtoecKBhYU0xnfRq3q0Tjy1sS6WNrlwjK74VzKh15gYgE/HD:KD
TLSH
T18474435067FD6246F6F37F28A97916298E7ABD92EC38C14D4220525E0DB0E84DE74B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

96:87:98:a3:7d:07:47:ee:35:5a:a7:8e:10:ed:f4:ff:be:47:d3:91

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_fi.dll

SHA256 9c878e064ebc2bbdce01a29848f2fd98f4b6215c10f7aa9dd9b7e7a75a9796b1
MD5 6ca60e6938bf11c042aa4caf19bc61b6
SHA1 619f86a3bac7a965bf8b670acff9c13e55070821
SHA512 4d986321f7a97358b3d891d89438253a007e25b873a34c84833e61c7bb9afe82d808083d8a1e4fb3dd59cdf4da0ec9576a48baa54db43d999eee56da53fab8e7
SSDEEP 6144:51L7Vxo//HManVWeZMOO3yJTCxscAGaGuPQf0Y:ewsY
TLSH
T198648A4256FD9234F6F3AF34BEB852100AB77E93ADF9E25D0A04455D9835680E8B0B37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

90:99:9d:02:c2:3d:6d:87:69:12:17:6f:13:93:2a:b6:9c:55:0d:75

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_fr.dll

SHA256 b9de572fc1f5a229bf5511c1689cef3a6ebf9bddc2b83a7e9a1cb97b0cf25628
MD5 49434005a5edec17e6d4b4a854961d92
SHA1 ffb97fc5662a2f4bdc54af293978da97999a6f6e
SHA512 ceb3fc9b56b10b9e2c7123c7001b58c49d9990f27e22dd12cbf5c24401ac949a68a1bc8a1762dc2019870f74a2fc2c561415ddbece1a52360e2ea4dac0007fd4
SSDEEP 3072:wvJ1HFQz65YElWrQ07CtW1d6mTyN4AL0Y/qMkwnwNbx:rQIY0d6mT2Otwncx
TLSH
T14A846E61A3F96206F6F77F25A9B921154E3B7C9ADD38C15D0250509E2CB2E94CCB8B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

8c:44:5e:29:1b:2a:2b:cb:ff:c8:23:93:e7:46:47:03:af:3c:fe:38

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_he.dll

SHA256 cc50c3647eba5110fc4ec11115e00eadeea844e5e708d4f7d37dd922c264f1a1
MD5 90f314724ef163466fc8769e6ceec431
SHA1 790156d1c4b12a412741ff4a95472fddccc6a609
SHA512 776abc8096eef503257f56ea3d0256966aa75344641d9f7df4b4dcb012222541e192d92e6351ec7960bf32b6beba0142d2bf4b937bf02f938db49e0298cc406f
SSDEEP 3072:EIJS8s2/jIMLjQOu1nR1lPcOCgMB72VwiHH45NTbzCHXYm+fjsEd4/QHq07o2B:FJh/0MLjQOu1nJPaiHixjsNv2B
TLSH
T1324447801790D2F8F9A5EF33A63F292E86A1EB00827C775B505C55642E6DB81CB5DB3C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

28:75:04:ed:f0:d9:2d:12:ce:aa:f0:5e:99:d7:dc:69:4c:84:e9:24

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_hr.dll

SHA256 e18666625a4bd93873875b8cacab6cd941a40c510b3b9b6169e5d6c889826509
MD5 176ccf8a77fda6bcd9632a29ffa7c834
SHA1 87abb79d6a26894aef5f547dc2e1bd71c77c96ef
SHA512 e9f015a0f7e41e791e151dd7c9dab614daf03e5df3fdc3236824afb73f3234c4ea1f002d842b555ee77686dbd57aa765c4c1fd6ac0818df5f99efdeaa4c5147c
SSDEEP 3072:3H+Ag+45saKQ5aLB7r0X3MhrY/rrUjki7YF+0oTnQbSUXLrAr:XPaS70Ur
TLSH
T14374AB42A3FD2249FAF77F74A9B813644A7B7DB6BA39C25E1150028D0D71AC0D9A1733
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

09:b7:83:3e:e5:8b:34:85:26:3d:6d:f0:1c:9b:0d:5a:f2:92:2f:71

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_hu.dll

SHA256 42eb2ff7d94ce1c1c12b7f9da0efe6d8c5cafe3dc548c8667343152775381041
MD5 64535ea36d2317f3646f7b9407101e34
SHA1 8a41c3464ca802ae9a2db18161e3171fff0f03a1
SHA512 423df0c2724bb309bc6ca8fb4b0442abcafd5c858f9bbb7ed65e55f34057d90a8effaa1ca52a46650d3d0633ed6eec878ba35c85a844f1ee9fdf954efdda76ea
SSDEEP 3072:taa4YAtp3NhcMLhg5RKvmwUgiQFv5PsXih6vwNl2mPyAX/u9o3ZoRTYBwzApiTBG:6iyT/jyXMWdlsFsRtOTua
TLSH
T10174EE0562FC524AF5F78F767DF052950A7ABDA1AE3DE25E8640528C1DB1A80CDB0B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

a7:96:56:fa:06:c0:0e:86:78:31:b3:5b:88:3f:7d:d9:be:21:2f:3a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_id.dll

SHA256 5a3d776535414707f2d6979c5e674d03c5165dc041e79d799942e2ae28c3ad9e
MD5 02296254cb56550c07158122d7fc1a02
SHA1 b65194f662e7ca287d743fc0260d1bb196b1eef9
SHA512 80f0dccfc10e55f144d307716c4dc66efa7a5a9c516f996731377377343a7a2ec3f5a11ab6bfdad204e0036b0d8a4bb4a4204f1aa6d65534ce2f2f2f073b0313
SSDEEP 3072:yr3UF4DaeM9x6lCl9VKqQXWcVYy7qOUZ2VnlpnFvVps:yOJ9SXrVBUZSs
TLSH
T19D64899163ECA608FAFB5F70AAF826940A6BFD97BD39D24C1314565C1C74BC18D60B32
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

06:62:c6:0c:ce:7f:15:ce:a3:2d:70:dc:67:f5:d4:db:f0:6f:66:d9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_it.dll

SHA256 692ac882caab781e23da721354ebae813c0aca7bf55e033ddfbe65b79f9c147c
MD5 c803e48ab142057218c638e4b1fe5201
SHA1 46bbcb0e2e4bcbcc38b14d6b577d9b542713b1cd
SHA512 b911b368170763ecd82cae25fd508050ade35317566f09786eb63bec1a37abfed3c421a9c968bed9d7f459887ad2d1a417197959495f630a8439763b3b805c1a
SSDEEP 3072:vlughrtfLnkfc1GAeerm7xO+1b3rsd6Zie5ILG/vefCmi1xtc/:AAxdtei6dUCiee/
TLSH
T134746211A7FD5208F6F3BF74AA3966294E7BBEA6AC38D15D0250009D1871E94DDB0B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

df:2a:11:d7:10:74:d4:c2:71:1c:21:54:f1:83:f1:60:8b:19:13:36

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_ja.dll

SHA256 27bd24e2a1d2e91c3a0b2c8db135d3816376ab0f467e2d7e393fe22b6142bbc0
MD5 fe5ea3f2854542589503013028794e8c
SHA1 adafafc89792daefe613f666b275e9939e4e9251
SHA512 d27603b87e2df2a6f5e0c17397bc71b2a4ddff25ad12e34f58b7c7fc63595fad37baf710c04021ca4ab746bbec41090051968a6f9dd9e649ba26e0c3e5fac13f
SSDEEP 3072:6Sz52FngSV5+CE9Jb+OlyVCQGdgabv5dZYxL3aImCoAnvQCzM13uzBF1tmhLdlhq:mjQ2mxGB6luR
TLSH
T17014A58C36E9064EF4F38675987275B866B9FA20C6E28CDE0284C40F1450EDD6796B7F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

11:29:af:d8:8d:f3:80:53:e2:11:f6:c1:ec:a7:70:85:56:56:2f:50

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_ko.dll

SHA256 3c760c14161d94889c7243c3c7abee415a05ae203ddaf614b676381377a5f907
MD5 6c28a6c27bd70c8ff38aa049f4f4e91f
SHA1 9757a0a3c5fc12114401e6b88e155f06bcfc9709
SHA512 bd39f52855c75d0bc75953dd123f5cc2e17ee6dbe09937eb5034e92c504f43c39475632b3adcee5d985b79d78033e6dabdf7765ab1ae5ef993033f3bfc3e2008
SSDEEP 3072:FAFSOzgzwh4DKe9bP9de3s4vvecnj7vVnBZA0XAlGQIsSU3SG9gjAJdfJ8g:TmaDvdMMJ8g
TLSH
T19404C602A1F9D140F4F3A779AAF35397466B3980EA27498ED310524C75B0BD4EEA1BCD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

c5:1e:be:00:04:18:81:e3:af:e3:11:a8:08:7a:1c:ab:64:2b:ea:56

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_lt.dll

SHA256 1d54e62ee183a057a7e4127e93bd2c4cbc9718e7154bba7d2a6c8a09e4692e45
MD5 0dd4f96ccd9b19fb6c739e9b0761ead4
SHA1 8d6dd48500b2fdb5b93501fd2effd3d54a264458
SHA512 3b6a8551bd404a24b276580c1e6e92209c152e197e75ec862c52df15ee322d6afacb6f72dae52bd77299773ec2934f3d16561f6adcef1556c8c3cdf5e92a5b4e
SSDEEP 3072:QFlsJjvjqaoGQzyFz8/pFlG1BZ4jfUAXzXAevkZzmg6zhGXe8uwiDVH8xp5TxUcM:IkIQLm
TLSH
T10A74BA15A3FC1289F3F35F34A9F456160A7BBDA6BE38D15F2510414EA874AD1CAB0B23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

0d:ce:7f:a6:1b:d2:d6:08:d6:af:de:42:e1:aa:c1:df:a8:5e:4d:7b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_nl.dll

SHA256 e6f7ab948c8369ba9be349bcff2a44e6bc8da88b6f50536fa43a3ed5ec9127c0
MD5 ef40331da23c06fa0770437b370ff7c5
SHA1 02448e8ac64cc8e3d1ab8aadc46669fd166f672b
SHA512 9a9f2506c4de6fda860b3bd91f5f5c1548f9a52cd7d99700f7226454509d265b08dfede075ddc32e87153beaddb2285e401980a791c604b4154cfb68b7c04f7a
SSDEEP 3072:nC4B/nbVdJTmo5SzPOxUNOr6ezteF/QUYrFigVhqUx9nbbptar+yaTRVxaKUJvZz:nxVZNRMD8ZTBIDD
TLSH
T18574A95227F9920CF9F72F746DB922508EBABCE6BD75D28D0250219C5C71B809DA4B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

b2:42:8a:24:f6:22:cb:42:98:09:e8:5f:56:2b:43:ef:eb:22:b5:d9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_no.dll

SHA256 6845c31eab4533943277afe771511b73cfd3100c2726a30dd80d559b20423991
MD5 643ab8c8eb6fa68ecf88f85ef85c7d8e
SHA1 637c02cf0ddf97c5ae9761a336832fe0e32d3c55
SHA512 1feeb4f5917e95c6c8ffabdc802e19b3f8120ba0e1a76b6cce9d1bb03ab964b813086943ddc792247d5669b5bb24f841af6ca84d1aae883f9925c1ee03f1f78c
SSDEEP 3072:Zat0bClmiJOiX6bdMprlNPo1vhcvT/EfhzxAb+qObN5ZcNU/J2Hw19+lkYEn0bgA:ZsI39O
TLSH
T1EC64B75163F95209F2F76F30BDB812944AAABCE6BE38D21D1250519C4D72BE4D9B0B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

4c:10:41:73:49:bd:f9:ae:a7:f8:9f:6e:07:5d:a1:1f:8c:8a:2b:b5

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_pl.dll

SHA256 8f9b4f18d48a34219b60b16fd1096bd42e523a05ea9f6a573b8650bd4d6ba09a
MD5 78cc48f9fdfaf977273b87609d3f7c19
SHA1 79c5b6e8ecd02f7ac10e25de4bb7ccf806d54103
SHA512 810763a503bec5673a5ad0a8a2bd5247f73449e46d0042a68b23efad74ec3b20a6759ea692ff8e07f062b5e7b60110ef512c9691d2cdcaaa79f69f00c6815043
SSDEEP 3072:/gSdrd+95fm9bJQxy/Om8Fd5ioJAXv876TFm+KDP0Q:2Af8FP0Q
TLSH
T1C474030173F80255F6F76F74A9B976988E7BBD22BA39C2DF2500514D1A70AD0D9A0B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

e9:e4:87:90:2b:02:5f:6d:46:5a:e5:16:b0:bf:7c:80:ab:81:28:bf

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_pt.dll

SHA256 56c83f0fa435a4aea4d3961b4d529851cd41f2493b8950085bef1a15372dc4be
MD5 f0768f354194307624fcf2bf74c17488
SHA1 c6a6bff5b71be0d3ae9b9334fba7d434e490cf01
SHA512 842ff27d320acb5a4d643f9d615daa54212e281e7ac78941f841fb7fe07349ce8f04a71d2ef17bc6d5cfc120f0c1e34cf566dd29b64d90da9911bb3122ccd02a
SSDEEP 1536:xV2quVDLVWYa2ZVDEzkUgXaocQFkDtc17a+kzfaozgKCBpQFLKX0Tokvc5/EPjg3:xQB8Y2kBkGcgKrqUZacAAAKQ
TLSH
T13974335267FD1254FAF76F36AA7826258E3BBD92AC39C14D0120115A1DB1F80DDB8B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

38:95:79:e5:45:8a:44:1c:99:89:59:e5:a7:da:67:b3:bc:ef:80:ba

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_ro.dll

SHA256 aad6bf37814de8847e9bc7207ea0e561cc758c8be58aaccdc134c9d6c18890a2
MD5 d289979dccf1baf82f60723b1125b5f3
SHA1 6266aab818112be87efc49c1eb59fde627174b00
SHA512 f0f16bec31fbba50d3d642faea12f4879eb30e942bd9b461d7e7d0add569e459b7adf1ab7cb7dc1ea4beb513735801ec665300ac2c0733f41c3e34baea4747e6
SSDEEP 6144:LlcA93J+IyFapEhmZZ+9IQVZcSKpTCCNLi3gXpjtEXRQOlwwz0clNdqsZEQT2y1A:SBZTI
TLSH
T1DF84785167E91216F7F3BF38693826140E7B7EA7AA39D54F1A10028E1DB1EC49D60B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

a4:b9:98:68:2b:44:08:77:17:21:7a:e5:16:37:b6:29:18:da:75:12

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_ru.dll

SHA256 6529ff84c23c097ec8d755f191283194c62f4dd18a41c9e0dd90481878b2f4b2
MD5 b64d6c2c36f67c1d5b1b4e62bc508991
SHA1 b16c5932ebdbc775ef17e3b34f1e23d7f68ee361
SHA512 a4f273e2133990b22e7546dcec6418aab28c3dca09c2db2d29e4e373fcb3d17f50743c04951044c0fbf485fcf41620f961b782deb16188e26cbae63de635a15d
SSDEEP 3072:HT1J4l9vGWRsk175jcgj2L58IW2QXkBau:HMQ7W3u
TLSH
T17A74770FFABC9590F9A9D3700F3289D710AABB50632995CA968F7D78606C73533252C7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

93:aa:dc:76:eb:69:27:87:17:26:6c:b8:39:80:37:86:76:29:f8:33

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_sk.dll

SHA256 5f66ebf116a1fd4b5373638bbf0c349148c426893cd9ff120c114ffa0b686e3c
MD5 7152c36817abc6dcaba165bfa3178bb9
SHA1 4d6256e72551c47464d53652b426444d09aba3a5
SHA512 df4f9e4b8a69805d79c4f90c2e67d53ad6da6016e1a61b07ff7e2d969d1aae6383c5a1f15d6737b414692da749d8ac2db56580b8c8d21094edf712811f8e2a2a
SSDEEP 3072:Sh+C9bqgjg21TcKEcfOms9rzz068tWA8R5r3S4W0/RN0tc6OGqpp8Yw+vSPqHy1t:Sa091wW
TLSH
T17074E12163FD0685F6FBBF75B9B401654E7B7CA6BE39C14E5650828D0C71AC0A8A4B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

b5:2a:92:ab:a3:4c:59:2f:69:92:5b:06:8c:d5:08:fa:77:5f:8c:fb

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_sr.dll

SHA256 37ff060f5dd1d8115de822a459c28d9fba69973462a224a82c49bf2f43a1f3e1
MD5 9bb0188bbbdc82169601fc67a8901d5b
SHA1 e617fc2d41943de5c4aefececf6ab0ca3625e89f
SHA512 02d2cfe796fd34862c5859a46a2e764d29005c15f0ba67196fdc2425191ca9ddcad1ea619cae791e59c580d5e8b6130ec091c49987fdb0239996c89f8b32fb97
SSDEEP 3072:+1DnCRAIXiWuHpAgKMv4guxsJMOuJiyM/k8H3pTkzFnfbWN/lrbb0X+Im7QH5l9K:+1wyj4DnJnqJlr0XESbk
TLSH
T12F74BD42A3FC2249F6F77F75AAB812650E7B7DB6FA39C15E1150028D0D71AC099A1B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

df:95:4f:22:e4:2d:3e:d9:89:e8:2c:ae:1b:2f:5f:e1:4d:1d:2e:ca

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_sv.dll

SHA256 e79babe7c86f77988474751f10b1ad61e61c958f392c939fa1678909885e9465
MD5 a752253ca32f0e0a041ad3058fb6cd59
SHA1 17e01cc2c50c3bf86bb679c37be02af43233a34a
SHA512 3448ebdaff83173b5b66b7274ed61a70f0463fd79fc2b3fcf81bfb378ff940eb4dbb0d9342f9075272cbc56634f279995cff74a22f52b02d2f859c6b1e950c63
SSDEEP 3072:4bcs/DXIqkRbZc1E4GGq7IujPiNycUtT0hW7abmlf51irw16+tv/tVL3e08fdq:McN0GgCpc6iq
TLSH
T1D864EC4163ED5618FAF3AF74BDB9125049BABCE6ADBAD21D0A10019C0C71BD4D9B0B37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

df:87:72:ac:96:ed:54:12:db:91:43:3a:cc:2a:d3:5f:69:cb:e6:96

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_th.dll

SHA256 e54b0245af5340b32c9d3ec6cbd518ad1b3e416e654f4df81185aeca4102f105
MD5 c70dd1727e0957a84a2a05e2338e8d47
SHA1 ff97c0725f31d9959a4a12adff830ef7ba09ed01
SHA512 b83f58d6584dd15f3d6cf49136f09ce45ce42f37be7c1b87118abd121b1605098709a5df5625df92a5f198cfc51ee35a742e9597aed8a6b73eca31346c6f54fb
SSDEEP 3072:TuDKTUL6uLBZ2ZPyN2BdO63aW3RVXxkpqRcIMrI7mpiMF:hRRcQMF
TLSH
T18964A734A6F72302D597D1F0E6E10E727C28B912D45FC199C03BCA296560ABAA7F4D3D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

c3:a1:59:b2:21:78:68:7b:c9:da:be:97:41:ef:88:db:40:68:6a:c7

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_tr.dll

SHA256 83e176e50096c776414d917b2272ff4a5a9e7975a9c5808eb42835ee48db98c4
MD5 684bf24d8dd7788aa7799bad573141ab
SHA1 302b07fe3c340cfdcbe57a2483e9f15346ec1253
SHA512 465ddc61d5873ee351da45633610cc1d7577b47d2bac66090df3fbc9ebd3a9492d3298e7893aaf0cd43540afeec7292e12dcd30fa8f7c40c1fbb11c80618930f
SSDEEP 3072:+A1gID/RrQrxO9VlQwj71yErS6ZvsnQ+UJiyWktOQpaz3QhRmOiLpxvQSei4Zf9l:RvsnsgAhjEiuI
TLSH
T189640D0143ED5A0AFAF32F357DB462910BA77DB6BE39C24F2621215D0C716E099A4B73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

60:a7:73:d2:13:41:1d:67:9d:fe:8a:fa:4e:41:9c:8e:14:3a:6f:99

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_uk.dll

SHA256 021f6894c8432507ae2a30d09c42cd0b514ba7838cf13723fdf5282e18ed5f85
MD5 785950243159908443c8c43518be2a92
SHA1 1f571ed2e43afd7e7ad350d86617b058d3c48b04
SHA512 a57acfdbc718d40696a9c30f8218048c5470c37309073f2514f6e7014e823b2adb12c4ff65c8ed7b707d2b606653d70d875fd62b96fe662b6cabea97541df18f
SSDEEP 3072:eotl9q2AgS5+PUdDBga4MODXzL7ft/7UTyL2qX/FPfJwRFLliNv:PVPMxP47jCev
TLSH
T1F774870FBEBC9654EA99D2B14F628AD701A9F75023A8C2CDA24F7D24206D77573217C3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

63:84:6c:45:a9:a3:a4:e5:ef:54:a3:e6:2f:a1:da:30:07:d4:0d:1f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_vi.dll

SHA256 e8abe8ffe08ad45cb256499c0da8ac3903e81ddfbf51f20abb25ca03796ab078
MD5 c5d1180348073ce706b1718f976ec38d
SHA1 0a48b7ca3af93c5ff08e93ce420410d71d950b43
SHA512 c2f0d2912c20b6562cbce4d2de8587621b894fb68e9403fd59c18712ec99753e14468a4ddd1ad78814e6efbae33d090a139d399ecca822acbb22c70839cd0744
SSDEEP 3072:J6xUNZ1LV4RSRpQy9PS5s2dVkVLwUD28CDNly7:JtZLVbpQyw5s2dViPSQ7
TLSH
T1BA74783243AE9200FEF713B2527DE7A0EE75FDD2AC35E74712214609097A5822DA47E7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

2a:69:49:35:23:85:75:08:86:03:e6:f3:3c:00:15:3d:ba:a8:5d:95

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_zhCN.dll

SHA256 6949f68f053ccaf950a1a3bd580e72667879dad08aa26c215fc3c3dd564eeb7e
MD5 f3921def02358145b5ac0632498a306f
SHA1 eb5228ebf9ea3995bba40eeda9a8bd95ef5610e8
SHA512 383dd6e43be5f0c81c08898aca0b3e30052956ce61bddb74c06eba9504900eada31b8e7149208743b6390fc2fd41a608f7a93d6f7564779a0683befc7207127a
SSDEEP 3072:YdD//3K4KK7EG5Q2D4GSRDrVdujtHy4QgghFfDr8dcU:gjuK7EG5QDDxkc42EdD
TLSH
T1D1E3F908A7EF0A84FAF78F74ED76305157B67755DA25CBCE0020C05C29A4AD16DA2B2F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

7c:ed:99:ae:f5:36:05:50:2e:f1:52:2c:ec:34:2c:ef:db:2e:76:67

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_zhTW.dll

SHA256 6184816dbfa2fabeef1e5701f9aa8301e178ff6d586629f7e5d245f97df5ba6b
MD5 9008b9266d95b43c8790bf45128c6d13
SHA1 adf8198a4e792191af05ea442f714e07240ed316
SHA512 f236a0228823dd687155ec6c9e1c373e4084d6df7502403d6b8b2b22b8eef6d782059efdc1d2b46d6ce75072cbecf066e9658cda5a66fa2a39ff6a2415ee4a0e
SSDEEP 3072:dNjwdvcw5NGtCCEpNiRYk1/5Mae7zFIerfoO:kdEN0NLk1/5MaSFZ8O
TLSH
T1EEE318012BEE0704F5F35FB8AE72346126B6BA60E7748BDE1125C64D2970BC56C9273B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

51:3d:78:91:39:f7:1a:41:ca:2c:ff:21:23:7e:31:11:4f:2e:32:20

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Service.exe

IMPHASH 77bbb9d8c3bc76c7d0bc1ee2c4a05288
SHA256 adcdc5e969c9582b224028388905d0b67326245dd04fe1d997006ff19827c7bd
MD5 a8d574a86f67d52c5de894f23699b70f
SHA1 71f20fc7311b03313f35c1d095ad74fdee3a0933
SHA512 c635ba7797f0e1877250cb5133625cdac9c6480b15abe4d0b11d17e310f346fdad46140523d6719c95b676d8fb48242ae7592547102e421925cc595321d55803
SSDEEP 98304:JaPlhPHftkdrw89iz7/3w0gqpteqdZrdC8f35vZZhlbLfixADnrOCzvc34NniXVD:Mtllkzw/XxpteqdZr9Rz/zLNiaB6
TLSH
T1D9C66C20B6E7C136D86221F1562EE72B951CBE650B7140DBD3D8BE6D6C306C34B32B66
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

14:b1:ed:c1:a2:79:09:03:8d:9a:2b:4c:c4:23:99:df:1f:71:13:1a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

7806352

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\TeamViewer_Workspace\TeamViewer_14.4_Release\build_cmake_win\FULL\Release\TeamViewer_Service.pdb

kernel32

Sleep GetCurrentThreadId GetModuleFileNameW CloseHandle LoadLibraryExA GetModuleHandleA GetModuleFileNameA GetSystemDirectoryA GetLastError lstrcmpiW DeleteCriticalSection RaiseException DecodePointer LeaveCriticalSection EnterCriticalSection GetModuleHandleW FreeLibrary GetProcAddress MultiByteToWideChar SizeofResource LoadResource FindResourceW LoadLibraryExW InitializeCriticalSectionEx WaitForMultipleObjects WaitForSingleObject PostQueuedCompletionStatus FormatMessageW SetEvent TerminateThread TlsAlloc QueueUserAPC LocalFree WideCharToMultiByte TlsFree FormatMessageA CreateEventA WaitForSingleObjectEx CreateThread GetCurrentThread SetLastError GetCurrentProcess MoveFileExW GetTempPathW ExpandEnvironmentStringsW CreateDirectoryW GetVersionExW CreateEventW GetUserGeoID GetGeoInfoW GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW GetLogicalProcessorInformation GetSystemInfo GlobalMemoryStatusEx GetComputerNameW DeleteFileW GetSystemTimeAsFileTime ResetEvent OpenEventA GetCurrentProcessId GetSystemDirectoryW SetUnhandledExceptionFilter FindFirstFileW FindNextFileW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime FindClose LoadLibraryW CreateFileW WriteFile HeapFree HeapSize HeapReAlloc HeapAlloc GetProcessHeap GetTempFileNameW TlsGetValue InitializeCriticalSectionAndSpinCount TlsSetValue GetQueuedCompletionStatus SetWaitableTimer SleepEx CreateIoCompletionPort VerifyVersionInfoW VerSetConditionMask CreateWaitableTimerW InitializeCriticalSection DuplicateHandle CreateSemaphoreA ReleaseSemaphore GetTickCount OpenEventW GetProcessId ProcessIdToSessionId GetNativeSystemInfo GetSystemPowerStatus CreateFileA DeviceIoControl OpenThread GetComputerNameExA GetComputerNameExW GlobalAlloc GlobalFree OpenMutexW CreateFileMappingA OpenFileMappingA UnmapViewOfFile ReleaseMutex SwitchToThread MapViewOfFileEx UnregisterWaitEx CreateMutexW RegisterWaitForSingleObject QueryPerformanceCounter QueryPerformanceFrequency SetThreadPriority ReadFile GetOverlappedResult GetFileAttributesW SetFileAttributesW Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection ExpandEnvironmentStringsA GetFileSizeEx OpenProcess K32GetModuleBaseNameW CreateToolhelp32Snapshot Process32FirstW Process32NextW SetSearchPathMode SetDllDirectoryW HeapSetInformation SetProcessDEPPolicy GetTickCount64 WaitNamedPipeW ResumeThread CreateProcessW TerminateProcess QueryFullProcessImageNameW K32GetModuleFileNameExW K32EnumProcesses WTSGetActiveConsoleSessionId IsWow64Process GetPrivateProfileStringW GetPrivateProfileIntW GetPrivateProfileSectionW WritePrivateProfileStringW GetDynamicTimeZoneInformation GetTimeZoneInformation GetLocalTime GetTimeFormatW GetDateFormatW SystemTimeToFileTime GetVolumeInformationW SetFilePointerEx GetFileSize GetThreadTimes VirtualProtect VirtualQuery IsDebuggerPresent OutputDebugStringW GetStringTypeW TryEnterCriticalSection EncodePointer GetExitCodeThread CompareStringW LCMapStringW GetCPInfo LoadLibraryA LCMapStringA GetUserDefaultLCID GetStringTypeExA GetCurrentDirectoryW GetDiskFreeSpaceExW GetFileAttributesExW GetFileInformationByHandle GetFullPathNameW RemoveDirectoryW SetEndOfFile SetFileTime CopyFileW AreFileApisANSI WaitForMultipleObjectsEx CreateWaitableTimerA UnhandledExceptionFilter IsProcessorFeaturePresent InitializeSListHead GetStartupInfoW CreateTimerQueue SignalObjectAndWait GetThreadPriority CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask UnregisterWait FreeLibraryAndExitThread VirtualAlloc VirtualFree InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList RtlUnwind ExitThread GetModuleHandleExW GetDriveTypeW GetFileType PeekNamedPipe ExitProcess GetStdHandle GetCommandLineA GetCommandLineW GetConsoleMode ReadConsoleW GetConsoleCP IsValidLocale EnumSystemLocalesW FlushFileBuffers SetStdHandle FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW WriteConsoleW SetFilePointer LocalFileTimeToFileTime GetLogicalDriveStringsW

Name

.text

Size

8.4MB

Virtual Size

8.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

412KB

Virtual Size

622KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

296KB

Virtual Size

295KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

478KB

Virtual Size

477KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

TeamViewer_StaticRes.dll

SHA256 45a7c967d5165a99e3d88be444927d0bafc5de37cbc5e3c6c8ef7e7fbc962b6b
MD5 728748c9ca37bbaa47a98ac88f5a759d
SHA1 852924bea5a3be6e641bbf6eb221b859efb4b032
SHA512 84d997a7e0f2bdcc75b147a228083c2fc796724276cc7ff1e96489d2d2bd1d349219c4019326b434582e70e99fb3e52287633de8faa6e7cb532e8cd2fe29362d
SSDEEP 98304:QaRWcYTl5i5pDfCwug4SQ0K4sh0Sjjl/VUOwQINJcSTB+OP9Etxw2klX:nR9ol5i/L2t4s2SN/VAQIHtZEw2klX
TLSH
T13066F1E5EBE279A3D519563299D80510AC331EC3A9D12D5AB6CDFC2D0F303C88D8B65E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

f6:b5:9b:1e:dc:6a:6b:04:58:f4:e6:84:57:2e:c6:2e:91:0b:82:43

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

outlook/ManagedAggregator.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 e0030b6a54834b9efe8af85478556d68395f8b74519e8dd7cc2e94a7a1e47561
MD5 8063ce60ef746def7f91063fadb0a4ec
SHA1 40b4eaf9d83c53eae86bd77f0887bb2574cc3849
SHA512 f0330db5f4b87101f11cea67e6a798f506a028946b802c95c912ceb4c229fbc6ebf44ce90210ec9df64bce353d7d3dfba608b0742648f822acc0dac3f6077190
SSDEEP 192:1YLxBIUBzHUzOIKnYe+PjPvqFx+HNgYMuj8MzSjy:6LxBIsHUzO3nYPLvAIt1MMejy
TLSH
T173424B528BB81433FEEBCF7076F1A4122E70F701EA92C56F4159C0817ED5BA12A6932D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

66:c3:c8:62:12:66:94:a5:1d:73:44:6d:34:c1:1d:56:ee:7b:29:5a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

4

Entry point

11274

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\TeamViewer_Workspace\TeamViewer_14.4_Release\ApplicationPlugins\Win\OutlookAddIn\ManagedAggregator\obj\Release\ManagedAggregator.pdb

outlook/TeamViewerMeetingAddIn.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d58a80fde4a8cf2acfe41732bc0079ecba32697aa58991a46b828c1e74f34231
MD5 f9b8ce353428542333954e816cfd1497
SHA1 d56e34c7ba4aa0396a9bdf9ef85ca01cc4c9a3f6
SHA512 bfee155321065d647f1093258722bf35fbad1e03cbdabaf2d36a408c34bc7ae4baf7243f21f8298838378a719f40a6c2d4eb98d1f3e14489f5119e3d770701b0
SSDEEP 6144:bKapF8+HBY77S0XCvZ8askd0OuAGC2ZKJ9J:eap27S0SvyaJV2OJ
TLSH
T13974482433DD092EDA4FA276D955F70646E2E1EB91E2DBCF440141EA3E83B42DE135B2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

9f:d5:90:ce:ea:cd:47:3c:8c:01:c8:22:b9:09:37:10:d7:2c:bd:47

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

4

Entry point

347778

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

outlook/TeamViewerMeetingAddinShim.dll

IMPHASH b0b14890f870013b9ab4c17359662fa8
SHA256 8883af9eab01b91968154b4b1ef4ce86833b0dab0d129d5bf5db0dcb7511c4a8
MD5 00af133973be6d3832f208904ad1d690
SHA1 cf9868495deb3d96dad50c586b542b1a82e5e186
SHA512 056ac9f7caa1df56dc33487337a7272851c57ee5cdb3418caa68e633a670b8ffaca7dbbd2e3426b6c01d039f1a97d17cdce2f1c38bfe4f1d90dc4713b59b79ac
SSDEEP 3072:G49isAeaNdTG/FijBd7G7f0Y7KhwLQnu3nMK:G4csxEgFELeBnd
TLSH
T1D0C35A00B791C0B1E5BE59395978D7A59B3FBA30CF9089DB7384132E5E701C2AF35A26
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

a6:1b:44:bc:b3:13:2c:48:11:0c:81:a4:e9:3b:45:54:b5:31:f6:ba

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

28240

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\TeamViewer_Workspace\TeamViewer_14.4_Release\ApplicationPlugins\Win\OutlookAddIn\BuildTarget\Release\TeamViewerMeetingAddinShim.pdb

mscoree

CLRCreateInstance

kernel32

DeleteCriticalSection FreeLibrary GetModuleHandleW GetProcAddress LoadLibraryExW LoadResource SizeofResource FindResourceW InitializeCriticalSectionAndSpinCount MultiByteToWideChar DecodePointer EncodePointer GetThreadLocale SetThreadLocale CreateFileW SetFilePointerEx LeaveCriticalSection EnterCriticalSection GetLastError RaiseException GetModuleFileNameW GetFullPathNameW CloseHandle lstrcmpiW TerminateProcess GetConsoleMode GetConsoleCP WriteFile FlushFileBuffers SetStdHandle GetStringTypeW GetProcessHeap LCMapStringW GetFileType GetStdHandle IsDebuggerPresent OutputDebugStringW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess WriteConsoleW IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind InterlockedFlushSList SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW HeapFree HeapAlloc HeapSize HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW

user32

CharNextW

advapi32

RegQueryInfoKeyW RegOpenKeyExW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegCloseKey RegSetValueExW

ole32

CoTaskMemFree CoCreateInstance StringFromGUID2 CoTaskMemRealloc CoTaskMemAlloc

oleaut32

SysAllocStringLen SysFreeString RegisterTypeLi LoadRegTypeLi LoadTypeLi VarUI4FromStr VariantClear VariantInit SysStringLen SysAllocString

shlwapi

PathAppendW

outlook/TeamViewerMeetingAddinShim64.dll

IMPHASH b2aa9280dc61d3441f398d87c247bfc9
SHA256 b7f19e587ee4ce59af65b4d5f80f2f7dbee8d253745759112978527961b77f3a
MD5 44c062e50eab476898cf4626d175d043
SHA1 2f7e36197ee67f5001a0c99408ea651e6b3ae810
SHA512 3bd7edfe6c4cf55828a44df112d3b7efe2f1ac2a1fe52568872402c4f99b603cdf292f971f6df325e0c410196873727447c8e5fa8c12afb408ed847b51c4d11b
SSDEEP 3072:HctRQrkZiiWXXxIkSEVVwh7qvtuleapfGUMl8DGDQfQqAWCm:8tRQKlWXXxnY7qUlkMIqIm
TLSH
T15CE35C5773E540ABE177817888A34645E7B3B4610B219BEF03A4436E2F677D19E3EB20
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

d0:f5:88:09:4d:03:ea:d0:ad:e7:82:c1:86:7d:bb:2d:a2:7f:de:96

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

30840

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\TeamViewer_Workspace\TeamViewer_14.4_Release\ApplicationPlugins\Win\OutlookAddIn\BuildTarget\Release\TeamViewerMeetingAddinShim64.pdb

mscoree

CLRCreateInstance

kernel32

DeleteCriticalSection FreeLibrary GetModuleHandleW GetProcAddress LoadLibraryExW LoadResource SizeofResource FindResourceW InitializeCriticalSectionAndSpinCount MultiByteToWideChar DecodePointer EncodePointer GetThreadLocale SetThreadLocale CloseHandle CreateFileW LeaveCriticalSection EnterCriticalSection GetLastError RaiseException GetModuleFileNameW GetFullPathNameW WriteConsoleW lstrcmpiW GetCurrentProcess SetFilePointerEx GetConsoleMode GetConsoleCP WriteFile FlushFileBuffers SetStdHandle GetStringTypeW GetFileType GetStdHandle GetProcessHeap LCMapStringW IsDebuggerPresent OutputDebugStringW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlPcToFileHeader RtlUnwindEx InterlockedFlushSList SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW HeapFree HeapAlloc HeapSize HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW

user32

CharNextW

advapi32

RegQueryInfoKeyW RegOpenKeyExW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegCloseKey RegSetValueExW

ole32

CoTaskMemFree CoCreateInstance StringFromGUID2 CoTaskMemRealloc CoTaskMemAlloc

oleaut32

SysAllocStringLen SysFreeString LoadRegTypeLi LoadTypeLi VarUI4FromStr VariantClear VariantInit SysStringLen SysAllocString

shlwapi

PathAppendW

tv_w32.dll

IMPHASH b3ff32e5aa0633d6d02dacc82f341dfc
SHA256 124ef7e0f584f91fd31a4eacde105118a092959b24a4eee015213fc3aab68019
MD5 5da113bb12b07ed16da585f7a52f38c2
SHA1 0c8764861b4a2fbc2fb597936f1caa49aca45ec9
SHA512 a19cd29d3781c21ad8df83b8ed32983a52bd3db639542c1c34f0b8c4fc5c1bc1e3ac6b431e391832066b2c8f6d90ca24472719d620c1df7e78729c3813e10b11
SSDEEP 12288:QWXw8KaQwyLFAJc7vkZDAuF84SVyNZU+Ke6mPteCu4Y:/w8KaTrAuFvSVwtLu4Y
TLSH
T174947D10B982C032D673383145B4E6B24D6DBD212F749DCF53982A79AFB05C1B93DA6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

b1:eb:57:db:58:fe:1a:c5:31:c7:51:b5:19:25:2d:f5:c9:0a:ac:6b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

54012

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\TeamViewer_Workspace\TeamViewer_14.4_Release\BuildTarget\Release2017\tv_w32dll.pdb

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

kernel32

OpenProcess CreateToolhelp32Snapshot GetLastError QueryPerformanceFrequency CloseHandle HeapAlloc GetCurrentProcessId GetProcessHeap GetModuleHandleW CreateRemoteThread QueryPerformanceCounter EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetVersionExW GetFileAttributesExW FileTimeToSystemTime GlobalLock DeleteCriticalSection GlobalUnlock GetSystemDirectoryA LoadLibraryA FreeLibrary GetCurrentThreadId GetLocalTime GetModuleFileNameA Thread32Next Thread32First SuspendThread ResumeThread DisableThreadLibraryCalls OpenMutexW OpenThread GetExitCodeProcess GetModuleFileNameW FreeLibraryAndExitThread Sleep LoadLibraryW CreateThread IsBadWritePtr GetCurrentProcess CreateMutexW WaitForSingleObject ReleaseMutex GetModuleHandleA UnmapViewOfFile CreateEventW SetEvent LocalFree VerSetConditionMask VerifyVersionInfoW IsBadReadPtr CreateFileMappingW MapViewOfFile GetTickCount VirtualQuery HeapSize SetStdHandle GetStringTypeW SetFilePointerEx GetFileSizeEx SetConsoleCtrlHandler EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar HeapReAlloc GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetFileType GetStdHandle GetCurrentThread GetModuleHandleExW ReadConsoleW Module32First Module32Next VirtualAlloc VirtualFree HeapFree VirtualProtect GetProcAddress DecodePointer OutputDebugStringW CreateFileW OpenFileMappingW WriteConsoleW ExitProcess RaiseException ReadFile GetConsoleMode GetConsoleCP WriteFile FlushFileBuffers UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW InterlockedPushEntrySList InterlockedFlushSList RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer

user32

GetDC GetSystemMetrics ClientToScreen MapWindowPoints GetUpdateRect FindWindowW GetClientRect GetDesktopWindow GetWindowRect IsWindowVisible SetWindowPos GetWindowDC RegisterClassExW LoadCursorW FindWindowExW RegisterClipboardFormatW DefWindowProcW SendMessageTimeoutW CallNextHookEx UnregisterClassW IsWindow SetTimer UnhookWindowsHookEx SendNotifyMessageW GetClassNameW SetWindowsHookExW KillTimer RegisterWindowMessageW DestroyWindow CreateWindowExW GetClassInfoExW ReleaseDC

gdi32

RectVisible GetStockObject CreatePen Rectangle BitBlt SelectObject CreateDIBSection CreateCompatibleDC GdiFlush DeleteDC DeleteObject

shell32

DragQueryFileW

ole32

CoUninitialize ReleaseStgMedium CoCreateInstance CoInitialize

Name

.text

Size

295KB

Virtual Size

295KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

83KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.shared

Size

512B

Virtual Size

36B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

tv_w32.exe

IMPHASH 4bad36870765521a3b1a2e5784f6b173
SHA256 3bd36b9b04ba3aa658219c386be1929370e3b9c4f1abf1f5fab31373d2ae3b5e
MD5 c833f80e7e06d99c48d7a579edadf245
SHA1 534d5a57a3df5bdbdab2a032e61d00e973600b33
SHA512 d21747db5cfb4b41aedb58f75d97c3979e977d0bee3119840cb86aa35992b27e0a4c6d099c79a6bf1c30d2f179cb7a18a76689f283110e3282007c62a837faea
SSDEEP 3072:BjGkW0+UnF+4XVXX2kLvDa5Xjt4CBvh8cfHw8AXiGBwqu+sQx79AsGK9D03Iuidx:BE0+UnF+oX2fX+C/HsyYLuG7aPmZnU+r
TLSH
T13F147D217981C432E56345301AF9DFB19ABDB9315FB048DB63C40B3A4F71AE36535A2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

82:16:80:53:e1:b6:e6:e0:f6:22:76:23:8d:12:e3:f4:a0:b2:dc:c9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

55273

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\TeamViewer_Workspace\TeamViewer_14.4_Release\BuildTarget\Release2017\tv_w32exe.pdb

setupapi

SetupDiEnumDeviceInfo SetupUninstallOEMInfW SetupDiCallClassInstaller SetupDiSetClassInstallParamsW SetupDiGetDeviceRegistryPropertyW CM_Get_Device_ID_ExW SetupDiGetDeviceInfoListDetailW SetupDiGetClassDevsExW

kernel32

SetLastError CreateFileW ReadFile GetTickCount Sleep FreeLibrary GetModuleFileNameA LoadLibraryA GetProcAddress LoadLibraryW GetSystemDirectoryW OpenMutexW CreateWaitableTimerW SetEvent WaitForSingleObject SetFilePointer WriteFile ReleaseMutex CreateMutexW GetLocalTime GetCurrentThreadId GetCurrentProcessId LoadLibraryExA GetModuleHandleA GetSystemDirectoryA GetCommandLineW GetCurrentProcess CloseHandle CreateEventW VerifyVersionInfoW VerSetConditionMask GetWindowsDirectoryW GetModuleFileNameW GetLastError LocalFree SetFilePointerEx HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode DecodePointer SetWaitableTimer VirtualQuery RaiseException GetSystemInfo VirtualProtect WriteConsoleW GetModuleHandleW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead RtlUnwind EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitProcess GetModuleHandleExW GetStdHandle WideCharToMultiByte HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA MultiByteToWideChar GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetProcessHeap SetStdHandle GetStringTypeW

advapi32

RegCloseKey RegSetValueExW RegOpenKeyExW DeleteService ControlService QueryServiceStatusEx OpenServiceW OpenSCManagerW CryptGetHashParam CryptDestroyHash CryptHashData CryptReleaseContext CryptCreateHash CryptAcquireContextW RegQueryValueExW RegOpenKeyW CloseServiceHandle

tv_x64.dll

IMPHASH c9c88b240771b79995085cd1a31325b0
SHA256 5d051fc8bd5bd90a014106a0264c1af2639cb3671e90110c4477a20b634017ea
MD5 682c3d195344d49f16e87f41e72079a5
SHA1 f3117493a6ff3ec0c20bf1493aaa0689a4361c26
SHA512 241af20fe0f958dd905aea4d9f4c83d21b01d22d1ae5fdf95d1957789bfde6d7aaa5f2d49f430a1d2afe8f795226c53f574c5289947e8b7578091830a61959a4
SSDEEP 6144:W091+uaHr5aKi2holSPDSv7gqiu9QdFsfjGZJAkcbOeU8uMhPFu7tDImzF:W09lirsKZo4Gc+9mFsrG7UPUx5IgF
TLSH
T1CCB48E06F7A50BB9D17BD13DC5528A01E9B278551721A38F03E8E3BA0F23BA1697F711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

de:f5:87:3e:da:a1:a9:5a:c5:90:27:a1:59:42:7c:17:f5:69:fb:d9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

59844

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\TeamViewer_Workspace\TeamViewer_14.4_Release\BuildTarget\Release2017\tv_x64dll.pdb

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

kernel32

OpenProcess CreateToolhelp32Snapshot GetLastError QueryPerformanceFrequency CloseHandle HeapAlloc GetCurrentProcessId GetProcessHeap GetModuleHandleW CreateRemoteThread QueryPerformanceCounter EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetVersionExW GetFileAttributesExW FileTimeToSystemTime GlobalLock DeleteCriticalSection GlobalUnlock GetSystemDirectoryA LoadLibraryA FreeLibrary GetCurrentThreadId GetLocalTime GetModuleFileNameA Thread32Next Thread32First SuspendThread ResumeThread DisableThreadLibraryCalls OpenMutexW OpenThread GetModuleFileNameW FreeLibraryAndExitThread Sleep LoadLibraryW CreateThread IsBadWritePtr CreateMutexW WaitForSingleObject ReleaseMutex OpenFileMappingW GetModuleHandleA CreateEventW SetEvent LocalFree VerSetConditionMask VerifyVersionInfoW IsBadReadPtr CreateFileMappingW MapViewOfFile GetTickCount VirtualQuery HeapSize SetStdHandle GetStringTypeW SetFilePointerEx GetFileSizeEx SetConsoleCtrlHandler EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP HeapReAlloc GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetFileType GetStdHandle GetCurrentThread GetModuleHandleExW ReadConsoleW Module32First Module32Next VirtualAlloc VirtualFree HeapFree VirtualProtect GetProcAddress OutputDebugStringW CreateFileW WriteConsoleW UnmapViewOfFile RtlUnwind ExitProcess RtlPcToFileHeader ReadFile GetConsoleMode GetConsoleCP WriteFile FlushFileBuffers RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwindEx InterlockedPushEntrySList InterlockedFlushSList SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RaiseException

user32

GetDC GetSystemMetrics ClientToScreen MapWindowPoints GetUpdateRect FindWindowW GetClientRect GetDesktopWindow IsWindowVisible SetWindowPos GetWindowDC ReleaseDC RegisterClassExW LoadCursorW FindWindowExW RegisterClipboardFormatW DefWindowProcW SendMessageTimeoutW CallNextHookEx UnregisterClassW IsWindow SetTimer UnhookWindowsHookEx SendNotifyMessageW GetClassNameW SetWindowsHookExW KillTimer RegisterWindowMessageW DestroyWindow CreateWindowExW GetClassInfoExW GetWindowRect

gdi32

RectVisible GetStockObject CreatePen Rectangle BitBlt SelectObject CreateDIBSection CreateCompatibleDC GdiFlush DeleteDC DeleteObject

shell32

DragQueryFileW

ole32

CoUninitialize ReleaseStgMedium CoCreateInstance CoInitialize

Name

.text

Size

357KB

Virtual Size

357KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

122KB

Virtual Size

121KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.shared

Size

512B

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

tv_x64.exe

IMPHASH 10a283d91ce92db6c39cf7cb220fb024
SHA256 e7e2ff2f29e70a90b0e79518b11a1675b6caadcd3825abb1149aca45bcaf724e
MD5 959da2149b1a27bda1a66b9e2f724a8f
SHA1 73d8cac970283f0a01369cfec0b9c7306b1aaf76
SHA512 064a0f5fc534eb6d937bf350726c597b7d1a892b7cf40be93ec0a363d5dd3b2fb500318d61752296ceab22507c2305eecf2dddf858cea430d39911d2fe8013f5
SSDEEP 3072:84I6IJPqxNdvEzp5jL9DhQW99ZY+vlePO0VwIriv9PouFUmsT/vrScbJmaw:e6iyxNd815jYoZvoHwJViTFpw
TLSH
T1F0245B1AB7A508F9E067C139CD928905E27278450B71C6EF13A403BAAF777E19D3E721
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

0a:36:de:01:bc:36:09:1a:c3:99:78:a9:49:3d:08:3a:92:8d:46:ab

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

6

Entry point

58980

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

E:\TeamViewer_Workspace\TeamViewer_14.4_Release\BuildTarget\Release2017\tv_x64exe.pdb

setupapi

SetupDiEnumDeviceInfo SetupUninstallOEMInfW SetupDiCallClassInstaller SetupDiSetClassInstallParamsW SetupDiGetDeviceRegistryPropertyW CM_Get_Device_ID_ExW SetupDiGetDeviceInfoListDetailW SetupDiGetClassDevsExW

kernel32

SetLastError CreateFileW ReadFile GetTickCount Sleep FreeLibrary GetModuleFileNameA LoadLibraryA GetProcAddress LoadLibraryW GetSystemDirectoryW OpenMutexW CreateWaitableTimerW SetEvent WaitForSingleObject SetFilePointer WriteFile ReleaseMutex CreateMutexW GetLocalTime GetCurrentThreadId GetCurrentProcessId LoadLibraryExA GetModuleHandleA GetSystemDirectoryA GetCommandLineW GetCurrentProcess CloseHandle CreateEventW VerifyVersionInfoW VerSetConditionMask GetWindowsDirectoryW GetModuleFileNameW GetLastError LocalFree SetFilePointerEx HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode WriteConsoleW SetWaitableTimer RtlCaptureContext RaiseException GetSystemInfo VirtualProtect VirtualQuery GetModuleHandleW RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx RtlPcToFileHeader EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitProcess GetModuleHandleExW GetStdHandle WideCharToMultiByte HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA MultiByteToWideChar GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetProcessHeap SetStdHandle GetStringTypeW

advapi32

RegCloseKey RegSetValueExW RegOpenKeyExW DeleteService ControlService QueryServiceStatusEx OpenServiceW OpenSCManagerW CryptGetHashParam CryptDestroyHash CryptHashData CryptReleaseContext CryptCreateHash CryptAcquireContextW RegQueryValueExW RegOpenKeyW CloseServiceHandle

uninstall.exe

IMPHASH e2a592076b17ef8bfb48b7e03965a3fc
SHA256 c6e1b00fff988fdaacce0153b6d062ede6789c6b2c4a7e2a490dc0a4506f91b5
MD5 44fe208e498a7e4f4ddafa4fb95e9462
SHA1 9f2dea523c1141b59534df495ae5b661c9fc9adc
SHA512 ee85480fbdef8e0d9395129e8fe43e653a913823de000c593781db403c7eb7102b500f045aef57c6a63be9d3972e4f1bbd342d0be15758ed58e8fb8c689bee0d
SSDEEP 6144:XpkXchddP8eTgWI/EkcmYOG/37MnGZoeKxpuuQxP7PwRus35qwVu/:KOk4gAk9fu37MnGZoDxpufP7IRuY53u/
TLSH
T15A15F755A7F642A7F4B31F30EEB1437019367DD1A9F499AE5384B61C0C302C9E629B2E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

08:31:de:23:60:d7:b7:34:6b:8e:ca:4d:94:d0:7a:21:29:34:fe:d7

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jul 3, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

4

Entry point

12960

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount GetFileSize GetModuleFileNameW MoveFileW SetFileAttributesW GetCurrentProcess ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW WaitForSingleObject CopyFileW CompareFileTime GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GlobalUnlock lstrcpynW GetDiskFreeSpaceW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/FindProcDLL.dll

IMPHASH e26d7460d0c04056b9226a899477ba4d
SHA256 6eb09ce25c7fc62e44dc2f71761c6d60dd4b2d0c7d15e9651980525103aac0a9
MD5 6f73b00aef6c49eac62128ef3eca677e
SHA1 1b6aff67d570e5ee61af2376247590eb49b728a1
SHA512 678fc4bf7d345eeb99a3420ec7d0071eaba302845e93b48527d9a2a9c406709cc44ec74d6a889e25a8351a463803f8713a833df3a1707a5ad50db05240a32938
SSDEEP 384:DZoRF0XXUuJReQg0Tw67ADWBTgmldIogUD3GLgFmyaX/fVYcWJQCDmrinogRdBl:DZaF0HtTwuz9yu3KgwRX1nWJ1q+noI
TLSH
T12DC26C107C9042B7D28E5671A1E50F075B3F6E512AE65883CF256ADA2D612F0FA3F31B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

6100

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/InstallOptions.dll

IMPHASH 4b45b7e00344a87332fbd12653854d1a
SHA256 c91c1796338a265b49039c0b2c7a312d764b99e5174fb2dae455ca54f8f41ec7
MD5 033ee34c40e8fa85bf2739bcb2f3e186
SHA1 2ca942f35f77f37df3fc6097acac34f2e77341b7
SHA512 2204e0b8721b8d85c51bd068b1695b16ee096bfc1d1cd5843f48fd04032aeee2b6a91ce82978a4b3414f3d966ec5b36fb337a4149dae3a1d0445935d964d247f
SSDEEP 384:ErC43tPegZ3eBaRwCPOYY7nNYXCT/Yosa:EmTgZ3eBTCmrnNAh
TLSH
T1B1624D1137D558B3E2D62A797EE3B7138FA5F722A4438E0BC7332E06281A5956E7C311
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetCurrentDirectoryW GlobalUnlock GlobalLock GetModuleHandleW CloseHandle SetEndOfFile SetCurrentDirectoryW GetPrivateProfileStringW GetPrivateProfileIntW MultiByteToWideChar ReadFile GetFileSize CreateFileW lstrcmpiW lstrcatW lstrcpynW WritePrivateProfileStringW lstrlenW lstrcpyW GlobalFree GlobalAlloc WriteFile SetFilePointer

user32

LoadCursorW SetWindowRgn GetDlgCtrlID CloseClipboard DrawFocusRect OpenClipboard DrawTextW SetCursor LoadIconW LoadImageW SetWindowLongW CreateWindowExW MapDialogRect SetWindowPos GetWindowRect CreateDialogParamW GetClientRect ShowWindow GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageW TranslateMessage GetMessageW IsDialogMessageW CallWindowProcW PostMessageW MessageBoxW GetSysColor CharNextW wsprintfW GetWindowTextW SetWindowTextW SendMessageW GetWindowLongW EnableMenuItem PtInRect MapWindowPoints GetClipboardData

gdi32

SetTextColor DeleteObject CombineRgn CreateRectRgn GetDIBits SelectObject CreateCompatibleDC GetObjectW

shell32

SHGetDesktopFolder SHGetPathFromIDListW ShellExecuteW SHBrowseForFolderW

comdlg32

GetOpenFileNameW GetSaveFileNameW CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/InvokeShellVerb.dll

IMPHASH 1dd17c8be9b0761e58bbdf6fc06463e3
SHA256 2fddc8b8ab4bf4838ea374d25e4cb9e83362c3f1cb24f380137d14c814d56169
MD5 1a6e1ea7e90e50d9a18e034e7cde41a6
SHA1 93148d67fc2cee4537f749a8c98a0735065241a8
SHA512 53d35e9e4a0d45a5b37da7952f7bf8c26666fa57748c3d292fd154e40a602f08ad55735cefe9bdf043e03e3eff3e58d603bd9980ef291b3c5f409228dd5ba872
TLSH
T118813F3343F444B2D4D79A376F6B09E96A22AB1137B5654C4A83182A6822BEFDD38711
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4754

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/KillProcDLL.dll

IMPHASH d806a080e21508dd768fa70be247d2ae
SHA256 de1177a4bd1c56c3555f366d40b37d7dd9cb25e16c4973d0a4d22bf9a8af7aed
MD5 1cc87d2b5a79b18f133b4f944e2f2f74
SHA1 98e0ddb727c76e06be1668434d754e5b80a0c154
SHA512 d8fee1c09fef9af4e1f38baaffa3a6d059713b14ecad900815c086cc22855644fcdeacd6bba31ea6e6925831e650f7b0d34e6dea4c57a978fb4f5bf0cd6d72a9
SSDEEP 384:JLmJwO50x66T9JOpOUT38YZvml7xoKdyuwlx8xSiorppugBwUdJopS:JW50hJwwUTsXdPwxvtpDtdJo
TLSH
T1DFF26C507C8144F7C28E4235A5A9AB179FBF692036E55983CF269EDA1C311F0E93B307
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

6841

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 982c5fb7ada7d8c9bc3e419d1c35da6f05bc5dd845940c179af3a33d00a36a8b
MD5 0ff2d70cfdc8095ea99ca2dabbec3cd7
SHA1 10c51496d37cecd0e8a503a5a9bb2329d9b38116
SHA512 cb5fc0b3194f469b833c2c9abf493fcec5251e8609881b7f5e095b9bd09ed468168e95dda0ba415a7d8d6b7f0dee735467c0ed8e52b223eb5359986891ba6e2e
SSDEEP 192:eK24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlASl:u8QIl975eXqlWBrz7YLOlA
TLSH
T12B325C02135481F3E4918138C86B3A276B6A15029BF98E57DFD39646BE30BE3BD7D603
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/TvGetVersion.dll

IMPHASH 8fe1425ee6d46ec8c7cfcf0fd32a8530
SHA256 c67cbd5e35e1ce0c7ba17c55d8e2bc33afd5e0a68774554a1fe7216d330c709e
MD5 05f51bc8ffb2c8f5a2825bf5680301cf
SHA1 30f7f77dce1fb3526142780e9f5bd5c11622d6b6
SHA512 1e041aaa37dd00414ad955ebc8c0f708589014d2085a5a0b95a31f4d694bb1cc4994bb1324d4b983cbad0449fb0a05560d82c60fdbfc78be67ff61275e451233
SSDEEP 3072:4J7KJkcma0VkpOG/374vnriZ1nmTaK405/+ncMCQ2bDh:6EkcmYOG/37MnGZoeKxpuuQ
TLSH
T1D7245B0177E4843AF2F726746DF6C6604EBDBC725934D18FE780892A2E70A85DB24727
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

67443

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

shlwapi

StrChrW StrRChrW

wtsapi32

WTSEnumerateProcessesW WTSFreeMemory

msi

ord205 ord45 ord16 ord70 ord141

psapi

GetProcessImageFileNameW

kernel32

lstrcpyA lstrcmpiA lstrcpynA lstrlenA lstrcpyW lstrcpynW Sleep GetVersionExW LocalFree FreeLibrary LoadLibraryW GetExitCodeProcess WaitForSingleObject CreateProcessW OpenProcess Process32NextW Process32FirstW CreateToolhelp32Snapshot TerminateProcess DeleteFileW GetWindowsDirectoryW GetTempPathW InterlockedDecrement WideCharToMultiByte CreateDirectoryW GetFileAttributesW MultiByteToWideChar RtlUnwind HeapFree RaiseException HeapReAlloc MoveFileW FindClose FileTimeToSystemTime FileTimeToLocalFileTime FindFirstFileExW EncodePointer DecodePointer GetCurrentThreadId GetCommandLineA IsProcessorFeaturePresent HeapAlloc TlsAlloc TlsGetValue TlsSetValue TlsFree CreateFileW SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess EnterCriticalSection LeaveCriticalSection lstrlenW GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW HeapCreate HeapDestroy GetFullPathNameW GetFileInformationByHandle PeekNamedPipe GetFileType GetFileSize HeapSize ExitProcess SetHandleCount GetStdHandle GetStartupInfoW DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime WriteFile GetModuleFileNameW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer GetStringTypeW GetUserDefaultLCID GetLocaleInfoW GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetEndOfFile GetProcessHeap InterlockedExchange GetTimeZoneInformation WriteConsoleW CompareStringW SetEnvironmentVariableA InterlockedCompareExchange InitializeCriticalSection GlobalAlloc ReadFile CloseHandle GlobalFree GetLastError lstrcatW InitializeCriticalSectionAndSpinCount GetDriveTypeW GetCurrentProcessId GetModuleHandleW GetProcAddress VerSetConditionMask VerifyVersionInfoW lstrcmpiW InterlockedIncrement GetCurrentDirectoryW

user32

SendMessageW PostMessageW GetSystemMetrics wsprintfW

gdi32

AddFontResourceExW RemoveFontResourceExW

winspool.drv

EnumPrintProcessorsW EnumPrinterDriversW

advapi32

RegSetValueExW RegCloseKey RegEnumKeyExW RegDeleteKeyW GetUserNameW LookupAccountNameW ConvertSidToStringSidW DeleteService ControlService RegOpenKeyExA RegQueryValueExA OpenProcessToken LookupPrivilegeValueW OpenServiceW CloseServiceHandle QueryServiceStatus RegQueryValueExW RegEnumValueW RegCreateKeyExW RegOpenKeyExW RegFlushKey ChangeServiceConfig2W RegDeleteValueW AdjustTokenPrivileges StartServiceW OpenSCManagerW

shell32

ShellExecuteExW SHFileOperationW

ole32

CoInitialize CoUninitialize CLSIDFromString CLSIDFromProgID CoCreateInstance OleRun

oleaut32

SysAllocString SysFreeString GetErrorInfo

$PLUGINSDIR/UAC.dll

IMPHASH 2a2e0e82c0dc9890f9201e8bd8ecbff2
SHA256 0d21041a1b5cd9f9968fc1d457c78a802c9c5a23f375327e833501b65bcd095d
MD5 113c5f02686d865bc9e8332350274fd1
SHA1 4fa4414666f8091e327adb4d81a98a0d6e2e254a
SHA512 e190d1ee50c0b2446b14f0d9994a0ce58f5dbd2aa5d579f11b3a342da1d4abf0f833a0415d3817636b237930f314be54e4c85b4db4a9b4a3e532980ea9c91284
SSDEEP 192:5cdcpry0igQ1Ii1rzn6U4gbfW6irWP+vOg7XRSEi+OPLjte86jugnincl0Nr90Og:WqVibvTh4qnFP+OPEzinclP+
TLSH
T19A821A5537E543BFE57229313AE766120BBEB8301A32542F4D63AAC93870987AD3D707
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

14996

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GlobalAlloc lstrlenW lstrcpynW GetVersionExW lstrcmpiW GetCurrentThreadId LoadLibraryW FreeLibrary GetProcAddress CreateProcessW GetExitCodeProcess WaitForSingleObject DuplicateHandle Sleep GetCurrentProcessId CreateThread GetCommandLineW OpenProcess GetLastError FormatMessageW LocalFree GlobalFree CloseHandle SetLastError GetModuleFileNameW GetPrivateProfileIntW GetPrivateProfileStringW LoadLibraryA GetModuleHandleW

user32

DialogBoxParamW CharNextW UnhookWindowsHookEx CallNextHookEx GetClassNameW SetWindowsHookExW SendMessageTimeoutW WaitForInputIdle DefWindowProcW PostMessageW GetLastActivePopup PostQuitMessage SetForegroundWindow DispatchMessageW GetMessageW CreateWindowExW RegisterClassW UnregisterClassW GetWindowTextW TranslateMessage IsDialogMessageW PeekMessageW MsgWaitForMultipleObjects IsWindow GetWindowThreadProcessId MessageBoxW SetWindowLongW LoadImageW DestroyWindow GetWindowLongW EnableWindow ShowWindow SetWindowTextW wsprintfW GetDlgItem SendMessageW LoadStringW EndDialog

advapi32

RegCloseKey QueryServiceStatus OpenServiceW CloseServiceHandle OpenSCManagerW OpenProcessToken RegQueryValueExW RegOpenKeyExW

shell32

ShellExecuteExW

ole32

CoInitialize CoUninitialize

$PLUGINSDIR/UserInfo.dll

IMPHASH e1c0bd3d5b9f3f5cec7ea773ff66ac6e
SHA256 925d80c31702a95d58ede91ee97fd842de78ca6dde69156a6c1a755fba93cd5c
MD5 9b0db6a6056e8e51ac35e602aeab769f
SHA1 b541c6d2635141cdc3a74f59d55db8df4a92e7ac
SHA512 83fe9d346835940a37e0e0a18d041c9d13fc95a0e9ece3bc18e555cf0e8e7ddf7b42dba422b1e55ace31db3c9fc807e0b44e93b8f07f5acb943eaaf77b4f0ac6
TLSH
T1128142BB93F40CF2D0954B7B41A31CA793B2DD702716401F4947558A1094AAFED5E705
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4714

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsArray.dll

SHA256 8bc5e75bbfa5a8f10526aec2af441153b2883d6d288726ed8f7c9af12a1ee02b
MD5 82d49c227928741f6f09c5cea3bde9f1
SHA1 b0904368a5e94026d0ca5760d4577236f796051d
SHA512 d4f588e3613886e3dab58330cd69ce7f24c39be2c4854cc8edfcef98e1324926fcde0d79df1a8fdf5e2bf9327b17f22a9fa1396568c0ace4e46d4f548fdc7530
SSDEEP 192:mUODeqedh6EHFRA5sX7d7KnnpOKxX22v:2qqedh6EHFRksp7KpFX
TLSH
T192D13B52F7E85DA9D5B703B95A69571D912A7E30D6BE92881B84303D2861300AA18FBC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

ACProtect 1.3x - 1.4x DLL software

Detects file using ACProtect software.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

36144

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

out.upx

SHA256 380f015ce06b7a4d6adbe08f784b9e00259aac5c1b33dfddc274d2bbd8c6a28f
MD5 a44317e3ae33bbc262e7a7a84d4b9a95
SHA1 4306c91378bcfb7e5f5fa553f58494250fcf3a9e
SHA512 1542c5cc80e42557ebfadd61a1cbb84149fd96c65c26fd8b49e2a28036a27a48b7eb65034b233d59d22f38222c6810bbc5adf53c6750ab4d399011d4206b650f
SSDEEP 192:5mHBsIIIEa5roirVt0M8Kgms4G+bSexX2:5jINmirVxQcyuX
TLSH
T1CC129301BFA051B5F8B66171FFFE16247A1A6E04575AB8EF071704542962AD2BE38232
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

8992

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsExec.dll

IMPHASH 0b75f1007d3cc8e457970ae3e3fd53c3
SHA256 ee052fd5141bf769b841846170aabf0d7c2bb922c74c623c3f109344534f7a70
MD5 01e76fe9d2033606a48d4816bd9c2d9d
SHA1 e46d8a9ed4d5da220c81baf5f1fdb94708e9aba2
SHA512 62ef7095d1bf53354c20329c2ce8546c277aa0e791839c8a24108a01f9483a953979259e0ad04dbcab966444ee7cdd340f8c9557bc8f98e9400794f2751dc7e0
SSDEEP 96:J7fhfKaGgchPzxK6bq+pKX6D8ZLidGgmkN738:HbGgGPzxeX6D8ZyGgmkN
TLSH
T110D1F8B832C10CF3D44D46743F22381717BDD4761B7542A1CB932AD61EA2AE2FE21B41
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/uninstall_unicode.ini

SHA256 00522830c88db7b887cdf70303092710aa5337fd678e8ca408b6fbb13671bf3d
MD5 0b0da30c76029be86031debe8f4737e5
SHA1 04fd6046ec51b862554c5afee2721e29c182ce13
SHA512 ab874afe17a2333abb1b976cdd43dbeaf2e0fc9025a58b4ec21adf12b30baa2dca05bb78c27d3a4f5b05cc7a0a7a78dfc15e4dc9ed31556dc585beb32491416a
TLSH
T1042125832AE84154E1FBAB58FFF640318B347856583DC98E81D20A0E85F4684946BBEB
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

tvfiles_printer_Win10_x64.7z

SHA256 d329f09e60cb80cde88413df7d2bdfeaf8dd43e3067b7f672eedb85ed207eb23
MD5 09ba0e91991c356cb83ec185ee2ee4df
SHA1 bedd0f67b0981fce4732427b0f84e4cb3a9fe1de
SHA512 53132173dacec7c4a1de8889f2966674ee32e58850b5ecf480c48add9cb26f120989fcde305d4bf4db23cbb15b9642fc21999d3536fc0857cc6e5fd40d880008
SSDEEP 6144:yFxyVhgA+TAWMJpaxwVAsClRVTHfjTnkCUugIhzj+1pjArshjv:yFxy3bHaSokog4zypMiv
TLSH
T10464231B005051D6EB9EDF9460F2F4C486DA713C49DC4F529E82E7023A7522BB9923F6
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Printer/TeamViewer_XPSDriverFilter-PipelineConfig.xml

SHA256 1a44aad7bbc71ccf48ec3e5da68978e815ac0596bf75ff41f098990ad5dac4f2
MD5 d9cff3858e35031d5a9faea4d2ced863
SHA1 01031edc6407291a90e5826e6630af66d13fa7c4
SHA512 3db756b8a86223832e0be17afcb16022fd5f33fbd94b79c09f98edc7ccc5b71739194e3d2fb6731cdd2f73af0156441bb7ad9be3c7497317d1e5e684b6b1f69d
TLSH
T14821AD3BD4C194B125B25410FE329E48CB66D0C311B0268B706ECECE9F77D1AD193358
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Printer/TeamViewer_XPSDriverFilter-manifest.ini

SHA256 9c8859987d13ae53c5b206a7d59660c7754a7940185b599ac97e1e806551730f
MD5 a578f666c0cb526085384d35c536b5d9
SHA1 f019631640d4baa684cd589696cdcf1f8252f302
SHA512 e0fbf7054a32b5c370e98a644aec0478cc68fe5018e7b7720574e5e656c8b61fd51e712a20289dd72b38a9560d7d8633156ccf4e4302390bc180eff1d2983729
TLSH
T1B7D0EB6F0E0F0C29398206C2C0E780845F17280878FA140463B80929F0EE9CF800B52B
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Printer/TeamViewer_XPSDriverFilter.gpd

SHA256 c7a51af4dc71fed50dc095e5b7b89de3e07f00d68cbc769d70808ff25cd15502
MD5 15fc96e23c7629630ed0edb3cbb8f9ec
SHA1 0c652015cc865ab10fa521705ab6fa1b0dafc52f
SHA512 534c7289db4253f1c78575d17fc9e806fa58224345cff7dc54d7dd1c7a5ed1010de79932814f29216713531ab7a411e2653106e3533e298ee45a040a2952e748
SSDEEP 768:1E513+/TLYbpmS1Gx5M7ytzk9wjKS0ff8sEOxPOwhKGhBmAAGFD4iaKhvmOaoGJd:Av8
TLSH
T15E53714E29C02C8506BBEBBF97B30889D667193B85F9E878759EB5B40FBD4009175E0C
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Printer/TeamViewer_XPSDriverFilter.inf

SHA256 517f468834395d0c4ea0240a2a0571cf763b378d0cf8546908c5a538399f8395
MD5 4eb1623eba2343ef10c4d1d72e74c61b
SHA1 42896f4462a98e1cfaad8b6069068d046758472d
SHA512 5e59f2cadd575627bd5662fda5672a68a972f9a27c8953f7a4c791ffaad27ba5d670dfc573f8d0668d26ac933ffb99141a3c778365aca0de9ed680bb996d36dc
TLSH
T1BF31D62F1F0385349CDA2111B06248957EE9B68311E5E18B545798EB7C5BC3DB9240FA
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Printer/teamviewer_xpsdriverfilter.cat

SHA256 9ddd2ccd13ce014ffbce15830de49041e03c8e364c18e5f37ef1a9fde0913737
MD5 5c3e657b9a0fa9ed033da2189427ffdc
SHA1 6dade1db29adea2cfd1bd9b1ed33b5d177f6ec48
SHA512 e42c2b4f9e150d4ee11f0220aeb4217eb62871eed6ac89fc8e5b1bc366230c004440c88f92e06c5c6f083a31d99358cc5be9d4984838b01addf61c6cb1fcd83c
SSDEEP 192:2SjpvPp4PSGsS2/JCcb5dlt4gRVdn8nFK+3Ef5KYpBjSAILzOCL5:2vQLjlthZX+3Ef5dpBjpCCCN
TLSH
T1C122FA6A8AFC51D6F8C7C97047E4E48BBC39EBD7AC00592E60AB679804923D1B74CD1D
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Printer/x64/TeamViewer_XPSDriverFilter.dll

IMPHASH 0d898c31e89da04c164f95ca8d9309ea
SHA256 ccb0c1b5abfa5ec05a6c5813d96d5bfce48e1c71e37b68659aa05f0a17afe57e
MD5 67c3c5af70b2f96847fed4d959a7b5ad
SHA1 025a3bee633db9284aca3d1cc186cf0a9fe6ca43
SHA512 bcbbf9e618148dbc01f3a2ae7e68ea645349a5d17af3e4ef8320b94d008ac1458f78f8396d8b99ab9e5e0f48eb8a48a07481823fe714882831160da7bb4012e0
SSDEEP 12288:9KgqWs6ofOJKyCoZQ128h9+om4PiDx7ImABsRUEogZeeQSo:9KgSOJKyCoZn8XR6D1pAOqEogZv
TLSH
T1E1E4AE5AB7A401B9E4BBD23ACD134A17E7F2B8061670D74F12E0479A2F17B625B2E311
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

NSIS installer

installer

Digest

2e:8b:31:1b:22:cb:61:16:1c:dc:2e:f1:b8:b5:6e:95:65:09:f5:d0:88:39:d5:a6:75:9c:0d:57:a7:37:c4:0c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 19, 2018

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

9d:e3:18:65:f8:28:68:66:3e:ca:2c:15:37:11:5a:79:6f:c2:f7:f8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jun 13, 2018

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

20:a2:0d:fc:e4:24:e6:bb:cc:16:2a:5f:cc:09:72:ee

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 14, 2018 - Feb 14, 2019

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2010 - Feb 7, 2020

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:58:4c:08:4c:80:a1:c8:d5:61:00:00:00:00:00:58

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 1, 2017 - Nov 1, 2018

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0b:aa:c1:00:00:00:00:00:09

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:7AB5-2DF2-DA3F,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:ab:5e:40:9d:ee:46:df:2c:6c:00:00:00:00:00:ab

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Minor OS version

0

Major OS version

6

Entry point

468120

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\Trunk_I\Drivers\RemotePrintingDriver\Win\XPSDriverFilter\Build\XPSFilter\x64\Release\TeamViewer_XPSDriverFilter.pdb

version

VerQueryValueA

kernel32

HeapCreate HeapFree EnterCriticalSection GetFullPathNameW WriteFile GetDiskFreeSpaceW OutputDebugStringA LockFile LeaveCriticalSection InitializeCriticalSection SetFilePointer GetFullPathNameA SetEndOfFile UnlockFileEx GetTempPathW CreateMutexW WaitForSingleObject CreateFileW GetFileAttributesW GetCurrentThreadId UnmapViewOfFile HeapValidate HeapSize MultiByteToWideChar Sleep GetTempPathA FormatMessageW GetDiskFreeSpaceA GetLastError GetFileAttributesA GetFileAttributesExW OutputDebugStringW FlushViewOfFile CreateFileA LoadLibraryA WaitForSingleObjectEx DeleteFileA DeleteFileW HeapReAlloc CloseHandle TryEnterCriticalSection LoadLibraryW HeapAlloc HeapCompact HeapDestroy UnlockFile GetProcAddress LocalFree LockFileEx GetFileSize DeleteCriticalSection GetCurrentProcessId GetProcessHeap SystemTimeToFileTime FreeLibrary WideCharToMultiByte GetSystemTimeAsFileTime GetSystemTime FormatMessageA CreateFileMappingW MapViewOfFile QueryPerformanceCounter GetTickCount FlushFileBuffers SizeofResource InitializeCriticalSectionEx FindResourceA LocalAlloc DisableThreadLibraryCalls LockResource RaiseException LoadResource OpenEventA SetEvent SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetConsoleMode GetConsoleCP ReadFile AreFileApisANSI SetFilePointerEx GetSystemInfo WriteConsoleW GetCommandLineW GetCommandLineA SetStdHandle GetStringTypeW GetCPInfo GetOEMCP IsValidCodePage RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount CreateEventW GetModuleHandleW IsDebuggerPresent GetStartupInfoW InitializeSListHead RtlUnwindEx RtlPcToFileHeader InterlockedFlushSList SetLastError EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetModuleFileNameA CompareStringW LCMapStringW GetTimeZoneInformation GetACP GetStdHandle GetFileType FindClose FindFirstFileExA FindNextFileA

winspool.drv

GetJobW GetPrinterA

advapi32

DeregisterEventSource ReportEventA RegisterEventSourceA SetThreadToken

shell32

SHGetKnownFolderPath

ole32

StringFromGUID2 CoTaskMemFree

oleaut32

VariantInit VariantClear

tvfiles_printer_WinLt10_x64.7z

SHA256 1e16a74565c565512b0562180d79c5779803fa38852a943b712421f58ec14470
MD5 a5b29181da9e44b9a5671afee1004ad3
SHA1 98c119e784b332a8cd995435c92719cc30c6edbb
SHA512 44801d240f122754105445653e4f8a2ef7e0ddc4c8f1719d75acec5c181168c5ec2ffef1604f1aace5a2fe97d3e42761c74cfd3e4bb76d09f1cd4283c3d936b6
SSDEEP 6144:uuSfhyOT0VspSweeo0BaE8D/N7YvcJ5sGuRStkYHEgDPZxp+6urafqsnrqlLLhj3:FTOT0Ooe3Bzm1v+RSmuEgDBWlyqKqlL5
TLSH
T15264235531DC02EDD24A8E1D4722D8B85FB4362778D8F5E1723A2B3BB387102B1969DB
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Printer/TeamViewer_XPSDriverFilter-PipelineConfig.xml

SHA256 7abdebdf90ae459fcd4cba3e672ea6222151bfdc4315446e500f97dd62a2f1c3
MD5 1748035a0fdaa675b5dcd15639a2501f
SHA1 62d8ee8655e95c962fb41744ddc3643e983ad189
SHA512 90cf95a792c08ce59f7d3594acf66f8864c24968842c4139b2f1811fb514e825accfdb42ff5e76f27ca2532a34ee08f5d64e0c1f1d575a1b45174110ece4084a
TLSH
T158E0922AE5D598A12AB15411FE625944C666D1C212B01547711E8ACEAF2792AD19231C
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Printer/TeamViewer_XPSDriverFilter-manifest.ini

SHA256 423a1a4b7615afcdebbc8670363f386f81abb6e545beac20ed45798aff1cf949
MD5 54c8e94030311b3d2dd23da4e9a40b8d
SHA1 8e68e6f8cc5c8f23ac479e24924184f8b9ea7bc8
SHA512 8d5e18d432eea2b26e915208181a014ecd6be0490a85b07c9bedfab2f2c8ba599fa23b4721feb8268dc73e7e1deac15e42f53318185f5982759b36b5f4c69afb
TLSH
T14CD02B5F0E0F5C25648106C6C0E784945B57580874FA140453784925F0EE9DF911B51B
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Printer/TeamViewer_XPSDriverFilter.gpd

SHA256 c7a51af4dc71fed50dc095e5b7b89de3e07f00d68cbc769d70808ff25cd15502
MD5 15fc96e23c7629630ed0edb3cbb8f9ec
SHA1 0c652015cc865ab10fa521705ab6fa1b0dafc52f
SHA512 534c7289db4253f1c78575d17fc9e806fa58224345cff7dc54d7dd1c7a5ed1010de79932814f29216713531ab7a411e2653106e3533e298ee45a040a2952e748
SSDEEP 768:1E513+/TLYbpmS1Gx5M7ytzk9wjKS0ff8sEOxPOwhKGhBmAAGFD4iaKhvmOaoGJd:Av8
TLSH
T15E53714E29C02C8506BBEBBF97B30889D667193B85F9E878759EB5B40FBD4009175E0C
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Printer/TeamViewer_XPSDriverFilter.inf

SHA256 517f468834395d0c4ea0240a2a0571cf763b378d0cf8546908c5a538399f8395
MD5 4eb1623eba2343ef10c4d1d72e74c61b
SHA1 42896f4462a98e1cfaad8b6069068d046758472d
SHA512 5e59f2cadd575627bd5662fda5672a68a972f9a27c8953f7a4c791ffaad27ba5d670dfc573f8d0668d26ac933ffb99141a3c778365aca0de9ed680bb996d36dc
TLSH
T1BF31D62F1F0385349CDA2111B06248957EE9B68311E5E18B545798EB7C5BC3DB9240FA
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Printer/teamviewer_xpsdriverfilter.cat

SHA256 0d3f378b90639f3e52197a5822c631c7d33d3a846e082178dbb59933938bdb28
MD5 99d917c26a9bfe51df2246880a969e36
SHA1 aa9e4f0e027aaf61b86b242bd6f411aa238bb33a
SHA512 9a90961279ef854ead283f42c87f2ec786760ebeadaca605c153b2870e74ac07215d2785b32a1d0843ed6c753bfaaa21f1ae9c7e0ca601698cce5ee63f4d3c24
SSDEEP 192:b1/iJG8Ju6P2DJCc9a0zdoo8nFK+3Ef5KYpBjSAuXq:b4Eta0plX+3Ef5dpBjpua
TLSH
T11122C86A8AEC01D6F497CD704BF9E85BBC39FBD7AC005A6D60AB6B9404423C1B74891D
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Printer/x64/TeamViewer_XPSDriverFilter.dll

IMPHASH 0d898c31e89da04c164f95ca8d9309ea
SHA256 5b9f5ad271a4d7d0604859597eee5cbb185ce3d1ea9c25e61ef13254078bc304
MD5 ca5ab6fe4f65b05cff80f0f3ffd6bd69
SHA1 8d9e61532869a343edef2f2ac721044362281f59
SHA512 47f32f9be76f099ca404286e1c40384e0bd4931d7cfb783298a4ebf3a87e17c5b2dc23627abcef5803fd0ddb0f76130697cccf93cb489aa734f4100d813fa7eb
SSDEEP 12288:sKgqWs6ofOJKyCoZQ128h9+om4PiDx7ImABsRUEogZeeQSoR:sKgSOJKyCoZn8XR6D1pAOqEogZvk
TLSH
T118E4AE5AB7A401BDE4BBD23ACD134A17E7F2B8061670D74F12E0479A2F17B625B2E311
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

NSIS installer

installer

Digest

2e:8b:31:1b:22:cb:61:16:1c:dc:2e:f1:b8:b5:6e:95:65:09:f5:d0:88:39:d5:a6:75:9c:0d:57:a7:37:c4:0c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 19, 2018

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

9d:e3:18:65:f8:28:68:66:3e:ca:2c:15:37:11:5a:79:6f:c2:f7:f8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jun 13, 2018

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

20:a2:0d:fc:e4:24:e6:bb:cc:16:2a:5f:cc:09:72:ee

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 14, 2018 - Feb 14, 2019

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2010 - Feb 7, 2020

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:58:4c:08:4c:80:a1:c8:d5:61:00:00:00:00:00:58

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 1, 2017 - Nov 1, 2018

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0b:aa:c1:00:00:00:00:00:09

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=Thales TSS ESN:C3B0-0F6A-4111,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:ad:80:23:37:65:c4:5a:23:6a:00:00:00:00:00:ad

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Minor OS version

0

Major OS version

6

Entry point

468120

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\Trunk_I\Drivers\RemotePrintingDriver\Win\XPSDriverFilter\Build\XPSFilter\x64\Release\TeamViewer_XPSDriverFilter.pdb

version

VerQueryValueA

kernel32

HeapCreate HeapFree EnterCriticalSection GetFullPathNameW WriteFile GetDiskFreeSpaceW OutputDebugStringA LockFile LeaveCriticalSection InitializeCriticalSection SetFilePointer GetFullPathNameA SetEndOfFile UnlockFileEx GetTempPathW CreateMutexW WaitForSingleObject CreateFileW GetFileAttributesW GetCurrentThreadId UnmapViewOfFile HeapValidate HeapSize MultiByteToWideChar Sleep GetTempPathA FormatMessageW GetDiskFreeSpaceA GetLastError GetFileAttributesA GetFileAttributesExW OutputDebugStringW FlushViewOfFile CreateFileA LoadLibraryA WaitForSingleObjectEx DeleteFileA DeleteFileW HeapReAlloc CloseHandle TryEnterCriticalSection LoadLibraryW HeapAlloc HeapCompact HeapDestroy UnlockFile GetProcAddress LocalFree LockFileEx GetFileSize DeleteCriticalSection GetCurrentProcessId GetProcessHeap SystemTimeToFileTime FreeLibrary WideCharToMultiByte GetSystemTimeAsFileTime GetSystemTime FormatMessageA CreateFileMappingW MapViewOfFile QueryPerformanceCounter GetTickCount FlushFileBuffers SizeofResource InitializeCriticalSectionEx FindResourceA LocalAlloc DisableThreadLibraryCalls LockResource RaiseException LoadResource OpenEventA SetEvent SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetConsoleMode GetConsoleCP ReadFile AreFileApisANSI SetFilePointerEx GetSystemInfo WriteConsoleW GetCommandLineW GetCommandLineA SetStdHandle GetStringTypeW GetCPInfo GetOEMCP IsValidCodePage RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount CreateEventW GetModuleHandleW IsDebuggerPresent GetStartupInfoW InitializeSListHead RtlUnwindEx RtlPcToFileHeader InterlockedFlushSList SetLastError EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetModuleFileNameA CompareStringW LCMapStringW GetTimeZoneInformation GetACP GetStdHandle GetFileType FindClose FindFirstFileExA FindNextFileA

winspool.drv

GetJobW GetPrinterA

advapi32

DeregisterEventSource ReportEventA RegisterEventSourceA SetThreadToken

shell32

SHGetKnownFolderPath

ole32

StringFromGUID2 CoTaskMemFree

oleaut32

VariantInit VariantClear

tvfiles_printer_WinLt10_x86.7z

SHA256 efaa87cff6b83ddb3bc4a6d7e47f811493140a1f5e8e1b5029f5d626cb19379c
MD5 ea8a356e87eb635e4b3261c6c5295e1e
SHA1 0c5c4c549569b5ca4846eb0ce9907a37be7074f5
SHA512 a9af435743c710e4fd4e622ec43bd8bf9103407125279f29afde560c7fd1ea9554ae9ed5bf8c93f371ff636069236f158e4ab18e976e10e78a767898a0f8b5b3
SSDEEP 6144:me2kP3lfRjCSG2Z2EChwIGHZFO04zyKmI6jsd0V3uuV8Zcp8ilYwrIuLjalY:6GDFKqHy7yldi0FPSZcp8iKwrNalY
TLSH
T10154237402932D76AB5F415F1C8D29BB71D6CB81908C89A22CDC2992BC374584EE1BFF
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Printer/TeamViewer_XPSDriverFilter-PipelineConfig.xml

SHA256 7abdebdf90ae459fcd4cba3e672ea6222151bfdc4315446e500f97dd62a2f1c3
MD5 1748035a0fdaa675b5dcd15639a2501f
SHA1 62d8ee8655e95c962fb41744ddc3643e983ad189
SHA512 90cf95a792c08ce59f7d3594acf66f8864c24968842c4139b2f1811fb514e825accfdb42ff5e76f27ca2532a34ee08f5d64e0c1f1d575a1b45174110ece4084a
TLSH
T158E0922AE5D598A12AB15411FE625944C666D1C212B01547711E8ACEAF2792AD19231C
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Printer/TeamViewer_XPSDriverFilter-manifest.ini

SHA256 423a1a4b7615afcdebbc8670363f386f81abb6e545beac20ed45798aff1cf949
MD5 54c8e94030311b3d2dd23da4e9a40b8d
SHA1 8e68e6f8cc5c8f23ac479e24924184f8b9ea7bc8
SHA512 8d5e18d432eea2b26e915208181a014ecd6be0490a85b07c9bedfab2f2c8ba599fa23b4721feb8268dc73e7e1deac15e42f53318185f5982759b36b5f4c69afb
TLSH
T14CD02B5F0E0F5C25648106C6C0E784945B57580874FA140453784925F0EE9DF911B51B
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Printer/TeamViewer_XPSDriverFilter.gpd

SHA256 c7a51af4dc71fed50dc095e5b7b89de3e07f00d68cbc769d70808ff25cd15502
MD5 15fc96e23c7629630ed0edb3cbb8f9ec
SHA1 0c652015cc865ab10fa521705ab6fa1b0dafc52f
SHA512 534c7289db4253f1c78575d17fc9e806fa58224345cff7dc54d7dd1c7a5ed1010de79932814f29216713531ab7a411e2653106e3533e298ee45a040a2952e748
SSDEEP 768:1E513+/TLYbpmS1Gx5M7ytzk9wjKS0ff8sEOxPOwhKGhBmAAGFD4iaKhvmOaoGJd:Av8
TLSH
T15E53714E29C02C8506BBEBBF97B30889D667193B85F9E878759EB5B40FBD4009175E0C
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Printer/TeamViewer_XPSDriverFilter.inf

SHA256 517f468834395d0c4ea0240a2a0571cf763b378d0cf8546908c5a538399f8395
MD5 4eb1623eba2343ef10c4d1d72e74c61b
SHA1 42896f4462a98e1cfaad8b6069068d046758472d
SHA512 5e59f2cadd575627bd5662fda5672a68a972f9a27c8953f7a4c791ffaad27ba5d670dfc573f8d0668d26ac933ffb99141a3c778365aca0de9ed680bb996d36dc
TLSH
T1BF31D62F1F0385349CDA2111B06248957EE9B68311E5E18B545798EB7C5BC3DB9240FA
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Printer/teamviewer_xpsdriverfilter.cat

SHA256 726ded54ce0ac405f03076c56ca76b418f583d7e2d40e90fe837255b7cad80ab
MD5 f29fbe00f03e44b8297e77cbab8047dd
SHA1 1eea3b8427e675a528d4f11cf5fda4c29a466899
SHA512 ce608c30e73af44041c0f83b10bea1e7daaa77ee60c536aa7e61620134d1cbcea69bb14afab35d5eb3d697934e142e0553bbbc49cf93b0581cf87b4af7b99d9c
SSDEEP 192:s7vTUpTETgDTwySTh2XJC5AdMxQmm8nFK+3Ef5KYpBjSANPft:QqegfwRuH2QPX+3Ef5dpBjpNN
TLSH
T14722D8668AFC51C2F4D7C9705BE8D89BBC39EBD7AC104A3E609BA79408523D0B74891D
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Printer/x86/TeamViewer_XPSDriverFilter.dll

IMPHASH 5c32f858c48ca0d9a79217e15297ab8d
SHA256 8bb86d75b4d9ab1a621b06b9f012f077124006ff3ad3a9a656aa1e720915dd8b
MD5 04a6b6a3f90280ade6ff1fd7b2ced60b
SHA1 a2030042114d7e00c57377ab9a9861962a1e5425
SHA512 4c2d9763042e0ddfd6b0c0f3658b6ea910aa21ce0a871b7c7e9aff691f2a51620c60ed67e1e39ce369c20fb4081014f3ce05b37e70007afc68ca8f10f1332eed
SSDEEP 12288:9eAbjR/mMJx4q3uu55GadXBEZtmUyGWi48BIDbCUOX70FyR+UhgoTA95iop:XJum4qNcadREHqGg8BIil7JR5Jo
TLSH
T1A8C4CF53B2C180B2D16B14704262BF374EFDF6210976D89B6BD86A885E741D1B33F297
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

94:c5:6f:ea:44:b1:d5:56:fc:71:65:4c:10:ea:d0:28:2f:ec:51:b1:f8:24:e0:6e:ea:c0:c7:f8:9d:4a:8c:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 19, 2018

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

9c:ef:2f:7c:0a:ad:7b:b5:a7:92:74:7e:fb:9e:5e:bf:3c:b4:96:d0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Jun 13, 2018

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

20:a2:0d:fc:e4:24:e6:bb:cc:16:2a:5f:cc:09:72:ee

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 14, 2018 - Feb 14, 2019

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2010 - Feb 7, 2020

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:58:4c:08:4c:80:a1:c8:d5:61:00:00:00:00:00:58

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 1, 2017 - Nov 1, 2018

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0b:aa:c1:00:00:00:00:00:09

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:7AB5-2DF2-DA3F,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:ab:5e:40:9d:ee:46:df:2c:6c:00:00:00:00:00:ab

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 7, 2016 - Sep 7, 2018

Minor OS version

0

Major OS version

6

Entry point

389247

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\Trunk_I\Drivers\RemotePrintingDriver\Win\XPSDriverFilter\Build\XPSFilter\x86\Release\TeamViewer_XPSDriverFilter.pdb

version

VerQueryValueA

kernel32

HeapCreate HeapFree EnterCriticalSection GetFullPathNameW WriteFile GetDiskFreeSpaceW OutputDebugStringA LockFile LeaveCriticalSection InitializeCriticalSection SetFilePointer GetFullPathNameA SetEndOfFile UnlockFileEx GetTempPathW CreateMutexW WaitForSingleObject CreateFileW GetFileAttributesW GetCurrentThreadId UnmapViewOfFile HeapValidate HeapSize MultiByteToWideChar Sleep GetTempPathA FormatMessageW GetDiskFreeSpaceA GetLastError GetFileAttributesA GetFileAttributesExW OutputDebugStringW FlushViewOfFile CreateFileA LoadLibraryA WaitForSingleObjectEx DeleteFileA DeleteFileW HeapReAlloc CloseHandle TryEnterCriticalSection LoadLibraryW HeapAlloc HeapCompact HeapDestroy UnlockFile GetProcAddress LocalFree LockFileEx GetFileSize DeleteCriticalSection GetCurrentProcessId GetProcessHeap SystemTimeToFileTime FreeLibrary WideCharToMultiByte GetSystemTimeAsFileTime GetSystemTime FormatMessageA CreateFileMappingW MapViewOfFile QueryPerformanceCounter GetTickCount FlushFileBuffers SizeofResource InitializeCriticalSectionEx FindResourceA LocalAlloc DisableThreadLibraryCalls LockResource RaiseException LoadResource DecodePointer OpenEventA SetEvent GetEnvironmentStringsW GetCommandLineW GetConsoleMode GetConsoleCP SetStdHandle GetStringTypeW ReadFile AreFileApisANSI SetFilePointerEx GetSystemInfo WriteConsoleW GetCommandLineA GetCPInfo SetEnvironmentVariableA GetOEMCP IsValidCodePage UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount CreateEventW GetModuleHandleW IsDebuggerPresent GetStartupInfoW InitializeSListHead RtlUnwind InterlockedFlushSList SetLastError EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetModuleFileNameA CompareStringW LCMapStringW GetTimeZoneInformation GetACP GetStdHandle GetFileType FindClose FindFirstFileExA FindNextFileA FreeEnvironmentStringsW

winspool.drv

GetPrinterA GetJobW

advapi32

DeregisterEventSource ReportEventA RegisterEventSourceA SetThreadToken

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree StringFromGUID2

oleaut32

VariantInit VariantClear

tvfilesx64.7z

SHA256 cba7fa93e413c4ccee5cad56bd1a2e5a7ad0b7293945f4d4a60367494478f952
MD5 1df832a386a75ec931ce67b5207466be
SHA1 6454d3c22f0ffef2a35634f285075a4957db0755
SHA512 1131b5360b368f55b47e1f8c31ea823ce4726774c468498207397c7192338480c6304323d1e0d0f4d76204c922ad255c30bcb1462714478a135eace1b454d440
SSDEEP 768:7R13qadLgGsOAly1oEz+qWyDjuOSYAM3F6J2u880wtLEaMVsU:brFAlgoyxWypSY/FkgatLEaMVsU
TLSH
T18FE2F1C49B1AE03448490A8DA23375DC6CB6DE2895FF9E4F0D29D650BFD490CD6EC971
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

tvfilesx86.7z

SHA256 c6f425dc4704f0ebfd75e13499300266c70caff700630c317784f9d7e5b7c55c
MD5 b2a818f7106961521f3f3c4e3ad11f34
SHA1 fd00204985b3f79563b4de84062d31ed6f288aca
SHA512 051e4fa5b36db22c8571e0ff5f8186d5e128a49f45877400fa529e61a8c7732fc67b4e1ad758e421bbea4a556022b150ee301da12a39b37e01fa6b0ace99abcf
SSDEEP 768:6iktdVrQlj57FoHWIJjCP559pXUea0VaKs3Bq:6ikV0ltFoX09mvHBq
TLSH
T151D2F15551BCD6097D9B57BD2B3E42B0F33A447BD8BE7E2CB032AB8306355B1A6500E1
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Sharing

General

Malware Config

Signatures

File Explorer

TeamViewerQS_es.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/TvGetVersion.dll

shlwapi

wtsapi32

msi

psapi

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

generic

$_4_/TeamViewer_.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/Base64.dll

kernel32

generic

$PLUGINSDIR/FindProcDLL.dll

kernel32

generic

$PLUGINSDIR/InstallOptions.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/InvokeShellVerb.dll

msvcrt

kernel32

user32

ole32

oleaut32

generic

$PLUGINSDIR/KillProcDLL.dll

kernel32

generic

$PLUGINSDIR/LangDLL.dll

kernel32

user32

gdi32

generic

$PLUGINSDIR/Lizenz_TeamViewer_DE_unicode.txt

$PLUGINSDIR/Lizenz_TeamViewer_EN_unicode.txt

$PLUGINSDIR/StartMenu.dll

kernel32

user32

gdi32

shell32