TeamViewerQS[.]exe

resource
unpack001/$PLUGINSDIR/CustomerTools.dll
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/TvGetVersion.dll
unpack001/$PLUGINSDIR/nsJSON.dll
unpack001/$PLUGINSDIR/nsis7z.dll
unpack003/$PLUGINSDIR/FindProcDLL.dll
unpack003/$PLUGINSDIR/KillProcDLL.dll
unpack003/$PLUGINSDIR/System.dll
unpack003/$PLUGINSDIR/TvGetVersion.dll

resource
unpack002/TeamViewer.exe
unpack002/TeamViewer_Desktop.exe
unpack002/TeamViewer_Note.exe
unpack002/TeamViewer_Resource_ar.dll
unpack002/TeamViewer_Resource_bg.dll
unpack002/TeamViewer_Resource_cs.dll
unpack002/TeamViewer_Resource_da.dll
unpack002/TeamViewer_Resource_de.dll
unpack002/TeamViewer_Resource_el.dll
unpack002/TeamViewer_Resource_en.dll
unpack002/TeamViewer_Resource_es.dll
unpack002/TeamViewer_Resource_fi.dll
unpack002/TeamViewer_Resource_fr.dll
unpack002/TeamViewer_Resource_he.dll
unpack002/TeamViewer_Resource_hr.dll
unpack002/TeamViewer_Resource_hu.dll
unpack002/TeamViewer_Resource_id.dll
unpack002/TeamViewer_Resource_it.dll
unpack002/TeamViewer_Resource_ja.dll
unpack002/TeamViewer_Resource_ko.dll
unpack002/TeamViewer_Resource_lt.dll
unpack002/TeamViewer_Resource_nl.dll
unpack002/TeamViewer_Resource_no.dll
unpack002/TeamViewer_Resource_pl.dll
unpack002/TeamViewer_Resource_pt.dll
unpack002/TeamViewer_Resource_ro.dll
unpack002/TeamViewer_Resource_ru.dll
unpack002/TeamViewer_Resource_sk.dll
unpack002/TeamViewer_Resource_sr.dll
unpack002/TeamViewer_Resource_sv.dll
unpack002/TeamViewer_Resource_th.dll
unpack002/TeamViewer_Resource_tr.dll
unpack002/TeamViewer_Resource_uk.dll
unpack002/TeamViewer_Resource_vi.dll
unpack002/TeamViewer_Resource_zhCN.dll
unpack002/TeamViewer_Resource_zhTW.dll
unpack002/TeamViewer_Service.exe
unpack002/TeamViewer_StaticRes.dll
unpack002/tv_w32.dll
unpack002/tv_w32.exe
unpack002/tv_x64.dll
unpack002/tv_x64.exe
unpack002/uninstall.exe
unpack004/x64/TVMonitor.sy_
unpack005/x86/TVMonitor.sy_

TeamViewerQS.exe

IMPHASH 4ea4df5d94204fc550be1874e1b77ea7
SHA256 c1a31b150919153fa1534b4be0e72994fe7d9486d619339dfaa1e6edc6612e92
MD5 bdb5e43b1b90b3e17ff5a4b148a4c9cc
SHA1 1043b228d98cbb16ae845679f855408b8d94e339
SHA512 ab993c6497c63f4f120dba3d0a6f076cdacadba62b15812db5221798227860d09f64b39fa75b5ef35ed52187326de71cdb5a2006fc3c009a4d93fe2edd1c2ff4
SSDEEP 393216:LsqMHdryVtE+hVJD0NeGueza5VP/yzyipWqN4ehqYiResTI:gqMI2+vJfGDi/yz7sqN3azI
TLSH
T1461733E9D3F617A7E8315A36DB91523865327EC560E92DF116C4772C8E310CEA31BA2C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

bb:bb:30:e6:e6:4d:e5:2a:5b:36:c1:97:7e:e1:81:7e:c7:45:be:1e:2c:6b:49:5b:aa:33:69:f0:e9:fb:6f:ab

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

bb:eb:3c:da:17:0a:62:5f:de:e9:16:8c:c1:ca:4a:5a:32:e5:22:dc

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

02:87:14:d7:00:5c:69:cd:85:95:c1:cc:3d:dc:31:14

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 8, 2019 - Feb 13, 2020

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Serial Number

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 1, 2019 - Oct 17, 2030

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

0

Major OS version

4

Entry point

13238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount CreateFileW GetFileSize MoveFileW SetFileAttributesW GetModuleFileNameW CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode WaitForSingleObject GetCurrentProcess CompareFileTime GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GetDiskFreeSpaceW lstrlenW lstrcpynW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/CustomerTools.dll

IMPHASH 28f615e1ff16a29870c6362d5693bcbe
SHA256 a9f17262b3b4957e9efbf6ebe54400c7b7544e4fb40bf84753cd3bdb7053d035
MD5 45943916ee7dc57cc14433a2a8bf6dc5
SHA1 eb6bd53e304954051f02207a9db78d9e61cd97b7
SHA512 a036fe7943a12f7956367265c6732c485f0f0b9ee964cc4ecceace46239ca019d05e37b8adb497e1dce36c468d45940f3c29f3b6c8f22abb4aac92b1f13321f8
SSDEEP 24576:QIW/PvX0/qfjdiZ2dUktBe+63oEmV+oVQ/ngeKsS/D9:QLnvkCfa2dU6Be+63oRVJVSgeKscx
TLSH
T1FE055B307E19C136EAAB01F1AD3DAB6F416D6A550BF884C7A3C85B5E38745D22B37243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

30516

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\Source\Customize\Installer\plugins\CustomerData\Release_Unicode\CustomerTools.pdb

Name

.text

Size

659KB

Virtual Size

659KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

123KB

Virtual Size

122KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

15KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

25B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

32KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/InstallOptions.dll

IMPHASH 4b45b7e00344a87332fbd12653854d1a
SHA256 c91c1796338a265b49039c0b2c7a312d764b99e5174fb2dae455ca54f8f41ec7
MD5 033ee34c40e8fa85bf2739bcb2f3e186
SHA1 2ca942f35f77f37df3fc6097acac34f2e77341b7
SHA512 2204e0b8721b8d85c51bd068b1695b16ee096bfc1d1cd5843f48fd04032aeee2b6a91ce82978a4b3414f3d966ec5b36fb337a4149dae3a1d0445935d964d247f
SSDEEP 384:ErC43tPegZ3eBaRwCPOYY7nNYXCT/Yosa:EmTgZ3eBTCmrnNAh
TLSH
T1B1624D1137D558B3E2D62A797EE3B7138FA5F722A4438E0BC7332E06281A5956E7C311
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetCurrentDirectoryW GlobalUnlock GlobalLock GetModuleHandleW CloseHandle SetEndOfFile SetCurrentDirectoryW GetPrivateProfileStringW GetPrivateProfileIntW MultiByteToWideChar ReadFile GetFileSize CreateFileW lstrcmpiW lstrcatW lstrcpynW WritePrivateProfileStringW lstrlenW lstrcpyW GlobalFree GlobalAlloc WriteFile SetFilePointer

user32

LoadCursorW SetWindowRgn GetDlgCtrlID CloseClipboard DrawFocusRect OpenClipboard DrawTextW SetCursor LoadIconW LoadImageW SetWindowLongW CreateWindowExW MapDialogRect SetWindowPos GetWindowRect CreateDialogParamW GetClientRect ShowWindow GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageW TranslateMessage GetMessageW IsDialogMessageW CallWindowProcW PostMessageW MessageBoxW GetSysColor CharNextW wsprintfW GetWindowTextW SetWindowTextW SendMessageW GetWindowLongW EnableMenuItem PtInRect MapWindowPoints GetClipboardData

gdi32

SetTextColor DeleteObject CombineRgn CreateRectRgn GetDIBits SelectObject CreateCompatibleDC GetObjectW

shell32

SHGetDesktopFolder SHGetPathFromIDListW ShellExecuteW SHBrowseForFolderW

comdlg32

GetOpenFileNameW GetSaveFileNameW CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 982c5fb7ada7d8c9bc3e419d1c35da6f05bc5dd845940c179af3a33d00a36a8b
MD5 0ff2d70cfdc8095ea99ca2dabbec3cd7
SHA1 10c51496d37cecd0e8a503a5a9bb2329d9b38116
SHA512 cb5fc0b3194f469b833c2c9abf493fcec5251e8609881b7f5e095b9bd09ed468168e95dda0ba415a7d8d6b7f0dee735467c0ed8e52b223eb5359986891ba6e2e
SSDEEP 192:eK24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlASl:u8QIl975eXqlWBrz7YLOlA
TLSH
T12B325C02135481F3E4918138C86B3A276B6A15029BF98E57DFD39646BE30BE3BD7D603
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/TvGetVersion.dll

IMPHASH 8fe1425ee6d46ec8c7cfcf0fd32a8530
SHA256 c67cbd5e35e1ce0c7ba17c55d8e2bc33afd5e0a68774554a1fe7216d330c709e
MD5 05f51bc8ffb2c8f5a2825bf5680301cf
SHA1 30f7f77dce1fb3526142780e9f5bd5c11622d6b6
SHA512 1e041aaa37dd00414ad955ebc8c0f708589014d2085a5a0b95a31f4d694bb1cc4994bb1324d4b983cbad0449fb0a05560d82c60fdbfc78be67ff61275e451233
SSDEEP 3072:4J7KJkcma0VkpOG/374vnriZ1nmTaK405/+ncMCQ2bDh:6EkcmYOG/37MnGZoeKxpuuQ
TLSH
T1D7245B0177E4843AF2F726746DF6C6604EBDBC725934D18FE780892A2E70A85DB24727
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

67443

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

shlwapi

StrChrW StrRChrW

wtsapi32

WTSEnumerateProcessesW WTSFreeMemory

msi

ord205 ord45 ord16 ord70 ord141

psapi

GetProcessImageFileNameW

kernel32

lstrcpyA lstrcmpiA lstrcpynA lstrlenA lstrcpyW lstrcpynW Sleep GetVersionExW LocalFree FreeLibrary LoadLibraryW GetExitCodeProcess WaitForSingleObject CreateProcessW OpenProcess Process32NextW Process32FirstW CreateToolhelp32Snapshot TerminateProcess DeleteFileW GetWindowsDirectoryW GetTempPathW InterlockedDecrement WideCharToMultiByte CreateDirectoryW GetFileAttributesW MultiByteToWideChar RtlUnwind HeapFree RaiseException HeapReAlloc MoveFileW FindClose FileTimeToSystemTime FileTimeToLocalFileTime FindFirstFileExW EncodePointer DecodePointer GetCurrentThreadId GetCommandLineA IsProcessorFeaturePresent HeapAlloc TlsAlloc TlsGetValue TlsSetValue TlsFree CreateFileW SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess EnterCriticalSection LeaveCriticalSection lstrlenW GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW HeapCreate HeapDestroy GetFullPathNameW GetFileInformationByHandle PeekNamedPipe GetFileType GetFileSize HeapSize ExitProcess SetHandleCount GetStdHandle GetStartupInfoW DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime WriteFile GetModuleFileNameW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer GetStringTypeW GetUserDefaultLCID GetLocaleInfoW GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetEndOfFile GetProcessHeap InterlockedExchange GetTimeZoneInformation WriteConsoleW CompareStringW SetEnvironmentVariableA InterlockedCompareExchange InitializeCriticalSection GlobalAlloc ReadFile CloseHandle GlobalFree GetLastError lstrcatW InitializeCriticalSectionAndSpinCount GetDriveTypeW GetCurrentProcessId GetModuleHandleW GetProcAddress VerSetConditionMask VerifyVersionInfoW lstrcmpiW InterlockedIncrement GetCurrentDirectoryW

user32

SendMessageW PostMessageW GetSystemMetrics wsprintfW

gdi32

AddFontResourceExW RemoveFontResourceExW

winspool.drv

EnumPrintProcessorsW EnumPrinterDriversW

advapi32

RegSetValueExW RegCloseKey RegEnumKeyExW RegDeleteKeyW GetUserNameW LookupAccountNameW ConvertSidToStringSidW DeleteService ControlService RegOpenKeyExA RegQueryValueExA OpenProcessToken LookupPrivilegeValueW OpenServiceW CloseServiceHandle QueryServiceStatus RegQueryValueExW RegEnumValueW RegCreateKeyExW RegOpenKeyExW RegFlushKey ChangeServiceConfig2W RegDeleteValueW AdjustTokenPrivileges StartServiceW OpenSCManagerW

shell32

ShellExecuteExW SHFileOperationW

ole32

CoInitialize CoUninitialize CLSIDFromString CLSIDFromProgID CoCreateInstance OleRun

oleaut32

SysAllocString SysFreeString GetErrorInfo

$PLUGINSDIR/nsJSON.dll

IMPHASH 146872104f86c0bc478b21272e26f97d
SHA256 431fc2ed27d0b7a1ce80de07989595effcc3ffb1dea1af6c0e178b53f6bd2f1e
MD5 e89c7cd9336d61bb500ac3e581601878
SHA1 45b2563daa00ba1b747615c23c38ef04b95c5674
SHA512 09485a354ac4ace6084cb6fcbd92eee8488074763c8443638f78e655e45e8aa0fe40a45d4ce0dff116ed3a4bb7bc4d7d845a6ccf0e0bf35533ce81626a8db06f
SSDEEP 384:u1ju3wCtynlKEJAIl0CU4BNe0i5wsVEABy/7tpnYmdnDQVJlN/BmqIw4n:t3wCtynHJAIl0CU4K7yAB8tpVdDQJNI0
TLSH
T179821885657181F2F5B294F8B1613E132A7DFC121835E9EB0BF30B496864513BB2EB23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

10785

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsis7z.dll

IMPHASH 9c8bb65ecbb91da1f2ebb6ae7a714ed0
SHA256 66b2f36274ddfeef35b1d6ae6e5755f834446e5d78a719063347543793987161
MD5 87853c0f20f065793bdc707ece66190b
SHA1 738e11a9a565923ec75400a0cd4bce4db257b21d
SHA512 febfcd11795f4ef0ff3d25cbf1856be01e7f6423a9f16028c927988c04ab21de5f0b076d7f4ce9294aa7603c0db61ea5ffb888af2e9f7c6a6a11bcabfe9795a2
SSDEEP 3072:eBFxfbJUIW9WGExPYD5JFBJOYWjm8KCmRv1fPIVF2tbRp:6xzJSAGEdYD5JcYl78Fs
TLSH
T110049D2337E0C175E21F0732DE56EB9122BAB6504E62C8873F990F5C4F726989E2D716
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

96225

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle SetFileAttributesW RemoveDirectoryW MoveFileW CreateDirectoryW GetLastError DeleteFileW GetFullPathNameW GetCurrentThreadId GetCurrentProcessId SetLastError CreateFileW SetFileTime FindClose FindFirstFileW GetFileSize SetFilePointer ReadFile WriteFile SetEndOfFile GetCurrentProcess GetSystemInfo GetProcAddress GetStdHandle EnterCriticalSection LeaveCriticalSection WaitForMultipleObjects DeleteCriticalSection AreFileApisANSI VirtualFree VirtualAlloc GetVersionExW WaitForSingleObject SetEvent InitializeCriticalSection ResetEvent CreateEventW SetFileApisToOEM SetFileApisToANSI GlobalFree lstrcpyW lstrcpynW GlobalAlloc RaiseException VirtualQuery LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA WideCharToMultiByte MultiByteToWideChar GetTickCount HeapFree HeapAlloc HeapReAlloc ExitThread CreateThread GetCommandLineA GetVersionExA GetProcessHeap HeapDestroy HeapCreate GetModuleHandleA ExitProcess GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement SetHandleCount GetFileType GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep HeapSize RtlUnwind GetConsoleCP GetConsoleMode FlushFileBuffers FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime LoadLibraryA GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle CreateFileA WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoA

user32

CharUpperW GetDlgItem FindWindowExW SetWindowTextW wsprintfW SendMessageW

oleaut32

VariantCopy VariantClear SysAllocString

$PLUGINSDIR/wincheck.ini

SHA256 0375c254f677b4b3c43fd6cc892816d5b2342ac699579c1fdd70d50dfe3771f7
MD5 04f98c8509a7ff5ce42f2d56e1cd010e
SHA1 0ed6c8707f1fcd7079b12d4d8b94da36650a3812
SHA512 3c9cc57d4b6b52687c5991d2190da86815f1c4a07baec40c733c8f23c369d83022246b2d31eccefce8aea0a7c597b5395b26d6151f77e7596eef59ecef06b8f8
TLSH
T1C1C012884101439D907071510C5A7751B7D027210B0A19E8F16618A3935D8E048AC68A
MD5 SHA1 SHA512 TLSH

$_6_/tvqsfiles.7z

SHA256 4bf641774ef7431278c038682e22a0efcd1d5de1a41cf095e8f0ca6263aa66ed
MD5 1d2fb27a14e78c04196ecd8e358923f5
SHA1 d6e5c96e16fac1255d2e457fafda61e32fff3b01
SHA512 c698ef3a24c53e05a06b64750b127e9bc0fc61f4d7d45fd7d8e1eeea4d38ec856f8bc54265be67fb5f68c84b9eefeec3a970106044520c4244296889120195ff
SSDEEP 393216:x6w4wWRe2fANd0vSmWBXfy2NTewiBNOdU/nsQ2v62xHMqYGSr9XD:xT4H024sSJBPy2NywuOiOv62xsqspT
TLSH
T17E0733D3B0134E9ED953923FD0AB04044A25BC1AA2615D93832AA7CD766FF34E59B7C3
MD5 SHA1 SHA512 SSDEEP TLSH

TeamViewer.exe

IMPHASH f60ff857bdef6b3bdd9b43cced8fd874
SHA256 1ca5a30044714662d21622dd62fbb0dcefc81266d5d320408fa6258cfc4d8252
MD5 ca9695f942cb9f6be31315fe1825b972
SHA1 ee2c57a83a876f2ae735aedf64f04e4d373057a0
SHA512 f8aeda3f717b741cb1655daf395a4215480141d439afd1c68415ec04dda29d99088bfc708acb6b0a5676020a75ac1f05691abf1f61283a874f48176dc557fa48
SSDEEP 786432:h8tGzntV1/uI1BbOhBLHyyT+yN8/xiEMdme8o4Dh3ToM3tZhafTj0RUXk:2tGzntV12I1Bb6BLS4is8o4BoM3NUU
TLSH
T12A876D61B6CB8159D45601F24B7D6B9F823CEE19877404D7D2D8B67BB830CD22B32B26
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

7c:1c:54:cf:59:6a:fe:ff:44:ec:01:85:8f:fb:f4:d5:61:31:db:0e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

26155824

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\JA\workspace\rc_WinTV_pub15\build_cmake_win\QS\Release\TeamViewer.pdb

kernel32

LoadLibraryExA GetModuleHandleA GetModuleFileNameA GetSystemDirectoryA SetLastError EnterCriticalSection LeaveCriticalSection GetCurrentThreadId RaiseException DeleteCriticalSection GetLastError InitializeCriticalSectionEx WaitForMultipleObjects WaitForSingleObject PostQueuedCompletionStatus FormatMessageW SetEvent TerminateThread TlsAlloc CloseHandle QueueUserAPC DecodePointer LocalFree WideCharToMultiByte TlsFree FormatMessageA CreateEventA WaitForSingleObjectEx GetTickCount Sleep HeapFree HeapSize HeapReAlloc HeapAlloc HeapDestroy GetProcessHeap GetCurrentProcessId ResetEvent OpenEventA GetCurrentProcess DuplicateHandle CreateSemaphoreA ReleaseSemaphore InitializeCriticalSection GetSystemTimeAsFileTime TlsGetValue GetQueuedCompletionStatus SetWaitableTimer TlsSetValue SleepEx CreateEventW CreateIoCompletionPort InitializeCriticalSectionAndSpinCount VerifyVersionInfoW VerSetConditionMask CreateWaitableTimerW UnregisterWaitEx RegisterWaitForSingleObject UnregisterWait MulDiv GetProcAddress FreeLibrary GetPrivateProfileStringW WritePrivateProfileStringW GlobalAlloc GlobalFree GlobalSize GlobalLock GlobalUnlock GetCommandLineW ExpandEnvironmentStringsW SetErrorMode SetProcessShutdownParameters GetModuleFileNameW CreateMutexW ReleaseMutex GetExitCodeProcess MoveFileExW GetTempPathW CreateDirectoryW GetUserGeoID GetGeoInfoW GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW GetLogicalProcessorInformation GetSystemInfo GlobalMemoryStatusEx GetComputerNameW DeleteFileW MoveFileW FileTimeToSystemTime GetLocalTime SystemTimeToFileTime SetFilePointer GetFileInformationByHandle GetFileSize ReadFile CreateFileW CreateFileMappingW MapViewOfFile WriteFile UnmapViewOfFile LocalAlloc GetFileAttributesW GetCurrentDirectoryW MultiByteToWideChar LocalFileTimeToFileTime SetFileTime GetTempFileNameW SetSearchPathMode SetDllDirectoryW HeapSetInformation SetProcessDEPPolicy GetTickCount64 OpenProcess K32GetModuleBaseNameW CreateToolhelp32Snapshot Process32FirstW Process32NextW LoadLibraryW LoadLibraryExW FindFirstFileW FindNextFileW FindClose WaitNamedPipeW ResumeThread CreateProcessW TerminateProcess QueryFullProcessImageNameW K32GetModuleFileNameExW K32EnumProcesses GetProcessId ProcessIdToSessionId WTSGetActiveConsoleSessionId QueryPerformanceCounter QueryPerformanceFrequency SetThreadPriority IsWow64Process GetPrivateProfileIntW GetPrivateProfileSectionW GetSystemDirectoryW SetFilePointerEx OpenMutexW GetDynamicTimeZoneInformation GetTimeZoneInformation SystemTimeToTzSpecificLocalTime GetTimeFormatW GetDateFormatW TzSpecificLocalTimeToSystemTime GetNativeSystemInfo GetSystemPowerStatus GetModuleHandleW lstrcmpiW SizeofResource LoadResource FindResourceW OpenEventW LockResource FindResourceExW lstrlenW GlobalReAlloc CopyFileW K32EnumProcessModules GetSystemFirmwareTable GlobalHandle lstrcmpW CompareStringW CompareFileTime GetDriveTypeW GetFullPathNameW GetCurrentThread DeviceIoControl GetOverlappedResult CreateThread GetExitCodeThread GetPriorityClass SetPriorityClass TryEnterCriticalSection GetStdHandle IsDebuggerPresent OutputDebugStringA CreateSemaphoreW InitializeConditionVariable WakeConditionVariable SleepConditionVariableCS AreFileApisANSI HeapCreate GetDiskFreeSpaceW LockFile GetFullPathNameA SetEndOfFile UnlockFileEx GetVersionExW HeapValidate GetTempPathA GetDiskFreeSpaceA GetFileAttributesA GetFileAttributesExW OutputDebugStringW FlushViewOfFile CreateFileA LoadLibraryA GetVersionExA DeleteFileA HeapCompact UnlockFile CreateFileMappingA LockFileEx GetSystemTime FlushFileBuffers GetLogicalDriveStringsW GetVolumeInformationW SetFileAttributesW SetUnhandledExceptionFilter Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection ExpandEnvironmentStringsA GetFileSizeEx GetThreadTimes SetThreadExecutionState VirtualProtect VirtualQuery GetStringTypeW EncodePointer SwitchToThread GetCPInfo LCMapStringW InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent VirtualAlloc VirtualFree GetStringTypeExW LCMapStringA GetUserDefaultLCID GetStringTypeExA GetEnvironmentVariableW RemoveDirectoryW GetWindowsDirectoryW CreateDirectoryExW WaitForMultipleObjectsEx CreateWaitableTimerA UnhandledExceptionFilter GetStartupInfoW CreateTimerQueue SignalObjectAndWait GetThreadPriority CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask FreeLibraryAndExitThread InterlockedFlushSList QueryDepthSList RtlUnwind ExitThread GetModuleHandleExW ExitProcess GetFileType PeekNamedPipe GetConsoleMode ReadConsoleW GetConsoleCP IsValidLocale EnumSystemLocalesW SetStdHandle IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW FindFirstFileExW GetCommandLineA WriteConsoleW CreateJobObjectW SetInformationJobObject AssignProcessToJobObject CreatePipe GetSystemTimes GetProcessTimes OpenFileMappingA MapViewOfFileEx

Name

.text

Size

27.5MB

Virtual Size

27.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5.0MB

Virtual Size

5.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.1MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

298KB

Virtual Size

297KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=208, id=261, version=26213,

count=1, id=149, productName=VS2008 build 21022, version=21022,

count=4, id=199, version=41118,

count=35, id=259, version=26706,

count=40, id=260, version=26706,

count=46, id=259, version=26213,

count=146, id=261, version=26706,

count=3, id=257, version=26213,

count=134, id=205, version=50522,

count=2, id=263, version=26213,

count=1029, productName=Unmarked objects (old),

count=5, id=262, version=26213,

count=228, id=261, version=27031,

count=199, id=260, productName=VS2017 v15.9.7 build 27027, version=27027,

count=1, id=171, productName=VS2010 build 30319, version=30319,

count=388, id=260, version=27031,

count=59, id=260, version=26213,

count=32, id=261, productName=VS2017 v15.9.7 build 27027, version=27027,

count=969, id=1, productName=Unmarked objects,

count=4688, id=265, version=27031,

count=1, id=255, version=27031,

count=1, id=151,

count=1, id=258, version=27031,

TeamViewer_Desktop.exe

IMPHASH ddb69113980398fe34e1d49e32790037
SHA256 6169fe8fbec2e4807584d2282acd8012c490f9adf2120263bed3853a7fff120a
MD5 912ce9c56ecf2bc3b0134247c1cdc2dd
SHA1 0004b56d844b73df82a8dd1dde0b93fb3d185af7
SHA512 093e0cc71e141a3abea1c2ce512006d38c42343f6e511f497c82393eca4b62232abb43f6e2f6f48098c10d980d9cf556e583e9246d378ea1b281bbee043c8216
SSDEEP 196608:32t3zCtfZKIpCRXGWjtuRZW2P9CjxpI6E+f:32t3zCtgIpsXGWjIrnCVph5f
TLSH
T146A68F60F6D3C1A6D95604B1853EAF6F941DFE6A0B1080EB92D8BF1DA8307C31A71F56
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

4f:5f:5d:04:98:e2:a0:7d:6b:ec:68:88:47:b1:0f:c1:a7:ef:e0:57

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

7267536

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\JA\workspace\rc_WinTV_pub15\build_cmake_win\QS\Release\TeamViewer_Desktop.pdb

kernel32

CloseHandle WaitForSingleObjectEx CreateEventA GetCurrentProcessId SetEvent OpenEventA ResetEvent LeaveCriticalSection EnterCriticalSection InitializeCriticalSection DeleteCriticalSection LoadLibraryExA GetModuleHandleA GetModuleFileNameA GetSystemDirectoryA GetCommandLineW GetModuleFileNameW GetProcessShutdownParameters SetProcessShutdownParameters GetCurrentThreadId DecodePointer GetLastError InitializeCriticalSectionEx RaiseException GetProcessHeap HeapFree WideCharToMultiByte LocalFree FormatMessageW FormatMessageA HeapAlloc WaitForMultipleObjects WaitForSingleObject PostQueuedCompletionStatus TerminateThread TlsAlloc QueueUserAPC TlsFree SetLastError InitializeCriticalSectionAndSpinCount TlsSetValue TlsGetValue GetSystemTimeAsFileTime GetQueuedCompletionStatus SetWaitableTimer SleepEx CreateEventW CreateIoCompletionPort VerifyVersionInfoW VerSetConditionMask CreateWaitableTimerW GetTickCount QueryPerformanceCounter QueryPerformanceFrequency GetCurrentProcess Sleep CreateFileW DeviceIoControl ReleaseSemaphore DuplicateHandle CreateSemaphoreA GetTempPathW CreateDirectoryW GetUserGeoID GetGeoInfoW GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW GetLogicalProcessorInformation GetSystemInfo GlobalMemoryStatusEx GetComputerNameW DeleteFileW GetSystemDirectoryW SetUnhandledExceptionFilter FindFirstFileW FindNextFileW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime FindClose LoadLibraryW GetProcAddress FreeLibrary WriteFile HeapSize HeapReAlloc SetSearchPathMode SetDllDirectoryW HeapSetInformation SetProcessDEPPolicy GetTickCount64 GetFileAttributesW OpenProcess K32GetModuleBaseNameW CreateToolhelp32Snapshot Process32FirstW Process32NextW LoadLibraryExW UnregisterWaitEx WaitNamedPipeW ReadFile ResumeThread CreateProcessW TerminateProcess QueryFullProcessImageNameW K32GetModuleFileNameExW K32EnumProcesses ProcessIdToSessionId WTSGetActiveConsoleSessionId RegisterWaitForSingleObject SetThreadPriority GetSystemTimes GetProcessTimes IsWow64Process GetPrivateProfileStringW GetPrivateProfileIntW GetPrivateProfileSectionW WritePrivateProfileStringW MultiByteToWideChar SetFilePointerEx ReleaseMutex CreateMutexW OpenMutexW GetFileSize GetTimeZoneInformation GetLocalTime GetTimeFormatW GetDateFormatW GetModuleHandleW lstrcmpiW SizeofResource LoadResource FindResourceW SetThreadExecutionState SetFileAttributesW Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection GetCurrentThread LocalAlloc ExpandEnvironmentStringsA GetFileSizeEx CreateSemaphoreW InitializeConditionVariable WakeConditionVariable SleepConditionVariableCS TryEnterCriticalSection GetNativeSystemInfo GetThreadTimes OpenEventW VirtualProtect VirtualQuery IsDebuggerPresent OutputDebugStringW EncodePointer InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent VirtualAlloc VirtualFree GetStringTypeW SwitchToThread GetExitCodeThread GetCPInfo CompareStringW LCMapStringW LoadLibraryA LCMapStringA GetUserDefaultLCID GetStringTypeExA GetCurrentDirectoryW GetFileAttributesExW GetFileInformationByHandle GetFullPathNameW RemoveDirectoryW SetEndOfFile CopyFileW AreFileApisANSI WaitForMultipleObjectsEx CreateWaitableTimerA UnhandledExceptionFilter GetStartupInfoW CreateTimerQueue SignalObjectAndWait CreateThread GetThreadPriority CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask UnregisterWait FreeLibraryAndExitThread GetVersionExW InterlockedFlushSList QueryDepthSList RtlUnwind ExitThread GetModuleHandleExW GetDriveTypeW GetFileType PeekNamedPipe ExitProcess GetStdHandle GetConsoleMode ReadConsoleW GetConsoleCP IsValidLocale EnumSystemLocalesW FlushFileBuffers SetStdHandle IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW FindFirstFileExW GetCommandLineA WriteConsoleW UnmapViewOfFile CreateFileMappingA OpenFileMappingA MapViewOfFileEx

Name

.text

Size

7.6MB

Virtual Size

7.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.orpc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

164KB

Virtual Size

195KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

282KB

Virtual Size

281KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

311KB

Virtual Size

310KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=203, id=261, version=26213,

count=1, id=149, productName=VS2008 build 21022, version=21022,

count=4, id=199, version=41118,

count=29, id=259, version=26706,

count=39, id=260, version=26706,

count=29, id=259, version=26213,

count=141, id=261, version=26706,

count=33, id=260, version=26213,

count=3, id=262, version=26213,

count=3, id=257, version=26213,

count=124, id=205, version=50522,

count=27, id=261, productName=VS2017 v15.9.7 build 27027, version=27027,

count=57, id=261, version=27031,

count=971, productName=Unmarked objects (old),

count=295, id=260, version=27031,

count=590, id=1, productName=Unmarked objects,

count=50, id=260, productName=VS2017 v15.9.7 build 27027, version=27027,

count=823, id=265, version=27031,

count=1, id=255, version=27031,

count=1, id=151,

count=1, id=258, version=27031,

TeamViewer_Note.exe

IMPHASH 09a6199ec8b61819ce23b40ad27d4e31
SHA256 def9c475e6faf10d0f94958f627d514807debba5ac1f6c6a6ff42e2f61e8e2e5
MD5 57090ebee53deb5280b24b7ab0aa7cce
SHA1 ca5b5a1fcd5d3826de227df5945ae501e316501f
SHA512 f2d6b151e7d911276e999e7c49be92eff0722489e1d7fa51a10f85d9dc32727700850f7d000e0499f6f529f426932b47034262f62235bc64f48fb9e07609e299
SSDEEP 24576:qozKtITAo/7XihOkNmGWfRK+xCHHZZZTkDq7vJHay/3O:0QShLNpWoRHHZZZTkDq7vhaue
TLSH
T12C5539B17242D623D463007CED65D6F6106BFDB8CB6594EB62C87E2E39303C12A3596B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

2c:10:7b:5a:52:93:a3:17:f2:c6:ee:9a:8a:7b:72:95:62:f9:6c:30

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

346624

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\JA\workspace\rc_WinTV_pub15\Installer\Tools\LeaveNote\LeaveNote\BuildTarget\LeaveNoteRelease2017\TeamViewer_Note.pdb

kernel32

LoadLibraryExA GetModuleHandleA GetModuleFileNameA GetSystemDirectoryA GetModuleFileNameW SetLastError EnterCriticalSection LeaveCriticalSection GetCurrentThreadId RaiseException DeleteCriticalSection GetLastError InitializeCriticalSectionEx HeapDestroy HeapSize HeapReAlloc HeapFree HeapAlloc GetProcessHeap SizeofResource LockResource LoadResource FindResourceW FindResourceExW DecodePointer GetSystemInfo VirtualProtect VirtualQuery FreeLibrary GetModuleHandleW GetProcAddress CloseHandle ResetEvent OpenEventA GetCurrentProcessId SetEvent CreateEventA WaitForSingleObjectEx SetSearchPathMode SetDllDirectoryW HeapSetInformation SetProcessDEPPolicy GetCurrentProcess GetSystemDirectoryW LoadLibraryExW GetFileAttributesW CreateFileW WaitForMultipleObjects WaitForSingleObject FormatMessageW TerminateThread TlsAlloc QueueUserAPC LocalFree WideCharToMultiByte TlsFree FormatMessageA IsWow64Process VerSetConditionMask VerifyVersionInfoW GetTickCount CreateDirectoryW InitializeCriticalSection SetFilePointerEx WriteFile ReleaseMutex CreateMutexW OpenMutexW GetFileSize UnregisterWaitEx FindNextFileW FindClose Sleep TerminateProcess RegisterWaitForSingleObject GetLocalTime LoadLibraryW DuplicateHandle ReleaseSemaphore MultiByteToWideChar SetThreadPriority GetStringTypeW TryEnterCriticalSection EncodePointer InitializeCriticalSectionAndSpinCount CreateEventW SwitchToThread TlsGetValue TlsSetValue GetSystemTimeAsFileTime QueryPerformanceCounter QueryPerformanceFrequency LCMapStringW GetLocaleInfoW GetCPInfo InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent VirtualAlloc VirtualFree IsDebuggerPresent OutputDebugStringW GetLogicalProcessorInformation UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW SignalObjectAndWait CreateThread GetThreadPriority CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask UnregisterWait GetCurrentThread GetThreadTimes FreeLibraryAndExitThread GetVersionExW InterlockedFlushSList QueryDepthSList CreateTimerQueue RtlUnwind GetModuleHandleExW ExitProcess GetStdHandle GetFileType IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle FlushFileBuffers GetConsoleCP GetConsoleMode WriteConsoleW

Name

.text

Size

757KB

Virtual Size

756KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

245KB

Virtual Size

244KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

25KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

512B

Virtual Size

356B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

287KB

Virtual Size

286KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

43KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

TeamViewer_Resource_ar.dll

SHA256 bc406661cef10489a975e48f367f4cd78615eacb654d44b60691ad82a3f3385b
MD5 e3f61a30c9e45912593936eba5405a55
SHA1 7f894b62a01e4de8049b1c07733001f1bf26ce19
SHA512 b8935b26fd55a5d0a39890dd899a1d2fd49d442c365dd0283cd413217113948a5e99540cbd26cef01b27b4c0bc10e94c8410d95dc0d940a8d88d259b7d2f370a
SSDEEP 3072:yD6TW10xNWfPmxwDNJ+7lwc4l861EI1wh:fTee+O4l86oh
TLSH
T1A45499011E9CC23CF4A79738C523C65362AD65ABDDDD323F46788A281AE44709B4FAF5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

d2:64:ad:47:d0:dd:7a:55:b4:87:47:af:a9:36:df:a4:dc:99:90:de

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_bg.dll

SHA256 6e918e90f7b57909b089d147d075e2e5f2a5075ed51562179fe7c5ae47c1181a
MD5 f0860dbcdb4fe4a678ad16f7e0e9f852
SHA1 e56cc4b93fa538c6b85c6115366dab0ccbe03d95
SHA512 e7604e319eefe9ad8e34f05df67939f8341c5f3aa13b72d56df4da365139dc41d7ba2809642cef632597258e7c145387d52f8506f0eda2b672c478f0b7456e52
SSDEEP 3072:tLuT9b2EoXNBmqK1kDrJfi78y7Ff35oBols2GyequpArxRa6yGQ:tyWnMlQ
TLSH
T1F064310FB9BD9240FA59D3311F6686E721BA7B1073395ACA835F7D68602CA3533252C7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

66:5b:bb:d0:aa:f6:51:57:90:25:9c:f1:cd:dd:13:1f:60:fd:47:2a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_cs.dll

SHA256 f703ed5b4188adbcf6797c6b2abc0c5981ba6669bd5be43761ec99d429eb28e7
MD5 469950d045fd3e729e1253c236e66b7b
SHA1 4c93eb2ee232d97af71e53664a5ae14bbd90cf23
SHA512 75f3b7a9a40fe1844f380b14ea0a8ff1a34d3ac228e2204bfde75e2a25c06878f20e17cbb239f3cad00ace3f3414315c7d69fdd5624f3583cf66ee4298a34efd
SSDEEP 3072:Nnkkv5mEnHqba+Doq6NWP6ZL/jOrZaWg5iCCVkZwQ4GVAkvL39Qdesvywmne9mX2:tBVQYQfUcT
TLSH
T10564F20122FC0685F6F7AF76BDB406624E7B7CA2BA35C24F9550428D1D70AD0E8A5B73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

aa:08:06:08:da:f3:2d:50:44:a2:6d:4f:fe:b5:74:27:ad:c5:21:87

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_da.dll

SHA256 bbea8e3b287890722fece49d4e34116709ad6c107f5d5896df2d86ca22942654
MD5 7918b2dbd6b61f4cc3f708d5ce0dde22
SHA1 fb7d8b0ae3a2942d973a399b693fc5b107a5a515
SHA512 8c727d6215d17139fbb341023f870d9a824a073b2e88a4715e2feda5926941f2cf403ff353ab203f5b4212172e3dd6a1114424c7bda26f87445a9e644fd32499
SSDEEP 3072:lBJnCp6/PMfMWgZ7CX5OSyZ4Voa7ZRa9x3+/CDH/ybluQoc+PD1cGarepGDqXUgn:Dcgiun
TLSH
T1CE54985163E9520DF6F73B34BDB902945ABABCD6AE39D21D1210518C1CB2BE4D9B0B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

be:66:c2:80:20:e3:d1:89:c1:c4:7a:11:6e:c4:ab:77:83:a1:c4:42

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_de.dll

SHA256 50604bb7924c7859dea72596675f838200d0b8348ed5e61f8e26d905612c42af
MD5 3abf525309734618f1a49c530615728d
SHA1 fcfbcab486d8bcf5541d002bfa15b7c45e4468bf
SHA512 77d60dc1837690395d87bf89fd215ff5c896ad0e8eb223d60488542d03ca62ef6d5e08ac9a8172180bef082501f481b5b8bb0e6e809acb5ce1ccc054252708e5
SSDEEP 3072:8bPbjxz4ZeOluqv9Cu+ctU0QXQzEdvgpS141XLxuwMPKjJSPnAPdcvmoWQPnD7Yh:JGY4WtrgjTI
TLSH
T12E74DA1157E98A18F2F33F74AEB862946E72BCE6FD7AE54D1710509C1871B80DA60B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

55:fb:60:be:51:dd:79:fa:2b:20:67:02:68:38:cb:f5:ac:46:4f:53

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_el.dll

SHA256 3d2e2cc0c0fcc70105f25f42faabc4e059e4ed0b0a048b7d6749f1c38e8ecf71
MD5 7fa8a1df1408091532afcf9a86992386
SHA1 feab2263bd355e82990064764df2cf212edb0c58
SHA512 35023594179e026cd5e442cbd76612aae21718e90b01d1ab5ab3d722da96205dd40509aee0bffef0f3b12694b9803aae4c963828d80d7e4d5717a215c1f9403c
SSDEEP 3072:/m1y6P+Zk1JbK/V2ITKdMiHKYl4LINfvuF78+oc2kdd2wMhbXI0AKEgCUdcldowd:YTzVygPNlVBnWLh541eTxQc0u9
TLSH
T16D74388E0DFF2711DEEA99F2583381665AAFF9924428DD7E72F07048E91DC118DC2E16
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

da:07:28:67:a7:d3:d9:7b:74:9d:1f:30:be:1d:ac:e7:d2:6c:ef:23

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_en.dll

SHA256 20915cf1fe9a8f3ff43113a439bf581aed8dada27812bb42c5627f37c0d1fdd8
MD5 37df8e7ce8c56b8e715b5fe56837932c
SHA1 c2f16423606c001bc53e3348e12baec22bd40793
SHA512 eb588b0cca2fc19fe976fece9bae429d45dce546e0bf2681855cb71c12ad0b5d3dfed3973fed25f91ff64a9f95eeec59770a5f3c559bb821568dbf3bc76d1e39
SSDEEP 3072:7xFP6KS7zaMSzDv3p4sfemPB74sskj/KKDyxFv:T3NsIkv
TLSH
T16D54985163F94208F6F77F74AEB926644E7ABCA6AD38D29C0250405E59B1F90DCB0B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

cf:a5:d0:3d:af:7c:ee:2a:60:77:ab:4c:5e:94:d3:13:90:91:6f:d5

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_es.dll

SHA256 c0fd4e6384be5be4616665cf0cb870f6384093eb04404f20a0e7b2f3d0c44874
MD5 cda417ca88cd28fe7f1cda570ab90642
SHA1 64cf5ed7188983960e49faa7719df810ff16979a
SHA512 7cb49b4142cbae0c2a1788e886401ed3b77eeb52e03f775f987a3e659c1bab9606d64de6fd25fa65970651d0456fd2b136203e475dc58621d752fb97aa0fc77d
SSDEEP 6144:H2Ga1hUd1ZMnnC0Tjy1fS6qOywjK7RZAKhhJwMY:iY
TLSH
T15F74425067FD6246F6F37F39A97916658E3ABD92EC38C14C4220525E0DB0E84DEA4B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

0f:03:3b:f8:fd:18:80:49:40:2e:82:19:d6:93:a9:ea:32:d3:9d:6d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_fi.dll

SHA256 79364e91c125135927e71d6f78da26efdc9752c6f184c183705295eb1de5a3ae
MD5 f48deaab7a42d475057d48daa1684949
SHA1 003f243a086a671aca671ebc358f17affee9c559
SHA512 32b4e4c5c1a6e43b34fa4febcba6c45bbf67f799b3aa8a69596c0ac45de4d99d96f1a980600a50c5ae2afc318854072eda024399a845bde6030a741014ab2dfa
SSDEEP 6144:9f27lx625xnXnVWeZMj5DyJTCJOkW1GKuOUi:dBi
TLSH
T1EC64884256FD9234F6F3AF30BEB852100AB77E93ADF9E65D0A04455D9835680E8B0B37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

ae:a2:b9:ae:39:32:c6:17:81:c9:a8:1a:b3:4f:38:81:91:64:3c:7a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_fr.dll

SHA256 b2eb28643e25a7e37757c51178971cf935c836a2b077b003cbfb92914dac13e6
MD5 a10b9ca65f65783963b7d0769497fa89
SHA1 96a49875c8d81058a0aacb4e36e060075103722d
SHA512 21b0f6a2379d73d5d007c35bb66ad4deeeeb192d175e267a0cd5e79f655985a26fa7cb36b3af118ad72c3b7f5c9eb61d018a377b74577a541805e6606924d081
SSDEEP 3072:uy431fPdezvBElGQ07CRWld6xryK4AL0Cg2nzwnX1z:/2vkd6xrZrzwnFz
TLSH
T180745E61A3F96605F6F37F31A9B921154E3B7C9A9D38C15D0650909E2CB2E94CCB8B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

44:d3:41:f2:70:49:08:0c:90:7a:82:6c:a6:ad:73:bf:23:2f:e2:9d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_he.dll

SHA256 15125ed3e040d0203d4962fba5c08d5178bfd39dee9c7b27331c904e38b0aab8
MD5 edd0b813cb2389ddfd2c574303a2e868
SHA1 b9eb8a00f14813b09f791dcf6a6675671d9ec5d0
SHA512 d5218304766388992f8a928bbc042422c91e807bd7426709e2d05b086d36309ac020c95f1e004e335ca57fa8e1647d7646ae54cdbb2e0b29ba082f76064c1354
SSDEEP 3072:k4fi08T8MLjQOu1n11KPcRCgMB72VwizHkcNTbzCHcX3+UzsFd4wiHqVt:Vv84MLjQOu1nyPdizZZzskqt
TLSH
T1443447801B90D2F8F9A5EF33A63F292E8691EB00827C775B505C55642E6DB81CB5DB3C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

89:60:31:d3:fb:89:00:90:82:44:8b:92:e0:15:95:46:3d:27:61:1d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_hr.dll

SHA256 9b384c585d6e9376cab37d30f4169edce3ef4fc68662f4ca25c1e6e3cdf0607f
MD5 8eff7322bf7220306ccca2d207b1111a
SHA1 7bc73b38235597ef99448d59c524f052f708fadc
SHA512 0d9b300e88c5cd92f7e4f115b0cca7720b95e07ce87763708c8b80277e14b16336811c43573d6e5affdcdc9ea393219f42fc7fe33931492774833a394c560f5f
SSDEEP 3072:xFWA/yA5s4V5aLsrr4X3MhrY/rLND/i7dKY+peTnQbSUXLShP:g34zrkGP
TLSH
T10E64AB42A3FD2249FAF77F74A9B813644A7B7DB6BA39C25E1140028D1D71AC0D9A1733
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

2a:ce:4a:6e:d7:e4:5a:d7:c4:e5:60:c4:f6:5a:09:98:d4:9e:21:b4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_hu.dll

SHA256 d75150d48b065dd16b8ba4b84a3a27369f0554db7d3fc8712ae521f94991b106
MD5 0a0bafafb108bb245417c80c8e7f2e4c
SHA1 76d8ba736e89242f23584a2102da0d084b84ed71
SHA512 2fcb564d8b7120b435bc10ad1f9e4985f7fa25f1837237a7b2b10612c5695cb2a0ae6be211c12cbad3ba106e917451c8de9ae8d290bfb000bc5aa2e7047fadf3
SSDEEP 3072:hfa4Yktp3whg5RKvmwUpifKD82x6vetl2xPyANmMo9ZkR5IBHpiTBLRKlAf2lVUs:17yTgjyXz6dAsFsab9N
TLSH
T1B064EE0562FC524AF5F78F767DB052950A7ABDA1AE3DE25E8640528C1DB1AC0CDB0B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

73:07:c3:a3:17:90:bf:4a:d1:23:c6:a8:08:f3:0d:38:80:94:ef:fb

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_id.dll

SHA256 57463dc86c233a2eb59d944fa96e57921ee4b6f340506c7d380eb88000c9570b
MD5 5324b2e8265ec4d978254ad7793e1212
SHA1 e68989f07d14a3bdbecce127fc52de5e237d8249
SHA512 92fcb0f03af4e737bcc29dc028620d73e70eb33ef6b7c5bfc7ab4f64c9809c2a88e0f9dbaa18a1653d712df44a371bb7c50621ecb23f591f846db3a046f95b8e
SSDEEP 3072:KwGAkmseMax6lFm7VKqQXWhV/y7qOUZZVLPpnFj32a9:NX7SXWVIUZua9
TLSH
T11764889163EC9608FAFB5F70AAF826940A6BFE96BD39D24C1314556C1C74BC1CD60B32
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

a8:15:e8:01:2e:b7:b4:d8:3b:92:7e:38:d4:6d:d7:2a:3c:16:19:72

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_it.dll

SHA256 45e3833130a103926db4cbcc812abe9ce692a1d1af544d21643144170b389e58
MD5 ffc0340b1c24b7958c39ce14d37d06ee
SHA1 aa66eeb273f0d9d9ecd6bf2e968200c0b71c4065
SHA512 9fc07267b9c068db9e8df2f7173be19219470f52c08b9d41522d22f6ece37f2e46b4df5d79f30851549b7aea7a0d82f86d0a21915ad7f97cec746bbbfba78ae9
SSDEEP 3072:X3nXrc2JDJfs14AxNzR72O+1b3re96hi05ILKmmiEiO:XnFiXx5EdKyi00O
TLSH
T126746211A7FD5208F6F3BF74A93966288E7BBEA6AC38D15D0250409D1871E94DDB0B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

3a:ab:ba:b0:a3:12:b9:b5:7f:a6:11:72:90:b0:83:0b:85:ed:51:46

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_ja.dll

SHA256 b181db482af8867d581e95357c327fda370fabd3d8c2a9768ed2cc029d60c640
MD5 229fc5f7a385e133b78038b462dace8d
SHA1 d0330746dc01a3bce56a04abf658cdfd12abc9f8
SHA512 b5294594840a02523d2e9ee429903be73d7d79d410fe67b93f9b503e47380a0e83266d83af46e217d4bc89ffe5cf3e1e3d2b854b37123e9af0cb46d05c5565cc
SSDEEP 3072:GqRy2FH/SV5WCE9Jq8OsSVCQGADMbJ5yZAxw3NAmOxAnlQCzXF3hIBI8LdlxCf:zQsjmfqB/l4f
TLSH
T1FC04A48C36E90A4EF4F3867598B275B826B9F920C6E28CDD0284C40F1550EDD6796B7F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

71:71:de:2b:f9:b7:30:a5:5a:f1:7a:80:e4:8d:d3:13:9d:da:44:72

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_ko.dll

SHA256 6627bec2728d817e8d2fbafa7f5feb8d3a0b92455ff28f2acab12f8a871bb02d
MD5 901308805fb66e969778c96b23bd3638
SHA1 54f0c9ab173d6074b04c4ce28f94cf4b231a8f05
SHA512 7a7572e23c5eb6cd8e83838f8c8472f7bf6dbc9591133ead541f5c31e7010321a448e6d5b5331593e02fefed6868addf7962cb3aa29bad36b2ae1f33820ac9c8
SSDEEP 3072:JMYlbBuspD+O9bandp3s4viOTnNooDNBZA0hAlTH5XS4oSF9FjAzdf4Am:V3DgdQm4r
TLSH
T17704C712A1F9D140F4F3A779AAF353A3466B3980EA27498ED310514C75B0BD4EEA1BCD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

f6:93:5a:6e:97:06:40:4b:74:2c:fd:b4:17:63:86:5e:b3:af:05:e3

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_lt.dll

SHA256 4e6a4dcc647f65cf692acd919337854064baee845bbf07a4d7fe3e0f0d71b843
MD5 adaa5b8e1722e36b1aa4d6318247d59d
SHA1 9048c18985bf4f51952375dacd3b5a5e75d1b792
SHA512 8e5b581d676e423fc4023a2f687a55e187e67b6b5cd077c9e76b5c935183411c027d3eb80726f2b1cd8ce7ea721a1b4f06b685f88f87e00c8713a428d5c496f4
SSDEEP 3072:eHXJjvTSaoXQpy6L8tpF6GJDZ9zfUAZbyAevSZEmg/DhRXBwQcQDVw8xldEmscw4:5u7pVX
TLSH
T1C664CA15A3FC1189F3F35F34A9F456160B7BBDA6AE38D15F2510814EA874AD1CAB0B23
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

b7:24:24:c7:91:14:84:6b:49:1a:2b:c3:e0:2b:a6:fa:88:cc:af:29

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_nl.dll

SHA256 2446eb6b86a7718461383d6870985d38305aa21dd5a928976e89aafd8abc526d
MD5 b654058415b8f956b4a1e0c2646aea2e
SHA1 837fc0ba8824803082ed5d7ad62823c3651ece5e
SHA512 ba9069b7ef6b591c6da5b7e900e021e39b2fa20fd6725d52a60852fb6370d5774e3007dbd964cc263024453774c2e218a5dd16b9fd62fc44e5e7b4d1539afec3
SSDEEP 3072:4hB/kbVd5TQ8h1zgWUNer6e7teN/QUvrFigVhqUx9IfbpQaDWaao79AaKUJvZ5mF:RPvNRxDi2eQO
TLSH
T18364A95223F9920CF9F72F756DB922508EBABCE6BD75D28D0250219C5C71B809DA4B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

84:a6:4f:fa:d6:de:45:7c:5f:4b:b8:32:e1:90:30:79:b3:1b:3b:32

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_no.dll

SHA256 d24a111ead0cddac73bc726031b79cc98f83ee4429bcafe18129ad1b132eb4d1
MD5 06f895f4bc874e626f27c8e79aa942cc
SHA1 4c198e2bd04b02c18cf151be6f6b4d7f47f230df
SHA512 3facdda2200bf0e7727c65fe3ad1da1f674c17874e296e69fb728ade9af1aa663d4d5cb5366d41a50317f43416d8272ee242be2612be4b65b0d30b058cdf62ae
SSDEEP 3072:g0wbClMPvO6X/b1MGrrNPo1v0cvT/EfhzxA5Eqf6VwZ3NU/J2rw19+l+LEn0Lgk2:xdx8G
TLSH
T1DC54B85163E95209F2F76F30BDB812944AAABCE6FE38D21D1250519C4D72BE4D9B0B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

f6:60:cd:b7:c3:5d:06:75:e6:2f:df:5a:ea:4a:ee:ce:bf:8c:d1:2d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_pl.dll

SHA256 fd6d558f98e866f04e3877ae49fc6f1052b27e67f7a525d38bed29eeba6be54a
MD5 392ec82899008126fe1c06538da054de
SHA1 62673807eb8a01dc34cea4aa17f9e049b3415875
SHA512 2f3fb7b1d12c83f41a5f342834137707a091e8c08fdb91104e0726e773c642b93d0aa716a78edf0d036e3214339903fe4c865b4bec256a6b4225716f15ed363c
SSDEEP 3072:/5xirV+u5Oi4aJrxKROm8Fd5Go4AB0v8X/w7LigDI7m:dA+86tsm
TLSH
T1A064040163F80255F6F76F74A9B976988F7BBD22BA39C2DF2500514D1A70AD0D9A0B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

c6:4b:c2:3c:b7:bf:b3:2e:b8:d1:87:8c:9a:42:9b:a1:99:4d:a8:76

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_pt.dll

SHA256 df53a561d84984d4683a71e78a57305409f05b07a57dd099f0ce72f359536707
MD5 1162dab0b2764405b62dd6d368233cea
SHA1 22738d17cf7c314c54de48951a198763edd192d2
SHA512 5ba2cd9eb5a3710a0f79ef865e441976019afb70bbab46a498f8dd59958fae17edbc40c0865e7d60aa1e0d2eb9abbbf92dc58b8987631bb75984ad67b6030d33
SSDEEP 1536:5mDs1DYiI5VDEzkdgXad7YFkDtc97a+kzfaoIjKCBpQfLKXDIokvc5/EPjgNSCXe:5K6YfMBkG3jKBqIZNck/Bp
TLSH
T12E64325267FD1244FAF76F36A97826258E3BBD92AC39C14D0220515A1DB1F80DDB8B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

13:f7:ac:95:a9:9d:44:12:3a:65:84:7e:40:f7:44:1e:55:4b:30:1d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_ro.dll

SHA256 7644eea4ac2cc025ec4f542657a32727a22dad36105b10953089155bf3db5852
MD5 19accda4cf21e795ee29963047f55733
SHA1 d14c4b9d77974038d6dc8adabd53696035b5f7ba
SHA512 0364b573bacdecdf6591c39bdf99710d78423df74e271018637363b92113cd4da369a3df3077eddaff1f92555aad457503d845d17f237ac060d11d2498b194f9
SSDEEP 6144:vZ2BA/JXWW1apEOmZo+9I8VtcSOpTCCNLi3gXpjtxHXrQalwwz0clNdqsZEQT21L:+B8RV
TLSH
T1D974785167E91216F3F3BF38693826140E7B7EA7AA39D54F1A10428E1DB1EC49D60B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

c0:66:91:2c:2f:81:b0:aa:5a:d2:ee:8a:9e:06:b5:1b:66:12:82:d0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_ru.dll

SHA256 9e30c53b1112adefe6d8c656f4e47fd24d336e2fb4da61da4888c5540b378414
MD5 e76665fd1bd5b5a1c196aa59622caa33
SHA1 b131ed3033eaeed4dd7ec19b3e32fec04c96da59
SHA512 7a68376c800c3e1ca2efa120c4a53d59eada2f0a182dc57067ca147c3aa8e1379a8c3024a3d95fae45fff7c5b757f3360478b518552aaff2eeafbd900f151b9e
SSDEEP 1536:e87UB7m7OJplZy6FlZ9ixpJWwcd61T5jhegj2dg0rIzo0ls2HO2qkB2kieI:BUN39qJWN61T5jcgj2dg8IzflAkB2ki
TLSH
T15D64780FFABC9590F9A9D3700F3289D710AABB50632995CA968F7D78606C63533253C7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

f0:99:cb:0c:13:f4:17:9d:5e:d1:49:04:38:0e:bb:13:d2:d2:60:3b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_sk.dll

SHA256 4c5778b865284b627d6c073110cf0982fa341805d754fcbc8c8a49a885fa86aa
MD5 7209ca45050aa3e19ad6d18f0f1f7933
SHA1 3e9d172158c9df8ca67309c9b08390a5fbef8daa
SHA512 9d2f507049e2ce75f4dde202c6d065d34786eaf3e1492b31e31777f18c60950e810fe1c995d9b30d69580f75b4caf3d216ba4fd1f7ed58d43505cb10cc1b6863
SSDEEP 3072:pQ+Chbqdjg2VTFKzcfOkbdzz068tW3R5r3S4Wu/4NYnc6OHqb4LYwEvSPqHL2S6T:r8JPf8W
TLSH
T1A764F11163FD0685F6FBBF75B9B401654E7B7CA6BE39C14E6640828D0C71AC0A8A4B73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

b2:c8:52:a6:60:76:11:f5:6e:e6:a1:6a:6b:87:5d:75:33:c5:70:69

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_sr.dll

SHA256 1400904410e0b6dde266a25b44abcfb968f075d87456516ca68c15f2263be01f
MD5 e1f83e06add4b591e068a102304f81f0
SHA1 ac87a0e6556f02648ad6fcbde80975e3c529a2e3
SHA512 2e9d46b51c27e504750c60d0b4ecafa21b3b35c6820eee5c689ec3281cdb046f1f9d6cc587d6e18300c02498c9220cecbdad9940d366c1a88bf9b841d8cb3d9c
SSDEEP 3072:Ql8NvAsJitumpgKMvSzxsJROuJuhM/k8H3p9TTRnfbWGFNyDbbkX2Im7QH5l9e5W:QgY0JnDnq8NukXMBI
TLSH
T15364CD42A3FC2249F6F77F75AAB812650E7B7DB6FA39C15E1150028D0D71AC099A1B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

bb:61:1c:46:0e:3a:2d:06:72:aa:f7:b5:12:f3:d8:f5:ae:95:7a:a8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_sv.dll

SHA256 f99a3c6c846363d8b507fa2afa2b2a47a4dde992ca845b655dfb96956f164308
MD5 53e34c7dee64c69f55d8a5227d81698c
SHA1 02f612e2f30775da4763ea7219ca17b0d6336478
SHA512 fb5735c3e85552636a2adcc7e8489f58849a161215336f04c9bcf9cc2cb9b5e9712448a5ab33dc191163a1e2f7482e4e152e055547194df661908ab3d9ce8a9c
SSDEEP 3072:SxmL65/DBIqkRbfy1E4GG47Ih85wNycatD0hW7abm2s51irw+I+tvNtVL32E0kZJ:b6UIG6wFcLRJ
TLSH
T1FC54FD4163ED5618FAF39F74BDB912500AAABCE6ADBAD25D0B10019C0C71BD4D9B0B37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

77:7d:e2:d4:cc:ae:27:d3:9f:61:90:1d:70:ad:7d:81:d6:26:59:78

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_th.dll

SHA256 d7b17f735a8bd5c510a905efed9006b6cfcdd4e85c720fb22e665c44d427d092
MD5 e4bf36693fe816ff36d8584078c616fc
SHA1 e4bc1bd8de84d2ed3a665bcb52fdd0524100fd89
SHA512 e894552efb26b7be0550d65c68decc1a5e1b5b620a2d8c85b1a2f5ecf6a32d69a26a3f3e4dffec150a8104979b7b74c05328f7baabdae66c6d79ea2a84205e2b
SSDEEP 3072:wVZhlMlLYiCnOGZPyNLB5O63aqOqVXxkppyokBeME2:wCQyoH2
TLSH
T13E549834A6F72302D597D1F0E6F11E727C28B902D45FC199C02BCA296560ABAA7F4D3D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

de:a3:22:7d:9c:f3:d6:b4:47:5e:4a:d4:ce:87:e5:ac:51:5c:27:f6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_tr.dll

SHA256 467c310527e25e5d7d32bfd04c29b63c8cba265696b319ac9a9cf027c595e18c
MD5 8f89ce32210b200956fe5cfe3bec6f92
SHA1 17c54e06932484eb9b7315c81a773692b9e055d4
SHA512 69f445f102f7dc00f9b770381c1523c1d3648be90a769fb77ea03b6296dc14f3eb5502a8df9daeab2d22efb8598620cb190b95a4023c4b0e69ddd2332fc8580b
SSDEEP 3072:3Jp1l6RrQrxO9VEQwppqy2r1Zvsnb+tJio+otOQpaHNQu+2QuyvxvQXLi4Cf9EPV:3Ivsnoi+lm2upV
TLSH
T183641D0143ED5A0AFAF32F357DB462910BA77DB6BE39C24F2621215D0C716E099A4B73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

75:6f:25:59:7a:9e:37:46:68:6d:14:08:14:36:62:6a:d1:da:04:eb

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_uk.dll

SHA256 3ddf9d552d37a2219bf09c7b1cd4031f94b7e742b988cb3e4bea69cc54544a60
MD5 ed969cd10b76d63810ec99afb421d0ba
SHA1 ecc06963c9f9a984efb2d99c8292ce2c1dd2bf24
SHA512 21c5d3649b5da26aaadebaaf2bada3b91e6327ec474742c6d1c483d3bb08884f13e9bb3a8459f874669e0676b985ef2cc0495f1b5a340652793b26f8d25bbc67
SSDEEP 3072:6WL0C9SazS5iYUMzTgDJMODXUL7ft/7UiyL2mf/FPg/2xCLlrNxS:6kNRHwcJ7Z9CS
TLSH
T14B64880FBEBC9654EA99D2B14F628AD701A9F75023A8C2CDA24F7D24206D77573217C3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

fe:48:9e:7b:12:58:c0:ba:48:f4:81:01:72:a6:ba:00:4c:0f:53:33

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_vi.dll

SHA256 152968714f117c332200e02002608399ce3de33a76c8f5fc7ea5d782de28fa79
MD5 adb7e759f952cb75b517024329662996
SHA1 f1112ff214df6010219a9b16dd9fa84ed4414c0a
SHA512 c221ea52fb5aa6c1d707c14fa547d82832b17cbe654563bccc6e640af50b5eaf6e8d14f6850c385d0601f7657ce74eb9448a55772ee84c90eb4e3d23262a7fb9
SSDEEP 3072:tSDh35X1qWPRSRpQF9PS5s2nVFVA+7KeevilmV:tuJFqWgpQFw5s2nVoWBsV
TLSH
T18574673243AE9200FEF713B2567DE7A0EE75FDD26C38E74712214609097A5822DA47E7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

d1:e3:fc:a8:00:ad:d6:26:65:3c:24:dd:53:8a:e0:45:19:f0:ef:42

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_zhCN.dll

SHA256 2d48feb6b152c9bbe5a448ccbcbe55a5e01d2d2450864ce7a5821cfdb3a1ec82
MD5 155ac218010cbd5de05ee1b91be272f7
SHA1 31145d9b0c8d403a84afef8e9aca60995e27465d
SHA512 bac230078d1a7ef5b10b1f320c0219a839316944fefa1d5f31d0fdaf8abf7c09d40d20125dedd89ce3b45c2756ebdb37f458cbe74a829199593e29472a928bb3
SSDEEP 3072:bL53m4c4pWH/DQqD4GSkDrVFv7jtHb4QsgDEZrUI:hUcWH/DQKDxFR4lSI
TLSH
T1BBD30908A7EF4A84FAF38F74ED76305157B67755DA25CBCE0020C05C2A64AD16DA2B3E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

55:7b:f7:29:1c:70:ab:08:43:e2:80:c4:88:4c:e8:be:bd:bf:29:07

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Resource_zhTW.dll

SHA256 17ec0ed7aca17c36582e39bd8daca1b002fc88bad6a318db49fa58d167c73e3b
MD5 75e05f6c87b83126f6a8ed816792d1ac
SHA1 6c7a2127f8652fbdc01e2c00bf1e738de649ed31
SHA512 b316e605a6ae26223fcd5a53eb10b47db859e25022f45eb6ef82eb5367d11232c9c79bc671270ab36b59938852d8147037afd2e8851a05e0c3d34272cb78ad5a
SSDEEP 3072:rAu6IrJpAPiCCEZNiRK+1/5Mr37gVkQYfNuQe:44CjNR+1/5MrcVT6uQe
TLSH
T196D3080127EE0604F9F35FB8AE7634611BB6BA20E7748BDE1115C64D6E60BC16CA2737
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

a0:c3:d0:61:c0:fd:5d:86:c8:ae:0c:fd:70:72:d8:1f:8f:58:bc:33

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TeamViewer_Service.exe

IMPHASH 44e8dca2b36e474b245e01cc41ee48ab
SHA256 864511711210b994dde49f788ca705f8e8302c67d4752690b84fb006bbe51cf6
MD5 28fe453721caa0ad746192c2685a4c2e
SHA1 ffd3fc421b59612cc857ab95704760e4fa9dbc23
SHA512 9fa0033f7b349e66fa944fb837361d5d4dd855cad621c160c72e7741a8d44d200da460ddceb533029ab3b479b6ddb60fa1281925953f2cc9a1bdb7ebd84c6bf6
SSDEEP 98304:E5WJoqFA9bY517uztBfukLjVTTuMY1C+SAJLoxj/7l3ivyxSXvc9RF:/oz9bwtSn2GZ3u5C+SAJEO+RF
TLSH
T188A68D20B7C6852AD52604F1562DDF3B821DFF650B2100D752D8FA6FE9306D3AA32F66
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

bf:42:8e:37:35:9b:ed:47:c4:dc:49:fa:48:1a:ca:ae:e9:ce:b7:10

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

6328240

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\JA\workspace\rc_WinTV_pub15\build_cmake_win\QS\Release\TeamViewer_Service.pdb

kernel32

Sleep GetCurrentThreadId GetModuleFileNameW CloseHandle LoadLibraryExA GetModuleHandleA GetModuleFileNameA GetSystemDirectoryA GetLastError lstrcmpiW DeleteCriticalSection RaiseException DecodePointer LeaveCriticalSection EnterCriticalSection GetModuleHandleW FreeLibrary GetProcAddress MultiByteToWideChar SizeofResource LoadResource FindResourceW LoadLibraryExW InitializeCriticalSectionEx WaitForMultipleObjects WaitForSingleObject PostQueuedCompletionStatus FormatMessageW SetEvent TerminateThread TlsAlloc QueueUserAPC LocalFree WideCharToMultiByte TlsFree FormatMessageA CreateEventA SetLastError GetCurrentProcess MoveFileExW CreateDirectoryW CreateEventW GetUserGeoID GetGeoInfoW GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW GetLogicalProcessorInformation GetSystemInfo GlobalMemoryStatusEx GetComputerNameW DeleteFileW GetSystemTimeAsFileTime WaitForSingleObjectEx ResetEvent OpenEventA GetCurrentProcessId GetSystemDirectoryW SetUnhandledExceptionFilter FindFirstFileW FindNextFileW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime FindClose LoadLibraryW CreateFileW WriteFile HeapFree HeapSize HeapReAlloc HeapAlloc GetProcessHeap TlsGetValue GetQueuedCompletionStatus SetWaitableTimer TlsSetValue SleepEx CreateIoCompletionPort InitializeCriticalSectionAndSpinCount VerifyVersionInfoW VerSetConditionMask CreateWaitableTimerW InitializeCriticalSection DuplicateHandle CreateSemaphoreA ReleaseSemaphore OpenEventW GetTickCount GetProcessId ProcessIdToSessionId GetNativeSystemInfo GetSystemPowerStatus GetCurrentThread DeviceIoControl SetThreadPriority ReadFile GetOverlappedResult QueryPerformanceCounter QueryPerformanceFrequency K32EnumProcessModules K32GetModuleFileNameExW GetSystemFirmwareTable GetFileAttributesW SetFileAttributesW Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection ExpandEnvironmentStringsA GetFileSizeEx OpenProcess K32GetModuleBaseNameW CreateToolhelp32Snapshot Process32FirstW Process32NextW SetSearchPathMode SetDllDirectoryW HeapSetInformation SetProcessDEPPolicy GetTickCount64 UnregisterWaitEx WaitNamedPipeW ResumeThread CreateProcessW TerminateProcess QueryFullProcessImageNameW K32EnumProcesses WTSGetActiveConsoleSessionId RegisterWaitForSingleObject GetPrivateProfileStringW GetPrivateProfileIntW GetPrivateProfileSectionW WritePrivateProfileStringW IsWow64Process SwitchToThread GetDynamicTimeZoneInformation GetTimeZoneInformation GetLocalTime GetTimeFormatW GetDateFormatW GetVolumeInformationW SetFilePointerEx ReleaseMutex CreateMutexW OpenMutexW GetFileSize UnmapViewOfFile CreateFileMappingA OpenFileMappingA MapViewOfFileEx GetThreadTimes SetFilePointer VirtualProtect VirtualQuery IsDebuggerPresent OutputDebugStringW GetStringTypeW TryEnterCriticalSection EncodePointer GetExitCodeThread CompareStringW LCMapStringW GetCPInfo LoadLibraryA LCMapStringA GetUserDefaultLCID GetStringTypeExA GetCurrentDirectoryW GetFileAttributesExW GetFileInformationByHandle GetFullPathNameW RemoveDirectoryW SetEndOfFile CopyFileW AreFileApisANSI WaitForMultipleObjectsEx CreateWaitableTimerA UnhandledExceptionFilter IsProcessorFeaturePresent InitializeSListHead GetStartupInfoW CreateTimerQueue SignalObjectAndWait CreateThread GetThreadPriority CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask UnregisterWait FreeLibraryAndExitThread GetVersionExW VirtualAlloc VirtualFree InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList RtlUnwind ExitThread GetModuleHandleExW GetDriveTypeW GetFileType PeekNamedPipe ExitProcess GetStdHandle GetCommandLineA GetCommandLineW GetConsoleMode ReadConsoleW GetConsoleCP IsValidLocale EnumSystemLocalesW FlushFileBuffers SetStdHandle FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW WriteConsoleW

Name

.text

Size

6.9MB

Virtual Size

6.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

251KB

Virtual Size

282KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

1024B

Virtual Size

904B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

281KB

Virtual Size

281KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

389KB

Virtual Size

389KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=200, id=261, version=26213,

count=4, id=199, version=41118,

count=26, id=259, version=26706,

count=37, id=260, version=26706,

count=27, id=259, version=26213,

count=141, id=261, version=26706,

count=1, id=263, version=26213,

count=38, id=260, version=26213,

count=2, id=262, version=26213,

count=3, id=257, version=26213,

count=45, id=205, version=50522,

count=126, productName=Unmarked objects (old),

count=17, id=261, productName=VS2017 v15.9.7 build 27027, version=27027,

count=7, id=260, productName=VS2017 v15.9.7 build 27027, version=27027,

count=60, id=261, version=27031,

count=123, id=260, version=27031,

count=488, id=1, productName=Unmarked objects,

count=1012, id=265, version=27031,

count=1, id=255, version=27031,

count=1, id=151,

count=1, id=258, version=27031,

TeamViewer_StaticRes.dll

SHA256 41a8e29f8ea8804ef378dd72f7cd8d75e11f46c3e10ea2604ff909a05db6552c
MD5 056b176354f3bcfce746f16219b83838
SHA1 975c55be133dd08ce9f744fb693b4fbe3bc244fa
SHA512 5f74c0e681e0a5ab1d066d6ebdb9b05946cdb3f7f87692a94c81c011144ecfce372981d68827cda40e320318b9792572fdefebd83c6ed71322b4ff65a1ebc9a6
SSDEEP 98304:ANaMWcYTl5i5pDfCwugp8s4sh0SjjP/V8DG7nvOTN+O/ZgXxOCkJn:TM9ol5i/LH4s2SH/VT7uZOOCkJn
TLSH
T12456E0E5EAF179A3D41A663295D80410AC331EC3E9D16D4AB6CDF82D1F303C98D8B65E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

61:fa:05:d9:0b:02:e5:59:f7:cf:7f:fe:05:5e:ea:a9:cd:0d:1c:b7

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

tv_w32.dll

IMPHASH b3ff32e5aa0633d6d02dacc82f341dfc
SHA256 249f1003808232094f9fb7eac650b97d6227784edf58b4c8d3dd63b456e163bf
MD5 c3ddfb227d2487161eab7c270344ae8f
SHA1 a760236a7e5c275f925ec38355d2ab860b0734f3
SHA512 4e826e5d16f50dd6943baee586b775cc8dc5da48d5345429ae0447e2790bd8d3930cf0ef665963c3bf87c63a8b8652eb2955738ffcc54c818d1eb083dff583c3
SSDEEP 12288:mw9rty/S54uoBKtysxx7U8AuTSVdm0TVcBKf5WerL41:mw9rty/S54L0AuTSVdmperL41
TLSH
T11F948C1079838471C57F383045B9E3720D6DBD215F38A5EFE3981A76AF644C1A93AA2F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

b7:89:ee:80:ff:97:ad:2e:54:11:c7:d9:c5:24:de:5c:70:65:74:ae

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

55680

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\JA\workspace\rc_WinTV_pub15\BuildTarget\Release\tv_w32dll.pdb

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

kernel32

OpenProcess CreateToolhelp32Snapshot GetLastError QueryPerformanceFrequency CloseHandle HeapAlloc GetCurrentProcessId GetProcessHeap GetModuleHandleW CreateRemoteThread QueryPerformanceCounter EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetVersionExW GetFileAttributesExW FileTimeToSystemTime GlobalLock DeleteCriticalSection GlobalUnlock GetSystemDirectoryA LoadLibraryA FreeLibrary GetCurrentThreadId GetLocalTime GetModuleFileNameA Thread32Next Thread32First SuspendThread ResumeThread DisableThreadLibraryCalls OpenMutexW OpenThread GetExitCodeProcess GetModuleFileNameW FreeLibraryAndExitThread Sleep LoadLibraryW CreateThread IsBadWritePtr GetCurrentProcess CreateMutexW WaitForSingleObject ReleaseMutex GetModuleHandleA UnmapViewOfFile CreateEventW SetEvent LocalFree VerSetConditionMask VerifyVersionInfoW IsBadReadPtr CreateFileMappingW MapViewOfFile GetTickCount VirtualQuery HeapSize SetStdHandle GetStringTypeW SetFilePointerEx GetFileSizeEx SetConsoleCtrlHandler EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar HeapReAlloc GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetFileType GetStdHandle GetCurrentThread GetModuleHandleExW ReadConsoleW Module32First Module32Next VirtualAlloc VirtualFree HeapFree VirtualProtect GetProcAddress DecodePointer OutputDebugStringW CreateFileW OpenFileMappingW WriteConsoleW ExitProcess RaiseException ReadFile GetConsoleMode GetConsoleCP WriteFile FlushFileBuffers UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW InterlockedPushEntrySList InterlockedFlushSList RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer

user32

GetDC GetSystemMetrics ClientToScreen MapWindowPoints GetUpdateRect FindWindowW GetClientRect GetDesktopWindow GetWindowRect IsWindowVisible SetWindowPos GetWindowDC RegisterClassExW LoadCursorW FindWindowExW RegisterClipboardFormatW DefWindowProcW SendMessageTimeoutW CallNextHookEx UnregisterClassW IsWindow SetTimer UnhookWindowsHookEx SendNotifyMessageW GetClassNameW SetWindowsHookExW KillTimer RegisterWindowMessageW DestroyWindow CreateWindowExW GetClassInfoExW ReleaseDC

gdi32

RectVisible GetStockObject CreatePen Rectangle BitBlt SelectObject CreateDIBSection CreateCompatibleDC GdiFlush DeleteDC DeleteObject

shell32

DragQueryFileW

ole32

CoUninitialize ReleaseStgMedium CoCreateInstance CoInitialize

Name

.text

Size

299KB

Virtual Size

298KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

84KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.shared

Size

512B

Virtual Size

36B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

936B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

tv_w32.exe

IMPHASH 265c698487d0d1aad50bcbcee4a7f882
SHA256 d42aab0e79f2dc069e42c2ee708c74715fa7ab4eb3c02c200b737e6dd40523bf
MD5 e39b6b4d0d576364d9c7c330189796e5
SHA1 c32b35edc56ea06eb7b9400eeefd826d22bb1aae
SHA512 c48896766692788989ab2b8fae58ecbe6e3308625322c0bbd6c07b7659bbecc6170ee94bbe6acda8915f49616b12d5aa237e2e7cbe70abb46aa43044d740eb33
SSDEEP 24576:qfMk+uipdUJpOXjOzmWF4Kc7RKAAzqmSCHHZZZasL32DiBbGv:qUDpdUJkjOD6FKAyqIHHZZZasLmiBbk
TLSH
T1A7359E627643DB37D09240B04DBCEBA6509DB9150F32D5D7A3E88E2D79309C23F72A66
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

0c:69:86:87:6d:97:f7:e7:8f:f3:4d:29:15:ae:35:21:12:0d:e7:b1

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

546944

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\JA\workspace\rc_WinTV_pub15\BuildTarget\Release\tv_w32exe.pdb

kernel32

ReadFile SetLastError GetModuleFileNameW CreateFileW CreateEventW Sleep GetLastError SetEvent CloseHandle GetWindowsDirectoryW LocalFree VerSetConditionMask VerifyVersionInfoW GetTickCount GetModuleFileNameA LoadLibraryA GetProcAddress FreeLibrary GetSystemDirectoryW LoadLibraryW SetWaitableTimer CreateWaitableTimerW OpenMutexW WriteFile SetFilePointer CreateMutexW WaitForSingleObject GetCurrentThreadId ReleaseMutex GetLocalTime GetCurrentProcessId GetCommandLineW GetCurrentProcess LoadLibraryExA GetModuleHandleA GetSystemDirectoryA GetFileAttributesW ResetEvent OpenEventA CreateEventA WaitForSingleObjectEx SetSearchPathMode SetDllDirectoryW HeapSetInformation SetProcessDEPPolicy EnterCriticalSection WaitForMultipleObjects LeaveCriticalSection FormatMessageW TerminateThread TlsAlloc GetSystemInfo QueueUserAPC DeleteCriticalSection WideCharToMultiByte TlsFree FormatMessageA LoadLibraryExW IsWow64Process CreateDirectoryW InitializeCriticalSection SetFilePointerEx GetFileSize UnregisterWaitEx FindNextFileW FindClose TerminateProcess RegisterWaitForSingleObject DuplicateHandle ReleaseSemaphore MultiByteToWideChar GetProcessHeap HeapFree HeapAlloc RaiseException SetThreadPriority QueryPerformanceCounter QueryPerformanceFrequency GetCurrentThread GetThreadTimes GetSystemTimeAsFileTime TlsGetValue TlsSetValue InitializeCriticalSectionAndSpinCount VirtualProtect VirtualQuery GetModuleHandleW GetStringTypeW TryEnterCriticalSection EncodePointer DecodePointer SwitchToThread LCMapStringW GetLocaleInfoW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent InitializeSListHead IsDebuggerPresent GetStartupInfoW GetLogicalProcessorInformation SignalObjectAndWait CreateThread GetThreadPriority CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask UnregisterWait FreeLibraryAndExitThread GetVersionExW VirtualAlloc VirtualFree InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList CreateTimerQueue RtlUnwind GetModuleHandleExW ExitProcess GetStdHandle GetFileType IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc HeapSize FlushFileBuffers GetConsoleCP GetConsoleMode FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle WriteConsoleW

Name

.text

Size

798KB

Virtual Size

798KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

257KB

Virtual Size

256KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

25KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

512B

Virtual Size

308B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

tv_x64.dll

IMPHASH c9c88b240771b79995085cd1a31325b0
SHA256 93424983b28bf6b5786c503cdf70a1bf19542945af3224b4d5e46c1ef1aad2c9
MD5 2601fd279fb08f108f1cb8056f29e232
SHA1 df936ebdfdbfea1d97edf180cd6c510f5fefc9d7
SHA512 a4355ec38a0aed5e3a8de78e9558b03612bc233f745e57a02ee08a892717d60d86a611d0b8e64bad9684218a3de183fd0466e02fc9c85c06872c5bc0e4f6ab14
SSDEEP 6144:fdJb8iVkVaON8mJLzGgQnFWXSMDzukFJFkpQ9UayZ4yITci:/oiVvu8mJ2g4FWZ6G8yE8Tr
TLSH
T163B47C06B7A407B9D57BD23DC9530A16EAB278451721A3CF03E847AA0F237E1697FB11
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

fc:b0:fb:ab:7c:c5:c6:ad:35:98:ac:d0:21:60:ca:ff:c9:69:ac:3d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

61104

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\JA\workspace\rc_WinTV_pub15\BuildTarget\Release\tv_x64dll.pdb

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

kernel32

OpenProcess CreateToolhelp32Snapshot GetLastError QueryPerformanceFrequency CloseHandle HeapAlloc GetCurrentProcessId GetProcessHeap GetModuleHandleW CreateRemoteThread QueryPerformanceCounter EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetVersionExW GetFileAttributesExW FileTimeToSystemTime GlobalLock DeleteCriticalSection GlobalUnlock GetSystemDirectoryA LoadLibraryA FreeLibrary GetCurrentThreadId GetLocalTime GetModuleFileNameA Thread32Next Thread32First SuspendThread ResumeThread DisableThreadLibraryCalls OpenMutexW OpenThread GetModuleFileNameW FreeLibraryAndExitThread Sleep LoadLibraryW CreateThread IsBadWritePtr CreateMutexW WaitForSingleObject ReleaseMutex OpenFileMappingW GetModuleHandleA CreateEventW SetEvent LocalFree VerSetConditionMask VerifyVersionInfoW IsBadReadPtr CreateFileMappingW MapViewOfFile GetTickCount VirtualQuery HeapSize SetStdHandle GetStringTypeW SetFilePointerEx GetFileSizeEx SetConsoleCtrlHandler EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP HeapReAlloc GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetFileType GetStdHandle GetCurrentThread GetModuleHandleExW ReadConsoleW Module32First Module32Next VirtualAlloc VirtualFree HeapFree VirtualProtect GetProcAddress OutputDebugStringW CreateFileW WriteConsoleW UnmapViewOfFile RtlUnwind ExitProcess RtlPcToFileHeader ReadFile GetConsoleMode GetConsoleCP WriteFile FlushFileBuffers RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwindEx InterlockedPushEntrySList InterlockedFlushSList SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RaiseException

user32

GetDC GetSystemMetrics ClientToScreen MapWindowPoints GetUpdateRect FindWindowW GetClientRect GetDesktopWindow IsWindowVisible SetWindowPos GetWindowDC ReleaseDC RegisterClassExW LoadCursorW FindWindowExW RegisterClipboardFormatW DefWindowProcW SendMessageTimeoutW CallNextHookEx UnregisterClassW IsWindow SetTimer UnhookWindowsHookEx SendNotifyMessageW GetClassNameW SetWindowsHookExW KillTimer RegisterWindowMessageW DestroyWindow CreateWindowExW GetClassInfoExW GetWindowRect

gdi32

RectVisible GetStockObject CreatePen Rectangle BitBlt SelectObject CreateDIBSection CreateCompatibleDC GdiFlush DeleteDC DeleteObject

shell32

DragQueryFileW

ole32

CoUninitialize ReleaseStgMedium CoCreateInstance CoInitialize

Name

.text

Size

359KB

Virtual Size

359KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

123KB

Virtual Size

122KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.shared

Size

512B

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

936B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

tv_x64.exe

IMPHASH 28329135325dfdecaeea0388ae23e647
SHA256 ba50db49cdcfd8a8dee7d9b90f2e784d2f88386029f4e09bceee6da05bb90520
MD5 7b37941a468cdd30708149530919bf5c
SHA1 51814ebacd088dffb113c8ffa1d240876cd5d45c
SHA512 f4af94e40bae849f90a5e9ee6cf1f773555cf93e9f3ec599c2fb76b2131656ca9e10a3c9112928addf561a5ec4ebeef82433959f2412bc339ff73bd327ec3d31
SSDEEP 24576:8uXM6BvXONCY950YUH1BVTgGZbTASHHZZZJqhzvCe:RXM6BvXONCY950YUt8KbT3HHZZZghzv9
TLSH
T139557D1A67A442FDD07AD038C993954AE6F270160F709ADB03665B5E2F236F09D3E7B0
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

c4:8b:e6:9c:4a:f1:ab:a7:ea:46:d3:27:4c:eb:3f:73:8b:b5:8d:c6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

6

Entry point

507296

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

E:\JA\workspace\rc_WinTV_pub15\BuildTarget\Release\tv_x64exe.pdb

kernel32

ReadFile SetLastError GetModuleFileNameW CreateFileW CreateEventW Sleep GetLastError SetEvent CloseHandle GetWindowsDirectoryW LocalFree VerSetConditionMask VerifyVersionInfoW GetTickCount GetModuleFileNameA LoadLibraryA GetProcAddress FreeLibrary GetSystemDirectoryW LoadLibraryW SetWaitableTimer CreateWaitableTimerW OpenMutexW WriteFile SetFilePointer CreateMutexW WaitForSingleObject GetCurrentThreadId ReleaseMutex GetLocalTime GetCurrentProcessId GetCommandLineW GetCurrentProcess LoadLibraryExA GetModuleHandleA GetSystemDirectoryA GetFileAttributesW ResetEvent OpenEventA CreateEventA WaitForSingleObjectEx SetSearchPathMode SetDllDirectoryW HeapSetInformation SetProcessDEPPolicy EnterCriticalSection WaitForMultipleObjects LeaveCriticalSection FormatMessageW TerminateThread TlsAlloc GetSystemInfo QueueUserAPC DeleteCriticalSection WideCharToMultiByte TlsFree FormatMessageA LoadLibraryExW CreateDirectoryW InitializeCriticalSection SetFilePointerEx GetFileSize UnregisterWaitEx FindNextFileW FindClose TerminateProcess RegisterWaitForSingleObject DuplicateHandle ReleaseSemaphore MultiByteToWideChar GetProcessHeap HeapFree HeapAlloc RaiseException SetThreadPriority QueryPerformanceCounter QueryPerformanceFrequency GetCurrentThread GetThreadTimes GetSystemTimeAsFileTime TlsGetValue TlsSetValue InitializeCriticalSectionAndSpinCount VirtualProtect VirtualQuery GetModuleHandleW GetStringTypeW TryEnterCriticalSection EncodePointer DecodePointer SwitchToThread LCMapStringW GetLocaleInfoW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent InitializeSListHead IsDebuggerPresent GetStartupInfoW GetLogicalProcessorInformation SignalObjectAndWait CreateThread GetThreadPriority CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask UnregisterWait FreeLibraryAndExitThread GetVersionExW VirtualAlloc VirtualFree InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList CreateTimerQueue RtlUnwindEx RtlPcToFileHeader GetModuleHandleExW ExitProcess GetStdHandle GetFileType IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc HeapSize FlushFileBuffers GetConsoleCP GetConsoleMode FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle WriteConsoleW

Name

.text

Size

799KB

Virtual Size

799KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

RT_CODE

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

373KB

Virtual Size

373KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

66KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

1024B

Virtual Size

592B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

uninstall.exe

IMPHASH 4ea4df5d94204fc550be1874e1b77ea7
SHA256 81c3d9d75711cfdeb19528a33a8b5dcaba153dbc008bbc741d4e5f840f4e691e
MD5 03da40b616d5ea2ec8c9e9417cb95bf2
SHA1 f3236e6429ee0b1c64d8d08fae5352635918f969
SHA512 c2e67cd93e3483955c141a27b60f41bbd43a5cc5e528a4daaf047b14c119f6473a5146afd0cd9f4ee110a4c5aaaf79693cff71c62d98b771b4c7c02d86464253
SSDEEP 3072:bAe+3aJpqWXTBuC5GfqP6bBFNtkatxhGmr3pHzuOTgj/ziC83W/FKjrFf:cB+pqUxdPU54m1HqP/ziFyFEFf
TLSH
T1FF9494F9D7E356D3F8326A36CB91523460323EC9A4E46DF556C8B72C49301DEA21E92C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

d2:ad:76:3b:37:61:d6:1c:77:de:48:cd:f3:65:0b:63:79:a3:08:97

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Chains

Nov 6, 2019

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Göppingen,ST=Baden-Württemberg,C=DE

Serial Number

03:47:1e:2c:81:71:b1:67:9d:89:8a:c1:9b:da:37:bb

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2019 - Dec 31, 2019

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Minor OS version

0

Major OS version

4

Entry point

13238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount CreateFileW GetFileSize MoveFileW SetFileAttributesW GetModuleFileNameW CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode WaitForSingleObject GetCurrentProcess CompareFileTime GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GetDiskFreeSpaceW lstrlenW lstrcpynW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/FindProcDLL.dll

IMPHASH e26d7460d0c04056b9226a899477ba4d
SHA256 6eb09ce25c7fc62e44dc2f71761c6d60dd4b2d0c7d15e9651980525103aac0a9
MD5 6f73b00aef6c49eac62128ef3eca677e
SHA1 1b6aff67d570e5ee61af2376247590eb49b728a1
SHA512 678fc4bf7d345eeb99a3420ec7d0071eaba302845e93b48527d9a2a9c406709cc44ec74d6a889e25a8351a463803f8713a833df3a1707a5ad50db05240a32938
SSDEEP 384:DZoRF0XXUuJReQg0Tw67ADWBTgmldIogUD3GLgFmyaX/fVYcWJQCDmrinogRdBl:DZaF0HtTwuz9yu3KgwRX1nWJ1q+noI
TLSH
T12DC26C107C9042B7D28E5671A1E50F075B3F6E512AE65883CF256ADA2D612F0FA3F31B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6100

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/KillProcDLL.dll

IMPHASH d806a080e21508dd768fa70be247d2ae
SHA256 de1177a4bd1c56c3555f366d40b37d7dd9cb25e16c4973d0a4d22bf9a8af7aed
MD5 1cc87d2b5a79b18f133b4f944e2f2f74
SHA1 98e0ddb727c76e06be1668434d754e5b80a0c154
SHA512 d8fee1c09fef9af4e1f38baaffa3a6d059713b14ecad900815c086cc22855644fcdeacd6bba31ea6e6925831e650f7b0d34e6dea4c57a978fb4f5bf0cd6d72a9
SSDEEP 384:JLmJwO50x66T9JOpOUT38YZvml7xoKdyuwlx8xSiorppugBwUdJopS:JW50hJwwUTsXdPwxvtpDtdJo
TLSH
T1DFF26C507C8144F7C28E4235A5A9AB179FBF692036E55983CF269EDA1C311F0E93B307
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6841

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 982c5fb7ada7d8c9bc3e419d1c35da6f05bc5dd845940c179af3a33d00a36a8b
MD5 0ff2d70cfdc8095ea99ca2dabbec3cd7
SHA1 10c51496d37cecd0e8a503a5a9bb2329d9b38116
SHA512 cb5fc0b3194f469b833c2c9abf493fcec5251e8609881b7f5e095b9bd09ed468168e95dda0ba415a7d8d6b7f0dee735467c0ed8e52b223eb5359986891ba6e2e
SSDEEP 192:eK24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlASl:u8QIl975eXqlWBrz7YLOlA
TLSH
T12B325C02135481F3E4918138C86B3A276B6A15029BF98E57DFD39646BE30BE3BD7D603
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/TvGetVersion.dll

IMPHASH 8fe1425ee6d46ec8c7cfcf0fd32a8530
SHA256 c67cbd5e35e1ce0c7ba17c55d8e2bc33afd5e0a68774554a1fe7216d330c709e
MD5 05f51bc8ffb2c8f5a2825bf5680301cf
SHA1 30f7f77dce1fb3526142780e9f5bd5c11622d6b6
SHA512 1e041aaa37dd00414ad955ebc8c0f708589014d2085a5a0b95a31f4d694bb1cc4994bb1324d4b983cbad0449fb0a05560d82c60fdbfc78be67ff61275e451233
SSDEEP 3072:4J7KJkcma0VkpOG/374vnriZ1nmTaK405/+ncMCQ2bDh:6EkcmYOG/37MnGZoeKxpuuQ
TLSH
T1D7245B0177E4843AF2F726746DF6C6604EBDBC725934D18FE780892A2E70A85DB24727
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

67443

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

shlwapi

StrChrW StrRChrW

wtsapi32

WTSEnumerateProcessesW WTSFreeMemory

msi

ord205 ord45 ord16 ord70 ord141

psapi

GetProcessImageFileNameW

kernel32

lstrcpyA lstrcmpiA lstrcpynA lstrlenA lstrcpyW lstrcpynW Sleep GetVersionExW LocalFree FreeLibrary LoadLibraryW GetExitCodeProcess WaitForSingleObject CreateProcessW OpenProcess Process32NextW Process32FirstW CreateToolhelp32Snapshot TerminateProcess DeleteFileW GetWindowsDirectoryW GetTempPathW InterlockedDecrement WideCharToMultiByte CreateDirectoryW GetFileAttributesW MultiByteToWideChar RtlUnwind HeapFree RaiseException HeapReAlloc MoveFileW FindClose FileTimeToSystemTime FileTimeToLocalFileTime FindFirstFileExW EncodePointer DecodePointer GetCurrentThreadId GetCommandLineA IsProcessorFeaturePresent HeapAlloc TlsAlloc TlsGetValue TlsSetValue TlsFree CreateFileW SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess EnterCriticalSection LeaveCriticalSection lstrlenW GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW HeapCreate HeapDestroy GetFullPathNameW GetFileInformationByHandle PeekNamedPipe GetFileType GetFileSize HeapSize ExitProcess SetHandleCount GetStdHandle GetStartupInfoW DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime WriteFile GetModuleFileNameW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer GetStringTypeW GetUserDefaultLCID GetLocaleInfoW GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetEndOfFile GetProcessHeap InterlockedExchange GetTimeZoneInformation WriteConsoleW CompareStringW SetEnvironmentVariableA InterlockedCompareExchange InitializeCriticalSection GlobalAlloc ReadFile CloseHandle GlobalFree GetLastError lstrcatW InitializeCriticalSectionAndSpinCount GetDriveTypeW GetCurrentProcessId GetModuleHandleW GetProcAddress VerSetConditionMask VerifyVersionInfoW lstrcmpiW InterlockedIncrement GetCurrentDirectoryW

user32

SendMessageW PostMessageW GetSystemMetrics wsprintfW

gdi32

AddFontResourceExW RemoveFontResourceExW

winspool.drv

EnumPrintProcessorsW EnumPrinterDriversW

advapi32

RegSetValueExW RegCloseKey RegEnumKeyExW RegDeleteKeyW GetUserNameW LookupAccountNameW ConvertSidToStringSidW DeleteService ControlService RegOpenKeyExA RegQueryValueExA OpenProcessToken LookupPrivilegeValueW OpenServiceW CloseServiceHandle QueryServiceStatus RegQueryValueExW RegEnumValueW RegCreateKeyExW RegOpenKeyExW RegFlushKey ChangeServiceConfig2W RegDeleteValueW AdjustTokenPrivileges StartServiceW OpenSCManagerW

shell32

ShellExecuteExW SHFileOperationW

ole32

CoInitialize CoUninitialize CLSIDFromString CLSIDFromProgID CoCreateInstance OleRun

oleaut32

SysAllocString SysFreeString GetErrorInfo

$_6_/tvqsfilesx64.7z

SHA256 a7e367f136833dab5d3e6c729b920c2a35ded2debf45641373a304e00defc77e
MD5 427a80043dc788c76f279c949e7625c5
SHA1 5a67634a84154a1ad866ddca8473bddea1018fac
SHA512 70638e28904f240b4756472183065b88f8c76ad0b78ac551ed2012639421b6f0e1a8ac2d04a6edab3bdc2aa0d10713e65937167f53412810a6d4e42be9a28bb7
SSDEEP 192:l3vRpD/cA2sPoQAXDJtNichsyc4Ydyqk/IfkbSENxbZ5sRUzTsS5PsnpkMOZAuHc:pvn4zX1cyao+fk+Eb15PvPokBZAcc
TLSH
T1EC32D1588E2FFA0C816FDD6EA3C4EFE3705FD312751C805DB2996A964631DF11A4520A
MD5 SHA1 SHA512 SSDEEP TLSH

x64/TVMonitor.inf

SHA256 60fa2925c589ac38bab74713e1b0bb2a205a8c825d614b971fc3426991cd86ca
MD5 5c05880e0ed65fac3a4dfb7b6802b898
SHA1 55ea8dac7093123e26584a49012517818c0f586d
SHA512 5176504de06e6f8249815f8f8472ed7c9a26003e92ecd80299da8b611a630a1ba8179419cdf50f02b78a19caf221d6e0ae59452b224dc55feef72a93cd4d147d
TLSH
T181317579014B553AF80372367D9B7642729A3003B0E94965B1ECC2D1BB6AC1C6B262FF
MD5 SHA1 SHA512 TLSH

x64/TVMonitor.sy_

IMPHASH bd2fee8a544a1c6656edb847a80a08c5
SHA256 78318c6a8ae65fb3afe6ba06cf1bda69903390e250950d3bf78895cd79afd4d8
MD5 b7ca6668278fbae3fbd649285f8ccc35
SHA1 dd5cd2fb0e6818eb56268f0d6e72d0f5ac74aef4
SHA512 7305b979abbef7beb4789261e9fc0ebde00415bb00eceee2289cd1fcf91467ccc7c84ed77e7f5cd042243508b5fc8c3384ea59d6a1a17497781110fe5238103c
SSDEEP 192:qumQmspn15C9l0HDRRdrauc056CAyIKGNsuIeInYe+PjPtrwnc8ijtlAur9ZCsp5:qmF100Hzdrau/NAyoauQnYPLWUUHeMt
TLSH
T10E824C931B646077E9D7CA75C6D2C7A39D31B5A03F9589CF0062C2962E42FF0373A21A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

29:60:7a:cd:03:f6:4a:bf:52:39:8b:f3:de:04:e8:19:d1:a0:8c:34

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Goeppingen,ST=Baden-Wuerttemberg,C=DE

Chains

May 12, 2017

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Goeppingen,ST=Baden-Wuerttemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Goeppingen,ST=Baden-Wuerttemberg,C=DE

Serial Number

7e:c0:da:c3:9a:e3:64:6b:14:93:27:7f:76:1a:0e:c3

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 28, 2016 - Mar 3, 2018

Subject

Serial Number

61:19:93:e4:00:00:00:00:00:1c

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Feb 22, 2011 - Feb 22, 2021

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

6

Entry point

24676

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

c:\teamviewer_tvmonitordriver\drivers\win\monitor\objfre_win7_amd64\amd64\TVMonitor.pdb

Name

.text

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1024B

Virtual Size

628B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

288B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

228B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PAGE

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

960B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

x64/tvmonitor.cat

SHA256 143df27418b1eaf375bed6291765e2e77166830d6216a6bfb71a075735f05da5
MD5 1f2380a5474583dba929f761a760546f
SHA1 561248613c6f443d8a993900e2dbebf3b718a660
SHA512 4309403df0a29c53190833aa13a6e67a4501650b77106bc62925f691dffedcab184b6df3b8ba750e0a8fd4c9b6e0919b729f5bd250413178cd7a4ce287241aed
SSDEEP 192:Ast9AnYe+PjPtrwnc8ijtlAur9ZCspE+TM4rwMcA0qTv0a:NAnYPLWUUHeM4cAVv0a
TLSH
T190020AD70A192467EDC78EA0D6D2D16BED31F7926DC8549E64B683822EC1FB1370940E
MD5 SHA1 SHA512 SSDEEP TLSH

$_6_/tvqsfilesx86.7z

SHA256 3e9460f7a7fc587242a2cf702e7d829e7c589318d864b5303819cc5deb6feb1c
MD5 c96bff77e70084d026e879039e91a442
SHA1 b0342a08232f5a71c57f7f6b22aa67bd87f5422c
SHA512 3257ccc05d049449eb5a7a252d0053691a24ae59c4e3e006b757f5a8b1e6fad94f3970d28584c71998aca7789820e2bb5907350c2180de5f558dc779d8e3f8a0
SSDEEP 192:3JrGvOF6Q8DYC87LS2CFCQGRyZbl9+XzWDdUAIeSzJpKSZD6PRZGjFb0xu:3JrGhxMCeLSxFBZblmWBWhzJrwPqec
TLSH
T1BB22BF4BCB83E307C81B3347669B2295DAC7D5603FDE2AF719189B074528576E3341E2
MD5 SHA1 SHA512 SSDEEP TLSH

x86/TVMonitor.inf

SHA256 267253de35f1aa852e6499af811445e43a00470eecbf8d1f054e9363e07cd2fe
MD5 558934fcb110d20c4be32dd144399ca1
SHA1 37028ffd14bc126733f3cfee368765d6c3868eb5
SHA512 af4b2af4f5676a19977eb59c29286d778ef3391242ae6e1c7f4552cd54ed69344153ec7e87160682fbe96a46e1219248d556449be7f630cd583c8c92e29c1fc1
TLSH
T1F8317778044B553AF80372367D9B7742725A3003B0D98910B1DCC2D0BB6AD1C6B366FB
MD5 SHA1 SHA512 TLSH

x86/TVMonitor.sy_

IMPHASH 0a4b1988011b75460fe539769b8577b2
SHA256 ddca680bd7b542d0a010760d7c68c856e02ad5a19ca1fb14e6500669ed180e07
MD5 e5b882729ce85f3c365988e4d5f05323
SHA1 6b47626f1bc85d3d8c4709870704dee9a3d726b8
SHA512 fd8da18b05d3f3b17cf8f288fd7f38f7f9a4b8258b2571dad1b0763d1490e4556d8b62dc19925cab6cb66d8f8f52a32d858a82c8ae45facb21b22ed654814371
SSDEEP 192:ndPLaKAYh8bzV52RqInf/nYe+PjPtrwnc8ijtlAur9ZCspE+TMArlMK4:nJLFAY2bzV57WXnYPLWUUHeMtz
TLSH
T161622B8B07282472EEC78EB0C996D2629877BBA14F58A0CB50B581C62DC1FF03B1571F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

5f:de:f0:fe:c2:39:13:da:ed:30:b0:89:10:26:13:ea:05:d1:4d:f1

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Goeppingen,ST=Baden-Wuerttemberg,C=DE

Chains

May 12, 2017

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Goeppingen,ST=Baden-Wuerttemberg,C=DE

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=TeamViewer GmbH,O=TeamViewer GmbH,L=Goeppingen,ST=Baden-Wuerttemberg,C=DE

Serial Number

7e:c0:da:c3:9a:e3:64:6b:14:93:27:7f:76:1a:0e:c3

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 28, 2016 - Mar 3, 2018

Subject

Serial Number

61:19:93:e4:00:00:00:00:00:1c

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Feb 22, 2011 - Feb 22, 2021

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

6

Entry point

4414

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\teamviewer_tvmonitordriver\drivers\win\monitor\objfre_wxp_x86\i386\TVMonitor.pdb

Name

.text

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

384B

Virtual Size

280B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

128B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

PAGE

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

960B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

384B

Virtual Size

262B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

x86/tvmonitor.cat

SHA256 9956b649c577fae5005863dd62899aebbdd248c8ddf134a66300fa9a9f8850d8
MD5 efc78a1a843a152e15e85bb056fbdc24
SHA1 f37776fcd88c5279fc77fac9d013515816f195d9
SHA512 003a5b619081d00c32ae66a9576f3470d7192db743b6e480c4e8b631b8c268d164937503939fbbaa1f6c1e76ac0ea6b277c9fee4a95fcd27d28fddd2046ff6c3
SSDEEP 192:fc9NdJnYe+PjPtrwnc8ijtlAur9ZCspE+TM4rhM9bjTT:aJnYPLWUUHeMXN3
TLSH
T101021BD70A191462EDC78EA0C5C6D12BAC71F7D2ADC854AE60B683C16EC2FA13B5D40E
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

TeamViewerQS.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/CustomerTools.dll

kernel32

generic

$PLUGINSDIR/InstallOptions.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/TvGetVersion.dll

shlwapi

wtsapi32

msi

psapi

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

generic

$PLUGINSDIR/nsJSON.dll

wininet

kernel32

user32

generic

$PLUGINSDIR/nsis7z.dll

kernel32

user32

oleaut32

generic

$PLUGINSDIR/wincheck.ini

$_6_/tvqsfiles.7z

TeamViewer.exe

PE Signature issue

kernel32

generic

TeamViewer_Desktop.exe

PE Signature issue

kernel32

generic

TeamViewer_Note.exe

PE Signature issue

kernel32

generic

TeamViewer_Resource_ar.dll

PE Signature issue

generic

TeamViewer_Resource_bg.dll

PE Signature issue

generic

TeamViewer_Resource_cs.dll

PE Signature issue

generic

TeamViewer_Resource_da.dll

PE Signature issue