home

teamviewer_host_setup-ckc.exe

TeamViewer

This is a setup program which is used to install the application. This is installed with multiple programs including TeamViewer 7 Host and TeamViewer 7. The file has been seen being downloaded from it4bs.pl and multiple other hosts.
Publisher:
TeamViewer  (signed and verified)

Version:
7.0.12979.0

MD5:
4549bffc779f367c46651ee555e41c12

SHA-1:
4c6f0c9cc6cc13dc9d88e7138047a0a696420e06

SHA-256:
e434f99abed0093ac782e29bf9d368c732f5a5b2bf89fc4848a0e220173496be

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/14/2024 5:49:44 AM UTC  (today)

File size:
4.7 MB (4,920,352 bytes)

Copyright:
TeamViewer

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Digital Signature
Signed by:
TeamViewer

Authority:
VeriSign, Inc.

Valid from:
8/8/2011 2:00:00 AM

Valid to:
8/8/2014 1:59:59 AM

Subject:
CN=TeamViewer, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=TeamViewer, L=Goeppingen, S=Baden Wuerttemberg, C=DE

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3D27AFBEA5996F13E5B5624421F16295

File PE Metadata
Compilation timestamp:
9/9/2009 3:23:23 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:BlVmyVUZ7Fk3UG4ecrPRA6uBC9zpRRTPdhFYM4BmwK/h5j3hbeFVs/7Zazi0:BJqK3UG4eCr2C9zpPjd4MYmwMrgFqAf

Entry address:
0x238F30

Entry point:
60, BE, 00, 40, 63, 00, 8D, BE, 00, D0, DC, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 19, 8B, 1E, 83, EE, FC, 11, DB, 72, 10, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 78, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11...
 
[+]

Entropy:
7.9989

Packer / compiler:
UPX 2.90LZMA]

Code size:
24 KB (24,576 bytes)

The file teamviewer_host_setup-ckc.exe has been discovered within the following programs.

TeamViewer 7  by TeamViewer GmbH
Publisher's description - “TeamViewer is a simple and fast solution for remote control, desktop sharing and file transfer that works behind any firewall and NAT proxy. To connect to another computer just run TeamViewer on both machines without the need of an installation procedure.”
www.teamviewer.com/en/download/windows.aspx
7% remove it
TeamViewer 7 Host  by TeamViewer GmbH
TeamViewer 7 is a proprietary computer software package for remote control, desktop sharing, online meetings, web conferencing and file transfer between computers. It is possible to access a machine running TeamViewer with a web browser.
www.teamviewer.com
11% remove it
 
Powered by Should I Remove It?

The file teamviewer_host_setup-ckc.exe has been seen being distributed by the following 3 URLs.

http://it4bs.pl/.../tvhost.exe

http://downloadus1.teamviewer.com/.../TeamViewer_Host_Setup.exe

http://downloadeu1.teamviewer.com/.../TeamViewer_Host_Setup.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.