» teamviewer_service.exe
Overview
Analysis
File Details
Behaviors (2)
Programs (2)

teamviewer_service.exe

TeamViewer

It runs as a separate (within the context of its own process) windows Service named “TeamViewer 8”. This is installed with TeamViewer 8.

File name:

Publisher:

TeamViewer GmbH (signed by TeamViewer)

Product:

TeamViewer

Description:

TeamViewer 8

Version:

8.0.20202.0

MD5:

d53118c165ae5d188632b6cdeee82a1b

SHA-1:

57772ab849a420c230dd442c07c142d04398ebd5

SHA-256:

407885433688329de733706dbf94d22704b6f55e2e846a288e2c2a546234621b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/18/2024 9:54:18 PM UTC (today)

File size:

4.1 MB (4,308,320 bytes)

Product version:

8.0

TeamViewer GmbH

Trademarks:

TeamViewer

Original file name:

TeamViewer.exe

File type:

Executable application (Win32 EXE)

Language:

English (United Kingdom)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\version8\teamviewer_service.exe

Digital Signature

Signed by:

TeamViewer

Authority:

VeriSign, Inc.

Valid from:

8/7/2011 8:00:00 PM

Valid to:

8/7/2014 7:59:59 PM

Subject:

CN=TeamViewer, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=TeamViewer, L=Goeppingen, S=Baden Wuerttemberg, C=DE

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3D27AFBEA5996F13E5B5624421F16295

File PE Metadata

Compilation timestamp:

8/7/2013 5:40:19 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

9.0

CTPH (ssdeep):

49152:igDmQUisn8jGDTz3oodeqXaVyJ/UOIdBWkHBomHaqOQf7suz5LHZZTT2MEHGNwIl:KQUisn8Cfz4oFaOIdBWhm67Qf7suYGNd

Entry address:

0x177A45

Entry point:

E8, 39, D6, 00, 00, E9, A5, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 56, 8B, F1, C6, 46, 0C, 00, 85, C0, 75, 63, E8, 5D, 97, 00, 00, 89, 46, 08, 8B, 48, 6C, 89, 0E, 8B, 48, 68, 89, 4E, 04, 8B, 0E, 3B, 0D, 78, 86, 7C, 00, 74, 12, 8B, 0D, 90, 85, 7C, 00, 85, 48, 70, 75, 07, E8, 26, 70, 00, 00, 89, 06, 8B, 46, 04, 3B, 05, 30, 8B, 7C, 00, 74, 16, 8B, 46, 08, 8B, 0D, 90, 85, 7C, 00, 85, 48, 70, 75, 08, E8, 90, D8, 00, 00, 89, 46, 04, 8B, 46, 08, F6, 40, 70, 02, 75, 14, 83, 48, 70, 02, C6, 46, 0C, 01, EB, 0A... 
[+]

Entropy:

6.5948

Code size:

2.9 MB (3,052,544 bytes)

Service

Display name:

TeamViewer 8

Service name:

TeamViewer8

Description:

TeamViewer Remote Software

Type:

Win32OwnProcess

Windows Firewall Allowed Program

Name:

C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe

The file teamviewer_service.exe has been discovered within the following programs.

(EMCO EVALUATION PACKAGE) - TV by Equip IT

About 6% of users remove it

TeamViewer 8 by TeamViewer GmbH

TeamViewer 8 is a proprietary computer software package for remote control, desktop sharing, online meetings, web conferencing and file transfer between computers. It is possible to access a machine running TeamViewer with a web browser.

www.teamviewer.com/en/download/windows.aspx

10% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.