» teamviewer_service.exe
Overview
Analysis
File Details
Behaviors (1)

teamviewer_service.exe

TeamViewer

It runs as a separate (within the context of its own process) windows Service named “TeamViewer 9”.

File name:

Publisher:

TeamViewer GmbH (signed by TeamViewer)

Product:

TeamViewer

Description:

TeamViewer 9

Version:

9.0.28223.0

MD5:

4439d6e1d1685a7c062e2c4cb6e7e2b2

SHA-1:

9a2334a04fd3c7b237638df06fa1c3259835aced

SHA-256:

afaf9b1d3a4f7a78f92c1e07fb4f67bb598ffa087edf96f58874c5749235a111

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 1:28:48 AM UTC (today)

File size:

4.8 MB (5,024,576 bytes)

Product version:

9.0

TeamViewer GmbH

Trademarks:

TeamViewer

Original file name:

TeamViewer.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\teamviewer\version9\teamviewer_service.exe

Digital Signature

Signed by:

TeamViewer

Authority:

VeriSign, Inc.

Valid from:

8/8/2011 5:00:00 AM

Valid to:

8/8/2014 4:59:59 AM

Subject:

CN=TeamViewer, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=TeamViewer, L=Goeppingen, S=Baden Wuerttemberg, C=DE

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3D27AFBEA5996F13E5B5624421F16295

File PE Metadata

Compilation timestamp:

4/25/2014 2:54:45 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

12.0

CTPH (ssdeep):

49152:xU2xkTqH0lX4yXGWpbMIFACpG8/uK0dvSvJ5kZZiko+YztbQMmHZZAT419U9Fm29:xU2kbltXlxFM8cNSHkZZiyNU9FZ/

Entry address:

0x2B8986

Entry point:

E8, 4B, EA, 00, 00, E9, 7B, FE, FF, FF, 55, 8B, EC, 51, 83, 65, FC, 00, 8D, 45, FC, 56, 50, FF, 75, 0C, FF, 75, 08, E8, 27, EB, 00, 00, 8B, F0, 83, C4, 0C, 85, F6, 75, 18, 39, 45, FC, 74, 13, E8, ED, F4, FF, FF, 85, C0, 74, 0A, E8, E4, F4, FF, FF, 8B, 4D, FC, 89, 08, 8B, C6, 5E, 8B, E5, 5D, C3, 55, 8B, EC, 83, 7D, 08, 00, 75, 04, 33, C0, 5D, C3, 53, 57, FF, 75, 08, E8, 30, 94, FF, FF, 6A, 02, 8D, 78, 01, 57, E8, 9E, FF, FF, FF, 8B, D8, 83, C4, 0C, 85, DB, 74, 15, FF, 75, 08, 57, 53, E8, C0, F9, FF, FF, 83... 
[+]

Code size:

3.5 MB (3,641,344 bytes)

Service

Display name:

TeamViewer 9

Service name:

TeamViewer9

Description:

TeamViewer Remote Software

Type:

Win32OwnProcess

Scan teamviewer_service.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.