Static | ZeroBOX

PE Compile Time

2082-11-02 19:57:33

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0003fc74 0x0003fe00 7.97632625761
.rsrc 0x00042000 0x0001ca5c 0x0001cc00 5.79811892344
.reloc 0x00060000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0005a270 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0005a270 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0005a270 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0005a270 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0005a270 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_ICON 0x0005a270 0x00004228 LANG_NEUTRAL SUBLANG_NEUTRAL dBase IV DBT of \200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0
RT_GROUP_ICON 0x0005e498 0x0000005a LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0005e4f4 0x0000037c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0005e870 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
Xj;Y g
a IM<Na
::p`
?Y W`D
a IM<Na
`jae Z
!mQJa
v4.0.30319
#Strings
nanno1
nanno1.exe
<Module>
Attribute
nanno1.Candidates
Object
System
mscorlib
nanno1.Records
ReponseContainerRule
nanno1.Rules
Prototype
nanno1.Properties
BroadcasterContainerRule
ValueType
nanno1.Queues
PageConfigurationQueue
IssuerComposerCandidate
ParamCandidateFilter
MulticastDelegate
CreatorDecoratorRecord
DatabaseID
Tkkokvpc.Identifiers
<PrivateImplementationDetails>
<Module>{eb7d54de-7434-4e19-9fec-f69c883646ab}
WriteAttribute
CalcAttribute
SetAttribute
SortAttribute
PopAttribute
ListAttribute
RemoveAttribute
FlushAttribute
CollectAttribute
DisableAttribute
PushAttribute
CallAttribute
ReflectAttribute
VerifyAttribute
MapAttribute
InsertAttribute
AddAttribute
CalculateAttribute
InterruptAttribute
InvokeAttribute
_Identifier
CollectPolicy
CreateAttribute
OrderAttribute
valuecount
VisitAttribute
RunAttribute
sum_last
CloneAttribute
ComparePolicy
Boolean
EnablePolicy
property
TestPolicy
ConcatAttribute
RestartAttribute
lengthres
PostAttribute
FillAttribute
key_low
PrepareAttribute
ClonePolicy
ReadPolicy
_Value
composer
PreparePolicy
PublishAttribute
DefineAttribute
setup_length
FindAttribute
ChangeAttribute
lengthspec
UpdateAttribute
ReflectPolicy
VisitPolicy
m_Container
ForgotPolicy
MoveAttribute
Delegate
Combine
Interlocked
System.Threading
CompareExchange
RegisterAttribute
Remove
SearchAttribute
CountPolicy
CalcPolicy
IntPtr
Invoke
BeginInvoke
IAsyncResult
AsyncCallback
callback
object
EndInvoke
result
ChangePolicy
PatchAttribute
AppDomain
get_CurrentDomain
ResolveEventHandler
add_AssemblyResolve
Thread
InitAttribute
Assembly
System.Reflection
ResolveEventArgs
Stream
System.IO
MemoryStream
ToArray
CopyTo
IDisposable
Dispose
GetExecutingAssembly
GetManifestResourceStream
String
GetAttribute
ClassLibrary
Ricffubjahb
SortPolicy
PopPolicy
DestroyPolicy
NewAttribute
RijndaelManaged
System.Security.Cryptography
CryptoStream
Rfc2898DeriveBytes
SymmetricAlgorithm
set_KeySize
set_Mode
CipherMode
CreateDecryptor
ICryptoTransform
CryptoStreamMode
Encoding
System.Text
get_UTF8
GetBytes
get_BlockSize
DeriveBytes
set_IV
set_BlockSize
set_Key
RuntimeHelpers
System.Runtime.CompilerServices
InitializeArray
RuntimeFieldHandle
WritePolicy
get_KeySize
SetPolicy
AwakePolicy
RegisterPolicy
66840DDA154E8A113C31DD0AD32F7F3A366A80E8136979D8F5A101D3D29D6F72
m_1ca421e8b9c2440ba932b66a49def35c
m_6bb09434cd8f4a2891d7645f5776acf1
m_39a52359719d4be989bedacf8e7303b7
m_df54c866c690462e85d461182e88d351
m_dfbae68a33414a77885a315668d4583f
m_d28a751c391c474aaa31f86932bf382d
m_9e19a223a5a64bd2bcc0659eb1224c4a
m_82e43d203ffe4fd0b1d7a92080962320
m_2c69e2c24b254486aee69f3a1286037b
m_ba71d0ff45274699b31f9d8f2140bd7b
m_12a43389a4f14e249d462b028be3c5f9
m_839d84520ce344db9e059c90086d9f5a
m_c0b2e1fc4e624574951c8960de356c49
m_69787d212120410dbf3a910684611f30
m_baae4c4cac544779bd18da63f0c23c34
m_4ad21dd69b85423e938ccd0c997cbb13
m_e91445b750004e22990f57051523025e
m_ab4bf5ccf7984609b1dc6ded1cd471ac
m_1934b844d2ed4072836018cfad23630c
m_038203b995aa40dba115e258b569978f
m_f9605a44367142428be6b85fe020f4b5
m_cfcfbf2a8ae745c7a1484670dbf98673
m_b30ba8f9cd18435d94eb5282eb9a01ff
m_92552535bf6a49b081ee672d1430e737
m_c2a340ec4b1a4df68ecb0bee660b48df
m_70e70a8dcee64204808617cfc889bd7d
m_9f34708d481f4dd7b00d03bd26e08d71
m_23e1701742304a8fa7745b2248366c71
m_813f099057314f84a688773892ebc746
m_6fa132562e6c4b968fd79e843ad9930d
m_c1d4f637981e4d6c9e6ff94ef256376f
m_5e8aac5c35b841319235b7a826eb8196
m_0f2d908d4fad449dac93ab04460985d3
m_9e1b7aeeebab4d3fae8cf563d73bc652
m_cd10a0124a954d8c8f74e942a8303672
m_037228ef1ec44785b5260dc170eae2de
m_546b6966987340acb4b18e425cc9191f
m_d59534ac09184b7e8b69165aecf528dc
m_403e6b936b6e41c5bf6c84553fa82b1a
m_32a9adb2deeb429f8520a41be21d191b
m_06c6fe43ef3d4b2a983ab884f67a4595
m_404b888315074f149d86a4108f7f956b
m_687e0b19b52040c092a6dd5a95e26146
m_872d1ac21b544793b3c3f6de59f6ad36
m_8b4c150c0e9342adac71999a2ed0f7bc
m_fbd358e3a2234b0f9d562f3122f874d1
m_432d6648dd8347d881d28a3b25958176
m_73b003fa739e4b9c8445545da3f32a1c
m_961e48639b90457f81d7fd43ae0ea1d8
m_2d4e22e8e01747afae18709df96497e9
m_4120d084a5a94816a01f25bfecc8a7ba
m_e419328576704ddb909dae93295b163d
m_07687da98b7144869975b0371bccf851
m_fa5f8a717668430aa2955221911dcb18
m_f6589b437f934cd89cd379388853ad0c
m_87e3b91c0c1d4b6ea064b64f2bdc34f7
m_336e0968d9b64078995e81970c92073d
m_f951b5442c19484aa2d5d4973e349bb7
m_fcb15518be684ce9af01f77fecb304be
m_95157eb1f4f442729b6b548f7f9b9f66
m_c97157cca5224f57849b787ecfcfac04
m_326a7b93395a4abeb8ea9c256ce2489c
m_adeba16bd4884a3ea3c791a508721dba
m_10a5f683bd0f41f4b5febfaa38aa2b3d
m_3f7b30a8fd9344849b318899bdb77708
m_64274da417f3448794c473a9f5a308dd
m_90bcbc11d87b493e9218add8ff80d052
m_1cb65b592c4f43b99fec3827bd0f76d3
m_835be56864cd48d09ad8183c65ee781c
m_fce70971b04d4ec281a5921d00b2e251
m_957b8c8f650d4e55b4c6f3ecb426c935
m_f41b735750b945499c166fd9bed98c72
m_c643d4ef23b24eac9d7efd75e127a8b1
m_ac594d5cfd2d4963b3a3bf1129d60d42
m_7b61950ba46443fa9bb40a8c232e82dd
m_701ddb6c643e48cb89377308e8ba5784
m_f0186c1054db4ebbafb10674c99c39ac
m_e72b63baf573438899d87b789f9469c5
m_6ad39c286b8243bf971c57bb69cbd892
m_bbdf5d28bb7544fd93b6abaa98f27740
m_5d619b28ddb14416bc78f84ddd2c93e5
m_9a04c77d8aaf468eaf2b9a9874e58b7d
m_e2e27c90c1cf4906a5bac4595d1d3511
m_290a6a0208bf468ea66b713b906d9c21
m_eb3a7da2d79a4e079a92a2c79c14de86
m_fba8e82505684a309a9a1f238056dd40
m_258d908a847c48ee99ce8e6735267ff3
m_a36bab0a11ad402a8ae17cb9dc4f3a3b
m_242e311b49594d2789dacc6816759270
m_a1681ff81f484c5c9b93f9f14a07b547
m_3313aeef161045669e52792e22052b45
m_f7bc8636bafc490c953a14b6620f1552
m_4810319252504d99847b4920ddaa394e
m_3881a89f5c52442db53287244a1ca112
m_5590253add844de38cfe85a445d7f37b
m_8dc126b835504f6dad03d2542af1cff8
m_a4caaeb4ac3d42f3995dc546ccc5eb9d
m_104f4f975bf847438c297d91a9cbac4c
m_ab1f2cbd93e746128ae33a66b9c78f94
m_9a1a8cdb4b7a432788d6a05203f83c48
m_c32d0c259bde4381a1265498431a39e3
m_3515a1576e7842f2930a2306fed07193
m_48ced22741b14ad5a439dd6cab4cf54c
m_c50ee0c4df29454ab8a89d59dcd41003
m_9a09bbe4abc0485ea9b2c99d920723e0
m_3d40311fbac74608a30e0c4d473ca41c
m_3d135b739e1b476088a7586e66b1497d
m_8acbd920f12b4d0abf0647d01e2448e1
m_611ebd4695744482b75526d67755408c
m_33c99d4756894e80ab4354a2f2956224
m_5263aaf8041146238ace888e90f10432
m_fb7751ed624a4941bfa187e6f55e6ca0
m_cb0f1b52d64a4b9ebc47572308d03bc2
m_1d0cea419c56427db73a2e05e0ff2e43
m_6b45733bc678449a80a3126e71c54bfa
m_9884c1105a4646cfb8cedc2aed0c762d
m_1697df26ccaf42fbb5a050bb36c00673
m_e936f8c907f948ad9b126b0a4b5640b9
m_fe133b43723445769aff278a76697fcf
m_a43d567aa5694a26b8a66b55a5e027fd
ManagePolicy
.cctor
ka985ce2791eb43e49633d1e58d70e971
InitPolicy
RunPolicy
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
DebuggableAttribute
System.Diagnostics
DebuggingModes
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
System.Runtime.InteropServices
GuidAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
CompilerGeneratedAttribute
STAThreadAttribute
Tkkokvpc.Ricffubjahb.dll
WrapNonExceptionThrows
Telegram Desktop
Telegram FZ-LLC
Copyright (C) 2014-2021
$fdbb6f54-76ac-49b7-bc54-ef44cc20ca70
2.7.4.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
e/4S`s5"#!0
T6H-a1Wx
KJ+zX_FO
K0')>)
]2}'HGQ
s@*D_7
sMpJ)>4
3JFl8
Hw* .7^;;Z
r(8xcLH2
*[e;W#
;$uD6K
{4I1XfU
@r>WhE
&)jUPX
ij\l8@Y<4%i
4.\0,3!=
[MZtA/E
0Ud4y/
{1M2u$
W?z7}P
#xt^Oc
wBcj.~
zD.3\wgI
pJckuok
=,A4wX
k+-Va
I30":$W
Ztfl:W
mkEBlE2e3r
*Pu9Ig&
=CIg=I
vjv$FPfZ
@<J&Tj
lzfe0 Y
\N[|ZH_
<vAz9E\=
&\f2->bG
G{*xbAA
i!)BHF
t,Xu,P
Tcb{6g
\[fI:~
}W'?OP
w4sI%L
hd2 ??"
Lz.aC.=
OVG|%"
cnk\j,
\" u7?
e'``$
P1-kzO
PaM`D8La}_)
qF>RL9
/t646Y
mjQ%B%
`8"SR!oU
A'#!.'r5
di}^vvk
_i[e-hs
d(ALr?
p&k]&a
F7" Qc
aDw-+6
<5G/D?
/PZU%r
^_F<S*s
{{O?-c
EsW(w~<>0;
-Fx9d1
+&.=[P:E]
ymUx{d
f$%:.]
If?ePY+
6Kd0EM
=AD|zEi
iECQ9e
X$ptZm
!c#lmqb
/z=Y?zG
HBp:P[
uk}Iqf
3:NvEU
oLedqi
qz4p'7
UblGOl
MxpD8&
0"A9G<Qg9
M?S9"6_uv
cvxIC
(8h\kH
"&KpJ
Glz{C
A)-8v'.
`B)gZb
RR5*<=
{ &UO_
+d0(R2o^
+RYN}T
9'*JI2
**DJ(i_|']
%^`?Nr
STie1t
1q58,%
|_0%Hr
cgi5G?
.K?Fc%
EvvI"8
Co*]i8
|Z@k&#!
A^]G,L
;m*QoK
B9IL<7
kLP7K3
0uls8W
Xjbt:r
]2}Lhb
3HKo)d
@wS6+W
<!yN}bx
YNJ}fV
c} >vwV
%D UyZ
*]a;Yg'z8ve
W{=.a
#GKK+Q+
DvNAt:
CR5A.y
U*?aTF
sj(~1x
OdLiiuTN\
{e7a63
37i(T9
f:P N]
RKkPi3
PfXc1k
41!"I$
CP\_{0g@^
V#'Ph_//2
td-Imq
;na`'v?
xdm,E{8
V0Y^?`
PT(28]
$iM/xV
rTEc?f"
/Gn1~f
(EUpH$PF
rosF4H
dIlU45
$=F6_.7
ukfiGI
{LC.iH2
X)3G8)
+0bro|
NWqq(sc
^tApP(Z
g`qjA9
92`Gcp
-L^Ic
6/"e<B
Qv4'+>
_XVQ1)
Lf+"*V~
:Ee"XO<XQd
%G{bgH
!QU0g|
<|=WFp
VB9I"mf$
:&(e0>
IE<%8&
5iPGBK+
sppGym
*<m@T]
x!E;E0%|1
'Dtnjx
-%y[,9
`Cx:Y
"Qy;3WR
~5d3>)
rvKx!R
hO.}osA7
4j1O~mc
{3j$YRl
P.Q)IQJ
yV|n2/
3(gl!h
Tb|r|
on38WW
9<jD"3
nQXzyn
VZnRRT?
.s,7IR
2w|n^f
v&",d>
F%p3OUm
R7U$-D
;f-oI0
h\dC.{
8QBe\y
0[gl#q
W-cd95M
A;>/sMt
7l'a|~Q&
#2&AQ*r
1u_NbE7
^!EStn
WY71*K
%]x0_P:
,_nvHe
v`eIXd
F\uf:F
)8wK6l
Ykg4rE
(5r<*a
g@Y~x,W
:;Ov$tu
-.x`>7,
#Er~~Ku
;rK Yc
MJ{OV;wB
03+10G
2{*Z;7;h
:fA!Xb
|#VR#xki/
>5 {nA{
?e/x99w~%
LM('64
6CTyd
c:}1`;
3^&EXX
.qqt,mwUe
HcD?(5
[6^dyT
GkK6{T
6oe6Nc
ESbrq0
?Ft \B
GA*s\)g
b]i6:>}
_]i!m>
B;1OC<
#<uWP`
,7*z]rD
%9J%<y
/dW;(R9p
oV>[<g[
@4ZP:9
Bxhv$#
?~Ua3z
#Y/^?r
F'9#,f\
r]N,y[
MELoFEWT
89G&ol\
0`o9ar
Rh"JdJ
|#-:qAM
V3zj4n_
"D=b5;U
B9!1OQ
se7a2RfxJ
w[Fjcdo]"x
L8C{htBi
Cg(8ds
N|{e0u
ro8q\)*GB
E_]GwO
]^wc4y
VM3gD X
.`~Q&m
YC3h.!
CmI`U\*
_a KLr
rS&u3!
hE~)rL!
/wXOP i
DISJ1~
viy%ZFd
uJ0*^-
eKk8C3
|/a u?.6V
mQF7]6x
]hq&&V
n!rV]D
]e]vk
K+J]Jp
3&F+gld
2IvT=-
t?SF5T
q/NB~2,)=
J\JNGN
qNn;#
Jb#y&!
n7]rGUT
l|{Hk='a5
04?dz2
|RKJ}N
!0R3&2
aiCclL
;DH@#P
']iTu1
tL(Rf~
MdpE.Yn
y?@5?Hv
icoXy)T#
0o5a)zX
He^t$*a
A-"'+]8
FlL;IM
{'[[Mw
iKos'g
O_mN7",
mkag5,P
cymQdg
@wY,%B
*'W$=*
6R`seR
+lavU2
M|t_F
IjEE
3KHZ=2
\-XLJQ
-sWS%D
/?#M]z
g'Tws{8k
=2z-|3
%nWM1
$-f?~_
V')x"@:
AK[Itu
SW@ve+
`Dk[-h
L@hn(b
3UuGAL&
/IiHy\k
~X\!Lo
P4lshR
,A`x>:
l5o}}}
r@wGpz
D1EP[\'"4
+k~W,5
FR:ewc
n%1\=y
3EY$b=D'
]&Wu:W+
SU]! $
y$UDU^
em4jd-
5hwBo3}
?$6`k^
gF*i#*
.Vc>/71
yht_C5
KeM$[s9
<im&W:
3u(+k)
*GK-=d
B?)ZW%
Zez$lKcc'
82`u"B
)hZH~M
1:@*e3
[7LuV>
)3|p7
",C6v8]o
>k&OeY
3~9sG=H
bz}8 6
Eft~*j
_o?U):~
/xvwyK
UBZA$<
_trZxfY[Hc
/vdLf$]22c
mFe|1h
us5J*y<
DuJM8:
a3L+kD
Y'| zGkBedz
KS{ZW%^Y6
,;V9OzG!
v:EU/K
Vi%8ZE
-[u|F}
rEbWC}8%
slk?S26kW3
6l9;Ff
9xH0X3
IS4I f
Iw[t#o#
lM(x^t
f`Xu"y
7v}#Q8
/eo&9x3
20Pb6F
QhLa\`
L7EalJA(
$'CUsXF
^FHM4O
\kL&Gs
4U]oJJ
LG.><R
)D~Hv!
Uq(X'u]3y
>b:C|7{
<tId..sz
Z,1DLO
oO,9sG
.:0Hx>
E`?{:d
HJrQcB
mOQ_d'
,m bfW
_8G|tHh
R=V4P~
{aQBm2
j*.<S\n
G%Jr4E
fCz#QM
X)$P3
T*F>qD
uAqp w|
6X4S<[
q/L:4l
_CorExeMain
mscoree.dll
=4IDATx
#G)E4A
8E\QAi
'$]9J)b*
MrBZBB
<G&dV8
)PQiUX:
msG&@i
&DpnXR^
|&j*B!
=k=L2&6
|<Y-Et
lJ-~xQ#
@}^+{*
ys?_?9
UJ]$l:
;t?M0;
H?)g-8R
=g*n=wZ
t$Bl{C
'O*\P~`
="vH)p&
fxh}'b&
=F?H$$
Ah+iG^9BW
x,ok`W
al(%@"
[LT22f
22GXUS
n|xVy8
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
Greater Manchester1
Salford1
Comodo CA Limited1!0
AAA Certificate Services0
040101000000Z
281231235959Z0
Greater Manchester1
Salford1
COMODO CA Limited1+0)
"COMODO RSA Certification Authority0
HCgNr*
2http://crl.comodoca.com/AAACertificateServices.crl04
http://ocsp.comodoca.com0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA0
191007000000Z
221006235959Z0
943491
Private Organization1
Dubai1
Dubai1;09
2Business Central Towers, Tower A, Office 2301 23031
Telegram FZ-LLC1
Telegram FZ-LLC0
https://sectigo.com/CPS0U
Dhttp://crl.comodoca.com/COMODORSAExtendedValidationCodeSigningCA.crl0
Dhttp://crt.comodoca.com/COMODORSAExtendedValidationCodeSigningCA.crt0$
http://ocsp.comodoca.com0#
AE-943490
Greater Manchester1
Salford1
COMODO CA Limited1+0)
"COMODO RSA Certification Authority0
141203000000Z
291202235959Z0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA0
=U5W5H
https://secure.comodo.com/CPS0L
;http://crl.comodoca.com/COMODORSACertificationAuthority.crl0q
/http://crt.comodoca.com/COMODORSAAddTrustCA.crt0$
http://ocsp.comodoca.com0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA
20210428095006Z
Greater Manchester1
Salford1
Sectigo Limited1,0*
#Sectigo RSA Time Stamping Signer #2
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA0
201023000000Z
320122235959Z0
Greater Manchester1
Salford1
Sectigo Limited1,0*
#Sectigo RSA Time Stamping Signer #20
https://sectigo.com/CPS0D
3http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
3http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
http://ocsp.sectigo.com0
New Jersey1
Jersey City1
The USERTRUST Network1.0,
%USERTrust RSA Certification Authority0
190502000000Z
380118235959Z0}1
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA0
?http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl0v
3http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt0%
http://ocsp.usertrust.com0
rRj;B7|
[C]e=P
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA
210428095006Z0?
New Jersey1
Jersey City1
The USERTRUST Network1.0,
%USERTrust RSA Certification Authority
Pirrfwydvsni
Tkkokvpc.Ricffubjahb.dll
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Telegram Desktop
CompanyName
Telegram FZ-LLC
FileDescription
Telegram Desktop
FileVersion
2.7.4.0
InternalName
nanno1.exe
LegalCopyright
Copyright (C) 2014-2021
LegalTrademarks
OriginalFilename
nanno1.exe
ProductName
Telegram Desktop
ProductVersion
2.7.4.0
Assembly Version
2.7.4.0
Antivirus Signature
Elastic Clean
MicroWorld-eScan Trojan.GenericKD.37057650
FireEye Generic.mg.d44345634f9dbc3d
CAT-QuickHeal Clean
Qihoo-360 Clean
McAfee RDN/Generic.dx
Cylance Unsafe
VIPRE Win32.Malware!Drop
AegisLab Trojan.Win32.Malicious.4!c
Sangfor Riskware.Win32.Agent.ky
K7AntiVirus Clean
BitDefender Trojan.GenericKD.37057650
K7GW Clean
Cybereason malicious.0f1c36
Baidu Clean
Cyren W32/MSIL_Agent.BCR.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Kryptik.ABHY
APEX Malicious
Avast Win32:PWSX-gen [Trj]
ClamAV Clean
Kaspersky HEUR:Backdoor.MSIL.NanoBot.gen
Alibaba Trojan:MSIL/Kryptik.e96b2a12
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Trojan.GenericKD.37057650
TACHYON Clean
Sophos Mal/Generic-S
Comodo Clean
F-Secure Clean
DrWeb Trojan.PackedNET.821
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
CMC Clean
Emsisoft Clean
SentinelOne Static AI - Malicious PE
GData MSIL.Backdoor.Nancat.3BLFET
Jiangmin Clean
Webroot W32.Malware.Gen
Avira Clean
Antiy-AVL Clean
Kingsoft Win32.Troj.Generic_a.a.(kcloud)
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Wacatac.B!ml
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.Generic.C4518606
Acronis Clean
BitDefenderTheta Gen:NN.ZemsilF.34722.xm2@aq5tgpi
ALYac Clean
MAX malware (ai score=99)
VBA32 Clean
Malwarebytes MachineLearning/Anomalous.95%
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
Ikarus Trojan.MSIL.Crypt
eGambit Clean
Fortinet MSIL/Kryptik.ABHY!tr
AVG Win32:PWSX-gen [Trj]
Paloalto generic.ml
CrowdStrike win/malicious_confidence_100% (W)
MaxSecure Trojan.Malware.300983.susgen
No IRMA results available.