Static | ZeroBOX

PE Compile Time

2021-06-10 06:56:15

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0007d164 0x0007d200 7.99020457416
.rsrc 0x00080000 0x000046b4 0x00004800 2.51724314741
.reloc 0x00086000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00080130 0x00004028 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x00084158 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x0008416c 0x00000394 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00084500 0x000001b4 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with no line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
i@9X -
UWQxef TWQxa
DX ]S.!a
E2e kn
B]=a #
bf ;X
B]=a ]T
{X |Aq
{h8q
UWQxef :
bf }bZ
Z]H.
b +]Ora
v4.0.30319
#Strings
ConsoleApp15
ConsoleApp15.exe
<Module>
ExpressionWatcherAttribute
Ubntsxgpdyqmjn.Attributes
Object
System
mscorlib
ParamInstanceAuth
Ubntsxgpdyqmjn.Authentication
DefinitionWatcher
Ubntsxgpdyqmjn.Watchers
QueueParamStruct
Prototype
Ubntsxgpdyqmjn.Shared
FilterPropertyClass
ConsoleApp15.Classes
UtilsServiceQueue
ConsoleApp15.Queues
Indexer
ConsoleApp15.States
ErrorDicPolicy
ConsoleApp15.Polices
Setter
Ubntsxgpdyqmjn.Objects
<Module>{9f238842-07b5-440c-95b1-6c66f0135130}
.cctor
f0659e5905454a5e99b9752afc78b700
_Product
_Database
Dictionary`2
System.Collections.Generic
String
Boolean
m_Thread
m_Composer
tokenizer
MapProduct
CultureInfo
System.Globalization
get_Name
CreateProduct
Assembly
System.Reflection
AssemblyName
AppDomain
get_CurrentDomain
GetAssemblies
GetName
Equals
StringComparison
get_CultureInfo
SetProduct
Stream
System.IO
InterruptProduct
DeflateStream
System.IO.Compression
MemoryStream
GetExecutingAssembly
EndsWith
GetManifestResourceStream
CompressionMode
set_Position
IDisposable
Dispose
RateProduct
TryGetValue
InitProduct
get_Length
FindProduct
ToLowerInvariant
IsNullOrEmpty
Concat
ValidateProduct
reference
ResolveEventArgs
ContainsKey
Monitor
System.Threading
op_Inequality
op_Equality
set_Item
get_Flags
AssemblyNameFlags
PatchProduct
Interlocked
Exchange
ResolveEventHandler
IntPtr
add_AssemblyResolve
VerifyProduct
Format
Console
WriteLine
CloneProduct
result
second3
HttpWebRequest
System.Net
StreamWriter
StreamReader
WebRequest
Create
set_ContentType
set_Method
GetRequestStream
TextWriter
GetResponse
WebResponse
HttpWebResponse
GetResponseStream
TextReader
ReadToEnd
JsonConvert
Newtonsoft.Json
DeserializeObject
GetTypeFromHandle
RuntimeTypeHandle
CSharpArgumentInfo
Microsoft.CSharp.RuntimeBinder
Microsoft.CSharp
CSharpArgumentInfoFlags
Binder
GetMember
CallSiteBinder
System.Runtime.CompilerServices
System.Core
CSharpBinderFlags
IEnumerable`1
CallSite`1
Func`3
CallSite
Target
Invoke
UnaryOperation
ExpressionType
System.Linq.Expressions
BinaryOperation
Func`4
Exception
_Config
_Instance
m_Param
m_Class
m_Attribute
service
m_Property
m_Token
_Interpreter
_Parameter
_Importer
_Server
m_Descriptor
task_end
StopProduct
CopyTo
ToArray
ComputeProduct
PrepareProduct
resmax
LogoutProduct
Thread
ClassLibrary
Awbznzeq
ExcludeProduct
ConnectProduct
PublishProduct
DefineProduct
PopProduct
ResolveProduct
CalcProduct
AddProduct
CountProduct
SortProduct
PostProduct
m_2ace859e390746bfac6aa14972c1c745
m_ac11f8dc954b4401b4acc45d14f485a9
m_8ce319187c3b400eb1a4157bbd37f983
m_4866d5ee5b5743f4bab3df1232facdd7
m_4ec12c8e02d145c99ddfa314ba111229
m_47552af42cc64529b49757b739a3c261
m_3b703d62c99b46189da7d0e5c2c2393c
m_b8011cdf26b24ee0bdcdce2f70e38b23
m_bcbb3078044446d1aee631c1ba630d19
m_6786137425db47208a42e442c7ac7427
m_408e27c1e4564a7188f3fc0b9e77bf7a
m_60115321b87d432985ebd52a1ffdec8f
m_ae250caa558f4b37a71326ee2a496444
m_25846643b3fe49e8b0be5ce78e49de15
m_4dd54512f86e459cb11fc8534b3416f2
m_ea43fcbd29864af283bcb39fa7905dc6
m_d26f07363a474adca3680ff7dcb06601
m_8b220720fa6e44f3b6adb2d2163ac5c7
m_11f542a385b44f05a63febb1e362140a
m_eedae3e22095467786fe77b2f4eeff1c
m_a32e8fcb4deb46eb94ed4d1bc141ab50
m_ca262195dad54de8bc957e77d22fd92c
m_98e4b0b5ac0545bc95533ec551fb3eb5
m_7f2132475b3641fe99ff872a85fac17a
m_55375a3b8bdf4bb4954df92133b2c0a0
m_91cdaff8e2064af680d09a3301f54b38
m_8fcbbe5ffcca4f80a9e29d1373ef7d43
m_1da6864465a043fdaf600a9df2f068f7
m_5f8ffb5a571949889f52134cbb158b74
m_4d0bb57b21be44acaac36722d12bf65a
m_67edefb37326403fa5270784dbd6de7a
m_d986ce1aae824b4ba7a8625a5019d1dc
m_c58629ef7b9148338f654f575ba79d58
m_078a29ddf3ed48f8bcd20d5005f6015f
m_2b2560336e5f427fa0dcf839c513fdf8
m_c174851e65c2450abac8068117e5be4b
m_49182283e5c04cd2beef03f67a6ed91c
m_872c219c5a594cb58cf190a59ba5b12f
m_b5c33d31fb38429ab90518be4cd674ab
m_b68b1c2f4c24451e86775104f7d8d989
m_17b472f02238437ebce2d3be4d7aa657
m_82d54b94dc084751a037b85eaa9439d3
m_5af5742cb91f4b8bbd0efe379632f827
m_92c087389dc049f9b2b09918331131c0
m_b63edad24efd46bea04887c0deae83db
m_f554ccbaea5a4e1e9df991124a78e80e
m_80f7f253e78d4d9b864207b5d787935a
m_da37c149f44a4b90818bd044563cd099
m_cc1bf92ae2264bb592027d2cc2f3c4bd
m_f7908df6e72e474f87d1536735926074
m_134e933078b04caea52cd94682b661b1
m_c83ad6578ab14fca9d0fa95381673cf3
m_794b931f2dfc4e2dbae582e8c5d0938c
m_bd303e7f6f06495bbe3a0fbf1dbff20e
m_7c7489a1ecc943bd88dfea9600b57acc
m_5c321d6a3e9a4871a9278fb1c8e2fea9
m_3e67801e5d8c4af19a4a3d91761ee633
m_9b124b854d744f7bb118854beb0ffd8b
m_0ddb21d8b9b74d16b27569eaeb5adf60
m_6a1004778f7a4511ac2915504698bbd0
m_5792e139d7f44de5bdac541d7e67fd88
m_1ab0090c841045a2a18ea9952559b1b8
m_ccf51f6a516646d8b14249e6d1ef9202
m_e70035b47c5e4dc28343dd082ab3f3ec
m_e392c0758cfc463fae56d02ae44339b0
m_3e2cde0ea320465b9e8e7d190e177e2f
m_a4b9912ef6864b058f4b3cb122abbdb7
m_f6d99e39b277440fbea16ec902222119
m_7af7c951d6c24f1d9a60dad73d16d41a
m_20dc7d4332544065b7a46a428a71d086
m_9c8e9c68642c47d69f927069f05b8bac
m_dd40ab7f883440528e67283cce34a3d2
m_075a88696e73458e8e7c6694cd88ef33
m_e7b20b6d8b464060b825dbc7831a743a
m_fb3fba07b4ba42678f8f39af2c9b0e48
m_c9adb295ee8f4ed0b1d9610648a78cc9
m_8254d8cb611a42879de37941fe34526f
m_1928cd272f5d498fbb453f62437e5af1
m_d1f1f9c973b34a4494c43ad9bdcd239a
m_e440a997e58b47618fe26de6442b8ddd
m_8d89e2182e244b6b960588a53a2436f7
m_009e33b25aa444c9b53f883f54c1fc5c
m_4f19e683daea42ffaa8037d807946beb
m_0041a22b2b644f188bc021020f9717db
m_81329ba44337487da8f9cc1463b0076e
m_5c13852a25b8417591a3fd3251a7bc22
m_f6c7a2b51eac4fa4b3931831c3c8fcf1
m_cda1328b82464f2cbad580b61b42ef65
m_2d964b1230b0491688ba629420816a6b
m_a5ff8fd9ac8746829c2f8ae3c0187e7d
m_ca7c4d8755b74af38008aca6ff5ac77b
m_250ac0b6a4d94c669a8b7ecd3a0c3496
m_cdd1bd7290e44993be6a1424a8ed8924
m_99213a2c3de14324be57485103880231
m_2c90da80dabb4371a42e8914c4f5d1a9
m_e8815e27761749169d5e220967fa9d47
m_a937fae236b644368e5286bc664e36dc
m_ce3f1d31ec36434b9cbd699b702257d8
m_ad0d15c36f0b4e568ceb40940a486e16
m_5a599c65fef748cf959e43a33330ffb0
m_928acf749a654a39a3bf0d7affce2cf5
m_f7638ba8638c43d78c2e0202396fb3dd
r9f72699761fc4667b50b7074b8549ac1
AssemblyTitleAttribute
GuidAttribute
System.Runtime.InteropServices
ComVisibleAttribute
AssemblyTrademarkAttribute
AssemblyCopyrightAttribute
AssemblyProductAttribute
AssemblyCompanyAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
RuntimeCompatibilityAttribute
CompilationRelaxationsAttribute
STAThreadAttribute
costura.awbznzeq.dll.compressed
costura.costura.dll.compressed
costura.newtonsoft.json.dll.compressed
Telegram Desktop
$1e5858c1-f6a1-48e0-9d02-47cc755d44d6
Copyright (C) 2014-2021
Telegram FZ-LLC
2.7.4.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
WrapNonExceptionThrows
nq,a7.wA}"
pIh8\
j`'i9p}
(TTChF
c(<Na)
3x,Q$6'
|#uEL![
!fC2fr
Ll8Y.R
`=.rLP
\&0+UVpy
_WsI %
o;jQ=G1
=}F]G_
cjwiL_
<9Fmqh
eOd(I.
O2, =]v
-ox:{t
x>-#?b
Ymh02O
Kz.rwx
lR+:OVU9
F_L]:0
8N~\l0
v7J;3+v
Gk3-^8
:!&O{k
o^/zaf
g!3Ea}
Ju]&1eEuZ
z'L74i
W-Z:]
=1^uV3
0fUIXZ
<&2l:<L
D642=g
yH&%7!<
8bdEfRf
k2UPdJ
GC=H$$
D%Ni$)
OSZGz?
_Ne~%~
"=vzX](Q$
?V`;vF
``5bXYG
Ez@MQM
JYHK'q<1
Ymmin(
{mem,#7
ezoOtI!
ye.;:H
ZO3,{9
b1gxH}
n2Q_&Z
"j6xulo
z[`'7$
5D:L3R
+>HV-
NS``Tg
|B}B|Ux
.Kc^%Zv
!^/!Z3
#0To^B'
:-Ce<E
DeyBu;
mc#mci
BTxy]7Z`J
t7g`I;
(Ol|jx,
9+B#$f
m;[KZFp
Nh].0z
EY[\d<
_uuyF5X
3~-VSc
#>4k z
}dtc?z
b,[ag"j
tYz94s+
Na\cwJe
*4g;2|
TiI;Ro
' NLRE
!1[Puk~P
Cu=2F\
oyn:c
s"T%{c
T(kf?o
^Zz>#.zib
7&zSY6
ZkbnzK
/^sV0M
ON;]gr!Mi
(E?}Vd
vpPoY!
\/8LkOn
<i>gZ
6;zG@yZ`uc
eHh:CS$4
8WK>bj
zZa'AG%d
o(,ZBS
f.UAy.s
'mQA1$
[aki+l
ZcRzZ[
iYZGw]
.@y;_p!
X{uJC+
O6/i+<
Ioe,1N4
:qzH=Q
@$reC}}X
R& y}~1
l_,'a%M'
C[Ms24?
)`L]=N
1OiCP:
(fchX]V2hx
OkA?)0mQ
kJYDTW
%LM7<3TC
,`r-'A
n:+tq[
Y\`o@d
@8pr`f\
H.K0#X
6@qPu
,qV.PAPu
@i(c<8
84+BoMM
O&L~R~R
I?Lz!SL
E=W^t.m
13+/3+
"D8EB8%>{
^5;-Hm0
Rs3&X%P
]rnJ^V
oUoq*']
@$C3jO
z3Vv{n
,7;f]9P
d9v*Gr=>
NxXt1et
q0ZqJ
9V~7l8
S&&c6F
l,44((
?:ZBccB
oI~EA*
n[nM&}
_~z.VZ
K#DY~t
:Z5:FT
mbE$fzU
o*Nvrc
Hp]`sD\
Ko^Z@o
YJ<F9a
*Jf.R}
g{|!m}
_0pQ^e
bV9)b2i
jPobQ<
-r::7[r
PaP"}+
LHHR*R
QbMWwt
!`r'04_
3^2J U
4l]y]|
_E|l6;H
Xp>SYqo
Wu&4gu
tc2'on
+y,#.=
>-$N>dY
WYv*A^
m;JRmkzkWA
XeSq0A
BXfLXK4
@ELHKH
( ~H$G
SBzG!+%d
Pji $n
v]_t<.J
\O&6UT>gY
H,P;y/q7
U~M##>
6D+Z;K
!wwdxI
r,>gN'
:1B+ss
et%h1z
CcGYZ[
|0>}J8
rkI{L+z
_\b~3!l"
5@+(c'
D1 .ls
yQTnG@
AobeT@[
umIM]Cf
2z O]<pT0
L<m{QZ
s%#?zc
1CeN3d
*a<En"
,|(0c"
AJeA4}
00SMe]"
d<+MvZ
WYI*+9
]Ki;K8*J
W.W'=S
X-Sf)g
:]OnOM'U
IG~"&#O^
Zgr>>>
dzNN.sR
KHUkB*}A
ivKDfZ
c3}qzo^
4l[C;s
mbZfHp[Y
:+-"Ge
.ZMh@r
4|V^PO&/p
)_TIC(
6EW{wld/
6<.^6Xc
[Z58=1u
pCFd$k
CF)440
Pjlfrv:
v]I"BjlC
UZrw:Zw=
T5$i\Zh
OV6T31
zQ\h/<f
6Dx!A_w
E&RQj#
Qk}076W
?^4X}C
)<xbm2
Ix+)!
\2AD2A_<:
#g&h'\
J[~cn
Dz*&W0(
Vvt\@i'W
Phq<e,=
8"QQ|~N37
9.fPN~
;HGkQ[}
M#P[00n
-.ofF@
nKecc)
97M:~H
qn%<Tk;
-3j)=[I
+"GuKW
[U;ltjg
D!'m1P
O;_57A@
5/8 R+
1;6And
SChP.q)
P\K$BMu
#2bEP+
x3h6ReS
62]%t{Lt
z|vmOk
61)km9
<q{#-u
pq?^&#
>`.&i>
[SI^&G
Wk%?6C
eSU(K]A
30";^
IKL$'yn
I~1g$3<
FUZ_01
)<aSc>
hY$4Ia
W5l%8]y
2s^ze_
VEjQSq
ZJeh^9.
qp9FNDI
\;`$E.
u4{3N%
bxgs2`
HA3B8@
Uh%_2Iw
yMu-?
i]w}k9{7
dPIY#o
+H:Qq^Ty
3O?t1-
OXTw 9J[<
Mld\p
#N{4
)p;.)m*
;W4 5?n
m%tbkD
5OAo>@
6G5b(EO
e_xSJt|
d4uY(7
h*0#2:
Dr]*qx9
&8WEsm4
^)8z/R
sn<}XO
eEeXN_
;!qqDMiL
G=1 MC
== ^T
f"+k()
rGAh[Mxt
sCv"hI
pKM=p6
xq_UyR
k]NssW
S{=?"*
Wc~Lw
/c= Ogh
8iuwU|
bX^K^Xb
5q2lXj
[Hsx~eH(}
%%$Q)4
@R&mvNK
_[M>!?b
ID$3{!
EcDn1U2
A?P3>hS<
w%ih?:
2>:KYQp
gqD0q}K;
!jLB#v?
gG'bs'
|#`usgh
nPit$I
lIJ$HFL
^.D4rx
Fkkk3N
GcF|ZK
RY"2/2H
Bz$AXM
71*}Efx
:\4tbr-
|~:%_.+
YW_;'A
6gNRK"W
{+:f*"
4n*Mv-
!@Rs(<
vTHx5RP
ABYec0k
O\;F6f%
;$Q$Wb
''&g:w
v# fF{(5
k]HLhd
s\DHCC
FwAlr
n8%R%2X
"G0B@
*I"i$%
Bx[?D9
nM_PHmb
Qg}+i&
!QF/6\
y9z4,lA
@[pbak
<rLdH0
!RF``o
8Ftdk4x
p*c}fVeCb
;*F~tz
J=PJ0:
1jzW)|c;DQ
+:u#)^
+Lf{OR
TN,Uw=}
1kR2mP
GT>;vb
]=?}cS
]}wM?O+
8}wQU[=
wh}a^I.O
K?>PM[1
9ART
p+d ^6
zv"e-d
fo3w:?A
Y8qpe-J
>u%XXJ
R2|j<i
3LhQ@Y
J]9Gtz
!SXl[G
+BwrSR
A|h<uT
,Rs(Gaa
JB~J@~:~
,h<_eM
r`dDT+
5l@MR<
Dw[2r3
[7HJ|V
<HPoAQ
[#%ob
5aU1Fm-
tsD3A
_!4s^S
$jW;g8g
bQMBbRB
ywb|wT
GJ&C[RT5bJg'
]}2l{Fe
W%aH?g
)>m{5G
W\Xjg
)&|:Gh
(tQn64
s=A[US
zC{sGT
Y,-<)d1
afz@k)
DkG9n,Nwj
iFJEG7
utUt4qtUq
6NWcq$
M`.i47
JN''_#
2l1KN
:FN_,{
wehtH/6
9R\SCv
ipY;1C
z`W+63,
.6\^xr
7~wX_M
b?MTEp
PH1/mouO
#hLjLp
5gz?$3
R8gWp2
9w/nwb
<=k{/BG
vO)Ey]
l3qEU2
1 |\@u
A#kliHV
}'8oW8
axC438
hzQ[0G
KneBF3
,9|-H>
}=8]@2.
H=evA)l
^-6_+St
v`aAk)W
z3)@4
tw _LY
tLAcM.a
7yNY1a
# >SV>IR
R|G-E1
*=]Du`\
:)XgU0ru
$Lt0_"
UHraqS
z6~\Gf
t, ^M>
L6z/+l
Mj!z.60r
vJPXX&
(?R6}N:
@iY9<L
. as9jO
[zuvVJ
C>NVA|]=
S*VIp6
>?u'gr
%Fl}<b't
z;|%h\?
\B,<w{
(.-VL;
Sc%0Jb
&KPNU|
a&#s X=
Abv\6>
s#.>1K
v+hLE*
LJ4dRC
U"[E6D
+4MVtL
}?z/}g/!
R)|=$7
bU@m{}
/DN|YK!
6\4/?B
{mJY=fGd
rx?&/CL
DwuRnH>/bG
Vx"Ma8\L
S+Q;Ue
V;l&#L+
)| 1U4
Me3%/~
u_ZZ3=?
Ob3L}TL[
+[oLeD
fK{Vx>
Bg{\ub
_VZj520\
U_aE71L
xIQE2U3
K#mt4i
fIw31T{
49d+sm
"gOGE\+pc
F!&+3%
6)X2I
uDrD2q
SpeTOSv
.5meh|
or$knJ
>ojEPw8
edyqos;
u/1yw8
*hT^J&
C-hu-(
A{r-8
73$c0H
&s C_k@
^%K~nU
*x>6EF
c'GCN1
aXLy#t
m\pY'~
qcLL-p
|SKwV/
{.;K)j]
IV8w`x0H
Yh/}1hB
K?M>W>
]|3O?^
_^ht<Y
p8.{QY
k5M?DN
_AknZgZ3
|%&RAJp
e46egxY
'zZ56YNq.o
KJ:4"p@M
?PwinJ5
13m]1{T
7vG%07
RlH%X/.
x>fHLX
SE!SVu
pMP<-~
(ZD1aE
@0;[=+
7DT#Ct
f\Zp$cN3
CnwDII
Zo|_6I
Wm0UkeS
s<N# Jf
SCz[i[|
lO"h?(
c5:6.J
oagjsMB\
)@a`f(G
u,<M,?UQ
I+^GVz
,R8W!h
nX6Cpv
F4[oS?
<.@*7Y
y8gy8g
qj}8gW
BL37f;e
/:@+^"
dW/J[@
5U+_sW?c|7
N4Avh:
HXb^WO
`pqlw"
ZoZtd3
I7|#]=
2m@NL>6
4I*>k|-
bb\ld'
:Gcz;>
^rF@kDJ8r
UMQL6@&
k(Q;D/
/Dqu>n
u+cmlTk
%[f9&HH
K/`<]YK-
(g{J?R
P J1N[
4D"8{B
+'Jms@
QCQ\Y.
KD1";V/
Sl^4*}
B{\!C[
Bv\,!=
I:Em06
5B@z%!
%|B{Bo
5Ov95k
SW~3"oNU
By#y<F
c-\R,
tX_M.e
{P^#.O
S\2G\8b8
\5@}7Z
92_/7_
sY^`~y
F+>")~K
7`=o)
k}?q./
n\(a_?
I.e>nH
?Niencn
hok6nJ
cvT|W"
;fb|?9}f
?YOy|B
C|ZkL!
*9^17Q
F1ysgu
2.a}u $n
60;OP
Xdx_VY"
4rV)V^
/%5/pO
y_gy72
x|/7ANa
y2ris|
9[oV+X@
H`WL/v
R}!|ijO^
$)#GZ|4&YQGY|!&E
ZR`oR@
HgBV7X
p^'MOD
An\{:/
S;;C;`
cwy{pg
<}^^|=
&fPSyU$*h
a\nGoG
3d<&JZ
2SnUaYR
=?6xfW
z>2Gz[
1*FzM^
Y/|v?<
|kH?u0
)r?0Wx
\c,IcI
'`o4v'5
Hx#:B:S
|{Hg+|
C7r_u#
w`OaOc
,Z=N>0
/)l.\Rxb
7'}=)#?7
X^\^Y>
,{]v]n
6YI>$]
js<=v|JH
}oy=!'
p@r9P%'
;P%CIOBW
Id x>P%.
wSH1P%e
b\[%[qU
(P%-Yc
k>qc4ZD
Je/4W*
94W+_Bs
r*47(K
cTFIF4co
}QtBq~
Kp4+w
kqxq,F
\\l..1
$qKR I!%
7--(."
BWIYEAYUM1
4RTZTR]]XY]VZQ
SQUXVT
M,w+"-h
!ij6z#
`KWr@Ss
$*hmBT,
i5*ExC
gRwjZ>t
y|BA,7
LJJ/9Z0F
Mq!]$e^
h9=&||
z&$Mm2
*qDo%m
\mfuE}21
f"v^M>
r),EWg
*Y8y<
$ks8sSj
3($"sA0
d:o(hA T
<ZN4QJ
NPeiH%
]E]y9+-
B>7T2{Q
I~ya3)yE
7]Kx/K
_<Q?'3
Fb Yv$K
L>5/.g
3lkB|
|nHF>n
ok%CYg
`q[gNf
milwYvjl
o<PFiAw
GEj4.
+z.v>P
ZS9>2o
1|Q|wC
ECvyfBY
3]|2tsvP
-znd{_
&iz;NeZ
NxYibo
/MA$:O
4;B9o3
;=e6#$V
L,7sWH
3I25.I
n.D_n\4
sr#0$l
]oX$w
?JMz3Y
'i@'i1,
YpB.YL
U8("pdm
5qI7^A
!6zICh
9;@lzdF
i<xC 4
>t7;t{~g
"wz!gz
h!]i'T
;V`aan
c"dX%e}^g
/hU?(j/
2:9!^:;
zG&n<fJ[
KOt+]K
}t5P?*
Y%BWxBW
C01'mG
!n88<8
ed(.#Ej
(|ha^nx
a-t0L(
; ;;ovrqvQV~
U_ch7c
N+lLkj
VP@HBDC
M%s|^N>
KbF2#H8
~b$TCo
@6Yxsd
bsSN_>
jB6^m}v
kw&/ox
D=>7mP
iQ<~H8r
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="utf-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" name="MyApplication.app" /><trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"><security><requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"><requestedExecutionLevel level="asInvoker" uiAccess="false" /></requestedPrivileges></security></trustInfo></assembly>
Greater Manchester1
Salford1
Comodo CA Limited1!0
AAA Certificate Services0
040101000000Z
281231235959Z0
Greater Manchester1
Salford1
COMODO CA Limited1+0)
"COMODO RSA Certification Authority0
HCgNr*
2http://crl.comodoca.com/AAACertificateServices.crl04
http://ocsp.comodoca.com0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA0
191007000000Z
221006235959Z0
943491
Private Organization1
Dubai1
Dubai1;09
2Business Central Towers, Tower A, Office 2301 23031
Telegram FZ-LLC1
Telegram FZ-LLC0
https://sectigo.com/CPS0U
Dhttp://crl.comodoca.com/COMODORSAExtendedValidationCodeSigningCA.crl0
Dhttp://crt.comodoca.com/COMODORSAExtendedValidationCodeSigningCA.crt0$
http://ocsp.comodoca.com0#
AE-943490
Greater Manchester1
Salford1
COMODO CA Limited1+0)
"COMODO RSA Certification Authority0
141203000000Z
291202235959Z0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA0
=U5W5H
https://secure.comodo.com/CPS0L
;http://crl.comodoca.com/COMODORSACertificationAuthority.crl0q
/http://crt.comodoca.com/COMODORSAAddTrustCA.crt0$
http://ocsp.comodoca.com0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA
20210428095006Z
Greater Manchester1
Salford1
Sectigo Limited1,0*
#Sectigo RSA Time Stamping Signer #2
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA0
201023000000Z
320122235959Z0
Greater Manchester1
Salford1
Sectigo Limited1,0*
#Sectigo RSA Time Stamping Signer #20
https://sectigo.com/CPS0D
3http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
3http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
http://ocsp.sectigo.com0
New Jersey1
Jersey City1
The USERTRUST Network1.0,
%USERTrust RSA Certification Authority0
190502000000Z
380118235959Z0}1
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA0
?http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl0v
3http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt0%
http://ocsp.usertrust.com0
rRj;B7|
[C]e=P
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA
210428095006Z0?
New Jersey1
Jersey City1
The USERTRUST Network1.0,
%USERTrust RSA Certification Authority
awbznzeq
costura.awbznzeq.dll.compressed
costura
costura.costura.dll.compressed
newtonsoft.json
costura.newtonsoft.json.dll.compressed
.compressed
Cat has {0} tail.
Dog has {0} tail.
Zoo has {0} animals.
http://us1.unwiredlabs.com/v2/process.php
application/json; charset=utf-8
{{ "token": "{0}", "radio": "gsm", "mcc": {1}, "mnc": {2}, "cells": [{{ "lac": {3}, "cid": {4} }}] }}
status
balance
accuracy
message
Ubntsxgpdyqmjn.Awbznzeq.dll
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Telegram Desktop
CompanyName
Telegram FZ-LLC
FileDescription
Telegram Desktop
FileVersion
2.7.4.0
InternalName
ConsoleApp15.exe
LegalCopyright
Copyright (C) 2014-2021
LegalTrademarks
OriginalFilename
ConsoleApp15.exe
ProductName
Telegram Desktop
ProductVersion
2.7.4.0
Assembly Version
2.7.4.0
Antivirus Signature
Bkav Clean
Elastic Clean
MicroWorld-eScan Trojan.GenericKD.37074552
FireEye Generic.mg.d2a8ef4a18e3c6dc
CAT-QuickHeal Clean
McAfee RDN/Generic.hbg
Cylance Unsafe
Zillya Clean
AegisLab Trojan.MSIL.Noon.l!c
Sangfor Riskware.Win32.Agent.ky
K7AntiVirus Trojan ( 0057dd721 )
BitDefender Trojan.GenericKD.37074552
K7GW Trojan ( 0057dd721 )
CrowdStrike win/malicious_confidence_90% (W)
Baidu Clean
Cyren W32/MSIL_Kryptik.DZK.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Kryptik.ABKG
APEX Malicious
Avast Win32:CrypterX-gen [Trj]
ClamAV Clean
Kaspersky HEUR:Trojan-Spy.MSIL.Noon.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Trojan.GenericKD.37074552
TACHYON Clean
Sophos Mal/Generic-S + Troj/Formbo-AJL
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Trojan.MSIL.AGENTTESLA.USMANFA21
McAfee-GW-Edition Artemis!Trojan
CMC Clean
Emsisoft Trojan.GenericKD.37074552 (B)
Ikarus Win32.Outbreak
GData Trojan.GenericKD.37074552
Jiangmin Clean
Webroot Clean
Avira TR/Kryptik.kqxbi
eGambit PE.Heur.InvalidSig
Antiy-AVL Clean
Kingsoft Win32.Troj.Undef.(kcloud)
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Trojan-Spy.MSIL.Noon.gen
Microsoft Trojan:MSIL/AgentTesla.AM!MTB
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
VBA32 Clean
ALYac Trojan.GenericKD.37074552
MAX malware (ai score=82)
Malwarebytes MachineLearning/Anomalous.100%
Panda Clean
Zoner Clean
TrendMicro-HouseCall Trojan.MSIL.AGENTTESLA.USMANFA21
Tencent Clean
Yandex Clean
SentinelOne Static AI - Suspicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet PossibleThreat.PALLAS.H
BitDefenderTheta Clean
AVG Win32:CrypterX-gen [Trj]
Cybereason malicious.d6e152
Paloalto generic.ml
Qihoo-360 Clean
No IRMA results available.