Static | ZeroBOX

PE Compile Time

2021-06-11 09:21:13

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x0008a564 0x0008a600 7.99087933302
.rsrc 0x0008e000 0x0002d478 0x0002d600 5.32165837245
.reloc 0x000bc000 0x0000000c 0x00000200 0.101910425663

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000baa4c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000baa4c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000baa4c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000baa4c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000baa4c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000baa4c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000baa4c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000baa4c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x000baa4c 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x000baeb4 0x00000084 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000baf38 0x0000038c LANG_NEUTRAL SUBLANG_NEUTRAL PGP symmetric key encrypted data - Plaintext or unencrypted data
RT_MANIFEST 0x000bb2c4 0x000001b4 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with no line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
ClG/
ee C`\
+=%X w
ClG/
ClG/
b a`;!a
+=%X w
047a 0
ClG/
+=%X w
a Ga)7a
X @>d7a
+=%X W
v4.0.30319
#Strings
ConsoleApp3
ConsoleApp3.exe
<Module>
RequestContextRecord
Kwfmqc.Records
Object
System
mscorlib
ServicePoolObject
ConsoleApp3.Objects
OrderPoolPage
InterpreterConfigReader
ConsoleApp3.Readers
WriterAttributeSpec
ConsoleApp3.Specifications
<Module>{8ce6e5b3-0948-4ff5-bdfb-22edc84bd01d}
.cctor
f0659e5905454a5e99b9752afc78b700
printer
_Reader
Dictionary`2
System.Collections.Generic
String
Boolean
_Visitor
_Context
_Object
WritePrinter
CultureInfo
System.Globalization
get_Name
SetupPrinter
Assembly
System.Reflection
AssemblyName
AppDomain
get_CurrentDomain
GetAssemblies
GetName
Equals
StringComparison
get_CultureInfo
PopPrinter
Stream
System.IO
NewPrinter
DeflateStream
System.IO.Compression
MemoryStream
GetExecutingAssembly
EndsWith
GetManifestResourceStream
CompressionMode
set_Position
IDisposable
Dispose
InstantiatePrinter
TryGetValue
InvokePrinter
get_Length
SearchPrinter
result
ToLowerInvariant
IsNullOrEmpty
Concat
ManagePrinter
ResolveEventArgs
counter
ContainsKey
Monitor
System.Threading
op_Inequality
op_Equality
set_Item
get_Flags
AssemblyNameFlags
ComputePrinter
Interlocked
Exchange
ResolveEventHandler
IntPtr
add_AssemblyResolve
VerifyPrinter
Format
Console
WriteLine
ResolvePrinter
config
HttpWebRequest
System.Net
StreamWriter
StreamReader
WebRequest
Create
set_ContentType
set_Method
GetRequestStream
TextWriter
GetResponse
WebResponse
HttpWebResponse
GetResponseStream
TextReader
ReadToEnd
JsonConvert
Newtonsoft.Json
DeserializeObject
GetTypeFromHandle
RuntimeTypeHandle
CSharpArgumentInfo
Microsoft.CSharp.RuntimeBinder
Microsoft.CSharp
CSharpArgumentInfoFlags
Binder
GetMember
CallSiteBinder
System.Runtime.CompilerServices
System.Core
CSharpBinderFlags
IEnumerable`1
CallSite`1
Func`3
CallSite
Target
Invoke
UnaryOperation
ExpressionType
System.Linq.Expressions
BinaryOperation
Func`4
Exception
watcher
_Configuration
m_Param
_Utils
status
_Attribute
_Client
_Connection
consumer
m_Mock
facade
m_Tests
_Service
m_Worker
instancePtr
SetPrinter
CopyTo
ToArray
ListPrinter
PublishPrinter
indexOf_item
EnablePrinter
Thread
ClassLibrary
Hjjckztah
m_fd45edc280024984b1a269a1ae04c6f8
m_379d286d5e8440688c3cea12f82e35c7
m_d9528c35d72344bfb8808d3dee286011
m_e798165210f74dc49e01e21021b087c0
m_63a052c841d24bfb8055dcd6c2561d6a
m_7bbb78fc113a4169a33c3310cb8c4bf0
m_27409cb9956f4725858f45b32ce1e228
m_ba784bffbcc44be394454ebe6e98e1fc
m_e11d317fb23f4eef89001aebaf4629af
m_1af7781b99384f07aea29f0bddf097b7
m_3bb4568560f7451d892d48605a853fb0
m_c021158ab4854b92b8ffe8bdb281b52d
m_c118b17e72b243cf9caed8b0a61c9001
m_511422c4ef33480d875e05159d333fa1
m_0af4e33d7f2e45cdaada047028c9caef
m_47d8a45b7ab34a33bf679c5ca927f662
m_ed696bdbfda74f33aa06684d32b29ca6
m_f40aa4e3078645088a156a43e1907d65
m_cb4c8227ae0d41e684c79760be22b8d1
m_e5b2253420c74480bd7906856fb06b47
m_899ca6541fee414c899db70e722909a8
m_e7ee316efc2b4ed5983008a9a2e8b2a2
m_d8ac1b1abc14401ea60c3d42220958ea
m_55b0e84e6a42479a816f013355f0e713
m_e521ebd127104913b70468197f763b5c
m_b8a9d89523934c0880698448f893d20c
m_9418dee5c90a448cabc04c9eb50f7758
m_a063473ddc8446de991ba8f9c9f5c118
m_2c7c72f374134174beace75029ade83b
m_7999b3a416404b1d9d33e9e006a4af00
m_c57721e4c938409daa9f1b44f64665c0
m_e389b73143a74b3a9f6056e2ff9db76b
m_ac4d8a89886140e1960cdd49faca25fa
m_82979f30c09e49d8a07933cd028a6926
m_d237a2f40362437880a8e0b50768e3fe
m_ea6481d4e4b84f33910e15c71469a0e5
m_2d3f09fc89ed4c93b8597d5b9026402b
m_2c2f9a7bc16c4d1bb467e478316c1a60
m_87e8f6c7a87b4350b78e01960f09efe1
m_869a7a5bebb6496da0c9428b0ad009fe
m_6e2261c84e88489ab6ea1a6063ba3433
m_d13b493054844f35b4417a0477dad2ae
m_5073ac746ab744f28d36121b6ada35d7
m_5c2f1acfb9ed445f92b7976605bfa405
m_7fe0f812ce634e9e857aa40f8fc5e3a1
m_38cd67c93e9d4217a4db77e2c23130e0
m_fa4e8d565b3b4db1a8f7c075443995fd
m_f68b86483d7e4b54841067ea48792da6
m_fef78c89b54f4d16a459419244376065
m_59d11b6121524118ab8de18c0ce3d3e2
m_b36086e6297140a0b70fcbd15f9431b4
m_bdc34f64f8b248428fc307b801040865
m_50a7eb6be596473bbdad4ee7fec1a954
m_eb092542d4d34cecbef63b300d033547
m_3d03ba02b666479cbec1315cb9dd1cbf
m_7249d0029f414a34a96755b8e171e535
m_506c2cec39a843cea14b59bed5c746f9
m_bfe4d66fc4e44ef8a413f6f032845681
m_f8d1feb9bcf247ac9befab22b02afe40
m_d307fa00065846528bc53a40314e8383
m_17b573a9514245e08fbda47d9ca21d14
m_6f9a20b27d434e78b3ee6d0d467ba267
m_c10401220ea34803aa49b9d395e18833
m_501d41f1d5154b0588020e4e9a65e9a7
m_2111b5aa647f45eabab8b2f58f0562fd
m_a4b888d92ee34928b91b4ed1593a40d6
m_15360b337c7c40f4b3569fb3753ccef7
m_e2d75801bc4f425bae0751e66a3dceaf
m_e8a23c43d9294e05a96b6f63dec835ba
m_200267de414f474e97d15f08040fbdc3
m_eac02ed2ded2438999ab26b2d00d38d3
m_a6f67f31de1c4cffa04abbd897fd863f
m_142fa950cdbb402785944a1f139f9a1f
m_dbec1b690ecd4595b95c127d46680eaf
m_dab0713e865f4614987aa936d34d279f
m_db147b1fbf0c47d584a76df97d09190b
m_ce4a3694deb94442b1493180fb353af2
m_bf8f529cd03c451fb9a8a630d7ac3c3f
m_16790623574f4df1a0b670f5b76aa3c5
m_0b9bfa97c767421195712e98dd78091e
m_fc670013107e466ea53b46e4e3784c12
m_1962dbc195704773917059d7f589b9bf
m_04ceb64ac97f49018fcbdd0406f92638
m_e0f74c8c07cf48889c4ed2b3c8216cfc
m_7180a729438b40a19e6c7f00c73d0950
m_8c7b9d273cce4b1f93e8d647ad8e3f2c
m_29659d43b73e4f1ea6f79b214a915dc8
m_c79c73fd95fb4c53a7b1a291b0ee822e
m_f4034aa3689f4d29b2e71545c6689df9
m_b9f1aca0e8f44471876fc5994ac5711a
m_17a1f41e1e844a9a92ef5e722b49e9d1
m_c678510e1e224ec3a46dc6cc433d4afa
m_7b817d933cd04a96a02bd0c02213c5e2
m_83ff1b0e69684edb825806f9642db65e
m_633b37901451424890e1ec79e0dda044
m_c20334311fbd49d6b7c5f620b39b021c
m_bad126221d1544e78011d52b5275d4b3
m_45f33dfd2c7745d5b5d95d2562af8015
m_b5eca40e336c4b598ffd829805a110c7
m_908c9a0b2c28483cbd694942c256de09
m_90dc4fcb91884b8391addf2d2874ffef
m_f5ee631adb114bb89c0ca5577e1d65fd
m_16a98ee162e345d3860c8a7e93c05735
m_44fdec11b1b642dbb3fbbc9c9cc45121
m_930f390fc21049d58725eae5742539f8
m_809ffcf9d5cd4af0b555f469c086a59d
m_bfa7ff678ec645b9b36188059d9c3c5b
m_ee8f5b2a061c44d2ae05688dc510411c
m_9801341acfae46819ae4bbb0be6c52e1
m_47ce3e3405d74b51befea0675c8bff74
m_bc1218be8cd142ad974f9c70b7c9f743
m_1f0b1fa820a3428db151eeb0044db494
m_81c77c9747c14677874940a4de58ddf7
m_b338c1c9dd3f4cd4a022bc2ac6772213
m_b6432afd42b849ecb1b8991082657868
m_5297b20433d94fcba252e792dee65ba2
m_42e3e50cff5d4a15b5817cf7b421bc3a
m_d9dec68be70d4f23bc2312dc9ed7682d
m_1f0bda21a1a54cd3b89dc808acf7a435
m_7044e9feb2c444a48a4fd7857e4252b7
m_8e5827a265414907b67bf4aa2040c4d7
m_a53151f373c444e1b708bbc06714de21
m_1a6be3eae06341178921c84a0f213591
m_118fb2fa56494b4f91338bfaa24fb2df
m_5f070b9f36604919b07162e445b0068b
m_0b016531b6ac4dfd8926f2164a7af1e7
s47c1b867fa064db495c3156a810d3686
AssemblyTitleAttribute
GuidAttribute
System.Runtime.InteropServices
ComVisibleAttribute
AssemblyTrademarkAttribute
AssemblyCopyrightAttribute
AssemblyProductAttribute
AssemblyCompanyAttribute
AssemblyConfigurationAttribute
AssemblyDescriptionAttribute
AssemblyFileVersionAttribute
TargetFrameworkAttribute
System.Runtime.Versioning
RuntimeCompatibilityAttribute
CompilationRelaxationsAttribute
STAThreadAttribute
costura.costura.dll.compressed
costura.hjjckztah.dll.compressed
costura.newtonsoft.json.dll.compressed
Telegram Desktop
$63dcb85d-bfd1-404f-b0d1-d7aa5a8b5e88
Copyright (C) 2014-2021
Telegram FZ-LLC
2.7.4.0
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
WrapNonExceptionThrows
z`W+63,
.6\^xr
7~wX_M
*iP*$+
ib:{N?
4JINK`>
5(5hE{6~
-+;hM(
IttCp8
Ce2Y@6
H08!L'R)
&S(l`\L:p
00K`%
,09 G
NTTPVRVFQ
bY%E%Ea<NVF
p8E0CIXBTH
W[iwr%By}/
s|F('n>_
sswg6>~
E{q;5+
i3)`ZMpsx
d<RL{m
zVb%]l6
n+-~}k=9t
wOz8c2
Vm({cX47b
6r~"X70
tg<~A:
$96(5n8in
N`nBzZ}
Dwg4{z
lgOP
E1P95G
D_e?,P{
)}1}E
*,wPRsD
w1\'G5
=e=kd3
g #<,lk
5|.*<c
},97z#
8!yqSC
ju+T
>#>vFmj
"&FPAYP
M_o+zA.
~g@*?'
0$61r$K=
$:c33&
8A/PK3O\
']wRU$E
,'FbbbK
8X.&`a
GP'=gK
9k;yK@
&"S08[
\A3L#j
xSP3A6
w[%;UB
ei$%UiQ
UJ83:!+
EgP$2'dI
1ds89%
gvgfg{
BXs@g'
Px]e"j
kIgg?d
W*aBl}
CxZd<;
sS3bs3
H>s;\;
{9Z*;E5YK
F.%S7[%
Sk/:bj.=
tgl,0[H
C+v%DWI
i'jhM"I
>BW>\?
.tR=i'
/17"1b
ODm(L1
Ils+UbV.
f{Fv9__
ocsX/<
y<j|R1
ts)sxGs
1rXep%w"
gpg7gh
YD|LexO
lKkn`gh#:H
@+|Y%k
s}%)k65(
OuY}pvm
xNHyf?
*g[<3:
etUF^|3
18]9sj($
=p8Oc!
D{4/mE
i/a&o-
D:KX0ao
/bAr8a
__LZLp
,i(?"
e(+'ql
Wq,!qr`5y3
Qz=Y;J
G4|g4|
*[Bt!=T
j%+-L7
E_[Yj'
GTaX[Q
R!qAThP
AHGS7!uQ
eTp%%P
6Qin7g3Y+
s, DvB.
OSSD? s!
C8lAE]
PQ`|=n
[X"|(<hi
U\?>d"
|7$BpI>U
p.*p29
*4JZcP
T(4F-cR1&
A;b6rZp>
dRc}5<
?TH1ULQ=
'QA0RB
q:/4r9
jYLudLu
!"|R]_
mpvxIe
x+M$z9l1
q5QB<o
p=`d~=
]|(;Sq3
4zAXpL
o_m<rm
F+*O):
V+{N},s
OzcK3C
-I/Xas
vKJ7
wy:Pu
#~(?X?)
?*fhg.-
'fjlikh
'I<YJp6
x\<<u,
@//Oob
^AQT>t
>[{t~^i
&^0}Oz
v/*lHR
}C\zH:
*^\${"
)L<U=;n.Q
h);4.:
Qyi8_1w
JI/mmDS
nA~[uH
Q0(40f
h$*Q6(
s h_5g
TiX"s+
n"Li"l
y(kY`w<]
kOok0an
d;08X8
{\9\^8
Vjdi2a
yD?!{Rz[
Pg2~A_c
vf?J?R
c0`YT{
2QtQOv
>-$N>dY
WYv*A^
m;JRmkzkWA
XeSq0A
BXfLXK4
@ELHKH
( ~H$G
SBzG!+%d
Pji $n
v]_t<.J
\O&6UT>gY
H,P;y/q7
U~M##>
6D+Z;K
!wwdxI
r,>gN'
:1B+ss
et%h1z
CcGYZ[
|0>}J8
rkI{L+z
_\b~3!l"
5@+(c'
D1 .ls
yQTnG@
AobeT@[
umIM]Cf
2z O]<pT0
L<m{QZ
s%#?zc
1CeN3d
*a<En"
,|(0c"
AJeA4}
00SMe]"
d<+MvZ
*TD:SQz
Lbtbfyj}hF
,;P90z
mn3rBl
12{_]3
GH3ar!
1I4##k
ts:Vz<
NX3Y::1sl
`|=G30a
u:4i}Ub
1a?V!U
j+vJ>
-6"ysK
ZOA)I&
B_V,MV)w
EUf4'_8
r4Sg?E<?9
X2&rE8
B{xc 8
G3P#[,
/H8IMZ(
K?@!"S
%eugxI~9
):x%8K
sEP9qvZJ[
}Wcn9f
nC9DIg
]np88qh
h~E?k7x
&d,<TL
c?SDhT
9#65T+
*V<\rn
A)fjL4
S"`}o$
W*u'^!
F4)@ hD
^Jl9R{J
G`TU|#Z
^)'n!I
W{CZhwh
uq'"=K
`fIP%j
4(ekQk*
nW-o(jn
)Z['m{
e_Xz1g
86twVT
Ck%2Nj7
=wz^g'
K[ORsR4
BlWW'+
V7ksM\
%y}]=]Tx
allQ>db
=rGWmp4
!S)4ti
NJ_QiE
P%3Qeqf]n
:degB|
+-3+ryl6
mY)GYN
wqd[vnV{
^5S6rP
FVjLAm;&''9
0H99,j
a)sI@c
^ry{rrVa.
\BbJfi:
Lhrt"{\4;:
|/4;hx
4(zJ)B
G@`Cs
qO_vy3
5/yO=5
4g{jL|
r8>iM(
{\*&(V^_
gLCdxQW
mh@>E_
F5s31Q
Gx2/8^
x`lv=>r
u;=>Vy
IU|yt0
z^0~gu9
s_{lk.5
8_]s;8
#L"bor
B|=MA<s
vWLMt3)b
g95xf>
'>cHJ^
!A7%\X
w1*<@G
}Ug|P-
tn5Rq(
$*pG?Tq
a_t~Td=
H~]JpA
qzhT["
GFdxK0
%_YgFw;U
g)V-VHP$=U
dz j'gj
P(F`2{
UH+GI{
M\Peyd
%-<v52:
|x(sw
Szq(FT
U<OU:=T
ZBBZYB
cfjczn
<_37;?
%zOw7n
|^Z;$4
\G%W%s
?{]A~]
]hVKo+
S<z{}:
X|T~g)E
.iOo]f
Qgkl[c
m<OCNe4V
jw7rBw*
G]n#j$
^voaet}
]OggtS/V
Zp2^XX
BEb#,H
U 8Uag
}CD1m3
EYBL0"
'd6-!'
9o?%QN
$1AdB&XB
_s`D}'h
hZ@1mL1
f{;GZ@
w7.GNH)
;*LWxqZh<-
0JPJ`dkV
3b)}nK
@ZWo.g'
CVW*C%
'(Q%Fdp
N~d;B~A
C*:/a6
MhYD537
,Q?9,Q
1Z\&tH
woYNUr
5+#'32Z
2f7p:z
}\0SXO
h[dQx+
dRIPn'
e fk?aVQ
}({<KA(9:
5,|Mt4,
To2o6k0
6EmP[d
Pmw&@2*
$/8N[vu
QlwJ$cx
c>rNfd
o$~TYg
tE-kxe
>O{?*E
:}MQ%7
+ji${*
bp;<|v
tZm}\N
#]F]c?
p>a>B~E
ZUZ'k
J<5]I&
A+AAkA
ieLO9/
e2Qa7g
O)M`TYja
4_d&v7
eNcv>n
{d5\ i
kp+2JLSb
/rargk
Q*#N!_Rr
dB:oqu
SHj/~M
z@+_,W
$?!!vVyuT
!hj5iJ
xzzueo[/
X/Rk9Z
h>UlD%
\Z}mwf)
8,i&*,l/^
<yh|lq
20pvTv
r}yrhc
tbLtb1
@@1 bRBAZ@EA
$}P*`q
VqT6kc
w35&c j/
@G{;KI
7}xKn
{{z>nz
,..,6S>
Ri{L]c
e{^+f;
&L[~=|W
tk[?-Mc
7Mm*{iW
!f#S9"
Fo"AV{%
Aq|j'W
gNo-r"
4Q1Vq0G
f2xfG/
Ns\ uJo
x#Moc#t
KQW~]4
SxN1D/
mlOxUo%
=Avf*f
6pxO*Og
=\iv"=^4
*iX3r:
s.`f1o
?QYb:<
fpEpwQ^
Fc5E64
PYG`~)
8&O=V!Y
xU:w{pt
}A{WO]
|<-e'/
rgnHLo_
? *9 R
`xDT)#
v:[>?T
})%#D[
dDqM]A
%}'RlE
d_9=7v
r'moM&
!m\bx2_
d\RgdBK!yW
O{:!Xd0
4K\S6'
"4HxwY2
Zs&l1+w
%-y &9B
{N8N;S
$i90uj
6b3O^
_n<M\\
hd_YVq|UWc3j
I_^KSP\
S-t=d,
KB+rf
Umkz'?
}12N^{
Vk/l#(y,
fpg}1
|b/SZ[
`.i]fM
R[|o~)
_*{Pb\.
;?aIrm
,=Uktb
,7ZHu
>j=-{{
+)R>}"
=kd?._&
Z,r>iHq
pCavn{
z!%Iu_
.;2dCk
^|\'>.%=
?.E3K^j
7>7mh
!PxuD`
JGT?_f
b}-fvK
EANW<Y=
<WOk[k
:;|jl_+$;Ta
Wk=c1Q
Rp'*q8
v<I&o!f
NH;]a-
.cUY~5I
D9/b5W#e
!C]>n!A#
(kS?Y?
EbKI(/
G=wPQP
6Rxr5\?<9
56'aVD
s?i)fTp
!f~Htoq
kyF#>B<
}Wk17l3N
o3Eo2B
o2To3(
~4=N;8
~<9\#b
X<r%ek
\de911
:-B'@Y
ru@\Ib\zKf
(Ba`%,
9k9siz
qtxV=%
4^m$r.{
6&7t\y
CU>4cG
'ldqJ\
`% `%5
#LFM H
}p\#yp,
n{>\Z@N
}@p5Kh8
5b$][F
A;_Iu^I
wdRWl(
3i[]z]T|6
9)+ZmW8j
o<GZeJ;`
euJ'6YQL
3<N87#U
yd$Z-G
;'1D33
z(nsN v
XtTrE4
~U(N*R
*h2|Q<
-Ww"Gc8q
jA3>y/
efR}6-Q
|/T>_}
[p*LY
=`{Q)`
M@"AAi
4!uxI$
,qxUa>
vw-BLgWY
X\-"6p
bfqptF
09\?!g
([WFsEj
_$TZ$U5
<J&R2)
0(Cw+-
4o8yn}oy]
H#nrn[
nBEaF&
hq2X`w}
ze|:{Te
_v4w6/F
]RFeo?%Y
}K(Cu:
5K/F=WB
V'}J>Cvs
-*%yIQ
=MFKz^
5cD!~?a*'
'N"2+p>
}Z%Pzm
/Lku@
sU*ulk4
oEt3{m
;g6ez4
0@t(SF>V
<N#Fl
n.LRJ#e
b?MTEp
PH1/mouO
#hLjLp
5gz?$3
R8gWp2
9w/nwb
<=k{/BG
vO)Ey]
l3qEU2
1 |\@u
A#kliHV
}'8oW8
axC438
hzQ[0G
KneBF3
,9|-H>
}=8]@2.
H=evA)l
^-6_+St
v`aAk)W
z3)@4
tw _LY
tLAcM.a
7yNY1a
# >SV>IR
R|G-E1
*=]Du`\
:)XgU0ru
$Lt0_"
UHraqS
z6~\Gf
t, ^M>
L6z/+l
Mj!z.60r
vJPXX&
(?R6}N:
@iY9<L
. as9jO
[zuvVJ
C>NVA|]=
S*VIp6
>?u'gr
%Fl}<b't
z;|%h\?
\B,<w{
(.-VL;
Sc%0Jb
&KPNU|
a&#s X=
Abv\6>
s#.>1K
v+hLE*
LJ4dRC
U"[E6D
+4MVtL
}?z/}g/!
R)|=$7
bU@m{}
/DN|YK!
6\4/?B
{mJY=fGd
rx?&/CL
DwuRnH>/bG
Vx"Ma8\L
S+Q;Ue
V;l&#L+
)| 1U4
Me3%/~
u_ZZ3=?
Ob3L}TL[
+[oLeD
fK{Vx>
Bg{\ub
_VZj520\
U_aE71L
xIQE2U3
K#mt4i
fIw31T{
49d+sm
"gOGE\+pc
F!&+3%
6)X2I
uDrD2q
SpeTOSv
.5meh|
or$knJ
>ojEPw8
edyqos;
u/1yw8
*hT^J&
C-hu-(
A{r-8
73$c0H
&s C_k@
^%K~nU
*x>6EF
c'GCN1
aXLy#t
m\pY'~
qcLL-p
|SKwV/
{.;K)j]
IV8w`x0H
Yh/}1hB
K?M>W>
]|3O?^
_^ht<Y
p8.{QY
k5M?DN
_AknZgZ3
|%&RAJp
e46egxY
'zZ56YNq.o
KJ:4"p@M
?PwinJ5
13m]1{T
7vG%07
RlH%X/.
x>fHLX
SE!SVu
pMP<-~
(ZD1aE
@0;[=+
7DT#Ct
f\Zp$cN3
CnwDII
Zo|_6I
Wm0UkeS
s<N# Jf
SCz[i[|
lO"h?(
c5:6.J
oagjsMB\
)@a`f(G
u,<M,?UQ
I+^GVz
,R8W!h
nX6Cpv
F4[oS?
<.@*7Y
y8gy8g
qj}8gW
BL37f;e
/:@+^"
dW/J[@
5U+_sW?c|7
N4Avh:
HXb^WO
`pqlw"
ZoZtd3
I7|#]=
2m@NL>6
4I*>k|-
bb\ld'
:Gcz;>
^rF@kDJ8r
UMQL6@&
k(Q;D/
/Dqu>n
u+cmlTk
%[f9&HH
K/`<]YK-
(g{J?R
P J1N[
4D"8{B
+'Jms@
QCQ\Y.
KD1";V/
Sl^4*}
B{\!C[
Bv\,!=
I:Em06
5B@z%!
%|B{Bo
5Ov95k
SW~3"oNU
By#y<F
c-\R,
tX_M.e
{P^#.O
S\2G\8b8
\5@}7Z
92_/7_
sY^`~y
F+>")~K
7`=o)
k}?q./
n\(a_?
I.e>nH
?Niencn
hok6nJ
cvT|W"
;fb|?9}f
?YOy|B
C|ZkL!
*9^17Q
F1ysgu
2.a}u $n
60;OP
Xdx_VY"
4rV)V^
/%5/pO
y_gy72
x|/7ANa
y2ris|
9[oV+X@
H`WL/v
R}!|ijO^
$)#GZ|4&YQGY|!&E
ZR`oR@
HgBV7X
p^'MOD
An\{:/
S;;C;`
cwy{pg
<}^^|=
&fPSyU$*h
a\nGoG
3d<&JZ
2SnUaYR
=?6xfW
z>2Gz[
1*FzM^
Y/|v?<
|kH?u0
)r?0Wx
\c,IcI
'`o4v'5
Hx#:B:S
|{Hg+|
C7r_u#
w`OaOc
,Z=N>0
/)l.\Rxb
7'}=)#?7
X^\^Y>
,{]v]n
6YI>$]
js<=v|JH
}oy=!'
p@r9P%'
;P%CIOBW
Id x>P%.
wSH1P%e
b\[%[qU
(P%-Yc
k>qc4ZD
Je/4W*
94W+_Bs
r*47(K
cTFIF4co
}QtBq~
Kp4+w
kqxq,F
\\l..1
$qKR I!%
7--(."
BWIYEAYUM1
4RTZTR]]XY]VZQ
SQUXVT
M,w+"-h
!ij6z#
`KWr@Ss
$*hmBT,
i5*ExC
gRwjZ>t
y|BA,7
LJJ/9Z0F
Mq!]$e^
h9=&||
z&$Mm2
*qDo%m
\mfuE}21
f"v^M>
r),EWg
*Y8y<
$ks8sSj
3($"sA0
d:o(hA T
<ZN4QJ
NPeiH%
]E]y9+-
B>7T2{Q
I~ya3)yE
7]Kx/K
_<Q?'3
Fb Yv$K
L>5/.g
3lkB|
|nHF>n
ok%CYg
`q[gNf
milwYvjl
o<PFiAw
GEj4.
+z.v>P
ZS9>2o
1|Q|wC
ECvyfBY
3]|2tsvP
-znd{_
&iz;NeZ
NxYibo
/MA$:O
4;B9o3
;=e6#$V
L,7sWH
3I25.I
n.D_n\4
sr#0$l
]oX$w
?JMz3Y
'i@'i1,
YpB.YL
U8("pdm
5qI7^A
!6zICh
9;@lzdF
i<xC 4
>t7;t{~g
"wz!gz
h!]i'T
;V`aan
c"dX%e}^g
/hU?(j/
2:9!^:;
zG&n<fJ[
KOt+]K
}t5P?*
Y%BWxBW
C01'mG
!n88<8
ed(.#Ej
(|ha^nx
a-t0L(
; ;;ovrqvQV~
U_ch7c
N+lLkj
VP@HBDC
M%s|^N>
KbF2#H8
~b$TCo
@6Yxsd
bsSN_>
jB6^m}v
kw&/ox
D=>7mP
iQ<~H8r
_CorExeMain
mscoree.dll
wXDv""
OWg.E>
_XpMaa
?7w*6z
J^*7_p
V [Q6r
B9Hsnj
ydWbCn@
,BC8(3
uBP{/h
*z0c,/L
S38R_d
s5<_It
;S=m;.
+xm=*"
q}PuRcJ
r3]a2[
v?" (O
ftiqvR
V+&3Y\"*
j57;Ar
kJ63Y^
$WZ=7"
nDfVVdV7M
H4S:1`
weQHPa
8iM9i;PJ
[yYy?O
\:r"M
naaaaaaaaaaaaaaaaaaaa
<?xml version="1.0" encoding="utf-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" name="MyApplication.app" /><trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"><security><requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"><requestedExecutionLevel level="asInvoker" uiAccess="false" /></requestedPrivileges></security></trustInfo></assembly>
Greater Manchester1
Salford1
Comodo CA Limited1!0
AAA Certificate Services0
040101000000Z
281231235959Z0
Greater Manchester1
Salford1
COMODO CA Limited1+0)
"COMODO RSA Certification Authority0
HCgNr*
2http://crl.comodoca.com/AAACertificateServices.crl04
http://ocsp.comodoca.com0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA0
191007000000Z
221006235959Z0
943491
Private Organization1
Dubai1
Dubai1;09
2Business Central Towers, Tower A, Office 2301 23031
Telegram FZ-LLC1
Telegram FZ-LLC0
https://sectigo.com/CPS0U
Dhttp://crl.comodoca.com/COMODORSAExtendedValidationCodeSigningCA.crl0
Dhttp://crt.comodoca.com/COMODORSAExtendedValidationCodeSigningCA.crt0$
http://ocsp.comodoca.com0#
AE-943490
Greater Manchester1
Salford1
COMODO CA Limited1+0)
"COMODO RSA Certification Authority0
141203000000Z
291202235959Z0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA0
=U5W5H
https://secure.comodo.com/CPS0L
;http://crl.comodoca.com/COMODORSACertificationAuthority.crl0q
/http://crt.comodoca.com/COMODORSAAddTrustCA.crt0$
http://ocsp.comodoca.com0
Greater Manchester1
Salford1
COMODO CA Limited1705
.COMODO RSA Extended Validation Code Signing CA
20210428095006Z
Greater Manchester1
Salford1
Sectigo Limited1,0*
#Sectigo RSA Time Stamping Signer #2
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA0
201023000000Z
320122235959Z0
Greater Manchester1
Salford1
Sectigo Limited1,0*
#Sectigo RSA Time Stamping Signer #20
https://sectigo.com/CPS0D
3http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
3http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
http://ocsp.sectigo.com0
New Jersey1
Jersey City1
The USERTRUST Network1.0,
%USERTrust RSA Certification Authority0
190502000000Z
380118235959Z0}1
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA0
?http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl0v
3http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt0%
http://ocsp.usertrust.com0
rRj;B7|
[C]e=P
Greater Manchester1
Salford1
Sectigo Limited1%0#
Sectigo RSA Time Stamping CA
210428095006Z0?
New Jersey1
Jersey City1
The USERTRUST Network1.0,
%USERTrust RSA Certification Authority
costura
costura.costura.dll.compressed
hjjckztah
costura.hjjckztah.dll.compressed
newtonsoft.json
costura.newtonsoft.json.dll.compressed
.compressed
Cat has {0} tail.
Dog has {0} tail.
Zoo has {0} animals.
http://us1.unwiredlabs.com/v2/process.php
application/json; charset=utf-8
{{ "token": "{0}", "radio": "gsm", "mcc": {1}, "mnc": {2}, "cells": [{{ "lac": {3}, "cid": {4} }}] }}
status
balance
accuracy
message
Kwfmqc.Hjjckztah.dll
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Telegram Desktop
CompanyName
Telegram FZ-LLC
FileDescription
Telegram Desktop
FileVersion
2.7.4.0
InternalName
ConsoleApp3.exe
LegalCopyright
Copyright (C) 2014-2021
LegalTrademarks
OriginalFilename
ConsoleApp3.exe
ProductName
Telegram Desktop
ProductVersion
2.7.4.0
Assembly Version
2.7.4.0
Antivirus Signature
Bkav Clean
Elastic Clean
DrWeb Trojan.PackedNET.835
MicroWorld-eScan Trojan.GenericKD.46468615
CMC Clean
CAT-QuickHeal Clean
Qihoo-360 Clean
McAfee RDN/Generic.hbg
Cylance Unsafe
VIPRE Clean
AegisLab Clean
Sangfor Riskware.Win32.Agent.ky
K7AntiVirus Clean
BitDefender Trojan.GenericKD.46468615
K7GW Clean
Cybereason malicious.dad643
BitDefenderTheta Clean
Cyren W32/MSIL_Kryptik.DZK.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Kryptik.ABKG
Zoner Clean
TrendMicro-HouseCall Trojan.MSIL.AGENTTESLA.USMANFB21
Avast Win32:CrypterX-gen [Trj]
ClamAV Clean
Kaspersky HEUR:Trojan-Downloader.MSIL.Seraph.gen
Alibaba Trojan:MSIL/Kryptik.1dd9e937
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Trojan.GenericKD.46468615
Sophos Mal/Generic-S
Comodo Clean
F-Secure Clean
Baidu Clean
Zillya Clean
TrendMicro Trojan.MSIL.AGENTTESLA.USMANFB21
McAfee-GW-Edition Artemis!Trojan
FireEye Generic.mg.585a1b1be5413996
Emsisoft Trojan.Crypt (A)
Ikarus Trojan.MSIL.Crypt
GData Win32.Trojan.Agent.TWOT11
Jiangmin Clean
Webroot W32.Trojan.Agent.Gen
Avira TR/Kryptik.kdmjk
MAX malware (ai score=99)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Trojan.Win32.Kryptik.oa
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/AgentTesla!ml
Cynet Malicious (score: 100)
AhnLab-V3 Malware/Win.Generic.C4522740
Acronis Clean
VBA32 Clean
ALYac Clean
TACHYON Clean
Malwarebytes Trojan.MalPack.MSIL
Panda Clean
APEX Malicious
Tencent Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
eGambit PE.Heur.InvalidSig
Fortinet MSIL/Kryptik.ABKG!tr
AVG Win32:CrypterX-gen [Trj]
Paloalto generic.ml
CrowdStrike win/malicious_confidence_90% (W)
MaxSecure Trojan.Malware.300983.susgen
No IRMA results available.