Static | ZeroBOX

PE Compile Time

2021-08-04 07:37:13

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x000aeae4 0x000aec00 7.98081019013
.rsrc 0x000b2000 0x000046c4 0x00004800 3.45694535959
.reloc 0x000b8000 0x0000000c 0x00000200 0.0815394123432

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000b2130 0x00004028 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40
RT_GROUP_ICON 0x000b6158 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x000b616c 0x000003a4 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x000b6510 0x000001b4 LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with no line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
afeffefeefef
Yfeffefeefef
Xfeffeefeffea
Yfefefeffeefa
affeeffeefefa
Xffefeeffe
DP+za
afeffefefefea
Xfefeffeefhah
Yfefefeffehah
`feffefefefe_:C
Xfefeffefeefa
YffeeffefeXa
Hb+cX
ffeeffefe
9feffeefeffe
'fefeffeef
fefefeffe
fefefeffefe
affefeeffe
'fefeffeef
feffefeefef
feffeefef
affefeeffe
ffefeeffefe
8feffefefefeYa8
$ffefeeffeY
ffefeeffeXa8
ffefefeeffeY
fefeffeefa
Lfeffefefe(
effeeffefeefa(
-jqgY
sVa _6) a
-jqgY
e ]'6Va
^7`7 c
V*%z
e 3Gu"a
p]=2 ~
V*%z
Yf 9sU
^7`7 c
- $_Uza
v4.0.30319
#Strings
New_0228_02101111
New_0228_02101111.exe
<Module>
Settings
Avwvniedbtawfapqnxganyx.Properties
ApplicationSettingsBase
System.Configuration
System
CollectionConnectionStub
Avwvniedbtawfapqnxganyx.Stubs
Object
mscorlib
PolicyAttributeSpec
Status
Avwvniedbtawfapqnxganyx.Specifications
Attribute
Avwvniedbtawfapqnxganyx.States
QueueCollectionAuth
Avwvniedbtawfapqnxganyx.Authentication
Callback
Avwvniedbtawfapqnxganyx.Shared
ValAttributeSpec
AlgoMockRole
Avwvniedbtawfapqnxganyx.Roles
Policy
Avwvniedbtawfapqnxganyx.Consumers
System.Windows.Forms
ComposerStatusWorker
Avwvniedbtawfapqnxganyx.Workers
Interceptor
Worker
Context
Avwvniedbtawfapqnxganyx.Resolver
ObjectAttributeSpec
ValueWorkerItem
New_0228_02101111.Items
Adapter
Schema
New_0228_02101111.Importers
DescriptorMappingProducer
New_0228_02101111.Producers
SetterMockRole
Avwvniedbtawfapqnxganyx.Writers
Manager
New_0228_02101111.Containers
ClientConnectionStatus
Method
AccountPolicyConsumer
BroadcasterMappingProducer
TestValQueue
Template
Avwvniedbtawfapqnxganyx.Lists
CandidateIdentifierImporter
PublisherWorkerItem
PageConnectionStatus
TemplateTagResolver
AnnotationPolicyConsumer
VisitorCollectionAuth
Parameter
ProductConnectionStatus
<Module>{0621e804-e8e5-43b9-9018-22757e391f65}
PostRequest
.cctor
SettingsBase
Synchronized
ListRequest
Boolean
CollectRequest
_Registry
m_Collection
m_Mock
m_List
_Connection
ViewRequest
config_length
Thread
System.Threading
get_CurrentThread
get_ManagedThreadId
CompareRegistry
bcqtmd3tved4xpxt3pyvmtsxnwwnxhk5Z4OYa
AddRegistry
NotSupportedException
SortRegistry
ResolveRequest
CallRequest
PublishRegistry
PostRegistry
IContainer
System.ComponentModel
RateRequest
AwakeRegistry
EventArgs
Control
Dispose
allowsetup
IDisposable
FindRegistry
ResumeLayout
System.Drawing
Single
set_Text
String
set_Name
EventHandler
IntPtr
add_Load
set_ClientSize
SuspendLayout
ContainerControl
set_AutoScaleDimensions
set_AutoScaleMode
AutoScaleMode
FlushRequest
NewRequest
_Object
_Reader
m_Mapping
CustomizeRequest
Encoding
System.Text
get_UTF8
GetBytes
QueryRegistry
instance
get_Text
AppDomain
get_CurrentDomain
ResolveEventHandler
add_AssemblyResolve
set_Size
ThreadStart
set_IsBackground
StopRegistry
Assembly
System.Reflection
ResolveEventArgs
Stream
System.IO
MemoryStream
GetExecutingAssembly
GetManifestResourceStream
CopyTo
GetDomain
CollectRegistry
ToArray
FlushRegistry
config
outputlast
DestroyRegistry
add_Resize
LoginRequest
CalcRequest
VisitRequest
Convert
ToInt32
CompareRequest
_Configuration
identifier
TestRequest
UpdateRegistry
ClassLibrary
Phpqwqs
SetRequest
AddRequest
ComputeRequest
ConnectRegistry
Application
UnhandledExceptionEventHandler
add_UnhandledException
ThreadExceptionEventHandler
add_ThreadException
EnableVisualStyles
SetCompatibleTextRenderingDefault
SetUnhandledExceptionMode
UnhandledExceptionMode
ConcatRegistry
ThreadExceptionEventArgs
caller
Environment
RestartRegistry
UnhandledExceptionEventArgs
PublishRequest
UpdateRequest
CheckRequest
_Tokenizer
ResourceManager
System.Resources
m_Printer
CultureInfo
System.Globalization
StopRequest
PatchRegistry
GetTypeFromHandle
RuntimeTypeHandle
get_Assembly
SetRegistry
CreateRegistry
DisableRequest
RunRequest
ChangeRequest
PopRequest
MapRequest
AssetRequest
CalculateRequest
SelectRequest
IncludeRequest
ResetRequest
WriteRequest
DeleteRequest
PrintRequest
ForgotRequest
ConcatRequest
ExcludeRequest
ManageRequest
AwakeRequest
RestartRequest
StartRequest
CancelRequest
SortRequest
InitRequest
SetupRequest
LogoutRequest
CountRequest
ReflectRequest
RegisterRequest
RevertRequest
SearchSpecification
InvokeSpecification
QuerySpecification
PostSpecification
ListSpecification
CollectSpecification
FindSpecification
CreateSpecification
OrderSpecification
_Value
_Observer
m_Error
_Advisor
m_Token
system
_Singleton
ConcurrentDictionary`2
System.Collections.Concurrent
m_Exporter
_State
ViewSpecification
StackFrame
System.Diagnostics
StackTrace
MethodBase
RuntimeMethodHandle
op_Equality
GetFrame
GetMethod
CancelRegistry
TryGetValue
SearchRegistry
key_amount
explicitcust
StringBuilder
UInt16
UInt32
AssemblyName
get_Unicode
GetString
Intern
Append
ToString
GetCallingAssembly
set_Position
Monitor
MemberInfo
get_DeclaringType
get_Count
set_Item
CloneRegistry
GetName
get_FullName
ListRegistry
GetPublicKeyToken
StartRegistry
reference
start_pred
op_Inequality
ChangeRegistry
reg_ID
template
MoveSpecification
FillSpecification
ResolveSpecification
CallSpecification
DestroySpecification
ValidateSpecification
RemoveSpecification
PrepareSpecification
DefineSpecification
indexOf_key
CloneSpecification
ConnectSpecification
EnableSpecification
value__
m_Importer
m_Rules
InterruptSpecification
ViewRegistry
SelectRegistry
GetRegistry
AssetRegistry
EndOfStreamException
DeleteRegistry
item_counter
ReadByte
TestRegistry
ReadRegistry
Buffer
BlockCopy
ArgumentOutOfRangeException
VerifySpecification
InsertSpecification
PatchSpecification
_Invocation
NewSpecification
InsertRegistry
UInt64
List`1
System.Collections.Generic
AddRange
IEnumerable`1
get_Item
IncludeRegistry
InstantiateRegistry
CallRegistry
get_MetadataToken
CustomizeSpecification
LoginSpecification
CalcSpecification
get_Name
VisitSpecification
m_Thread
predicate
CompareSpecification
CalculateRegistry
ManageRegistry
task_size
TestSpecification
SetSpecification
AddSpecification
DefineRegistry
referencemin
resultsize
EnableRegistry
config_start
end_caller
DisableRegistry
endparam
selection_offset
ComputeSpecification
PublishSpecification
UpdateSpecification
RegisterRegistry
CheckSpecification
StopSpecification
DisableSpecification
RunSpecification
ForgotRegistry
ChangeSpecification
PopSpecification
MapSpecification
CustomizeRegistry
AssetSpecification
CalculateSpecification
SelectSpecification
InitRegistry
IncludeSpecification
ResetSpecification
WriteSpecification
NewRegistry
DeleteSpecification
PrintSpecification
ForgotSpecification
CheckRegistry
ConcatSpecification
ExcludeSpecification
m_115559c3d94e4814b88d67bc823d808b
m_6be98acfa30c475084145d65cabd67b1
m_fd3858565e784cde8756c32fc9db77f5
m_b8551c74308549efb0285e5f492943ef
m_40c9addd8a7c48808bf062c231e45ef9
m_da12094acea14e8daaebe78e0b864c6b
m_7d885cd3c49d40b7941d9742cd4aad54
m_e528619dd94845fc8c38b88a0f690909
m_ed96f80e80d84928badc1f1728345f27
m_4068816117db429583e261d707bc0706
m_35e4cd840f1a4a63aff8c65b07e808ea
m_4862148880c2491c99e51fb1de4c3dc0
m_6f8a0586d0ad4bcd9f353c51e52de43c
m_2abff4ba59864e47a44bd866d6502e08
m_8fc3260336a64a84988f309d70e8f103
m_8e3c42c9123846328cad05df62e7e8ad
m_dfd3d83c366548ae8b9030836af38511
m_d4b5ca8ac15b47ada7979c4d1fb0a444
m_8cee4c1de5b94567b433d4b08d1dcea9
m_8e4391f0f89b4ee499214880991a9003
m_7df8eb2130244003a12fa32e86e770ea
m_85a0235c7a714ba3bda1882a18a4a6aa
m_142e4c0b80bd4689bc9cd98daaeddd0f
m_3f5dba4e72d14538966b62e7f0934a43
m_1fb63e2c605c492a8945c9302146ff81
m_e2350ff6b9d44136bbe943dd29669716
m_2bb9d9e7f18c4eb2a93492ff17cdd98c
m_4c0a4a52da044ab49ef2af950bc955cf
m_b7fae6932d93443797c0bc3864ca4e61
m_848ff19f336f40e79bf3736a37c628aa
m_d725073d7aa140c9b80991a79eefaf7a
m_95aa6b1ae77649ecb7a2169c0e51394d
m_e066f5d34b654ceabacd0d34261bbf69
m_359ec062cf364fee96683967f7b173d0
m_33bb7457cdda4c7e89772a2a1bfa2507
m_564f684ee0df4aa1b73b22c11e678a2a
m_be9893de414540ceaee83ed9415e3687
m_92e0a7cece7f46e4ac30297b7caac5f1
m_231045127b1b494c851e7f9b2f7c726e
m_3cab12a656e2424e8ed80f097db7bd5f
m_0330869bc819410bbb6fc2f941eca03b
m_a3f6f39943f6466a9ccdba9d295531a4
m_2ddf011038704220807b38c23568b917
m_6e66ec61f0744c15bacefd59ac457dde
m_7d3b15f5d85e4598b5dd62b2377dfce0
m_b50dac43ce4440da9dfadd2073c09693
m_7fd174034a1348c8b0235cb6d26328a4
m_1a25af33aced45708a277f3d52e0cc47
m_1e14b1b1893d457d9248057b2de60f0c
m_d0dfee4346d14973ad93eb588b852ebb
m_e83c0a8cac1d47ddb178b79433f66350
m_c11c29653baa45c9bad75821af2c47ec
m_818d4ed1dc5c45b4b4a8310a96c91f1f
m_4c17e0acabf945518b8a7bd0c4cf2fb7
m_0bd85bf4c60e41b98a1f000f64cdad70
m_45001a3cc2184d93b6fd44766c3c298d
m_37ccc7d7c6434556b1f188086d322930
m_da0891d82a674b0089b6a58f34c31198
m_d02b69467a3e40d3ba07639d85e98186
m_2bab5323e81d4f2683c3381d11690b22
m_71d7a3b6a77c4ddfb9bedc6917cd1645
m_6a06b948f1cc4011bdce72b866833f6a
m_ad3e55adebf8454e8db69b2dccd1b5c2
m_76f98565429142938845a376bbb129f9
m_078f2ea7fa0f40f4bbc5a1fec70c2503
m_7547de17f7634259b51f402655a618b9
m_93f7338e62ea4b56a8b398b0215d67fd
m_b19c069882434373957f4a7e97f62e72
m_54146fd62c4844d099f0fb5618ce8b0f
m_506b8c3ca25744c581043faf2ddb9f68
m_f8d5477e8b244d92a525cc8eb1ed55c4
m_30977c93eaa4438fa098130557c51af9
m_dfe39856d8044d649c858649e1ac4308
m_eaf0c54addd745bd8206ef9317735c51
m_096821d59e8b466299f93de91a8d2ddb
m_4cca5e43103c46c2a76b5a9e2a7361be
m_4e92b182a88d4e29bfb167e0d7dc66e2
m_b29ed11f5c654c96b91acfcd2603f2a4
m_c751b00923da4526855dc8a0a209c9ec
m_e462a440e8ad4a02942159c00e84ffe1
m_908b55c90c3a4a87a1b108a4c0a62b4c
m_ad623431b7e547ccad6c4aa5f56e9317
m_6bb0b129a34f48f6be8bddfdb3d74016
m_3f5c82ec21e144089f01d61cdbf2c822
m_ac1b7a0d82ca4500a595d70402b1848c
m_a243b2fc1a60477d9353aaf0a4b00d1f
m_fb6ed008edab4a15a62b41dceb8baa66
m_f6942e85738e481babc703b03c859009
m_326fa8dd5ced4059a2ade8ab6420b11f
m_b3963c2882c0470591fa37220d26814d
m_d68ab2b4c0fe470a9698afde492b53d2
m_fdc08f3fcd9f4bd1a2aa493928456927
m_1a03054de97e4b848a89e982e53ecaa3
m_f06851c7e6ec4e098d2d668b2fe203b5
m_56b7ca799c4b4a52b25369efef3693fe
m_830b0134a59b4c9aad92929b9fc674ce
m_5a4b392896084db1b42863ffc28ac61b
m_f5e9cb9bd99241cdb47707804f0c4f8b
m_53c95efa8fa3495995ea30d741b332fd
m_f9b9cc28b75c41a59884aaaf231b561e
m_d2272b5deed645df83e95e36de0085a4
m_4b8b43c725b143cfb82d24745262fe74
m_9e5f593088bc4eda822fcc7e03170330
m_204ac3e97e3c44e08eced79de43399d8
ManageSpecification
j9c677a65f45e4f9686baf1b907554f30
AwakeSpecification
RestartSpecification
GuidAttribute
System.Runtime.InteropServices
TargetFrameworkAttribute
System.Runtime.Versioning
CompilationRelaxationsAttribute
System.Runtime.CompilerServices
RuntimeCompatibilityAttribute
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
ComVisibleAttribute
AssemblyFileVersionAttribute
CompilerGeneratedAttribute
GeneratedCodeAttribute
System.CodeDom.Compiler
DebuggerHiddenAttribute
STAThreadAttribute
DebuggerNonUserCodeAttribute
Avwvniedbtawfapqnxganyx.Consumers.Policy.resources
Avwvniedbtawfapqnxganyx.Workers.ComposerStatusWorker.resources
Avwvniedbtawfapqnxganyx.Properties.Resources.resources
Avwvniedbtawfapqnxganyx.Phpqwqs.dll
$d4882e5f-b12f-453f-a8f8-aee91f0b3101
.NETFramework,Version=v4.0
FrameworkDisplayName
.NET Framework 4
WrapNonExceptionThrows
Telegram Desktop
Telegram FZ-LLC
Copyright (C) 2014-2021
2.7.4.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
11.0.0.0
3System.Resources.Tools.StronglyTypedResourceBuilder
16.0.0.0
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
PADPADP
!}gF>+
"dG?A'
W+Nc.&S
wFHL4v
F"&($+ Y
{k#3TzR
1bFM#b
VH<"}7^
TD@VF@
i#}|4xp|O]
Qh+_FL
`[%'t
lyk9%C A
Ot1NTi
:C/=:]BG
np3<$B
L\Q~"+
,\),Bo
7^gj/s2
%y<m=Cx
)mXl/:
yq$ Mf
1^_Qk:
3&;k,w3
1?!?Rk
{E\RK8
!,Qzkm
{4jm:(x2
,XS86b
l8x&&I
/@qMSd
6\pZdPp
|?c}Pl
BquXEw
"RhN<
eRe:f2
u>1=`Nc
W&k/Z)
j]gIq!rYo
M&{D `bf
LWq?e|?
<0ecjW
+@t-_-
rI\s\6
rerS!*
`WjLo9
?E=_qD
SCo1Ja
1<4J-H
}DsQH
+`@~Y0
&Sf0I3=S@
#!,"9u
+w5@3
7D{N1
eh4MFv
a@sPnU
4%E@1F'[
PWv;kiT8
1'$*Z+E(
QvzBP
2a&7Bp
3!|L]0j
o vqCi
5G,(mA
&c 'Jh
}FB8'A'
#vJ-m@
s}9C?F
}F2TQf&
>mqE/%
!l->tE]
G|\(LN0
ioUC9y
"n O5'
:tz#PQ~
@-r.Q9-`
Ywl2Y@F
|K`D"K
eH(|W'
.-E-qC
gd0(Mr
)`eObnM)
1z7]Q}
kRi9`SrB
svazuR
?g`5`4
6P|]m]
s:h$CG
Tsq1%[
V|!Pai8
L:O*Ah;V
W*Z8?6
*C+QM8
?Si!PN;C
'[F_:F$]
z'%/Bf5
+V-bJ%:
e-%lLx
EJVp7Z
D2)?d<
a\UiqIj
<S5]5
8x/9+\
qCIaON
{0;QIU
Q"mE!#e
0sN7grMGJM
0=S3:9Ad9
_`&2`p
3%&2JXlH=!
Q[|Vs(z!z
Syl7aJ
T,']psd
<G"=E=
7PdatY
$=-G{rS{_
Th3-K~
%pG"7#{
?~gUR
^K{*"'S?8
y*}i3Pb#
gV#|6M
^A8?VT
)7tiU4
J{Vw]+
kcti]B
r(ajW!
E*ZtRv
!Kg*Y
01l/9nf
vlx2GY
30DFG/mY5
}>Vx:
y%5os0
RVh7l5
[pbr~H>
/ll.L$
|[H-&j
).SG
x6ITh5m
{Yc]Cx
;JEq"0Y!
U&,Tm>m
`TFJFH
PD\`94
Y<DZG
;$ =On
R{vuQ3^
-m$KbZmS
dcQ&b
1f<{m@
`Bq{{
_@jd42
?8E;vn
9Xq11,)
g}ac7P
[kkr)5y%@;
.|/j!/
/EUi?2#
9*zf.,|
d:LM6
?DrDpE
KJXk=<
A_pXJ
R5X3%'
_xbetB3<xd
pW Y{w?<
tcD|M=
} GgIp
3fk;%er
TfNT@
MBZCb:
sh]I?h
ead#^#
q3w8r]
T6B$&V|
cX7U7j7
;[c3;GNde.
oKr/8/
IeIB37
,X#~Ze.L
Pe~s"'
+bA8p9
6sXft
>6 Hkx~
7#J6'C
78IGy(
NXR_2|
| .+~
ZrV<`[
]XU51~(
.!GLaVu:rX
4ej>Bh
^?<byAD1BIi
"='nJ\
|a,^>a
8u*0*k
ne@*e
-0H}g
> b!@C
9`9S{n
d_s-ia
`uY`%
1T$(1 c
5&^~q5
(:~q2&
b*#Ydw
Zh|{R!
v/3%;V
F,HtJzG3
[:EZWT3
H{v^?"
$Xz=tJ3
@j {ur3
u}R!zX:vFR
#$.T~c
}/Z:gV
.4t{7LM
#xi^K`
nqZzsr
j?s{\4w
rsD6.52
[bbA%T
$KOw>/
$v{Cr$_4
i=:]llu37
}tEz"#
7>`q!1
=/>"Kn
Im!I q
3z%]
~d)LTk
wO~dHJZ'
0 !iIS
GAd>j?
"UVVR`:
|0VP0k
C.bB6v\
L`RJ+#
Qgu.}H
gV3e{P
c %b$$
_hh9$'
P1tnha
<|7Z.(
T53?r=
W(pKvq
r@b4,8=
e!F5Am
'hp)]T^J
)2#Mj'!v
FR-uBjf
Gb[5=dJ
t+cD7y
V]V*3Z@
;8L\n(
v/5VtD
pkh$kZ
9mVy6n
703pEp},
,ybun|
gZN0Q
jtn|,Pp
!e]A4
p;\0=S
TU(}<n_
./Bs]"
uaRxM1
5`+vQ}w
o7x\'d
(C%p,A
G nkB,
+Uxp8
:X6yoty
MOlO>v
NM7-sU
}P?&f|
a%.)FI
&{*c%KQ
f(@E?j
WlI[Gn
>;t`9d
uhhe(M
6+DyX~
2]9J-c
]y~hbM
M0XD=P2
j,nssd
@y35fm
5**`DI
,K$2oNn_
&~-0 T
"vvo3
SC 53@
@c3U4'
"YH32V<
6finFp
<tG'*K
K-_3d,
 OY/I7|
GyJ>g<
UD8m,i
A*{!7V
G+AIw0
*d?K7q
]GdytJ
!d,/W$
.mZYHG=`
J+tw}3
<?;$lv;
:F[0t~
40a-bG
fDV~tC
G2L<V}
5n4\Nq
vQ:~+5<
>0FY\2Z%
"Z73NZ
[UhykK0}x[
VMGeAQ
Zfw'.+
C!R`O1r
g!S\^^a4
X~fK*-
/ck35z/t5
+Z0DYz
1|>&h;
<O/iY.H
bQSGpL
f0~m3l
'GO6st
8<O<j!U
=z`>{<
)rw_|'
,]l*S
-ZD1_
h!`)hK
ST}MDE=9
wWM(&T
o5-%^TA~
ku\WPm1
Er n(j
Q=&aku!^
)sSS
8@IuMM
);]AFwqI
_l:#1w
U110&f
|-L{,x
v$_UNN
IWkzzr!a|[D
[^z*8
Yn3w]y
PZByiJ
~5Oz?6
e)I.W4=;3J
VY~mxY~7
FDC:0#
N8LvS~T
Xwg> 3i
rs~q[H!
VH}HM-?
+FwaJM
TVx'w
39V\G>
WUtj/w
~U<0FrF
T-@wrc
kBDrcA
kzK,G>Hs
~,]|46
Xgus\f
O^~F2\
IK?,d%`
L|/>|P_
BB:uU^
;Zm6\Qj
jpyv)e~_
Ubys:D
=)H4:Y
Gx|),#VE
>uird`
SgW`A)
4dKm+=t
QDDJ h
@~|)pL
"Px(9Y
1&pcwy`
o>M!lz
r$|{Y!
k l:r%/
>l(NN'j
ai/5{H
Rkwn!C
6KM;6H
V 4L_6
_|yp%g
id.YSI
Y!UAsKJ
#@h'k=
9c{FIJ
S/8|"d
NTjKW-
E<Y8W9N
pi!}uR
]9YHiF
a|/c^
rt/\\@8
vfv#MkEaE
(|B1]sk
}k)Vf2i
9d|IB$tD
b9eb9z
{BCKa^
k!J6o
|IntbY
dU0&eDA"
*[3yNP
yJ0iD
ii^8>
c.R-rz
B-CO;:
^k"IcF
En>Ff[=
TFTN6f
\+~YT_
4+*h9>U
v"bDR4
b1r6az
1n<V}n
a/c'vTR
s$u<C{
X-{qAF*
M2Ion[
_JRY%e
K1i[Kw'
"+h'x>
3^_9@z
niH^^%p
-B1I%4
W;<KR'8
qt]^$g
]LAC9M2K
Ag(H\i
{,c`cG"&
?%C^p;
>z0;u
/#%d{9
p^o)+>
U)"/Uo
[gZacc
0Ku7ufC
JQ r,h
qVBSs5
?@JZaX
p]!kfb`q
d-xp^
6"e>}~
>.T:Xm
>ahvz)
'[,`!+0
Yc,_#lq
-Evg1G
$_/h?a$
xEAT{_'
9yaH*v`
13YL(B
"N*f_Y
H97^bV
zikL;X&
o/"L(hC
c g-=$6
NJS8Rqp8
P:>st(
nBfsTub
iLI56S5a
A)!|/q
F7Z=I3
Up|[7xI$
L^s.]@
_g1 P1
TiY~PY
GYEH!"
3B@yA@
|R'@U^
3v;Li
Uf>I-Ih%
omc[bu
M: %3Y
iC8c>$
y&_[;m0
[59d|]
qZx`0+
J{ay6c
L+;n0o
2FntE0?
,bnx!\G
h02#="
JybTo
ICGJ!J0
t6/$e@=
_?{="r
.NlEtMK
':muC_
HwyJ!C"7
\X$\"_
.-|7/o
x&;74{
KA^?*Ld
tt$mRB
^5lh/MkX
ZN4K;?
{tBc+ )w'
eLx97i
XD-a38
b56) P
\&$KsN"q
0:oHF7F
xkuSE>MQo
lwWjn|
w2)O}c
p`MfoZ
3Nfz3N
|'1}7a
PGuRKb
Ky_3c&
TdKVIG
o<K\%g&v
`^aI5Ii^
F33JJ]jE
9a@l'yVH
`'"l2w
{+we H
kfN_qM
ft"$8I
LxP&+$
+Pi1W!
"?$d/(y
Vn0=`i
V~che5
Y&PGi_q
4@&*aw
ek)#0,
f9:C%-
F_!5ZW
uzKsa"
P<a#Zspro
;Q&+&2
7lVHo0
QWlbFwB
cM:!UJ
?_-z{
nDMreP
go!E+>
>SX}m-^
rBc^Pva
of50N\T
|,ra=D[
=N,f25A
z)*%&5
#q\*x:
rr7nSOY]
7/Y`p/
6%;:]~MS
$4O`u>
Q|NL>i
EyVTc6
#!]hIeL
!I44tDs
ej`sOr
>isAAz
n9m_Y3x
*7)l36
N0i<u'M
S;9L{:
A1OL2?
#;_ld9
02c`iT;[
P7loS&
Y@gfl`
-47VWw
as#,,uw
&<o5-L|
Pb|Ah"
VZFzr3a
;i?,Tfi
leK& J
:/<c9o
%@,X~t
_TB6i&R
4v/Ev'{
,uHb.I
[{|gHk
D\`}Q"
aIwh"[
u3y`kJMsE
ac<E$n
xzM/bs;
YW(WpT-
2J6-W
pdB9tv
!ZQ:B,
%2MT8<-
^F,T-%N
Z=~/WmD7
[7sL+;a
tHPm)v
;.]0Gp
mAdp}a
J9QNoX_
\Rl|6?b
=@B3q]
xHQGH4
%)_<mZ
zZ)QKd^
[(X]-L
#RLRg1&
frT6r(s
xE+cu?
k;07A'
0$v(C,t
u]90O`q
9`m TU
@}~t>K
pl854K
C7ojnC>
`ZZ)^5k
GCB0i|
CDl8S!
;rm^%8
D}qt{n
w{;)"g
5u9 %A
SwK"_v,t
bDzFH$]
q,VlUy
Pj< Az
TYw3}H8}
OJZs{
L~1hv*&
|%RE^d
+Y6erP
"%WQ$)
GV}V\YB
"nt+4,
&0sZRr,
vtR{xwVt
$ErBcj
p4VM#'
@`o!5-2
1of6#B
45uqRD
[E> J+
#VH|q|
-7T3':C
FKbKn
g*Dy>A
sEF"HB
T\#E.Z
ip2C\w$
$|hg`.
0:15 (
90Xk_r5
y+|d,E
^%/"!gM]
[rPlzD
rX35o<
I[]a)G
sU;l>/
)]_E-C;
ve>s+i
y]&5@g
+OvS]I
C9Kg\`.
4`T}>&
.9N~s64
%)}i:
6W'Izv
UqKhQjJP
){]e*h^
<bl<ON5
7m,`BV
7oRbG6$
"wmM$d
)*~DSv
pQgV+g
QX!4|I
jrP/Iiw
|po`o)
m5AR"Kat
4V/E /
f=~0Ds
V-$fB"
=%^2sF
f= 4y#
tG3K]W
V|c\q\
v3&Ku5
"ZYln{
HD~[JU
>c$+P3W
!Pe`qr
29 \c7
Yj5"h\8=
As}%~(
3J_u#%rbT
4]CNdQ
CT=!kJ<P@
E2i\}h
d0L$HF
4;@(g2
Wu_2
Oyi_mw:
!Z~pYR(
G[DMRr
`}M,IV
Ew+3%w
Wa}-{r
|7)kl2D
,{h5~X
?@hre'
F%b!SxdE
CU}g,U
|bH,#
x\I_;B
7dYa@:4
?)Y^Dwd
s=(<}1
TekHce
Qes. Q
R`btIO
7["ouzM
>YY=Z
"cKpSv
qnHvCt(
G#T@:G7X
xjrh#+i
rp2U_"
EFo-,J
Y".hK~ULB
N>g*t&
^~{Ab%S;
/M5^%u
K~SfxF
Ss(uk)9
-';3(0K6
l8D0kc
7v1?kedA
~lY_u,\
%`bhh7o
8<[^%k
dIu5r>
[0U}S=f0{
CF496
_I4y4d
!'<ACIU5a
8;&pNw
6n'(xw
.,,6yD
y,:\}8$4
j>{Oh8
.l>76B>2%#
9n+JLg9cc
C%1"I
B8Oe7n
E!K$d9K
a1/A^`
'qhbbX
=}Y^Wy
V^Rm_q
/'ZxX_
N-MuW^%
f"4'75
A(+JRc
uds!m(
Z>]$-
E60OS2
'(z~Lfc
UTK2M
Tx@V\S
<&!_r@
==R="*>
!6s23X
qM<HlP>
P}|[f~
wN3_'|
[c3T++l
yR{C1f
=8pAp
~W^Oj"
OGL;\qw
RG|w D
~#\1:
GSi5!F
nzFbhI
,9%.!T
V%};8F9
<=+4t0
^v^R(@
OQek<t
`w).,0
a/_J?z
h6]]~:
8>9M"jsUO
{g25Ox
rdmi>5
*)"e#o5
d|7g^B
=Zwxlv
g><XF;f
yq*8B.
?vul1Pv
5o0|.9
hzbZiC
$*mB4w
xAxaZhYuS
?CgKh^
DVUXfFSv
G&i'Mm
[lX0[f
a~qh:/
;8aT<I
~!*Y)\
Usx<L
fy_s+e;nw
hE6iox
3?PlB<
I)ie[
Ut-#TO|
@C$Z|=
0Dfqq]0
SM.>H|
w}y?Ye
LsCZK*V
OQE^IXsEn1
gS<KJ
_!t6)
H5gUJ(
E{62+n
h%h~]"
vb&&B<cG
n?ynYo
yhgqH
@,}~(X
Hn$L]ts
UL|bdR
juc8}d5
&^wR;]Uh&
sn+Zn!
DWM|,^
R8u/=jQp
/R/A2B#6
4tz#pYY
5 [$jxN
7KAk'7$f\6~
*NuWMxe
k10+JN
whNVC/ME
=eQg3^(h
Ep=b/"
Y}-sM5
c21=?<
yDq|#u
w>q)6@$o
ed6\bE
WLtkn{me
:3r<!<AfeZo
aM^xu
i;3Z3:
NQ8%v;9
WKC5GD
~+^B?
ms2W{\hK
Yu=-4E
&@~PB
md?Kry
mLH"MTu:
'Z/iefm
<eqCG<
59!5gk/
/mz?@P`
u|,!q*p
8sh$jG
;uVPOJ
<3>yu^
X'9Trb
qFm1b\7
p8DUI2
:%)o[w
,2eAG*
65x%?H
KEh5+@
OgN+-*
`]B%o]
Ee~_~5p
1,~?P>
[r'BAE3_
[MO~M(
?[9tw
fc=s\"
fN !'R
hpL&$
<?I&sn
~2kl r
FNDkDS
_b5h*{@!3
ov_j]gaG9
_hWcA/
6'!7>z'
2<;=+5
,nIST@JmW
,8~DFtR
33bL ,
6L&8di
QufP:I
A&11U$
E7$&8X
`'%H.HNm
((g0h1
j:RDfdO|
zts<(#R
"a$l3?
oG^@/]
qSVbBL
j2:E:I
:a8n<J
JStH-Kf
gl<-B$
22+{CqPz2z
~%q2"^
3 rJ:Uj
7`F4V
/G0;YJ
Czl[VX
M'Bs~m
,w'i?~+
u;P^Iz=8
VcKKIm
3YmW,B
;(WDJ\$t
v| e7/,%
mlYv7V
u&-NaB
z%I>q+
jy?*Y]:
J;<*@|cM
Bh5V_}
/N(DRu
uyvh\-Z
^W&I@q
lNT~_y
<F_fPL
+3YcReb
^5KjZ
A`/JB!
GLCErB
7RX`YL
L(HRamG
E^zTa(o%
\8xl/Q
rwa6;Q\
]|%XAy~
)Jz0j}
`?t?TD
je5D}`;
-hfTUu
0'SpX
@cb35Qy
Jti#GYP
_|aW2`
YgW43&(
.1k7r:4
`RNAlE2[\-
AZP16q
[LC>[6
,WnS6~
?m>m;Y
|Cp&1m
[F~CcT
\LU'sw
v)[ ]WU
W{u"U8
Y#M7cz|V
Fv$/=1
<W#L-Z'
1vUlj2w
$Wm>J&
mVfL@;
0+ Iw9
VZ$fqm
X/Uz[t'
rfS[*R
;\cobD.
yPD|V&6G
4XvZEl="
KYzF{,9V8%,j:
JUz-*Y$
Ib$6P4
B9?}v@,
+]8z|Y
d4b=hg
E7Z?\&
vxW!s{u
R$cfjR
1/efoI
6K#d"-
hKvk*
C1FymJ
t]Vkb8
e|&U,
btDppp
#y~m~@h}
iQ<4PG
W#LRfIc
0a@J0J
K6}.y(
da(v[o
~[[q70`^8
S<42}k
**J>5i
1JQ[HY^
8"iQG*
WS_]gKc
kp[cC,/
Z]i>-6
y{KgA)keV
)7&]$m
\&-;jv
X?pzO1*l
vQrZIP
9V'S 4
CjH/t"
}PAqZo`
yRe02R
%pPoeN
~281_"
2tE=gm
3\mbH1
QV*eP7
mH|uZ
.C>;D2
%VLrNU
5xczWug
S:K\u%3EF
$=39"&>
@PY9;Z
r+@.nM
f.vV+B
(RC2pR
bA!M}d
.2Bk<:
$:_>v|z
*zRo<s
1A(5Z%
1Ht[$O
XAhc.-
%/w%'
p?)6l)
qyFjS^
>D+E7n
E$F\gA
%K,ySo
M>4yAtEX`}
8.l6m`
X2%B9q
?}8i"S
po=`'A
Of1[cV
uL-S/~N
7O[/#\{/
jc_<.2y
bhy_6H
gin*v_
hxZeNt`G
h1xSe4(
~b24||
(=Aboj
;<8.L=
MW+kYe
H' <g
J?Jk4u
VV]:w
Zc :7+'
5}Kt8,
PB2K0Fz
nI&-Nh`
gElM6$
sj?p|
I ?XL7m
L{B<VM
OI1!6eQ)Zq
#|qk"nD^xP7
3zN#e7
lX~ =I
`XSA!D
o~SYw9
MoSV2!
gD{Vr%
G++}$TV
X}f~Q&l
T2]0I:g
Gq*Ka7/J
{A`;}c0
!1[@xO
Y]Dev3~^
3c58tk
T<K(Rd
a6<bgRc
@%X*Xg3
TPI}%U
8B]n-X+
9`9HJTD
0^/ZT}D;
X$b}49
eZ[k6q
NK$5IAD
~z"!50
sKkF\[
AIHrbJ
:4 Tt_
orPZhP
6"\J9rq
(INXhg
G[nxZ#
:4f1KT
C~#GFI
L@1IQ[
N~7W!
&GT$>$
g{9^#W?
,=#:5:
1hBE&8
'/PZ']>l
"/7=c]p
Jh@Ca
k:)2BM`
D)=X\:q
}hQE"N
Dz+X_^
yD;_\P
BMb`Hty
b}]}sp::o
9KU'1[
syG(i#
m$g0[7
ty|Ism
$^nsr\
|mq{(d
4QnUz7
uuo0S;\
f 53x.
# $7mX
>)+ZL&l
WBV6)T
V/-?r}
$0$e4b
-Bx'~
<dxN7uz
3e97bE
:=s. M
7iGX(S
7ym>q?
P=1nck
q~e4r[a
i8U[mKAz
~~M#6P"
SA{>{R5
dtW`N@
a/0J-B
a7aap
~M?BL+=ef
cZDB>$#
Sk:~mO
B63-C1]
}V>,D>k
C"1V/.6
k6W/z4H
,7~i85
N4\q"v]
PnY<Gm
N.Av)5
L{b.1kEa
/7\LhB1
uks,l0y
s([L0S
8>}:3L
_KbFCWq
0]m=6z
x^IM3W
_O3rv>
Hjh|>-
GXQ??8pp
MvW;)B^A
B:uU:#s
0AKG.S
kK{y6hb
X9Fu)o
s2_U,N
G5M^HsX
:Zmfn$w
PSAY{I
/~1S:7
}pV8vM
n+K xT
8"!!0(13
}h{A_C"{
^BPB7H
V)8LF\p
<)Z+1R
Pn,iTn
+lY\G#
tq7q&\a
BN7|op
+hxGbJ
dL-[6@
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="utf-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" name="MyApplication.app" /><trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"><security><requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"><requestedExecutionLevel level="asInvoker" uiAccess="false" /></requestedPrivileges></security></trustInfo></assembly>
! " # $ % & ' (
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
Comments
Telegram Desktop
CompanyName
Telegram FZ-LLC
FileDescription
Telegram Desktop
FileVersion
2.7.4.0
InternalName
New_0228_02101111.exe
LegalCopyright
Copyright (C) 2014-2021
LegalTrademarks
OriginalFilename
New_0228_02101111.exe
ProductName
Telegram Desktop
ProductVersion
2.7.4.0
Assembly Version
2.7.4.0
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
FireEye Generic.mg.479de94fbadd83fc
CAT-QuickHeal Clean
McAfee Clean
Cylance Unsafe
VIPRE Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
CrowdStrike win/malicious_confidence_60% (D)
BitDefenderTheta Gen:NN.ZemsilF.34058.Sm0@aeuZ8jj
Cyren W32/MSIL_Agent.BCR.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 Clean
Baidu Clean
APEX Malicious
Paloalto generic.ml
ClamAV Clean
Kaspersky UDS:Trojan-Downloader.MSIL.Seraph.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Tencent Clean
Ad-Aware Clean
TACHYON Clean
Sophos Clean
Comodo Clean
F-Secure Clean
DrWeb Trojan.MulDropNET.48
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.bc
CMC Clean
Emsisoft Trojan.Crypt (A)
Ikarus Trojan.MSIL.Krypt
GData Clean
Jiangmin Clean
Webroot Clean
Avira HEUR/AGEN.1141703
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/AgentTesla!ml
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
VBA32 Clean
ALYac Clean
MAX Clean
Malwarebytes MachineLearning/Anomalous.100%
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
SentinelOne Static AI - Malicious PE
eGambit Unsafe.AI_Score_99%
Fortinet MSIL/Kryptik.ACFK!tr
Qihoo-360 HEUR/QVM03.0.0809.Malware.Gen
Cybereason malicious.faeab4
Avast Clean
MaxSecure Trojan.Malware.300983.susgen
No IRMA results available.