home

telegram_for_desktop.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from updates.tdesktop.com.
MD5:
22fab9a50589d5274f7eed1bc70126c7

SHA-1:
5ce9fd5d0df58f8fba3b595d003e8e8f0db87f2d

SHA-256:
23d19d9d79bd19ad30234a2005a367bb23f70ae203c9fd6279bbf9e9df4aeca1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 1:01:17 AM UTC  (today)

File size:
17.2 MB (18,046,709 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\telegram_for_desktop.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
393216:gljPwYfBMzFnPbLJDZpxFDVyiPzDMbcKE5IU5bAnf4DX5K:gq8MFNjFxzgo3rWA8

Entry point:
50, 4B, 03, 04, 14, 00, 00, 00, 00, 00, 22, 84, 94, 48, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 09, 00, 00, 00, 54, 65, 6C, 65, 67, 72, 61, 6D, 2F, 50, 4B, 03, 04, 14, 00, 00, 00, 08, 00, 15, 84, 94, 48, C7, 18, 06, 92, C3, 5D, 13, 01, 60, 73, ED, 01, 15, 00, 00, 00, 54, 65, 6C, 65, 67, 72, 61, 6D, 2F, 54, 65, 6C, 65, 67, 72, 61, 6D, 2E, 65, 78, 65, EC, 5D, 79, 4C, A3, 45, 14, 6F, B1, 6A, 55, F4, 7D, 22, 22, 8B, A8, D5, A0, A9, C6, A3, 1A, 8D, B7, 41, 5D, 23, DE, 55, 51, 8B, A2, 96, 55, 2B, 20, F6...
 
[+]

Entropy:
7.9995  (probably packed)

The file telegram_for_desktop.exe has been seen being distributed by the following URL.

https://updates.tdesktop.com/.../tportable.0.9.44.zip

Scan telegram_for_desktop.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.