» tsetup.0.9.2.exe
Overview
Analysis
File Details
Downloads (24)

tsetup.0.9.2.exe

Telegram Desktop

Telegram Messenger LLP

This is a self-extracting archive and installer. The file has been seen being downloaded from www.bitstagcontent.com and multiple other hosts.

File name:

tsetup.0.9.2.exe

Publisher:

Telegram Messenger LLP (signed by Telegram Messenger LLP)

Product:

Telegram Desktop

Description:

Telegram Desktop Setup

Version:

0.9.2.0

MD5:

8564b68f089bbae34d852c1ba4edb1f6

SHA-1:

8ced5918cfa73900400d30a3d396fefe548599aa

SHA-256:

908483362f6e870103921db01a7359a1e065da31d72acf6979d62fb142a693c8

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/23/2024 1:27:57 AM UTC (today)

File size:

13.3 MB (13,958,688 bytes)

Product version:

0.9.2

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\tsetup.0.9.2.exe

Digital Signature

Signed by:

Telegram Messenger LLP

Authority:

GoDaddy.com, Inc.

Valid from:

9/10/2015 1:15:38 PM

Valid to:

9/10/2016 7:14:54 PM

Subject:

CN=Telegram Messenger LLP, O=Telegram Messenger LLP, L=London, C=GB

Issuer:

CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

4098401CAB91A429

File PE Metadata

Compilation timestamp:

7/9/2014 12:58:13 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

393216:8NTPPSu061O8bgZ2g1aCjtNUX6TiT6KOP1d0:ezQ8bg4HKOT6v1d0

Entry address:

0x113BC

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

63.5 KB (65,024 bytes)

The file tsetup.0.9.2.exe has been seen being distributed by the following 24 URLs.

http://www.bitstagcontent.com/ST2Z7NpgbRYbsr21Ez9fV_OrnXjlfU0NOmB4gTVssC15dtoXvO4c8Uv3IGh2IOoEGmT4T18LDwjfAbl6CDjgBuDAX6yKDa9szJv5aM1sS06lAreAVFPpKzG2nJe7wMFIEjlbR2EoHBXQvxmtttx_EGMDZwwbv6ZaPywoWFNrJ07QrY9N3_gQN5vuxmybjaeYPpObaZhG-G2IBAGRZLn v7gdNgk_cgeqJwfRtu467BRVxTMHh8USr2z9Bs3Eau5U78XgdRZZxyi7n2UkoBqCGPAk PPc_yRn3CGNKf4K_TCWC1EaVOdX5a8aBO068_q03HtnW J9tjdrpos_deG3r4Uayw7OtHXZzuEVKLyXZzu_R3ST3frS2dXK0dXz7sG8etnf04_bz2enhVUH7F7wAR6qg_a_E5nNiWNB EgXt 58kP4ySaN_1uV6rm27RCJDmmd_v_c76RZ3W0AIAPtz07aSuVqHSWjcVQ_ITn78W9ZqtYqSoIwZyFhvTUCVrr7UGBZW0TaNrVbsGKmUrkORCJRCsR6ciQUQA

http://tdesktop.com/win

http://s6.picofile.com/d/.../Telegram_Desktop_pcwindows_ir.exe

http://www.bitstagcontent.com/CxKPRKzUR1kxULRI5 TNccDIkSkQ3qIimnb5m3mujGc_AubEj4c5YQ7slOaYyQ3oWS1ibtcbAZxV7zY2qeWYZUK31exmJVhyvDu1Vw0HVH2TQ00Me9vKDT9zAQe73FOBulDTTdGjLUoU2MBlZNb0j BLwGotmw711ptRlv1WKYEfi5kEsvtrLTsS5hkQnhBAtHPCbeBz4dk1gvNfAN_ODKUAbxgw1w==-G2IBAOTQrrpqr4smPj3IJZPn23Yddwsq4piCw OJVrd_gmbjNHYrd LxOoos45SF98NJKAsAjWHH8fA8_HHOuEdoTfwJ_tIRRoXSkniX q8BU2wx4PQ33XhEW 0_2mryfip90a62Hm4EOjzb2kE3h1sg1SzJdn6P7jpfhs1q6 Ro6_j2YV8_bO ox 3ns9PDqwD2L3jBKNgA9r8cms8JsQD2HQ9gP_xx4sMoifbd0KeruukWqODSPPP7vd hnFK3YoZSig83Zd6lySqUWxW9GJKfhP5rSldGhBIYCCvjSFGbhlYZayUFCLVOVKwZl9LGwiQR2CzOWJSFjCke0UiDkho=

http://s6.picofile.com/d/.../Telegram_Desktop_pcwindows_ir.exe

http://download.installpack.ru/Telegram_Setup.exe

http://s6.picofile.com/d/.../Telegram_Desktop_pcwindows_ir.exe

http://dl.cdn.chip.de/downloads/.../tsetup.0.9.2.exe

http://s6.picofile.com/d/.../Telegram_Desktop_pcwindows_ir.exe

https://tdesktop.com/.../

https://updates.tdesktop.com/.../tsetup.0.9.2.exe

https://tdesktop.com/win

Scan tsetup.0.9.2.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.