home

tsetup.0.9.32.exe

Telegram Desktop

Telegram Messenger LLP

This is a setup and installation application. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
Telegram Messenger LLP   (signed by Telegram Messenger LLP)

Product:
Telegram Desktop

Description:
Telegram Desktop Setup

Version:
0.9.32.0

MD5:
90cadb28502bc1d6caf102d7e87c3858

SHA-1:
d090b03a43295be8e75d9cd0bf502ed9df57aa67

SHA-256:
d2c3ce9af090533b96b30d1d582888f129ed53a462806cc2a3d7a3f850a980c8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 6:07:03 AM UTC  (today)

File size:
15.5 MB (16,300,344 bytes)

Product version:
0.9.32

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\tsetup.0.9.32.exe

Digital Signature
Signed by:
Telegram Messenger LLP

Authority:
GoDaddy.com, Inc.

Valid from:
9/10/2015 10:15:38 AM

Valid to:
9/10/2016 4:14:54 PM

Subject:
CN=Telegram Messenger LLP, O=Telegram Messenger LLP, L=London, C=GB

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
4098401CAB91A429

File PE Metadata
Compilation timestamp:
7/9/2014 9:58:13 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:9N9CRzmKdbdmvlG+cVS7UUfaFAjcDmyWfBzl:9N9CNTd5QlNcVS7mF0QuZJ

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86...
 
[+]

Entropy:
7.9812

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file tsetup.0.9.32.exe has been seen being distributed by the following 22 URLs.

http://lb.cdn.m6web.fr/d/c/a/14eb18565b170ad0f64495f8693608d6/56f03949/soft/.../telegram_0-9-32_en_432171.exe

http://dl.cdn.chip.de/downloads/.../tsetup.0.9.32.exe

temp:tsetup.0.9.32.exe

http://dl1.1001download.com/.../tsetup.0.9.32.exe

http://filehippo.com/download/file/.../

http://dw.uptodown.com/dwn/hKQE30rl3c_d3QhRhEuWbUkmKj2IUMkiLWJ562TeM1hdzuANUWanUmqZ2Jov4my3zqXd55D-jTDs78IfnxUrnvVMlNqUscKrVC0tHcAlWc0WQ9FGi6UcP0vKiB_47UjX/6_GsS5-eHiw6ca2eqtp1KTKN0YZsiZMv02Q0KN0lWICDsg0aw1Dde40CaSQCZ5kpdAZ7zckGU7TNMcuz13_ooZQtgme77MOjKlrpx3rG7mPd_ly3WwDZYPGHninm3g7r/.../

http://apk.watcabplus.com/?r=aHR0cHM6Ly90ZGVza3RvcC5jb20vd2lu

http://filehippo.com/download/file/.../

http://dw.uptodown.com/dwn/J0p7hAmOp3OHW6SgYilg6qVtix6RJzLMhUVFxHOakwAGOsavd_rpxJSogf2363y3bqGBCKcnIy8mWLlI4YmTpOxuHRRjNnlaDT0csit4A606k1L6_-sW35vW8kw4DH0C/nCK6VC3K8PczVKM8GJpeSMIe0AfykKZNis5ZiG2cLZfXfhq0RFEzyo2zlf62AhSErwLU7qM5_K01OS4d919BvsD3EX8YoIhGJM02ff1lupvG2S4OqAU9fxD_SaVcMdvy/.../

http://dl.barato.ir/app/.../Telegram_0.9.32(BaraTo.iR).exe

http://tdesktop.com/win

http://dw.uptodown.com/dwn/0wT2qOyYRKS33IHmX60Bt6HC_EyqZd4pmUm-dhxpug_axQpTZnHjd0olCDhdYTiquVLxqOHI5Bg8c8kg3X_azcPWw40Zz0LSZJFqjgxmMcRPLfdhF7oQ7Mk7OTlc8JEy/txMGw_xlCN4OwE1rkZ0QwfXnLMuzQhE2oAe_OVvgDNaNpfkblQaPanaNH78Bcv9jx2j_VjtgEmKDUBni1FBq1GrGbRrmf4pL7TgpJ5Wmp_ucElxt1SpYHwd-n1DJG-DV/0OdQ2DVXitLRUUrwm_-fk_epX6gbIBJDLVcu9aJHUI5QEDiIiZI_AWelXhN7XsJW6mVyfguEO4oiYjeePirN-0YMMwi24ULLCy89k5VuecB8n1iWXH2PEoj6RvY0HF32/.../

https://tlgrm.ru/.../tdesktop

http://tdesktop.com/.../current

http://filehippo.com/download/file/.../

http://lb.cdn.m6web.fr/d/c/a/3fb469f2e3f76cba54e3b9ba67a5965a/57025233/soft/.../telegram_0-9-32_en_432171.exe

http://lb.cdn.m6web.fr/d/c/a/298f7679de56b05bead175f919083482/56eeae9b/soft/.../telegram_0-9-32_en_432171.exe

http://sft1.installpack.ru/Telegram_Setup.exe

https://tdesktop.com/.../

https://updates.tdesktop.com/.../tsetup.0.9.32.exe

https://tdesktop.com/win

https://l.facebook.com/l.php?u=https://.../win&h=oAQHRh6Yd

Scan tsetup.0.9.32.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.