» tsetup.0.9.51.exe
Overview
Analysis
File Details
Downloads (20)

tsetup.0.9.51.exe

Telegram Desktop

Telegram Messenger LLP

This is a setup and installation application. The file has been seen being downloaded from 62.201.209.57 and multiple other hosts.

File name:

tsetup.0.9.51.exe

Publisher:

Telegram Messenger LLP (signed by Telegram Messenger LLP)

Product:

Telegram Desktop

Description:

Telegram Desktop Setup

Version:

0.9.51.0

MD5:

c21d534a516fff78b07070f10fb3c2be

SHA-1:

e193a62becaa1cfab7fb0ed08905fd6b8be92311

SHA-256:

ad0ab14cea9f64c38941a666efb4d13d8df3d39b2fc03b5810a6625f09aca856

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 2:48:49 PM UTC (today)

File size:

15.6 MB (16,391,848 bytes)

Product version:

0.9.51

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\programs\tsetup.0.9.51.exe

Digital Signature

Signed by:

Telegram Messenger LLP

Authority:

GoDaddy.com, Inc.

Valid from:

9/10/2015 11:45:38 AM

Valid to:

9/10/2016 5:44:54 PM

Subject:

CN=Telegram Messenger LLP, O=Telegram Messenger LLP, L=London, C=GB

Issuer:

CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

4098401CAB91A429

File PE Metadata

Compilation timestamp:

7/9/2014 11:28:13 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

393216:xvu4lm0/WXzFu4mQqKQRgi4C+5rm02EV/vyC:ZBlROY4mQ7Mwndr/vx

Entry address:

0x113BC

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86... 
[+]

Entropy:

7.9813

Developed / compiled with:

Microsoft Visual C++

Code size:

63.5 KB (65,024 bytes)

The file tsetup.0.9.51.exe has been seen being distributed by the following 20 URLs.

http://62.201.209.57:1155/main.php/.../1347

http://filehippo.com/download/file/.../

http://dl.cdn.chip.de/downloads/.../tsetup.0.9.51.exe

http://filehippo.com/download/file/.../

http://dl3.android30t.com/.../Telegram-Desktop-v0.9.51(Android30t.Com).exe

http://10.161.139.194/.../hcsKVapbuloOGK3rirzT2c_P5BAI2cjUoDMe2s3n7QrMMJ8Bnm2yy2pOBld3ISgQ

https://tlgrm.ru/.../tdesktop

http://share2.earthlinktele.com/download.aspx?file=2116564026&sig=MjcvMDYvMjAxNiAwNzoxMDowMw==

http://share2.earthlinktele.com/download.aspx?file=1696515659&sig=MjIvMTAvMjAxNiAwNTo0MToyNQ==

http://www.grabupdateshare.com/pz1Rnq0 MI7rXQpwnUh6PAhwqHrB2RJtITLtal8BiFsXKgG40Hn8OgV2q EV8a1lb9C_Nx6keW3diHzLAodwQIKDVHks6Z7HLxPOLOVa9YEANzLnvtb_TukvTFbuFxHw5tqm_ShrmVWtQKTOZ4RdgvPihse_NuNmh3A1oWnmCOGKEKHhfRL3J8wl4AVhjtVUNk1 0HA7dsHSMGj97wkqeysMPGt7Ppj4ckdJuRopMpq1Jh I3KDvkfTo3mJYiKinTItmLa48gDwFuRjhf3FPSzmdeqoPSqkFdhqhcrC8CwF5DQ6jdOe25RTIBRR09DaSMaXP4Es9ahLOoFMd4bDjd5yduxTKFFDVQx3E72gHoeHut8IIO6T8hoR9fCaaaZ fmr2bdi_YxJmbRkwGbnTXARKRgL7IpZoiyBuM_tNbnKc7epfLBzr4LIGCEFbvSuHB8yqfbAZFjzQIPHdQXi21cA6tJFnVgsx9yBg 4iTQMJK_JiUVlB0a132N0dVT3MTSYWbQj4btmem015bdezMyHXY5MfgyVi7d3Gi qwC5u_mryr01OJYMv2EcAoeH4cqv7qrF4_0sO35O9qmtsg7y3KJeSJsGNNfiALnFmtI3ejvsD8c foVM9ZulyaOjjQUCPIlgXAhgO6yFyGBDIZ1SvtYY1GgkKw3GKCosNnlfgVNLjQBN9b4LnqJhH1rMM31bzGnVZaX2x4HrEshKp7FB4uW LllEvbZvjZV1LvXio8evemAsMTip_ffvJnocJvv5tulv3Gc9I7ZtUgeyoIF8gyY5n5vtjg==-G0YAAETdFpP7Dwo3VLMh_kEtwi_oGJcPijfIOK6D2bAxdp5HsPTGNDJ238t1XjjVzGleJ0lVZcrwfBeMjiZl8Jjx7w==-e

http://dw.uptodown.com/dwn/Trb4Y94WcXAWiCil1vBJTBHI2rvVzmG4Ddvy7OL1FATjCeSjsM9WoDcd7_IG4UT3rwzItDaoqq3MCHhhY6tDBzoVbOJKtHaKgzbkoyCamVVbbzYKwo8E9u63WyIXgRNE/semUNs4cuSYVp5SRvMObUMa-L3GDUSR7I4JF2T0bs1xOV_hG4GYrTkgnycP_55tINSfbYcPIvhoI9aWTrMPBezdJTp7onJTQQJLsn_S59jb1APRohFvngYkRUG3dJxZ_/3dej0RVxP9ROByaCV4MFfj6uiIRD8H7zOiHMtOoISUFFTOTCVEyYLJaNuomftgDA4pTPBVxJumYwoyqx_DN8iUieoP7gKaTQpUEwSGylSispFM2MCZy1WkBsxVGrwr0L/.../

http://tdesktop.com/.../current

http://indir.gezginler.net/i/34324/.../

http://dl.barato.ir/app/.../Telegram_0.9.51(BaraTo.iR).exe

https://l.facebook.com/l.php?u=https://.../win&h=xAQEjLUFw

https://updates.tdesktop.com/.../tsetup.0.9.49.exe

http://apk.watcabplus.com/?r=aHR0cHM6Ly90ZGVza3RvcC5jb20vd2lu

https://telegram.org/dl/.../win

https://tdesktop.com/win

https://updates.tdesktop.com/.../tsetup.0.9.51.exe

Scan tsetup.0.9.51.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.