privacy.exe

info
MZ
PE
resources
imports
foremost
hexdump
disasm
log
discuss
donate

filename	privacy.exe
size	2740224 (0x29d000)
md5	b79d3d6a4e9e2cd739660e2ad9734d58

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x110

Rich Header

lib id	version	times used
42	8803	12
11	8798	3
12	7291	8
14	7299	30
10	9782	565
11	8047	13
10	8047	6
0	0	8
1	0	283
93	4035	19
11	9782	115
6	1735	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x4b5ea651
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10e
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0x1ee000
SizeOfInitializedData	0xb3000
SizeOfUninitializedData	0
AddressOfEntryPoint	0xdc18e
BaseOfCode	0x1000
BaseOfData	0x1ef000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x2a2000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1ed78e	0x1ee000	R-X CODE
.rdata	0x1ef000	0x4efd2	0x4f000	R-- IDATA
.data	0x23e000	0x26890	0x22000	RW- IDATA
.idata	0x265000	0x2360	0x3000	RW- IDATA
.rsrc	0x268000	0x204f0	0x21000	R-- IDATA
.reloc	0x289000	0x186fc	0x19000	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x265000	0xc8
RESOURCE	0x268000	0x204f0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x289000	0x1408c
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x26579c	0x6d4
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
BIN	#204	73728
REGISTRY	#100	179
REGISTRY	#102	681
REGISTRY	#103	641
REGISTRY	#104	689
REGISTRY	#105	633
REGISTRY	#106	657
REGISTRY	#107	681
REGISTRY	#108	697
REGISTRY	#109	665
REGISTRY	#110	633
REGISTRY	#111	673
REGISTRY	#112	689
REGISTRY	#114	673
TYPELIB	#1	26988

module_name	hint	ord	function_name
VERSION.dll	2		GetFileVersionInfoSizeW
VERSION.dll	3		GetFileVersionInfoW
PSAPI.DLL	15		GetModuleFileNameExW
WS2_32.dll		151
WS2_32.dll		18
WS2_32.dll		16
WS2_32.dll		17
WS2_32.dll		3
WS2_32.dll		6
WS2_32.dll		2
WS2_32.dll		20
WS2_32.dll		23
WS2_32.dll	65		WSASocketA
WS2_32.dll		21
WS2_32.dll		1
WS2_32.dll		8
WS2_32.dll		11
WS2_32.dll		112
WS2_32.dll		13
WS2_32.dll		4
WS2_32.dll	40		WSAIoctl
WS2_32.dll		19
WS2_32.dll	28		WSAEventSelect
WS2_32.dll		10
WS2_32.dll		101
WS2_32.dll		115
WS2_32.dll		116
WS2_32.dll		15
WS2_32.dll		56
WS2_32.dll		51
WS2_32.dll		12
WS2_32.dll		55
WS2_32.dll		9
WS2_32.dll		111
WS2_32.dll		52
WS2_32.dll		22
KERNEL32.dll	769		SetEvent
KERNEL32.dll	533		InitializeCriticalSection
KERNEL32.dll	127		DeleteCriticalSection
KERNEL32.dll	240		FreeLibrary
KERNEL32.dll	407		GetProcAddress
KERNEL32.dll	580		LoadLibraryW
KERNEL32.dll	186		ExpandEnvironmentStringsW
KERNEL32.dll	577		LoadLibraryA
KERNEL32.dll	439		GetSystemDirectoryW
KERNEL32.dll	475		GetVersionExA
KERNEL32.dll	456		GetTempPathA
KERNEL32.dll	318		GetCurrentThreadId
KERNEL32.dll	646		Process32Next
KERNEL32.dll	644		Process32First
KERNEL32.dll	111		CreateToolhelp32Snapshot
KERNEL32.dll	938		lstrcmpiA
KERNEL32.dll	265		GetCommandLineA
KERNEL32.dll	372		GetModuleFileNameW
KERNEL32.dll	932		lstrcatA
KERNEL32.dll	948		lstrlenW
KERNEL32.dll	894		WideCharToMultiByte
KERNEL32.dll	315		GetCurrentProcess
KERNEL32.dll	317		GetCurrentThread
KERNEL32.dll	541		InterlockedIncrement
KERNEL32.dll	576		LeaveCriticalSection
KERNEL32.dll	150		EnterCriticalSection
KERNEL32.dll	647		Process32NextW
KERNEL32.dll	612		MultiByteToWideChar
KERNEL32.dll	628		OpenProcess
KERNEL32.dll	237		FreeConsole
KERNEL32.dll	466		GetTimeFormatA
KERNEL32.dll	319		GetDateFormatA
KERNEL32.dll	362		GetLocalTime
KERNEL32.dll	787		SetLastError
KERNEL32.dll	235		FormatMessageA
KERNEL32.dll	347		GetFileSize
KERNEL32.dll	79		CreateFileA
KERNEL32.dll	888		WaitForMultipleObjects
KERNEL32.dll	890		WaitForSingleObject
KERNEL32.dll	649		PulseEvent
KERNEL32.dll	108		CreateThread
KERNEL32.dll	703		ResumeThread
KERNEL32.dll	839		TerminateThread
KERNEL32.dll	813		SetThreadPriority
KERNEL32.dll	830		Sleep
KERNEL32.dll	104		CreateSemaphoreA
KERNEL32.dll	689		ReleaseSemaphore
KERNEL32.dll	92		CreateMutexA
KERNEL32.dll	688		ReleaseMutex
KERNEL32.dll	548		IsBadReadPtr
KERNEL32.dll	434		GetStringTypeW
KERNEL32.dll	431		GetStringTypeA
KERNEL32.dll	468		GetTimeZoneInformation
KERNEL32.dll	469		GetUserDefaultLCID
KERNEL32.dll	172		EnumSystemLocalesA
KERNEL32.dll	363		GetLocaleInfoA
KERNEL32.dll	558		IsValidCodePage
KERNEL32.dll	560		IsValidLocale
KERNEL32.dll	335		GetEnvironmentStringsW
KERNEL32.dll	333		GetEnvironmentStrings
KERNEL32.dll	239		FreeEnvironmentStringsW
KERNEL32.dll	238		FreeEnvironmentStringsA
KERNEL32.dll	855		UnhandledExceptionFilter
KERNEL32.dll	551		IsBadWritePtr
KERNEL32.dll	874		VirtualAlloc
KERNEL32.dll	877		VirtualFree
KERNEL32.dll	947		lstrlenA
KERNEL32.dll	537		InterlockedDecrement
KERNEL32.dll	371		GetModuleFileNameA
KERNEL32.dll	223		FindResourceA
KERNEL32.dll	582		LoadResource
KERNEL32.dll	596		LockResource
KERNEL32.dll	829		SizeofResource
KERNEL32.dll	545		IsBadCodePtr
KERNEL32.dll	801		SetStdHandle
KERNEL32.dll	82		CreateFileW
KERNEL32.dll	246		GetACP
KERNEL32.dll	394		GetOEMCP
KERNEL32.dll	765		SetEndOfFile
KERNEL32.dll	364		GetLocaleInfoW
KERNEL32.dll	766		SetEnvironmentVariableA
KERNEL32.dll	217		FindNextFileA
KERNEL32.dll	208		FindFirstFileA
KERNEL32.dll	204		FindClose
KERNEL32.dll	502		GlobalMemoryStatus
KERNEL32.dll	657		QueryPerformanceCounter
KERNEL32.dll	229		FlushConsoleInputBuffer
KERNEL32.dll	759		SetCurrentDirectoryA
KERNEL32.dll	583		LocalAlloc
KERNEL32.dll	75		CreateEventA
KERNEL32.dll	700		ResetEvent
KERNEL32.dll	587		LocalFree
KERNEL32.dll	360		GetLastError
KERNEL32.dll	438		GetSystemDirectoryA
KERNEL32.dll	49		CloseHandle
KERNEL32.dll	465		GetTickCount
KERNEL32.dll	316		GetCurrentProcessId
KERNEL32.dll	461		GetThreadPriority
KERNEL32.dll	941		lstrcpyA
KERNEL32.dll	664		ReadConsoleInputA
KERNEL32.dll	746		SetConsoleMode
KERNEL32.dll	300		GetConsoleMode
KERNEL32.dll	637		PeekConsoleInputA
KERNEL32.dll	392		GetNumberOfConsoleInputEvents
KERNEL32.dll	443		GetSystemTime
KERNEL32.dll	195		FileTimeToSystemTime
KERNEL32.dll	194		FileTimeToLocalFileTime
KERNEL32.dll	331		GetDriveTypeA
KERNEL32.dll	896		WriteConsoleA
KERNEL32.dll	353		GetFullPathNameA
KERNEL32.dll	313		GetCurrentDirectoryA
KERNEL32.dll	645		Process32FirstW
KERNEL32.dll	516		HeapCreate
KERNEL32.dll	518		HeapDestroy
KERNEL32.dll	336		GetEnvironmentVariableA
KERNEL32.dll	350		GetFileType
KERNEL32.dll	430		GetStdHandle
KERNEL32.dll	783		SetHandleCount
KERNEL32.dll	675		ReadFile
KERNEL32.dll	731		SetConsoleCtrlHandler
KERNEL32.dll	230		FlushFileBuffers
KERNEL32.dll	774		SetFilePointer
KERNEL32.dll	907		WriteFile
KERNEL32.dll	818		SetUnhandledExceptionFilter
KERNEL32.dll	845		TlsGetValue
KERNEL32.dll	844		TlsFree
KERNEL32.dll	843		TlsAlloc
KERNEL32.dll	846		TlsSetValue
KERNEL32.dll	526		HeapSize
KERNEL32.dll	838		TerminateProcess
KERNEL32.dll	56		CompareStringW
KERNEL32.dll	55		CompareStringA
KERNEL32.dll	253		GetCPInfo
KERNEL32.dll	564		LCMapStringW
KERNEL32.dll	563		LCMapStringA
KERNEL32.dll	538		InterlockedExchange
KERNEL32.dll	708		RtlUnwind
KERNEL32.dll	662		RaiseException
KERNEL32.dll	520		HeapFree
KERNEL32.dll	514		HeapAlloc
KERNEL32.dll	373		GetModuleHandleA
KERNEL32.dll	428		GetStartupInfoA
KERNEL32.dll	474		GetVersion
KERNEL32.dll	182		ExitProcess
KERNEL32.dll	524		HeapReAlloc
KERNEL32.dll	190		FatalAppExitA
USER32.dll	456		LoadStringA
USER32.dll	42		CharNextA
USER32.dll	476		MessageBoxA
USER32.dll	270		GetDesktopWindow
USER32.dll	328		GetProcessWindowStation
USER32.dll	142		DefWindowProcA
USER32.dll	534		RegisterClassA
USER32.dll	691		UnregisterClassA
USER32.dll	153		DestroyWindow
USER32.dll	96		CreateWindowExA
USER32.dll	511		PostMessageA
USER32.dll	314		GetMessageA
USER32.dll	682		TranslateMessage
USER32.dll	434		KillTimer
USER32.dll	634		SetTimer
USER32.dll	483		MessageBoxW
USER32.dll	509		PeekMessageA
USER32.dll	161		DispatchMessageA
USER32.dll	514		PostThreadMessageA
USER32.dll	359		GetUserObjectInformationW
ADVAPI32.dll	522		ReportEventA
ADVAPI32.dll	328		LookupAccountSidW
ADVAPI32.dll	333		LookupPrivilegeValueA
ADVAPI32.dll	28		AdjustTokenPrivileges
ADVAPI32.dll	281		GetTokenInformation
ADVAPI32.dll	431		OpenThreadToken
ADVAPI32.dll	426		OpenProcessToken
ADVAPI32.dll	561		SetSecurityDescriptorGroup
ADVAPI32.dll	562		SetSecurityDescriptorOwner
ADVAPI32.dll	246		GetLengthSid
ADVAPI32.dll	90		CopySid
ADVAPI32.dll	576		StartServiceCtrlDispatcherA
ADVAPI32.dll	66		ControlService
ADVAPI32.dll	511		RegisterEventSourceA
ADVAPI32.dll	450		QueryServiceStatusEx
ADVAPI32.dll	175		DeleteService
ADVAPI32.dll	101		CreateServiceW
ADVAPI32.dll	52		ChangeServiceConfig2A
ADVAPI32.dll	467		RegDeleteValueA
ADVAPI32.dll	493		RegQueryValueExA
ADVAPI32.dll	483		RegOpenKeyExA
ADVAPI32.dll	458		RegCloseKey
ADVAPI32.dll	570		SetServiceStatus
ADVAPI32.dll	517		RegisterServiceCtrlHandlerW
ADVAPI32.dll	512		RegisterEventSourceW
ADVAPI32.dll	176		DeregisterEventSource
ADVAPI32.dll	427		OpenSCManagerA
ADVAPI32.dll	430		OpenServiceW
ADVAPI32.dll	62		CloseServiceHandle
ADVAPI32.dll	266		GetSecurityDescriptorLength
ADVAPI32.dll	506		RegSetValueExA
ADVAPI32.dll	86		ConvertStringSecurityDescriptorToSecurityDescriptorW
ADVAPI32.dll	133		CryptAcquireContextA
ADVAPI32.dll	136		CryptCreateHash
ADVAPI32.dll	157		CryptHashData
ADVAPI32.dll	153		CryptGetHashParam
ADVAPI32.dll	139		CryptDestroyHash
ADVAPI32.dll	160		CryptReleaseContext
ADVAPI32.dll	29		AllocateAndInitializeSid
ADVAPI32.dll	544		SetEntriesInAclA
ADVAPI32.dll	306		InitializeSecurityDescriptor
ADVAPI32.dll	560		SetSecurityDescriptorDacl
ADVAPI32.dll	225		FreeSid
ADVAPI32.dll	85		ConvertStringSecurityDescriptorToSecurityDescriptorA
ADVAPI32.dll	269		GetSecurityDescriptorSacl
ADVAPI32.dll	553		SetNamedSecurityInfoA
ole32.dll	59		CoInitializeEx
ole32.dll	60		CoInitializeSecurity
ole32.dll	104		CoUninitialize
ole32.dll	16		CoCreateInstance
ole32.dll	277		ProgIDFromCLSID
ole32.dll	100		CoTaskMemFree
ole32.dll	91		CoRevokeClassObject
ole32.dll	58		CoInitialize
ole32.dll	14		CoCreateFreeThreadedMarshaler
ole32.dll	79		CoRegisterClassObject
OLEAUT32.dll		7
OLEAUT32.dll		162
OLEAUT32.dll		163
OLEAUT32.dll		161
OLEAUT32.dll		4
OLEAUT32.dll		2
OLEAUT32.dll		202
OLEAUT32.dll		201
OLEAUT32.dll		149
OLEAUT32.dll		150
OLEAUT32.dll		6
OLEAUT32.dll		12
OLEAUT32.dll		9
OLEAUT32.dll		8
OLEAUT32.dll		200
GDI32.dll	45		CreateCompatibleDC
GDI32.dll	363		GetDeviceCaps
GDI32.dll	44		CreateCompatibleBitmap
GDI32.dll	526		SelectObject
GDI32.dll	405		GetObjectA
GDI32.dll	18		BitBlt
GDI32.dll	330		GetBitmapBits
GDI32.dll	143		DeleteObject
GDI32.dll	140		DeleteDC
GDI32.dll	46		CreateDCA

show previews

offset	size	type	comment
0	2740224	EXE	01/26/2010 08:22:41	#
15c1	15	HTM		#
241a9c	47	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK