home

TotalPrivacy.exe

Total Privacy

Pointstone Software, LLC

The application TotalPrivacy.exe, “You know what you've been doing with your computer, but that doesn't mean that anyone else has to!” by Pointstone Software has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Pointstone Software, LLC  (signed and verified)

Product:
Total Privacy

Description:
You know what you've been doing with your computer, but that doesn't mean that anyone else has to!

Version:
5.8.8.480

MD5:
8d8243b941040f2f819edb0296cd2619

SHA-1:
061041dd279aea091019796e4568cf63b996753e

SHA-256:
a0ef3a31f1379fd8024a6e6a9cd418d0b01cba28a586a50099c0b72513f5658e

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/23/2024 2:13:35 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Optional.Pointstone
16.9.12.5

File size:
1.7 MB (1,794,352 bytes)

Product version:
5.8.0.0

Copyright:
Copyright © 2002-2010 Pointstone Software, LLC

Trademarks:
Total Privacy and Pointstone are either trademarks or registered trademarks of Pointstone Software, LLC

Original file name:
TotalPrivacy.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\pointstone\total privacy 5\totalprivacy.exe

Digital Signature
Signed by:
Pointstone Software, LLC

Authority:
The USERTRUST Network

Valid from:
3/18/2010 3:00:00 AM

Valid to:
3/18/2012 2:59:59 AM

Subject:
CN="Pointstone Software, LLC", O="Pointstone Software, LLC", STREET=220 E. Delaware Avenue, L=Newark, S=Delaware, PostalCode=19711, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
39D522210A1786B5F689AF9B0415E163

File PE Metadata
Compilation timestamp:
6/21/2010 10:22:49 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:4p432uKU1J32zGyYBuneSu3GPgTfwxRHxOzU4jyghz6jVU0bsQe:13AU1loKrTyRXu10E

Entry address:
0x1000

Entry point:
68, 01, 40, 74, 00, E8, 01, 00, 00, 00, C3, C3, 80, CD, 27, 50, C8, F1, F1, A1, E9, F4, 98, 50, 4E, 1E, 62, A5, 9C, EC, 16, 41, 03, 7F, DE, AC, 7E, 0F, 60, 6A, 5A, 40, C0, 9C, 9C, 51, 98, 51, 9A, D3, 5C, AC, 7F, CC, 2C, 02, 5E, E7, 5F, C3, D5, 45, 92, 49, B2, 8B, 39, B7, 59, BE, 23, BD, 04, D2, 62, 28, 0A, AD, 7E, 01, 9A, C4, 26, A8, 71, B4, 7A, 5B, B5, 87, F4, 2E, 0E, 2E, D7, 7D, 21, FC, 29, 46, 9B, D3, 9A, AE, 0E, B7, D6, 59, F5, EE, 84, 36, 0B, D4, 27, 54, 3A, 78, CE, 67, 60, 57, 82, 12, 4F, C6, EA, 6B...
 
[+]

Entropy:
7.9802

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
1.9 MB (1,970,688 bytes)

Remove TotalPrivacy.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.