Gridinsoft Logo
File Icon

The Setup_TimeFreeze.exe (Toolwiz TimeFreeze 2017) File Analysis

Updated 24 days ago
Checked by Malaware Check
Setup_TimeFreeze.exe

Technical Analysis

File Name Setup_TimeFreeze.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.216.174
Database Version 2025-05-13 17:00:23 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
2,932,056
File Size (bytes)
2025-05-13
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
7e9e94cd3dd6584ad64298f1d1e7db76
SHA1
0cd4431e1fc96c37bb49f21d7c4727df7fec4192
SHA256
d2636e005aa7683bea4d5375901baee06f19b82eed129ed834e94d816c6f20d8
SHA512
8a5eef80ee2ec06041dc5cff6f04f01eeaab720f58e68e636828afa94326affd857c140b7135cde354da62b09851005b1de04411ab297a678b6149b7c54d8ec9
ImpHash
e61f3749f60719c04282dbf3ad1e5413

PE Analysis

Basic Information

▼
Icon
Hash: 3a50e80bbac6cdc04c472833746d25d3
Fuzzy: 74a89ee598283ed8bf17c360ddd8423e
dHash: ece2eae4b696c6cc
Image Base 0x00400000
Entry Point 0x004c8234
Compilation Time 1992-06-19 22:22:17
Checksum 0x002dac58 (Actual: 0x002dac58)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 12 libraries
Exports 0 functions
Resources 116 Resources
Sections 8 Sections

Version Information

▼
CompanyName Toolwiz
FileDescription Toolwiz TimeFreeze 2017
FileVersion 4.3.1.5000
InternalName Setup.exe
LegalCopyright Copyright (c) 2016 by Toolwiz.com
LegalTrademarks Toolwiz.com
OriginalFilename Setup.exe
ProductName Toolwiz TimeFreeze 2017
ProductVersion Toolwiz TimeFreeze 2017
Comments Toolwiz TimeFreeze 2017
Translation 0x0809 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
CODE 0x00001000 816,572 bytes 816,640 bytes 6.57 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 78AC0B66DB9B4DD5C00F21385EA2EF72
DATA 0x000c9000 25,620 bytes 26,112 bytes 6.14 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE A9C2C7D8A7A02FFF6799F0A82668FA5F
BSS 0x000d0000 5,705 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x000d2000 11,378 bytes 11,776 bytes 4.90 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 346115CE85FF9BF5F4B4C2ECA26AC5EB
.tls 0x000d5000 16 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x000d6000 24 bytes 512 bytes 0.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ EEBD227FEBB8D8876C94850F5AD13EF6
.reloc 0x000d7000 51,700 bytes 51,712 bytes 6.67 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ 3AD208C43A2B3C3922B89B8C8FD79E8C
.rsrc 0x000e4000 2,016,768 bytes 2,016,768 bytes 6.62 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ BA4456ED9DEA4C223875B89D479BC4DD
Entropy Analysis Alert

3 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 116 (2,008,817 bytes)
Resource Type Count Total Size Percentage
EXE 1 1,623,896 bytes
80.8%
INI 2 31,802 bytes
1.6%
JPG 2 32,209 bytes
1.6%
SYS 4 213,952 bytes
10.7%
TXT 1 4,510 bytes
0.2%
RT_CURSOR 8 2,464 bytes
0.1%
RT_BITMAP 47 39,412 bytes
2%
RT_ICON 9 25,064 bytes
1.2%
RT_DIALOG 1 82 bytes
0%
RT_STRING 25 17,592 bytes
0.9%
RT_RCDATA 6 16,614 bytes
0.8%
RT_GROUP_CURSOR 8 160 bytes
0%
RT_GROUP_ICON 1 132 bytes
0%
RT_VERSION 1 928 bytes
0%

Certificate Chain Analysis

▼
Certificate Information
Product Toolwiz TimeFreeze 2017
Description Toolwiz TimeFreeze 2017
File Version 4.3.1.5000
Original Name Setup.exe
Signing Date 09:49 AM 05/26/2016 (3299 days ago)
Verification Status Signed
Signers Igloo systems Inc.; Symantec Class 3 SHA256 Code Signing CA; VeriSign
Counter Signers Symantec Time Stamping Services Signer - G4; Symantec Time Stamping Services CA - G2; Thawte Timestamping CA
Internal Name Setup.exe
Copyright Copyright (c) 2016 by Toolwiz.com
Certificate Chain Summary
Symantec Time Stamping Services CA - G2 #1 Primary
Validity Period: 2012-12-21 00:00:00 → 2020-12-30 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 7E 93 EB FB 7C C6 4E 59 EA 4B 9A 77 D4 06 FC 3B
Symantec Time Stamping Services Signer - G4 #2 Chain
Validity Period: 2012-10-18 00:00:00 → 2020-12-29 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 0E CF F4 38 C8 FE BF 35 6E 04 D8 6A 98 1B 1A 50
XII CNC Inc. #3 Chain
Validity Period: 2014-10-16 00:00:00 → 2015-12-15 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 41 37 FC 68 15 FE 7B D7 5A C6 CB 5A 46 ED 19 B2
VeriSign Class 3 Public Primary Certification Authority - G5 #4 Chain
Validity Period: 2011-02-22 19:25:17 → 2021-02-22 19:35:17
Signature Algorithm: sha1RSA
Serial Number: 61 19 93 E4 00 00 00 00 00 1C
Igloo systems Inc. #5 Chain
Validity Period: 2016-01-05 00:00:00 → 2017-01-04 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 67 6E C2 A3 4B 70 B3 32 C4 A7 4A 7F B2 E3 A6 06
Symantec Class 3 SHA256 Code Signing CA #6 Chain
Validity Period: 2013-12-10 00:00:00 → 2023-12-09 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 3D 78 D7 F9 76 49 60 B2 61 7D F4 F0 1E CA 86 2A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware