home

toolwiztimemachine.exe

Toolwiz Time Machine

XII CNC Inc.

This is the uninstaller utility registered in the Windows Control Panel for the program Toolwiz Time Machine. This is installed with multiple programs including Toolwiz Time Freeze 2015 and Toolwiz BSafe. The file has been seen being downloaded from forum.toolwiz.com and multiple other hosts.
Publisher:
Toolwiz  (signed by XII CNC Inc.)

Product:
Toolwiz Time Machine

Version:
1.0.1.16

MD5:
5afea7f174758d5e69e8d485e52e42dd

SHA-1:
22442447df6c6d1821a0185708e3d0d647d834e6

SHA-256:
6cb6d8cf2111f7e3ba8fdbbd1661be654e8d54459ec06a29b9ac1002d529b6e5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 6:15:02 PM UTC  (today)

File size:
3.5 MB (3,669,760 bytes)

Product version:
1.0

Copyright:
Copyright (c) 2013 by Toolwiz

Trademarks:
Toolwiz

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United Kingdom)

Common path:
C:\users\{user}\downloads\!optimization\toolwiztimemachine.exe

Digital Signature
Signed by:
XII CNC Inc.

Authority:
VeriSign, Inc.

Valid from:
8/29/2012 3:00:00 AM

Valid to:
9/29/2013 2:59:59 AM

Subject:
CN=XII CNC Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=XII CNC Inc., L=Anyang-si, S=Gyunggi-do, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5AE657C73341F9A5D7BDDD336C543E67

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:MsSSyQIKYcyxe7D8n3UBWlBv/cfRT8DO9ZI:MsSSLIBcy0D+bcsO9+

Entry address:
0xA30C4

Entry point:
55, 8B, EC, B9, 08, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 51, 53, 56, 57, B8, 34, 2D, 4A, 00, E8, 1B, 31, F6, FF, 33, C0, 55, 68, 60, 36, 4A, 00, 64, FF, 30, 64, 89, 20, 33, C0, 55, 68, B5, 31, 4A, 00, 64, FF, 30, 64, 89, 20, E8, 0E, 6B, FD, FF, 83, F8, 05, 7F, 31, 6A, 10, 68, 70, 36, 4A, 00, 8D, 55, E8, A1, 70, 62, 4A, 00, E8, 29, 2E, F6, FF, 8B, 45, E8, E8, B1, 14, F6, FF, 50, 6A, 00, E8, 4D, 3C, F6, FF, 33, C0, 5A, 59, 59, 64, 89, 10, E9, 0D, 05, 00, 00, 68, 78, 36, 4A, 00, 6A, 00, 6A, 00, E8, 82, 33...
 
[+]

Entropy:
6.4131

Developed / compiled with:
Microsoft Visual C++

Code size:
650 KB (665,600 bytes)

Program Uninstaller
Program name:
Toolwiz Time Machine

Uninstall string:
C:\Program Files\ToolwizTimeMachine\Uninstall.exe /REMOVE


The file toolwiztimemachine.exe has been discovered within the following programs.

Toolwiz BSafe  by ToolWiz
www.Toolwiz.com
About 9% of users remove it
Toolwiz Time Freeze 2014  by ToolWiz
About 1% of users remove it
Toolwiz Time Freeze 2015  by ToolWiz
About 5% of users remove it
 
Powered by Should I Remove It?

The file toolwiztimemachine.exe has been seen being distributed by the following 4 URLs.

http://forum.toolwiz.com/.../ToolwizTimeMachine.exe

https://dl.dropboxusercontent.com/s/.../ToolwizTimeMachine.exe

http://www.toolwiz.com/.../ToolwizTimeMachine.exe

http://www.toolwiz.com/download.php?action=ToolwizTimeMachine

Scan toolwiztimemachine.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.