Should I block it?

No, this file is 100% safe to run.

Additional versions

4.11.2.22	66.67%
4.10.1.14	33.33%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

AllocateAndInitializeSid, FreeSid, GetTokenInformation, RegCloseKey, RegSetValueExA, OpenProcessToken, LookupPrivilegeValueA, OpenSCManagerA, RegOpenKeyExW, RegQueryValueExW, GetUserNameW, RegQueryValueExA, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegCreateKeyW, RegCreateKeyA, RegDeleteKeyA, RegQueryValueW, LookupPrivilegeValueW, CreateServiceW, RegOpenKeyA, RegSetValueExW, CreateServiceA, RegCreateKeyExA, RegOpenKeyExA, AdjustTokenPrivileges, RegQueryValueA, GetUserNameA, RegOpenKeyW, OpenSCManagerW, LsaRemoveAccountRights, RegCreateKeyExW, RegDeleteKeyW, GetKernelObjectSecurity

kernel32.dll

DllMain

ole32.dll

CoInitialize, CoCreateInstance, CoUninitialize

shell32.dll

ShellExecuteExA, ShellExecuteW, ShellExecuteA, SHGetSpecialFolderPathA, SHGetSpecialFolderPathW, Shell_NotifyIconA, ShellExecuteExW, Shell_NotifyIconW

user32.dll

MsgWaitForMultipleObjects, DispatchMessageW, PeekMessageW, TranslateMessage, DdeQueryStringW, GetParent, GetClassNameW, UnhookWindowsHookEx, GetWindowRect, GetWindowTextA, DdeConnect, SetWindowTextA, GetKeyboardState, GetWindowThreadProcessId, DrawTextA, SetWindowTextW, CreateWindowExA, GetKeyState, GetForegroundWindow, CreateWindowExW, SetWinEventHook, SetWindowsHookExA, SetWindowsHookExW, GetAsyncKeyState, GetWindowTextW, DrawTextW, SystemParametersInfoW, ShowWindow, GetWindowLongW, OpenInputDesktop, GetUserObjectInformationA, CloseDesktop, GetThreadDesktop

TFWAH.dll

ThreatFire by PC Tools (Signed)

Remove TFWAH.dll

Version:	4.10.1.14
MD5:	1008c30c12e29260fbf6d421f0e2c820
SHA1:	24e9aa506796af81f672505ac45955174cb144b6
SHA256:	758d519a4f69de6c8ebe172577a2fa5d5429267997a3e93e24882c45c0277df9

Overview

tfwah.dll is loaded as dynamic link library that runs in the context of a process. This is typically installed with the program ThreatFire published by PC Tools Software. The file is digitally signed by PC Tools which was issued by the VeriSign certificate authority (CA).

Details

File name:	tfwah.dll
Publisher:	PC Tools
Product name:	ThreatFire
Description:	PC Tools ThreatFire
Typical file path:	C:\Program Files\threatfire\tfwah.dll
File version:	4.10.1.14
Product version:	4.7.0.17
Size:	449.27 KB (460,048 bytes)
Build date:	1/14/2010 10:54 PM
Certificate
Issued to:	PC Tools
Authority (CA):	VeriSign
Expiration date:	Friday, July 8, 2011
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Programs

The following program will install this file

ThreatFire

PC Tools Software

4% remove

“Traditional antivirus solutions cannot protect you until after they have discovered a new threat and produced a signature to counter it. ThreatFire does not rely on signatures, but instead provides behavior-based protection. It is designed to be used alongside your existing antivirus software and it fills the gap in protection between your antivirus signature updates. ThreatFire protects you against major security threats including viru...”