Should I block it?

No, this file is 100% safe to run.

Additional versions

4.11.2.22	66.67%
4.10.1.14	33.33%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

InitializeSecurityDescriptor, SetSecurityDescriptorDacl, LookupPrivilegeValueW, OpenProcessToken, RegCloseKey, RegQueryValueExW, RegEnumValueW, RegOpenKeyExW, RegEnumKeyExW, AdjustTokenPrivileges, RegQueryInfoKeyW

crypt32.dll

CryptVerifyMessageSignature, CertFreeCertificateContext, CertGetNameStringW

gdiplus.dll

GdipDisposeImage, GdipFree, GdipCloneImage, GdiplusStartup, GdipGetImageEncoders, GdipGetImageEncodersSize, GdipCreateBitmapFromHICON, GdipSaveImageToFile, GdipAlloc

imagehlp.dll

ImageEnumerateCertificates, ImageGetCertificateHeader, ImageGetCertificateData

kernel32.dll

HeapAlloc, HeapDestroy, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, CloseHandle, GetLastError, MapViewOfFile, CreateFileMappingW, OpenFileMappingW, RaiseException, InitializeCriticalSection, DeleteCriticalSection, SizeofResource, LockResource, LoadResource, FindResourceW, FindResourceExW, CreateDirectoryW, GetFileAttributesW, GetTempPathW, InterlockedExchange, LeaveCriticalSection, InterlockedCompareExchange, InterlockedDecrement, GetCurrentProcess, CreateFileW, OpenEventW, UnmapViewOfFile, Sleep, WaitForSingleObject, SetEvent, TerminateProcess, OpenProcess, GetProcAddress, GetModuleHandleW, FindClose, DeleteFileW, SetFileAttributesW, FindNextFileW, FindFirstFileW, LoadLibraryW, Process32NextW, Process32FirstW, CreateToolhelp32Snapshot, GetSystemDirectoryW, GetWindowsDirectoryW, GetLongPathNameW, ExpandEnvironmentStringsW, ReadProcessMemory, GetModuleFileNameW, GetPrivateProfileStringW, GetVersionExA, UnhandledExceptionFilter, InterlockedIncrement, IsDebuggerPresent, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, SetUnhandledExceptionFilter, EnterCriticalSection

msvcp80.dll

DllMain

msvcr80.dll

DllMain

ole32.dll

CoCreateInstance

psapi.dll

GetModuleFileNameExW, GetModuleBaseNameW, EnumProcessModules

shell32.dll

SHGetFileInfoW, SHGetSpecialFolderPathW

tfapi.dll

_CHQueryProcessInformation@12

user32.dll

UnregisterClassA, GetDesktopWindow, DestroyIcon, GetWindowTextW, IsWindowVisible, GetWindowThreadProcessId, GetWindow

version.dll

GetFileVersionInfoW, GetFileVersionInfoSizeW, VerQueryValueW

wintrust.dll

WinVerifyTrust

Export table

DllCanUnloadNow

DllGetClassObject

TFPA.dll

ThreatFire by PC Tools (Signed)

Remove TFPA.dll

Version:	4.10.1.14
MD5:	3a696d3654b182e3c75c8309ed741eb3
SHA1:	f29862e40fab626e8d76c0ab767f56184d215cc8
SHA256:	e28caec546ea4c62eaf58530149fc20969bfadd967fc9a9bf5b9eaacee90d7ff

Overview

tfpa.dll is loaded as dynamic link library that runs in the context of a process. This is typically installed with the program ThreatFire published by PC Tools Software. The file is digitally signed by PC Tools which was issued by the VeriSign certificate authority (CA).

Details

File name:	tfpa.dll
Publisher:	PC Tools
Product name:	ThreatFire
Description:	PC Tools ThreatFire Process Activity
Typical file path:	C:\Program Files\threatfire\tfpa.dll
File version:	4.10.1.14
Product version:	4.7.0.17
Size:	141.27 KB (144,656 bytes)
Build date:	1/14/2010 10:58 PM
Certificate
Issued to:	PC Tools
Authority (CA):	VeriSign
Expiration date:	Friday, July 8, 2011
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 8.0
.NET CLR:	No

More details

Programs

The following program will install this file

ThreatFire

PC Tools Software

4% remove

“Traditional antivirus solutions cannot protect you until after they have discovered a new threat and produced a signature to counter it. ThreatFire does not rely on signatures, but instead provides behavior-based protection. It is designed to be used alongside your existing antivirus software and it fills the gap in protection between your antivirus signature updates. ThreatFire protects you against major security threats including viru...”