Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Child process
Related files
toolwizcares.exe
Toolwiz Care by XII CNC Inc. (Signed)
| Version: | 3.1.0.0 |
| MD5: | 73ac34409a15cbf65b4e693caf82a1f6 |
| SHA1: | 4f28940e958159441bb26d0496ab9a5a99a3e326 |
| SHA256: | 466b6c6f8bef0586d23d51395e6688b2fb5629050a1f4f362cb9a9ac9e6e2716 |
Overview
toolwizcares.exe executes as a process with the local user's privileges. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). It is installed with a couple of know programs including Toolwiz Care published by ToolWiz and Toolwiz Care published by ToolWiz. The file is digitally signed by XII CNC Inc. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | toolwizcares.exe |
| Publisher: | Toolwiz |
| Product name: | Toolwiz Care |
| Typical file path: | C:\Program Files\toolwizcarefree\toolwizcares.exe |
| Original name: | Toolwiz.exe |
| File version: | 3.1.0.0 |
| Product version: | 2.0 |
| Size: | 5.21 MB (5,461,760 bytes) |
| Certificate |
| Issued to: | XII CNC Inc. |
| Authority (CA): | VeriSign |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
“ToolWiz Care is a set of free-of-charge tools designed to speed up your PC and give your system a full range of care. With multi-functional optimization suite, this software provides a collection of tools that includes System Check-up, System Clean-up, System Speed-up, System Fix-up, System Back-up, System Satrtup Optimizer, System Virtualization and other 50+ powerful built-in utilities to enhance PC performance, security, and to opti...”
Behaviors
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'ToolwizCareFree' → "C:\Program Files\ToolwizCareFree\ToolwizCares.exe" -autorun
Scheduled tasks
- Entry path '\ToolwizCareFree'
Scheduled tasks startups
Set to load on user login (bypasses Windows UAC if enabled)
- Login entry path '\ToolwizCareFree'
Network connections
[TCP] 202.108.23.171:80
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00047612% | |
| Kernel CPU: | 0.00028892% | |
| User CPU: | 0.00018720% | |
| Kernel CPU time: | 119,013 ms/min | |
| Memory |
| Private memory: | 49.94 MB | |
| Private (maximum): | 36.43 MB | |
| Private (minimum): | 1.22 MB | |
| Non-paged memory: | 49.94 MB | |
| Virtual memory: | 1.85 GB | |
| Virtual memory (peak): | 1.85 GB | |
| Working set: | 12.59 MB | |
| Working set (peak): | 44.76 MB | |
| Resource allocations |
| Threads: | 10 | |
| Handles: | 375 | |
| GUI GDI count: | 167 | |
| GUI GDI peak: | 175 | |
| GUI USER count: | 75 | |
| GUI USER peak: | 88 | |
Process properties
Threads
Averages
| ToolwizCares.exe (main module) |
| Total CPU: | 0.10426330% | |
| Kernel CPU: | 0.04548762% | |
| User CPU: | 0.05877568% | |
| CPU cycles: | 6,244,972/sec | |
| Memory: | 5.57 MB | |
| ntdll.dll |
| Total CPU: | 0.04699180% | |
| Kernel CPU: | 0.04699180% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 494,278/sec | |
| Memory: | 1.66 MB | |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
75.00% |
|
| Microsoft Windows XP |
12.50% |
|
| Windows 7 Ultimate |
12.50% |
|
Distribution by country
United States installs about 62.50% of Toolwiz Care.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Hewlett-Packard |
40.00% |
|
| Toshiba |
20.00% |
|
| ASUS |
20.00% |
|
| American Megatrends |
10.00% |
|
| Acer |
10.00% |
|
