Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

2.0.2.1 2.17%
2, 0, 2, 0 8.70%
2, 0, 2, 0 47.83%
2, 0, 2, 0 2.17%
2, 0, 2, 0 21.74%
2, 0, 1, 3 6.52%
2, 0, 1, 3 8.70%
1, 1, 8, 4 2.17%

PE structurePE file structure

Show functions
Import table
advapi32.dll
CreateServiceA, GetUserNameA, StartServiceCtrlDispatcherA, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, RegCreateKeyExA, RegSetValueExA, RegFlushKey, RegEnumKeyExA, RegQueryValueExA, RegOpenKeyExA, RegCloseKey, RegisterServiceCtrlHandlerA, OpenServiceA, ControlService, QueryServiceStatus, DeleteService, OpenSCManagerA, CloseServiceHandle, SetServiceStatus, RegisterEventSourceA, ReportEventA, DeregisterEventSource
gdi32.dll
StretchBlt, CreateCompatibleDC, SelectObject, DeleteDC
imm32.dll
ImmDisableIME, ImmIsIME
kernel32.dll
WaitForMultipleObjects, CreateThread, ConnectNamedPipe, CreateNamedPipeA, TerminateThread, WinExec, GetStringTypeW, GetStringTypeA, LCMapStringW, LCMapStringA, MultiByteToWideChar, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, HeapReAlloc, VirtualAlloc, HeapAlloc, GetLocaleInfoA, WaitForSingleObject, RtlUnwind, IsValidCodePage, GetOEMCP, GetACP, GetCPInfo, GetConsoleMode, GetConsoleCP, SetFilePointer, DisconnectNamedPipe, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, HeapFree, VirtualFree, HeapCreate, GetFileType, SetHandleCount, GetEnvironmentStringsW, WideCharToMultiByte, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, InitializeCriticalSectionAndSpinCount, LoadLibraryA, SetEvent, CreateMutexA, GetSystemPowerStatus, CreateEventA, ReadFile, WaitNamedPipeA, lstrcpynA, GetSystemDirectoryA, GetVersionExA, DeviceIoControl, CloseHandle, CreateFileA, SetConsoleCtrlHandler, Sleep, GetModuleFileNameA, FormatMessageA, lstrlenA, LocalFree, GetLastError, ResetEvent, GetSystemTimeAsFileTime, WriteFile, FlushFileBuffers, HeapSize, DeleteCriticalSection, GetStdHandle, GetModuleHandleW, GetProcAddress, ExitProcess, GetCommandLineA, GetStartupInfoA, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, EnterCriticalSection, LeaveCriticalSection, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, GetCurrentThreadId, InterlockedDecrement
shell32.dll
Shell_NotifyIconA, ShellExecuteA
shlwapi.dll
SHGetValueA
user32.dll
GetMessageA, TranslateAcceleratorA, TranslateMessage, DispatchMessageA, LoadCursorA, RegisterClassExA, BeginPaint, EndPaint, PostQuitMessage, RegisterWindowMessageA, DestroyWindow, LoadMenuA, GetSubMenu, GetCursorPos, DeleteMenu, SetMenuItemInfoA, DrawMenuBar, TrackPopupMenu, DestroyMenu, GetDoubleClickTime, DefWindowProcA, LoadAcceleratorsA, DialogBoxParamA, LoadIconA, LoadBitmapA, GetDC, GetClientRect, ReleaseDC, EndDialog, SetTimer, IsDlgButtonChecked, KillTimer, PostMessageA, wsprintfA, GetWindowRect, GetSystemMetrics, SetWindowPos, LoadStringA, LoadImageA, DestroyIcon, CreateWindowExA, ShowWindow, UpdateWindow, GetKeyboardLayout, FindWindowA, SendMessageA, SetForegroundWindow
wtsapi32.dll
WTSUnRegisterSessionNotification, WTSRegisterSessionNotification

ThpSrv.exe

TOSHIBA HDD Protection by TOSHIBA CORPORATION (Signed)

Remove ThpSrv.exe
Version:   2.0.2.1
MD5:   b009d1a269b5c16231baa724fd091ca3
SHA1:   e08f1d02ac8fd4aca11f78ab7f97280d42e9a03c
SHA256:   7bb32f8f51aa82bfc670b6bc10d55d44a8d73c4ad150fbddb1e0668c38601219

Overview

ThpSrv.exe runs as a service under the name TOSHIBA HDD Protection (Thpsrv) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including TOSHIBA HDD Protection published by TOSHIBA Corporation, TOSHIBA HDD Protection from TOSHIBA Corporation and TOSHIBA HDD Protection by TOSHIBA Corporation. The file is digitally signed by TOSHIBA CORPORATION which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:ThpSrv.exe
Publisher:TOSHIBA Corporation
Product name:TOSHIBA HDD Protection
Description:TOSHIBA HDD Protection Service
Typical file path:C:\Windows\System32\thpsrv.exe
File version:2.0.2.1
Size:553.41 KB (566,696 bytes)
Build date:8/3/2012 12:37 PM
Certificate
Issued to:TOSHIBA CORPORATION
Authority (CA):VeriSign
Expiration date:Thursday, August 5, 2010
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
TOSHIBA Corporation
4% remove
Using the acceleration sensor built in the PC, HDD Protection detects vibration, shocks and similar signs in the PC, and automatically moves the Hard Disk Drive (HDD) head to a safe position to reduce the risk of damage that could be caused by head-to-disk contact.

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'Thpsrv' (TOSHIBA HDD Protection)
  • Thpsrv

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
Memory
Private memory:1012 KB
21.59 MB
Private (maximum):3.38 MB
Private (minimum):3.33 MB
Non-paged memory:1012 KB
21.59 MB
Virtual memory:49.79 MB
140.96 MB
Virtual memory (peak):51.81 MB
169.69 MB
Working set:3.36 MB
18.61 MB
Working set (peak):3.38 MB
37.95 MB
Resource allocations
Threads:4
12
Handles:75
600

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command line:C:\Windows\System32\thpsrv.exe
Owner:SYSTEM
Windows Service
Service name:Thpsrv
Display name:TOSHIBA HDD Protection
Description:“TOSHIBA HDD Protection Service”
Type:Win32OwnProcess
Parent process:services.exe (by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 71.43%
Windows Vista Home Premium 11.43%
Microsoft Windows XP 8.57%
Windows 8 2.86%
Windows 7 Professional 2.86%
Windows 8 Pro 2.86%

Distribution by countryDistribution by country

United States installs about 87.50% of TOSHIBA HDD Protection.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Toshiba 93.88%
Hewlett-Packard 6.12%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE