Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

1.0.0.7 3.21%
1.0.0.6 4.49%
1.0.0.5 11.54%
1.0.0.5 0.64%
1.0.0.5 7.05%
1.0.0.5 1.92%
1.0.0.5 0.64%
1.0.0.4 0.64%
1.0.0.4 9.62%
1.0.0.4 1.92%
1.0.0.4 17.31%
1.0.0.4 7.05%
1.0.0.4 1.92%
1.0.0.4 0.64%
1.0.0.4 4.49%
1.0.0.4 1.92%
1.0.0.4 0.64%
1.0.0.3 1.28%
1.0.0.3 5.77%
1.0.0.3 6.41%
1.0.0.3 5.13%
1.0.0.3 3.21%
1.0.0.3 0.64%
1.0.0.1 0.64%
1.0.0.1 0.64%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegisterServiceCtrlHandlerW, StartServiceCtrlDispatcherW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, CreateServiceW, ChangeServiceConfigW, RegEnumKeyExW, ControlService, DeleteService, RegQueryInfoKeyW, RegSetValueExW, RegCreateKeyExW, RegDeleteValueW, RegDeleteKeyW, SetServiceStatus, OpenSCManagerW, OpenServiceW, CloseServiceHandle, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, LogonUserW, AdjustTokenPrivileges, OpenProcessToken, LookupPrivilegeValueW, RegisterServiceCtrlHandlerExW
kernel32.dll
WaitForSingleObject, RaiseException, InitializeCriticalSection, DeleteCriticalSection, lstrcmpiW, GetModuleFileNameW, SetEvent, ResetEvent, DisconnectNamedPipe, FlushFileBuffers, ConnectNamedPipe, CreateNamedPipeW, CreateEventW, Sleep, CreateThread, GetModuleHandleW, GetCurrentThreadId, lstrcpyW, LoadLibraryW, InterlockedDecrement, MultiByteToWideChar, SizeofResource, LoadResource, FindResourceW, LoadLibraryExW, GetCommandLineW, GetTickCount, QueryPerformanceCounter, GetStartupInfoA, GetFileType, SetHandleCount, GetCommandLineA, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetProcAddress, FreeLibrary, WriteFile, CreateFileW, GetLastError, WaitNamedPipeW, CloseHandle, ReadFile, lstrlenW, GetCurrentProcessId, GetSystemTimeAsFileTime, LoadLibraryA, GetCPInfo, GetOEMCP, WideCharToMultiByte, InterlockedIncrement, HeapSize, LCMapStringW, LCMapStringA, GetStringTypeW, GetStringTypeA, SetLastError, TlsFree, TlsSetValue, TlsAlloc, TlsGetValue, IsDebuggerPresent, SetUnhandledExceptionFilter, InterlockedExchange, GetACP, GetLocaleInfoA, GetThreadLocale, GetVersionExA, EnterCriticalSection, LeaveCriticalSection, HeapAlloc, HeapFree, RtlUnwind, HeapReAlloc, GetProcessHeap, GetStartupInfoW, VirtualFree, VirtualAlloc, HeapDestroy, HeapCreate, GetModuleHandleA, ExitProcess, GetStdHandle, GetModuleFileNameA, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, TerminateThread, GetSystemDefaultLangID, GetVersionExW, SetSystemPowerState, GetTempPathW, DeleteFileW, GetExitCodeProcess, CreateProcessW, GetSystemPowerStatus, PulseEvent, GetExitCodeThread, CreateFileA, DeviceIoControl, GetLocalTime, GetFileAttributesW, SetEndOfFile, SetFilePointer, GetConsoleMode, GetConsoleCP, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, ExitThread, IsValidCodePage, InterlockedCompareExchange
msvcr80.dll
DllMain
ole32.dll
CoResumeClassObjects, CoCreateInstance, StringFromGUID2, CoTaskMemFree, CoRegisterClassObject, CoRevokeClassObject, CoUninitialize, CoTaskMemRealloc, CoTaskMemAlloc, CoInitialize, CoInitializeSecurity, CoInitializeEx, CoSetProxyBlanket
powrprof.dll
PowerReadACValueIndex, PowerGetActiveScheme, SetSuspendState, PowerReadDCValueIndex
tpwrfunc.dll
SetPwrTPSItemAttributeAdmin, PwrTPSItemInitializeAdmin, PwrOSItemInitializeAdmin, PwrReplaceDefaultAdmin, PwrRestoreIndividualDefaultAdmin, DeletePowerOnButtonAction, DeleteLidCloseAction, AddPowerOnButtonAction, AddLidCloseAction
tpwrreg.dll
SetTPSRegODDTrayUnlockTimeValueAdmin, SetTPSRegGUIDEntryValueAdmin, SetTPSRegOSDefaultValueAdmin, SetTPSRegODDTrayLockValueAdmin, SetTPSRegFirstInstValueAdmin, SetBattMRegInfoAdmin, SetTPSRegIsShowNotifyOddOnOffValueAdmin, SetTPSRegIsShowExecOddOnOffValueAdmin
user32.dll
wsprintfW, TranslateMessage, DispatchMessageW, CharNextW, PostThreadMessageW, LoadStringW, CharUpperW, MessageBoxW, UnregisterClassA, GetMessageW
wtsapi32.dll
WTSEnumerateSessionsW, WTSFreeMemory

TosCoSrv.exe

TOSHIBA Power Saver by TOSHIBA CORPORATION (Signed)

Remove TosCoSrv.exe
Version:   1.0.0.4
MD5:   db9719688c08f42705feb3f6a0c98b91
SHA1:   f4e2331f1d2df620b1b33cf5aee176b984e73523
SHA256:   d8e837f2f5c3838312001ccdd37448abae3dd6452ce6dc26241678e0f3a584ce

What is TosCoSrv.exe?

Toshiba Power Saver provides a Control Panel for managing power and battery settings. Toshiba Power Saver requires Toshiba ACPI Common Modules (TVALD).

Overview

toscosrv.exe runs as a service under the name TosCoSrv (TosCoSrv) with extensive SYSTEM privileges (full administrator access). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by TOSHIBA CORPORATION which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:toscosrv.exe
Publisher:TOSHIBA Corporation
Product name:TOSHIBA Power Saver
Typical file path:C:\Program Files\toshiba\power saver\toscosrv.exe
File version:1.0.0.4
Product version:V8.08.10
Size:477.91 KB (489,384 bytes)
Certificate
Issued to:TOSHIBA CORPORATION
Authority (CA):VeriSign
Effective date:Monday, April 11, 2011
Expiration date:Wednesday, April 11, 2012
Digital DNA
File packed:No
Code language:Microsoft Visual C# / Basic .NET
.NET CLR:Yes
.NET NGENed:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • TosCoSrv
  • 'TosCoSrv' (TOSHIBA Power Saver)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00018334%
0.028634%
Kernel CPU:0.00000246%
0.013761%
User CPU:0.00018087%
0.014873%
Kernel CPU time:18 ms/min
100,923,805ms/min
CPU cycles:591/sec
17,470,203/sec
Memory
Private memory:2.83 MB
21.59 MB
Private (maximum):4.53 MB
Private (minimum):3.37 MB
Non-paged memory:2.83 MB
21.59 MB
Virtual memory:59.84 MB
140.96 MB
Virtual memory (peak):61.21 MB
169.69 MB
Working set:3.47 MB
18.61 MB
Working set (peak):5.34 MB
37.95 MB
Page faults:1,650/min
2,039/min
I/O
I/O other transfer:0 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:19
12
Handles:111
600

BehaviorsProcess properties

Integrety level:System
Platform:64-bit
Command line:"C:\Program Files\toshiba\power saver\toscosrv.exe"
Owner:SYSTEM
Windows Service
Service name:TosCoSrv
Display name:TosCoSrv
Description:“@"%ProgramFiles%\Toshiba\Power Saver\TPwrFunc.dll",-202”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
TosCoSrv.exe (main module)
Total CPU:0.00001676%
0.272967%
Kernel CPU:0.00001308%
0.107585%
User CPU:0.00000368%
0.165382%
CPU cycles:322/sec
5,741,424/sec
Memory:504 KB
1.16 MB
sechost.dll (Host for SCM/SDDL/LSA Lookup APIs by Microsoft)
Total CPU:0.00000581%
Kernel CPU:0.00000000%
User CPU:0.00000581%
CPU cycles:11/sec
Memory:124 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 62.16%
Windows Vista Home Premium 13.51%
Windows 7 Ultimate 8.11%
Windows 7 Home Basic 3.38%
Windows 8 Pro 3.38%
Windows Vista Home Basic 2.03%
Windows Vista Business 2.03%
Windows 7 Professional 2.03%
Windows 8 Pro with Media Center 1.35%
Windows 7 Enterprise 1.35%
Windows 7 Starter 0.68%

Distribution by countryDistribution by country

United States installs about 55.41% of TOSHIBA Power Saver.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Toshiba 98.98%
Acer 1.02%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE