Should I block it?

No, this file is 100% safe to run.

Additional versions

1, 0, 0, 8	27.19%
1, 0, 0, 8	4.15%
1, 0, 0, 7	3.23%
1, 0, 0, 7	47.93%
1, 0, 0, 5	12.90%
1, 0, 0, 5	3.23%
1, 0, 0, 3	1.38%

Relationships

services.exe (Services and Controller app by Microsoft)

PE file structure

Show functions

Import table

advapi32.dll

ControlService, DeleteService, OpenSCManagerA, CreateServiceA, StartServiceA, CloseServiceHandle, SetServiceStatus, RegisterServiceCtrlHandlerA, StartServiceCtrlDispatcherA, AllocateAndInitializeSid, LookupAccountSidA, FreeSid, LookupAccountNameA, GetFileSecurityA, GetSecurityDescriptorDacl, GetAclInformation, GetLengthSid, InitializeAcl, GetAce, AddAce, AddAccessAllowedAce, SetFileSecurityA, RegCreateKeyExA, RegQueryValueExA, RegCloseKey, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, OpenServiceA

kernel32.dll

SetEvent, GetModuleFileNameA, FlushFileBuffers, CreateFileA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, HeapSize, CreateEventA, GetStringTypeW, GetStringTypeA, GetConsoleMode, GetConsoleCP, SetFilePointer, InitializeCriticalSection, LoadLibraryA, Sleep, GetSystemTimeAsFileTime, CreateThread, WaitForSingleObject, ResetEvent, TerminateThread, LocalAlloc, LocalFree, GetLastError, CreateNamedPipeA, ConnectNamedPipe, CloseHandle, ReadFile, GetDriveTypeA, WriteFile, DisconnectNamedPipe, WideCharToMultiByte, MultiByteToWideChar, InterlockedExchange, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, GetFileType, SetHandleCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, LCMapStringW, GetACP, GetLocaleInfoA, GetThreadLocale, GetVersionExA, RtlUnwind, VirtualAlloc, GetProcAddress, GetModuleHandleA, HeapAlloc, HeapFree, HeapReAlloc, GetCommandLineA, GetProcessHeap, GetStartupInfoA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, GetCurrentThreadId, InterlockedDecrement, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, ExitProcess, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, VirtualFree, HeapDestroy, HeapCreate, GetStdHandle, GetCPInfo, GetOEMCP, LCMapStringA, IsValidCodePage

setupapi.dll

SetupDiSetClassInstallParamsA, SetupDiCallClassInstaller, SetupDiGetDeviceInstallParamsA, SetupDiGetDeviceRegistryPropertyA, SetupDiSetDeviceRegistryPropertyA, SetupDiGetClassDevsA, SetupDiEnumDeviceInfo, SetupDiDestroyDeviceInfoList

shlwapi.dll

PathBuildRootA

user32.dll

DialogBoxParamA, DestroyWindow, BeginPaint, EndPaint, PostQuitMessage, DefWindowProcA, EndDialog, KillTimer, CreateWindowExA, ShowWindow, UpdateWindow, LoadIconA, LoadCursorA, RegisterClassExA, LoadStringA, LoadAcceleratorsA, GetMessageA, TranslateAcceleratorA, TranslateMessage, DispatchMessageA, SetTimer

TODDSrv.exe

TDCSrv Application by TOSHIBA CORPORATION (Signed)

Remove TODDSrv.exe

Version:	1, 0, 0, 3
MD5:	d540858e65bfa6fded41ad2495ece344
SHA1:	bb08b664e23f25c49597037506f47d621af5cfa6
SHA256:	db85a860f4c07d1370f34aa7f39fae5df7e47c1be65b4d39954fc37ca703a199

Overview

TODDSrv.exe runs as a service under the name TOSHIBA Optical Disc Drive Service (TODDSrv) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including TOSHIBA Disc Creator published by TOSHIBA Corporation, TOSHIBA Disc Creator from TOSHIBA Corporation and TOSHIBA Disc Creator by TOSHIBA Corporation. The file is digitally signed by TOSHIBA CORPORATION which was issued by the VeriSign certificate authority (CA).

Details

File name:	TODDSrv.exe
Publisher:	TOSHIBA Corporation
Product name:	TDCSrv Application
Typical file path:	C:\Windows\System32\toddsrv.exe
Original name:	TDCSrv.exe
File version:	1, 0, 0, 3
Size:	112 KB (114,688 bytes)
Certificate
Issued to:	TOSHIBA CORPORATION
Authority (CA):	VeriSign
Expiration date:	Friday, April 22, 2011
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

TOSHIBA Disc Creator

TOSHIBA Corporation

24% remove

“With TOSHIBA Disc Creator, you can create original audio CDs, data CDs and DVDs, and backup discs of CDs and DVDs. When creating audio CDs, you can collect only your favorite music from multiple music CDs, and a "MyBest" or "Favorites" CD can be created. Moreover, an Audio CD can be created from audio files collected on the hard disk of your personal computer, such as MP3 and WMA files. When creating data CDs or DVDs, you can save your ...”

TOSHIBA Direct Disc Writer

TOSHIBA Corporation

3% remove

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'TODDSrv' (TOSHIBA Optical Disc Drive Service)
TODDSrv

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00008719%	0.028634%
Kernel CPU:	0.00008052%	0.013761%
User CPU:	0.00000667%	0.014873%
Kernel CPU time:	203 ms/min	100,923,805ms/min
CPU cycles:	35,710/sec	17,470,203/sec
Memory
Private memory:	2.16 MB	21.59 MB
Private (maximum):	3.4 MB
Private (minimum):	3.11 MB
Non-paged memory:	2.16 MB	21.59 MB
Virtual memory:	40.67 MB	140.96 MB
Virtual memory (peak):	41.67 MB	169.69 MB
Working set:	3.13 MB	18.61 MB
Working set (peak):	3.83 MB	37.95 MB
Page faults:	1,064/min	2,039/min
I/O
I/O read transfer:	5 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	0 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	4	12
Handles:	70	600

Process properties

Integrety level:	System
Platform:	32-bit
Command line:	C:\Windows\System32\toddsrv.exe
Owner:	SYSTEM
Windows Service
Service name:	TODDSrv
Display name:	TOSHIBA Optical Disc Drive Service
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads