Versions

1.0.0.7	3.21%
1.0.0.6	4.49%
1.0.0.5	11.54%
1.0.0.5	0.64%
1.0.0.5	7.05%
1.0.0.5	1.92%
1.0.0.5	0.64%
1.0.0.4	0.64%
1.0.0.4	9.62%
1.0.0.4	1.92%
1.0.0.4	17.31%
1.0.0.4	7.05%
1.0.0.4	1.92%
1.0.0.4	0.64%
1.0.0.4	4.49%
1.0.0.4	1.92%
1.0.0.4	0.64%
1.0.0.3	1.28%
1.0.0.3	5.77%
1.0.0.3	6.41%
1.0.0.3	5.13%
1.0.0.3	3.21%
1.0.0.3	0.64%
1.0.0.1	0.64%
1.0.0.1	0.64%
1.0.0.1	0.64%

There are 26 versions of toscosrv.exe in the wild, the latest version being 1.0.0.7. It is started as a Windows Service called 'TosCoSrv' with the name 'TosCoSrv' and described as “@"%ProgramFiles%\Toshiba\Power Saver\TPwrFunc.dll",-202”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 480.59 KB. The file is a digitally signed and issued to TOSHIBA CORPORATION by VeriSign. Some variations of the file have been seen to be installed with the program TOSHIBA Power Saver from TOSHIBA Corporation. The executable is a .NET framework assembly utilizing the CLR. During the process's lifecycle, the typical CPU resource utilization is about 0.0001% including both foreground and background operations, the average private memory consumption is about 2.82 MB with the maximum memory reaching around 4.91 MB. Addionally, typically read and write I/O disk operations is about 69 Bytes per minute for reads and 0 Bytes per minute for writes.

Toshiba Power Saver provides a Control Panel for managing power and battery settings. Toshiba Power Saver requires Toshiba ACPI Common Modules (TVALD).