Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

1.0.0.7 0.98%
1.0.0.7 12.75%
1.0.0.7 6.86%
1.0.0.7 0.98%
1.0.0.7 15.69%
1.0.0.7 4.90%
1.0.0.7 0.98%
1.0.0.6 1.96%
1.0.0.6 16.67%
1.0.0.6 5.88%
1.0.0.6 2.94%
1.0.0.6 3.92%
1.0.0.6 0.98%
1.0.0.6 0.98%
1.0.0.5 4.90%
1.0.0.4 1.96%
1.0.0.4 0.98%
1.0.0.3 4.90%
1.0.0.2 3.92%
1.0.0.2 4.90%
1.0.0.1 0.98%
1.0.0.1 0.98%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
OpenSCManagerW, EqualSid, FreeSid, OpenServiceW, CloseServiceHandle, QueryServiceStatus, GetTokenInformation, OpenProcessToken, RegQueryValueExW, RegCloseKey, RegOpenKeyExW, AllocateAndInitializeSid
gdi32.dll
GetCurrentObject, CreateFontIndirectW, GetDeviceCaps, DeleteObject, SelectObject, SetBkMode, GetStockObject, SetBkColor
kernel32.dll
InterlockedIncrement, GetCPInfo, GetStartupInfoW, GetVersionExA, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage, GetModuleHandleA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, RaiseException, ExitProcess, MultiByteToWideChar, LCMapStringA, lstrlenW, lstrcpyW, EnterCriticalSection, MulDiv, LeaveCriticalSection, GetCurrentThreadId, WriteFile, GetLocalTime, DeleteCriticalSection, CreateToolhelp32Snapshot, Process32FirstW, CloseHandle, Process32NextW, WTSGetActiveConsoleSessionId, Sleep, WaitForSingleObject, CreateThread, SetEvent, TryEnterCriticalSection, ResetEvent, TerminateThread, LoadLibraryW, GetSystemPowerStatus, FreeLibrary, GetProcAddress, GetLastError, InitializeCriticalSection, CreateEventW, OpenEventW, GetVersionExW, GetCurrentProcess, CreateMutexW, ReleaseMutex, SetFilePointer, CreateFileW, GetModuleFileNameW, WideCharToMultiByte, LCMapStringW, FlushFileBuffers, CreateFileA, TerminateProcess, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, RtlUnwind, LoadLibraryA, GetLocaleInfoA, GetStringTypeW, GetStringTypeA, GetConsoleMode, GetConsoleCP, VirtualAlloc, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, VirtualFree, HeapCreate, GetStartupInfoA, GetFileType, SetHandleCount, GetCommandLineW, GetCommandLineA, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetModuleFileNameA, GetStdHandle, InterlockedCompareExchange, lstrcmpW, LocalFree, InterlockedExchange
msvcr80.dll
DllMain
ole32.dll
CoUninitialize, CoCreateInstance, CoInitializeSecurity, CoInitializeEx
shell32.dll
SHGetFolderPathW, Shell_NotifyIconW
shlwapi.dll
PathFindFileNameW
tpwrfunc.dll
PwrTPSItemInitialize, PwrReplaceDefault, SetOSItemDefaultValue, UnRegisterPwrNotification, RegisterPwrNotification, GetPwrTPSItemAttribute, GetDefaultPwrValue, GetDefaultPwrPlanValue, IsTPSItemRemoved, GetTPSItemIndexValue, GetPwrActivePwrPlan, PwrOSItemInitialize, SetPwrTPSItemAttribute, GetSettingsPwrValue
tpwrreg.dll
CreateTPSRegSettingsPwrValueInfo, SetTPSRegGUIDEntryValue, GetTPSRegGUIDEntryValue, TPwrGuidToString, PwrRestoreDefault, DeleteTPSRegParameterInfo, CreateTPSRegParameterInfo, SetTPSRegFirstInstValue, DeleteTPSRegUserPwrValueInfo, DeleteTPSRegUserPwrPlanValueInfo, GetTPSRegDefaultPwrValue, IsOSItemReplaced, SetTPSRegOSDefaultValue, GetMachineType, CreateTPSRegUserPwrValueInfo, IsPowerPlanDisplayValueReplaced, CreateTPSRegUserPwrPlanValueInfo, GetTPSRegFirstInstValue, GetTPSRegODDTrayLockValue, GetTPSRegCurrentVersionValue, DeleteTPSRegSettingsPwrValueInfo, GetTPSRegCheckProcModule, IsFlashCardsInstalled, SetTPSRegIsShowNotifyOddOnOffValue, GetTPSRegIsShowNotifyOddOnOffValue, GetTPSRegIsShowExecOddOnOffValue, SetTPSRegODDTrayUnlockTimeValue, GetTPSRegODDTrayUnlockTimeValue, SetTPSRegODDTrayLockValue, SetTPSRegIsShowExecOddOnOffValue
user32.dll
SetActiveWindow, SetFocus, AttachThreadInput, GetDlgItem, SetDlgItemTextW, ChangeWindowMessageFilter, RegisterWindowMessageW, CreateWindowExW, RegisterClassExW, DispatchMessageW, TranslateMessage, IsDialogMessageW, GetMessageW, UpdateWindow, ShowWindow, CreateDialogParamW, MessageBoxW, DefWindowProcW, ExitWindowsEx, PostQuitMessage, GetMenuItemID, GetSubMenu, SetTimer, LoadMenuW, GetDoubleClickTime, TrackPopupMenu, GetCursorPos, DrawMenuBar, RemoveMenu, DestroyMenu, SetMenuItemInfoW, ModifyMenuW, SetWindowTextW, SetForegroundWindow, CheckDlgButton, GetWindowThreadProcessId, GetForegroundWindow, SystemParametersInfoW, MoveWindow, ReleaseDC, GetSystemMetrics, GetDC, GetWindowRect, DestroyIcon, DestroyWindow, EndDialog, DrawIcon, SendMessageW, DrawTextW, GetParent, PostMessageW, GetClientRect, LoadStringW, EndPaint, IsDlgButtonChecked, FillRect, SetWindowPos, BeginPaint, wsprintfW, GetDesktopWindow, LoadImageW, GetWindowLongW, KillTimer
wtsapi32.dll
WTSFreeMemory, WTSQuerySessionInformationW, WTSRegisterSessionNotification, WTSUnRegisterSessionNotification

TPwrMain.exe

TOSHIBA Power Saver by TOSHIBA CORPORATION (Signed)

Remove TPwrMain.exe
Version:   1.0.0.6
MD5:   596966f8c575d01a60f9553d9d090f64
SHA1:   e41266301114658367bbb81242013f3f0ddc694d
SHA256:   5652595873f1e4c70cf1fe61bf46a917771e295e650189a22ea72ae66b4e0edf

What is TPwrMain.exe?

Toshiba Power Saver provides a Control Panel for managing power and battery settings. Toshiba Power Saver requires Toshiba ACPI Common Modules (TVALD).

Overview

tpwrmain.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by TOSHIBA CORPORATION which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:tpwrmain.exe
Publisher:TOSHIBA Corporation
Product name:TOSHIBA Power Saver
Typical file path:C:\Program Files\toshiba\power saver\tpwrmain.exe
File version:1.0.0.6
Product version:V8.08.00
Size:493.84 KB (505,696 bytes)
Certificate
Issued to:TOSHIBA CORPORATION
Authority (CA):VeriSign
Effective date:Monday, April 11, 2011
Expiration date:Wednesday, April 11, 2012
Digital DNA
File packed:No
Code language:Microsoft Visual C# / Basic .NET
.NET CLR:Yes
.NET NGENed:No
More details

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'TPwrMain' → C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00029797%
0.028634%
Kernel CPU:0.00029119%
0.013761%
User CPU:0.00000678%
0.014873%
Kernel CPU time:383,651 ms/min
100,923,805ms/min
CPU cycles:50,763/sec
17,470,203/sec
Memory
Private memory:4.61 MB
21.59 MB
Private (maximum):8.67 MB
Private (minimum):2.62 MB
Non-paged memory:4.61 MB
21.59 MB
Virtual memory:94.32 MB
140.96 MB
Virtual memory (peak):96.67 MB
169.69 MB
Working set:3.41 MB
18.61 MB
Working set (peak):10.83 MB
37.95 MB
Page faults:27,870,835/min
2,039/min
I/O
I/O read transfer:8 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O other transfer:54 Bytes/sec
448.09 KB/min
I/O other operations:7/sec
1,671/min
Resource allocations
Threads:3
12
Handles:126
600
GUI GDI count:22
103
GUI GDI peak:23
142
GUI USER count:7
49
GUI USER peak:9
71

BehaviorsProcess properties

Integrety level:Medium
Platform:64-bit
Command lines:
  • "C:\Program Files\toshiba\power saver\tpwrmain.exe"
Owner:User
Parent process:explorer.exe (Windows Explorer by Microsoft Corporation)

ResourcesThreads

Averages
 
midas64.dll (BitDefender AntiVirus by BitDefender S.R.L. Bucharest, ROMANIA)
Total CPU:0.11094430%
0.272967%
Kernel CPU:0.10772127%
0.107585%
User CPU:0.00322302%
0.165382%
CPU cycles:2,466,707/sec
5,741,424/sec
Memory:340 KB
1.16 MB
TPwrMain.exe (main module)
Total CPU:0.00002908%
Kernel CPU:0.00002104%
User CPU:0.00000804%
CPU cycles:850/sec
Memory:508 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 62.38%
Windows Vista Home Premium 12.87%
Windows 7 Ultimate 7.92%
Windows 7 Home Basic 3.96%
Windows 7 Professional 2.97%
Windows 7 Starter 1.98%
Windows Vista Business 1.98%
Windows 7 Enterprise 1.98%
Windows 8 Pro 1.98%
Windows 8 Pro with Media Center 0.99%
Windows Vista Home Basic 0.99%

Distribution by countryDistribution by country

United States installs about 50.50% of TOSHIBA Power Saver.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Toshiba 98.57%
Acer 1.43%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE