home

TCrdMain_Win8.exe

TOSHIBA Function key

TOSHIBA CORPORATION

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘TCrdMain’. This is installed with TOSHIBA Function Key.
Publisher:
TOSHIBA CORPORATION  (signed and verified)

Product:
TOSHIBA Function key

Description:
TOSHIBA Function key Main Module

Version:
2.0.18.32

MD5:
acaed7654b72427a8a3af538a239302e

SHA-1:
c77c60032d29776c8363ad153a0aacf0b6c59010

SHA-256:
7a7033e2d4e5b9f88ca0405f14ee14e1516ead133f16c414d40c668269f22be9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 1:30:35 AM UTC  (today)

File size:
1.8 MB (1,928,032 bytes)

Product version:
1.1.0003

Copyright:
Copyright(C) 2012-2013 TOSHIBA Corporation. All rights reserved.

Original file name:
TCrdMain_Win8.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\toshiba\hotkey\tcrdmain_win8.exe

Digital Signature
Signed by:
TOSHIBA CORPORATION

Authority:
VeriSign, Inc.

Valid from:
3/28/2013 7:00:00 AM

Valid to:
4/7/2014 6:59:59 AM

Subject:
CN=TOSHIBA CORPORATION, OU=TOSHIBA CORPORATION, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=TOSHIBA CORPORATION, L="1-1 Shibaura, 1-chome, Minato-ku", S=Tokyo, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3752DF28690DF18A9BD134827378E202

File PE Metadata
Compilation timestamp:
10/8/2013 3:47:51 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:RfamWVP//2qi+593iN4V3OiApdsSFEwTjOvcTGIJJYF6ovIsgkErcQjw:xw/2qiC93iNg3OiAphFEwTLPJo6ovIsj

Entry address:
0x10B4B1

Entry point:
E8, F2, 78, 00, 00, E9, 89, FE, FF, FF, 3B, 0D, 30, 28, 58, 00, 75, 02, F3, C3, E9, 79, 79, 00, 00, 6A, 0C, 68, F8, 8C, 57, 00, E8, 1A, 28, 00, 00, 33, FF, 89, 7D, E4, 33, C0, 8B, 5D, 08, 3B, DF, 0F, 95, C0, 3B, C7, 75, 14, E8, C3, 24, 00, 00, C7, 00, 16, 00, 00, 00, E8, C6, 7F, 00, 00, 33, C0, EB, 7B, 33, C0, 8B, 75, 0C, 3B, F7, 0F, 95, C0, 3B, C7, 74, DE, 33, C0, 66, 39, 3E, 0F, 95, C0, 3B, C7, 74, D2, E8, E6, 7C, 00, 00, 89, 45, 08, 3B, C7, 75, 0D, E8, 89, 24, 00, 00, C7, 00, 18, 00, 00, 00, EB, C9, 89...
 
[+]

Entropy:
6.3852

Code size:
1.2 MB (1,250,304 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
TCrdMain

Command:
C:\Program Files\toshiba\hotkey\tcrdmain_win8.exe


The file TCrdMain_Win8.exe has been discovered within the following programs.

TOSHIBA Function Key  by TOSHIBA Corporation
The TOSHIBA Function Key Utility is a program designed to provide userswith a means of enabling support for the 'Fn' key on various laptop models. The Fn key is used to provide features including Display Switch, LCD Brightness or Instant Security.
www.csd.toshiba.com
10% remove it
 
Powered by Should I Remove It?

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.