home

Toshiba.Tempo.UI.TrayApplication.exe

Toshiba TEMPRO

Toshiba Europe GmbH

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Toshiba TEMPO’.
Publisher:
Toshiba Europe GmbH  (signed and verified)

Product:
Toshiba TEMPRO

Version:
1.2.0.0

MD5:
25b4ba563ad46907f24135e7759ffb63

SHA-1:
afb85ed128fcfabaf35f1413680cf554d3c546b1

SHA-256:
98af18a32ac4cfa5878f06741d3168da41b447c0d34ec3815fe5a476e7727722

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 6:53:45 PM UTC  (today)

File size:
101.4 KB (103,824 bytes)

Product version:
1.2.0.0

Copyright:
Copyright © Toshiba Europe GmbH 2008

Original file name:
Toshiba.Tempo.UI.TrayApplication.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\toshiba tempro\toshiba.tempo.ui.trayapplication.exe

Digital Signature
Signed by:
Toshiba Europe GmbH

Authority:
VeriSign, Inc.

Valid from:
10/26/2007 2:00:00 AM

Valid to:
11/3/2008 12:59:59 AM

Subject:
CN=Toshiba Europe GmbH, OU=Computer Systems, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Toshiba Europe GmbH, L=Neuss, S=North Rhine-Westphalia, C=DE

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
10AE1F6358C8F6BD9DDBB0E94E7DE809

File PE Metadata
Compilation timestamp:
10/17/2008 3:28:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:JNULuXyN8DvKh1jXxK6zH7nTY1fIzB2Tp91pI:A587Kh1jXxK6zH7n01fIyO

Entry address:
0x1641E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
84 KB (86,016 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Toshiba TEMPO

Command:
C:\Program Files\toshiba tempro\toshiba.tempo.ui.trayapplication.exe


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.