tposd.exe

by Lenovo

Driver/Hardware

Sources: 300M+ executions observed in the wild.

Summary

Lenovo ThinkPad On-Screen Display - shows volume, brightness, and function key status overlay on ThinkPad laptops.

tposd.exe is the 491st most commonly executed Windows program in EchoTrail's dataset, observed 12,118 times across enterprise environments. It typically runs from C:\Windows\System32\DRIVER~1\FILERE~1\FNE799~1.INF\driver and it is most often launched by tphkload.exe.

Get this in your tools

The same record for tposd.exe, by REST or as an MCP tool. Free key, no card.

Get a free key

curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
  https://api.echotrail.io/v1/process/tposd.exe

Free returns the summary. Team returns the full record you see on this page. Endpoint docs

491st

most commonly executed Windows program

12,118

observed endpoint executions

Behavior

Top Paths

C:\Windows\System32\DRIVER~1\FILERE~1\FNE799~1.INF\driver75.66%
C:\...23.73%
C:\Windows\System32\DRIVER~1\FILERE~1\FNC3F6~1.INF\driver0.53%
C:\Program Files\Lenovo\HOTKEY0.05%
C:\Windows\System32\DRIVER~1\FILERE~1\FNAB75~1.INF\driver0.04%

Top Hashes (SHA256)

270a9d170477b5edb092bd6e7fd93c6ccb02bda9a6dbdf81708a1d824257802c75.66%
f9367d1160107c1d62f477387d0cb452224479ebce531517adabe80d32a91c1210.49%
83f98944cdadd4fb7e421de899b6e8ac2647d1644a2881e2df0562bcc804014d5.62%
d12e522117de05f0432da6e7e6ea9c30b07fd61c2b515249ea084635bb9a1f405.22%
7e0537c20f01b26daf7df94117bd8bd2f8950a54d1260d683b82542edf180b591.2%
4246e51b590a2bf8c4fee00f105afb1fe56acc211525beeb26bc67ba365129b40.75%
637016368e10ca8c288c553dcfab079d8a009c1aa5fdba0b7b0fe6a4cd5523210.53%
00203faf6eaf6db05d69e5d45d790bbc8e09dbff396f1fe990bd64a94d149e740.5%
6520baeec697e0ff9aac416458dec587b8fb95cbf5a7cc4fc790e2d03472c4f30.04%

Process Ancestry

Ask Rocky about tposd.exe

Rocky is the free chat demo. It answers from this same dataset, no account needed.

This page is the Team-tier API record for tposd.exe. The free tier returns the summary, 500 lookups a month. Or ask Rocky.