TpShocks.exe
ThinkVantage Active Protection System by Lenovo (Japan) Ltd. (Signed)
| Version: | 1.77.0000.0009 |
| MD5: | d1d974b76eb4ace2978837cfed7833e6 |
| SHA1: | 56750192742460ddbd99f6e0432c65bd514a7dd7 |
| SHA256: | 866a90eee1eb996292be501d3de8168749c8c0df49d4e2558bc4dc2ef70752e2 |
Overview
tpshocks.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Lenovo (Japan) Ltd. which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows 7 Ultimate (6.1.7601.65536).
Details
| File name: | tpshocks.exe |
| Publisher: | Lenovo. |
| Product name: | ThinkVantage Active Protection System |
| Typical file path: | C:\Windows\System32\tpshocks.exe |
| File version: | 1.77.0000.0009 |
| Product version: | 1.77 |
| Size: | 223.38 KB (228,744 bytes) |
| Certificate |
| Issued to: | Lenovo (Japan) Ltd. |
| Authority (CA): | VeriSign |
| Digital DNA |
| File packed: | No |
| Code language: | Microsoft Visual C# / Basic .NET |
| .NET CLR: | Yes |
| .NET NGENed: | No |
More details
Behaviors
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'TpShocks' → TpShocks.exe
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00006305% | |
| Kernel CPU: | 0.00004599% | |
| User CPU: | 0.00001706% | |
| Kernel CPU time: | 125 ms/min | |
| Memory |
| Private memory: | 2.68 MB | |
| Private (maximum): | 5.21 MB | |
| Private (minimum): | 172 KB | |
| Non-paged memory: | 2.68 MB | |
| Virtual memory: | 73.27 MB | |
| Virtual memory (peak): | 76.17 MB | |
| Working set: | 1.38 MB | |
| Working set (peak): | 5.36 MB | |
| Resource allocations |
| Threads: | 4 | |
| Handles: | 81 | |
| GUI GDI count: | 25 | |
| GUI GDI peak: | 27 | |
| GUI USER count: | 10 | |
| GUI USER peak: | 11 | |
Process properties
| Integrety level: | High |
| Platform: | 64-bit |
| Command line: | "C:\Windows\System32\tpshocks.exe" |
| Owner: | User |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
100.00% |
|
