» tpshocks.dll
Overview
Analysis
File Details
Programs (2)

tpshocks.dll

ThinkVantage Active Protection System

Lenovo(Japan)Ltd.

This is installed with multiple programs including Lenovo Active Protection System and Système de protection active ThinkVantage.

File name:

tpshocks.dll

Publisher:

Lenovo. (signed by Lenovo(Japan)Ltd.)

Product:

ThinkVantage Active Protection System

Version:

1.73.1.0000

MD5:

ce6d0adfb8b19343a85a23a42f86e41e

SHA-1:

6f193a1c17973ccd0424f7197578116ed185439b

SHA-256:

a1734ee7e63d0dd819be41933906cf900d98568485acc01ab86685e619613d22

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 7:46:06 PM UTC (today)

File size:

239.4 KB (245,096 bytes)

Product version:

1.73

Original file name:

TpShocks.exe

File type:

Dynamic link library (Win64 DLL)

Language:

French (France)

Common path:

C:\Program Files\thinkpad\tpshocks\mui\040c\tpshocks.dll

Digital Signature

Signed by:

Lenovo(Japan)Ltd.

Authority:

VeriSign, Inc.

Valid from:

10/6/2010 12:00:00 AM

Valid to:

10/6/2011 11:59:59 PM

Subject:

CN=Lenovo(Japan)Ltd., OU=Research & Development 1, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Lenovo(Japan)Ltd., L=Yamato-shi, S=Kanagawa, C=JP

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3AE1F834FA867FF5102FBE94ADF86384

File PE Metadata

Compilation timestamp:

11/16/2010 9:44:34 AM

OS version:

4.0

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

8.0

Entry address:

0x1390

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 83, FA, 01, 49, 8B, F8, 8B, DA, 48, 8B, F1, 75, 05, E8, DF, 1D, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 83, FE, FF, FF, CC, CC, CC, 40, 53, 48, 83, EC, 20, 8B, D9, E8, B3, 20, 00, 00, 8B, CB, E8, 6C, 1E, 00, 00, 48, 8B, 0D, 15, 9C, 00, 00, E8, B0, 05, 00, 00, B9, FF, 00, 00, 00, 48, 83, C4, 20, 5B, 48, FF, E0, CC, CC, CC, 40, 53, 48, 83, EC, 20, 8B, D9, 48, 8D, 0D, 59, 6E, 00, 00, FF... 
[+]

Entropy:

5.8299

Code size:

27 KB (27,648 bytes)

The file tpshocks.dll has been discovered within the following programs.

Lenovo Active Protection System by Lenovo

www.Lenovo.com

8% remove it

Système de protection active ThinkVantage by Lenovo

www.lenovo.com

10% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.