tvsuShim.exe
Summary
Lenovo System Update Shim - compatibility shim for Lenovo System Update operations.
tvsuShim.exe is the 853rd most commonly executed Windows program in EchoTrail's dataset, observed 3,327 times across enterprise environments. It typically runs from C:\Program Files (x86)\Lenovo\System Update and it is most often launched by svchost.exe.
Behavior
Top Paths
- C:\Program Files (x86)\Lenovo\System Update100%
Top Hashes (SHA256)
- 33807965ff86965d56a5243d4185a9a71e4ffc1d28829be4a044c40e3159266b74.36%
- d8c219d83eca682c93b8c8360cd5c820076ea13ad40d695bd7ed49e6844e778611.78%
- 781ffb2ee86cc4fa13e0c3ba0b83548cce78acc4e077fac6ba7587262451679f5.35%
- 0be6b177931534326567e6768e8db6d9b5d3108bb739609440828d7a7ea6bafa4.69%
- 5d70f48ad695cf274f8ad170fc4f5ddcae47ff87cd129ca4b6b9fef41b1b0cd92.74%
- c61d60edfb7eb2a4e7526d7dd4b4b603754ec56c4bb85865ddeedefa181a5dd41.02%
- 2af4cb06d884db941687690084a1d16c1ba1471c6ccd546e5a7283fe2a7e8b630.06%
Process Ancestry
Top Grandparents
- services.exe97.64%
- svchost.exe2.36%
Top Parents
- svchost.exe96.99%
- taskeng.exe3.01%
Top Children
- tvsu.exe100%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about tvsuShim.exe
Rocky answers questions about tvsuShim.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.