home

GPUView.exe

GPU ETW Event Viewer

Windows Main Build Lab Account

Publisher:
Microsoft Corporation  (signed by Windows Main Build Lab Account)

Product:
Microsoft® Windows® Operating System

Description:
GPU ETW Event Viewer

Version:
6.3.9476.0 (winmain.130801-1755)

MD5:
5271022f31543bc5a08eb3b3c64d8b56

SHA-1:
60e2d2531752e0cc690e50c81713fa4b95d4aa4b

SHA-256:
4c7c034ce1b228036ddf38949683b812d32e772ac125efbfb2c6ac79edf79aad

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 5:33:00 PM UTC  (today)

File size:
511.4 KB (523,648 bytes)

Product version:
6.3.9476.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
GPUView.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\microsoft\wpa launcher\apps\xperf\gpuview\gpuview.exe

Digital Signature
Signed by:
Windows Main Build Lab Account

Authority:
MSIT Test CodeSign CA 2

Valid from:
2/12/2013 1:53:36 AM

Valid to:
2/12/2014 1:53:36 AM

Subject:
CN=Windows Main Build Lab Account

Issuer:
CN=MSIT Test CodeSign CA 2, DC=redmond, DC=corp, DC=microsoft, DC=com

Serial number:
27D598BA000200337C08

File PE Metadata
Compilation timestamp:
8/2/2013 10:56:19 AM

OS version:
6.3

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:u/oMNOk2fdxycCGOzWIPPUhWr9a1NFFab39kyJhKJrdWM+yavIyfIu:u/3Nmf2nC26Wr9yFFg3TodOyaDfIu

Entry address:
0x592FC

Entry point:
48, 83, EC, 28, E8, 3F, 10, 00, 00, 48, 83, C4, 28, E9, 06, 00, 00, 00, CC, CC, CC, CC, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 7C, 24, 10, 41, 56, 48, 81, EC, B0, 00, 00, 00, 83, 64, 24, 20, 00, 48, 8D, 4C, 24, 40, FF, 15, E9, 9E, 01, 00, 90, 65, 48, 8B, 04, 25, 30, 00, 00, 00, 48, 8B, 58, 08, 33, FF, 33, C0, F0, 48, 0F, B1, 1D, 96, 63, 01, 00, 74, 19, 48, 3B, C3, 75, 07, BF, 01, 00, 00, 00, EB, 0D, B9, E8, 03, 00, 00, FF, 15, 6D, 9E, 01, 00, EB, DA, 8B, 05, 7D, 63, 01, 00, 83, F8, 01, 75, 0A, 8D, 48, 1E, E8...
 
[+]

Entropy:
6.2096

Code size:
424 KB (434,176 bytes)

Scan GPUView.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.