Should I block it?
No, this file is 100% safe to run.
Relationships
 PE file structure
|
Show functions |
Import table
kernel32.dll
GetEnvironmentVariableA, GetProcAddress, WaitForSingleObject, GetModuleFileNameA, GetTickCount, InitializeCriticalSection, DeleteCriticalSection, ExitProcess, GetModuleHandleA, GetStartupInfoA, QueryPerformanceCounter, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, GetVersionExA
msvcr71.dll
DllMain
GIZMO.exe
GIZMO by ants Inc. (Signed)
| Version: | 3, 2, 1, 0 |
| MD5: | ebfbd68504d55e20e40cff9921984636 |
| SHA1: | 1dd97292580aeaea02d182697e1bcf68cd0f5964 |
Overview
gizmo.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). The file is digitally signed by ants Inc. which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows 7 Ultimate (6.1.7601.65536).
Details
| File name: | gizmo.exe |
| Publisher: | ants Inc. |
| Product name: | GIZMO |
| Typical file path: | C:\Program Files\gizmo2\gizmo.exe |
| File version: | 3, 2, 1, 0 |
| Size: | 133.84 KB (137,048 bytes) |
| Build date: | 1/12/2011 10:43 AM |
| Certificate |
| Issued to: | ants Inc. |
| Authority (CA): | VeriSign |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| Code language: | Microsoft Visual C++ 7.1 |
| .NET CLR: | No |
More details
Behaviors
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'GIZMO2' → "C:\Program Files\GIZMO2\GIZMO.exe" -BootProcess
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00464394% | |
| Kernel CPU: | 0.00261634% | |
| User CPU: | 0.00202760% | |
| Kernel CPU time: | 70 ms/min | |
| Context switches: | 29/sec | |
| Memory |
| Private memory: | 9.04 MB | |
| Private (maximum): | 15.01 MB | |
| Private (minimum): | 14.22 MB | |
| Non-paged memory: | 9.04 MB | |
| Virtual memory: | 104.78 MB | |
| Virtual memory (peak): | 110.44 MB | |
| Working set: | 15.04 MB | |
| Working set (peak): | 15.06 MB | |
| Resource allocations |
| Threads: | 12 | |
| Handles: | 206 | |
| GUI GDI count: | 17 | |
| GUI GDI peak: | 24 | |
| GUI USER count: | 41 | |
| GUI USER peak: | 44 | |
Process properties
| Integrety level: | High |
| Platform: | 32-bit |
| Command lines: |
- "C:\users\user\appdata\local\gizmo2\data\deck\basic\basic.exe" -deckprocess \\.\pipe\gizmo_{88950143-f3aa-4f6c-916c-0f3aeca5e6c0}
- "C:\Program Files\gizmo2\gizmo.exe"
|
| Owner: | User |
| Parent process: | gizmo.exe (GIZMO by ants Inc.) |
Threads
Averages
| msvcr71.dll (Microsoft Visual Studio .NET by Microsoft) |
| Total CPU: | 0.01355489% | |
| Kernel CPU: | 0.00789370% | |
| User CPU: | 0.00566119% | |
| CPU cycles: | 5,656,057/sec | |
| Context switches: | 18/sec | |
| Memory: | 344 KB | |
| GIZMO.exe (main module) |
| Total CPU: | 0.00225376% | |
| Kernel CPU: | 0.00225376% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 40,960/sec | |
| Memory: | 128 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
100.00% |
|
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
100.00% |
|
