home

gputool_ctp1.exe

TechPowerUp GPUTool

TechPowerUp

This is a setup program which is used to install the application. The file has been seen being downloaded from www.techpowerup.com and multiple other hosts.
Publisher:
TechPowerUp  (signed and verified)

Product:
TechPowerUp GPUTool

Description:
Graphics card overclocking and tweaking utility

Version:
1.0.0.0

MD5:
3840446b64aa2759d21a08db2de3f2a5

SHA-1:
cc6c374fdd105263c2f2b45089d815d3142b6382

SHA-256:
4594818679fc33195f89516e0b8b417174f4cf86b23c556c612bcfe47627337a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:13:27 AM UTC  (today)

File size:
475.8 KB (487,248 bytes)

Product version:
1.0.0.0

Copyright:
(c) 2009 TechPowerUp.com

Original file name:
GPUTool.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\gputool_ctp1.exe

Digital Signature
Signed by:
TechPowerUp

Authority:
GlobalSign nv-sa

Valid from:
8/12/2008 4:41:47 AM

Valid to:
8/12/2011 4:41:47 AM

Subject:
E=admin@techpowerup.com, CN=TechPowerUp, O=TechPowerUp, C=HK

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000011BB4CA6474

File PE Metadata
Compilation timestamp:
5/7/2009 4:48:46 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:jyddl7h8W4nYYuXC2QeCagZPYZ7YkOMlZQYZzOX8a5cxL5:jy/l9ynFBrwZ7Yy7zOMa5e

Entry address:
0x1F0C4

Entry point:
B8, 7C, 95, 64, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 22, 1E, 31, FC, 40, F7, D7, 11, 3F, AE, 86, 4D, 08, 90, 3E, 5C, F2, 71, 8E, 30, 9F, 18, 0F, 9F, FF, 01, A2, 0E, 86, A5, 07, 1F, 03, 56, 42, 61, DC, 25, A8, F4, 95, 21, 8B, 3E, 46, A1, B3, 18, B8, E5, BA, 30, C4, 81, 5F, 5C, DE, D9, 37, 2A, C1, 4D, FE, 89, D6, 72, 8D, B3, 1D, 1D, 7C, 4F, BC, 85, 00, ED, 76, F3, AB, C4, 9D, 70, C7, EE, 8C, 89, AF, E9, B3, D0, 0F, 7E, 08...
 
[+]

Packer / compiler:
PECompact v2

Code size:
1012 KB (1,036,288 bytes)

The file gputool_ctp1.exe has been seen being distributed by the following 11 URLs.

https://www.techpowerup.com/downloads/1383/.../start?server=6

http://uk1-dl.techpowerup.com/.../GPUTool_CTP1.exe

http://dl.cdn.chip.de/downloads/.../GPUTool_CTP1.exe

https://www.techpowerup.com/downloads/1383/.../start?server=13

http://www.techpowerup.com/downloads/1383/.../start?server=5

http://us1-dl.techpowerup.com/.../GPUTool_CTP1.exe

http://www.techpowerup.com/downloads/1383/.../start?server=6

http://us1-dl.techpowerup.com//.../GPUTool_CTP1.exe

http://www.techpowerup.com/downloads/1383/.../start?server=7

http://us2-dl.techpowerup.com//.../GPUTool_CTP1.exe

http://www.techpowerup.com/downloads/1383/.../start?server=13

Scan gputool_ctp1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.