tthrottle64.exe

www.eFMer.eu Cpu/Gpu temperature throttle

F. Melgert Beheer B.V.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘EFMER_TThrottle’. This is installed with TThrottle (32/64 Bit): Temperature Throttle by eFMer V 7.1.6.
Publisher:
eFMer  (signed by F. Melgert Beheer B.V.)

Product:
www.eFMer.eu Cpu/Gpu temperature throttle

Version:
7.1.6.0

MD5:
60d99461943fc92104f74f2782139f25

SHA-1:
f717b83a4cdef151a714a3cc2cc6730b0506dfc0

SHA-256:
6c8b3dbbd7208580a44a6bd5d1c3bae0dc52c9407fb66c3f9f12438c4170d2e9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 6:35:45 PM UTC  (today)

File size:
3.4 MB (3,513,168 bytes)

Product version:
7.1.6.0

Copyright:
2009-2013 (c) eFMer. All rights reserved.

Original file name:
TThrottle

File type:
Executable application (Win64 EXE)

Language:
English

Common path:
C:\Program Files\efmer\tthrottle\tthrottle64.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
4/24/2013 5:04:04 PM

Valid to:
7/22/2016 10:19:07 AM

Subject:
CN=F. Melgert Beheer B.V., OU=eFMer, O=F. Melgert Beheer B.V., L=Laag Keppel, S=Gelderland, C=NL

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121CA64C93B136B2B87717D792AC85A3D01

File PE Metadata
Compilation timestamp:
10/10/2013 7:18:35 AM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:HZU0oktSGhDVFawdm1TbUrXnSRXfZ8gBPFGzTpyY8if21u0NybW/zfje2oSwZM:7Sv7t6TpMqW/7Hrwa

Entry address:
0x1EC93C

Entry point:
48, 83, EC, 28, E8, 5B, B2, 00, 00, 48, 83, C4, 28, E9, 52, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, B1, 4D, 12, 00, 75, 11, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 02, F3, C3, 48, C1, C9, 10, E9, D5, B2, 00, 00, CC, 40, 53, 48, 83, EC, 20, 83, 64, 24, 40, 00, 4C, 8D, 44, 24, 40, E8, 0B, B4, 00, 00, 48, 8B, D8, 48, 85, C0, 75, 1B, 39, 44, 24, 40, 74, 15, E8, 80, 60, 00, 00, 48, 85, C0, 74, 0B, E8, 76, 60, 00, 00, 8B, 4C, 24, 40, 89, 08, 48, 8B, C3, 48...
 
[+]

Code size:
2.2 MB (2,317,312 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
EFMER_TThrottle

Command:
C:\Program Files\efmer\tthrottle\tthrottle64.exe


The file tthrottle64.exe has been discovered within the following program.

www.efmer.com
About 3% of users remove it
 
Powered by Should I Remove It?

Scan tthrottle64.exe - Powered by Reason Core Security