home

gammaadjuster.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from s8372.chomikuj.pl and multiple other hosts.
Version:
1.0.0.43

MD5:
e630ce51eb54d9cbbccc48c3bb6ec3ae

SHA-1:
a924d0477836d70ba72212ce368d8d9ebac49bdd

SHA-256:
204ff7d706036b42535d5dfa1908de8a10e498d2b65c7dfac0863b9a68a3c4a5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 4:26:19 AM UTC  (today)

File size:
187 KB (191,488 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Language:
Polish (Poland)

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
3072:JFydmAuQQR1ONj/3L+6Tk6JgJaMaeLE5IybXBkeAG0/sWHQo/5CEhLZhEDxN7zx1:JFydmA9KAd7/9JgJaheLE5N5avjZZkH0

Entry address:
0x83880

Entry point:
60, BE, 00, 70, 45, 00, 8D, BE, 00, A0, FA, FF, C7, 87, 9C, 20, 06, 00, 6C, 7F, 0E, E5, 57, 83, CD, FF, EB, 0E, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 19, 8B, 1E, 83, EE, FC, 11, DB, 72, 10, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 78, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07...
 
[+]

Entropy:
7.8568

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.22 (Delphi) stub

Code size:
180 KB (184,320 bytes)

The file gammaadjuster.exe has been seen being distributed by the following 5 URLs.

http://s8372.chomikuj.pl/File.aspx?e=MFtsHU_B0bTMjesWRbE4RfGcKK9zaRmal1aKFnPJYwgPGocoeMfAxsovpMOoumUYekD7KO3h9QT--iY_SJiV54fiOffFSEkKzWlTprbStUYgwSJHMFhgl0TWebiyc5Fnxgj2nxWj0Zuv_dv2LLZ2Ng&pv=2

http://files.lonebullet.com/counter-strike/.../gamma-adjuster.exe

http://s10095.chomikuj.pl/File.aspx?e=MFtsHU_B0bTMjesWRbE4RcblvHhUMjf8uSCvYoDVlrJF9pK2kOmXKE_nmarHvCWNVnBWQ-iya5cV5hwcmxJNpr67jOU7pGFNoMWjML2JXJyYK-tatSoG9gO2sCeAPnPUO6GENI2YSzU9lzRAwJf5Gw&pv=2

http://www.lonebullet.com/f/counter-strike/.../gamma-adjuster.exe

http://revpx10.chomikuj.pl/.../File.aspx?e=bkCnQ6lmU_VZT47mnSYaH-_U6kidBi2uY6agVxaL_rcIYUOtMFhkEsULyCAt-eRshaCPMSMM_N2r5oGD14KB9kpayVui5-EzZJvSz7sO3YsxSCIHTBLt9IqmZ8r-Un1W7kN187vcKNI_nn8gBoQyRw&pv=2

Scan gammaadjuster.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.