home

bookmaker.exe

mjBook Maker

mjSoftware

This is a setup program which is used to install the application. The file has been seen being downloaded from s16.chomikuj.pl.
Publisher:
mjSoftware

Product:
mjBook Maker

Version:
3.1.0.93

MD5:
b499c8beca6534883c85b8e14b97d589

SHA-1:
de974d012a35ff583c772327c2e5a8bf619cb9b9

SHA-256:
14b07d0f30cfcbd8d859fc5ca1a403a1f73d3ebd3b74dbac9530c18693b575b3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 12:58:39 PM UTC  (today)

File size:
585 KB (599,040 bytes)

Product version:
3.1.0.0

Copyright:
mjSoftware

Trademarks:
mjSoftware

Original file name:
mjBook

File type:
Executable application (Win32 EXE)

Language:
Russian (Russia)

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:iVAguI+er5xeWJARDqPD9j0OEkuA1VLf84rVQjWdBfBtzB:yvOg5xeWJGgpj4PATw4rVQjWbfBt1

Entry address:
0x774D0

Entry point:
55, 8B, EC, 83, C4, F0, B8, A0, 72, 47, 00, E8, 94, F1, F8, FF, A1, 54, 0B, 48, 00, 8B, 00, E8, 1C, 88, FE, FF, 8B, 0D, 7C, 0A, 48, 00, A1, 54, 0B, 48, 00, 8B, 00, 8B, 15, 14, 35, 47, 00, E8, 1C, 88, FE, FF, A1, 54, 0B, 48, 00, 8B, 00, E8, 90, 88, FE, FF, E8, AB, D0, F8, FF, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
473.5 KB (484,864 bytes)

The file bookmaker.exe has been seen being distributed by the following URL.

http://s16.chomikuj.pl/File.aspx?e=AvdA35a-b0hYx548D968umjvCT-7-eF7szQVcCYzTs-ka2Y2iw-R_tD2_b8oTr_xFeWAwaUt7xLDiRKrbzPMarHCX3ZSt75T6rhztL9exedjxKhThgP-PpOVFYKxUr8-hWWJtF-bcz78Xd4QAAMJtg&pv=2

Scan bookmaker.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.