home

mb8004.exe

Modem Booster

inKline Global, Inc.

The program is a setup application that uses the Inno Setup installer.
Publisher:
inKline Global, Inc.   (signed by inKline Global, Inc.)

Product:
Modem Booster

Version:
8.0.0.0

MD5:
cd609b2d9daf7c1cd1af2625e44590f5

SHA-1:
12e824b8caf4875b10b736c35d794908a31a9c34

SHA-256:
3c67e74332ce1606eeea15286ab52adc5f3bef0fd574f9e3ac690d27a039c5fc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 11:42:46 AM UTC  (today)

File size:
4.5 MB (4,741,272 bytes)

Product version:
8

Copyright:
Copyright (c) 1997 - 2012 Inkline Software Labs. All rights reserved.

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Digital Signature
Signed by:
inKline Global, Inc.

Authority:
COMODO CA Limited

Valid from:
11/21/2011 4:00:00 PM

Valid to:
11/21/2014 3:59:59 PM

Subject:
CN="inKline Global, Inc.", O="inKline Global, Inc.", STREET=711 S. Carson Street, L=Carson City, S=NV, PostalCode=89701, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
288508E9790128CFE47B87E51BE9AB65

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:OI7YNERCpPfiLf80avXBckpiPKBm6aENDOpddcs7BM+RmS50Cm:fqZaLf8PZckpiPKafW6BUeU

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Entropy:
7.9888

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file mb8004.exe has been seen being distributed by the following 10 URLs.

&onid=18512&oid=3001-18512_4-75686365&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=utilities/maintenance&topicbrcrm=&pid=12469694&mfgid=6287899&merid=6287899&ctype=dm&cval=NONE&devicetype=<!--esidesktop&pguid=2e0ccb8c1461190bd502ea2e&viewguid=fI8NSV1sS4JW1Hsm6DvT3pLE0xPKtqAjxuYe&destUrl=http://files.downloadnow.com/s/software/12/46/96/.../mb8004.exe

http://gsf-cf.softonic.com/12e/824/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10067&instance=softonic_en&type=PROGRAM&Expires=1460928390&Signature=hMa0F7qsMfc6i5~p3vooPbJLXd8eDF4Qj~Vg7a1cgRMvO~JHDnnS9Ka1tFGl6fcY5gin3I4lhU1iCG2xD7N6UacqYiWnybvASfBj6kJM4msXwJoRO36ZnZTJA8TRrtcYnteF9Io5ENkadvI0IRv5gm-Mmyyav1AVxApe2I5lT98_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mb8004.exe

http://gsf-cf.softonic.com/12e/824/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10067&instance=softonic_es&type=PROGRAM&Expires=1477832886&Signature=cH3nNGIBStAdQNI9Lr6rui57UoI7aerW67dwfExGJzyLKFrWaVdlUydpgjRHsNyBq-kG~qs4STxZcoxyl8wdCtg5BT53KSgiqw6CPmBnM5ZBFSEhFYg-jHzJ8cf0Xy3RA7EGTd~mLJqBuG9GlQTHsXVooeE6TaR5e3L8Rob0ltQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mb8004.exe

http://gsf-cf.softonic.com/12e/824/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10067&instance=softonic_en&type=PROGRAM&Expires=1476253945&Signature=UF23dympsIWGybF5fFc9VV0En9m69NROdes92j5t7GrkgOvy6v8i6B~uOBwKhmASvY4TdJYCPdzfxAIwg-Au~ED4eS9T1uyfU4JhekGcc7vwKNq6nJtov1aOW6EmYwJTYaUWBfUC2bt8cIo0daiBJwOuOq-OIDVs8SrLS1gRfBE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mb8004.exe

http://gsf-cf.softonic.com/12e/824/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10067&instance=softonic_en&type=PROGRAM&Expires=1474357305&Signature=eN1JNI~qPA7en61MmUOMtHawbBp5FDLqZk2ZziU1cXyaqzPSC7acqtzA-vfAr4BipbSOv01H-RfbI1~T0GLXLFPHxgUjHxrv9tzxRtLnFXOObDNMtiM~8fQfrzdFQqd7Y3erYsc06EinCDaGaqsFjsHxhCTGCiTiqQ7leB~zXH4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mb8004.exe

http://gsf-cf.softonic.com/12e/824/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10067&instance=softonic_en&type=PROGRAM&Expires=1466909102&Signature=SWNb7egmZqSGueLULWJLaE1SPgSEq0LFHzsrlsWJKgsLELfcgDBo4PDxqCiZV6ShkfC4s2xXorI1VUK~OdEzRIcNRyzZH7AaT8IAhF2mtJkLcHAku~z0bmnXqY3T-~vxuIJ4UxbRSK4GW-DnuYc-ciI3OTAIAtHYV-0a2IqMGdk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mb8004.exe

http://gsf-cf.softonic.com/12e/824/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10067&instance=softonic_en&type=PROGRAM&Expires=1460641913&Signature=L9PY4QKxig~gPgfQmiMQq8P8yHO60XbW~ZVFmFK5M6tPxi8WJz2~VjNnMPnnY01lMydPr3TzLzeR5WJpFrcoi4lIHLc9efCshxsieV0sOq53grXF7k-1N8jjnNY36MrcmyO3fpS2ciu5SZa0NN4RYVWurwYonYCw0cxfaHSyMj4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mb8004.exe

http://gsf-cf.softonic.com/12e/824/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10067&instance=softonic_en&type=PROGRAM&Expires=1442595586&Signature=anaDYDg4lRjthqqslUL1rB~~-f6pbiNw0o8nMjwcKibTUVmySvOJ4vmgFwPrWkoiqOQEF8WOExXSpcTk5K5BcyNTtonzEzsXQ8X0ZbwXvwlamXbNbym13DGuL8R3-k35ZxMjPV6vBJ3E~jxgRh7Jpx5m5vRmiIRgQwpSXs8W6nQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=mb8004.exe

http://software-files-a.cnet.com/s/software/12/46/96/.../mb8004.exe

http://files.downloadnow.com/s/software/12/46/96/.../mb8004.exe

Scan mb8004.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.