home

dvk7sqee.exe

MP3 Rocket

SCCE Development Inc

The file dvk7sqee.exe, “MP3 Rocket Setup Program” by SCCE Development Inc has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The file has been seen being downloaded from www.mp3rocketnowbest.com and multiple other hosts.
Publisher:
MP3 Rocket Inc.  (signed by SCCE Development Inc)

Product:
MP3 Rocket

Description:
MP3 Rocket Setup Program

Version:
7.3.2

MD5:
81c3d72eeb28a4b01eb6076fc78de501

SHA-1:
53511f560568859729f5fe4f0711b94492b3b7f9

SHA-256:
c455f10d85777d7f622c68f9274449e01187870fd0cbaf7cbf8bc1f62ae61ead

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/25/2024 1:32:19 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win32.Generic
16.1.25.16

File size:
1.1 MB (1,127,544 bytes)

Product version:
7.3.2

Copyright:
Copyright © MP3 Rocket Inc.

Original file name:
MP3 RocketSetup.exe

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\dvk7sqee.exe.part

Digital Signature
Signed by:
SCCE Development Inc

Authority:
COMODO CA Limited

Valid from:
11/2/2015 1:00:00 AM

Valid to:
11/2/2016 12:59:59 AM

Subject:
CN=SCCE Development Inc, O=SCCE Development Inc, STREET=3051 W Maple Loop Ste 201, L=Lehi, S=Utah, PostalCode=84043, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00EE6BCFEEB3DE758C0292441353CB7413

File PE Metadata
Compilation timestamp:
1/7/2016 5:47:56 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:S4y65/C7QEGIdpTAlv5eoGm8Od7tOkGN396Y:SSkQdKpT4v5jGQTGN396Y

Entry address:
0x57524

Entry point:
E8, 75, 98, 00, 00, E9, 79, FE, FF, FF, CC, CC, 68, 00, 71, 45, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, B8, A2, 49, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 6A, 0C, 68, 50, 1A, 49, 00, E8, 9B, FF, FF, FF, 6A, 0E, E8, BC, 22, 00, 00, 59, 83, 65, FC, 00, 8B, 75, 08...
 
[+]

Code size:
500 KB (512,000 bytes)

The file dvk7sqee.exe has been seen being distributed by the following 17 URLs.

http://www.mp3rocketnowbest.com/c?x=T0ta7dtxGy4UENLDKcDHAwi5epLY3rg7Xpmb9fxvfs8=&c=kixsM66kxnomsu1zzWdDH53bWNFZRSTneM5T5AQqSc7m0z15QLDiDSCIwYIa73u934qJzuXrsq0WcARrSv1Ff8PTO4JJU1/iwI/B YAVRILQne5VxC/X/RgNqpTjwQDSFIyyK431p zxySClDhCz/g==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=YgZLsianIJ5dd0W0Q7PRG50E3IQrliSMGUiW8Frs870=&c= 7QHIpeV7sYKoUkt50wBQrx4kUEJV1p0bajKWKtk1mRSiSaUHUMUCdcGfUl BWPZIHzuXvMTDJwGVwgmyhhm02g56VkZ1fCU3kCZBYJLkyBxHlGgXDy0ePb0QIOF4dI7R84Tk/oVHecNx2c ZE1uxg==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.allcoolmusic.com/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=DkVwb1UWyrVrr9ZpnsYGlU0OiMgfBUtcdSQrw34A64o=&c=7JyH/VCDPfgTtO3IboJxjFgk60wALCqtcZHBXpE3zR4TLxfhH3btlRdnBO4Dtt5xc1dEr8Q9WZMtlFgviMzK4eaJ5iwCHVLgzzP6ekOyMtIQKL41s6e6Ous4NqOmsdk9T57CRgyD6hx4LJvnUcMRtw==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=6RfQ0WhD7aqgxn5AkqpouNDBmQQfOmHnfxoCImvrHJk=&c=mdcTsfbkfGMvJkEVOu3I5l/Y1tMj3c GiYb8Nhr7KwAB0roOOQH3PHG92F/6qlsC4 L/AwRT6weYh4IblMPdd3vOzFL6 fj3CHcPUU1nq34=&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.psprocket.com/.../mp3rocket.exe

http://goo.gl/3gTvu

http://www.imusicsearch.com/.../mp3rocket.exe

http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=qLoIG9G1HtsSKkG7cfPRBGx5FFot/d52qdjBxxjtrH8=&c=Pt6GNk66sWXGCkxA330q4isNmxtD8Lp/Z8RymPykfDcL ii2eeo8V0BeDV6IP8SwNcmX6 xjMyIaZcGqrFFcV97aUiWubRg4mAy9eZI16X7lBn3dIXN ExmOpiyi64TOClaouXKnztA1GB8LJX7zqg==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=CSaOJyllzIVRj3Sn0tFaM/cWMaPcIMgAFPGMD0oVh8k=&c=6YrTqSlXQrtx Qi/pc2L2GVGt 63hs7p0f8WdZhBbmJl8dwUqCtDv8k2vgN4b9YBSrbSn Z0Auj9gozQMKuviGdsOTGR0Pmz0dPmeCC9UUo04wJ3ImOmMZlegMXY YTIKCAqjbsLomkB20tSNNV/ow==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.rocketbackups.com/.../mp3rocket.exe

http://d5.mp3rocket.com/.../MP3Rocket-Win.exe

http://offersrepo.com/download.php?signature=qualityscorei3&downloadName=mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=ftrab87REclIk7rXw3VfeS8pYgaoO96UNXSChdhAPak=&c=7WBvb4dmt Qb4DCX8plZmXNJPjlXGZf1c6CTSIcA7DG9agiZdCpjieS pHiG1zwqbx7oKt7ipQbUSB29AR1 7IXlJnbrrLATQsIX7NXidns=&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x= oAF focyvfIdkl2me t 4RjlmK dorHTXLCpvjTFVQ=&c=J2a3672KbG08neH9ogI/isvG2u9Ej 6asVYnQ24Id6v4GvMyH24GIjnzx18UMvaNgahoFCliHYfe/wiE0LJENQWZP2ujHs uKCuCKxaIiEs=&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://www.musicrocket.com/.../mp3rocket.exe

Remove dvk7sqee.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.