» mp3rocket.exe
Overview
Analysis
File Details
Downloads (28)

mp3rocket.exe

MP3 Rocket

MP3 TechSupport LLC

The installer utilizes the installCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application mp3rocket.exe, “MP3 Rocket Setup Program” by MP3 TechSupport has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The file has been seen being downloaded from cdn.mp3rocketdownloadfiles.com and multiple other hosts.

File name:

mp3rocket.exe

Publisher:

MP3 Rocket Inc. (signed by MP3 TechSupport LLC)

Product:

MP3 Rocket

Description:

MP3 Rocket Setup Program

Version:

7.3.2

MD5:

c6d97d3397c35d2c244dda3f2c8305eb

SHA-1:

9ed783ae68d940852f44133d26e6e4b69dfd5978

SHA-256:

3c9daf49e8a087536f14c43540d6d5c82b830b1a9c21b9f01400ea9d575f747a

Scanner detections:

1 / 68

Status:

Adware

Note:

Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:

This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:

12/25/2024 1:24:51 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.installCore.MP3TechSupport.Installer (M)

16.2.26.3

File size:

1.1 MB (1,193,408 bytes)

Product version:

7.3.2

Original file name:

MP3 RocketSetup.exe

File type:

Executable application (Win32 EXE)

Bundler/Installer:

installCore

Language:

English (United States)

Common path:

C:\users\{user}\downloads\mp3rocket.exe

Digital Signature

Signed by:

MP3 TechSupport LLC

Authority:

Symantec Corporation

Valid from:

4/14/2015 8:00:00 PM

Valid to:

4/14/2017 7:59:59 PM

Subject:

CN=MP3 TechSupport LLC, O=MP3 TechSupport LLC, L=Lehi, S=Utah, C=US

Issuer:

CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

16A1E50EC9A3D10A9B18242160B68883

File PE Metadata

Compilation timestamp:

1/29/2016 12:27:53 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

14.0

CTPH (ssdeep):

24576:reMTCNix5ykhnKfca+OT0v7C0q7S6oGm8OAhcBh5SB:r1FxQkh/a+OT0vm9mGQgKLSB

Entry address:

0x4F6F2

Entry point:

E8, DD, 04, 00, 00, E9, 80, FE, FF, FF, 55, 8B, EC, 83, 25, 2C, AE, 4A, 00, 00, 83, EC, 2C, 53, 33, DB, 43, 09, 1D, D0, 82, 4A, 00, 6A, 0A, E8, D2, 84, 02, 00, 85, C0, 0F, 84, 74, 01, 00, 00, 83, 65, EC, 00, 33, C0, 83, 0D, D0, 82, 4A, 00, 02, 33, C9, 56, 57, 89, 1D, 2C, AE, 4A, 00, 8D, 7D, D4, 53, 0F, A2, 8B, F3, 5B, 89, 07, 89, 77, 04, 89, 4F, 08, 89, 57, 0C, 8B, 45, D4, 8B, 4D, E0, 89, 45, F4, 81, F1, 69, 6E, 65, 49, 8B, 45, DC, 35, 6E, 74, 65, 6C, 0B, C8, 8B, 45, D8, 35, 47, 65, 6E, 75, 0B, C8, F7, D9... 
[+]

Entropy:

7.2519

Code size:

527 KB (539,648 bytes)

The file mp3rocket.exe has been seen being distributed by the following 28 URLs.

http://cdn.mp3rocketdownloadfiles.com/c?x=pk9s9a5QhMQFqvhFa2SMt7Hiv9 086OHjBBHv9VLG9A=&c=ArAhFOX1ABRkQFKAn43NiMd21QRfrHT2V79mmDmat7J89ElXsTeLmzg7C95j4fSbjcYYWCZnDAEj3G/RMSz shFVonNFtiWFj35RZgcfjDLfXLCv01St0OUJESLTGZuVnBp8e7PQxQ2NU1g2OAir2 w6BhpS2QmluEN5Ew4dT8=&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=56dpSfqIQbT2njyRFtkukbidYXgERP9QpM8ulkKJosY=&c=K0LFKWmvSKOpeOMFRsPtQW7CM3i1nfKnB2V6mafx8LvMV/thLzV0mnxoGJlDLudX2HKgwaEjsZe2bJtNXrAKlH CN9PkGehrlKzviQpKkehWbBuGyBBWW1IwmcmHs6EHZxrfVoKYaJaIkddlev6NpA==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=jfxeN8zPdKbc88TvEBbs06BxKxh7cHnn U1JbmttfJQ=&c=MZZSrDVGAo8sIZr Rqz9JZiK/sP7oYsCRt7k040zbhyEHj4Bu0ctXLCUTsbaq mMYPvV 9iPPLGeFYKQ2UBI23HBMaUkuaZg3iGaO0U/PJiTIOuP90/6oAzAeWYDCus8ky8Xyqbk2YnzSH8ULeFRdN6TRuL25hjxDMsYpbg4ZE=&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.centralgiftgrab.com/c?x=J30YZpYmf9sqpRBlu09pzoadgFzygnm87gxW7CNtPPo=&c=6KFjnCsdiQI3b0Ywa422DKy2Vkl 4rnWPh fM1EXi sksVv85to2wgzCT07J1y6Ww3hzlWrzX1LdKTmDbUNBRD9Atl/tn/tqGP60nlq5bNz/l Sek A0jxfSdYnnGbeV6Tkfm1DDHPUaE3xYBLaniwZzFPdZtr1LvjLkZo7SaTQ=&e=0&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://installs.innovativesys.co/.../mp3rocket.exe&u={C46EAFD9-35B5-4DDC-B6A8-CBC70940E7CB}

http://software-files-a.cnet.com/s/software/13/59/68/.../mp3rocket.exe

http://www.safefiles.com/.../mp3rocket.exe

http://ultradownloads.com.br/.../2,1161592.html

http://www.safefiles.net/.../mp3rocket.exe

http://programydarmowe.com/Mp3-Rocket,2314,down.html

http://cdn.mp3rocketdownloadfiles.com/c?x=sft99v9ZVPkKDxjRc5ztw7qYxm1ol/O8zZkRg7RSrXs=&c=6M8m1XFQ88H028C5UPLb0UEDN0EmMzgRfBU/I/znE9Y/eoPoe6y1qFOlRY78DCEWH4HRX1t3QjiUcRk43W1ptyj6hxwj7zqlHFLL70a 8ibjiC6wmtFeW1bJ8sjnBJPaXZFc0zLGNPr5cNphhoKTRw==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.anddownload.com/mp3-rocket/download/.../bing

http://www.techtudo.com.br/_/software/.../download

http://dl3.vessoft.com/files2/m/mp3rocket_windows/7.3.2/.../mp3rocket.exe

http://www.imp3tunes.com/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=LGINuumGRJiCG lrpAZk4hVOuu8owwK3X5kW68mAi8A=&c=1fdqjT r0KvUICRClgECTv18dy3fbmW TXo3Z j985HUAQwc1CSGSiwEwZ8DLHT3fj7YTCCDSyPNvWG73sAeBhQ17qO/u88yHgYAsV4LbYx02hitzK0UmzU06cZ3EDwoNs3moJ9X7KHXJkdXvoo0Nw==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://www.mp3rocket.me/.../download.php

http://www.free-music-downloads.cc/.../MP3Rocket-Win.exe

http://www.imusicsearch.com/.../mp3rocket.exe

http://d9.mp3rocket.me/.../mp3rocket.exe

http://www.allcoolmusic.com/.../mp3rocket.exe

http://www.allmusicdownloads.com/.../mp3rocket.exe

http://d5.mp3rocket.me/.../mp3rocket.exe

http://www.programosy.pl/.../pobierz,mp3-rocket,2.html

http://www.mp3rocket.me/.../mp3rocket.exe

http://www.musicrocket.com/.../mp3rocket.exe

http://www.rocketbackups.com/.../mp3rocket.exe

http://www.psprocket.com/.../mp3rocket.exe

Remove mp3rocket.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.