home

mp3rocket_setup.exe

Cegap

SCCE Development Inc

The application mp3rocket_setup.exe, “Cegap Setup ” by SCCE Development Inc has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.farmsharebits.com and multiple other hosts.
Publisher:
SCCE Development Inc  (signed and verified)

Product:
Cegap

Description:
Cegap Setup

MD5:
fd61496f870595973ea07eedc2ba8e0e

SHA-1:
7916156429eee73c0786cf90999b4e39079f3289

SHA-256:
0c7aa203a973ca08d493c606dc80fbd59e3540dbd7dbbe18b61bae88ed64b872

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/5/2024 4:43:26 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win32.Generic
16.4.11.6

File size:
1.1 MB (1,181,016 bytes)

Product version:
4.2

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\mp3rocket_setup.exe

Digital Signature
Signed by:
SCCE Development Inc

Authority:
COMODO CA Limited

Valid from:
11/1/2015 7:00:00 PM

Valid to:
11/1/2016 7:59:59 PM

Subject:
CN=SCCE Development Inc, O=SCCE Development Inc, STREET=3051 W Maple Loop Ste 201, L=Lehi, S=Utah, PostalCode=84043, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00EE6BCFEEB3DE758C0292441353CB7413

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:at0Gti9T8s5+Wwjd+55l1It15u0qZ1wpewlPxDKB0js0f:aOGt05HIHaw1lJd

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.8800

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file mp3rocket_setup.exe has been seen being distributed by the following 50 URLs.

http://www.farmsharebits.com/WVl6OTRQWE5XV2lVeVFrRnFRVkZwUzI1bVdESk1abGdsTWtKWE9FczJPRVJVSlRKR05HMXNVa014SlRKR05EZE9ZWGxtUVhGU1RTVXpSQ1pqUFhwWE1EZDRWa1ZSYWlVeVJsRlJNMHAzVFhOMmVFTnhkRGRtWnpJNWFuTmhTbmxyTmpScVQySnJlVW9sTWtaS2NURjRTWFpXYm1WVlVFeHBhVE01TWpSaGNGcEtRWFIxVFZVd1QwcDRNRkZtUlhkSk5VMHdTa1pSTUVKWWFUZFZOM2c0YXpGNGVWSXlVMDR3V0hWWk4zTkpKVEpDVmpsVGExaEpNazB3Um5FM0pUSkdlRVowVEZnbVpHOTNibXh2WVdSQmN6MU5VRE5TYjJOclpYUmZVMlYwZFhBdVpYaGxKbVpoYkd4aVlXTnJYM1Z5YkQxb2RIUndKVE5CSlRKR0pUSkdkM2QzTG5OaFptVm1hV3hsY3k1amIyMGxNa1prYjNkdWJHOWhaSE1sTWtadGNETnliMk5yWlhRdVpYaGw=

http://www.farmsharebits.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

http://www.farmsharebits.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

http://www.farmsharebits.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

http://www.farmsharebits.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

http://www.farmsharebits.com/WVl6OTRQV2xrTVhNeWNESlFSVk42TTBKNlZtZHBPVXRsZVU5V05IbGFVMHhST1RSR1VGTTBhM1psVjFkaVJra2xNMFFtWXoxcWNqVkZkRFkwU1d0dmRHOUVhV2R6WVcxT1UwWllWMGh4UkRSUVJEUnFURkZIZVZkeVMwTktiVVExUTNRbE1rSnNKVEpHTXpOaVJYTnVSRU56YjJwRWVsQnBSWFl6YWpGcE1IbFNZbXBsYXlVeVFrdGhabFJGYWtOWldsZFliR2hoVm1Wd1kzaFNUbWxEYlRSWlJEUjBZbk5yZVVsR2FHaHBXV056ZWtsak1VdFFiM2R0UkNaa2IzZHViRzloWkVGelBVMVFNMUp2WTJ0bGRGOVRaWFIxY0M1bGVHVW1abUZzYkdKaFkydGZkWEpzUFdoMGRIQWxNMEVsTWtZbE1rWjNkM2N1YVcxMWMybGpjMlZoY21Ob0xtTnZiU1V5Um1SdmQyNXNiMkZrY3lVeVJtMXdNM0p2WTJ0bGRDNWxlR1U9

http://www.farmsharebits.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

http://www.farmsharebits.com/c?x=aIPIUbASIoc24HmiGGFHZCWymSFXIIhjSoBq1ylomNQ=&c=2DAYgcTywfPlnMHxCul1HNfxVzpnpWyMw5Gff8eyBD5019iMpR8wdhRgANmkuNuD5gaP5C9SIUeHbU5yVeb4vIeUtyZQNzpznNMlEIvChJbo2Bc90xLFXS mZJ/n7qFUwARF4J7zshEpOnxMHVk YWFCOwfV pewLePw Khh8yQ=&e=1&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.com/.../mp3rocket.exe

http://www.farmsharebits.com/WVl6OTRQVzR4YTNvMVowMTBRamROVVVGMVNHY3lXazlEU0hWclJXdHJaVU01UkhaeWVVTWxNa1p2UTNCRWVrcHRieVV6UkNaalBWSTRVRWQ2U25FeVJHUjFUSEpMWjI4bE1rWm5aSFJKZFZSYVJrdHVhVVZNUTFkeVRtODFWR1ZHYjA5NE9FWlVXV3hqTW1KU1dtSjNZM05oWVc5MVZWZ3phVU40VkZGMFMwbGFibFZUVTNSUGRUZHhiWFZhUlhGRlpGVXlaaVV5UmpGRlUzUlhkMnhWUVdjd1ZIRnZUVzU2VlZOWEpUSkdjMlpPUkRVNVNpVXlSbGxEVmxGRFpGb21aRzkzYm14dllXUkJjejFOVUROU2IyTnJaWFJmVTJWMGRYQXVaWGhsSm1aaGJHeGlZV05yWDNWeWJEMW9kSFJ3SlROQkpUSkdKVEpHZDNkM0xuTmhabVZtYVd4bGN5NWpiMjBsTWtaa2IzZHViRzloWkhNbE1rWnRjRE55YjJOclpYUXVaWGhs

http://www.hostflashconcepts.com/26zNLWoqK7lHrG2D19zjZSwSascmNovoMeuDFGnS2TVzVQfav9WvIL k59fO9693tAvuwPste6LGonwpfE6UB5arS1JCICexE2f 90fGVQufZZ0AZ5DFh7yDT50sBoqKdxQ7AYqsnY57ep1hM9XjrwzedgqMxw==-Gy8AAATqZLG9ICbhNJvtBeCQA_a3IsnCYGPsXNFGfmPGr6spU1DQc8ym53HiAQ==

http://www.farmsharebits.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

http://www.farmsharebits.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

http://www.farmsharebits.com/WVl6OTRQVmR3V0NVeVJtRnZaalpaUlVaaFlVNVBTbkI1Vm5aVU5qWmtOR1ZwVldWak1rZ2xNa0k1Y1U5M2NVNURKVEpDVjJzbE0wUW1ZejF3VjFJNFpHRTNhMUpJU21OVFZVUkphMU53VEcxSWJXdzFSa3hYYUhGWWNtSnhUbEpzUzNWME5IZ2xNa1ozVUdwelVqTkZPR2hOTm1OdmNtNUhKVEpHWVdGaldXaDVVMmhpWW1Kek5uTlZlRFU0ZGtSWWVWZEdXbmt6UmxsMUpUSkNiRWt4YW5GSlpFY3haMEY2U0hkTloycHdUM2RIV1dwbGQxWXpTbW8xSlRKQ2JHOHlTRmc1Sm1SdmQyNXNiMkZrUVhNOVRWQXpVbTlqYTJWMFgxTmxkSFZ3TG1WNFpTWm1ZV3hzWW1GamExOTFjbXc5YUhSMGNDVXpRU1V5UmlVeVJuZDNkeTV6WVdabFptbHNaWE11WTI5dEpUSkdaRzkzYm14dllXUnpKVEpHYlhBemNtOWphMlYwTG1WNFpRPT0=

http://www.farmsharebits.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

http://www.farmsharebits.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

http://www.farmsharebits.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

http://www.farmsharebits.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

http://www.farmsharebits.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

http://www.farmsharebits.com/WVl6OTRQVTlOVDNOYWEwSXhWbFpEYkZoV1QwZExSMDA1YW5ac1ZYUk5RMEpHYjBocWMwOU9UMHRsWW5OMmQyTWxNMFFtWXoxNU0yNUZKVEpHWkhreGJ6SnJVa1JLT1RaQ1QyOXZUMGhEYWtSclpFMUtkRGRLVlVaWU5VSlRXQ1V5UWxSeWVuTTFWekU1Vm1GSU9UTTBSbW9sTWtaRlMwTTNRVVIzUjJOdFpEbERZWE5TYmlVeVJtZE9ObmhGVVdKeFNVNVpXakJ0YjFCNWNqQXpaRzlLZURSMFVtSnpjMDlJT1d0NFJVbG9PRk15VUdJM1RtdEhWM1pPYmpjekptUnZkMjVzYjJGa1FYTTlUVkF6VW05amEyVjBYMU5sZEhWd0xtVjRaU1ptWVd4c1ltRmphMTkxY213OWFIUjBjQ1V6UVNVeVJpVXlSbmQzZHk1cGJYVnphV056WldGeVkyZ3VZMjl0SlRKR1pHOTNibXh2WVdSekpUSkdiWEF6Y205amEyVjBMbVY0WlE9PQ==

http://www.farmsharebits.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

http://www.farmsharebits.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

http://www.farmsharebits.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

http://www.farmsharebits.com/WVl6OTRQVkJoUkc1cVZYaDNOWGxVWlRRM2JIWldlU1V5UmxRd1ZrSjNUSGh5Y0c1dVNIVkRUMjVtUzBWR01HSmFjeVV6UkNaalBWZEhkMGx2YTNZM1puQlRaazF3TjBkVVJWVTFSa1JtZGxkMFdEVmFWR3R6Ym5nd2IzZFZlRzV2Y1RsclJGSWxNa1pTU0VJd00zZDZRV3d4WVVaWFFXUkNiVWRQY1Rka1YxbHVXamN5UzJsV2NGRlZaMHhrWlRGdWNUTXdSV3QzUW5WWmRFZDVTbGMwTjBWWmNGVk1PRmRuUkcxTVNqbEllR1YwYjJwbE9HRjJZbTBtWkc5M2JteHZZV1JCY3oxTlVETlNiMk5yWlhSZlUyVjBkWEF1WlhobEptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTkJKVEpHSlRKR2QzZDNMbk5oWm1WbWFXeGxjeTVqYjIwbE1rWmtiM2R1Ykc5aFpITWxNa1p0Y0ROeWIyTnJaWFF1WlhobA==

http://www.farmsharebits.com/WVl6OTRQV0ozYjNCMVdVaG9UREF6UzNKblZWWktZMGwyYlZJeWFXcHBTMmQ0VDFoWVJqSlRkbmxNSlRKQ2NYa3lSU1V6UkNaalBVOWFiRFpXTUUweldHVmlaVGhQZVVoU0pUSkNiMFp2UTBoQlQxcENOSE55TVdSUmVtODBRamd6UkV0Vk4zSk9SWEIxY1d0TFkzUk1NRlZsYlU5NWJtb3pOREpyYzJkQlVXSlhWM2xSSlRKQ1ZraHZKVEpDY1VkSVlUTm1hMmhMTTNsSlR5VXlRazA0Wm1WT1FrMUNWM1pKWVVZeGVHOXBhSE41WVU5R2FXWkNWWHB6U1ZaU2IwTW1aRzkzYm14dllXUkJjejFOVUROU2IyTnJaWFJmVTJWMGRYQXVaWGhsSm1aaGJHeGlZV05yWDNWeWJEMW9kSFJ3SlROQkpUSkdKVEpHZDNkM0xuTmhabVZtYVd4bGN5NWpiMjBsTWtaa2IzZHViRzloWkhNbE1rWnRjRE55YjJOclpYUXVaWGhs

http://www.farmsharebits.com/WVl6OTRQVkZqTkZwV1kxTTRZa3BsY0hKQ1ZqSkVjRWhpWW1FeVVIRnFkRGRaY0RWYWNXWllVMU16U25SYVpHOGxNMFFtWXoxbFRFVldSRzl6U3pGNlpGZGhNMU50TkNVeVJrZERiVkJaYzBGNVNrTlNSMnBPVFZsUVVWWk5VM2QwVTNOWVF6Sm9XWGxNVms0NVF5VXlRbTVsWm1oeGVFNTFRa1pLY0c1SlpqUTJTVTFSYzJocWFHczFUVXRXUjNkTFpWSm9WMEpsUjJkcGMwUTNSRWR6VFZCQlNUUTNkMDFsTlVoWVQwTlFPV0pUYURKWmREQjVOMDRtWkc5M2JteHZZV1JCY3oxTlVETlNiMk5yWlhSZlUyVjBkWEF1WlhobEptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTkJKVEpHSlRKR2QzZDNMbk5oWm1WbWFXeGxjeTVqYjIwbE1rWmtiM2R1Ykc5aFpITWxNa1p0Y0ROeWIyTnJaWFF1WlhobA==

http://www.farmsharebits.com/WVl6OTRQVGRKUTA0MWRITmtWM1V6Ym1SM1ZUbENORzlUUVU1WlJuWmhhelowWnpkd1EwdzBSVWRMZGpkNlpXc2xNMFFtWXoxdWJGVTVhSFIzTTB4b2NEWmhSMHRSUmtwR1ExUnhVRVpFV2lVeVJtZFhSREpXUjFaYVNXOVNZMDFoWkNVeVFrOVlhV2gyUzNGS2FGSlBZa2hTZFd0eFYyOWpVWHBZT0dwNmNIZHJSR2xRWWxGa1R6UnZRbVZxVkdWUVlrbFJTMWwxY25CUlFVNUJUMEpxZFZNMWIxRjBhakZIU1VrNFdqQmlUM0Z6VVhBNFZrdHlWa0VtWkc5M2JteHZZV1JCY3oxTlVETlNiMk5yWlhSZlUyVjBkWEF1WlhobEptWmhiR3hpWVdOclgzVnliRDFvZEhSd0pUTkJKVEpHSlRKR2QzZDNMbk5oWm1WbWFXeGxjeTVqYjIwbE1rWmtiM2R1Ykc5aFpITWxNa1p0Y0ROeWIyTnJaWFF1WlhobA==

http://www.farmsharebits.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

http://www.farmsharebits.com/c?x=VMjUId4f970i7qBM5GECBl9K4R6gIebTvvt7I9Yi9ZM=&c=k3N3gqYMOk2LywXYOxq5Rffpza5Yj1YrUF3Q6P7gwuoiIuML0j5Th aHAqMy4eDOO1Ol3weeeqZHokRiZOKC zntaMXiUVi/cJmrfAlfODzeBeK2E2oRwcSqCdsOh FcX4d1wNwPB7Ig0PPraKRyv bnjIj899qjO7c6hREHiNY=&e=1&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.com/.../mp3rocket.exe

http://www.farmsharebits.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

http://www.farmsharebits.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

Latest 30 of 208 download URLs

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to ec2-54-191-59-48.us-west-2.compute.amazonaws.com  (54.191.59.48:80)

TCP (HTTP):
Connects to ec2-52-28-72-26.eu-central-1.compute.amazonaws.com  (52.28.72.26:80)

TCP (HTTP):
Connects to ec2-52-25-117-203.us-west-2.compute.amazonaws.com  (52.25.117.203:80)

TCP (HTTP):
Connects to ec2-34-198-225-71.compute-1.amazonaws.com  (34.198.225.71:80)

TCP (HTTP):
Connects to 50.115.122.45.static.westdc.net  (50.115.122.45:80)

Remove mp3rocket_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.