mp3rocket.exe

Putolafo

MP3 TechSupport LLC

The installer utilizes the installCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application mp3rocket.exe, “Putolafo Setup ” by MP3 TechSupport has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The file has been seen being downloaded from www.all-free-songs.com and multiple other hosts.
Publisher:
MP3 TechSupport LLC  (signed and verified)

Product:
Putolafo

Description:
Putolafo Setup

Version:
4.4.4.8

MD5:
93fc3527b70c6f345e9e814a3a7da9b3

SHA-1:
43f8c7bd57d1625d16de5227e7b4019899b6b038

SHA-256:
f6d678ce8520fc757a0cb06b118e693b7a9f12d4d8770a7e7f4a55a07b02a3cb

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
4/28/2024 3:03:41 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore (M)
16.12.7.23

File size:
1.4 MB (1,477,832 bytes)

Product version:
1.5

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\mp3rocket.exe

Digital Signature
Authority:
COMODO CA Limited

Valid from:
4/20/2016 9:00:00 PM

Valid to:
4/21/2017 8:59:59 PM

Subject:
CN=MP3 TechSupport LLC, O=MP3 TechSupport LLC, STREET=3051 W Maple Loop Dr Ste 201, L=Lehi, S=Utah, PostalCode=84043, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0081ECF0B90414131BF9016277516512CB

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, A7, 86, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file mp3rocket.exe has been seen being distributed by the following 37 URLs.

http://www.all-free-songs.com/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=yd fZfmPnFor5HRzra3yulQ2/iqZbFEeFKn2V4x7nd0=&c=BsULkh FEtcf6teBWI/sMjCyX4rZotFEZ39TWTe/Rs7rCqQoAKWpxwelfP6SPa8B0p3p7ZIFGVCNiltKFVcfTFh76iJnmVic6zDfifTvvQVpHI1lFgmeDvIywMVL4aPW76pHnnjo1nPWXQyUktYmqg==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://software-files-a.cnet.com/s/software/13/66/03/.../mp3rocket.exe

http://www.hostflashconcepts.com/88e4DwNj_8Ev89kHwV ty8tcQaDYxVaxEjx8oEeMB9qFHOo_7fa pdqbtl4ydqA mZGS240hj3zdTPmW6G8KyI8hEd1h60Ol6hWULPJcTJ_C9sosRyNc00CTOK4PTNS2lHcfWWm6MshgvaDAqq1GSRSjPHbCng==-Gy8AAATqZLG9ICbhNJvtBeCQA_a3IsnCYGPsXNFGfmPGr6spU1DQc8ym53HiAQ==

http://www.mp3rocketnowbest.com/c?x=EFzBqFqtXL/FsFi5TVFp8nS8iBA4m cP6N11bbCcark=&c=RGK0j5pyJ4tgoMc7FCtddmCoaX5nnMgs3mEBF2aJ1Agk6OV/KaccSB/ONV0f7M4meS5HXZ1gofe422d/PBsaXnHfVneJPSPybMlGsHk3zwuf9sbRbmPo3DUrGizNo9KgoIq8Ue/KFkqwU6eKRhYv46lEyQJP9LukpxZ hybJIdw=&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=MbbMet0mjNXRXz1YlV46rC/BWLhL19 nmM240WR 5as=&c=FufzLq5qwsiSAKTHMsaMr1L3NijEPNAoV3ZCtwUIB3UTIefbDudpq5btVHWfA1nHkClaFjXtvKF1FBxlGGVwfj9EZzkB1F/EWysxW7pmsIhb/KgOL5sRroYvD2Ip7C/reFnKIA1f9QTGaEuIZvI0Xw==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.ezmp3s.com/.../mp3rocket.exe

http://indir.gezginler.net/i/18867/.../

http://www.mp3rocket.com/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=qh5GQ73rNHGHoPbVoYk1svPgNo3FXuknSEqUZZNdoZk=&c=U/n9/6TYVUgfiZEfEwXK2duVA3We7H mmK4joLBfbRc42GceAeyEPFRewFil/syJQupYS8iLtnM2FZ5u7xR7TwXKwuTI4enYlwTDXv5BKv Sb8IARK5CiqAAd6G3je z2mtFcdnnoklPXA SmPNwJw==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=V l5OX2qof7Tw5 SEz5jdZNkPEXXz15jqV0AJb0IxsI=&c=VtSBnLcee2B VPVFxk11NjHuqykppNyUWyzfztnlMUcHyvB/DZ8OoTwAFRnXl1xYNfODWCzXvOdQVNr6xh1v9GWXlGEITTa2uHX UeuTPe/rcOsijWZUWhVJm3E58zRErkdCtPImc3FIskMTo63Fw==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.hostflashconcepts.com/YMoKmSvl9pZZ37EnMWQ DDYX08dHcbbLZ5XHPzJqskeYueVIbH5teT95GSyy5ddXoe0cp2an vZYk5jnaBVu9dV3GAHwWozAjrpIgyIgw0mGoy5Reinw05KjZDuB_S4sVK8puFhb_9nP138PaUG_FUWzNjgew==-Gy8AAATqZLG9ICbhNJvtBeCQA_a3IsnCYGPsXNFGfmPGr6spU1DQc8ym53HiAQ==

http://www.mp3rocketconecptdownloads.com/c?x=RGIxcxGE5/ZvIGRpazMXbY2paVIddFQ47kEQnaUwN6w=&c=5ipS 0DKdN6yH2I1juRIKUXl7mfwIHuwbxPsDeDs3wuyqLNQvc1obPK4TxwfcW8jbpNVXTrOKsCfM2ct9PwlhPcngNRByUkEaGKVjZwQRB6TLL3z3SUrTn8rCxINlNyK4vbWkc1/7BIZob3Ur4TtOHYLSGzjN62HdPuGW tKvuw=&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://www.clickgratis.com.br/download/redir/MTY2NA==/.../?installer=1

http://www.hostflashconcepts.com/zGaG9F2FlCtMomkYD _mjPpyKNrNNmAto8Sqtlzs0QsEfx2ibXmACfkTvjOn5r90gVdRATowFQ7ISKhLTcHGoR2KzoVKVq_JsvYej88W2YqXj6cZToJBZa5lMyKLJshiXxMJoO3XPb_XnV8XU83piyEPYp w1g==-Gy8AAATqZLG9ICbhNJvtBeCQA_a3IsnCYGPsXNFGfmPGr6spU1DQc8ym53HiAQ==

http://www.safefiles.com/.../mp3rocket.exe

http://www.mp3rocket.me/.../download.php

http://global-shared-files-l3.softonic.com/f1d/e66/.../file?nvb=20140901143712&nva=20140902023812&token=0708fc937c039fae37dd9&id_file=54821&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=no&SD_used=0&filename=mp3rocket.exe

http://dl3.vessoft.com/files2/m/mp3rocket_windows/7.3.2/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=CyTQoVXq76rHZ704nZC/vJtrSwYIDMwOluYe XHtOe0=&c=BJgTVTKa1bOFiA4StySL1Jy VaDJ1jvuuwt 9YsWnYhvd5KefihJbLjtILYvY3w5d9BMiXdF fvXp skynaLp sel7wM5ti8Dreu1FjS5iEH/DoYrLMqLHXudKifX3pCse0/xBjqDXOT5HKr1kcHxQ==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://www.hostflashconcepts.com/R6GLLJYAXq26Dw_TvLOkdCEe9rM_TKNJBvS5qQuiZz0wJncJCh4w1VeTpF6Zy1F1r8 MAZx8zTHu223qQZEtbVyOBD_mGPC _b5k30WiFgsvpVlwrm49Awt0voGjGr8ZfQuio90JjiB4Qp_tYVuuBNKWxnfh8Q==-Gy8AAATqZLG9ICbhNJvtBeCQA_a3IsnCYGPsXNFGfmPGr6spU1DQc8ym53HiAQ==

http://www.allmusicdownloads.com/.../mp3rocket.exe

http://mp3-rocket-mp3-downloads.software.informer.com/.../

http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=xcRQwgTU72vOGlxO3qTpePPdT5Lap5Lju1WBVDG pNg=&c=AZjauTyLfSdjbasPQzgmuPJPrL2opo51JQQXx5mkg7DpSPakF/M25djUyBSxCKN17DCtUm3ok7TNx2EcQD7SSMUeeKZG6X9BslDhzMZGuHs=&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.hostflashconcepts.com/U78347jvLlgW1LJXxDLJXb6yP1hfkA9IX6zKEBC72kJicchXsDLi2sY5OG_b3LpUf7fPbp9UmSg5vo82UYF2bM wrTTX7Hkc2_3q9vi5tiMKMFv74NGZ4Tp0 L5ivo22bx9I6NvJSskWdeF XPtxPpCT_rideQ==-Gy8AAATqZLG9ICbhNJvtBeCQA_a3IsnCYGPsXNFGfmPGr6spU1DQc8ym53HiAQ==

http://www.mp3rocketnowbest.com/c?x=j/JmphffmAefVNHrEMcG/VKv7u19NfyzZMQ9KopQQHM=&c=O1TxeeG5WwYFsK6dxvuKwkNSfATPpICZvuwOKRHEHCQ//flQeGO9MJfWTAyvLq15r0n1jVVMvZxj1BeHfbVp2JGXTfgvMBav9L9oeZwT4BM=&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.hostflashconcepts.com/Ox75c_SjlsL7vFQryX9FidLnft8wR sXEo5HN GuBtC26dd8dzoMheOa5ti18Wx6i_Usu9uphwoeFvP1NxDCmIrmFS3h6Ta4Q dA3qzNQm2_TOiCkYkQRw7kEeIXahtsSZusOJNR0jo167oHaks5R6XgDmCXZA==-Gy8AAATqZLG9ICbhNJvtBeCQA_a3IsnCYGPsXNFGfmPGr6spU1DQc8ym53HiAQ==

http://cdn.portalprogramas-download.com/d/.../Mp3-Rocket

http://d5.mp3rocket.com/.../MP3Rocket-Win.exe

Latest 30 of 37 download URLs

Remove mp3rocket.exe - Powered by Reason Core Security