home

mp3rocket_setup.exe

Canotobec

MP3 TechSupport LLC

The installer utilizes the installCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application mp3rocket_setup.exe, “Canotobec Setup ” by MP3 TechSupport has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The file has been seen being downloaded from www.farmsharebits.com and multiple other hosts.
Publisher:
Ledami   (signed by MP3 TechSupport LLC)

Product:
Canotobec

Description:
Canotobec Setup

MD5:
7f686cf6dc8628e99f6e4dbba3edd856

SHA-1:
6c766acc523dd0b8826203eb0237f5c870b6f306

SHA-256:
71f62221da2b8d284bb6b6067dcd579e9fe6920ce39c9a0d5df912376fdcedb1

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
5/9/2024 10:51:34 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.MP3TechS.Installer (M)
16.5.27.0

File size:
1.1 MB (1,126,648 bytes)

Product version:
1.4

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\mp3rocket_setup.exe

Digital Signature
Signed by:
MP3 TechSupport LLC

Authority:
COMODO CA Limited

Valid from:
4/20/2016 7:00:00 PM

Valid to:
4/21/2017 6:59:59 PM

Subject:
CN=MP3 TechSupport LLC, O=MP3 TechSupport LLC, STREET=3051 W Maple Loop Dr Ste 201, L=Lehi, S=Utah, PostalCode=84043, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0081ECF0B90414131BF9016277516512CB

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:KBCEBAmQGQWLuhdCQyFxcRQU576HjVlqRLF5EaKZe:KAEAOocF6RQKAhCP3Ks

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.8985

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file mp3rocket_setup.exe has been seen being distributed by the following 31 URLs.

http://www.farmsharebits.com/c?x=QEQCWUpbNAz8gQWf1mAgRdE8il/DOLZ10bZqyFVqoVw=&c=LJeBGGDp0TFwR QEZ DWgGxcscDO7qH1nBmYZT WhVPSKg 7K /Sgln67Yki6AFhGDwieyNz Em4yyMo8QNRKqCHTlVb Sxv/mhyg/rbatbqtpQ6W/gCKxuWOXFZ8q9D&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.com/.../mp3rocket.exe

http://www.farmsharebits.com/c?x=XIWBwiY4R5gaV2MmyrXAYxp0wJQNy8AJRQcKeWgUQdY=&c=sG uxQ/tFwWnT6Wtyj0N5HQQXAYXYiheykXB7XiESK1nTRLmS9YNfJUihdZvCBDJVRwEvAopG57bifAoN6q/1yMhen3V9a8ums2mxonl8X/OSeadghW2gxNNRph6W2q1&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.com/.../mp3rocket.exe

http://www.farmsharebits.com/c?x=ijfSzwVUwV8c/ae28Zqnz4cmHIfV2ywOjdgbzfprAks=&c=lgw03xBuNjCAkNiuIQC9NxQUY/bNy2MB OSrojxkn3OwNYUlv9HjMg8zPGZ33cUecBMtwG5emb1D4REhYWhtPhA02hYcK/GHrL2W4tl/Ye7qRal//nip3yz2NvO6S/ q&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://www.farmsharebits.com/WVl6OTRQVFZKU1RKbk5rSklhMFUwZG1sTlpHMTVlSFJQWmtkS09HOVlhelpZTTBSUlNVOU1kVTVLUWpKVWFsVWxNMFFtWXoxUVN6QkpUbWhKT1dwRmNYZHZaa1o0Y1dWa1YyRTBRbGQ1ZFhCbVp6aFNkbVJxUjFJMmNYVXlkbnB5SlRKR2JsSnhRVTQxSlRKR1NGTkxNMWxrUkd4T2VHTTNZVk5ZYVhkV2FtTjZKVEpDZGxGeGVrZ3pXREp3VHlVeVFqbFpaa2xPTkc1RmRuaE1aMnRvUmtGeVkzaHFOMHBCTW5OMlRrZDVNVFp2YTBGT1VYZG9UVEpoTnpSWkptUnZkMjVzYjJGa1FYTTlUVkF6VW05amEyVjBYMU5sZEhWd0xtVjRaU1ptWVd4c1ltRmphMTkxY213OWFIUjBjQ1V6UVNVeVJpVXlSbmQzZHk1ellXWmxabWxzWlhNdVkyOXRKVEpHWkc5M2JteHZZV1J6SlRKR2JYQXpjbTlqYTJWMExtVjRaUT09

http://www.farmsharebits.com/c?x=Fx PxPPWCW385flxrezfXOpmnWSQXYfckuVMI2y4L8M=&c=RFKRhsLUGD3yOFvgP2RBQsrPqh2xYJ3oCpmYBAd TnxvadU1NJXcpYkKdPB WEqHCgAtKLzBxZveiiytYsiC1 eH8Wd5aNztL1DhRLRxwcL05K0DRhI3McGbpsKJBZN &downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.com/.../mp3rocket.exe

http://www.hostflashconcepts.com/c?x=Pfast0AspUNZXxUPx1 auwf UKhUD2nD95Qh0Ff5vbc=&c=OUn5PafeBzrrs8I6WfcMNECwUBRBQVlAC0lz1HbRGBFTCZ4ba//efilwA55zrajzNPGVvfBlvwFJYm1pmXbqMGN3l61qUM/Z4/u8kzTnhoX2IqEei BZBD4JA0o4inYK&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://www.farmsharebits.com/c?x=GJw 76hPAbHqzaY3wxKD8HaFIZ8XPsVarl2zu5UFZ0=&c=FuKg2fpp6nHR/47 Jh2G1fJ8RJnMGGU9d2z8NVMtBLfRP3fck5GhfILv2 IIaTzDEHJZ6y9KBmJCUshAdg7LnoulrO9MHir2MRG2USrxba3CxFFDkleiEpxjGCm5ZEjZ&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.com/.../mp3rocket.exe

http://www.chuckleflashgift.com/c?x=LB33DBA0HpspB KY370CIuyjjXTOHfZQTG62tmnrB68=&c=kUSoJqHwSD8mZDH6c4NtVMafAqe6SRlQXBrZh/AQRr29WJwL2yp6a/wj1mIoRjR3tx/EYnVa3spTlfLW0ZLpvgWFw Q2Sh1xwnARFpZdIAP7VIHYpylnQQCCxBvN9tlN&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://www.farmsharebits.com/c?x=lcwLHoSvwqHhR4hIPa7y3idk kAZlWVd LTaBSxrSs=&c=9zS/Ip9PXcu3pDLAaSTrcFCo8maQqLYU96Ia7Ckpbi2z 0Nug6BbQPTyEc7/hK /57qmkdxOcRCYZ tfmvHAw6rEKb4NQryALzcWXaHG0WmwKBo/DYVVMa6tOWoQ 7P3&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.com/.../mp3rocket.exe

http://www.farmsharebits.com/c?x=CZoCHfIXKkM42Q3C3g9XAnUoJLRLMYTnGqcMMNtRH94=&c=Y6CejIPxkUQvnuwKWFbQ LGZcsm0lcAznkqe8kmEUbjomGeChiFbqB oyUBUREHCDKfEdHhfT EaJaeS1IC IXUT05wnsrrvVmsSNNl1mo97J9CAtzEMeOLmxXzBQ27R&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.com/.../mp3rocket.exe

http://www.chuckleflashgift.com/c?x=h5MuAnhV5hFylaTPsjj1C7JvgbYqhNNcz Vr3f4EmWY=&c=AObSoMTvokb43DGiItdReUQhiKEFCNUuX/NKoMCGqWF6iYIoBz3KCJHYFGxuO2DD6C5TlD 0bSrNbCheXMK6g9uGb4Vfcrgs ukNHQLcZ7Fab84TB5AJK9DfzeJVb1SU&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://www.farmsharebits.com/c?x=sTsKuGTzoaX522sHH1kGE51Dr82C2iQo6ZmXVYmcSGg=&c=Fr2Wtn3i9lSq9yAdG/sjZuvBLvnmXEz28UE0rNKnXqpstoqILav3tzU xeA XFb3pVUdX19300awrF0mAWGni2wPdVAdLHdZNvnyvjohN4CpDxPlQ1AfalkesX2e3Vu8&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.com/.../mp3rocket.exe

http://www.farmsharebits.com/c?x=tJCTS/ICLT 6aL 7EvQaeBnWNaE6bwjFJRMJlg/JqDo=&c=n4azdPBIYneLosB/t2B2QRSzIqlQ2vWagJNVk2L5eENu05ZKrVFDhGmxaSsIxtoidhsUCoxtVunx9Kb4RtnvXq1ys2lAv fCda4HnKWrNXaqPowp9IFOQU7QzRFDrkN7&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.com/.../mp3rocket.exe

http://www.farmsharebits.com/c?x=9OcagVXQ2DDnXWPJoigr10Zl8SsCD85XXVyVVzellBI=&c=N2HM5dP6Y4CqmRJoNzazfgVaL4TghplKO6G63rUUcbOeQyjS30sXSrECgqYzUHkjguiRNkLAXBI9Ga0GJzDGMVa9IT6YEAyN2EoJQtrVWhdRDScGnpUxU4iFVIRxNm/1&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.com/.../mp3rocket.exe

http://www.farmsharebits.com/c?x=xEwBM8znD4B4sSEUPdIZcArnBW6k 6ElfuLsKpiq4CU=&c=YhjIBOvQaO4MHJKqMEy1m3jfz NSqUPAhYKTeqSwqJfKUonX6tw Xc7yhUu5xIE6a3/qJBI5kW4COp2IdZ2SHGsby5V9jPX5tRPnpaHRQLY8ZLkETzOO qUC28g4aeo8&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.com/.../mp3rocket.exe

http://www.farmsharebits.com/c?x=EYW7WggyxFELw5xjkaueZvIrFKLCQN8hYmwW1EYwbk8=&c=fmgmvuJjfDqTEggGai1yAki/7QKGIWsZZL8JRiKG4i940/rSDutSn4zC/cb7jNui7PThMO3xVOZuRldJ6Sa36MRUfY032oij69XSGcAt3H8Nrvk7aR3ZcpzjrscvtPip&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.com/.../mp3rocket.exe

http://www.hostflashconcepts.com/c?x=xag9n/o7hwKscoY 3k6Q d5mNh4dKnoH3iDq8tArtXw=&c=qT4 XHfQ1aPAJYksohk9zzs1RgVvoW9ST OnuCN5J/owXPJ r7RH5wl0 0V6Wy3mDsvXbG9emF9gQeZxRgFcH39QExteDLtG iOknMo2k5kIc85mLOdas0o1puSz3DCS&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://www.farmsharebits.com/c?x=YQHugx6ictNizRP752DZ1RDF ppyzoKDJRR5StlELZM=&c=xdti4adshqL8XntYArAU00bpcmn9rCbT3M/YNQHrJc2lgyAEATNEzNnL7skz/IGf1a6FMjAZMHhvlvZaaQpIBywz9HTYNsZL /8oFglqtwZYNiYabx8XmZEs2//6L2UT&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.com/.../mp3rocket.exe

http://www.farmsharebits.com/c?x=SzAtqDcGn3/XuTMffkR7M4D3GkH Impfcrs3HQM5W 4=&c=J8NuJtB1nVxSQ6zt4cEcRYTsCHCEFryxDHE5fsuEEzJB76KYX25mTS4g46eCucOMiyhGXvUPHl1O GKkdtR4I6tvYT4/Cc5YMoeWj DThELQK0PH 6yNDhVwmAnTgfhD&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.com/.../mp3rocket.exe

http://www.chuckleflashgift.com/c?x=OFwFt712rzqPxKmxXT3HSpbEaKGsEUZDUBH92IJ87a4=&c=FCz7NQPh/Amt3yg/CLLQlVHoGJPPh2nhj 1fgqgH/qPMcbnq4z0gvMj2psAtO3xGM3xjj85ZdRNHuSYt2rdpd7GvXhk70QzgWF//058Uc25cUDP8Cyg1imh3KYKq59YA&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://www.chuckleflashgift.com/c?x=ULV6MLOEXbEVgJ4nWKVKLhJvIO56TN2Qb XQ2kkMnDw=&c=FaKXYwL/IzyNalD40HbFIkqjgZeZr9Ui/G6rCs5e0IDP3S5gnm0eIxZ2XWvj20igSeVvtAhjN3VRdC4ubNb EJBZdufXt4WBWGzMR4h5vZIHsqh61L83PRmKgc/YrjNd&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://www.centralgiftgrab.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

http://www.farmsharebits.com/c?x=p9AR6Lcejmbj/MPmPOKGzeY/kjqiLZEI3pggPbJDg1s=&c=VOhqzFmZZfVzjrkE2NvvzssFg9UOolEB4CNydpdowzk6hzO2XmaMbcbl4WlhT8gTURQUXeYusNC8RZLg8ZAl4yIHR0GFQ5jnDLKaVcgX/MCjTXnFSPVQJ5Bu5VQkwref&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.com/.../mp3rocket.exe

http://www.farmsharebits.com/c?x=a VPzG1t1fFcUJUXUpTInjqXE2Iz4lo7oBn0M 7GAkg=&c=FsXZGRe8DQ3ZrVkQX3b1hr1C2mKg4bNEv6pcyZuavw8Ap9pJUEy5MLKprGuQb LcXvdDW3oOuWDQKZA9co InFu6wIwf2Szcie8cyjhagZGaqSMJSsZmzccoxWCvqfXh&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.com/.../mp3rocket.exe

http://www.farmsharebits.com/c?x=wMo5JvB3b4JHnMJw5F70AK j2CFbXVUoeLoDNN4Le9E=&c=EDKhcLMYtk5AhdaKwuPRRYJkNFOD9BV55ucswtifs3h/4AYoL51O2XJmJLHPQfgp1mTqC9Cr/MS865uZs2lYa3pLDW8rerxaJpi/v5qK4CrbKIeYn/EPIoMiPQPTbvHH&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.com/.../mp3rocket.exe

http://www.farmsharebits.com/c?x=bXDj9lUrwZ2nLqvHIuAYV7W5uXW0x9pftRRelfol7Jo=&c=PLzqOKSwCF3bb3poHr4bEX4kQn g/lrDLEgToPQ52WxxuAWQgxbeKO9Y2zWiJP9gFk 7rNEmgl8NS6jERtmLNGuz7WeAeYVaPaKZrLpN4 vy0rkH evCqZdViaCiRxpy&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.com/.../mp3rocket.exe

http://www.farmsharebits.com/c?x=tJmJG9lf5CaAtQWaT7bXbhM5Oi17SieW6jcMrVIGxK0=&c=4bLTu/fhMpTpVEhwl8hHoZjPZK6xtzNSCSKI7V7NG3GxEvQ4nJNWsJGbqIOOpMhVBCqjy7V6yv7nBq 7MVB8zr2ZtJMDl3kH9rerom7SfgP9xh3nsDwAHJ6F DV18YBD&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.com/.../mp3rocket.exe

http://www.hostflashconcepts.com/c?x=VGfyD Vc5STAVLgqu9966DDUVWl9dudhj53hISVWB6I=&c=RulZQ83/79Oqf o/lhTM09qeWOj8SMjhAkrGRtnhtqRcovzaYl0UW0PozvoxSBG1IOe3hO9tVM61yl9UTuqJy/5qLCeDYmOnRi44wqAevhVdUy4qFl4uaOLI5o4vuNQN&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://www.chuckleflashgift.com/c?x=tZm ujz 23QtFKcV/VO3TdtfiOG jq uRNA9HZ0v7nw=&c=mwaGuDhIXko2IujJNEoZeqgFfdrqDFvMliuP6LkfTrMf9f9rF0q6tVdj2OgTM6kUpXB0PSR81bXtFHbzQge43hWOK0yhNbzUxYIBT5RRCG8dMM3IQ6N7sHnWQOWQqHbF&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://www.farmsharebits.com/c?x=fJhK7xTzecGtBRBBg iQv37hfs/Kzdjqe9A/C Ok330=&c=56O/Tq xrqiGweEAkkVzftLLlskz1JHkFvE9UnxBsRFZteL0Z/wj/lrmGS0cKoJiPVSWVbnJn5g3DgIHjOcIMwEhX6zNzYQMJ8yMCPNpzliaJNRew1PCd7OevzkVfvqM&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.com/.../mp3rocket.exe

Latest 30 of 31 download URLs

Remove mp3rocket_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.