home

mp3rocket.exe

MP3 Rocket

SCCE Development Inc

The file mp3rocket.exe, “MP3 Rocket Setup Program” by SCCE Development Inc has been detected as a potentially unwanted program by 8 anti-malware scanners. The installer uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars. The file has been seen being downloaded from www.mp3rocketnowbest.com and multiple other hosts.
Publisher:
MP3 Rocket Inc.  (signed by SCCE Development Inc)

Product:
MP3 Rocket

Description:
MP3 Rocket Setup Program

Version:
7.3.0

MD5:
90a5156cac069439f83aabb82541e454

SHA-1:
7a10de0971a699323ba0479c1f0598019fbda647

SHA-256:
069f74048dd0b736c95fd9bd7d86c052521d1132a5ffe2ac292df922a13491d6

Scanner detections:
8 / 68

Status:
Potentially unwanted

Explanation:
Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).

Analysis date:
12/25/2024 11:55:53 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
PUA/OpenCandy.Gen
8.3.2.4

AVG
Generic
2016.0.2898

ESET NOD32
Win32/OpenCandy.A potentially unsafe application
7.0.302.0

K7 AntiVirus
Unwanted-Program
13.212.18087

Reason Heuristics
Win32.Generic.SCCE.Installer.Meta
15.12.11.22

SUPERAntiSpyware
PUP.MP3Rocket/Variant
9453

VIPRE Antivirus
Threat.4150696
45744

Zillya! Antivirus
Downloader.Agent.Win32.284783
2.0.0.2560

File size:
1.1 MB (1,127,544 bytes)

Product version:
7.3.0

Copyright:
Copyright © MP3 Rocket Inc.

Original file name:
MP3 RocketSetup.exe

Language:
English (United States)

Common path:
C:\users\{user}\downloads\mp3rocket.exe.k4ne10w.partial

Digital Signature
Signed by:
SCCE Development Inc

Authority:
COMODO CA Limited

Valid from:
11/1/2015 4:00:00 PM

Valid to:
11/1/2016 4:59:59 PM

Subject:
CN=SCCE Development Inc, O=SCCE Development Inc, STREET=3051 W Maple Loop Ste 201, L=Lehi, S=Utah, PostalCode=84043, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00EE6BCFEEB3DE758C0292441353CB7413

File PE Metadata
Compilation timestamp:
8/10/2015 9:27:46 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:ijOOWnQwBSxyD51WutWbgsIIuFBTLKx5U7EVf25sXgLoF5WY98rqADSWs+srtXoM:KOtQwBS8fWBIIYTLKJ8HoGm8OZtXXl

Entry address:
0x575E4

Entry point:
E8, 75, 98, 00, 00, E9, 79, FE, FF, FF, CC, CC, 68, C0, 71, 45, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, B8, A2, 49, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 6A, 0C, 68, 10, 1A, 49, 00, E8, 9B, FF, FF, FF, 6A, 0E, E8, BC, 22, 00, 00, 59, 83, 65, FC, 00, 8B, 75, 08...
 
[+]

Entropy:
7.2429

Code size:
500 KB (512,000 bytes)

The file mp3rocket.exe has been seen being distributed by the following 19 URLs.

http://www.mp3rocketnowbest.com/c?x=HiMhTXmB0IF u48qZnVlFW/EtRlc 8rdBqVOqS/JDY=&c=axi5F0lDhZp1FSet4/MT vHs/SHMOl4JAUiqPc6W/2vuKerdsVHG/RpT75HEMUcCFxQepQ1LKv2xIN8j87p1i3xaRwtn/s4w4MY2/bZmlwgHPyUql ROlSe/S4Bzb7/vow66RszHgtI7uk1mm2vJw==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.safefiles.net/.../mp3rocket.exe

http://www.musicrocket.com/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=2UtQxEk4LQOchjYLHYkeuZ1xHCGnIiF hBOI 0i4aEU=&c=uliGz3i04sLiFiGMKcOs3UomdaXzR9mjUpzgZIdvkewvdiVZF5t7ZTdzuwu96m FBxzl5ctV8g/hsoULamz3Ce5wogy8NyhHc3mX2ebCeh 9DcQO1N fAU8rZ2pGNB4v6xCzbIFBa9sLx7LVdt6d9A==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=ali/Vf200JuCCZbnbT02qsOZ8DYnL9yRo/1mG85nO1k=&c=dLGFJITqc26Nt2ixiGdSL8vaAkueMLRMHUtQGDF1ymz6P0hoMHJuSgZBpOxmXJ7VtiAP0gkhqIhRJ5kGAx124Dg4yoCEV6r4wLlvQ7E3K/zkknfjdQcUmtFeDu08YCKgGXhygl7slqlOkXxtvfDm7g==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.allmusicdownloads.com/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=1JxaWsd1q39f74/HozQzjyyczH5aAUm3zSwh1vHAuwM=&c=a7h8ntwVdyVga52wUJEDxm8jOJe9YoBouFziERODLW8qI/VB8lKAl9bHeapgIYWOxJiX2qO 1s/iGk4l4Sn Gzzi69EnONyEYFeaRpc6JGWCDiRfVUhN5bI2hDMrucvtgH6xJ0cQsseri5nrn2XWNg==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=yNsnVA6oGTTEUZ7fjUj5jPe56le2fmnLimabgOUrkfg=&c=6lXCm3beSRuLCDKGmLblx i6CSU60uPeDDcjMnB//jmKVUU6vxbKZy7iS/aWCEItqvrFa6a6Ek bIWqNducNlfpKe3E8rqbEKUYii3KJRAkyxyrlBv8/w0HQzbrB9J6a5Ha /HzXzHw5kf5OHDjjCw==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=OdcCGiWWjaQAnJEQPt67L9PeDJe/6k zQa/GUYqCGOI=&c=Z5ScCttNzdKDRQExK9/8ADkxnh33UughxQ89XmM4SmA6DMvm CVYOkBR/s3WAhnfqH3b5kPXORKlK/cu3W8TF7emftwsylpXDF/ip1I2ztdEksHroIOzzENd4upeB/dMCzoQdFNsbNa hdns7EbGgw==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=YVO5ZR/ZsGo5 kj2A7 Kn9Cegii1of3wTAwUMKZEYxE=&c=7 xjVJHu7Y/1xkfGjaPBlm/SRAFGcyEOipFureYEyasOZ3LlYgkYgbZRTTGKTtY0NSBHJZeoWUrDz0TQqxBbRoCb58e2MmAFYEnOd sse1UIkKhfmmGBZsDrmGAqZ/9uevqn0FM7dLyPQp5dJ7pX5w==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=DgLUFGZ6po9WV3Km/3IAMS iaXNRI77J0KVBCx0z5rs=&c=swcVBmKtrVw1JPA08ji3lY7HblUv06YCxtMedDWvrQfocqmt DGkAJHDZASjab6p8IMKy31iaSyqW0jg84Cdx4ZagYhP0LpmWwX0Lfkyv8GNOFrHHVDOkGJR /jUfuXgPDYlu PLicqGgSl7a/oCWA==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=zQrouILQfNEjBbTDJFhhvx1HbAac292ffoapZBn0YD0=&c=53y1AkEK6V25q0gb0X8UC7uoGpUgbzO8cOcAGuCSRgy9zGsgIne iz2/LQT5ZRVEIPKZt6xp43KYuAyjTmoToPQmrO0nRtUYvxv3xS81A1CcqGgiMVuk A3BUdZ6QIoP1JwHFgseXUFDQ2qRtJ79jw==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=449OQLWbD96eTWWxcZKZclzSNf0OPxfYCvolZ3rfae0=&c=0HpZRNy0Ioduobi/xm2RR6VWlje2nF26r7p1lWj0V8Jb1Xhzldvh/jUuhm5VQHfybZPLxlbSaUZcJRrXZhbESc0df1fcPskdTDNxomUZ2doZAYa9yjzmbuRk/YvtZU3UnB5YQyNEcUt7r4qcpo059Q==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=KbyAphW6zL8KcsKk4i4vI6w3hUoWAV3vxsVKmvPZ8E0=&c=xaV f27N7VbM3mX305p4k7eUgWo6kSj3selS44YlUfZZ5oOCOQL/NspesrDq/rlNeL9khBb0j2Spr7WELmwxIanWAXMVVhFjXxMT12jJnDc 03NtImkIyaSzCDA45IiTIArSVFqGOx70ZyteP3dTFQ==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.allcoolmusic.com/.../mp3rocket.exe

http://www.imusicsearch.com/.../mp3rocket.exe

http://www.rocketbackups.com/.../mp3rocket.exe

http://www.psprocket.com/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=gaieAePPREUw1PXa4m 8xwAqP9jaK20enYtgFnInjqU=&c=sXbptiyYr9oR6AZTUgsor3Xv2DwC4u96eetxOGn2dgvlwBpke7dPQOktpwlCZiwY1qDnrNXaplw7QFafwDKR1FTTg52rAJDGmYqfvnGzHYsUS4LJPv5Pb3s0HnG0VW4beeg4v1CCUAeZWYz79/nrtA==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

Remove mp3rocket.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.