mp3rocket-win.exe

MP3 Rocket

SCCE Development Inc

The application mp3rocket-win.exe, “MP3 Rocket Setup Program” by SCCE Development Inc has been detected as a potentially unwanted program by 12 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. The installer uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars. The file has been seen being downloaded from cdn.mp3rocketdownloadfiles.com and multiple other hosts.
Publisher:
MP3 Rocket Inc.  (signed by SCCE Development Inc)

Product:
MP3 Rocket

Description:
MP3 Rocket Setup Program

Version:
7.3.0

MD5:
b66e60eeceaed11ee17de5235ff3ecf0

SHA-1:
7fd73b01e2e7c93873e25c8940efc4cac9a7e088

SHA-256:
4a83906ac1fc0df144f80dca273b4c235edbc956090158c663d1609c632d1bfc

Scanner detections:
12 / 68

Status:
Potentially unwanted

Explanation:
Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).

Analysis date:
4/23/2024 12:05:42 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Riskware.Agent
7.1.1

AVG
Generic
2016.0.2972

Baidu Antivirus
Adware.Win32.OpenCandy
4.0.3.15815

Dr.Web
Adware.OpenCandy.163
9.0.1.0271

ESET NOD32
Win32/OpenCandy.E potentially unsafe (variant)
9.12062

Fortinet FortiGate
Riskware/OpenCandy
9/28/2015

herdProtect (fuzzy)
2015.9.28.17

K7 AntiVirus
Unwanted-Program
13.207.16825

McAfee
Artemis!087198B1243C
5600.6628

Reason Heuristics
Win32.Generic.SCCE.Installer.Meta
15.8.15.9

VIPRE Antivirus
Trojan.Win32.Generic
42710

Zillya! Antivirus
Downloader.Agent.Win32.260269
2.0.0.2351

File size:
1.1 MB (1,126,064 bytes)

Product version:
7.3.0

Copyright:
Copyright © MP3 Rocket Inc.

Original file name:
MP3 RocketSetup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\mp3rocket-win.exe

Digital Signature
Authority:
thawte, Inc.

Valid from:
2/24/2015 12:00:00 AM

Valid to:
2/23/2017 11:59:59 PM

Subject:
CN=SCCE Development Inc, O=SCCE Development Inc, L=Lehi, S=Utah, C=US

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
1FEC5D7B86418BE6C86668F0B194584C

File PE Metadata
Compilation timestamp:
7/1/2015 2:29:32 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:UAEN3pHN5/CEz6moGFC1C948vJDgBBTxaMTw1+c5+0puLoF5WY98rqADScLsrtXr:UAO3pHNRCEl4EDgDTxEKoGm8OVtXVG

Entry address:
0x57424

Entry point:
E8, 75, 98, 00, 00, E9, 79, FE, FF, FF, CC, CC, 68, 00, 70, 45, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, B8, A2, 49, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 6A, 0C, 68, F8, 19, 49, 00, E8, 9B, FF, FF, FF, 6A, 0E, E8, BC, 22, 00, 00, 59, 83, 65, FC, 00, 8B, 75, 08...
 
[+]

Code size:
499.5 KB (511,488 bytes)

The file mp3rocket-win.exe has been seen being distributed by the following 37 URLs.

http://cdn.mp3rocketdownloadfiles.com/c?x=GqDJ7FTeFOEUU5okW5xKU8g4BTbvd4Ci7w7gC9xLmJI=&c=FifBpQWY7uYO4H/hAXQRhNYU7NTCP0nvQVla5alIZZIq6IdJEtkk4QtrSbcUl7miIO5cx4BNL8YprjtpizH6P4BEM3Sqo9aEY/7Pn1MEkI8PJEwACPDt8OlI/cbcqnRR/SxFOHQZ4PvSTgUqIXwl1w==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://cdn.mp3rocketdownloadfiles.com/c?x=7nbx8CGnN6i3gWXMHoz/aQ/zzt4ycr27H/qiHiXVIeQ=&c=QuPoWMmB1vjcEZgHvsZACh0pa5GepGJeVFUaj7Z6/7qiTZxLBZz7iHw9iZcfiZGrlwjz3O0anfIMJMjpq LFfCO42SXH75w/OvMwoN9NCfkBFQv9JeYUrHWS928k6OIQqAnsReSvCEb lGZMg/WscQ==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://cdn.mp3rocketdownloadfiles.com/c?x=Nus0ESMLeRhSoB5SExFviTviE96kGf1bmOnrr1MjM6E=&c=KwZdiRliu5mhUbADL0U 8wrgH/M6QNRb2p9PjoezwP0dXgb8A8LpQZMwIDjdjaxFA3F4k7aEv1DosClfIkk/Smx1UXQhos7xFQ8llruYtqJdPHW9fSLcuiEcHjfVUUHrY8GpGJN/WARYri8KQoJcEg==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://cdn.mp3rocketdownloadfiles.com/c?x=suamrV 1J7rqKWJzhSmkrYx2oarNND/e5AxwaTpgEA8=&c=nOXab9bvdwFvyO8hX5QKjL6bTrEGzwGYQS18viC6dHZwhdpE2jop5pJHcIy38kOrkkg12xawb5WupcK1d QmyWF5c9Z YoZ3Ikna3KVQGQPMQiyL1WXRplfXj5Jpj3yuLRJrgWN/J4up IE1QrA/w==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://cdn.mp3rocketdownloadfiles.com/c?x=RduMcJMbFwoNa8ogx9pjSR4NX8atiBXlY PiUg3GP3c=&c=Qy1lJbW1p Iof3WQhmnu7RUHpUJ9l8MexhiI2X3NHCkqnoRinmLZ8suxZRZ6S E83lJum1jBw cvfGuV3BvcbiulQE dxM8Hahd/gularbgKa2f3SZ3HLsuoaeAKvMTzuHUdEnDym10vDX9TdEzo8w==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://cdn.mp3rocketdownloadfiles.com/c?x=GgrRkslU7oWdHSDzQ2KbeGv2EJSHJY5s8kIP0lYqj74=&c=E34SCm3/NFMXijH4SAgz nEPORs2NXv/jfHmtHFMwclp05u4sZRZso DleSpZ9etm1B22qNziLUAkA 1OUDF gz94661qZJgnPeDcZWosguDQ 0K/23829/GOhQxrhrdXhPMe7nci01W4RccIoVfCg==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://cdn.mp3rocketdownloadfiles.com/c?x=Ebv/9RwcBOFS sVrx1VueMImX5KSGCNGvhnXHWWVErg=&c=Fa8IFsatA4I93WIYY7g E2mcjese/E38s8gP3enmQM5fKeDi0LE3Rvxr0lwKHXW9nD3NURIH1uQLFZLP05mSZ2wlNWmvx45AYDWIQAaNZTGxcZXCxwATr1TOQjTWp4ZOR1JW5VYPTVWcZjj0SPw0YQ==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://cdn.mp3rocketdownloadfiles.com/c?x=MS8sP/nPfn1hk3X5H1sZjaI8ZUSldqadijx3xfLUAG8=&c=1szKVnnhoemzBpl Y9Ex MUzEwNe0PIA3EWeoOvdVUdF7zSU/2B8shg2/DY2v8 cw02NE31aPkoDbnKSLkYtXMcBLuBurCACQUnObQlymBXbIcjK/OpH6GyxnTql0mEn3g JmXjQuhElR1XclVvGlw==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://cdn.mp3rocketdownloadfiles.com/c?x=N7yms pw3VXYThwlELG6VMK InKWfEmp6pGlr9Z7Z/c=&c=2Yyrk1V/0v20vxUywHpTCIwB7CkTSo5PuMNA48hVQ1bQBdJuwwkBG00FwUrotpv3xt/VfrGxD9haygLXbvo23l2BL/ a72EwDl977Bbch2k0Xy9GxVWKWANsbtV5wIHwe15 88ynWtLlcadsDN9ybw==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.limesearchbar.com/.../mp3rocket.exe

http://cdn.mp3rocketdownloadfiles.com/c?x=Q0Q5a6Wh9gnfDH6g17F2mBjJe647tKWFW7h2MVAF4zc=&c=gd9KJGe4j Y/mc/onu5FXjsoQoL4jwuQyZrqlu6aDiH/e58LRVxJR1VJNDxcLbETG38YRQNG UoMJrZNzzTFoz9g69H GrioyIpWTPNSZYYdu/ABbv9r/xL95OS198K7ldX1DAiEOTXNjpHlA9YB1g==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://www.mp3rocket.com/.../mp3rocket.exe

http://cdn.mp3rocketdownloadfiles.com/c?x=eEtlX0AsxA4ZJXKUGVeSdYo1JzOpBF6PYXIWKBMVNZI=&c=agt8JzJfAsJXdAvhHkp5nBP0TqRgeUwcEMuHbviOXsK18xw2F30lbEeaJfF/JslA3ngyop7M0rfwXNKTe7WuMPPe4bruztfkgLawjMAFZxFV ptlHACDK497ADgniPgCi7m58zxj0ueVKNMmA4uH9g==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://cdn.mp3rocketdownloadfiles.com/c?x=jnI cUbUwKXeq0OJap3UzSjE0HrdEa1JqPGKrpBsjwg=&c=3rHliRpki0AXpf fRK1xM0oSxcuPPX8tFd5xaNhnTGjeijdibEZ8DnUOqNPEkIb5AZ7xE3Mk5sxHSbKQYdE6MtAimieU/cXeTvY3r 0f0GJYfh4s0qbdLZ8kwZ2gmB583ojPpKzZLoJEELdL TupjQ==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://cdn.mp3rocketdownloadfiles.com/c?x=sn978f0yojFCTye6ZMVuLFFwTMlckkp6BB3WiEnm83w=&c=ocpCFJAVuNuOXahRRvYC7QzvIT3 Tm7lHowOdoABaWeJVM0Tk9JNgTDwVnnGa jDNgIAezyQ4 6eQCZs/mCiJ0 76ng7vB87bncGuboFthzT36FqFi5GWm/Dnj3AI44bIwuJi1XOhw0uyKF3i786hg==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://cdn.mp3rocketdownloadfiles.com/c?x=M6tzr/KR6wT8FZkX5F0qZg7cRICONYP1rtsT6SBkDy0=&c=/4uQsZeeMehHSxHFOUxKj8Vno8AtgIJpgNynEYUtqwfFlGQ7AjHjMEdblk3cM76rs646hYTVVrheIxZJUsvl6PKovVK91J9fRh keJCnwNTFnhJwkkqsZE8qfyWnWpc6NWOEhpI9NC/YMK1iRvuNLQ==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://cdn.mp3rocketdownloadfiles.com/c?x=Sws5LDx6lGpQ8jyiY5PKTmn3ixzkz8eCFNnHAekcksQ=&c=7cxbeqX2fPJQMBRcQiq3RQHHt8/Fzn4qOCCPukRvJNcgGYcpq2ECHhAxTcb8uJGgLKmSFBd4H07JOR49DTrTmCMSZjSf 2niWr2ivwVVhTakphf//cF2HVxvjocbIewlLO5ATgbj/ksOYmH1vsbwtQ==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://software-files-a.cnet.com/s/software/13/59/68/.../mp3rocket.exe

http://cdn.mp3rocketdownloadfiles.com/c?x=NgofI9mQZHj1ZZQ6J4ETG17IBY45gJSkH6U2nrHdaaY=&c=obeGmqHUhwdn3xd9 aoaulQy5NQPRgxaGHjKxk52Ev/Frk0cZuP1RNkJtQX61agV7HhLKdeeoKSA3o9//UozI5vtkKaUBhPqh2nUrDhbtmcw/sET4k1ovbkrGSXUs/31S8FyO8pdCkUVmMZ72nnwXQ==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

Latest 30 of 37 download URLs

Remove mp3rocket-win.exe - Powered by Reason Core Security