home

mp3rocket.exe

MP3 Rocket

SCCE Development Inc

The application mp3rocket.exe, “MP3 Rocket Setup Program” by SCCE Development Inc has been detected as a potentially unwanted program by 11 anti-malware scanners. This is a setup and installation application and has been known to bundle potentially unwanted software. The installer uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars. The file has been seen being downloaded from www.mp3rocketnowbest.com and multiple other hosts.
Publisher:
MP3 Rocket Inc.  (signed by SCCE Development Inc)

Product:
MP3 Rocket

Description:
MP3 Rocket Setup Program

Version:
7.3.2

MD5:
2ffd4d15370fae3f5ae7f92735661a1a

SHA-1:
23b3ca85afa6f3a42347cc9c4d6059658f2714d0

SHA-256:
31b7e163068a6ccc8a21ee84cc122a3237bbae947b584061d18b85e4c961d6f8

Scanner detections:
11 / 68

Status:
Potentially unwanted

Explanation:
Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).

Analysis date:
4/16/2024 8:14:01 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
PUA/OpenCandy.Gen
8.3.2.4

AVG
Generic
2017.0.2874

Baidu Antivirus
Adware.Win32.OpenCandy
4.0.3.1614

Dr.Web
Adware.OpenCandy.171
9.0.1.04

ESET NOD32
Win32/OpenCandy.A potentially unsafe application
10.7.0.302.0

Fortinet FortiGate
Riskware/OpenCandy
1/4/2016

K7 AntiVirus
Unwanted-Program
13.212.17812

Reason Heuristics
Win32.Generic
16.1.4.18

SUPERAntiSpyware
PUP.MP3Rocket/Variant
9405

VIPRE Antivirus
Trojan.Win32.Generic
45290

Zillya! Antivirus
Trojan.Kryptik.Win32.805012
2.0.0.2518

File size:
1.1 MB (1,127,544 bytes)

Product version:
7.3.2

Copyright:
Copyright © MP3 Rocket Inc.

Original file name:
MP3 RocketSetup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\mp3rocket.exe

Digital Signature
Signed by:
SCCE Development Inc

Authority:
COMODO CA Limited

Valid from:
11/1/2015 4:00:00 PM

Valid to:
11/1/2016 4:59:59 PM

Subject:
CN=SCCE Development Inc, O=SCCE Development Inc, STREET=3051 W Maple Loop Ste 201, L=Lehi, S=Utah, PostalCode=84043, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00EE6BCFEEB3DE758C0292441353CB7413

File PE Metadata
Compilation timestamp:
12/4/2015 9:25:27 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:LMOi8ScTnpmcGC+F10WtXdgmc4hKMBT7VfxDX5M0NWGgZm/LoF5WY98rqADSJcko:oObSOnpTGzXlc4hrT7324oGm8O97t6Z

Entry address:
0x57574

Entry point:
E8, 75, 98, 00, 00, E9, 79, FE, FF, FF, CC, CC, 68, 50, 71, 45, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, B8, A2, 49, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 6A, 0C, 68, 10, 1A, 49, 00, E8, 9B, FF, FF, FF, 6A, 0E, E8, BC, 22, 00, 00, 59, 83, 65, FC, 00, 8B, 75, 08...
 
[+]

Entropy:
7.2432

Code size:
500 KB (512,000 bytes)

The file mp3rocket.exe has been seen being distributed by the following 20 URLs.

http://www.mp3rocketnowbest.com/c?x=G0RFvMmeDSNPJ /WuUGVBNjFYsFELQjoiQb7Di3oWy0=&c=fdue814rznhNYLOjCxZX5AIdJ3mr3A4Kt1V PH SeFdW3rhKEccl1NS6T6ZSOgE400BKrw5CZmgcUnDCjdv63FjNcxUfh5ArvdIolmgIH DGoEDksuQwckrpzfwIKCWQospikRHHHF2MB6v522 LpA==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=Srm ftV0rhAfpHr4obTLGE15WRwwMODyOstURA9 3IY=&c=zUHFfONPFzqXfH/nW4VRh21Pf4Dzgy/zWX12cZM/EquBKO8e7CM2TYRz8Z32O8x4B/CA8 vqW3ICEPYv1GhmKI4lkN4y2iYfJcBWiFgm6Ww O qNa5aHFnU f/oFXGCkwj1yPU0IsCIPve1DZ4ZG Q==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=duzz0BoSzG1XaXP 1Olptd/nF UkccFZ0L/psnXBFB8=&c=NR2eED5ZuS1x47FTAVLQMvoJHnVw18u BnhLMu4LwBdX9xXU61o pJbh7e9QzeXtwbIedg7TjJnPwJYdZ/p lz0oW3xILK1besJh7Osu1ddYs3vOk1tdfyN11Zpi6p3H m69er/SyJ2dcQcBOuikJA==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=3fXUTMujXA4XWGfxqZ1BPl z1fS4ELojGSuiWuvP6lU=&c= lLCHqdBokgLZcN/cJOsGZ6QVr7IqXkZ60EDP21VaG8yyuN747ve/mRFVhN 28ZJj6GV5Lhf9o5TrRgzX4mfMVECn/3z922FG32IyeJHkoCXpQ8HpzRplyntIalZ2RU5FA4zkNxagDVF9j7Lyl14wQ==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=XTPv3bLIDrwhS5QZ2kXGy3xOreBtYrUb6LSIQXaH/dY=&c=RHumNa9VP/AgfaegpX4zPKSuNtlDzv2MFhnu7JlrV ZPGDCWMiRKrK 1cF2c6AKuKSeqyBVB9Va/BW7NHTD7jCjFrL90QklMA6NVkaZfHRk8uKA7dugtwUTI362rZeCGyd0ouNts 1jtnBxV5oc9g==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.imusicsearch.com/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=xmgjZiXyoaPjaOXBSZnrTQo2a/8ME06sz9PWPEKUO4Q=&c=1C0DqKWkg9WGH 5FoKZt3U9rqxhAhKwhVgacaHhPZKT0y8Gk7iaJc4folJyPxA68g5RD21G3TQgB JGEbGr9KaYvxpIuWNnKbwL UmmtfwU1mSEkxCswfi3YEqI4EZ0HrRF1 G4x1uxlDIsXA1hfg==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=UKRZzB cB2/OD4Mvs/biVNLyE wlDFWfAX37XEGZLJQ=&c=n hWGKsfwhCK5lcZzPdgclRDOYZiRSOto2rxdDa6ZU/GJYJqvrKVxI5L1zEJsurbB/8YK7TSviVo5QXmJJfb8nQs7Pv0sCD/ALJw6wwyYs1hBj1rxnIRetu4CwNlriBlNa928er34GmNJ2c1bSaZg==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=qK lrbCV5GZZQIhS1j5HTOy00O15AuWpgNRsGrSru34=&c=Sa93kkeTWqQmJrypekVeoh2EvAppQ2Cx//lEctqM5rFGvRRh9hxoHErXAm4htVDscI/yB1k3bD8jAcDjhO3H5U7qbJLJMSsyD6dMj9teWPEV2k4PyEOhlvxzJoMCg1hGfFKnp2AtqSyM2CrM4PJGuA==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.rocketbackups.com/.../mp3rocket.exe

http://www.mp3rocket.com/.../mp3rocket.exe

http://www.allmusicdownloads.com/.../mp3rocket.exe

http://www.allcoolmusic.com/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=a5 UcHlNVmf3byqIlu6WW6x9/DIekzr41eqhB6C4x0=&c=d6f5Ba2X9mLqDKGey8X490 c ndtf1fChyXJWOr2TD0vQnR01nxfcWzqW4ANtjIBu1fyiDVhYHjEGmmoT34T79z8Hry3OzgFm PHgl7PtR62wHJIOPIXyJISgNW5bgcQMqpGJIpHzY90OUjnRQbWpw==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=kt8Alzq3Ic KOCwLsnJeZPkFi1d mOfiE54CSk emxU=&c=EQJzecUj0KreT8EB2TdhQafhXbCzrcy8VkpygBPfgdJmqjAHtgAcgK7iywhheHw/BipZfRZ1VyFATt4CHyLos4 4ipD3 rL6nVISxle0caRKe3kc2tetW2H/zJ4oIltGL OwW9VY93dCWqaDrAsMg==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.musicrocket.com/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=h5ost3ww4slX8tIX/v1A5idBfhq0a5rFO0DsncUju0c=&c=x0js7ceO4VawL60hfG7aEFArXS8roeo9JXKsp4kqfvLkZfM6TxXBL49n0oBGFnzeUqjQKR5Jhqd2cWpaSIKWMrwzwfrcLBH2MBhxM9wLDYtvC5SAxgFhXuBMkccENhu8PXP78jlOOTciQKfA OK WA==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=UpKMJE5nPjVaIfzaSYjU6/TLvri tL8VGVb3oP5v52Q=&c=vJoL82TVNgih7R9T1yWQIwzpLZ5dXx1ik3sinpwJH2C4bKP1KxnTMBhl7uQ7R7y0EZ5WGPTBIUOPrnqmB0QhxsQ8Nic3Ptyv3W43NFj0T90F7gI0zW9jtvxM1mKZEioV3pSPxYttkHyD2rzrShgc7g==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.psprocket.com/.../mp3rocket.exe

http://d5.mp3rocket.com/.../MP3Rocket-Win.exe

Remove mp3rocket.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.