home

mp3rocket.exe

MP3 Rocket

SCCE Development Inc

The application mp3rocket.exe, “MP3 Rocket Setup Program” by SCCE Development Inc has been detected as a potentially unwanted program by 11 anti-malware scanners. This is a setup and installation application and has been known to bundle potentially unwanted software. The installer uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars. The file has been seen being downloaded from www.mp3rocketnowbest.com and multiple other hosts.
Publisher:
MP3 Rocket Inc.  (signed by SCCE Development Inc)

Product:
MP3 Rocket

Description:
MP3 Rocket Setup Program

Version:
7.3.2

MD5:
e51d70cfb9e14d4fb3f0d2497361e253

SHA-1:
d2cebcb1e69ff61540b6781aaeec992f039e9d02

SHA-256:
dd622750e17d1cb62c1de8cc4911c6119f39011aad2ba6297f17c1c56bbe9aea

Scanner detections:
11 / 68

Status:
Potentially unwanted

Explanation:
Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).

Analysis date:
11/27/2024 9:47:19 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
PUA/OpenCandy.Gen
8.3.2.4

AVG
Generic
2016.0.2883

Baidu Antivirus
Adware.Win32.OpenCandy
4.0.3.151226

Dr.Web
Adware.OpenCandy.171
9.0.1.0360

ESET NOD32
Win32/OpenCandy.A potentially unsafe application
9.7.0.302.0

Fortinet FortiGate
Riskware/OpenCandy
12/26/2015

K7 AntiVirus
Unwanted-Program
13.212.17812

Reason Heuristics
Win32.Generic
15.12.26.17

SUPERAntiSpyware
PUP.MP3Rocket/Variant
9424

VIPRE Antivirus
Trojan.Win32.Generic
45290

Zillya! Antivirus
Trojan.Kryptik.Win32.805012
2.0.0.2518

File size:
1.1 MB (1,127,544 bytes)

Product version:
7.3.2

Copyright:
Copyright © MP3 Rocket Inc.

Original file name:
MP3 RocketSetup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\low\content.ie5\{random}\mp3rocket.exe

Digital Signature
Signed by:
SCCE Development Inc

Authority:
COMODO CA Limited

Valid from:
11/1/2015 7:00:00 PM

Valid to:
11/1/2016 7:59:59 PM

Subject:
CN=SCCE Development Inc, O=SCCE Development Inc, STREET=3051 W Maple Loop Ste 201, L=Lehi, S=Utah, PostalCode=84043, C=US

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00EE6BCFEEB3DE758C0292441353CB7413

File PE Metadata
Compilation timestamp:
12/4/2015 12:25:27 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:pMOi8ScTnpmcGC+F10WtXdgmc4hKMBT7VfxDX5M0NWGgZm/LoF5WY98rqADSJck5:OObSOnpTGzXlc4hrT7324oGm8O97t6Y

Entry address:
0x57574

Entry point:
E8, 75, 98, 00, 00, E9, 79, FE, FF, FF, CC, CC, 68, 50, 71, 45, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, B8, A2, 49, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 6A, 0C, 68, 10, 1A, 49, 00, E8, 9B, FF, FF, FF, 6A, 0E, E8, BC, 22, 00, 00, 59, 83, 65, FC, 00, 8B, 75, 08...
 
[+]

Entropy:
7.2432

Code size:
500 KB (512,000 bytes)

The file mp3rocket.exe has been seen being distributed by the following 27 URLs.

http://www.mp3rocketnowbest.com/c?x=Izhq8wq8rKW/oCuE4FMBW0Y44rcGXwmXQCGhI4Ngs8g=&c=cTzaQtNuZ1ZjsjnYbIHE09dxUJupgqGki8jkpRtLTpN/JG7j7yb0QQsyKAd ARDEHVxSiYtUycq9BQBPpUj2t7J723iu47t5OZ FnkUyvfSaqO8q4yd/lB/cd4S99wHSBLUA1RpAiy9tRpnLF52LOQ==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=298N6qNLGwGikQLKmbdvzNAySQMxMpprmUaDW8hxOLo=&c=/t4lKKSHmqvuBCaAC8Jfxe0DVp9khThSjYHLgDtxTeAaXzXBlPXopeZOvrhkthfrRnmfyWtf1pAKfpk2gXcRgBnvWqCN0BfTM95X7dlzRDgqfeMuDqobein3IR5JQiSmAG9RtvOuzXCq2Wv2jCNY5Q==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=u/Nyx63LDQrwBWtnsObUPB2/tiBgjyj0v7ge9lCfO88=&c=J773byrsS0sTWQj6DHcRh2 rjqS522vReuGi04S2PWT3EgdwLaMo6p9GFUUGdA25TAqss8UA93/pgAuRbsppH26zd5GybDU5meY5fYO1sHn3n1CMBQyhsh8eYb9H/d8/cliUfWPcq/IhU9VFhyxMFA==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=a9F5Enn4Sx8rn kCi4XDisgyKmP4vwy4bT3K0kmAeII=&c=m8FT9kOa66x/dnqaSdBbxX16wIwSoncy8EtiVK9MBEjkro4c6VubPSk94ke9nOSmCdJ220eYFu 6l71mzsbA 6PfkIm8nep8zoYxUlgru bNhCPk7VuCV6XC4KnSwnYP3x0 gOEInrtbmSW2p0zUTw==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=NJutLIjsesTd5djsIN9Z5zR8ots 4x2XzV/CjKf0imQ=&c=hRDRzyKXz1ET9Th1mC8O/z4IwMfijBn1dICqio01maQaQXKotzkYsisk8DPni85t zmfX3pElKUVW5L9NOanYnE5ogM3MkG1mJFRSEwLOpWa9n8lm6M2wFEBepS0s/m0dn3B9/e16RDJ4qDggXAR3A==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=BL7Ma M37CFu3QECv0ZamOZGCpk8OR9z0 xH77gAc w=&c=dS8CTSU1CFaXcY9AuUCAO9rjOgq4mMxTPi4ZqjJtAygksxn3mSLuCBl4MyCRoIe ymxikslyJktrz2DTuc0l6fdmsKgxI2xwsfCXOXvEAA5XYgTD2 1sSNG3JnGhuX3M ssoJa6T7THayfoczxK/qg==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=ABOWKNzTKiLmF4EVApyiZHnhTnQcGTDK7XbryQ5rvE0=&c=EIB90QUD1plwchwNzojbAGP yjrcLZ9arWg/U99nrHiusCFrvztiFCRITv8335XuXj8rUdwNR0Di yXrv5jslcP6pspUgtkqehqm6oJL04Un8/qL2D3ToEh/Aa3L10hRfjZhuPk2rdpaDj0gtmnNrw==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=Er76XxcAY984Qbdh9lAkHmsqwS94FSiqhAeOuJk7Wbs=&c=GN2x4MBeZeVPl5fuBsQUF4QxROWz5xM 5TrJ31EV8ybdomYfckGrcEAST/7CdXp1U56XatdBWGNdzXXcfU5rmd25ijRewnBksu9xFBRovSF7 6AFKjm6rM5d7pZeVYlgSvzioMGcb45N3 NhBWYgdg==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.imusicsearch.com/.../mp3rocket.exe

http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=BrpOFk1b5ecDTO0O9 k/hOrYBAtURMtB3YsmBIk22Sg=&c=JR3nLpTKnzBgz/7RFUQzX5vks9yU6 j 4L8rFsCn0wkt0ODR1deZkK7h6LTt6xD4SaI9LVuNI4e1krOtLECeDzzLCD9gLpiT7rXQHlFio9VVmZoRq9yD4QVNZUbuyCluKBoN4T0NnNO7B9HVA1h1Fw==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=S3CXA25OaEl4lZnuX4NJCgIXncLGMrHrIJjyYkXgYuc=&c=gJ2gZ78QORZBWsX/I gWa6UV8xNvCyg1fx/PmWSt9P11chZI S/GeiKD51HrscX58PtVhMsjj/fBvyKgnCT 2AEsNJ8AJaEQF31yGEbt9KwmTBBwAhHSECinO4KMC5pYZhngyCGUwC8IaTwU9ouWxg==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.psprocket.com/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=OI9hYclO9rp/PbMPh7 2Unf9215naLpjwnJV3y cpns=&c=7z JHmNNbeDltGHIuuq/dOScHKmTmQ5RLrSK4wjP4Jk5nxcFz8ZvoF22bSLzDRiovrbY7BurzrdM3PpRbcq1OptoMEEoI0K2hJVeEq0aWhN43An4eJtVlvZ/ojXAXhA1kqb6CTvmfP681B71mRFszA==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.rocketbackups.com/.../mp3rocket.exe

http://d5.mp3rocket.com/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=twvjo MJHu9H0TQLPyS6H9bCwRlFsTqYiS630WXw6Fs=&c=OfAkJX4PemZQwzBPFvbVSeEN RZL1nwVUlHTSQ 1L9laUjO6KO0yMaps2CmpQyQC6wB9E6K46KPXtW1ImmALsKFnA1OAO7GI1G7C9axHCA5s1oIxME0 tlkTIKZHnlZaGMS2HujWBlQnHbZN6jNJlg==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.imusicsearch.com/.../mp3rocket.exe

http://www.allcoolmusic.com/.../mp3rocket.exe

http://www.musicrocket.com/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=dA9BjqI8BZZJab3tV4iwRM/6FYi9NXrqUk6gLjqTy8U=&c=xEqkXdjudvyDa1gxPO7bkMLdZUSotgCTpiVNuxAvIsqjFra90iTVVnK0P6B6CYxyKjr7JqVZDng2c2jhsPGEGsYOJfTV7mba5MDLp8ulLSrLCvAM1nogbwKk0NMvuoHSdvRXGZElnHROnGrZhiWV A==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.allmusicdownloads.com/.../mp3rocket.exe

http://mp3-rocket.software.informer.com/.../

http://www.mp3rocketnowbest.com/c?x=KZ9v 1z0FUcmRct9RFAwp/C1Ztde70lIw4bOL/nVXho=&c=ZThS PuiclBBmvg wKCkO0NthoxChkVbODQuhup1V2cT7QKuBdvFBvU7UeFRMmUb9HmXg6GUCROF34GDmKHo7 10IJxBipfxFvd4RgoLjL1MbRYAau/ pta4ZuCfnHvuleimLgMyHSj5mQKbN3gfYA==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=I0MDawabNlJIyDfNyGJ1ZVf/r562AL2krdSrrwCS2Zc=&c=N1WZVIY243uo gBzunZdLMGaqws8HEL7cLsNa D0Z8JFZlPDYDHD7a1P8DbSJAzYVMbva7sey8JL7qH2UDR40NXoepnXQZWVkyB4sX7QE1cqupwxny7DQIVQaLsItprbdhPLgn6PnHMBm9Rvxl41Lw==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=KU7qXWPLhS0S46UsrmgwHPLe1vOyuORGe8pdvcEy/bM=&c=OEiyjedMH0Blhpcic5fYYD0ag8tJ7sWO8dpbXFZGiHfGpx6dyKjFJCkUehiI3RA1FuSsv7 IMXVdeUyQ2RZfZ Xo1xa32KFLs67TapeBETkXIf1IDWKnReXD0KepgQ3h3xEaktgtnMqqD7Obil5Jfw==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=RdgxwPyd5DlN/1BRUlVt2JY2ZBl2HedBm4h5BJUjDZk=&c=9SEB9i3Va8IOoTOoG8ovdt21cS67NGIjmUkLszClt1ToUHaEcgBUGbyvdJAz2zuNVFSIuZn2iu4f205iuweCXi3DgRTd5twWM98d5nForoTshFxYHbcZfiNu m0566Lprv6YLboqu9pwakY5WjnUHg==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

http://www.mp3rocketnowbest.com/c?x=gHLlJmMuCHUsOmqxbg1d9 P3cwGCH7A45nQ54JJf/Nk=&c=l84CtGcoSuxB2BybtdVZhokXvjPFS Jiu64fXPQNgygSQSZzrn8es9XkBBCHjMhVpAeRJj6SoBi1riCyDnlMnGUhbhqnuCVUUnmi96clutKZqSE iBuuQU iDCgaAxmtoV8R9GtYAUgSrwHnYNJHKA==&downloadAs=MP3Rocket_Setup.exe&fallback_url=http://www.safefiles.net/.../mp3rocket.exe

Remove mp3rocket.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.