home

mp3tagv264setup.exe

Florian Heidenreich

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Florian Heidenreich  (signed and verified)

MD5:
152551dc470b54840d087ab70a1bd6eb

SHA-1:
04e51fdc85775fc99c4298e447ca7db40c5aa958

SHA-256:
1b7cc7b6373f4c0a87d1af5640c50b052450400b9c44e7cea35adc994b714ccd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 6:21:33 AM UTC  (today)

File size:
2.6 MB (2,705,000 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\mp3tagv264setup.exe

Digital Signature
Signed by:
Florian Heidenreich

Authority:
COMODO CA Limited

Valid from:
10/22/2012 2:00:00 AM

Valid to:
10/23/2015 1:59:59 AM

Subject:
CN=Florian Heidenreich, O=Florian Heidenreich, STREET=Erlenstrasse 18, L=Dresden, S=Saxony, PostalCode=01097, C=DE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00B0290098B8F8D5FBF1BBD1F352792307

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:bGgwGEhg+9M9xKXaaEVFkK+QBFt0IjwBjt7M/lj94a24cfZuAH91:bGggg+UQaaEH9z04wEZ9VZvKv

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file mp3tagv264setup.exe has been seen being distributed by the following 23 URLs.

http://dw.uptodown.com/dwn/wTYM8ejNgkW2opESi7fTiNgPemaVPHPU_BL1XYW7aC2E6nQRbdl--vzHdDnQQzuaqL06aZOVa4P6KX_oNwgXurfqJAxa9l20QoTZDCGtxw6YsVOhtG9GoFpCwgGCO2E9/BUM6hqGDOz1wKJ72I1b1h-v0CGN3JRsS3Iq8XXTwByI6Hv2_We_U9TasQeafBGoUxCDJUdbpzprZy-_tw0UFiJO58g4Vrk6zuy7ygBy8PQGiAbX1f1XiKF0eYrQSgwI0/OCgUYPUsaC-TUBCaUgWrLlUxk-g_BB1QTrO5cBSA8TN6bu6EhUDe5IncjlBMQhyAya7q34zkPM8ulMte2ZJyxqMhC38foQbykUaJb85emnmmOtUDj2Jy0eo97gko8Kfe/.../

https://dw.uptodown.com/dwn/Zfvz0TPPEDHYhEMWeDNzmShdb9kALvkacxyO8nPPyJqTihfc9pjAMyc-KkhwgGygWnsdwgLFLt2aDwAJNkjLZNDX4Xsc2jQcE7AuXxKa1DJu_DaUYRRp2eP85_JIR7O3/5JdWPUwtWT43SImEWcdD6whQ2L6Q3FxaEpZO7M3ujEyn4dx3EoThn22dWLli5pzYc2ERRND7O8CCi52Krf0I3P0jThNH8JisY-WFxeylqEB8wy_e47spa5XKKiDokkIT/awTHcsG7pnrjHe9ShrGmJJzsFXCDkEL6Hi2TQu6xmj-qK9_av8kZbd3FC5NW36FoFZKljNV-_avknt9GGtAH28uT2iv7TtYPFvqzWEwIVdjNUPL1YiepFYX4Lt66zuQx/.../

https://dw.uptodown.com/dwn/eHoRzteI6ShMomVfp6B_cqc-r7Etxt0pssUP1dWMu9dyYrVSSvha1mxwP5nYIIMIsxdyHTWNaasqKZuBHpRAPMl71hPqHZvfOZZE6vcNwVIzpqaB-JwMCzQH9kjl3vQP/_1OwFmB-wc8ZBsKgamwYMoIIB83VRYH5_-dDXTSKr2E-SllQJd_r6zA8wd49TKMJ3AJUotuyzS6H-Z1KD1pbGDEq8NWVbLWHwP7R0Kod9FP7VDGeoDVs_wi__O_3tBjE/pAeb8IxNDnnBcRQU-MXc6UWMdzNzfzL4YHfPVZLAKlR2fcOyA172NlQmNkWjDgevBaUJbmim6v_WEgQ9HLyNU05W_Fvy1t2XsLovqxiuOrJpMolc9Lzzr7Ay8HH3wQJg/.../

https://dw.uptodown.com/dwn/MA2At-A5c_2TDXjdcUMzngGEsKYR4Johe1b7UdqQKTPl1vIHHjN4E1kCgUsBHz5uIPYR4NLy_ECbyLXDupWokUSyLQrsLdVll1phjYbDlgOC8Xs1MpK7kZsStDvkUd-_/JVt4NbqgwgUwbIBzmPYAquQ4OhHSKSK_UmNA1IfHRloIRFcHSKUSJ_QJ9DiVrhQb8leefDz8DwzXE65Fgy2vc0w9HLY_OlfwqvTZ-39Ke1V6pHh6jzWO4FZ3Dwnceu7c/7peo9wryK2eOD3ypLPINpkkoD1pajAOCqUE2JJab0f66mM2_s6LyMOWillflo7BX1rWuwN4LwoX0pqPaK96KEY8tpbkDEDMSWSaV7bpdXApLhnCew3uCSs8N6MvHfQLN/.../

https://dw.uptodown.com/dwn/D52uCdsn6rv23XWrlzfGzEAy4r5wTFoaKlJEHhiRwn9AbX8jM-LZw24XuTSCleJuRsQw0xRk_JwUwwDd5GD3GFMBZKwRbpwHZWrq0eD6Hn_a0Rs_KCG42bQlRK3LhbJp/x3abk27lNbD6feKIlqC-dpLHzJVtGlSGvzugaP7bSpWuy9V1nI1ZMq9kw2Iw9XfUXhftvJQMkwHTWEHqXZmjsirJablVfGhnmFiQI4BpHoFCI8eOSJorxxKU0a-3RsfO/NlCXCKOdZdtXC83hA0JqjBAzwlSlqnWfiiHLROAO7sf5D3PXZ1h9DcyVL96FgXy9WVwCrEO2oipCduGu9C1a-a2_qtA9d_Mhq5LzD1eGJPMG0VcAtj2oLRxVjByB85t9/.../

https://dw.uptodown.com/dwn/9vjfLuo9IiUzsOLvmAS971Z6EYqTthwklsLYbwGdyucrGY5A5MYcWM3Z-XS8auDCFk16Y0T4Su3we65PRSyAn31d4zKoNvPqvbblKJDvysAbCIX8F0wfl_kWGq1qBWiw/psr_BuvmDbx60o4fRsSpEJC0K9mOiz_xUWGFnNZ5O3WXlLC6z2cgOyXM5Vsa9pauS0u4R5cKkmsycYf299HuOyPX0oup7Noq-GCGokNHcVNsPsaJwDFm-4pGpS9o_E4K/lLkGyzyp92V2n_G6A7HlkqZmzJaIkB61vkKVWeuAhUYxNd51Ahma15THHI8-CPFCXne88xT3-4LDt9b13_5fnXs_cA26sRbR6s8mjTPuWXSuNxCocbXf329YDnXEAapW/.../

http://dw.uptodown.com/dwn/BMnKHYlVVflnbP33gQNRqaPkbNQRIhtI1hT9jED5zrgFNGTiOguH3ur9VDRcDAOohNsvMwfMZZtmo3C2-XITPw69DUnKIuEHHlGnHb6jr1MyOSpJqLeDX6bzh5HjoLMo/5yoEV_6kEaP828mRWm8HikAU9Jpn1_t6UFMC0HG8olWnO-R-cIuLFMCRvbzPeiaenUOkBo4zxlNayZPO0fjMDh9OlP4AzZ131xrvn4xiNwJwzPKbAQ0pW9ofV06Y4dFj/jOrFGg49wf4GgPuD_334lfd7pmdcQFVp4mrlTlOwu_kKxoGqLeiJeGHwcIcRid9wXn-i8ywh2_WSaYHWxNy_o9wMUHKddfU5Y_Roq6b4uuSV1e5LE2AR8SP2ELAKFPCU/.../

https://dw.uptodown.com/dwn/jTfW7lwslfzO1RmzqQpjOjBVUa6Q0dXdFGeR1VS7V8WivNmFQ0RHQ8JiwiVHoOLDkedJNVJdFYCJ2syoHBjHhcxrPtNEQmbmS0PmdGiWg7pNx2ima8wZz0yFNb8MsxI9/MDsZA5CQMucaj_9OC4lKjzysyGvDSOKVuqzY656R8h9XcAQnBgVksVEwBBexZtN74lFHaDq6LmzCVj_Gw8_dabx5D3syzDqR4EzzpRggkkOndJDS1j5Jru4NI6cDrKuj/e-R0BiIQSQ6kanDmxq_fVeyRK2Mk9KMDA9WAixvP1w5z4bE6sTUmTejZcb45xDnbjqHj5tt2OMcd30LTXm5Ln78djvdRWqcgkqVHC424R8BGDo8WW3uh9wooKslD38KP/.../

https://dw.uptodown.com/dwn/2gJNdEW6ExoNid2NCEVb87Q79TDHD6-6XI2_zTwbuWWNr09WC0_5NPGP_42Yfvs6ryrJBlMisEfOnkXA8sIj6Tx3BOjW2YJlPsOolDjvRj26MDBOWae9jPIf-zAKekcY/JRc4aVqr4MAEt33cdIOx1LFFk2BJhynNAWVJZdQpXPcTHnXujwIZ46-iloAk3VlNBURBlnCT-9FrSi3-1RLBEMzEcyTpXmaDycr6MvN4FFOjGP-e8XZ4QTjt7RrVwW-c/azj0VW-soyvsugYuNJ5R1MJq7eAzdSXiSSgP_sqANWiUyjZYNDIw7sfd-GlGzlei_4n13j3xu25zMXx9CpL5dotBfl1eAA_l5Ti6LVLRQ30y9T3qHuezz7cOOlKMACq_/.../

http://dw.uptodown.com/dwn/Btq79SClpoqYpBziUyaybw57bF-hvg38Qt16lma2m92Ez90lU1nWukAruKRwUhyDcP8pkRJcVAdbaPtT39TfZbAVjydgnSmMmwPigo9ZD5a3HhNHZEEaMyGbfYNauyEJ/hPpziWGIIK1NkkBhKqsSx_lY5Nc3gDa1dkwkMPPdiM8treyAWTEqhDq1RIpmzQ70b_LK1wpU5nrJ_-27qFXSFXMvB4RJoTM9cRwPJuPpZ554Cl0CAiPK_E4yIPnGhaqH/TCWfKNIIQ2s8NhUKvKUpDF0WCUHF-Cx1IPvkic-7sHv0uyJ_TOv3lTpz5nngXkt8kxI_2_AEgs7Tf2G7XGEavKe5PQb5qYiiUW75SMjnyExIDndsjDPe9YntmRxcXITv/.../

https://dw.uptodown.com/dwn/PR3ODHa6s07fzpqwMQsrUpZhFkmgH8XiFTm9eEqRu-_7ebIPepudNao-NO6YWeZBD8adLRZlSzqjcUnS0bOyk6Db5CMWmo6ofWQjtQdg2KTQTLd87Uqch0K6ZmrYV7CX/ickhEOULm8tGJibzXHczN9evKFcDWMjdWvbsjZPbug4MOvjMEvuDxYeKiWDkyTLCvBGuwY9WWBUTwVSbPHowF3zP_Enkd_Jacmvwh9KkhWCHkQ9IF3fZXrskKX2GGU-z/4y947WkfP6zNoisks3fwZA-4D6hLdCar5VGcVybei85y5Ef6XGSQCNSXJLs2ybZ6K8n5meDlxDHTobqksuFtef7-XU7DbY5W0BVoz3V00wO2xoyYZ4tDjcDrEvLd4olg/.../

https://dw.uptodown.com/dwn/oQ7vz4GJ--FQiJFYoHAf0-wLIUVWRqre1mEEQxvFJiXTzqEK7IPM_UbAExASH73Cy-Q7B-m43Km3NHQvg8kNDPUZ7WBxTV2LukWVflpZPEmhC2L7uySzY5a_McBIbKKm/R9EGMzeTuIpqWGMKYsA4EWPXSMZVgcHC8n25GruBe1jdwg4jbE5_oN8eLPWnTvIGlIWNTuYD_WoMBvBPwzr7fzwpCuF3n8if43svVTGp-_mFgemDL9_ObBjzcJn7Nfdc/g6ABP6m2qn0TtUFas4ofJMR-kgUS5-rH8GpNAUyBw9p-UUBiVHRO9R-cKpXIfdvyyGdHFKKBZlabeiyulm5Pl-mC4rxdTliSBW5CWBOO6qr9F3U1pn7zwDAtrPRgOxcv/.../

http://dw.uptodown.com/dwn/NIE5DQf0MF-Of9UYe9DV01tpyttjvSg-KHBwy6IZMw-ahizgZBztneSNEUyhop54nI26NBIx5pwmKvhxOhU2cPnUE9pa2hjz9CH-qgHKVgs7v_1jPl6_KbRrFbTBuGYX/V1F1NCkPvwq4s0bfFiM4HoYRM6ZRINUNvAn7WM13fabMPyRm5kXZtECDCC7l22MubB39A1ahYk2AiruO_uhNsn5ks5q_WqZ2xnb1jPuFAsCja7cZyE5ujUO4NIv8G5bb/.../

http://dw.uptodown.com/dwn/-0w9nF4uyzBgWvh3KGOLIWVbQx_1h4vUvwq5_lM7vs6b8YVPSJBui1NumN4kPClCukDfZONp0OL_j_l_3ZllNhfY6SByv_emB9usvzj5ceXW-L7eQjtquOaXj1HR5GoY/Q22KIZrE6FdyHBN8-fsIzuQtpEAooL6mCXo8rbCQT_LNEkik9CRTndMrw1z1uR2Qj9YLPArr3_QWW0tO1B4RH6k345raMLgKbirQqDghxoFZgzQoZFBw1oSiOSfzStIX/.../

http://dw.uptodown.com/dwn/9s4NT7zhM76p_lp8SPDwEsEiv0Qng3XPEUGYPGx1uC-Z687vlVC4YdGb0_h9b4RFRRrIg_ZmitU7TCsgE8vFLrlC04ShMo4TxYrfqeVM_0FQt5k-acXvMHLWYiXJfVcQ/B4tZQYlnNrhANNMOQQhCKTWEF6G7oPmyNGCMAMt9UgEYBQLFUeVUHnT9ItObwrzgotYyeZb-kp9lwXs-SV8FuxQdcng1S0vrfYPZbNZA9LWwrl5pDv_XLR3rmLVRK2ly/.../

http://dw12.uptodown.com/dwn/-HJieaOr6HKbWMMjW290fw4L6ycBNLRzX-D9Bryr0uOv9vNDDnmN9fpvKI8HaWs2DKR1ZwhOtI_VB8kwnadi4ysS6zS9NhIRQNnvLWKNKT2MjsfeBb2uEbKNDVhrWhRL/OzwZxGVM42aO4v23BkDRHzPA7ad6jjgf3Nc1jmptRwFCpNS2YJxyp6Rtnccb7bYMytkyLkn9BdpJA04j9c97CjULFTdhQ87Ne1qpium7-mo44Ip5fdGPu_UZXt5sb56P/.../

http://dw.uptodown.com/dl/1440090328/.../mp3tag-2-64-multi-win.exe

http://www.filepuma.com/file/1413217352c6887/mp3tag_2.64/.../0/

http://r2.computerbild.de/exec/r2r.pl?m=w-cobi;u=http://d.computerbild.de/downloads/.../mp3tagv264setup.exe

http://files.snapfiles.com/.../mp3tagv264setup.exe

http://download.mp3tag.de/.../mp3tagv264setup.exe

http://www.filepuma.com/file/1411671171c6887/mp3tag_2.64/.../0/

http://download.mp3tag.de/mp3tagv264setup.exe

Scan mp3tagv264setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.