home

mp3-wav-converter.exe

The application mp3-wav-converter.exe has been detected as a potentially unwanted program by 9 anti-malware scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from www.free-audio-converter.net.
MD5:
c193d2d2831d8b97c28e528979058946

SHA-1:
6f0597b15cd3b5da3849f11fb515736f8012e134

SHA-256:
3f4a1be87db41d8c8428be0771db87d5997d0f5ff49968427bc0fa30d6167c48

Scanner detections:
9 / 68

Status:
Potentially unwanted

Analysis date:
11/25/2024 4:22:26 PM UTC  (today)

Scan engine
Detection
Engine version

AegisLab AV Signature
W32.Application.Agent!c
2.1.4+

avast!
NSIS:Relevant-I [PUP]
2014.9-160220

Baidu Antivirus
PUA.Win32.BundleLoader
4.0.3.16220

ESET NOD32
Win32/BundleLoader.B potentially unwanted
10.13041

G Data
Win32.Application.Agent.60A4YT
16.2.25

IKARUS anti.virus
PUA.BundleLoader
t3scan.2.0.6.0

K7 AntiVirus
Adware
13.213.18764

Rising Antivirus
PE:Malware.Generic/QRS!1.9E2D [F]
23.00.65.16218

Zillya! Antivirus
Adware.Bundlore.Win32.9
2.0.0.2667

File size:
1.9 MB (2,042,875 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\mp3-wav-converter.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
49152:5IO9tDDSaSYuKxABZgk96BCCCIl7yMzQKZIvpYsMVB5:5IivOYuKxATuCCxZHzVRVB5

Entry point:
50, 4B, 03, 04, 14, 00, 00, 00, 08, 00, 94, 8C, 76, 44, 79, 6B, C3, 3E, 43, 2B, 1F, 00, 92, 55, 20, 00, 19, 00, 00, 00, 46, 72, 65, 65, 57, 41, 56, 54, 6F, 4D, 50, 33, 43, 6F, 6E, 76, 65, 72, 74, 65, 72, 2E, 65, 78, 65, EC, BD, 09, 40, 14, C7, B6, 37, DE, B3, C1, 00, C3, A2, E2, 8E, 8A, 0A, 0A, B2, 08, 0E, AE, 60, 44, 61, 10, 17, 70, 64, 11, DC, 45, 01, D9, 04, 84, 19, 77, 14, 1C, 89, 0C, 2D, 8A, 51, 23, D1, 2C, 1A, 4D, A2, C6, 44, 12, 73, 23, 6A, 12, C1, 51, C0, 35, 88, 1B, B8, 6B, 4C, D2, 38, C6, 10, 35...
 
[+]

The file mp3-wav-converter.exe has been seen being distributed by the following URL.

http://www.free-audio-converter.net/.../FreeWAVToMP3Converter.zip

Remove mp3-wav-converter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.