home

freemp3wmaoggconverter.exe

Free Mp3 Wma Ogg Converter

CyberPower Tech, Inc.

The application freemp3wmaoggconverter.exe, “Free Mp3 Wma Ogg Converter Setup ” has been detected as a potentially unwanted program by 18 anti-malware scanners. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. Part of RelevantKnowledge, a program typically installed via a software bundle (with the user's knowledge should they read the EULA) and will run in the background collecting and monitoring information about the user's behavior in order to build an extensive profile.
Publisher:
CyberPower Tech, Inc.

Product:
Free Mp3 Wma Ogg Converter

Description:
Free Mp3 Wma Ogg Converter Setup

MD5:
96c4e4b5f26de0b3c6f271a4bede546c

SHA-1:
f6b3043ec2e673bb9c5c810b5ffd64ef2238f106

SHA-256:
f43f45bf820cf7d984b2ee84d9e4e59d8e7b000be701d863fbb378a1875c362e

Scanner detections:
18 / 68

Status:
Potentially unwanted

Analysis date:
4/16/2024 6:15:05 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
Adware/Relevant.G.1
7.11.112.90

avast!
Win32:Relevant-P [PUP]
2014.9-141030

AVG
RelevantKnowledge
2015.0.3305

Baidu Antivirus
AdWare.Win32.RK
4.0.3.141030

Bitdefender
Dropped:Spyware.Relevantknowledge.A
1.0.20.1515

Bkav FE
W32.Clodd24.Trojan
1.3.0.4415

Dr.Web
Adware.Searcher.1222
9.0.1.0303

Emsisoft Anti-Malware
Dropped:Spyware.Relevantknowledge
8.14.10.30.08

ESET NOD32
Win32/Adware.MarketScore
8.9025

F-Secure
Dropped:Spyware.Relevantknowledge.A
11.2014-30-10_5

G Data
Dropped:Spyware.Relevantknowledge
14.10.22

Kaspersky
not-a-virus:WebToolbar.Win32.RK
14.0.0.3021

MicroWorld eScan
Dropped:Spyware.Relevantknowledge.A
15.0.0.909

NANO AntiVirus
Riskware.Win32.Relevant.usxby
0.26.0.56179

Norman
Suspicious_Gen2.DGVZH
11.20141030

Rising Antivirus
Trojan.Win32.Generic.12411656
23.00.65.141028

Trend Micro House Call
TROJ_GEN.R0CCH07JE13
7.2.303

Vba32 AntiVirus
Signed-AdWare.Win32.Relevant
3.12.24.3

File size:
5 MB (5,194,166 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\freemp3wmaoggconverter.exe

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:+ro1unfEkJn1GR90lrQiBUSV3SkumbS3lOGWyV9p8blNQPRWd1Zg:io1uMUnNlr/WiWlXWyV9KNlXg

Entry address:
0x9B60

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 66, 95, FF, FF, E8, 6D, A7, FF, FF, E8, 98, C9, FF, FF, E8, DF, C9, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 17, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, E0, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, C8, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 17, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

Remove freemp3wmaoggconverter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.