Audio Fake Detector PRO

[Goa Trance]

I would like to submit a free utility I developed.

Audio Fake Detector PRO is a lightweight tool I created to analyze audio files and detect fake MP3 or FLAC files that have been transcoded from lossy sources but falsely appear as high-bitrate or lossless.

It is mainly intended for verifying the authenticity of audio files downloaded from online sharing platforms such as SoundCloud, where files are often mislabeled or re-encoded.

The software uses spectrogram-based analysis along with FFmpeg and auCDtect to identify:

- frequency cutoffs typical of compressed audio
- inconsistencies within different parts of the same file
- possible lossy-to-lossless transcodes
- Classification criteria (FAKE detection logic v5.4)

A file is classified as FAKE in the following cases:

- Bitrate < 170 kbps (pre-filter)
- Lossy formats (MP3/M4A/AAC/OGG/OPUS/WMA) with a hard cutoff ≤ 16.5 kHz
- Lossless formats (FLAC/WAV/APE/AIFF/WV) showing strong MPEG artifacts (auCDtect ≥ 80%)
- Lossless files with abnormal spectrogram cutoff behavior
- Mixed-source encoding or inconsistencies between segments

It is designed for modern digital music collections and large batches of audio files, including long recordings. It may be less accurate on audio with naturally limited frequency range (speech, very old recordings, acoustic material).

The program is free (freeware) portable (uses %LOCALAPPDATA%) and developed by me.

Google Drive Download ZIP (PS1+EXE+README):
v6.0 | v6.1

[Baldrick]

https://www.virustotal.com/gui/file-analysis/ZGIxMzRhNDUzYjIyMmExN2YyZmJkN2M3YmQyNTdhM...c3NjA5MTAyNQ==

Probably false positives but I would not run it on my computer.

[Goa Trance]

https://www.virustotal.com/gui/file-analysis/ZGIxMzRhNDUzYjIyMmExN2YyZmJkN2M3YmQyNTdhM...c3NjA5MTAyNQ==

Probably false positives but I would not run it on my computer.

This is the opened discussion
https://hydrogenaudio.org/index.php/topic,129387.msg1080565.html#msg1080565

The exe was made with PS2EXE

[Baldrick]

Thanks for the info! It looks safe.

[Goa Trance]

VirusTotal report

Audio_Fake_Detector_v5.4.ps1
https://www.virustotal.com/gui/file/fc5712a384aea85d44db9ad41ba581eeeeaaf38429c1b492244ea70727f6743e
Audio_Fake_Detector_v5.4.exe https://bit.ly/4tjxdIm
https://www.virustotal.com/gui/file/5c97e217303b8b83e3ed4f5cf71ea3688e692e5457b6d0657dbf19f7b2aa6fd7
Audio_Fake_Detector_v5.4.zip https://bit.ly/4tczm8q
https://www.virustotal.com/gui/file/a06f084bc3e5be0fcb2ea363c419e8324f4dbc49afc97c8ef63aed01a706c4a4

[Goa Trance]

What's new
- ffmpeg update check throttled to once per day.
A timestamp ($ToolDir\ffmpeg_check.stamp) is written after each successful check; subsequent launches within the same calendar day
skip the GitHub / gyan.dev HTTP call entirely, cutting startup time by ~1-3 s on slow connections.
The stamp is updated only when the check actually completes (network failures do not reset the 24-hour window)
- Exe builded with PS2EXE


VirusTotal
AudioFakeDetector_v5.4.exe
https://www.virustotal.com/gui/file/b45021a1338334a9df7581deef8446687069b12ae9b186c11d5270763980fb98
AudioFakeDetector.ps1
https://www.virustotal.com/gui/file/81cdb65710cd05ab403aa2fdf07035d24a96819e727d525568075fab0d01af67
AudioFakeDetector.zip
https://www.virustotal.com/gui/file-analysis/NjE5Y2Q1OGUzYTBlOGYxMzI4Mzc4YWZmZmZkMmY0M...c3NjQyODgyNg==

[Goa Trance]

Audio Fake Detector PRO v6.0

What's new
- Added resume support: on next launch, if an interrupted session is found for the same folder, the user is offered to continue
from the last completed file.

VirusTotal
AudioFakeDetector_v6.0.ps1
https://www.virustotal.com/gui/file/3c12ef73c9dbca418d025ea6ae0d554f62271fe895a199ed37f3a9ce80e94bf8
AudioFakeDetector_v6.0.exe
https://www.virustotal.com/gui/file/bbc2ec254f93cba9a631ebc33d64087051c58657374d0ad1d597831d67d6f13e
AudioFakeDetector_v6.0.zip
https://www.virustotal.com/gui/file/fefe0cc88bc784b772e3f640a99a90ca478d831956f00b3a0f4ecb5665a63424

Google Drive: ZIP (PS1+EXE+README)
v6.0 ↓ https://bit.ly/4eqmBCI
v5.4 ↓ https://bit.ly/4tczm8q

[Goa Trance]

Only 3 security vendors detect Audio Fake Detector PRO v6.0 as malicious, trojan:
K7AntiVirus: Trojan ( 700000201 )
K7GW: Trojan ( 700000201 )
SecureAge: Malicious

[Goa Trance]

Just to clarify a few points about portability:

The tool runs on the default Windows PowerShell 5.1 already included in the OS, so it does not require installing or updating PowerShell and does not need admin rights.

All dependencies (ffmpeg, ffprobe, auCDtect, 7zip) are downloaded and stored in user-space folders, without modifying system settings.

Regarding portability: I understand that using %LOCALAPPDATA% for storing tool data (such as logs and resume state) may not fully match the strict “self-contained directory” requirements. This is a design choice to ensure persistence across sessions.

From a practical standpoint, the application remains fully portable in execution, as it does not depend on system modifications or elevated privileges.

[Goa Trance]

Only 3 security vendors detect Audio Fake Detector PRO v6.0 as malicious, trojan:
K7AntiVirus: Trojan ( 700000201 )
K7GW: Trojan ( 700000201 )
SecureAge: Malicious

Security vendors are 2, not 3: K7 Computing and SecureAge

[VWestlife]

Since the late 1990s, even some CDs released by major commercial record labels contain some tracks from lossy sources. Some remixes are only available in lossy form because that's how the person who did the remix saved it originally (or they made the remix from a lossy source), so there is simply no lossless master available for it.

[Goa Trance]

Latest AudioFakeDetector_v6.0.zip is 20-04-2026

VirusTotal
AudioFakeDetector_v6.0.ps1
https://www.virustotal.com/gui/file/3c12ef73c9dbca418d025ea6ae0d554f62271fe895a199ed37f3a9ce80e94bf8
AudioFakeDetector_v6.0.exe
https://www.virustotal.com/gui/file/87c8358d164dea1db7482182faacd7ff4c85c27b073db2fc805b41714f9e8f72
AudioFakeDetector_v6.0.zip
https://www.virustotal.com/gui/file/a7e2133e63ed2cc285a7bf5342527715c8bdee27d50c0357bb94947b442b2f69

[Goa Trance]

Only 3 security vendors detect Audio Fake Detector PRO v6.0 as malicious, trojan:
K7AntiVirus: Trojan ( 700000201 )
K7GW: Trojan ( 700000201 )
SecureAge: Malicious

Security vendors are 2, not 3: K7 Computing and SecureAge

21-04-2026
Microsoft
Trojan:Win32/Wacatac.B!ml

Added comment
https://www.virustotal.com/gui/file/87c8358d164dea1db7482182faacd7ff4c85c27b073db2fc80...8f72/community

[Goa Trance]

Only 3 security vendors detect Audio Fake Detector PRO v6.0 as malicious, trojan:
K7AntiVirus: Trojan ( 700000201 )
K7GW: Trojan ( 700000201 )
SecureAge: Malicious

Security vendors are 2, not 3: K7 Computing and SecureAge

21-04-2026
Microsoft
Trojan:Win32/Wacatac.B!ml

Added comment
https://www.virustotal.com/gui/file/87c8358d164dea1db7482182faacd7ff4c85c27b073db2fc80...8f72/community

Microsoft
Trojan:Win32/Wacatac.B!ml
REMOVED

[Gromyko]

@Goa Trance
First, and very important, I would like to thank you for sharing your work on this platform.

I fully realize that using any software, that converts a script [powershell or bat or cmd] to a .exe, will be flagged by virustotal.com as possessing a virus. The majority of checking software will not flag it but there are always that last few that will flag your hard and honest work as possessing a virus.

Look at post #2, from Baldrick [who should know better as he is the head honcho and administrator of this platform], no Thank You but a link that accuses your hard work of containing a virus and thereby insinuating that you are dishonest for posting and spreading a virus infested program on this platform. I fully realize that checking software for validity is part of Mr Baldrick task as the administrator, and he is trying his best. But thanking contributors for sharing their hard work is paramount and must never be overlooked.

I often wonder why anyone, unless they are a masochist, would share their hard work here.

Can you please, explain what you have done in order to remove the Win32/Wacatac.B!m trojan flagl

Microsoft
Trojan:Win32/Wacatac.B!ml
REMOVED

Thank you

[Baldrick]

Of course will I question an exe file that has 26 virustotal warnings!!!! I HOPE noone ever try run such a file.

But everything looks fine now.

[Goa Trance]

VirusTotal
AudioFakeDetector_v6.1.ps1
https://www.virustotal.com/gui/file/75f2cbe7828c4aa3a52488c17a49290ff660893ae1d60895a6bd66e775cea07f
AudioFakeDetector_v6.1.exe
https://www.virustotal.com/gui/file/c3e647bffeab402ee5d2f19d80516270e462a6bfe0589d52bee3b8ff6e287669
AudioFakeDetector_v6.1.zip
https://www.virustotal.com/gui/file/ad24c3568f6a90ec9e8fd2068959c527494bd68472b6bfddaede82e8320543d3

[Goa Trance]

Of course will I question an exe file that has 26 virustotal warnings!!!! I HOPE noone ever try run such a file.

But everything looks fine now.

Not sure what you mean exactly — are you referring to a possible trojan flag, or to how the tool detects fake audio? If it’s the first, it’s worth checking the source and whether it’s a false positive. If it’s the second, it would be interesting to know what concerns you about the detection method.

[Goa Trance]

Since the late 1990s, even some CDs released by major commercial record labels contain some tracks from lossy sources. Some remixes are only available in lossy form because that's how the person who did the remix saved it originally (or they made the remix from a lossy source), so there is simply no lossless master available for it.

I get your point, but tools like this were mainly created to spot fake files from platforms like SoundCloud and similar — not just fake lossless, but also re-encoded MP3s (like fake 320 kbps that actually come from lower bitrate sources). In cases like the ones you mentioned, the tool may still flag them, but that doesn’t necessarily mean the release is intentionally ‘fake’ — just that the original source was already lossy.