home

sbax_wbup2_lb_2_09_0016.exe

Creative Sound Blaster Audigy, Audigy 2 series and Audigy 4 series Driver

Creative Technology Ltd

This is a setup and installation application. The file has been seen being downloaded from www.ranchsendgift.com and multiple other hosts.
Publisher:
Creative Technology Ltd

Product:
Creative Sound Blaster Audigy, Audigy 2 series and Audigy 4 series Driver

Description:
Self installation

Version:
1.00.01

MD5:
1c9e8948662be690bfed51f2ccb1ddc8

SHA-1:
d921a67abb083ecf68e65b3525b1c08d6d2faba4

SHA-256:
1d92a849436a9e9a19bc6a6a4cd187d37f675b7858ec2696263e3580958873b1

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/27/2024 6:43:02 PM UTC  (today)

Scan engine
Detection
Engine version

Rising Antivirus
PE:Trojan.Win32.Generic.1321791E!320960798
23.00.65.14613

File size:
39.4 MB (41,283,277 bytes)

Product version:
1.00.01

Copyright:
Copyright (c), Creative Technology Ltd

Trademarks:
Copyright (c) February 2005, Creative Technology Ltd

Original file name:
SBAX_WBUP2_LB_2_09_0011.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\sbax_wbup2_lb_2_09_0016.exe

File PE Metadata
Compilation timestamp:
7/5/2004 4:19:08 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
786432:VAnHI9Hua8XD5O4I5eY1X9WW3zgoPE8tfXxIgCFbixtncmkjU4hpmjA6bh:VCyOz70eiX9PzTJPxIgFeITbh

Entry address:
0x8A3C

Entry point:
55, 8B, EC, 6A, FF, 68, B0, E1, 40, 00, 68, 58, C9, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 20, E1, 40, 00, 33, D2, 8A, D4, 89, 15, 58, 3C, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 54, 3C, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 50, 3C, 41, 00, C1, E8, 10, A3, 4C, 3C, 41, 00, 33, F6, 56, E8, F3, 07, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 11, 18, 00, 00, FF, 15, 54, E0, 40, 00, A3, A8, 65, 41, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
52 KB (53,248 bytes)

The file sbax_wbup2_lb_2_09_0016.exe has been seen being distributed by the following 7 URLs.

http://www.ranchsendgift.com/Li svssJQ xZvhuAWjO8S6V3HtaqE9xcVJFdb8bPKaKb4jwLAGQah0Ra4l0oxTycmzbVdD0qzorhjli7vFmyGwtAQ73o4lavtz 6JYd7U_vkV2hwwqqUverIw_6huJlP4mvih28BJ9aJqiD8NX32jty_y2CHcyT6RYJHYAEgVblBeMEeCJwxAV7lVAPuhTfC HPtEHziuTPNvemVlAewmM_eKcIgAwy_jh7IX2GQsw DWlSJKnSxj8SLWl9iF5u38L6rKy1E5KrUArPLazFAP7_NyN63dyg9ouJcrALkLCqgqP4 5 tTKrhZhP3xtLCnuxIETWzKw4xS1Py6kthCnsRkpPYPjAqhQyKJ7QFdWZPwQCUSi6cbgoLMfxQ APcaeL2uF6_vKsAVwgY2OEHaXedHHpsyEINHTl3EYsKYDb0OEuLZMfSV9JvtlzQB0Mgs5sRAaS8D3YWG1TcPj2Or0KYt5HjiU795EYKV7_lwpGPBWRIwPF5tQVqrrM3ol9Tpef2Is9qJAEIeL3c5ZUOdxyosCNPOmaT2GP1PO0AfpsW6ZnnqssC9nNzav3nsVYESWrXNUp2Cn0HL_fWK16wOVXkC_V8Bqzse3iJufZwp93N_cFdI1cc=-G1kAAGRwXmwTouKlBkUBNuDAoScafBCeBw_ZXuIR I1rHJd7B0IaadZMK_SJpguaKoGaaQnRjzX1mhqe3JqmrW2ZkDawLWmRbhHCAsz_DA==-e

http://filez.kappa.ro/download/utilities/drivers/.../SBAX_WBUP2_LB_2_09_0016.exe

http://s5959.chomikuj.pl/File.aspx?e=IqwNfC7Byfy634AIv6UAYPSFQsXXkDzcE59S3YIsQybpJa4lngIB5B8KQvuPVaLNp6Leo01TwTEfVIpG7O5dVCqj2Eh0ePCLfZO8xFWTBvBCIyfCH7SVAWwUk39ToZY30uGDE1Idgc6rcfGhrEad-Ps18FrHUdrWgp0NgML8RNo&pv=2

http://s1.download.net.pl/146-SBAX_WBUP2_LB_2_09_0016.exe

http://ccfiles.creative.com/manualdn/Drivers/AVP/9497/.../SBAX_WBUP2_LB_2_09_0016.exe

http://support.creative.com/.../download.aspx?nDownloadId=9497

http://ccftp.creative.com/manualdn/Drivers/AVP/9497/.../SBAX_WBUP2_LB_2_09_0016.exe

Scan sbax_wbup2_lb_2_09_0016.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.