BEHRINGER_UMC_v4.59.0_2019-03-14_setup.exe
Classification: Malicious
BEHRINGER_UMC_v4.59.0_2019-03-14_setup.exe is a malicious file sample (Windows executable, 2.3 MB). Flagged by 1% of antivirus engines (1 detections).
Detection summary
- 1 antivirus detections (1% detection ratio)
- 1 IDS alerts
- 16 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Trojan.TravNet |
Hybrid-Analysis |
2020-05-16 02:00:23 |
2020-05-16 02:00:23 |
|
S0033 NetTraveler
|
Sample information
- Filenames
- BEHRINGER_UMC_v4.59.0_2019-03-14_setup.exe
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows
- Size
- 2379168 bytes
- MD5
2e48df1b1c1075a33ab50578b27ec60d- SHA-1
6b2c3f1d686eacd0a3ab895921a6c757d04d33a5- SHA-256
be5326a674c6330bb9ed9a324568cc44773683a35859bd7e865d6475cff4d87c- First indexed
- 2020-05-16 02:00:23
- Last updated
- 2026-09-27 17:27:43
Antivirus detections
| Engine | Detection |
|---|
| Zillya | Trojan.TravNet.Win32.90 |
Process list
| Name | Command line |
|---|
| BEHRINGER_UMC_v4.59.0_2019-03-14_setup.exe | |
| setup.exe | |
| nsxDFF6.tmp | "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" |
| nsxDFF6.tmp | "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" |
| nsxDFF6.tmp | "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" |
| nsxDFF6.tmp | "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" |
| nsxDFF6.tmp | "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" |
| UMCAudioCplApp.exe | -exitall |
| nsxDFF6.tmp | "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" |
| nsxDFF6.tmp | "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" |
| nsxDFF6.tmp | "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" |
| nsxDFF6.tmp | "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" |
| nsxDFF6.tmp | "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" |
| nsxDFF6.tmp | "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" |
| nsxDFF6.tmp | "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" "%TEMP%\nsiDF98.tmp\nsxDFF7.tmp" |
| signcheck.exe | cci "%PROGRAMFILES%\BEHRINGER\UMC_Audio_Driver\W7W8_x64\umc_audio.sys" |