File name:

driver-hub-install.exe

Full analysis: https://app.any.run/tasks/5a5cc2b1-d046-40c9-b65c-a65585885d45
Verdict: Malicious activity
Analysis date: April 10, 2026, 16:46:17
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Tags:
auto
generic
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
MD5:

BBE50F050C7FB4A833EF8EC48B59E5CD

SHA1:

D7CF3CF327A25B2CD507106CFDA1B0EE587905A5

SHA256:

9CD82A50053EE9555D2B2DD68ACD0A52D998BF6299CDD46554EE1A57770CF6FE

SSDEEP:

12288:eushinDcVe6dGXZpM7pQfSe+v8Kk1P3r0yOTS423WBaQ7DY9dz3HSBI:ginIV3dIMKfSe+v8Kk13wZS423NwM9n

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.
  • MALICIOUS

    • GENERIC has been found (auto)

      • driver-hub-install.exe (PID: 2012)
  • SUSPICIOUS

    • Reads the Internet Settings

      • driver-hub-install.exe (PID: 2012)
      • DriverHub.exe (PID: 528)
      • DriverHub.exe (PID: 3676)
    • Reads settings of System Certificates

      • driver-hub-install.exe (PID: 2012)
    • The process drops C-runtime libraries

      • driver-hub-install.exe (PID: 2012)
    • Executable content was dropped or overwritten

      • driver-hub-install.exe (PID: 2012)
    • Searches for installed software

      • driver-hub-install.exe (PID: 2012)
  • INFO

    • Reads the computer name

      • driver-hub-install.exe (PID: 2012)
      • DriverHub.exe (PID: 3676)
      • DriverHub.exe (PID: 528)
    • Reads the machine GUID from the registry

      • driver-hub-install.exe (PID: 2012)
      • DriverHub.exe (PID: 528)
      • DriverHub.exe (PID: 3676)
    • Checks supported languages

      • driver-hub-install.exe (PID: 2012)
      • DriverHub.exe (PID: 3676)
      • DriverHub.exe (PID: 528)
    • Reads Environment values

      • driver-hub-install.exe (PID: 2012)
    • Disables trace logs

      • driver-hub-install.exe (PID: 2012)
    • The sample compiled with english language support

      • driver-hub-install.exe (PID: 2012)
    • Creates files or folders in the user directory

      • driver-hub-install.exe (PID: 2012)
    • Creates a software uninstall entry

      • driver-hub-install.exe (PID: 2012)
    • Create files in a temporary directory

      • driver-hub-install.exe (PID: 2012)
    • Reads security settings of Internet Explorer

      • driver-hub-install.exe (PID: 2012)
    • Manual execution by a user

      • DriverHub.exe (PID: 528)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win64 Executable (generic) (64.6)
.dll | Win32 Dynamic Link Library (generic) (15.4)
.exe | Win32 Executable (generic) (10.5)
.exe | Generic Win/DOS Executable (4.6)
.exe | DOS Executable Generic (4.6)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2026:03:24 11:45:06+00:00
ImageFileCharacteristics: Executable, Large address aware
PEType: PE32
LinkerVersion: 48
CodeSize: 730112
InitializedDataSize: 85504
UninitializedDataSize: -
EntryPoint: 0xb435e
OSVersion: 4
ImageVersion: -
SubsystemVersion: 6
Subsystem: Windows GUI
FileVersionNumber: 4.5.3.0
ProductVersionNumber: 4.5.3.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Neutral
CharacterSet: Unicode
Comments: -
CompanyName: ОБЩЕСТВО С ОГРАНИЧЕННОЙ ОТВЕТСТВЕННОСТЬЮ РОСТПЭЙ
FileDescription: DriverHub Installer
FileVersion: 4.5.3.0
InternalName: DriverHubInstaller.exe
LegalCopyright: © ОБЩЕСТВО С ОГРАНИЧЕННОЙ ОТВЕТСТВЕННОСТЬЮ РОСТПЭЙ. All rights reserved.
LegalTrademarks: -
OriginalFileName: DriverHubInstaller.exe
ProductName: DriverHub
ProductVersion: 4.5.3.0
AssemblyVersion: 4.5.3.0
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
50
Monitored processes
3
Malicious processes
1
Suspicious processes
0

Behavior graph

Click at the process to see the details
start driver-hub-install.exe driverhub.exe driverhub.exe

Process information

PID
CMD
Path
Indicators
Parent process
528"C:\Users\admin\AppData\Local\Programs\DriverHub\DriverHub.exe" C:\Users\admin\AppData\Local\Programs\DriverHub\DriverHub.exe
explorer.exe
User:
admin
Company:
ОБЩЕСТВО С ОГРАНИЧЕННОЙ ОТВЕТСТВЕННОСТЬЮ РОСТПЭЙ
Integrity Level:
MEDIUM
Description:
DriverHub
Exit code:
3762504530
Version:
2.0.2.0
Modules
Images
c:\users\admin\appdata\local\programs\driverhub\driverhub.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\microsoft.net\framework\v4.0.30319\mscoreei.dll
2012"C:\Users\admin\AppData\Local\Temp\driver-hub-install.exe" C:\Users\admin\AppData\Local\Temp\driver-hub-install.exe
explorer.exe
User:
admin
Company:
ОБЩЕСТВО С ОГРАНИЧЕННОЙ ОТВЕТСТВЕННОСТЬЮ РОСТПЭЙ
Integrity Level:
MEDIUM
Description:
DriverHub Installer
Exit code:
0
Version:
4.5.3.0
Modules
Images
c:\users\admin\appdata\local\temp\driver-hub-install.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\microsoft.net\framework\v4.0.30319\mscoreei.dll
3676"C:\Users\admin\AppData\Local\Programs\DriverHub\DriverHub.exe" C:\Users\admin\AppData\Local\Programs\DriverHub\DriverHub.exe
driver-hub-install.exe
User:
admin
Company:
ОБЩЕСТВО С ОГРАНИЧЕННОЙ ОТВЕТСТВЕННОСТЬЮ РОСТПЭЙ
Integrity Level:
MEDIUM
Description:
DriverHub
Exit code:
3489660927
Version:
2.0.2.0
Modules
Images
c:\users\admin\appdata\local\programs\driverhub\driverhub.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\microsoft.net\framework\v4.0.30319\mscoreei.dll
Total events
5 852
Read events
5 799
Write events
53
Delete events
0

Modification events

(PID) Process:(2012) driver-hub-install.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Direct3D\MostRecentApplication
Operation:writeName:Name
Value:
driver-hub-install.exe
(PID) Process:(2012) driver-hub-install.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\driver-hub-install_RASAPI32
Operation:writeName:EnableFileTracing
Value:
0
(PID) Process:(2012) driver-hub-install.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\driver-hub-install_RASAPI32
Operation:writeName:EnableConsoleTracing
Value:
0
(PID) Process:(2012) driver-hub-install.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\driver-hub-install_RASAPI32
Operation:writeName:FileTracingMask
Value:
(PID) Process:(2012) driver-hub-install.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\driver-hub-install_RASAPI32
Operation:writeName:ConsoleTracingMask
Value:
(PID) Process:(2012) driver-hub-install.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\driver-hub-install_RASAPI32
Operation:writeName:MaxFileSize
Value:
1048576
(PID) Process:(2012) driver-hub-install.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\driver-hub-install_RASAPI32
Operation:writeName:FileDirectory
Value:
%windir%\tracing
(PID) Process:(2012) driver-hub-install.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\driver-hub-install_RASMANCS
Operation:writeName:EnableFileTracing
Value:
0
(PID) Process:(2012) driver-hub-install.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\driver-hub-install_RASMANCS
Operation:writeName:EnableConsoleTracing
Value:
0
(PID) Process:(2012) driver-hub-install.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\driver-hub-install_RASMANCS
Operation:writeName:FileTracingMask
Value:
Executable files
13
Suspicious files
2
Text files
36
Unknown types
0

Dropped files

PID
Process
Filename
Type
2012driver-hub-install.exeC:\Users\admin\AppData\Local\Programs\DriverHub\Credits.txttext
MD5:6A43259C07E4578B58A9129B52B2F15F
SHA256:F7ECE4C1A73E8AD280C42CF9CE77EA7FDEDF2F585A59B2246F50BAE8B171DE0A
2012driver-hub-install.exeC:\Users\admin\AppData\Local\Programs\DriverHub\DriverHubUninstaller.exeexecutable
MD5:04D1EAF7D303B838836CB79FE2C0B65F
SHA256:79295CA6859EFC1B5CBC822A93067F61A3B8364FCB0DADB31C04102EC4E9AB07
2012driver-hub-install.exeC:\Users\admin\AppData\Local\Programs\DriverHub\DILib.dllexecutable
MD5:1B46DDDE584CB25AF4A893927FD0DBC9
SHA256:38FE70E5775D5422951A4187958CDE07CCA28825C662078352392AD6A25F031F
2012driver-hub-install.exeC:\Users\admin\AppData\Local\Programs\DriverHub\DriverInstaller32.exeexecutable
MD5:914DED5E145527F6FA37EE8D38B7DED8
SHA256:32E35BF1AE587B0D0100D339CC2B9E45D3A4DDEB0D82099291F21BE5FEA2FE4B
2012driver-hub-install.exeC:\Users\admin\AppData\Local\Programs\DriverHub\DriverHub.exeexecutable
MD5:B306741D1E8855C538B84C227F2E10A7
SHA256:E7F65BF3A5280D12D80FE0C33D6F5A4DA6C1DB4F5DA4393488D6232B4BC06873
2012driver-hub-install.exeC:\Users\admin\AppData\Local\Programs\DriverHub\Images\DriverHubLogo.pngimage
MD5:451B153070269850DA133D4E493A1BD6
SHA256:91D221FE4045038100274A1A32F8155C0195517C51A712B1F742A4F5BBB45E4B
2012driver-hub-install.exeC:\Users\admin\AppData\Local\Programs\DriverHub\vcruntime140.dllexecutable
MD5:C33386A6E67BE415A24D9C431FFD42AC
SHA256:EB5B47CCEDDB4A45E059C1E1FCD2EFB016CB2BD9FE1FC0FD3F4C3C4CAB04153A
2012driver-hub-install.exeC:\Users\admin\AppData\Local\Programs\DriverHub\PDInterface.dllexecutable
MD5:A494C22140B8F20669EB8CCAE69492DF
SHA256:3B6410E49D39F0A8BB87B9DE50775ADF61704DEFAB8505AC47AED87A8807F408
2012driver-hub-install.exeC:\Users\admin\AppData\Local\Programs\DriverHub\x64\vcruntime140.dllexecutable
MD5:E9B690FBE5C4B96871214379659DD928
SHA256:A06C9EA4F815DAC75D2C99684D433FBFC782010FAE887837A03F085A29A217E8
2012driver-hub-install.exeC:\Users\admin\AppData\Local\Programs\DriverHub\x64\DriverInstaller.exeexecutable
MD5:37DAD55ED6487D7F5A5383441BC3A732
SHA256:A10B380501CA6DC55ECC20E0A6DA5A85EEDF1D8508442941EB5184D5C4E6E47F
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
29
TCP/UDP connections
11
DNS requests
4
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
2012
driver-hub-install.exe
HEAD
301
188.130.153.32:443
https://drvhub.net/products/free/download
RU
unknown
2012
driver-hub-install.exe
HEAD
200
188.130.153.32:443
https://www.drvhub.net/products/free/download
RU
unknown
2012
driver-hub-install.exe
GET
301
188.130.153.32:443
https://drvhub.net/products/free/download
RU
html
426 b
unknown
2012
driver-hub-install.exe
GET
301
188.130.153.32:443
https://drvhub.net/products/free/download
RU
html
426 b
unknown
2012
driver-hub-install.exe
GET
206
188.130.153.32:443
https://<NULL>/products/free/download
RU
binary
193 Kb
unknown
2012
driver-hub-install.exe
GET
206
188.130.153.32:443
https://<NULL>/products/free/download
RU
binary
193 Kb
unknown
2012
driver-hub-install.exe
GET
206
188.130.153.32:443
https://<NULL>/products/free/download
RU
binary
193 Kb
unknown
2012
driver-hub-install.exe
GET
301
188.130.153.32:443
https://drvhub.net/products/free/download
RU
html
426 b
unknown
2012
driver-hub-install.exe
GET
206
188.130.153.32:443
https://<NULL>/products/free/download
RU
binary
193 Kb
unknown
2012
driver-hub-install.exe
GET
301
188.130.153.32:443
https://drvhub.net/products/free/download
RU
html
426 b
unknown
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:137
Not routed
whitelisted
224.0.0.252:5355
whitelisted
4
System
192.168.100.255:138
Not routed
whitelisted
1092
svchost.exe
224.0.0.252:5355
whitelisted
2012
driver-hub-install.exe
188.130.153.32:443
api.az-partners.net
ROSTPAY-AS
RU
whitelisted

DNS requests

Domain
IP
Reputation
google.com
  • 142.251.20.113
  • 142.251.20.139
  • 142.251.20.100
  • 142.251.20.101
  • 142.251.20.102
  • 142.251.20.138
whitelisted
api.az-partners.net
  • 188.130.153.32
unknown
drvhub.net
  • 188.130.153.32
  • 188.130.153.33
whitelisted
www.drvhub.net
  • 188.130.153.32
  • 188.130.153.33
unknown

Threats

No threats detected
No debug info