b61c15d6926238656afcfc2a819223cc61d89a9316c40e85edf033db789bd7fe

Login
Reports

Overview

overview

Static

static

Revo.Unins...le.cmd

windows10-2004-x64

Revo.Unins...le.cmd

windows11-21h2-x64

Revo.Unins....5.exe

windows10-2004-x64

Revo.Unins....5.exe

windows11-21h2-x64

$EXEDIR/Re...xt.dll

windows10-2004-x64

$EXEDIR/Re...xt.dll

windows11-21h2-x64

$EXEDIR/Re...re.cmd

windows10-2004-x64

$EXEDIR/Re...re.cmd

windows11-21h2-x64

$EXEDIR/Re...ar.exe

windows10-2004-x64

$EXEDIR/Re...ar.exe

windows11-21h2-x64

$EXEDIR/Re...md.exe

windows10-2004-x64

$EXEDIR/Re...md.exe

windows11-21h2-x64

$EXEDIR/Re...rp.exe

windows10-2004-x64

$EXEDIR/Re...rp.exe

windows11-21h2-x64

$EXEDIR/Re...ro.exe

windows10-2004-x64

$EXEDIR/Re...ro.exe

windows11-21h2-x64

$EXEDIR/Re...lt.sys

windows10-2004-x64

$EXEDIR/Re...lt.sys

windows11-21h2-x64

$EXEDIR/Re...lt.sys

windows10-2004-x64

$EXEDIR/Re...lt.sys

windows10-2004-x64

$EXEDIR/Re...re.cmd

windows10-2004-x64

$EXEDIR/Re...re.cmd

windows11-21h2-x64

$PLUGINSDIR/INetC.dll

windows10-2004-x64

$PLUGINSDIR/INetC.dll

windows11-21h2-x64

$PLUGINSDI...em.dll

windows10-2004-x64

$PLUGINSDI...em.dll

windows11-21h2-x64

$PLUGINSDI...ec.dll

windows10-2004-x64

$PLUGINSDI...ec.dll

windows11-21h2-x64

$PLUGINSDI...ss.dll

windows10-2004-x64

$PLUGINSDI...ss.dll

windows11-21h2-x64

RUExt.dll

windows10-2004-x64

RUExt.dll

windows11-21h2-x64

Analysis

max time kernel
149s
max time network
152s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
29/04/2026, 10:06

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Revo.Uninstaller.Pro.v5.4.5/Crear_portable.cmd

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral2

Sample

Revo.Uninstaller.Pro.v5.4.5/Crear_portable.cmd

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral3

Sample

Revo.Uninstaller.Pro.v5.4.5/Revo.Uninstaller.Pro.v5.4.5.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

17 signatures

150 seconds

discovery persistence privilege_escalation

Behavioral task

behavioral4

Sample

Revo.Uninstaller.Pro.v5.4.5/Revo.Uninstaller.Pro.v5.4.5.exe

Resource

win11-20260130-en

windows11-21h2-x64

16 signatures

150 seconds

discovery persistence privilege_escalation

Behavioral task

behavioral5

Sample

$EXEDIR/RevoUninstallerProPortable/x64/RUExt.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

persistence privilege_escalation

Behavioral task

behavioral6

Sample

$EXEDIR/RevoUninstallerProPortable/x64/RUExt.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

persistence privilege_escalation

Behavioral task

behavioral7

Sample

$EXEDIR/RevoUninstallerProPortable/x64/RUPPrestore.cmd

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

$EXEDIR/RevoUninstallerProPortable/x64/RUPPrestore.cmd

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

$EXEDIR/RevoUninstallerProPortable/x64/RevoAppBar.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$EXEDIR/RevoUninstallerProPortable/x64/RevoAppBar.exe

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$EXEDIR/RevoUninstallerProPortable/x64/RevoCmd.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

discovery

Behavioral task

behavioral12

Sample

$EXEDIR/RevoUninstallerProPortable/x64/RevoCmd.exe

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

discovery

Behavioral task

behavioral13

Sample

$EXEDIR/RevoUninstallerProPortable/x64/RevoSrp.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

$EXEDIR/RevoUninstallerProPortable/x64/RevoSrp.exe

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

$EXEDIR/RevoUninstallerProPortable/x64/RevoUnPro.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

4 signatures

150 seconds

discovery persistence

Behavioral task

behavioral16

Sample

$EXEDIR/RevoUninstallerProPortable/x64/RevoUnPro.exe

Resource

win11-20260130-en

windows11-21h2-x64

4 signatures

150 seconds

discovery persistence

Behavioral task

behavioral17

Sample

$EXEDIR/RevoUninstallerProPortable/x64/Vista/revoflt.sys

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

$EXEDIR/RevoUninstallerProPortable/x64/Vista/revoflt.sys

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

$EXEDIR/RevoUninstallerProPortable/x64/Win10/revoflt.sys

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

$EXEDIR/RevoUninstallerProPortable/x64/revoflt.sys

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

$EXEDIR/RevoUninstallerProPortable/x86/RUPPrestore.cmd

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

$EXEDIR/RevoUninstallerProPortable/x86/RUPPrestore.cmd

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

$PLUGINSDIR/INetC.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral24

Sample

$PLUGINSDIR/INetC.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral25

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral26

Sample

$PLUGINSDIR/System.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral27

Sample

$PLUGINSDIR/nsExec.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral28

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral29

Sample

$PLUGINSDIR/nsProcess.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral30

Sample

$PLUGINSDIR/nsProcess.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral31

Sample

RUExt.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

persistence privilege_escalation

Behavioral task

behavioral32

Sample

RUExt.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

persistence privilege_escalation

Report Analysis Logs

General

Target
$EXEDIR/RevoUninstallerProPortable/x64/RUPPrestore.cmd
Size 4KB
Sample260429-l4869aev9k
SHA256 b61c15d6926238656afcfc2a819223cc61d89a9316c40e85edf033db789bd7fe
MD5 23c9fa1f20916f006c3bed76d62d965d
SHA1 23c4d4ec3b1d01355458c8ea74fdf4b516659326
SHA512 738e10fcaf659cba93167a2e83eb822fbd35011d92311d1b1688d8f4c481d8676d0ae322086ed254108236425e13511c3cddc2a88cdd003f1fd0976ed4c1ce3d
SSDEEP 96:vFro3r0Y28YA6VFTiy15ggMfb0XP6odMfP0ZSb7WSsHPiBOsHP0KWZ3ofnW+0:vh2RZYAggg0MJ0f7aaFl/S
TLSH
T1DCA12269A24C2D7AC5923E6976F406F2113FD6703D36104ABC6C689CBB4239942F45CF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\$EXEDIR\RevoUninstallerProPortable\x64\RUPPrestore.cmd"
1⤵
PID:2332

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads