File name:

Revo.Uninstaller.Pro.5.4.5.exe

Full analysis: https://app.any.run/tasks/66d9e450-95ad-4204-9a95-11d7a6c9f10a
Verdict: Malicious activity
Analysis date: January 18, 2026, 09:13:16
OS: Windows 10 Professional (build: 19044, 64 bit)
Tags:
auto-reg
inno
installer
delphi
Indicators:
MIME: application/vnd.microsoft.portable-executable
File info: PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections
MD5:

008417E0648B9A98896EE10E7F7FF9BF

SHA1:

CEE8094D7A2E067A98E4956455F221D898E9E1B4

SHA256:

E8FB926693054E29DE466E76CAC44A0B1EBDEE83A9A9D5090FDFCD91FFF7ACF2

SSDEEP:

196608:n+X3OCV094q76D0zdjnCYzUKbKU7e7RO+eTdqLzZXuETJ:n+X3OCV094q+U9nDfFC7RODTdqX3TJ

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Changes the autorun value in the registry

      • rundll32.exe (PID: 8104)

    • Registers / Runs the DLL via REGSVR32.EXE

      • Revo.Uninstaller.Pro.5.4.5.tmp (PID: 8020)

    • Executing a file with an untrusted certificate

      • ruplp.exe (PID: 1412)
      • RevoUninPro.exe (PID: 6172)
      • ruplp.exe (PID: 7236)
      • RevoUninPro.exe (PID: 1520)

  • SUSPICIOUS

    • Executable content was dropped or overwritten

      • Revo.Uninstaller.Pro.5.4.5.exe (PID: 7996)
      • Revo.Uninstaller.Pro.5.4.5.tmp (PID: 8020)
      • rundll32.exe (PID: 8104)

    • Process drops legitimate windows executable

      • Revo.Uninstaller.Pro.5.4.5.tmp (PID: 8020)

    • Reads the Windows owner or organization settings

      • Revo.Uninstaller.Pro.5.4.5.tmp (PID: 8020)

    • Drops a system driver (possible attempt to evade defenses)

      • Revo.Uninstaller.Pro.5.4.5.tmp (PID: 8020)
      • rundll32.exe (PID: 8104)

    • Uses RUNDLL32.EXE to load library

      • Revo.Uninstaller.Pro.5.4.5.tmp (PID: 8020)

    • Creates/Modifies COM task schedule object

      • regsvr32.exe (PID: 6080)

    • There is functionality for taking screenshot (YARA)

      • Revo.Uninstaller.Pro.5.4.5.tmp (PID: 8020)

    • Searches for installed software

      • Revo.Uninstaller.Pro.5.4.5.tmp (PID: 8020)
      • RevoUninPro.exe (PID: 1520)

    • Reads security settings of Internet Explorer

      • RevoUninPro.exe (PID: 1520)

  • INFO

    • Reads the computer name

      • Revo.Uninstaller.Pro.5.4.5.tmp (PID: 8020)
      • ruplp.exe (PID: 1412)
      • RevoUninPro.exe (PID: 6172)
      • ruplp.exe (PID: 7236)
      • RevoUninPro.exe (PID: 1520)

    • Create files in a temporary directory

      • Revo.Uninstaller.Pro.5.4.5.exe (PID: 7996)
      • Revo.Uninstaller.Pro.5.4.5.tmp (PID: 8020)

    • Checks supported languages

      • Revo.Uninstaller.Pro.5.4.5.exe (PID: 7996)
      • Revo.Uninstaller.Pro.5.4.5.tmp (PID: 8020)
      • ruplp.exe (PID: 1412)
      • RevoUninPro.exe (PID: 6172)
      • ruplp.exe (PID: 7236)
      • RevoUninPro.exe (PID: 1520)

    • The sample compiled with russian language support

      • Revo.Uninstaller.Pro.5.4.5.tmp (PID: 8020)

    • The sample compiled with english language support

      • Revo.Uninstaller.Pro.5.4.5.tmp (PID: 8020)
      • rundll32.exe (PID: 8104)

    • Reads Environment values

      • Revo.Uninstaller.Pro.5.4.5.tmp (PID: 8020)

    • Creates files in the program directory

      • Revo.Uninstaller.Pro.5.4.5.tmp (PID: 8020)

    • Drops script file

      • Revo.Uninstaller.Pro.5.4.5.tmp (PID: 8020)

    • Detects InnoSetup installer (YARA)

      • Revo.Uninstaller.Pro.5.4.5.exe (PID: 7996)
      • Revo.Uninstaller.Pro.5.4.5.tmp (PID: 8020)

    • Creates files in the driver directory

      • rundll32.exe (PID: 8104)

    • Creates a software uninstall entry

      • Revo.Uninstaller.Pro.5.4.5.tmp (PID: 8020)

    • Reads the time zone

      • runonce.exe (PID: 8140)

    • Reads security settings of Internet Explorer

      • runonce.exe (PID: 8140)

    • Launching a file from a Registry key

      • rundll32.exe (PID: 8104)

    • Process checks computer location settings

      • ruplp.exe (PID: 7236)

    • Reads the machine GUID from the registry

      • ruplp.exe (PID: 7236)

    • Manual execution by a user

      • cmd.exe (PID: 6392)

    • Compiled with Borland Delphi (YARA)

      • Revo.Uninstaller.Pro.5.4.5.tmp (PID: 8020)

    • Creates files or folders in the user directory

      • RevoUninPro.exe (PID: 1520)

    • Checks proxy server information

      • slui.exe (PID: 2460)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Inno Setup installer (77.7)
.exe | Win32 Executable Delphi generic (10)
.dll | Win32 Dynamic Link Library (generic) (4.6)
.exe | Win32 Executable (generic) (3.1)
.exe | Win16/32 Executable Delphi generic (1.4)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 1992:06:19 22:22:17+00:00
ImageFileCharacteristics: No relocs, Executable, No line numbers, No symbols, Bytes reversed lo, 32-bit, Bytes reversed hi
PEType: PE32
LinkerVersion: 2.25
CodeSize: 37888
InitializedDataSize: 34816
UninitializedDataSize: -
EntryPoint: 0x9c14
OSVersion: 1
ImageVersion: 6
SubsystemVersion: 4
Subsystem: Windows GUI
FileVersionNumber: 5.4.5.0
ProductVersionNumber: 5.4.5.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Win32
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Neutral
CharacterSet: Unicode
Comments: This installation was built with Inno Setup.
CompanyName: VS Revo Group
FileDescription: Revo Uninstaller Pro 5.4.5
FileVersion: 5.4.5
LegalCopyright: Copyright © 2025 VS Revo Group, Ltd.
ProductName: Revo Uninstaller Pro
ProductVersion: 5.4.5
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
151
Monitored processes
15
Malicious processes
2
Suspicious processes
5

Behavior graph

Click at the process to see the details
start revo.uninstaller.pro.5.4.5.exe revo.uninstaller.pro.5.4.5.tmp rundll32.exe runonce.exe no specs grpconv.exe no specs regsvr32.exe no specs ruplp.exe no specs revouninpro.exe no specs cmd.exe no specs conhost.exe no specs grpconv.exe no specs revouninpro.exe no specs ruplp.exe no specs slui.exe revo.uninstaller.pro.5.4.5.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
1412"C:\Program Files\VS Revo Group\Revo Uninstaller Pro\ruplp.exe" /regserver /NOREDIRECTC:\Program Files\VS Revo Group\Revo Uninstaller Pro\ruplp.exe—Revo.Uninstaller.Pro.5.4.5.tmp
User:
admin
Company:
Mirage Systems GmbH
Integrity Level:
HIGH
Description:
LicProtectorEXE
Exit code:
0
Version:
5.1.0.646
Modules
Images
c:\program files\vs revo group\revo uninstaller pro\ruplp.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\oleaut32.dll
1520"C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RevoUninPro.exe" /bcC:\Program Files\VS Revo Group\Revo Uninstaller Pro\RevoUninPro.exe—Revo.Uninstaller.Pro.5.4.5.tmp
User:
admin
Company:
VS Revo Group
Integrity Level:
HIGH
Description:
Revo Uninstaller Pro
Exit code:
0
Version:
5.4.5.0
Modules
Images
c:\program files\vs revo group\revo uninstaller pro\revouninpro.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\psapi.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
2460C:\WINDOWS\System32\slui.exe -EmbeddingC:\Windows\System32\slui.exe
svchost.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Activation Client
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\slui.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\user32.dll
5828grpconv -oC:\Windows\System32\grpconv.exe—cmd.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Progman Group Converter
Exit code:
1
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\grpconv.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\user32.dll
6080"regsvr32" "C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll" /sC:\Windows\System32\regsvr32.exe—Revo.Uninstaller.Pro.5.4.5.tmp
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Microsoft(C) Register Server
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\regsvr32.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\aclayers.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\user32.dll
c:\windows\system32\win32u.dll
c:\windows\system32\gdi32.dll
6172"C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RevoUninPro.exe"C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RevoUninPro.exe—Revo.Uninstaller.Pro.5.4.5.tmp
User:
admin
Company:
VS Revo Group
Integrity Level:
HIGH
Description:
Revo Uninstaller Pro
Version:
5.4.5.0
Modules
Images
c:\program files\vs revo group\revo uninstaller pro\revouninpro.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\psapi.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
6300\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1C:\Windows\System32\conhost.exe—cmd.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Console Window Host
Exit code:
0
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\conhost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcp_win.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\shcore.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\rpcrt4.dll
6392C:\Windows\System32\cmd.exe /c grpconv -oC:\Windows\System32\cmd.exe—explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Command Processor
Exit code:
1
Version:
10.0.19041.1 (WinBuild.160101.0800)
Modules
Images
c:\windows\system32\cmd.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\combase.dll
c:\windows\system32\ucrtbase.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\sechost.dll
c:\windows\system32\bcrypt.dll
7236C:\PROGRA~1\VSREVO~1\REVOUN~1\ruplp.exe -EmbeddingC:\Program Files\VS Revo Group\Revo Uninstaller Pro\ruplp.exe—svchost.exe
User:
admin
Company:
Mirage Systems GmbH
Integrity Level:
HIGH
Description:
LicProtectorEXE
Exit code:
0
Version:
5.1.0.646
Modules
Images
c:\program files\vs revo group\revo uninstaller pro\ruplp.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
c:\windows\system32\wow64.dll
c:\windows\system32\wow64win.dll
c:\windows\system32\wow64cpu.dll
c:\windows\syswow64\kernel32.dll
c:\windows\syswow64\kernelbase.dll
c:\windows\syswow64\apphelp.dll
c:\windows\syswow64\oleaut32.dll
7840"C:\Users\admin\Desktop\Revo.Uninstaller.Pro.5.4.5.exe" C:\Users\admin\Desktop\Revo.Uninstaller.Pro.5.4.5.exe—explorer.exe
User:
admin
Company:
VS Revo Group
Integrity Level:
MEDIUM
Description:
Revo Uninstaller Pro 5.4.5
Exit code:
3221226540
Version:
5.4.5
Modules
Images
c:\users\admin\desktop\revo.uninstaller.pro.5.4.5.exe
c:\windows\system32\ntdll.dll
c:\windows\syswow64\ntdll.dll
Total events
6 737
Read events
6 535
Write events
191
Delete events
11

Modification events

(PID) Process:(8020) Revo.Uninstaller.Pro.5.4.5.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FB562550-BBE6-4298-861A-5C0A6562C272}
Operation:writeName:InfoTip
Value:
Uninstall, Remove Programs, Clear Web Browsers Tracks, Control Automatically Started Applications
(PID) Process:(8020) Revo.Uninstaller.Pro.5.4.5.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FB562550-BBE6-4298-861A-5C0A6562C272}
Operation:writeName:{305CA226-D286-468e-B848-2B2E8E697B74} 2
Value:
8
(PID) Process:(8020) Revo.Uninstaller.Pro.5.4.5.tmpKey:HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FB562550-BBE6-4298-861A-5C0A6562C272}\ShellFolder
Operation:writeName:Attributes
Value:
48
(PID) Process:(8020) Revo.Uninstaller.Pro.5.4.5.tmpKey:HKEY_CURRENT_USER\SOFTWARE\VS Revo Group\Revo Uninstaller Pro\General
Operation:writeName:Aff
Value:
http://www.revouninstallerpro.com/revo_uninstaller_buy_now_btn.html
(PID) Process:(8020) Revo.Uninstaller.Pro.5.4.5.tmpKey:HKEY_CURRENT_USER\SOFTWARE\VS Revo Group\Revo Uninstaller Pro\General
Operation:writeName:Anchor
Value:
www.revouninstallerpro.com
(PID) Process:(8020) Revo.Uninstaller.Pro.5.4.5.tmpKey:HKEY_CURRENT_USER\SOFTWARE\VS Revo Group\Revo Uninstaller Pro\General
Operation:writeName:AffHome
Value:
http://www.revouninstallerpro.com
(PID) Process:(8020) Revo.Uninstaller.Pro.5.4.5.tmpKey:HKEY_CURRENT_USER\SOFTWARE\VS Revo Group\Revo Uninstaller Pro\General
Operation:writeName:LDBURL
Value:
http://www.revouninstallerpro.com/db/ilogs/
(PID) Process:(8020) Revo.Uninstaller.Pro.5.4.5.tmpKey:HKEY_CURRENT_USER\SOFTWARE\VS Revo Group\Revo Uninstaller Pro\General
Operation:writeName:WebLang
Value:
RUS
(PID) Process:(8020) Revo.Uninstaller.Pro.5.4.5.tmpKey:HKEY_CURRENT_USER\SOFTWARE\VS Revo Group\Revo Uninstaller Pro\General
Operation:writeName:Language file
Value:
russian.ini
(PID) Process:(8020) Revo.Uninstaller.Pro.5.4.5.tmpKey:HKEY_CURRENT_USER\SOFTWARE\VS Revo Group\Revo Uninstaller Pro\General
Operation:writeName:AU on startup
Value:
0
Executable files
26
Suspicious files
13
Text files
101
Unknown types
0

Dropped files

PID
Process
Filename
Type
8020Revo.Uninstaller.Pro.5.4.5.tmpC:\Users\admin\AppData\Local\Temp\is-TLA8V.tmp\_isetup\_setup64.tmpexecutable
MD5:4FF75F505FDDCC6A9AE62216446205D9
SHA256:A4C86FC4836AC728D7BD96E7915090FD59521A9E74F1D06EF8E5A47C8695FD81
8020Revo.Uninstaller.Pro.5.4.5.tmpC:\Users\admin\AppData\Local\Temp\is-TLA8V.tmp\eng.pngimage
MD5:86BEE4A15A777E236F1636B57A37B047
SHA256:17E6F0E88A231E25C1DE67A0D4AE308284F407DEA77FF8B3CE363B770C5BA8F1
8020Revo.Uninstaller.Pro.5.4.5.tmpC:\Users\admin\AppData\Local\Temp\is-TLA8V.tmp\botva2.dllexecutable
MD5:67965A5957A61867D661F05AE1F4773E
SHA256:450B9B0BA25BF068AFBC2B23D252585A19E282939BF38326384EA9112DFD0105
7996Revo.Uninstaller.Pro.5.4.5.exeC:\Users\admin\AppData\Local\Temp\is-00DPG.tmp\Revo.Uninstaller.Pro.5.4.5.tmpexecutable
MD5:CE14F23D9BFC00A3CC5CEB06A25030E7
SHA256:5BD02D57433581EFC6E14F6AEFA4D1B5A52051F2CA269BDE439B50658FA0BC39
8020Revo.Uninstaller.Pro.5.4.5.tmpC:\Users\admin\AppData\Local\Temp\is-TLA8V.tmp\_isetup\_shfoldr.dllexecutable
MD5:92DC6EF532FBB4A5C3201469A5B5EB63
SHA256:9884E9D1B4F8A873CCBD81F8AD0AE257776D2348D027D811A56475E028360D87
8020Revo.Uninstaller.Pro.5.4.5.tmpC:\Users\admin\AppData\Local\Temp\is-TLA8V.tmp\_isetup\_RegDLL.tmpexecutable
MD5:0EE914C6F0BB93996C75941E1AD629C6
SHA256:4DC09BAC0613590F1FAC8771D18AF5BE25A1E1CB8FDBF4031AA364F3057E74A2
8020Revo.Uninstaller.Pro.5.4.5.tmpC:\Users\admin\AppData\Local\Temp\is-TLA8V.tmp\iswin7logo.dllexecutable
MD5:1EA948AAD25DDD347D9B80BEF6DF9779
SHA256:30EB67BDD71D3A359819A72990029269672D52F597A2D1084D838CAAE91A6488
8020Revo.Uninstaller.Pro.5.4.5.tmpC:\Users\admin\AppData\Local\Temp\is-TLA8V.tmp\b2p.dllexecutable
MD5:AB35386487B343E3E82DBD2671FF9DAB
SHA256:C3729545522FCFF70DB61046C0EFD962DF047D40E3B5CCD2272866540FC872B2
8020Revo.Uninstaller.Pro.5.4.5.tmpC:\Users\admin\AppData\Local\Temp\is-TLA8V.tmp\Installer.pngimage
MD5:48F30E9B874607F974A289C4B9366EAC
SHA256:36FC3878D46BB626808D005D048B06E047F099EA55E06630E5CA3F770E9D2001
8020Revo.Uninstaller.Pro.5.4.5.tmpC:\Users\admin\AppData\Local\Temp\is-TLA8V.tmp\Server.pngimage
MD5:E5064949166150E855113E66DF1ABC38
SHA256:E73CF0CE497BAF7D5B8180143B91A2F42DE1D87480CF3F38271F0F2F97AA4080
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
4
TCP/UDP connections
17
DNS requests
5
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
—
—
POST
—
48.192.1.65:443
https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail
unknown
—
—
unknown
5592
slui.exe
POST
502
48.192.1.65:443
https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail
unknown
html
205 b
whitelisted
—
—
POST
—
48.192.1.64:443
https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail
unknown
—
—
unknown
2460
slui.exe
POST
502
48.192.1.64:443
https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail
unknown
html
205 b
whitelisted
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
—
—
51.104.136.2:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
whitelisted
4
System
192.168.100.255:137
—
Not routed
—
whitelisted
4
System
192.168.100.255:138
—
Not routed
—
whitelisted
5592
slui.exe
48.192.1.65:443
activation-v2.sls.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
whitelisted
2460
slui.exe
48.192.1.64:443
activation-v2.sls.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
US
whitelisted

DNS requests

Domain
IP
Reputation
google.com
  • 142.250.184.206
whitelisted
settings-win.data.microsoft.com
  • 51.104.136.2
whitelisted
self.events.data.microsoft.com
  • 20.50.201.205
whitelisted
activation-v2.sls.microsoft.com
  • 48.192.1.65
  • 48.192.1.64
whitelisted

Threats

No threats detected
No debug info
Interactive malware hunting service ANY.RUN
© 2017-2026 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
Revo.Uninstaller.Pro.5.4.5.exe