Report - download.revouninstaller.com/download/RevoUninstaller

Report Overview

Submitted URL
download.revouninstaller.com/download/RevoUninstaller_Portable.zip
IP
23.46.116.52
ASN
#16625 AKAMAI-AS
Submitted
2024-03-28 12:33:14
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
download.revouninstaller.com	unknown	2007-05-30	2021-06-26	2024-03-25	520 B	9.0 MB	23.46.116.52

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
download.revouninstaller.com/download/RevoUninstaller_Portable.zip
IP
23.46.116.52
ASN
#16625 AKAMAI-AS

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
9.0 MB (9033217 bytes)
Hash
5178aeba4f6df6d3286db3279ea5ea42
2ae1e2b7715ee5558cac80118a8bef638348055d
fd8b2fb37d0f146fef98dd7b6079fe40a4e04879e247f4a37ef12443ccf6c2b3

Archive (52)

Filename

Md5

File type

albanian.ini

cd86d5df4564a5d91934b3383a2b342e

Unicode text, UTF-16, little-endian text, with very long lines (601), with CRLF line terminators

arabic.ini

c75676d808ed8d88add598cc51f79769

Unicode text, UTF-16, little-endian text, with very long lines (437), with CRLF line terminators

armenian.ini

c2e52abf76949ac22c6a1065b6b31c26

Unicode text, UTF-16, little-endian text, with very long lines (638), with CRLF line terminators

azerbaijani.ini

2952ebfb627a4e0eca6ae36179fb77e8

Unicode text, UTF-16, little-endian text, with very long lines (562), with CRLF line terminators

bengali.ini

966c8eca86f43a502d9836709ed34d6e

Unicode text, UTF-16, little-endian text, with very long lines (739), with CRLF line terminators

bulgarian.ini

29c6fa77caff22cebef89fe7cbb7e564

Unicode text, UTF-16, little-endian text, with very long lines (705), with CRLF line terminators

czech.ini

edf65aa9e3901e57e6290c53d9b18f19

Unicode text, UTF-16, little-endian text, with very long lines (668), with CRLF line terminators

danish.ini

b460a1121bdb6806e308212eb9f63f8f

Unicode text, UTF-16, little-endian text, with very long lines (431), with CRLF line terminators

dutch.ini

484aab4e4a291b4c2f2d1718b3754d2b

Unicode text, UTF-16, little-endian text, with very long lines (782), with CRLF line terminators

english.ini

5f57e969cb8f3ad0bbd859207a283bd5

Unicode text, UTF-16, little-endian text, with very long lines (662), with CRLF line terminators

Estonian.ini

fb4844267d83de0565c5ab8d8475605f

Unicode text, UTF-16, little-endian text, with very long lines (602), with CRLF line terminators

finnish.ini

a3d974340201c1d00af3a87f4d3da6dc

Unicode text, UTF-16, little-endian text, with very long lines (552), with CRLF line terminators

french.ini

267bce0c687901ef0c9b94853164ff22

Unicode text, UTF-16, little-endian text, with very long lines (653), with CRLF line terminators

georgian.ini

198f4e61dfcef0808b8ede2acbc2b5a0

Unicode text, UTF-16, little-endian text, with very long lines (662), with CRLF line terminators

german.ini

00155578b98e07fc6288870e2aecca68

Unicode text, UTF-16, little-endian text, with very long lines (896), with CRLF line terminators

gujarati.ini

a6a6db6e56550d0b4cf20c1786c7cb63

Unicode text, UTF-16, little-endian text, with very long lines (758), with CRLF line terminators

hebrew.ini

9d97e4da88f7417381e9271b2a5facc0

Unicode text, UTF-16, little-endian text, with very long lines (400), with CRLF line terminators

hellenic.ini

2750a46c066ce37250be338d2d4b2c28

Unicode text, UTF-16, little-endian text, with very long lines (868), with CRLF line terminators

hindi.ini

b60047b3d741996398758836ef7c27b5

Unicode text, UTF-16, little-endian text, with very long lines (754), with CRLF line terminators

hrvatski.ini

feb1e88105e492fcbdd1d6db74e0e1ea

Unicode text, UTF-16, little-endian text, with very long lines (596), with CRLF line terminators

hungarian.ini

4d5eb6e082cd530f5594d290bbefdbf9

Unicode text, UTF-16, little-endian text, with very long lines (671), with CRLF line terminators

indonesian.ini

07982ec44c81b46e79709aa7c9d6d75d

Unicode text, UTF-16, little-endian text, with very long lines (713), with CRLF line terminators

italiano.ini

b1130b82af1277725d411840c0173265

Unicode text, UTF-16, little-endian text, with very long lines (787), with CRLF, CR line terminators

japanese.ini

c4744120a026563103b7cff0bb71bd6b

Unicode text, UTF-16, little-endian text, with very long lines (397), with CRLF line terminators

korean.ini

f94e17a85fb506876093c080337abbd8

Unicode text, UTF-16, little-endian text, with very long lines (400), with CRLF line terminators

kurdish.ini

01b3acb4ee074bdf8994cc6ad6e3d052

Unicode text, UTF-16, little-endian text, with very long lines (531), with CRLF line terminators

macedonian.ini

0d49fd507c10e50977b85b4e16e5642a

Unicode text, UTF-16, little-endian text, with very long lines (480), with CRLF line terminators

norwegian.ini

3e633737f96d30604cac348f7c0ca5d3

Unicode text, UTF-16, little-endian text, with very long lines (435), with CRLF line terminators

persian.ini

2624ebd91ec84714395d1c1bb989a14b

Unicode text, UTF-16, little-endian text, with very long lines (1970), with CRLF line terminators

polish.ini

3a9fe274b3ea866821486db9b5540682

Unicode text, UTF-16, little-endian text, with very long lines (512), with CRLF line terminators

portuguese.ini

b941e859828cefedb42df1a4781aab8b

Unicode text, UTF-16, little-endian text, with very long lines (768), with CRLF line terminators

portuguesebrazil.ini

a7e3aca49f123ca55f3c16d3471b097f

Unicode text, UTF-16, little-endian text, with very long lines (707), with CRLF line terminators

portuguese_standard.ini

2be6dfda140d556c60980c83958da5c2

Unicode text, UTF-16, little-endian text, with very long lines (768), with CRLF line terminators

romanian.ini

9f0ec5c7dc7d8e14dd0ed2e590e8326a

Unicode text, UTF-16, little-endian text, with very long lines (742), with CRLF line terminators

russian.ini

bda9820021c13cb5f7653d3cf5567a63

Unicode text, UTF-16, little-endian text, with very long lines (488), with CRLF line terminators

serbian.ini

604ce883fd5e8100f69303f172790f5d

Unicode text, UTF-16, little-endian text, with very long lines (436), with CRLF line terminators

serbianLatin.ini

0370a43b65f652b883ef7fb20bfbb017

Unicode text, UTF-16, little-endian text, with very long lines (446), with CRLF line terminators

simplifiedchinese.ini

e28499f183fe96f8e42d383630d3ecaf

data

slovak.ini

32082a6864e2ba727dbaae26c494f281

Unicode text, UTF-16, little-endian text, with very long lines (510), with CRLF line terminators

slovenian.ini

f66c35e147b4ba36b84828f558724fc7

Unicode text, UTF-16, little-endian text, with very long lines (675), with CRLF line terminators

spanish.ini

77fc775f98a986cabaa1ef592df4681e

Unicode text, UTF-16, little-endian text, with very long lines (628), with CRLF line terminators

swedish.ini

9d4d0f41350759f705360e889c0ef5e1

Unicode text, UTF-16, little-endian text, with very long lines (774), with CRLF line terminators

thai.ini

7262c82a010789707fcddad58eea61bb

Unicode text, UTF-16, little-endian text, with very long lines (579), with CRLF line terminators

traditionalchinese.ini

1741f9b110af33284f55ab79b1c021cc

Unicode text, UTF-16, little-endian text, with CRLF line terminators

turkish.ini

bb7c613587724040db123308d4a62fdf

Unicode text, UTF-16, little-endian text, with very long lines (550), with CRLF line terminators

ukrainian.ini

83d527fe61a3cec460137d696af7465f

Unicode text, UTF-16, little-endian text, with very long lines (657), with CRLF line terminators

vietnamese.ini

7b07ab2945c9171164a749833beeea7b

Unicode text, UTF-16, little-endian text, with very long lines (722), with CRLF line terminators

LicenseAgreement.txt

13d3876c402174dcd9239c60f559fa7d

Unicode text, UTF-16, little-endian text, with very long lines (497), with CRLF line terminators

Revo Uninstaller Help.pdf

7c770b8371e21ba771f108549941b063

PDF document, version 1.7, 34 pages

RevoUPort.exe

2f814a927d097a09911111dbf0fc2e93

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

RevoUn.exe

dcf9c35c8dcfb6e4d90bfe97ac1a2b92

PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

RevoUn.exe

15657f176a5eea4c0f943da107962d24

PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_stackstrings
VirusTotal	suspicious	VirusTotal - Scan result 1/66

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

download.revouninstaller.com/download/RevoUninstaller_Portable.zip

23.46.116.52

200 OK

9.0 MB

URL User Request GET HTTP/2
download.revouninstaller.com/download/RevoUninstaller_Portable.zip
IP
23.46.116.52:443
ASN
#16625 AKAMAI-AS

Certificate
IssuerLet's Encrypt
Subjectsecured2.san1.raxcdn.com
Fingerprint81:A5:A1:04:2E:46:FE:5A:FB:30:99:44:91:70:F0:A6:A7:3B:BF:62
ValidityWed, 20 Mar 2024 13:54:29 GMT - Tue, 18 Jun 2024 13:54:28 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
9.0 MB (9033217 bytes)
Hash
5178aeba4f6df6d3286db3279ea5ea42
2ae1e2b7715ee5558cac80118a8bef638348055d
fd8b2fb37d0f146fef98dd7b6079fe40a4e04879e247f4a37ef12443ccf6c2b3

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/66

HTTP Headers

GET /download/RevoUninstaller_Portable.zip HTTP/1.1
Host: download.revouninstaller.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Tue, 06 Jun 2023 07:55:51 GMT
etag: "89d601-5fd7159172bb8"
server: XYZ
x-frame-options: SAMEORIGIN
permissions-policy: interest-cohort=()
referrer-policy: no-referrer, strict-origin-when-cross-origin
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubdomains
accept-ranges: bytes
content-length: 9033217
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self';
x-permitted-cross-domain-policies: none
content-type: application/zip
cache-control: max-age=80393
expires: Fri, 29 Mar 2024 10:52:35 GMT
date: Thu, 28 Mar 2024 12:32:42 GMT
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (52)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers