home

pci_filerecovery.exe

InstallShield

InstallShield Software Corporation

The program is a setup application that uses the InstallShield Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
InstallShield Software Corporation

Product:
InstallShield (R)

Description:
InstallShield (R) Setup Launcher

Version:
7, 01, 100, 1248

MD5:
523124817377308b91180fb5cd50ad94

SHA-1:
87fd9edf8f3ce2de7cffc4edbd0a954def0fbec0

SHA-256:
bc32ec3f42c1d48fec5f2320d7e9fb026cac68a40fc573c73f731735a8653d96

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 6:56:33 AM UTC  (today)

File size:
5.8 MB (6,113,439 bytes)

Product version:
7, 01

Copyright:
Copyright (C) 1990-2002 InstallShield Software Corporation

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\pci_filerecovery.exe

File PE Metadata
Compilation timestamp:
12/3/2002 5:31:43 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:8dFaBf4Piqw2jhP+pwN6YJxbAj9dXcivxNtzwXjc8WtBaVOmK9dWLm8iPyfCzATR:8dUh4PopwN6YzUj957Cc5sE2m8iS6ATR

Entry address:
0xB1CC

Entry point:
55, 8B, EC, 83, EC, 44, 56, FF, 15, 44, 01, 41, 00, 8B, F0, 85, F6, 75, 08, 6A, FF, FF, 15, 40, 01, 41, 00, 8A, 06, 57, 8B, 3D, 08, 02, 41, 00, 3C, 22, 75, 1B, 56, FF, D7, 8B, F0, 8A, 06, 3C, 22, 74, 04, 84, C0, 75, F1, 80, 3E, 22, 75, 15, 56, FF, D7, 8B, F0, EB, 0E, 3C, 20, 7E, 0A, 56, FF, D7, 8B, F0, 80, 3E, 20, 7F, F6, 8A, 06, 84, C0, 74, 04, 3C, 20, 7E, E1, 83, 65, E8, 00, 8D, 45, BC, 50, FF, 15, 3C, 01, 41, 00, F6, 45, E8, 01, 5F, 74, 06, 0F, B7, 45, EC, EB, 03, 6A, 0A, 58, 50, 56, 6A, 00, 6A, 00, FF...
 
[+]

Entropy:
7.9305

Packer / compiler:
InstallShield Custom

Code size:
57.5 KB (58,880 bytes)

The file pci_filerecovery.exe has been discovered within the following program.

PC Inspector File Recovery  by CONVAR EUROPE Ltd
Publisher's description - “PC INSPECTOR™ File Recovery 4.x is a data recovery program that supports the FAT 12/16/32 and NTFS file systems. Finds partitions automatically, even if the boot sector or FAT has been erased or damaged.”
www.pcinspector.de
19% remove it
 
Powered by Should I Remove It?

The file pci_filerecovery.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/87f/d9e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=23166&instance=softonic_it&type=PROGRAM&Expires=1433370715&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=KRfU7CCrMUZBXB-TyvLCOXbMNm~LcGWDFVTyMIArihFiK4M2PkU9H8acNCzTmU5sM9fRQHBl5OnguOrW5j0h3~fs5EvzTB6lTVVdSixhlFtm3i3Hbs6TBrlGjdFQ3e~Y2VYMoSveVNTe4HvPlSkjD7NsFEHek6hfol7L9tTvQ4U_&filename=pci_filerecovery.exe

http://filehippo.com/download/file/.../

http://gsf-cf.softonic.com/87f/d9e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=23166&instance=softonic_es&type=PROGRAM&Expires=1443703788&Signature=OsJZmm27Gi~n7Q40MWn~8luTWPxDEhZfZY7ZOUAyAzfKgj925OsjZjgpiTwe-z278PydjfRhb2XNzsQ6q4drZYH7P2mwoRjC22XaNJH2b6gH6dQj2JZ334geiKj155DKkNS4D4sy8RIF3Maw-yoZFW3fonbowtDVQB~hACqVshk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pci_filerecovery.exe

http://gsf-cf.softonic.com/87f/d9e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=23166&instance=softonic_br&type=PROGRAM&Expires=1481597859&Signature=H9MSUjtws-qT4zSRfy0R9p0vcGEzuKMlnVOBU5ZceFzHlkpxsYkHPfqL4UTCgfqbt45hhkxpvUQjIzQGNFOGLTYVKDNF4qwdcstKY4Ghdf4ZZOsRL0z7e5hKp92Zj~jNIKRnbPAZfVXijBDJuvkoDZK6VsxzIPmSXRGgdwECw-4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pci_filerecovery.exe

http://filehippo.com/download/file/.../

http://gsf-cf.softonic.com/87f/d9e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=23166&instance=softonic_fr&type=PROGRAM&Expires=1488104073&Signature=a5RlApgcAizdwA3c0ehIKN0Uzm2IExh0Mf5sAjVPvqDPdaiQEX6Ay9MUcRcK6uQs07NF1jY01iwBq9P7gTlh-TUgqCplmB2m2k5s0xujVOEpQuvR72sFcsU~tJi~fxCjmFFBWvNsxaq-~2I6ZRGPIpk64L-FWKrccllYMFFKlYg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pci_filerecovery.exe

http://gsf-cf.softonic.com/87f/d9e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=23166&instance=softonic_es&type=PROGRAM&Expires=1481952064&Signature=cExxRDk9qgmxUiDtZmy9QzC85H7GXqUt0KjO4PcJAaNZASK0UQOh6MCQAwmMaXBmMKDKW9mJd1Fa8-XWPtRc1Mj5df3dF3q~gXNANknsrvBs3RZvf9~DWo2JE-7diWRcsFXY3DYBlO2lF4W5Hv22Wdo~HI1isiaivzHRwgC4nGg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pci_filerecovery.exe

http://d210.cdn.m6web.fr/soft/.../pc-inspector_pc_inspector_4.0_francais_11048.exe

http://filehippo.com/download/file/.../

http://gsf-cf.softonic.com/87f/d9e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=23166&instance=softonic_es&type=PROGRAM&Expires=1475796492&Signature=iWGjcxbgDZ-haRhSsTV4KmZILbUDREg2AygHGaTmGzs7Hg1Lq6E5SR11Cd2vA0VOsyBT~qPrZ5OY6TLo3kwjP7h9cOIbYyVagQ0xCED15~sXWDU2~ibW6R3hIq1AmV0jNWi3EeXDy9wmdDaB7yTozryypNIX8cDLWomkWlZNWgw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pci_filerecovery.exe

http://gsf-cf.softonic.com/87f/d9e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=23166&instance=softonic_it&type=PROGRAM&Expires=1471893279&Signature=XO0NpEGqF69hc3qc5lCuui-yfqbild~FY2~qxpRfsa~a6zXDqEcOKG6Y96SsfQnbzJhVDxqaX68xHNJ8qbaBNgh9QnttTOCm27QImXcxL~SLzPuwveeg355WVqnybiIPQJe6fz9nhTmBbh50-657HCA~TFi-ViURxKamFtv7w6c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pci_filerecovery.exe

http://gsf-cf.softonic.com/87f/d9e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=23166&instance=softonic_es&type=PROGRAM&Expires=1476939731&Signature=QzqOrjwgrLoxr6iEa3yqK7Dul9wK-PAA9BYQjldbNpgA9rlR1qwKIEYWsyRXfrzVQ3Djp-gGL0c7U~R39bH-zXL1hGuoxLqr14nEPk0Iagpnbvkw-1s1f~g9Xv~4sQniZzgznPVRGmT1cijfISreGa-HGaRi0QFVNSURiK-yJrU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pci_filerecovery.exe

http://filehippo.com/download/file/.../

http://gsf-cf.softonic.com/87f/d9e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=23166&instance=softonic_es&type=PROGRAM&Expires=1472384490&Signature=KkuXHs0eo8qYtmM8X5fuPVUfNrZhRaAwEDZlsxssdXgg89Hdqevs7ogi1rWqqpnYZQ3GbXjuWI-nbOftz3c7ibZYVDEhrKmqh~xxiEcH~IdMfungLvPNobDz3rcj-QjxeS4RO04lP8mImdfLHBLhOo9PuM0p6UzC8MAsuRsMuok_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pci_filerecovery.exe

http://gsf-cf.softonic.com/87f/d9e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=23166&instance=softonic_es&type=PROGRAM&Expires=1481198462&Signature=JElHd3cQwPEGCzmUki-O1H1mzJ7eDRGSkgg1p918UEGfGTjI6ZRTXXGPiH2FK2EetcX~fKYcKNJR~uTQLFd3J-hbanZ4RUy8vcWtq0GnxVTBHCSgxfQzvbPMUyJKuovlylMNDHyHih7XM73Yh7MmYIacUOwaAVBA7YcmOyo2Alo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pci_filerecovery.exe

http://gsf-cf.softonic.com/87f/d9e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=23166&instance=softonic_br&type=PROGRAM&Expires=1483671730&Signature=SwjCf~IsRzQsU9aqAWVUhxHtbhht1cMYMbRO7GhWH1FILRDJdCjIx09pimqIc-i5dcCbEpRzXjTnom6dwg5tCkbu5HrvMmE2-LG7yCzet8P9ZnslAoatF6cO-Ti-vwzxOLKF9O1OIR9n4oOH4m083L8POOX09YaW5hSyJtDn3aE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pci_filerecovery.exe

http://filehippo.com/download/file/.../

http://gsf-cf.softonic.com/87f/d9e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=23166&instance=softonic_br&type=PROGRAM&Expires=1476357150&Signature=DGez8Ya39KLjLwwUCFTwKDnoChVecnIffYYFVbgg5V8erfrZNeMHkEJpufdxWK-SE78qWi8aZe2NEqK4XCyPJg8BNuuRT3~C6nVeDNQ7TBtwPm-K24~5KS~xUDIvk-gCnkusE9k248uQWl5LdL9h61xAWDaFYY2Df4FB~Cj1dII_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pci_filerecovery.exe

http://gsf-cf.softonic.com/87f/d9e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=23166&instance=softonic_br&type=PROGRAM&Expires=1452164319&Signature=YC17WO1VTkOxRMBEeQYr~2CEynaLUgAgpWtovW7L~hMsN7G5dvcAXh3hb31Lqz~XM60ucb6AIjYJlJXonJVxQGf6M8wOz5dr~Hpwjrx6rjhhitJAPNjeEkIs7fJrYmw2QvENuN-wjZdjMuz~Wj7iSiRHjgTWseq~oh1zXOnmJ~0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pci_filerecovery.exe

http://gsf-cf.softonic.com/87f/d9e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=23166&instance=softonic_es&type=PROGRAM&Expires=1472732436&Signature=b3dKpc-6G~b1XsdsK1s4DxpPEKAr8Vqp13VhHSo6Mh4~KXvnQ36dKrS~obocY5tiwsa29WFNhP5wCHLc2IhHGWPwq9oDaUQojLdfnlIz1Iai3ZY7Qj01kFM6L69lsAZ-pVpMFutpwCCTAvoBLoNN9FKKvbBVYx555V0m5W~dX2U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pci_filerecovery.exe

http://download1945.mediafire.com/1h2npso162wg/.../pci_filerecovery.exe

http://filehippo.com/download/file/.../

http://gsf-cf.softonic.com/87f/d9e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=23166&instance=softonic_es&type=PROGRAM&Expires=1478317177&Signature=Z~f-4D6uEhup0ZnO8mEJQXcy3IxLo6l~LRhdy-NxhHyU6b8u-pXjkvv7Kk8KUpmtJSOjrFvBMyF8K9TN8zZiCPQwmkIPTS~fOuKLyD61NJoy344L3xhE1eHmnpWQpEJm2Zj-9esRoiusjo5F8WevGoLRMLN5RESPHL8WZe1Z5so_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pci_filerecovery.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://www.filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://gsf-cf.softonic.com/87f/d9e/.../file?SD_used=0&channel=WEB&fdh=no&id_file=23166&instance=softonic_en&type=PROGRAM&Expires=1481278938&Signature=JTBaI7w2oIYExWBb5bnDFgZNpvw8gCRLYEORy8f4W34Su5EZPh4WacvbvvxoBi7GxFDrdQevjvxoWZMIY6g6w6RFG8bgvvhHN~wNQdcIr5fi1wRFwRcInOTtxCuzyPoltNHAe5A2td-P8MIPp6ArY81xedk3WERWKS0ebmCpQxY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pci_filerecovery.exe

http://lb.cdn.m6web.fr/d/c/a/64bb2a9c6722db1971b175380099ed12/5801523f/soft/.../pc-inspector_pc_inspector_4.0_francais_11048.exe

Latest 30 of 276 download URLs

Scan pci_filerecovery.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.