home

FileScav.exe

File Scavenger

QueTek Consulting Corporation

This is installed with File Scavenger 4.1 (en). The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
QueTek Consulting Corporation  (signed and verified)

Product:
File Scavenger

Description:
File Scavenger (R) - Disk recovery tool

Version:
4.1.1.0

MD5:
b90e8d706459d9b87fd49f6dcb67a439

SHA-1:
5df134bb44cbba361c80589338dc38bec62df166

SHA-256:
639bdb90302b5f1c21df38c538ebedba60c9252e5ac411524e962cbfc9d5451c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 7:33:35 PM UTC  (today)

File size:
1.8 MB (1,854,152 bytes)

Product version:
4.1.1.0

Copyright:
Copyrights (c) 1998-2013 QueTek Consulting Corporation. All rights reserved.

Trademarks:
File Scavenger

Original file name:
FileScav.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\file scavenger 4.1\filescav.exe

Digital Signature
Signed by:
QueTek Consulting Corporation

Authority:
Thawte, Inc.

Valid from:
9/7/2012 3:00:00 AM

Valid to:
11/5/2013 2:59:59 AM

Subject:
CN=QueTek Consulting Corporation, OU=SALES, O=QueTek Consulting Corporation, L=Houston, S=Texas, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
0781411AA6A0C17F67B603FEDAF4B13E

File PE Metadata
Compilation timestamp:
1/14/2013 9:46:04 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:S5TPCf9lHMJH5s2ZcqHsAHFUCJo049gD5mHWkA+HS1/nkbF3zND:FMJaqpHFUCv49i50zXy1vkL

Entry address:
0xCBF39

Entry point:
E8, 61, AC, 00, 00, E9, 17, FE, FF, FF, 51, C7, 01, 24, 63, 51, 00, E8, E4, AC, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01, 74, 07, 56, E8, 96, F9, FC, FF, 59, 8B, C6, 5E, C2, 04, 00, 8B, 44, 24, 04, 83, C1, 09, 51, 83, C0, 09, 50, E8, 32, AD, 00, 00, F7, D8, 59, 1B, C0, 59, 40, C2, 04, 00, 6A, 0C, 68, 80, B3, 52, 00, E8, 64, 6D, 00, 00, 8B, 75, 08, 85, F6, 74, 75, 83, 3D, C4, DF, 53, 00, 03, 75, 43, 6A, 04, E8, 03, AF, 00, 00, 59, 83, 65, FC, 00, 56, E8, 71, AF, 00, 00, 59, 89, 45...
 
[+]

Entropy:
6.6445

Code size:
988 KB (1,011,712 bytes)

The file FileScav.exe has been discovered within the following program.

File Scavenger 4.1 (en)  by QueTek Consulting Corporation
Publisher's description - “File Scavenger Version 4 is a file 'undelete' and data recovery utility for Windows.”
www.quetek.com
8% remove it
 
Powered by Should I Remove It?

The file FileScav.exe has been seen being distributed by the following 30 URLs.

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1487378345&Signature=EvkL78DsK9aXs4ClqdU6pb00ZUcPZGooCs424y0dbe0R2rI8wwqRYS94g0EGRdkfcvsboZkdymxNEH25EocwY4RfbX9xgZDkNXABdaX8v3cL8FYEB0o0VdNYDYnJTSmwWJ85xxxfjOwtdbErX~aw-eYV1zh2hhftCIOetQYgkQQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1447379604&Signature=IWPy4IwjdhG1gy~zIMCp55GfMfwLfteAR7OeFqOmqLLlI3pnLXyJaFFuzbxwRZIkLW5PIMt-gAiUqnrjfPsFncbkrdIAEHG3VBoEsX-6bOKsk8tBkkL3Bwnu5M5vjmVA~A1fkpayqOa3tpc~PmdlSQBVfmuRea-5oWoEkfuN8ck_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1452845388&Signature=WPob~i8TZn0McscrB~lv1oBC2RPUxqFJEh-CF42FS8jX6N9z6454m~X8jXHFCNpbnAtu0tjpT2gvoWs1gRHAcLHLOxW3g-PGUNXNnW3zMtCx83rXcWtT7yKpYAIaCPr3SdNdExd~G6-E8w7UPy5io6tlkJ2w5ZNWr1iy67tcG5U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1443311578&Signature=CrvKjuh~pQCgjellsYfiXPh68gjrF~a5BCNpbFJgDGSnxz~9uzw72Kcqgcwd~rJP0Y6lflSQYRXaYFsIgtHld8KXeG-AFRQShxu1q9penkkfOfBpTeMNxVnx3FFRIgSanEC4oDJpb7jRmKhLIrzPBi5MK3tCvUmpYyd7q-A1O64_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1477465542&Signature=OsY6Wxm5SULPvr9nFFG0coh-CpSv-0if8NUlv1imox6DRSs8sPkmsP7Q2uyLzhMPrLZmzLZHkLAAoOC~d5PCbCyWPTYKaHZGehxwApA1NHl03D97Z4MfranDOCProkJ9k0lsqWFjDQK2Lcs7R58VdDxGP1bk01mt-0~PrhTT1dQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1475401048&Signature=EG6vvzpgM3oofcJmdTBX2BtaK7lPDJ62ihjB5V1m5J~H-7ToNWGnYaHwvv1DlVDOCJwADVfIZ8ImkjHlGXdrgsp6zXBni2qFUnp3pwpG5mnBE-0HWhHTBuRrk6RU8lKTakF9vHOyYHA0ZCC9WDhQThxc2Kxp9CPQN5dBj4LfVQI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1477138864&Signature=I6GgLdliFe5ZAW8JgXyvI~39Y13V-Sq53BY4SmfAfwZ~Ppz1hBKY9CnBs7l0--hiu~YFg2CQoCF7Fa4kO~LSra6C-1c7f~0idehDvhQZPOE9FEL-8E9PQYOsrRysfcujBdgppTwj9Cw~yGC6PBRqNcQhe~xZtz-87QmGSkJ76sQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1476341963&Signature=Tuk~CzLruCS9LA~9UJZJicWo5ng-efTRBRXnOXYXSbFExmFMFJ94U0kOdRNl7CwILm~xXzG-qlm0ZpTPMTPTIzzIMfjtq-FGo3jsRIdvs1deuYIiBvh0aDYP~ag~zIJ6dYPGneOqEA0cS-51s8oNLJiMTVHRaJLotE0dYFutVr0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1468131777&Signature=TppVWgYSZFU2MEGKIzLIvKeCs3wYnZmfq0ACSgh13QtfbBl5gvcuT3NqdWpJqvAX4t9H-ajhF3JnanD1yMO8UBSvHTv3QXBYkvuUAqTw~UW4Hhy6XOBV3IT0rycyVAKOqd~6DgCBn~Kvb79u9KBNBlMJoPo3-1nwzSCnzh9F0Pk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1476914113&Signature=HKXSkqVFrqR2o5vbpDbhE-lJJ~pBQBfjg1I2ASb2daZ7f2~b8VmeZrKNzs7h2cBNPAsXBKhpMTCNxT9M71qvVJgyl~P2OHxkvQPH2q6egXdZlSvSBv0pTzCyqyeob6EA0mS9YeCXLwIctPw4P-hpQ2D5WcAi2wTZbIObnEBJetw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1478634293&Signature=b3N0VaC6fOX1CzYiX~~392PIwwR9~V2OUzLPVqN-PwAD3kjC6HYuQcu1bKeGGsntgtfYdhnHGOQYhhJPcxPWnjrUsme7tN1pzSRSBzfUzcJz8sdVk9G1SGH3oeHmCd8cpwE9q8ggtACt2X9blRsdVeShlDhKi5j-WcVPT8yp~E8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1476134125&Signature=NNFmphZxzrMJUNnPtRBXezWv~NdIUme2eQrlraSdP7vgS1WFVj53UcxvpFwXnVbDkj9ez19~y6HEqHPX3rR5AVTrXca~tyaIbpx8sxrOkIYRaNjtBzayJjXY94Inpylp1VXSrj3MP~1EbVVj92vC6~UgVNJP45Ir6Z7tWUL56-A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1479955995&Signature=QBi2dnQQBTwa-tLd7xKtDm65MmPYCLXQmhkYWaMsMG4bP68tj6Fug3zJIOv5SevV8jpLR3mCKbzK0-heRO~4zlsf1cafpot~oMo~QN8-NLHsF8lNABkcUt-gQhzhyWrDmAVMBNJbIZxHNz55wlkK0M-SdnAsvlDT8~vLBK-hW~Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1474670716&Signature=MGO4QYTZD3HbpeuhlA-wMxLnJ3zbtuNPczvH34voMDIkaYnjjDQ0b2Gm5V3q9V2B0Nk7505-mf8uAlZ5WcP0ieIcr-xazc-Ya9DUuEFaYrnvHmmzzxfXQfyaGoUAOCXqTYGFFgOGYHD0ts9h0HDNA8s~igH5dbKa0gxQYoWIsD8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1424372490&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Xg1TcNuMW6bRZaD6~wDw2Y0sHIA0H2Ytrf4PbnuCfrNZXyrBZhMM13vstxR6BrbYfhd7cndWxeCDwqvMxFGfu2h3VGvE0pJJm8mDoW8XWWPFW2lgc2SQFaRfL8BZSR0zc6PYCLAOEWLj3qb9L~ywFg-KhITLRo2WmWhmzWcgD2o_&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1467223262&Signature=Y0XOOU5C15X6hLLshllGYrNc4M0Z~9ZcbyjucpZE0rms~9olj5UA3fZGsaNyLH8StrIG5pox0ADt1xErwNHJRYaysp3v0AG4Or8~yf5cHmz308koTwLsYw2gaGTfC79Ny89zz9Dbx659XjT6jx7Xa7WwxdykA7jQfIss~uLg8~c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1477438536&Signature=aXFC4q7rtfmMUVcFfNsk6a2yuTCv59HAM7YLZ4x8MIzPbCxBzZi8K3JA-8IvH0Sgl~htaE8giAe~oOkgU3vALhSEiuY2KuJTlhUrj4NdbxDPp1s6PTiz1Hsv7~B777kNPp7WXWSAV3p2KivfdXtF9fzjm0-by4UtAPWhSlE-6OM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1439688804&Signature=cHSuCtWKxMwhal69R~XDrTtzUZDVa3f5ootXomiJZWbyLHT-sCAbyT3efuZFGukb~Sq6Z1n24i1oXutPLZbgULr46ex50w7nai47IXfI8efKpJ0cJoSL7ELqEf6WwN14~Qzl1GwkJJK0xx-e6aul65QxM3yajqIwur2~gvgHPGE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1473226891&Signature=fzr42UxyQv66OQwyt0bofQJk2RUp~xnVA2frAh6VWyCkE6vabYubRFA0nye-e-3CDoKUFmo8xoT1Wybod~DlmGa~5iWt734Dl5BaTnpSs1bYkvqHCvmiXxYMAmBm3OBlbNVLLNUPOnXeq56rf571crevvVCYU89ncMLeo5YEcRA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1435832474&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Z9KI3l5hLtuXLG~KjXTRlXSv~ay45yJSe9ahZvf0q3cVEJDX6~iJE76zvs7RG~eT8e1mMyfXmbOWNwP8glW~U731PZuvDwqVqD5Mp25Af~pFSX5EjPlMAf0hWWBHOD2hqgK4zxg-i7HJzZOCVsXGph56bLczNgigjL6llMnSo8Q_&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1456617523&Signature=MnZBGBntZ4U9a-9N7QExOq9IGGT59Qjo09qkDtJRfv04ABet3q9N329oy1bQNDFxBcMvBlsymdN5n4KdPlgHchMjey~JpFludLB~ubpRZi9qDB~29bukmN71Ltot1xfjmAV873PIH179-ck~EBet44i6xFtlMXw1yXSZ8jOtGco_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1440756348&Signature=PQ95-IvUXLAd0khwJMd--5ui7uqBLQUlTEpYRucqNcOoucN9d-JwFowAskj-luuQBgjwtrIYN7wdVzI3McCd1YBYjWQIZtKKVlgy6aISlM51HSNuaQgUPv2bpejXQMdeQYu7KQyyAs2nJdxsuxJSGxWA0kmo9wI17bztszHO38A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1440093689&Signature=DqiW6icaD5cZVhZNNo0zxyu6p24l-PtOvVK~Zd03U97DMZ3Iw8f1ymDfXMV03VtliFpeMyjuBi~PnR82MTb-zgudu0t7KjR-tL9Ao8yn12WMBnL5W21sQLb7CGVrc2jrWPp5-dEFyk6h5IczH8CAGzF863pyYCH7tgTU5eWR2fM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1445602360&Signature=MGZpd2RErLvxNgJ3UY~dyekgtuLPB~Gd~~eeA4sGf6rYKtAEAMQ9IAk9mjk1sAXgFZTkmvSrFHZEr7jqCoU855FDP8MGZrrqOqM8uH9LojesnnXMe1HfszPkny5My9QDwaRAFXVR642HvglpFd7KY9pTlXLRVLs-5t0n~j9b3s8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1460629659&Signature=HWpdv1JqvNi1iGbcaAxLkMh~ypmhoyyka1BiHUwNj~JHFg9aq5IOLJIwaoY~TCmIll2ZoTvV-Oid6ptkrLJnsscDd47qBQ-siGOd7puoNZa7YeWtGWzc4mKyZcHs2TrZ979RAEe4o-JpSgxaPpZYpgiaMFjW1ytQsTQuGOqAVfI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1460448820&Signature=hNi2UE-v6rAKT21BgDG9dqnF8C3ityE7aIvLjP8xyDbvZ1BknJXK8pJrRiSmpCfTiz1kp4mxdUSCQKWE8cHQdd30X24OI64~O0FqPHxpUeSbxXTLAvm3GkEHCJeMtfuDrZRFaSHxUxlojMuZGTBWNm0D70jK~rPnn~SBQiNXizg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1441089470&Signature=RvkTSbMZn8cLN9~TO6HDnCwYiNf24ObIC6DiJ8LRar7Sf0FTBvUDtkO4dFE-UeGrC~-XEFICoy9lDtecxdEMs9q0bPHYFgaene6-gubpcOLvCbtoBko1~zScPlyz7RkmZzxJJNCiF98Wx7F7PxyMnSI66W4IIOHKX8e7s9hS7cM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1453640260&Signature=FxIxAH~CBXTC1wMcjQkvDl1C0RWPpEiGOtNvdvbKkJA8-995kPQj1m2EW9gZ5oE2YfYX4Ofln2rjfvQNBCt9sJF-L8xbqCNgRN0SrCYx6T~2RnSH4XEWRsN3w0KzG0RebPYDTMqfaT87l-tahFrNdOWSZvHnMA-n5b3rClO4UF0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=32fsu41.exe

http://gsf-cf.softonic.com/5df/134/.../file?SD_used=0&channel=WEB&fdh=no&id_file=21445&instance=softonic_en&type=PROGRAM&Expires=1434146175&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=H9Y8xpUBESiiCvjAuSmsQrea5t4xU-ZZo7sQX6KLBV5GC66pXbqsqfa~l9V8zLvpbg9HoqPfIFH9CnC4nCziST3MGPvkV983trIEAqK2w4O~vBXa9lxDMqwE07GWlc5sr5NtTFvk0PRl2yN5Ov2pNX8jjFZJ0FBpqmAkaHPpZDU_&filename=32fsu41.exe

http://www.quetek.com/.../32fsu41.exe

Latest 30 of 30 download URLs

Scan FileScav.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.