home

pci_nl_smartrecovery.exe

InstallShield

InstallShield Software Corporation

The program is a setup application that uses the InstallShield Setup installer. The file has been seen being downloaded from download.pcinspector.de.
Publisher:
InstallShield Software Corporation

Product:
InstallShield (R)

Description:
InstallShield (R) Setup Launcher

Version:
7, 01, 100, 1248

MD5:
986d173e520237bde9ebcf1b5225c84d

SHA-1:
aee3858511f32751cfebff46f141a21e7f44638d

SHA-256:
d93c71043ebdad7249040e6d8da4952153bd133af0471e2b0861e8913f84e14f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/15/2025 4:07:39 PM UTC  (today)

File size:
6.1 MB (6,415,092 bytes)

Product version:
7, 01

Copyright:
Copyright (C) 1990-2002 InstallShield Software Corporation

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Installer:
InstallShield Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\pci_nl_smartrecovery.exe

File PE Metadata
Compilation timestamp:
12/2/2002 7:31:43 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:fKh4A/bL+ftkdQIVQzbMEDypHqIBjEVxNCCETUMatsbQIO:fK+A/d/QPMEDyvKHVETUMatjIO

Entry address:
0xB1CC

Entry point:
55, 8B, EC, 83, EC, 44, 56, FF, 15, 44, 01, 41, 00, 8B, F0, 85, F6, 75, 08, 6A, FF, FF, 15, 40, 01, 41, 00, 8A, 06, 57, 8B, 3D, 08, 02, 41, 00, 3C, 22, 75, 1B, 56, FF, D7, 8B, F0, 8A, 06, 3C, 22, 74, 04, 84, C0, 75, F1, 80, 3E, 22, 75, 15, 56, FF, D7, 8B, F0, EB, 0E, 3C, 20, 7E, 0A, 56, FF, D7, 8B, F0, 80, 3E, 20, 7F, F6, 8A, 06, 84, C0, 74, 04, 3C, 20, 7E, E1, 83, 65, E8, 00, 8D, 45, BC, 50, FF, 15, 3C, 01, 41, 00, F6, 45, E8, 01, 5F, 74, 06, 0F, B7, 45, EC, EB, 03, 6A, 0A, 58, 50, 56, 6A, 00, 6A, 00, FF...
 
[+]

Packer / compiler:
InstallShield Custom

Code size:
57.5 KB (58,880 bytes)

The file pci_nl_smartrecovery.exe has been discovered within the following program.

PC Inspector smart recovery  by Convar
Publisher's description - “PC Inspector Smart Recovery is a data-recovery program for Flash Card, Smart Media, Sony Memory Stick, IBM Micro Drive, Multimedia Card, and Secure Digital Card. The software will bring back deleted pictures from any digital camera media.”
8% remove it
 
Powered by Should I Remove It?

The file pci_nl_smartrecovery.exe has been seen being distributed by the following URL.

http://download.pcinspector.de/pci_nl_smartrecovery.exe

Scan pci_nl_smartrecovery.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.