home

recovermyfiles-setup.exe

GetData Pty Ltd

This is a self-extracting archive and installer. This is installed with Recover My Files. The file has been seen being downloaded from files.downloadnow-2.com and multiple other hosts.
Publisher:
{code:GDConstant|CompanyName}   (signed by GetData Pty Ltd)

Description:
Recover deleted files and lost data

Version:
5.2.1.1964

MD5:
07caa8468827c8356b6c10bfdedac69b

SHA-1:
3d2426fef8126547118f0886d6581b517a4639ec

SHA-256:
825390dbe7892e3f532be33549d6e776bd1855dc5708d77ac6fad1fcd6ee2366

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/30/2024 8:27:45 AM UTC  (today)

File size:
31.1 MB (32,616,696 bytes)

Product version:
5.2.1.1964

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\recovermyfiles-setup.exe

Digital Signature
Signed by:
GetData Pty Ltd

Authority:
VeriSign, Inc.

Valid from:
4/8/2010 2:00:00 AM

Valid to:
5/23/2013 1:59:59 AM

Subject:
CN=GetData Pty Ltd, OU=Data Recovery Software Development, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=GetData Pty Ltd, L=Loftus, S=New South Wales, C=AU

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
51A134464FFDA01A0B6625E9350D4D

File PE Metadata
Compilation timestamp:
7/9/2012 3:41:29 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
786432:z3sCDZi+ZjcbzW1lU0IcvT/4zj+TlfiaMF0Bo9T73mdI:zF4+ZEzWZwOZaaMFoY73mO

Entry address:
0x16478

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, B8, 52, 41, 00, E8, AC, 03, FF, FF, 33, C0, 55, 68, 45, 6B, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 01, 6B, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, AB, 41, 00, E8, 56, EC, FF, FF, E8, FD, E7, FF, FF, 8D, 55, EC, 33, C0, E8, 7F, 84, FF, FF, 8B, 55, EC, B8, E8, D6, 41, 00, E8, E2, E9, FE, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, D6, 41, 00, B2, 01...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
84 KB (86,016 bytes)

The file recovermyfiles-setup.exe has been discovered within the following program.

Recover My Files  by GetData Pty Ltd
Publisher's description - “Recover My Files data recovery software will recover deleted files emptied from the Windows Recycle Bin, or lost due to the format or corruption of a hard drive, virus or Trojan infection, unexpected system shutdown or software failure.”
www.getdata.com
9% remove it
 
Powered by Should I Remove It?

The file recovermyfiles-setup.exe has been seen being distributed by the following 48 URLs.

http://files.downloadnow-2.com/s/software/12/87/10/.../RecoverMyFiles-Setup.exe

http://gsf-cf.softonic.com/3d2/426/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28267&instance=softonic_es&type=PROGRAM&Expires=1476628239&Signature=cx4nTBVyZEzmYk-r8~VkHUJ~ee68-qJZJxvMtrGo7m1f4SEyYD7B7cOnh9ijBUz~wFNEilrvqtqUi2QlUkdw4RWqkcH0RC5nGwIndDsKkXJxOam9-LC348BKndTe9m321-Ekg-Ees-Cfegg28ffiXN7Mi62q8AgkIBLgNQojHds_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RecoverMyFiles-Setup.exe

http://vsofte-link.ru/RecoverMyFiles-Setup.exe

http://gsf-cf.softonic.com/3d2/426/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28267&instance=softonic_es&type=PROGRAM&Expires=1481945906&Signature=M4jDQH7V0p64sfbosVg5KhH7BgLpsD6v4yjyF60tM0tCciGvQQFB5-OauYcPNL4O3jhIz68XpSRS1ipWX40rUz-I6lKtFqzyTMMuE2S4D3flFejgsS6bHZdSvjDFWhue2hyzGQao3kUzv42QzJ7dvJmZn5JtuPPZiBbBAo1iyew_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RecoverMyFiles-Setup.exe

http://dw.uptodown.com/dwn/7shEF7WOhFhsWpeHSjSNuyaCek53Mj_zn0s4OV3kjIMSL6-du6Z70phyDIw_VtdxJ8nQzRS9AIlnZ_3UQgr1cNEb1a9FegFQJdRBElgSyvxg_amVkIkiaLI80V9Bv8Y4/13E-HHOA59FcO_7vhyfODN_IdWfbeOCGluZPkzYyKc4B16wq2CCdL9hMB7O6Y0ibesjCTNRD8YfDph9bUmB7Pd3aC2n_iOyEGuAQB1MgeplxsrhpjkGNjRSuFNcDh3a2/kWMN9JtoD0C8i9ixzqDc231G2iTlaDrzkw7lNUOG98ZC7x2Ds3BbLYDDrBRZ98XN2mMpICgLkmRmK57widWb13GhTmDCPdLz_aCr7TJqdm8zx8IT7syWMPl887uDF5j_/.../

http://gsf-cf.softonic.com/3d2/426/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28267&instance=softonic_es&type=PROGRAM&Expires=1462847555&Signature=bUCy8mNhexQlmY1oJyj4hEFHj6KMGAQ9kH-jYlarynmGzai8Z6yB1kvf0ELHs~ssBKF4EyQhjt4kWdbJR8czy03e~TaIeXX7y7Za3JUzIXxoebkaMOxtV1I9SbgkyJQkguSMC7XXdKk0Z8QFMshsEdaXkgFmcon2MKVZyETq5tQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RecoverMyFiles-Setup.exe

http://gsf-cf.softonic.com/3d2/426/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28267&instance=softonic_es&type=PROGRAM&Expires=1477275932&Signature=aloyCZZPQ7yazM4-lUN2VN62JUk6HOwBKLgr1Lvax121uMWMattOzzPa3p0zpMqM0deA1pTzfuJB32bVx9gRDsevLSKFsn3Gv3tvLSj-FcxoLfLg7sYYEXmqLtv39sgUZLbQGg4Icd5X3j0FHOcJgLRiNuGDZne3wqVj9Wu7Czg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RecoverMyFiles-Setup.exe

http://download.findmysoft.com/2012/12/.../Recover-My-Files_5.2.1.1964.exe

http://www.commentcamarche.net/download/.../telecharger-34059361-recover-my-files

http://gsf-cf.softonic.com/3d2/426/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28267&instance=softonic_es&type=PROGRAM&Expires=1475483672&Signature=JjjOpoSoNkqNv7C5h0txUEowZ9tr2~Er4Ft0rijMw0BEJJB2h2yVdqWLZQERqfbTcHyxsKBvl5GniB3ziaIcxh00qzKWgVBmXK7NKsqFgfe3V3EsV7Yv0GF2iRUltgtXm724VH-0fdZpOsrQt2aBaooAZhFwf3Sd2FVKTqHN9IM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RecoverMyFiles-Setup.exe

http://gsf-cf.softonic.com/3d2/426/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28267&instance=softonic_es&type=PROGRAM&Expires=1480567126&Signature=Fkh5qb5OhZuC-S2V4EOaQxopUQ3DLK0Qy3mEsxhfKh9ZDdgdctq0cneWZHSTHrLfxJgYyNnxZ-TwbyMtJIJV7i4U1HoRfqR8ikO5Nji8EBhHRGLCGs2F5qYNkwPeTBtG3~jVeASdzzMFL9HfqLechdUFKGXtnWs~tSjWR-21SY0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RecoverMyFiles-Setup.exe

http://gsf-cf.softonic.com/3d2/426/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28267&instance=softonic_es&type=PROGRAM&Expires=1478518407&Signature=PNMlvvjOBhhIP-1~FwUQEmzrtbxfbt3-HPDl4-W4RzQpLyvLzu8Kerp3YKs5-EEN~ucD2nb-W5s~so47-e-thEilgou0lXwpDmtpCP48ypgTY9MIC9E8vzs3w0809ssbq8WbZorqKmI93JwrJSRKk9dwAn10UkjEm84HOQnYZGI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RecoverMyFiles-Setup.exe

http://www.jetelecharge.com/telp.php?id=599

http://gsf-cf.softonic.com/3d2/426/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28267&instance=softonic_es&type=PROGRAM&Expires=1477760821&Signature=I~TpgKQ~L8tQT5H-HvTWd7MoQHGWKta2kiE2vAWKd67eQBTYdZDMIel3HWuoCcehcaSI4hb7gDtVawYVJCpKGNB1Npb20vHt3I05MW190NxXy0Th8KCBGy9V9aqXlQI8axhVfacthn5Js4onZYKBgzdUBbozZDMCFSWvLqazwdQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RecoverMyFiles-Setup.exe

http://gsf-cf.softonic.com/3d2/426/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28267&instance=softonic_es&type=PROGRAM&Expires=1470981101&Signature=dJVLaT0KfvVkMAQAeOU8sNs~9A5MvEd1oHkvZ1ZkeKmRK3wngQGw2IsCriGF8EaDckDLbdMvQlHnpXSHu9Jxfl0f1wtEqt-1dJUI5luX4wMT1tZAUBSGvj~VAxV-P4m9MqD-9eBDJqa30ur9YpQx3yCoeuykgdNIT0LwAfSW9Gw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RecoverMyFiles-Setup.exe

https://app.box.com/index.php?rm=box_download_shared_file&shared_name=tnzf5sonzy9q13rzfcklrf6d176tci7u&file_id=f_31719151522

https://dw.uptodown.com/dwn/lHaX005URoEMmIvxPqFegTcdOz6oZQD6PM1U7P0ifXgQOWeGC4VDBmbnYA-e-CwnNHxR8TeBIx6s79auwd4u0IyhoWOQrcpWGkr6_34g0K6Ls6by7eofXrhkIX8XsaR3/vaX4cGhe5aycsPMRY0PBwC7r7DBZjAsw6oSiTFgzzwc6N8erowaPGrBYnTmTHmq28GUUuwqbj_VeawOC3tAmn106i9h1KxRVqQiF9BboiWsphPvp6Orwxjgywy3hC8ew/H2EyUYv3vzPLwY7tSZ18pENUuZfwFtpxSpWHBJ7-OamXHEc2csfgnSWlMV9zlfqVXRXtBO_iOFkQvyy7ScI2O8AUL6cfJpCeqVPWGG5yIVVp1OishEuvuKQ1hvWH5-pm/.../

http://gsf-cf.softonic.com/3d2/426/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28267&instance=softonic_es&type=PROGRAM&Expires=1448378451&Signature=P1MYdVLYk5jAWn4nmfI9flwcNdLTeQuB8YHKUkvJAngaDc9G5Aq0pHYjDwQG7RT6nX6-P5ki83SJ2qjp1khZ9wmYYxzCvv5pV4hYHOw~3H3DVBWJTQU-AQVd65-KFtfvDFHj6yijpxSJepLSOZs1xfD22LHWcdYGYtOnreOq9c8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RecoverMyFiles-Setup.exe

http://gsf-cf.softonic.com/3d2/426/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28267&instance=softonic_es&type=PROGRAM&Expires=1472428998&Signature=FzlOAYwxejXBTZ9Zmy3ut1N5Wemyc23RwGDgCeL7pouySx7mFJm78mC97sHsvGHy2mDMOZieDwEMDE2L17H5PyywAJW4L-aYgpUrpI-ELef2Jlj2kkaEHorcBfsooYirRVYRlkYDUwZLJf~5yBs11cbaFIa9Jep-csW1LLo8QzM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RecoverMyFiles-Setup.exe

http://www.bytesendclear.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

http://gsf-cf.softonic.com/3d2/426/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28267&instance=softonic_es&type=PROGRAM&Expires=1468893814&Signature=ft8LmQQ68ssfClvEZDKhYEDRbduk3c~2T3jNtRmvFEqDEIu~5yuOedpgyUtgSa~xooDEtW1YEATAGS8SbRmc32gQtzFKHu6i4T2P2nsEp1~Trj~Vr9vkaWCXrMmEMKLqQ5GEuRNm-vUQlkgWuzNgx9pcWmDjswV5PP98erwce-M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RecoverMyFiles-Setup.exe

http://gsf-cf.softonic.com/3d2/426/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28267&instance=softonic_es&type=PROGRAM&Expires=1461216618&Signature=FNHy6BI1cZaV9eW0fpuexNzOuNVnagl3qX8gp6Di4FG6WrsOFffuIrv1P8AnnWnTgz65FICqRFC4OpfgVVoQJoSQgO2of7XWYjl01COSQTSDFVC3vpBu82VLlgK-kzH5r~DT5T~5m~LaykP013daQ9W5CIBJcjBG51IJhabfC2Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RecoverMyFiles-Setup.exe

http://f25.softwaretop.net/tmp/cf/soft/2013/8/ba/.../recover-my-files_5211964.exe

http://gsf-cf.softonic.com/3d2/426/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28267&instance=softonic_es&type=PROGRAM&Expires=1442019546&Signature=c4EJjxZLObLElb3PiEFIUXjlqPqEt7A-hQpWd5pXzyYjQJ1ImFv8uLFBzH6hIZ~ekfiquF6NuUExHTPvnlSDdRpe4udVkbZ2E82vkj8W32~adsiN7q0wzDe2OdGMkkM7SUbOYBWNm2U~TRm42K3IhpawQlqV2qNVPouWpN41I80_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RecoverMyFiles-Setup.exe

http://www.tucows.com/download/windows/.../RecoverMyFiles-Setup.exe

http://gsf-cf.softonic.com/3d2/426/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28267&instance=softonic_es&type=PROGRAM&Expires=1449329114&Signature=ZAzBLS4Zu-9CiJY~ga86CdIj5bgNz2ohRrhYyuud4iUQBpQODHaeJGW0e~lNgMzdIUWxvPS773kBpkvfAD31RpvuyeJdnGrL4tFdVVWcy6o6Gk9xtpB9Gf0RVBttSVVsVhwvNejz5XZbo4hJvRstq1HDGz24oMXk6F1~adDXo-s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RecoverMyFiles-Setup.exe

http://gsf-cf.softonic.com/3d2/426/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28267&instance=softonic_es&type=PROGRAM&Expires=1446862952&Signature=FgBlxc0nnoWhDqda4nLbYL4bS8ZqURmMSwBzRFa2W1rIJ4SgRTc3Aya0eAmWqZTcnG8f~j7qis~koLb3IlJ6zhtBtyPj1zAeUvWvsLzbCNv9bYy8S2qhE1rRicIBI657jLrvQBLd2-9RYhQLPy680eRojoJRFoL9DAQAwW452Dk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RecoverMyFiles-Setup.exe

http://dw.uptodown.com/dwn/HsCt5Z3wAa32MmkE1xDWzR9tnYHg_mHAodPePZUAG1_kWY-8b8D-fGAeroZ4M9Ua3A0g_wyqdR52cy3uNaGnl3GcAsOqlTzPCuPDGbdY82l2ejg3j0lTh3j5_XliuWG6/tGTQjauOQOEH8678QTFJ5e0BYd0Gt7cPKEWzax4P6wjuINNDEvMgHRJVEQs6oo_HJuon_0Ej2JCwV3kH0T5JEA7-YmXUfpAb3kZ1JqrCKP04WrcHU3o85FP7sdJZ_i-k/vlMYlNUbsXk1nzJcw3wHyz-w9o5ZU2mFuX8cpXUY5dOFP476d4weRhwTGIT1NkBVZ-cTNKZ-Pa_ONm6LrhyzEidY4SmM5PcMl9DHJ_4mUXEs6MmbsaUHLDZEjUyS-_f0/.../

http://gsf-cf.softonic.com/3d2/426/.../file?SD_used=0&channel=WEB&fdh=no&id_file=28267&instance=softonic_es&type=PROGRAM&Expires=1446430154&Signature=WSl~J5MiIO8~Az~UkyIMFrUvx1YFxjzGwbWPMYBzTwn~xmFYxaX5FU8IqweVUvGnLuYZimgyjF69Wvf99LCieTV55jZBiq-Pi96N1gQCEOXV-3qOOnYusisrR7HYb4GY5fLFAPhYeMRGETItUD40iG6ohvyv793UcTCOwJAbCeQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=RecoverMyFiles-Setup.exe

http://dload2.getdata.com/RecoverMyFiles-Setup.exe

Latest 30 of 48 download URLs

Scan recovermyfiles-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.