home

classicftpsetup_v2.38.exe

ClassicFTP

NCH Software

This is a setup program which is used to install the application. This file is installed with the program Classic FTP. The file has been seen being downloaded from www.oldversiondownload.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
ClassicFTP

Description:
Classic FTP

Version:
2.38+

MD5:
54bc61a18d54788fc47804a5c4dc9674

SHA-1:
3063ea4dbdee56a84ecbf892c060ea300d76abaa

SHA-256:
3b56fde81e763ef56aefb3fc308f8ff721680e3ecb4fce6b9a0264b7679edc5d

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/24/2024 6:04:23 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Bundled.Toolbar.Google (variant)
8.9631

File size:
341.5 KB (349,728 bytes)

Copyright:
NCH Software

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\Program Files\nch software\classicftp\classicftpsetup_v2.38.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
5/19/2013 8:00:00 PM

Valid to:
8/7/2015 7:59:59 PM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6A560820FA3E9AD8E5411734B1D40AD5

File PE Metadata
Compilation timestamp:
12/10/2013 12:05:55 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:9dkvQ9uLjZ44of0ItL1D4zWWjYRANrXLw9iOXjkUrjCHj4/jexCsvxigAuaDGjnM:9dmCu3ZTocIXZAZXyDXjPjij4vsXK8M

Entry address:
0x21D8

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, FC, 16, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, DF, 03, 00, 00, 6A, 06, 53, FF, 15, 88, 10, 40, 00, FF, 15, 4C, 10, 40, 00, 68, 6C, 14, 40, 00, 8B, F0, E8, CB, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 14, 40, 00, 68, 80, 14, 40, 00, FF, 15, 00, 10, 40, 00, 68, 90, 14, 40, 00, 8B, C6, E8, AB, 03, 00, 00, 3B, C3, 74, 49, 83, C0, 0E, EB, 08, 66, 83, F9, 20, 75, 0A, 40, 40, 0F, B7, 08, 66, 3B, CB, 75, F0, 0F, B7, 08, 33, F6, 66, 3B, CB, 74, 20...
 
[+]

Entropy:
7.9775

Developed / compiled with:
Microsoft Visual C++

The file classicftpsetup_v2.38.exe has been discovered within the following programs.

Classic FTP  by NCH Software
The software may bundle additional potentially unwanted toolbars. - "During installation of this download you will be given the option to install closely related programs from the NCH Software suite.
www.nch.com.au/index.html
19% remove it
 
Powered by Should I Remove It?

The file classicftpsetup_v2.38.exe has been seen being distributed by the following 4 URLs.

http://www.oldversiondownload.com/.../classicftp-2-38-2014-02-08.exe

http://ppdjs.brothersoft.com/ppd_stat.php?url=/d.php?soft_id=59416&url=http://www.nch.com.au/components/cftpsetup.exe&c=5e50wAkuavCZhEUoJ0cbdNyxsEcceixBtEHGKtXl/aOXFkKP6NIL5d6xaDTGNsUtM22EDcw 5bmv5tCuKEko5 n 6d Ggd Fl8FqKiuHVcIVMMjyee0IywSBuSkwVJlXrD0mpVadDaehhGeXOFvYtJw1 C69zKsXwTqDyw/.../yiEYFe1rmZDXrapf993oUBN1LC68syIk0NM

http://www.nch.com.au/.../cftpsetup.exe

http://www.nchsoftware.com/.../cftpsetup.exe

Scan classicftpsetup_v2.38.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.