home

FTM.exe

Family Tree Maker 2014

Ancestry.com

This is installed with Family Tree Maker 2014. The file has been seen being downloaded from capsa.storage.googleapis.com.
Publisher:
Ancestry.com

Product:
Family Tree Maker 2014

Version:
22.0.0.1243

MD5:
f510d05a44f61b7f075316d19db26332

SHA-1:
a1c9f41d9fe3745d2e05f5fd6a2fa5a994ce64ee

SHA-256:
2e3e7a2a1569098505fdb97a5ae6648781de32fce98ded87c3eef1503a53a9ae

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 4:55:14 AM UTC  (today)

File size:
854 KB (874,496 bytes)

Product version:
22.0.0.1243

Copyright:
Copyright (c) 2013 Ancestry.com

Original file name:
FTM.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\family tree maker 2014\ftm.exe

File PE Metadata
Compilation timestamp:
10/29/2013 11:21:37 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:v4c9D+PdMQKJbvjPmY9pv9eCgQ7X9oQ2+esvmS4G3N:VD+PdMQKJb7lTODamTK

Entry address:
0x71FFE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.6189

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
448.5 KB (459,264 bytes)

The file FTM.exe has been discovered within the following program.

Family Tree Maker 2014  by Ancestry.com
Publisher's description - “Family Tree Maker is the ideal tool to help you discover and preserve your family’s heritage. It’s quick and easy to use for those just starting to research their family history, but it’s also robust enough for the most serious genealogist.”
www.ancestry.com/cs/apps/P-5194
About 6% of users remove it
 
Powered by Should I Remove It?

The file FTM.exe has been seen being distributed by the following URL.

http://capsa.storage.googleapis.com/f510d05a44f61b7f075316d19db26332.36eeced293c20ab75bffd0c429d26697?GoogleAccessId=GOOG57ULWBZRNEX5RYCG&Expires=1394035316&Signature=YPX/.../fY=&response-content-disposition=attachment; filename="FTM.exe"

Scan FTM.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.