home

vppsetup.exe

VideoPad

NCH Software

This is a self-extracting archive and installer. This is installed with VideoPad Video Editor. The file has been seen being downloaded from doc-0s-40-docs.googleusercontent.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
VideoPad

Description:
VideoPad Video Editor

Version:
3.85+

MD5:
c7006c4294f93ecbf21b1678fbce404f

SHA-1:
d16765e68c8e3ea8d7661248bda1870c2c1f0b2e

SHA-256:
9141575e618276a6f3d56dd8fefc63fe14859a7f60de5d051fc4be39aeea9537

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 4:40:58 AM UTC  (today)

File size:
4.6 MB (4,867,128 bytes)

Product version:
3.85+

Copyright:
NCH Software

Original file name:
VideoPad.exe

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\downloads\vppsetup.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
5/20/2013 2:00:00 AM

Valid to:
8/8/2015 1:59:59 AM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6A560820FA3E9AD8E5411734B1D40AD5

File PE Metadata
Compilation timestamp:
12/18/2014 2:47:27 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:OXZyeiSVTSk/624A7iEHOEo5MTVqgWpe3dQBA3eSYNi47Bi:OpyeiSVP624A7TQMTVqgWpe3dl3efNi/

Entry address:
0x11D4

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, F4, 14, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, 3D, 03, 00, 00, 6A, 06, 53, FF, 15, 8C, 20, 40, 00, FF, 15, 2C, 20, 40, 00, 8B, C8, E8, 2E, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 24, 40, 00, 68, 80, 24, 40, 00, FF, 15, 08, 20, 40, 00, 8D, 44, 24, 68, 50, FF, 15, 50, 20, 40, 00, F6, 84, 24, 94, 00, 00, 00, 01, 75, 0A, 66, C7, 84, 24, 98, 00, 00, 00, 01, 00, 8D, 84, 24, E0, 0C, 00, 00, 50, 68, 04, 01, 00, 00, FF, 15, 28, 20, 40, 00, 6A, 63...
 
[+]

Entropy:
7.9995

Developed / compiled with:
Microsoft Visual C++

Code size:
1.5 KB (1,536 bytes)

The file vppsetup.exe has been discovered within the following program.

VideoPad Video Editor  by NCH Software
From the EULA: " During installation of this download you will be given the option to install closely related programs from the NCH Software suite. These are optional and you can select what you want depending on your requirements."
www.nchsoftware.com
20% remove it
 
Powered by Should I Remove It?

The file vppsetup.exe has been seen being distributed by the following 5 URLs.

https://doc-0s-40-docs.googleusercontent.com/docs/securesc/9i41jkq08200mng8uk0ec06jfacspjt2/l80kou8kbmvbu3e5fpku5ld29kjsttrr/1453896000000/.../04148053795318277386/0BwnPVbn7mLu4ajlqTkNDWHh0b00?e=download

http://dw.html.it/index.php?softname=vppsetup_3.83.exe&code=1430152868&q=ODAxMjB8dmlkZW9wYWQtdmlkZW8tZWRpdG9yLWZyZWUtMTk=

http://www.nch.com.au/.../vpsetup.exe

http://cts.vresp.com/c/?NCHSoftware/6ba6c3043b/.../5c82277ce1

http://www.nchsoftware.com/.../vppsetup.exe

Scan vppsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.