home

vpsetup.exe

VideoPad

NCH Software

This is a setup and installation application. This is installed with multiple programs including VideoPad Video-Editor and VideoPad Video Editor. The file has been seen being downloaded from docs.google.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
VideoPad

Description:
VideoPad Video Editor

Version:
3.89+

MD5:
0147ee953cfcba19824d630fdf690ad7

SHA-1:
06b16538c125c60943e3f37b9034416aa061bed3

SHA-256:
a05075fc33f0b09db210310288a026c234cb7e7b782fbf97909b44c719f49b71

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 12:29:43 PM UTC  (today)

File size:
4.7 MB (4,888,120 bytes)

Product version:
3.89+

Copyright:
NCH Software

Original file name:
VideoPad.exe

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\vpsetup.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
5/20/2013 2:00:00 AM

Valid to:
8/8/2015 1:59:59 AM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6A560820FA3E9AD8E5411734B1D40AD5

File PE Metadata
Compilation timestamp:
12/18/2014 2:47:27 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:aXZyeiSVTSk/624A7iEHOEo5MTVqgWsxTHoAAOzb9WMOPXMkKLdMHK:apyeiSVP624A7TQMTVqgWWSO9KPMrJMq

Entry address:
0x11D4

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, F4, 14, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, 3D, 03, 00, 00, 6A, 06, 53, FF, 15, 8C, 20, 40, 00, FF, 15, 2C, 20, 40, 00, 8B, C8, E8, 2E, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 24, 40, 00, 68, 80, 24, 40, 00, FF, 15, 08, 20, 40, 00, 8D, 44, 24, 68, 50, FF, 15, 50, 20, 40, 00, F6, 84, 24, 94, 00, 00, 00, 01, 75, 0A, 66, C7, 84, 24, 98, 00, 00, 00, 01, 00, 8D, 84, 24, E0, 0C, 00, 00, 50, 68, 04, 01, 00, 00, FF, 15, 28, 20, 40, 00, 6A, 63...
 
[+]

Entropy:
7.9996

Developed / compiled with:
Microsoft Visual C++

Code size:
1.5 KB (1,536 bytes)

The file vpsetup.exe has been discovered within the following programs.

VideoPad Video Editor  by NCH Software
From the EULA: " During installation of this download you will be given the option to install closely related programs from the NCH Software suite. These are optional and you can select what you want depending on your requirements."
www.nchsoftware.com
20% remove it
VideoPad Video-Editor  by NCH Software
www.nchsoftware.com/videopad/de/support.html
About 1% of users remove it
 
Powered by Should I Remove It?

The file vpsetup.exe has been seen being distributed by the following 9 URLs.

https://docs.google.com/uc?authuser=0&id=0B6g08dHUl8f7V0FBUzhIRjdvdWs&export=download

https://secure.giga-downloads.de/dl/.../

about:internet

http://software.thaiware.com/download_url.php?id=6371

http://www.nch.com.au/.../vpsetup.exe

http://soft.mydiv.net/win/dlfile4a189_265865/.../vppsetup.exe

http://nchsoftware.com/.../vppsetup.exe

http://software-files-a.cnet.com/s/software/13/84/88/.../vppsetup.exe

http://www.nchsoftware.com/.../vppsetup.exe

Scan vpsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.