vpsetup.exe

VideoPad

NCH Software

This is a self-extracting archive and installer. This is installed with VideoPad Video Editor. The file has been seen being downloaded from download1251.mediafire.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
VideoPad

Description:
VideoPad Video Editor

Version:
3.24+

MD5:
c1349fc05934e43205e6a9554a981636

SHA-1:
12bcc2cc38e53e75185326433192268f9c6117eb

SHA-256:
cfcb1188cbfad54171e4e0f11a250ec5ea3508d9b902694d49c4831c3852fbeb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 7:33:59 PM UTC  (today)

File size:
5.4 MB (5,700,664 bytes)

Copyright:
NCH Software

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\appdata\local\temp\vpsetup.exe

Digital Signature
Signed by:

Authority:
Thawte, Inc.

Valid from:
5/20/2013 3:00:00 AM

Valid to:
8/8/2015 2:59:59 AM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6A560820FA3E9AD8E5411734B1D40AD5

File PE Metadata
Compilation timestamp:
12/10/2013 8:05:55 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:MKFBvzodLvTwbweNJzBV/ny20jjs42IN4SqMFUHVwf+LxbvMOQBLgQ+n5:pjzKvBEBV/ya42IN4OyHV5NbvZQ2Q+5

Entry address:
0x21D8

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, FC, 16, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, DF, 03, 00, 00, 6A, 06, 53, FF, 15, 88, 10, 40, 00, FF, 15, 4C, 10, 40, 00, 68, 6C, 14, 40, 00, 8B, F0, E8, CB, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 14, 40, 00, 68, 80, 14, 40, 00, FF, 15, 00, 10, 40, 00, 68, 90, 14, 40, 00, 8B, C6, E8, AB, 03, 00, 00, 3B, C3, 74, 49, 83, C0, 0E, EB, 08, 66, 83, F9, 20, 75, 0A, 40, 40, 0F, B7, 08, 66, 3B, CB, 75, F0, 0F, B7, 08, 33, F6, 66, 3B, CB, 74, 20...
 
[+]

Entropy:
7.9997

Developed / compiled with:
Microsoft Visual C++

The file vpsetup.exe has been discovered within the following programs.

VideoPad Video Editor  by NCH Software
From the EULA: " During installation of this download you will be given the option to install closely related programs from the NCH Software suite. These are optional and you can select what you want depending on your requirements."
www.nchsoftware.com
20% remove it
 
Powered by Should I Remove It?

The file vpsetup.exe has been seen being distributed by the following 21 URLs.

http://download1251.mediafire.com/nliux4ta23tg/.../vpsetup.exe

http://download1157.mediafire.com/aj6hp0d3odhg/.../vpsetup.exe

http://download1115.mediafire.com/92g1uq92zlcg/.../vpsetup.exe

http://download2202.mediafire.com/vcpihlyj96jg/.../vpsetup.exe

http://www.nchsoftware.com/.../vpsetup.exe

http://download804.mediafire.com/7x5xfez3uu4g/.../vpsetup.exe

http://download1157.mediafire.com/z756u92omrmg/.../vpsetup.exe

Scan vpsetup.exe - Powered by Reason Core Security