vpsetup.exe

VideoPad

NCH Software

This is a setup and installation application. This is installed with VideoPad Video Editor. The file has been seen being downloaded from dw.html.it and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
VideoPad

Description:
VideoPad Video Editor

Version:
4.14

MD5:
f16ea5869dcaa3e87af275582a76a73d

SHA-1:
2e9c249062a14b3db90e31b101784c599d2776f4

SHA-256:
8c660f5a5e0ceea280ca51d86cd15d3e69aee060152378fa6e9f0746c9d491f4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 5:10:23 PM UTC  (today)

File size:
5.1 MB (5,332,224 bytes)

Product version:
4.14

Copyright:
NCH Software

Original file name:
VideoPad.exe

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\downloads\vpsetup.exe

Digital Signature
Signed by:

Authority:
Thawte, Inc.

Valid from:
7/6/2015 2:00:00 AM

Valid to:
8/7/2017 1:59:59 AM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
58D9B9D38780932DD1CBC58A2AD28B1C

File PE Metadata
Compilation timestamp:
8/27/2015 3:43:42 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:50MzwROEcPVpAtC2X9hti03yEnWVQnbqyksvRYUWohFRWGOTrr6OjMnVls:agwROZPVD2X9ht9iVQnbqFQ7FurOAmVS

Entry address:
0x11D4

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, FC, 16, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, DF, 03, 00, 00, 6A, 06, 53, FF, 15, 8C, 20, 40, 00, FF, 15, 1C, 20, 40, 00, 68, 6C, 24, 40, 00, 8B, F0, E8, CB, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 24, 40, 00, 68, 80, 24, 40, 00, FF, 15, 28, 20, 40, 00, 68, 90, 24, 40, 00, 8B, C6, E8, AB, 03, 00, 00, 3B, C3, 74, 49, 83, C0, 0E, EB, 08, 66, 83, F9, 20, 75, 0A, 40, 40, 0F, B7, 08, 66, 3B, CB, 75, F0, 0F, B7, 08, 33, F6, 66, 3B, CB, 74, 20...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
2 KB (2,048 bytes)

The file vpsetup.exe has been discovered within the following program.

VideoPad Video Editor  by NCH Software
From the EULA: " During installation of this download you will be given the option to install closely related programs from the NCH Software suite. These are optional and you can select what you want depending on your requirements."
www.nchsoftware.com
20% remove it
 
Powered by Should I Remove It?

The file vpsetup.exe has been seen being distributed by the following 15 URLs.

http://dw.html.it/index.php?softname=vpsetup_4.14.exe&code=1485105605&q=OTMwMzh8dmlkZW9wYWQtdmlkZW8tZWRpdG9yLWZyZWUtMjY=

http://dw.html.it/index.php?softname=vpsetup_4.14.exe&code=1475171099&q=OTMwMzh8dmlkZW9wYWQtdmlkZW8tZWRpdG9yLWZyZWUtMjY=

http://dw.html.it/index.php?softname=vpsetup_4.14.exe&code=1477055539&q=OTMwMzh8dmlkZW9wYWQtdmlkZW8tZWRpdG9yLWZyZWUtMjY=

http://videopad-free-video-editor.soft32.com/get/file/id/.../?no_download_manager=true

http://videopad-video-editor.sv.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fmKSNoJ6omZk=

temp:vpsetup.exe

Scan vpsetup.exe - Powered by Reason Core Security