home

vpsetup.exe

NCH Software

This is a self-extracting archive and installer. This is installed with VideoPad Video Editor. The file has been seen being downloaded from www.softonic.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Description:
VideoPad, software para edición de vídeo

Version:
2.42ES

MD5:
6cc5bb54bb469519d2b5570fe0f76fe6

SHA-1:
33edc0a7d3b84c0c975cd0cf69cce81fabb8bf1b

SHA-256:
e8c51f289c2825bdafa6c0dfa5197d76cdbff8897d5800713202b80eebac1fc5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 11:28:57 AM UTC  (today)

File size:
3.8 MB (3,953,728 bytes)

Copyright:
NCH Software

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
7/25/2010 2:00:00 AM

Valid to:
8/4/2011 1:59:59 AM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
68C35978C8EC7147CF6D69A1E5F11396

File PE Metadata
Compilation timestamp:
3/15/2011 2:18:31 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:1Rd1MGLD/u3igK8K+0rL7ezFIFBSk6Lr/IxIK+mLxnGUgPMzpoWxgmMlxjTqY9q:1VLTLh8K+0rL7ezKFBSkIW8UH5NGTqA

Entry address:
0x2025

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, 6C, 0D, 00, 00, 53, 56, 57, 68, A0, 10, 40, 00, FF, 15, 18, 10, 40, 00, 68, B0, 10, 40, 00, 50, 89, 44, 24, 18, FF, 15, 48, 10, 40, 00, 33, DB, 3B, C3, 89, 44, 24, 0C, 75, 3D, 6A, 24, 68, C4, 10, 40, 00, 68, F0, 10, 40, 00, 53, FF, 15, 74, 10, 40, 00, 83, F8, 06, 75, 11, 6A, 01, 53, 53, 68, 30, 12, 40, 00, 53, 53, FF, 15, 6C, 10, 40, 00, FF, 74, 24, 10, FF, 15, 00, 10, 40, 00, 33, C0, 40, 5F, 5E, 5B, 8B, E5, 5D, C3, B8, 9C, 00, 00, 00, 8B, D0, 8D, 8C, 24, A8, 00, 00, 00, 88...
 
[+]

Developed / compiled with:
Microsoft Visual C++

The file vpsetup.exe has been discovered within the following programs.

VideoPad Video Editor  by NCH Software
From the EULA: " During installation of this download you will be given the option to install closely related programs from the NCH Software suite. These are optional and you can select what you want depending on your requirements."
www.nchsoftware.com
20% remove it
 
Powered by Should I Remove It?

The file vpsetup.exe has been seen being distributed by the following 6 URLs.

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=85311bbc0bc3d61d980b74d467d381fe&upv=13b460834999490b3cfbcf6d1d4ed87e&z=results&sk=0&abt=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA90C262F3276EAAD17FA4E625F3CB3FBB8D201B77CA0E530F42B05FEF9B2661C867DE2DC92E32231347DCEA1DD66F4CCC519C1724F05ADD1A02F6757BF8378253AC8F5EEFC0012401F3AE36240F2C92A468957E92756BBD517F1471FD10FBF9FBE6466BF6438968765CEB365A430FE525A50AFADEA0404CFBA1898AB132EACD8D71ED625CAC466E54649CE61B4626470409E2F7362DA49AB62E7CF3480547CC62&h=6A148DEA7060D323D2D7063C2A90CF8F5E92717346DD08975EE8086B869372E4&directdownload=1&f=78069&d=http://www.nchsoftware.com/videopad/.../vpsetup.exe

http://www.nchsoftware.com/videopad/.../vpsetup.exe

https://docs.google.com/uc?authuser=0&id=0B6Trg16AbZY6dUUtUm45OUFIcm8&export=download

http://unach.mdl2.com/mod/.../view.php?id=1715

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=27feec76cd83994cb782f1c2625465de&upv=5c3c454a47798bf957ac08faf69adcbc&z=results&sk=0&abt=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA90C262F3276EAAD17FA4E625F3CB3FBB713304CE597F3D03EF356BB0896001F79001F7004ECDE4C2B4EB4C6B2D14AAB2932071F47779855717558A20809884E84886C99B647E4AF540AE973AA74887A3D5F3F4D017293A4FC7DBE4C66B73BC8C3688280D0C81598C4197D6EB05C91C5969D2308E34E3A8B62F3BF33579185BD5CA13929BD91580146E4677D6DEDC5A5FD6B209EB9287D81EF0FE364D714D540A&h=84E7462CDE1799C70DA051E22B873341C67E06DA8EB085854E733A390BB8112C&directdownload=1&f=78069&d=http://www.nchsoftware.com/videopad/.../vpsetup.exe

http://www.softonic.com/sads/tracker.php?ev=c&co=ES&sid=cb2b512a41fcf47ed3760aecb87a94bf&upv=6551dc76682b06c8ecaaeb07e767f68b&z=results&sk=0&abt=&params=F24F8F4D368AFA5D32C8A90D9EFD1CBA90C262F3276EAAD17FA4E625F3CB3FBB8D201B77CA0E530F42B05FEF9B2661C846AC79D15E3527CF439B640AA5FCDFA69B92F39AB8BF8708F920AE8233DD38B9AE70949906A9B9FB739C117C9BF365BB50B54F60DA3060A33DE5F13B3A1E65A0373E85DC0FE3B5A7026AB0B29C4D0D4253C022783B66BBB126CDED283874CDF8E592AA3E4445B7C6729CCA90126DCBE6625AD9A7A52095EE01C0308578A59343&h=6C8BD67960B23E3CBDCE78BADC64927C9C7B2B253B57B4FC0479B928A6CF3CF1&directdownload=1&f=78069&d=http://www.nchsoftware.com/videopad/.../vpsetup.exe

Scan vpsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.