home

vpsetup.exe

VideoPad

NCH Software

This is a self-extracting archive and installer. This is installed with VideoPad Video Editor. The file has been seen being downloaded from filehippo.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
VideoPad

Description:
VideoPad Video Editor

Version:
4.11+

MD5:
8197a98fbb518e5e9920397d8db9ee3f

SHA-1:
41b1b5b16d4ea7e4c9b205dd2f220844e3c5d78c

SHA-256:
be58fa4bfcfe877c187a3f85dab22ed007ec4142f25fe2072aea6d1b29b068cf

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 3:54:44 PM UTC  (today)

File size:
5.1 MB (5,305,088 bytes)

Product version:
4.11+

Copyright:
NCH Software

Original file name:
VideoPad.exe

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\vpsetup.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
7/6/2015 2:00:00 AM

Valid to:
8/7/2017 1:59:59 AM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
58D9B9D38780932DD1CBC58A2AD28B1C

File PE Metadata
Compilation timestamp:
8/17/2015 7:59:51 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:qyeFe/1PZjLqRvk1wuNqV5xL3VYIGa0zO59/wtee+rqyPSw:qvFe/VoRviwuMfVYIGa0zO5Otee++w

Entry address:
0x11D4

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, FC, 16, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, DF, 03, 00, 00, 6A, 06, 53, FF, 15, 8C, 20, 40, 00, FF, 15, 1C, 20, 40, 00, 68, 6C, 24, 40, 00, 8B, F0, E8, CB, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 24, 40, 00, 68, 80, 24, 40, 00, FF, 15, 28, 20, 40, 00, 68, 90, 24, 40, 00, 8B, C6, E8, AB, 03, 00, 00, 3B, C3, 74, 49, 83, C0, 0E, EB, 08, 66, 83, F9, 20, 75, 0A, 40, 40, 0F, B7, 08, 66, 3B, CB, 75, F0, 0F, B7, 08, 33, F6, 66, 3B, CB, 74, 20...
 
[+]

Entropy:
7.9996

Developed / compiled with:
Microsoft Visual C++

Code size:
2 KB (2,048 bytes)

The file vpsetup.exe has been discovered within the following program.

VideoPad Video Editor  by NCH Software
From the EULA: " During installation of this download you will be given the option to install closely related programs from the NCH Software suite. These are optional and you can select what you want depending on your requirements."
www.nchsoftware.com
20% remove it
 
Powered by Should I Remove It?

The file vpsetup.exe has been seen being distributed by the following 13 URLs.

http://filehippo.com/download/file/.../

http://www.nchsoftware.com/videopad/.../vppsetup.exe

http://xcdn.softobase.com/rozu2.html?parameter=VideoPadVideoEditor_Trial_Setup.exe&sect=1441722465&secl=nCngEhcP3-aUMwxrbZNl4g&clr=1

http://sb.sftpps.ru/VideoPadVideoEditor_Trial_Setup.exe

http://www.lo4d.com/get-file/videopad-full/.../

http://filehippo.com/download/file/.../

http://software.thaiware.com/download_url.php?id=6371

http://www.downloaddoo.com/Download.aspx?ProgramId=5439&Seq=1

http://www.nch.com.au/.../vpsetup.exe

http://goo.gl/EaQXPm

http://software-files-a.cnet.com/s/software/14/46/07/.../vppsetup.exe

http://www.lo4d.com/get-file/videopad-full/.../

http://www.nchsoftware.com/.../vppsetup.exe

Scan vpsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.